Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft...
CVE-2026-58524
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based)
2026-07-05 归档
今日共收录 754 条安全情报，包含 65 个 CVE，375 篇安全通告，以及 61 篇研究论文。
← 返回归档列表Insufficient ui warning of dangerous operations in Microsoft Edge (Chromium-based) allows an...
CVE-2026-58597
Insufficient ui warning of dangerous operations in Microsoft Edge (Chromium-based) allows an unauthorized attacker to pe
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based)...
CVE-2026-58290
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized
Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to...
CVE-2026-58292
Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a netw
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code...
CVE-2026-58294
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized...
CVE-2026-58293
External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code
Improper access control in Microsoft Edge (Chromium-based) allows an unauthorized attacker to...
CVE-2026-58286
Improper access control in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a ne
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based)...
CVE-2026-58285
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized
Operation on a resource after expiration or release in Microsoft Edge (Chromium-based) allows an...
CVE-2026-58291
Operation on a resource after expiration or release in Microsoft Edge (Chromium-based) allows an unauthorized attacker t
Improper authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to...
CVE-2026-58284
Improper authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network
PLANET VDR-300NU ADSL Router - 未授权修改DNS
PLANET VDR-300NU ADSL Router - 未授权修改DNS
Acknowledgements
Acknowledgements
SecAlign: Defending Against Prompt Injection with Preference Optimization.
本文提出一种基于偏好优化的防御方法 SecAlign，用于缓解大型语言模型（LLM）面临的提示注入攻击。在 LLM 与外部数据源（如用户文档、网络检索结果、API 返回等）交互时，攻击者可将恶意提示注入这些外部内容，覆盖系统原有指令并执行恶
A vulnerability has been found in ForceInjection AI-fundermentals 2.0/3.0. Affected by this...
CVE-2026-14630
A vulnerability has been found in ForceInjection AI-fundermentals 2.0/3.0. Affected by this vulnerability is the functio
A vulnerability has been found in FederatedAI FATE up to 2.2.0. This affects the function...
CVE-2026-14621
A vulnerability has been found in FederatedAI FATE up to 2.2.0. This affects the function QueuePushReqStreamObserver.ini
Firewall for AI
Akamai 发布了面向 AI 工作负载的专用防火墙产品“Firewall for AI”，旨在保护 AI 推理端点免受 DDoS 攻击、botnet 流量和其他恶意请求的侵害。该产品基于 Akamai 的全球分布式边缘网络，提供实时的流量
Firefox browsers
Firefox browsers
Sign in to Cloud
Sign in to Cloud
Sign Up for Free Cloud Tier
Sign Up for Free Cloud Tier
iOS 26.4.2 and iPadOS 26.4.2
iOS 26.4.2 and iPadOS 26.4.2