Chromium: CVE-2026-13790 Side-channel information leakage in Scroll
CVE-2026-13790
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
2026-07-04 归档
今日共收录 996 条安全情报，包含 192 个 CVE，454 篇安全通告，以及 95 篇研究论文。
← 返回归档列表Chromium: CVE-2026-14068 Inappropriate implementation in Omnibox
CVE-2026-14068
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-14014 Inappropriate implementation in Paint
CVE-2026-14014
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-14122 Insufficient validation of untrusted input in WebAppInstalls
CVE-2026-14122
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-13945 Insufficient policy enforcement in Extensions
CVE-2026-13945
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-14013 Inappropriate implementation in SVG
CVE-2026-14013
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-14065 Insufficient validation of untrusted input in PageInfo
CVE-2026-14065
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-14121 Use after free in Chromoting
CVE-2026-14121
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-14071 Side-channel information leakage in WebAudio
CVE-2026-14071
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-13942 Insufficient validation of untrusted input in Video Capture
CVE-2026-13942
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-13864 Insufficient policy enforcement in WebHID
CVE-2026-13864
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-14064 Use after free in PageInfo
CVE-2026-14064
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-14059 Insufficient policy enforcement in Related-Website-Sets
CVE-2026-14059
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-13941 Inappropriate implementation in SiteSettings
CVE-2026-13941
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-13861 Use after free in Core
CVE-2026-13861
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
From Noise to Signal: Precisely Identify Affected Packages of Known Vulnerabilities in npm Ecosystem.
该论文针对npm生态系统中已知漏洞的受影响包识别问题展开研究。当前，安全公告往往仅报告漏洞所在的上游包，而npm依赖树中大量下游包因直接或间接依赖受影响版本而被错误标记为“受漏洞影响”，导致大量误报（噪声）。论文提出了一种精确识别方法，通过
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
CVE-2026-58289
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft...
CVE-2026-58298
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based)
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft...
CVE-2026-58524
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based)
Insufficient ui warning of dangerous operations in Microsoft Edge (Chromium-based) allows an...
CVE-2026-58597
Insufficient ui warning of dangerous operations in Microsoft Edge (Chromium-based) allows an unauthorized attacker to pe