2026-05-15 归档

今日共收录 1277 条安全情报,包含 487 个 CVE,424 篇安全通告,以及 55 篇研究论文。

← 返回归档列表
安全公告2026-05-14 发布INFO

Insufficient validation of untrusted input in GPU in Google Chrome prior to 148.0.7778.168...

CVE-2026-8538

Insufficient validation of untrusted input in GPU in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-14 发布INFO

Integer overflow in XML in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to...

CVE-2026-8532

Integer overflow in XML in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code ins

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-14 发布INFO

Insufficient policy enforcement in Passwords in Google Chrome on Windows prior to 148.0.7778.168...

CVE-2026-8547

Insufficient policy enforcement in Passwords in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attack

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-14 发布INFO

Insufficient policy enforcement in ViewTransitions in Google Chrome prior to 148.0.7778.168...

CVE-2026-8537

Insufficient policy enforcement in ViewTransitions in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-14 发布INFO

Use after free in Core in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote...

CVE-2026-8542

Use after free in Core in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker who had compromised

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-14 发布INFO

Insufficient validation of untrusted input in Downloads in Google Chrome prior to 148.0.7778.168...

CVE-2026-8527

Insufficient validation of untrusted input in Downloads in Google Chrome prior to 148.0.7778.168 allowed a remote attack

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-14 发布INFO

Use after free in Media in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to...

CVE-2026-8544

Use after free in Media in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code ins

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-14 发布INFO

Out of bounds read in FileSystem in Google Chrome on Mac prior to 148.0.7778.168 allowed a remote...

CVE-2026-8543

Out of bounds read in FileSystem in Google Chrome on Mac prior to 148.0.7778.168 allowed a remote attacker who convinced

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-14 发布INFO

Out of bounds read in Media in Google Chrome on Linux and ChromeOS prior to 148.0.7778.168...

CVE-2026-8535

Out of bounds read in Media in Google Chrome on Linux and ChromeOS prior to 148.0.7778.168 allowed a remote attacker who

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-14 发布INFO

Heap buffer overflow in WebML in Google Chrome on Windows prior to 148.0.7778.168 allowed a...

CVE-2026-8531

Heap buffer overflow in WebML in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker to potential

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-14 发布INFO

Heap buffer overflow in Codecs in Google Chrome prior to 148.0.7778.168 allowed a remote attacker...

CVE-2026-8529

Heap buffer overflow in Codecs in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary c

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-14 发布INFO

Insufficient validation of untrusted input in ReadingMode in Google Chrome on Mac prior to 148.0...

CVE-2026-8536

Insufficient validation of untrusted input in ReadingMode in Google Chrome on Mac prior to 148.0.7778.168 allowed a remo

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-14 发布INFO

Type Confusion in V8 in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to...

CVE-2026-8540

Type Confusion in V8 in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-14 发布INFO

Use after free in Google Lens in Google Chrome prior to 148.0.7778.168 allowed a remote attacker...

CVE-2026-8550

Use after free in Google Lens in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-14 发布INFO

Use after free in Accessibility in Google Chrome prior to 148.0.7778.168 allowed a remote...

CVE-2026-8533

Use after free in Accessibility in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised t

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-14 发布INFO

Use after free in Media in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to...

CVE-2026-8549

Use after free in Media in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code ins

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-14 发布INFO

Object corruption in Compositing in Google Chrome prior to 148.0.7778.168 allowed a remote...

CVE-2026-8545

Object corruption in Compositing in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-14 发布INFO

Out of bounds write in Media in Google Chrome prior to 148.0.7778.168 allowed a remote attacker...

CVE-2026-8548

Out of bounds write in Media in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-14 发布INFO

Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in @ranfdev/deepobj

CVE-2026-46509

### Impact Prototype pollution is possible when property paths contain `__proto__`/`constructor`/`prototype`. The proper

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-14 发布INFO

electerm's encrypt method not safe enough

CVE-2026-45787

### Impact _Insecure sync encryption: deterministic AES-192-CBC with a fixed zero IV, constant KDF salt, and no MAC lead

历史摘要 · 未重新核验 · GitHub Advisory