Chromium: CVE-2026-11664 Use after free in Payments

CVE-2026-11664 · CVE-2026-11665

This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

Chromium: CVE-2026-11663 Use after free in Skia

CVE-2026-11664 · CVE-2026-11663

This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

Chromium: CVE-2026-11662 Type Confusion in Bindings

CVE-2026-11663 · CVE-2026-11662

This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

Chromium: CVE-2026-11661 Use after free in Views

CVE-2026-11661 · CVE-2026-11662

This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

Chromium: CVE-2026-11660 Insufficient validation of untrusted input in New Tab Page

CVE-2026-11661 · CVE-2026-11660

This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

Chromium: CVE-2026-11659 Insufficient validation of untrusted input in UI

CVE-2026-11659 · CVE-2026-11660

This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

Chromium: CVE-2026-11658 Insufficient validation of untrusted input in Extensions

CVE-2026-11658 · CVE-2026-11659

This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

Chromium: CVE-2026-11657 Use after free in Payments

CVE-2026-11657 · CVE-2026-11658

This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

Chromium: CVE-2026-11656 Use after free in ServiceWorker

CVE-2026-11657 · CVE-2026-11656

This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

Chromium: CVE-2026-11655 Integer overflow in Media

CVE-2026-11656 · CVE-2026-11655

This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

Chromium: CVE-2026-11654 Use after free in CameraCapture

CVE-2026-11654 · CVE-2026-11655

This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

Chromium: CVE-2026-11653 Insufficient validation of untrusted input in Extensions

CVE-2026-11654 · CVE-2026-11653

This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

Chromium: CVE-2026-11652 Use after free in Extensions

CVE-2026-11653 · CVE-2026-11652

This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

Chromium: CVE-2026-11651 Use after free in Network

CVE-2026-11652 · CVE-2026-11651

This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

Stable Channel Update for Desktop

CVE-2026-12446 · CVE-2026-12457 · CVE-2026-12458 · CVE-2026-12452 · CVE-2026-12450 · CVE-2026-12465 · CVE-2026-12447 · CVE-2026-12455 · CVE-2026-12443 · CVE-2026-12466 · CVE-2026-12459 · CVE-2026-12451 · CVE-2026-12449 · CVE-2026-12440 · CVE-2026-12464 · CVE-2026-12461 · CVE-2026-12441 · CVE-2026-12467 · CVE-2026-12448 · CVE-2026-12462 · CVE-2026-12463 · CVE-2026-12453 · CVE-2026-12442 · CVE-2026-12444 · CVE-2026-12437 · CVE-2026-12445 · CVE-2026-12438 · CVE-2026-12456 · CVE-2026-12439 · CVE-2026-12460 · CVE-2026-12454

The Stable channel has been updated to 149.0.7827.155/.156 for Windows and Mac and 149.0.7827.155 for Linux, which will

历史摘要 · 未重新核验 · Google Chrome Releases

"I'm Literally Just Hoping This Will Work: " Obstacles Blocking the Online Security and Privacy of Users with Visual Disabilities.

该论文探讨了视觉障碍用户在网络安全与隐私方面面临的独特障碍。研究通过访谈或调查等方式，揭示了用户在身份验证（如密码管理、验证码识别）、钓鱼攻击防范、社交媒体隐私设置、软件更新以及依赖第三方协助等方面遇到的困难。论文指出，现有安全工具和界面设

历史摘要 · 未重新核验 · USENIX Security

ThingsBoard v4.3.0.1 is vulnerable to an authentication bypass during the OAuth authorization code exchange. The application improperly trusts user-supplied identity data within...

CVE-2026-36537

ThingsBoard v4.3.0.1 is vulnerable to an authentication bypass during the OAuth authorization code exchange. The applica

历史摘要 · 未重新核验 · NVD

Gitea: Token scope bypass on web archive download endpoint

CVE-2026-20706

## Summary PR #37698 added checkDownloadTokenScope to /raw/*, /media/*, and attachment download web endpoints. The /arc

历史摘要 · 未重新核验 · GitHub Advisory

Gitea: Incomplete CVE-2025-68941 fix: /user/orgs missing checkTokenPublicOnly + switch-case logic flaw

CVE-2026-25714

## Summary Two related issues in the token public-only scope enforcement introduced by PR #32204 (CVE-2025-68941 fix).

历史摘要 · 未重新核验 · GitHub Advisory

Gitea: Authorization Bypass via "Allow edits from maintainers" allows unauthorized commits to any readable repo

CVE-2026-26231

## Summary Any authenticated low-privilege user with read access to a repository can push arbitrary commits directly to

历史摘要 · 未重新核验 · GitHub Advisory