Chromium: CVE-2026-15118 Use after free in Input

CVE-2026-15118

This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

Chromium: CVE-2026-15117 Use after free in Payments

CVE-2026-15117

This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

Chromium: CVE-2026-15116 Use after free in Actor

CVE-2026-15116

This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

Chromium: CVE-2026-15114 Out of bounds read and write in Codecs

CVE-2026-15114

This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

Chromium: CVE-2026-15112 Use after free in Ozone

CVE-2026-15112

This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

Chromium: CVE-2026-15111 Use after free in Views

CVE-2026-15111

This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

Chromium: CVE-2026-15110 Use after free in Extensions

CVE-2026-15110

This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

Chromium: CVE-2026-15108 Integer overflow in Extensions API

CVE-2026-15108

This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

Chromium: CVE-2026-15107 Use after free in IndexedDB

CVE-2026-15107

This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

Chromium: CVE-2026-13282: Use after free in Payments

CVE-2026-13282 · CVE-2026-13283

This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

Chromium: CVE-2026-13282 Use after free in AdFilter

CVE-2026-13282

This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

Chromium: CVE-2026-15767 Heap buffer overflow in libyuv

CVE-2026-15767

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

Does Runtime Topology Context Improve LLM-Generated Kubernetes Security Patches?

该论文研究运行时拓扑上下文是否能提升大语言模型（LLM）生成Kubernetes安全补丁的正确性。核心问题：现有LLM驱动的安全修复系统在生成配置补丁时，仅基于单个安全发现孤立地提示模型，忽略了集群中实时的服务调用图（runtime ser

历史摘要 · 未重新核验 · arXiv cs.CR

Pivotick Prototype-Key Collision in Tree Layout and Cycle Detection Allows Graph Manipulation and Denial of Service

CVE-2026-66922

Pivotick used plain JavaScript objects as lookup tables indexed by caller-controlled graph node identifiers in its tree-

历史摘要 · 未重新核验 · OSV.dev

React Router: Open redirect via backslash in <Link> and useNavigate (CVE-2025-68470 bypass)

CVE-2026-53669

React Router is a router for React. Versions 6.0.0 through 7.17.0 are vulnerable to Open Redirtect through use of backsl

历史摘要 · 未重新核验 · OSV.dev

React Router: Open redirect can lead to XSS

CVE-2026-53668

React Router is a router for React. In versions 6.30.2 through 6.30.4 and 7.9.6 through 7.12.0, applications that allow

历史摘要 · 未重新核验 · OSV.dev

React Router: Cross-site Scripting is Possible due to Missing RSCErrorHandler Protocol Validation (Incomplete fix for CVE-2026-53667)

CVE-2026-53667

React Router is a router for React. In versions 7.11.0 through 7.17.0, the RSCErrorHandler is missing protocol validatio

历史摘要 · 未重新核验 · OSV.dev

React Router: Arbitrary Constructor Injection via deserializeErrors() in React Router SSR Hydration

CVE-2026-53666

React Router is a router for React. In versions 6.4.0 through 7.17.0, if application code was written in a way that allo

历史摘要 · 未重新核验 · OSV.dev

Next.js: Unbounded Server Action payload in Edge runtime

CVE-2026-64646

Next.js is a React framework for building full-stack web applications. In versions 13.0.0 through 15.5.20 and 16.0.0 thr

历史摘要 · 未重新核验 · OSV.dev

Next.js: Unauthenticated Disclosure of Internal Server Function endpoints

CVE-2026-64643

Next.js is a React framework for building full-stack web applications. In versions 12.0.0 through 15.5.20 and 16.0.0 thr

历史摘要 · 未重新核验 · OSV.dev