Chromium: CVE-2026-9114 Use after free in QUIC
CVE-2026-9114
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
2026-05-22 归档
今日共收录 1105 条安全情报，包含 281 个 CVE，422 篇安全通告，以及 120 篇研究论文。
← 返回归档列表Chromium: CVE-2026-9113 Out of bounds read in GPU
CVE-2026-9113
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-9112 Use after free in GPU
CVE-2026-9112
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-9110 Inappropriate implementation in UI
CVE-2026-9110
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-9111 Use after free in WebRTC
CVE-2026-9111
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-8522 Use after free in Downloads
CVE-2026-8522
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-8521 Use after free in Tab Groups
CVE-2026-8521
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-8520 Race in Payments
CVE-2026-8520
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
CVE-2026-0265 PAN-OS: Authentication Bypass with Cloud Authentication Service (CAS) enabled (Severity: HIGH)
CVE-2026-0265
CVE-2026-0265 PAN-OS: Authentication Bypass with Cloud Authentication Service (CAS) enabled (Severity: HIGH)
Azure Privileged Identity Management (PIM) Elevation of Privilege Vulnerability
CVE-2026-35430
Authorization bypass through user-controlled key in Azure Privileged Identity Management (PIM) allows an authorized atta
DISPATCH: Unraveling Security Patches from Entangled Code Changes.
该论文提出了一种名为DISPATCH的方法，旨在从纠缠的代码变更中自动分离和识别安全补丁。在实际开发中，安全补丁往往与其他非安全相关的代码修改（如功能增强、重构等）混合提交，这种纠缠使得安全补丁的识别和回溯变得困难。DISPATCH通过分析
PLANET VDR-300NU ADSL Router - 未授权修改DNS
PLANET VDR-300NU ADSL Router - 未授权修改DNS
Acknowledgements
Acknowledgements
js-libp2p: Memory DoS via subscription flood of unique topics
CVE-2026-46679
### Summary Three cooperating omissions in `@libp2p/gossipsub` allow an unauthenticated single peer to exhaust the Node.
Taiko AG1000-01A SMS Alert Gateway Rev 7.3 and Rev 8 contains an authentication bypass vulnerability in the embedded web configuration interface that allows unauthenticated atta...
CVE-2026-9141
Taiko AG1000-01A SMS Alert Gateway Rev 7.3 and Rev 8 contains an authentication bypass vulnerability in the embedded web
Taiko AG1000-01A SMS Alert Gateway Rev 7.3 and Rev 8 contains a hard-coded credential vulnerability in the embedded web configuration interface where authentication is implement...
CVE-2026-9139
Taiko AG1000-01A SMS Alert Gateway Rev 7.3 and Rev 8 contains a hard-coded credential vulnerability in the embedded web
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CVE-2025-34291 · CVE-2026-34926
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active
SCARA: A Semantics-Constrained Autonomous Remediation Agent for Opaque Industrial Software Vulnerabilities
本文提出 SCARA（语义约束的自主修复代理），旨在解决不透明工业软件（OIS）漏洞的自动化修复难题。工业关键基础设施中大量部署的是无源代码、无符号表、无编译环境的闭源软件（如 stripped 固件、专有协议处理器、编译控制逻辑等）。现有
Semantic-Informed Driver Fuzzing Without Both the Hardware Devices and the Emulators.
该论文针对Linux内核设备驱动程序的安全测试困境提出了一种新的模糊测试方法。设备驱动程序由于运行在内核态且直接与硬件交互，其漏洞可导致整个系统被攻陷。然而，传统驱动测试严重依赖特定硬件设备或模拟器，导致大量驱动缺乏有效测试。论文创新地提出
MobFuzz: Adaptive Multi-objective Optimization in Gray-box Fuzzing.
本文提出了一种名为 MobFuzz 的新型灰盒模糊测试工具，旨在解决现有灰盒模糊测试（CGF）中多目标优化（MOO）的挑战。传统 CGF 方法通常难以同时优化多个目标（如代码覆盖率、路径多样性、漏洞发现率等）。MobFuzz 将多目标优化过