安全日报 - 2026-05-23 - Cyber Security Daily Radar

安全公告2026-05-21 发布INFO

Chromium: CVE-2026-9113 Out of bounds read in GPU

CVE-2026-9113

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

#microsoft #msrc #windows

安全公告2026-05-21 发布INFO

Chromium: CVE-2026-9112 Use after free in GPU

CVE-2026-9112

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

#microsoft #msrc #windows

安全公告2026-05-21 发布INFO

Chromium: CVE-2026-9110 Inappropriate implementation in UI

CVE-2026-9110

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

#microsoft #msrc #windows

安全公告2026-05-21 发布INFO

Chromium: CVE-2026-9111 Use after free in WebRTC

CVE-2026-9111

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

#microsoft #msrc #windows

安全公告2026-05-23 发布INFO

PLANET VDR-300NU ADSL Router - 未授权修改DNS

历史摘要 · 未重新核验 · 知道创宇 / Seebug

#knownsec #seebug #vulnerability

安全公告2026-05-23 发布INFO

Acknowledgements

历史摘要 · 未重新核验 · Android Security Bulletin

#android #mobile

安全公告2026-05-23 发布INFO

多款Huawei路由器信息泄露漏洞

历史摘要 · 未重新核验 · 知道创宇 / Seebug

#knownsec #seebug #vulnerability

安全公告2026-05-23 发布INFO

Parse Server: Pre-authentication denial of service via client version header regex backtracking

CVE-2026-47138

### Impact An unauthenticated attacker who knows a publicly-known Parse Application ID can submit a single HTTP request

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #npm #cwe-1333 #severity:high

安全公告2026-05-21 发布INFO

js-libp2p: Memory DoS via subscription flood of unique topics

CVE-2026-46679

### Summary Three cooperating omissions in `@libp2p/gossipsub` allow an unauthenticated single peer to exhaust the Node.

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #npm #cwe-20 #cwe-400 #cwe-401 #severity:high

威胁情报2026-05-22 发布INFO

CISA Adds One Known Exploited Vulnerability to Catalog

CVE-2026-9082

CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active e

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

#apt #conti #government #cisa #advisory

学术论文2026-05-19 发布INFO

SCARA: A Semantics-Constrained Autonomous Remediation Agent for Opaque Industrial Software Vulnerabilities

关键基础设施运营商日益需要评估和修复已部署工业软件中的漏洞。然而，许多工业软件属于不透明工业软件（OIS），包括剥离符号的固件、专有协议处理器以及无源代码、无符号表、无构建环境或硬件接口的编译控制逻辑。虽然二进制分析可以识别漏洞候选，但现有

历史摘要 · 未重新核验 · arXiv cs.CR

#cs.SE #agent-security #llm

学术论文2026-05-23 发布INFO

YuraScanner: Leveraging LLMs for Task-driven Web App Scanning.

本文介绍 YuraScanner，一种利用大语言模型（LLM）进行任务驱动型 Web 应用扫描的新方法。传统 Web 安全扫描工具通常依赖预定义的规则或路径，无法灵活适应复杂或未知的攻击场景。YuraScanner 通过将扫描任务描述为自然

历史摘要 · 未重新核验 · NDSS

#agent-security #llm

安全公告2026-05-23 发布INFO

Firefox browsers

历史摘要 · 未重新核验 · Mozilla Security Advisories

#mozilla #firefox #browser

安全公告2026-05-23 发布INFO

Sign in to Cloud

历史摘要 · 未重新核验 · Oracle Critical Patch Updates

#oracle #database #java

安全公告2026-05-23 发布INFO

Sign Up for Free Cloud Tier

历史摘要 · 未重新核验 · Oracle Critical Patch Updates

#oracle #database #java

安全公告2026-05-23 发布INFO