Chromium: CVE-2026-11263 Insufficient policy enforcement in WebAuthentication
CVE-2026-11263
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. P
2026-06-10 归档
今日共收录 1730 条安全情报，包含 831 个 CVE，478 篇安全通告，以及 120 篇研究论文。
← 返回归档列表Chromium: CVE-2026-11045 Insufficient validation of untrusted input in GPU
CVE-2026-11045
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. P
Chromium: CVE-2026-11097 Inappropriate implementation in WebView
CVE-2026-11097
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. P
Chromium: CVE-2026-10883 Out of bounds write in ANGLE
CVE-2026-10883
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. P
Chromium: CVE-2026-11148 Inappropriate implementation in Payments
CVE-2026-11148
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. P
CrowdStrike and Zscaler Bring Continuous Identity to Zero Trust Access
CrowdStrike and Zscaler Bring Continuous Identity to Zero Trust Access
PatchCleanser: Certifiably Robust Defense against Adversarial Patches for Any Image Classifier.
本论文提出了 PatchCleanser，一种针对图像分类模型对抗补丁攻击的可认证鲁棒防御方法。对抗补丁攻击通过在图像的一个受限区域内注入精心设计的像素（即补丁）来诱导模型误分类，这种攻击可以在物理世界中通过打印并粘贴补丁到目标物体上实现，
Enhancing Semantic-Aware Binary Diffing with High-Confidence Dynamic Instruction Alignment.
二进制差异分析是检测两段二进制代码之间差异的关键技术，广泛应用于漏洞分析、补丁分析、恶意软件检测等安全任务。现有研究表明，足够数量的细粒度对齐锚点能显著提升二进制差异分析的整体精度。然而，现有方法在锚点识别上仍存在诸多限制：基于语法的方法易
Shenzhen Kangda Xin Intelligent Network Technology Company's router, model DR300, version 2.1.2.121, contains hardcoded login credentials and has telnet enabled by default on WA...
CVE-2026-10045
Shenzhen Kangda Xin Intelligent Network Technology Company's router, model DR300, version 2.1.2.121, contains hardcoded
External control of file name or path in Azure Stack Edge allows an unauthorized attacker to execute code over a network.
CVE-2026-47643
External control of file name or path in Azure Stack Edge allows an unauthorized attacker to execute code over a network
A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 throu...
CVE-2026-25089
A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet F
An Authentication Bypass vulnerability (CWE-288) in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated attacker to create arbitrary a...
CVE-2026-10523
An Authentication Bypass vulnerability (CWE-288) in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allow
An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated user to achieve root-level remote code ex...
CVE-2026-10520
An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote
Spring Kafka's retry topic infrastructure did not sufficiently validate user-controlled header...
CVE-2026-41727
Spring Kafka's retry topic infrastructure did not sufficiently validate user-controlled header values before acting on t
When using $changestreams and $_requestReshardingResumeToken with the exchange option the server...
CVE-2026-9746
When using $changestreams and $_requestReshardingResumeToken with the exchange option the server hits an invariant which
This issue can occur when running an aggregation pipeline that uses the internal $exchange stage...
CVE-2026-9749
This issue can occur when running an aggregation pipeline that uses the internal $exchange stage configured with key-ran
Adding fromRouter:true and runtimeConstants.userRoles could cause aggregations to crash mongodb...
CVE-2026-9747
Adding fromRouter:true and runtimeConstants.userRoles could cause aggregations to crash mongodb server.
Net::IMAP: Command Injection via ID command argument
CVE-2026-47242
### Summary Two `Net::IMAP` commands, `#id` and `#enable`, do not validate their arguments. Arguments to either comman
Net::IMAP: Command Injection via non-synchronizing literal in "raw" argument
CVE-2026-47240
Several Net::IMAP commands accept a "raw data" argument that is sent verbatim after validation to prevent command inject
PLANET VDR-300NU ADSL Router - 未授权修改DNS
PLANET VDR-300NU ADSL Router - 未授权修改DNS