Concurrent execution using shared resource with improper synchronization ('race condition') in...
CVE-2026-55945
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Edge (Chromium-
2026-07-04 归档
今日共收录 996 条安全情报，包含 192 个 CVE，454 篇安全通告，以及 95 篇研究论文。
← 返回归档列表Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to...
CVE-2026-56645
Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a net
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based)...
CVE-2026-57975
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized
Exposure of sensitive information to an unauthorized actor in Microsoft Edge (Chromium-based)...
CVE-2026-56646
Exposure of sensitive information to an unauthorized actor in Microsoft Edge (Chromium-based) allows an unauthorized att
Server-side request forgery (ssrf) in Microsoft Edge (Chromium-based) allows an unauthorized...
CVE-2026-57987
Server-side request forgery (ssrf) in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofin
Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to...
CVE-2026-57985
Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a netw
Integer overflow or wraparound in Microsoft Edge (Chromium-based) allows an unauthorized attacker...
CVE-2026-57974
Integer overflow or wraparound in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a
Microsoft Edge (Chromium-based) Spoofing Vulnerability
CVE-2026-45489
Microsoft Edge (Chromium-based) Spoofing Vulnerability
Improper authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to...
CVE-2026-57983
Improper authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature o
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code...
CVE-2026-57981
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code...
CVE-2026-57986
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft...
CVE-2026-57977
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based)
User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based)...
CVE-2026-45488
User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized
Gitea versions before 1.25.5 do not persist the OAuth2 PKCE S256 challenge method correctly...
CVE-2026-26247
Gitea versions before 1.25.5 do not persist the OAuth2 PKCE S256 challenge method correctly during authorization, allowi
Gitea versions before 1.25.5 do not consistently enforce OAuth2 authorization code expiry and...
CVE-2026-26232
Gitea versions before 1.25.5 do not consistently enforce OAuth2 authorization code expiry and single-use behavior during
PLANET VDR-300NU ADSL Router - 未授权修改DNS
PLANET VDR-300NU ADSL Router - 未授权修改DNS
Acknowledgements
Acknowledgements
Microarchitectural Leakage Templates and Their Application to Cache-Based Side Channels.
现代处理器架构的复杂性导致其组件之间存在复杂的交互，这些交互可能产生侧信道攻击向量，用户态程序可利用这些侧信道泄露秘密数据。利用和防御此类侧信道需要对目标组件有详细理解，但许多CPU的此类细节信息通常未公开。本文提出"泄漏模板"（Leaka
Paladin: Defending LLM-enabled Phishing Emails with a New Trigger-Tag Paradigm.
该论文针对大型语言模型（LLM）被恶意利用生成钓鱼邮件的问题，提出了一种新的防御方案Paladin。随着LLM的快速发展，攻击者可以生成无拼写错误、主题针对性强的钓鱼邮件，传统基于语义的检测方法难以识别，而LLM-based检测方法计算成本
Improper access control in Microsoft Edge for Android allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-58523
该漏洞存在于 Microsoft Edge for Android 中，属于不当的访问控制缺陷。攻击者无需身份验证，通过网络即可利用该漏洞，绕过安全功能（例如可能绕过同源策略或权限检查）。CVSS 3.1 评分为 6.5（中危），攻击向量为