Chromium: CVE-2026-13987 Incorrect security UI in Mobile
CVE-2026-13987
CVE-2026-13987 是 Chromium 中的一个安全 UI 不正确漏洞，影响移动版 Chromium。该漏洞由 Chrome 团队分配并修复，Microsoft Edge（基于 Chromium）通过引入 Chromium 的修
2026-07-13 归档
今日共收录 797 条安全情报，包含 77 个 CVE，415 篇安全通告，以及 53 篇研究论文。
← 返回归档列表Chromium: CVE-2026-14137 Insufficient validation of untrusted input in Chrome for iOS
CVE-2026-14137
该漏洞是 Google Chrome for iOS 中的一个输入验证不足缺陷（CVE-2026-14137），由 Chrome 团队发现并分配。由于 Microsoft Edge（基于 Chromium）同样使用了 Chromium 代码
Chromium: CVE-2026-14136 Incorrect security UI in Chrome for iOS
CVE-2026-14136
此漏洞（CVE-2026-14136）影响 Google Chrome for iOS 以及基于 Chromium 的 Microsoft Edge。漏洞源于 Chrome for iOS 的安全界面（Security UI）存在设计缺陷，
Chromium: CVE-2026-14128 Insufficient data validation in Chrome for iOS
CVE-2026-14128
该漏洞涉及Chromium浏览器引擎中的不足数据验证问题，影响Chrome for iOS以及基于Chromium的Microsoft Edge浏览器。具体而言，CVE-2026-14128源于对特定输入数据的验证缺陷，攻击者可能通过构造特
Chromium: CVE-2026-14123 Incorrect security UI in Chrome for iOS
CVE-2026-14123
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-14099 Use after free in Chrome for iOS
CVE-2026-14099
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-14075 Policy bypass in Chrome for iOS
CVE-2026-14075
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-14067 Use after free in Chrome for iOS
CVE-2026-14067
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-14066 Insufficient validation of untrusted input in Chrome for iOS
CVE-2026-14066
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-14028 Incorrect security UI in Chrome for iOS
CVE-2026-14028
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-13991 Insufficient validation of untrusted input in Chrome for iOS
CVE-2026-13991
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-13983 Incorrect security UI in Chrome for iOS
CVE-2026-13983
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Improving the Robustness of Transformer-based Large Language Models with Dynamic Attention.
本文针对基于Transformer的大型语言模型（如BERT、GPT）在自然语言处理中的鲁棒性问题，提出了一种名为“动态注意力”（Dynamic Attention）的新型防御方法。现有研究表明，这些模型容易受到文本对抗攻击的威胁，攻击者通
A flaw has been found in Helicone ai-gateway up to 0.2.0-beta.30. This affects the function...
CVE-2026-15508
A flaw has been found in Helicone ai-gateway up to 0.2.0-beta.30. This affects the function build_target_url of the file
A vulnerability was determined in SonicCloudOrg sonic-agent up to 2.7.2. This affects an unknown...
CVE-2026-15497
A vulnerability was determined in SonicCloudOrg sonic-agent up to 2.7.2. This affects an unknown function of the file so
Ivanti Endpoint Manager Mobile代码注入漏洞
Ivanti Endpoint Manager Mobile代码注入漏洞
Huawei Secoway USG firewall weak password
Huawei Secoway USG firewall weak password
Yokogawa YFGW410 gateway
Yokogawa YFGW410 gateway
Efficient and Timely Revocation of V2X Credentials.
该论文针对智能交通系统中车辆与基础设施间安全通信的关键需求，聚焦于恶意或异常车辆密码凭证的及时撤销问题。当前标准对撤销处理规定模糊，现有方案在可扩展性和有效性方面存在严重局限。为此，作者提出了一种形式化验证的车辆自撤销机制，该机制利用车辆中
CrowdStrike and Zscaler Bring Continuous Identity to Zero Trust Access
CrowdStrike 与 Zscaler 宣布合作，将持续身份安全（Continuous Identity Security）集成到零信任访问（Zero Trust Access）解决方案中。该合作旨在通过结合 CrowdStrike F