Chromium: CVE-2026-16421 Inappropriate implementation in WebAudio
CVE-2026-16421
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
2026-07-24 归档
今日共收录 841 条安全情报，包含 0 个 CVE，432 篇安全通告，以及 115 篇研究论文。
← 返回归档列表Chromium: CVE-2026-16420 Type Confusion in WebAudio
CVE-2026-16420
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-16419 Out of bounds read and write in ANGLE
CVE-2026-16419
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-16418 Stack buffer overflow in V8
CVE-2026-16418
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-16417 Uninitialized Use in Skia
CVE-2026-16417
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-16416 Integer overflow in Chromecast
CVE-2026-16416
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-16415 Insufficient validation of untrusted input in Extensions
CVE-2026-16415
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-16414 Insufficient validation of untrusted input in Chromecast
CVE-2026-16414
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-16413 Out of bounds write in ANGLE
CVE-2026-16413
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Microsoft Exchange Online Tampering Vulnerability
CVE-2026-56191
Improper authentication in Microsoft Exchange Online allows an unauthorized attacker to perform tampering over a network
UniID: Spoofing Face Authentication System by Universal Identity.
人脸认证系统广泛应用于门禁等安全场景，但已有研究证明其易受对抗性攻击。然而，现有攻击通常要求攻击者在每次认证时佩戴眼镜或帽子等伪装，易引起怀疑且攻击效果有限。本文提出UniID攻击，允许内鬼通过佩戴对抗性补丁注册一个“通用身份”到人脸认证数
React Router: Open redirect leading to XSS
CVE-2026-53668
Applications with open redirects could permit attacker crafted links to result in redirects to unexpected external locat
React Router: RSCErrorHandler Missing Protocol Validation (XSS)
CVE-2026-53667
This is a follow up to https://github.com/remix-run/react-router/security/advisories/GHSA-8646-j5j9-6r62. React Router
React Router: Arbitrary Constructor Injection via deserializeErrors() in React Router SSR Hydration
CVE-2026-53666
If application code allows attacker supplied input to overwrite certain aspects of errors caught by the SSR process, the
find-my-way: DDoS with HTTP2
CVE-2026-47219
### Impact Remotely triggerable DoS in find-my-way when it is used with Node's HTTP/2 server. The short version is that
Next.js: Cache confusion of response bodies for requests with bodies
CVE-2026-64648
## Impact A server-side `fetch` with a request body may return a cached **response** body from a different request to t
PLANET VDR-300NU ADSL Router - 未授权修改DNS
PLANET VDR-300NU ADSL Router - 未授权修改DNS
Acknowledgements
Acknowledgements
【EdgeOne】CNAME 域名生成规则调整公告
【EdgeOne】CNAME 域名生成规则调整公告
SyzParam: Incorporating Runtime Parameters into Kernel Driver Fuzzing.
本文针对Linux内核驱动模糊测试中一个被忽视的维度——运行时参数——进行了系统性研究。Linux内核采用宏内核架构，所有组件运行在统一地址空间，其中设备驱动代码占比超过一半，但也是漏洞高发区。已有研究主要通过系统调用和硬件中断对驱动进行模