Chromium: CVE-2026-12028 Use after free GPU
CVE-2026-12028
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
2026-06-27 归档
今日共收录 1218 条安全情报，包含 478 个 CVE，392 篇安全通告，以及 115 篇研究论文。
← 返回归档列表Chromium: CVE-2026-11647 Use after free in Printing
CVE-2026-11647
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-13038 Use after free in Autofill
CVE-2026-13038
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-13036 Use after free in Blink
CVE-2026-13036
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-13035 Use after free in Bluetooth
CVE-2026-13035
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-13034 Inappropriate implementation in Passwords
CVE-2026-13034
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-13033 Out of bounds read in Blink>InterestGroups
CVE-2026-13033
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-13031 Use after free in Blink
CVE-2026-13031
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-13029 Use after free in Web Authentication
CVE-2026-13029
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-13027 Use after free in FileSystem
CVE-2026-13027
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-13026 Use after free in Digital Credentials
CVE-2026-13026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-13025 Insufficient validation of untrusted input in DevTools
CVE-2026-13025
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-13024 Insufficient validation of untrusted input in Navigation
CVE-2026-13024
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-13023 Uninitialized Use in GPU
CVE-2026-13023
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-13022 Inappropriate implementation in Autofill
CVE-2026-13022
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-13021 Inappropriate implementation in DeviceBoundSessionCredentials
CVE-2026-13021
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2026-50521
Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network.
Long Term Support Channel Update for ChromeOS
CVE-2026-9903 · CVE-2026-12440 · CVE-2026-7339 · CVE-2026-8557 · CVE-2026-9933 · CVE-2026-9993 · CVE-2026-12439 · CVE-2026-9970 · CVE-2026-9961 · CVE-2026-8524 · CVE-2026-8559 · CVE-2026-12441 · CVE-2026-13033 · CVE-2026-10007 · CVE-2026-7922 · CVE-2026-6920 · CVE-2026-10905 · CVE-2026-9995 · CVE-2026-10969 · CVE-2026-12008 · CVE-2026-7348 · CVE-2026-10003 · CVE-2026-6360 · CVE-2026-12034
A new LTS-144 version 144.0.7559.256(Platform Version: 16503.88.0), is being rolled out for most ChromeOS devices. This
Poster: Patching NSEC3-Encloser: The Good, the Bad, and the Ugly.
该论文评估了针对DNS解析器中NSEC3-encloser攻击的补丁的有效性。NSEC3是DNSSEC中用于认证记录不存在的一种机制，但攻击者可利用其生成大量恶意NSEC3记录，迫使解析器进行昂贵的SHA-1哈希计算，从而耗尽CPU资源，造
VulHawk: Cross-architecture Vulnerability Detection with Entropy-based Binary Code Search.
该论文针对物联网（IoT）固件中普遍存在的代码复用导致的安全漏洞问题，提出了一种名为VulHawk的跨架构二进制代码搜索方法。由于IoT固件通常由不同编译器、不同优化级别以及不同架构编译而成，现有二进制代码搜索技术难以适应这种复杂场景。Vu