CISA Adds One Known Exploited Vulnerability to Catalog
CVE-2026-42897
CISA于2026年5月15日将其已知被利用漏洞（KEV）目录新增一个漏洞CVE-2026-42897，该漏洞为Microsoft Exchange Server中的跨站脚本（XSS）漏洞。CISA根据已发现的在野利用证据将该漏洞列入KEV
2026-05-16 归档
今日共收录 1030 条安全情报，包含 296 个 CVE，439 篇安全通告，以及 15 篇研究论文。
← 返回归档列表Windows 11 and Microsoft Edge hacked at Pwn2Own Berlin 2026
2026年5月14日，Pwn2Own Berlin 2026安全竞赛首日，安全研究人员成功利用24个零日漏洞攻破Windows 11和Microsoft Edge，并获得总计523,000美元奖金。本次竞赛聚焦于桌面操作系统与浏览器安全，多
Microsoft backpedals: Edge to stop loading passwords into memory
微软宣布将更新Edge浏览器，修复其密码管理器在启动时将保存的密码以明文形式加载到进程内存中的问题。此前，该行为被微软标记为“设计如此”，但安全研究人员指出，任何能够访问进程内存的恶意软件或攻击者均可轻松提取这些明文密码，从而构成严重的安全
Harnessing Vital Sign Vibration Harmonics for Effortless and Inbuilt XR User Authentication.
随着扩展现实（XR）头戴设备日益成为大量敏感数据的存储库和Web应用的入口，确保用户身份认证的安全与便捷变得至关重要。传统的密码/PIN方案不适合XR的基于手势和语音的交互界面，且容易受到肩窥攻击；部分新系统引入了双因素认证，但需要第二设备
Ivanti Endpoint Manager Mobile代码注入漏洞
Ivanti Endpoint Manager Mobile（EPMM）存在代码注入漏洞。该漏洞可能允许远程攻击者通过特制的请求在目标系统上注入并执行任意代码，从而完全控制受影响的移动设备管理服务器。由于缺乏官方公告和详细的技术细节，目前无
【云防火墙】腾讯云 VPC 边界防火墙（集群模式）超量管控生效通知
腾讯云发布安全公告，通知用户将于特定时间对VPC边界防火墙（集群模式）实施超量管控策略。当集群资源使用量超过预设阈值时，系统将自动触发限流或中断等管控动作，以保障服务整体稳定性。该策略影响所有使用集群模式VPC边界防火墙的腾讯云用户，可能导
Better Auth: Rate limiter keys IPv6 addresses individually and is bypassable via prefix rotation
CVE-2026-45364
### Am I affected? Users are affected if all of the following are true: - Their app uses `better-auth` at a version `<
The Form Notify plugin for WordPress is vulnerable to Authentication Bypass in versions up to and...
CVE-2026-5229
The Form Notify plugin for WordPress is vulnerable to Authentication Bypass in versions up to and including 1.1.10. This
Citrix NetScaler 内存泄漏(CVE-2025-5777)
CVE-2025-5777
Citrix NetScaler 内存泄漏(CVE-2025-5777)
Chromium: CVE-2026-8587 Use after free in Extensions
CVE-2026-8587
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-8586 Inappropriate implementation in Chromoting
CVE-2026-8586
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-8585 Inappropriate implementation in Media
CVE-2026-8585
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-8584 Inappropriate implementation in Views
CVE-2026-8584
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-8582 Object lifecycle issue in Dawn
CVE-2026-8582
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-8581 Use after free in GPU
CVE-2026-8581
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-8580 Use after free in Mojo
CVE-2026-8580
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-8579 Insufficient validation of untrusted input in Skia
CVE-2026-8579
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-8578 Out of bounds read in GPU
CVE-2026-8578
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-8577 Integer overflow in Fonts
CVE-2026-8577
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-8576 Inappropriate implementation in CORS
CVE-2026-8576
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.