2026-07-01 归档

今日共收录 1573 条安全情报,包含 770 个 CVE,406 篇安全通告,以及 100 篇研究论文。

← 返回归档列表
安全公告2026-07-01 发布INFO

Use after free in SSL in Google Chrome on ChromeOS prior to 150.0.7871.47 allowed a remote...

CVE-2026-14103

Use after free in SSL in Google Chrome on ChromeOS prior to 150.0.7871.47 allowed a remote attacker to obtain potentiall

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-01 发布INFO

Uninitialized Use in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to...

CVE-2026-14125

Uninitialized Use in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensi

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-01 发布INFO

Insufficient validation of untrusted input in Network in Google Chrome prior to 150.0.7871.47...

CVE-2026-14135

Insufficient validation of untrusted input in Network in Google Chrome prior to 150.0.7871.47 allowed a remote attacker

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-01 发布INFO

Use after free in Updater in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote...

CVE-2026-14113

Use after free in Updater in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who had compromis

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-01 发布INFO

Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Windows prior to...

CVE-2026-14122

Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Windows prior to 150.0.7871.47 allowed

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-01 发布INFO

Insufficient validation of untrusted input in DevTools in Google Chrome on Windows prior to 150.0...

CVE-2026-14117

Insufficient validation of untrusted input in DevTools in Google Chrome on Windows prior to 150.0.7871.47 allowed a remo

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-01 发布INFO

Inappropriate implementation in DarkMode in Google Chrome prior to 150.0.7871.47 allowed a remote...

CVE-2026-14110

Inappropriate implementation in DarkMode in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-01 发布INFO

Inappropriate implementation in WebAppInstalls in Google Chrome on Windows prior to 150.0.7871.47...

CVE-2026-14138

Inappropriate implementation in WebAppInstalls in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attac

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-01 发布INFO

Insufficient validation of untrusted input in Cast in Google Chrome prior to 150.0.7871.47...

CVE-2026-14115

Insufficient validation of untrusted input in Cast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-01 发布INFO

Race in History Embeddings in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to...

CVE-2026-14133

Race in History Embeddings in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-01 发布INFO

Inappropriate implementation in WebAppInstalls in Google Chrome on Mac prior to 150.0.7871.47...

CVE-2026-14097

Inappropriate implementation in WebAppInstalls in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-01 发布INFO

Use after free in Installer in Google Chrome on Windows prior to 150.0.7871.47 allowed a local...

CVE-2026-14094

Use after free in Installer in Google Chrome on Windows prior to 150.0.7871.47 allowed a local attacker to perform OS-le

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-30 发布INFO

Open Babel has heap buffer overflow in SMILES OBSmilesParser::ParseSmiles

CVE-2025-10996

### Summary A memory-safety vulnerability in Open Babel's SMILES parser caused a heap buffer overflow when reading a cr

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-30 发布INFO

Open Babel has out-of-bounds write (overlapping memcpy) in zipstream basic_unzip_streambuf::underflow

CVE-2025-10995

### Summary A memory-safety vulnerability in Open Babel's bundled zipstream decompression code caused an out-of-bounds

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-30 发布INFO

Paymenter has race condition in payWithCredit() that enables credit double-spend

CVE-2026-55219

### Summary The credit payment implementation in `app/Livewire/Invoices/Show.php` executes a pessimistic row lock (`lock

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-30 发布INFO

Open Babel has a NULL pointer dereference in CDXML OBAtom::GetExplicitValence

CVE-2026-3408

### Summary A memory-safety vulnerability in Open Babel's CDXML file format parser caused a NULL pointer dereference wh

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-30 发布INFO

Open Babel has NULL pointer dereference in MOL2 OBAtom::SetFormalCharge

CVE-2026-2705

### Summary A memory-safety vulnerability in Open Babel's MOL2 file format parser caused a NULL pointer dereference whe

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-30 发布INFO

Open Babel has an out-of-bounds read in CIF transform3d::DescribeAsString

CVE-2026-2704

> ### Summary > > A memory-safety vulnerability in Open Babel's CIF file format parser > allowed an out-of-bounds read w

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-30 发布INFO

Twig: Sandbox property allowlist bypass via the `column` filter under `SourcePolicyInterface`

CVE-2026-48808

### Description This is a residual bypass of CVE-2026-46635 / GHSA-vcc8-phrv-43wj that only affects sandboxing enabled

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-30 发布INFO

Twig: Sandbox `__toString()` policy bypass via `Traversable` in `join` and `replace` filters

CVE-2026-48807

### Description This is a residual bypass of CVE-2026-47732 / GHSA-pr2w-4gpj-cpq4 left after the initial fix for unguar

历史摘要 · 未重新核验 · GitHub Advisory