Chromium: CVE-2026-10981 Insufficient validation of untrusted input in Codecs

CVE-2026-10981

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. P

历史摘要 · 未重新核验 · Microsoft MSRC

Chromium: CVE-2026-11249 Use after free in Network

CVE-2026-11249

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. P

历史摘要 · 未重新核验 · Microsoft MSRC

Chromium: CVE-2026-11304 Use after free in PDFium

CVE-2026-11304

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. P

历史摘要 · 未重新核验 · Microsoft MSRC

Chromium: CVE-2026-11141 Uninitialized Use in Audio

CVE-2026-11141

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. P

历史摘要 · 未重新核验 · Microsoft MSRC

Chromium: CVE-2026-10980 Insufficient validation of untrusted input in DevTools

CVE-2026-10980

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. P

历史摘要 · 未重新核验 · Microsoft MSRC

Chromium: CVE-2026-11193 Insufficient policy enforcement in Password Manager

CVE-2026-11193

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. P

历史摘要 · 未重新核验 · Microsoft MSRC

Chromium: CVE-2026-11033 Uninitialized Use in WebML

CVE-2026-11033

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. P

历史摘要 · 未重新核验 · Microsoft MSRC

Chromium: CVE-2026-10928 Script injection in Headless

CVE-2026-10928

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. P

历史摘要 · 未重新核验 · Microsoft MSRC

The netty incubator codec.bhttp is a java language binary http parser. The library implements Oblivious HTTP (RFC 9458) using BoringSSL's HPKE C library via JNI. When deriving n...

CVE-2026-48040

The netty incubator codec.bhttp is a java language binary http parser. The library implements Oblivious HTTP (RFC 9458)

历史摘要 · 未重新核验 · NVD

Bugsink: Issue bulk actions can affect another project’s issue if its UUID is known

CVE-2026-47716

### Description Bugsink’s issue list supports bulk actions such as resolving or muting selected issues. In affected vers

历史摘要 · 未重新核验 · GitHub Advisory

Bugsink: Issue event views can show an event from another project if its UUID is known

CVE-2026-47715

### Description Bugsink issue event pages accept a direct event identifier from the URL and, in affected versions, look

历史摘要 · 未重新核验 · GitHub Advisory

Shopper: Missing per-action authorization on PaymentMethods, Currencies and Carriers admin tables

CVE-2026-47745

## Impact The admin tables for `PaymentMethods`, `Currencies` and `Carriers` exposed inline toggles and per-record acti

历史摘要 · 未重新核验 · GitHub Advisory

TinyMCE Cross-Site Scripting (XSS) vulnerability using sanitization bypass through nested SVGs

CVE-2026-47760

### Impact TinyMCE 6.8.x contains an XSS vulnerability caused by improper SVG namespace scope handling in the sanitizer.

历史摘要 · 未重新核验 · GitHub Advisory

NocoDB: Missing Ownership Check in MCP Attachment Read

CVE-2026-47388

### Summary A low-privilege MCP token holder with knowledge of an attachment path could read any file in shared storage,

历史摘要 · 未重新核验 · GitHub Advisory

NocoDB: OAuth Authorization Code Race Condition

CVE-2026-47386

### Summary Two concurrent token-exchange requests using the same OAuth authorization code could each mint a distinct va

历史摘要 · 未重新核验 · GitHub Advisory

Acknowledgements

Acknowledgements

历史摘要 · 未重新核验 · Android Security Bulletin

EchoLLM: LLM-Augmented Acoustic Eavesdropping Attack on Bone Conduction Headphones with mmWave Radar.

本文提出一种名为 EchoLLM 的新型声学窃听攻击，利用毫米波雷达 (mmWave radar) 和大型语言模型 (LLM) 来窃听骨传导耳机 (bone conduction headphones) 的音频输出。骨传导耳机通过颅骨振动传

历史摘要 · 未重新核验 · USENIX Security

Exploiting Task-Level Vulnerabilities: An Automatic Jailbreak Attack and Defense Benchmarking for LLMs.

本文针对大型语言模型（LLMs）中任务级漏洞的自动越狱攻击与防御基准测试问题展开研究。任务级漏洞是指LLM在执行特定任务（如代码生成、推理等）时，由于上下文或角色设定中的安全边界模糊，导致模型可能被诱导产生有害输出。论文提出了一种自动化的越

历史摘要 · 未重新核验 · USENIX Security

AirTaint: Making Dynamic Taint Analysis Faster and Easier.

动态污点分析（DTA）是一种广泛使用的数据流跟踪技术，在模糊测试、漏洞分析等安全应用中发挥重要作用。然而，其实际部署面临严重的性能开销问题：现有工具甚至可能使程序执行速度降低超过100倍。高开销主要源于大多数工具在指令级别进行污点分析，并使

历史摘要 · 未重新核验 · IEEE S&P

The All-In-One Security (AIOS) – Security and Firewall plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to and including 5.4.7. This is due to in...

CVE-2026-8438

CVE-2026-8438 是一个影响 WordPress 插件 All-In-One Security (AIOS) – Security and Firewall 的存储型跨站脚本 (XSS) 漏洞，影响版本 ≤ 5.4.7。漏洞源于插

历史摘要 · 未重新核验 · NVD