2026-07-04 归档

今日共收录 996 条安全情报，包含 192 个 CVE，454 篇安全通告，以及 95 篇研究论文。

← 返回归档列表

漏洞预警2026-07-03 发布INFO

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over ...

CVE-2026-57977

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based)

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-07-03 发布INFO

Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

CVE-2026-57975

Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized

历史摘要 · 未重新核验 · NVD

#cve #cwe-843

漏洞预警2026-07-03 发布INFO

Integer overflow or wraparound in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

CVE-2026-57974

Integer overflow or wraparound in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a

历史摘要 · 未重新核验 · NVD

#cve #cwe-190

漏洞预警2026-07-03 发布INFO

Exposure of sensitive information to an unauthorized actor in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-56646

Exposure of sensitive information to an unauthorized actor in Microsoft Edge (Chromium-based) allows an unauthorized att

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-07-03 发布INFO

Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

CVE-2026-56645

Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a net

历史摘要 · 未重新核验 · NVD

#cve #cwe-122

漏洞预警2026-07-03 发布INFO

Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Edge (Chromium-based) allows an authorized attacker to disclose informat...

CVE-2026-55945

Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Edge (Chromium-

历史摘要 · 未重新核验 · NVD

#cve #cwe-362

漏洞预警2026-07-03 发布INFO

Microsoft Edge (Chromium-based) Spoofing Vulnerability

CVE-2026-45489

Microsoft Edge (Chromium-based) Spoofing Vulnerability

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-07-03 发布INFO

User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-45488

User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized

历史摘要 · 未重新核验 · NVD

#cve #cwe-451

漏洞预警2026-07-03 发布INFO

Gitea versions before 1.25.5 do not persist the OAuth2 PKCE S256 challenge method correctly during authorization, allowing token exchange without the expected verifier check.

CVE-2026-26247

Gitea versions before 1.25.5 do not persist the OAuth2 PKCE S256 challenge method correctly during authorization, allowi

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-07-03 发布INFO

Gitea versions before 1.25.5 do not consistently enforce OAuth2 authorization code expiry and single-use behavior during token exchange.

CVE-2026-26232

Gitea versions before 1.25.5 do not consistently enforce OAuth2 authorization code expiry and single-use behavior during

历史摘要 · 未重新核验 · NVD

#cve #cwe-294

漏洞预警2026-07-03 发布INFO

By default, curl automatically responds to WebSocket PING frames. Because curl lacks an upper bound on memory allocation for unacknowledged frames, a malicious server can exhaus...

CVE-2026-11586

By default, curl automatically responds to WebSocket PING frames. Because curl lacks an upper bound on memory allocation

历史摘要 · 未重新核验 · NVD

#cve

安全公告2026-07-04 发布INFO

Compatibility Test Suite (CTS)

本公告涉及 Android 兼容性测试套件 (CTS) 的文档或版本更新。CTS 是 Android 平台用于验证设备是否兼容 Android 应用生态的官方测试工具集。它包含大量测试用例，覆盖 API 行为、权限、性能等方面。厂商须通过