Chromium: CVE-2026-13282 Use after free in AdFilter
CVE-2026-13282
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
2026-07-30 归档
今日共收录 1598 条安全情报，包含 743 个 CVE，444 篇安全通告，以及 115 篇研究论文。
← 返回归档列表RAGuard: A Layered Defense Framework for Retrieval-Augmented Generation Systems Against Data Poisoning
检索增强生成（RAG）系统通过外部语料库为大型语言模型（LLM）提供事实支撑，但这也引入了新的攻击面：攻击者可向语料库注入恶意文本来操控检索结果，从而导致LLM生成错误或有害的内容。本文提出了RAGuard，一种针对RAG管道中“事实性”语
Does Runtime Topology Context Improve LLM-Generated Kubernetes Security Patches?
该论文聚焦于Kubernetes集群安全修复的自动化问题。现有的大语言模型（LLM）辅助安全修复系统通常仅依赖孤立的KSPM扫描结果，忽略了运行时服务依赖关系，导致生成的配置补丁可能破坏集群中正在运行的服务，例如意外切断调用链或导致下游调用
Stable Channel Update for Desktop
CVE-2026-17668 · CVE-2026-17663 · CVE-2026-17656 · CVE-2026-17651 · CVE-2026-17674 · CVE-2026-17660 · CVE-2026-17675 · CVE-2026-17657 · CVE-2026-17671 · CVE-2026-17678 · CVE-2026-17673 · CVE-2026-17650 · CVE-2026-17677 · CVE-2026-17676 · CVE-2026-17659 · CVE-2026-17664 · CVE-2026-17665 · CVE-2026-17658 · CVE-2026-17661 · CVE-2026-17653 · CVE-2026-17680 · CVE-2026-17655 · CVE-2026-17667 · CVE-2026-17652 · CVE-2026-17662 · CVE-2026-17679 · CVE-2026-17666 · CVE-2026-17670 · CVE-2026-17672 · CVE-2026-17669 · CVE-2026-17654
The Stable channel has been updated to 151.0.7922.71/.72 for Windows and Mac and 151.0.7922.71 for Linux, which will ro
Care Everywhere Gateway 14.3.10 contains a hard-coded credentials vulnerability in the bundled WildFly 8.2.0.Final management interface that allows unauthenticated remote attack...
CVE-2026-41939
Care Everywhere Gateway 14.3.10 contains a hard-coded credentials vulnerability in the bundled WildFly 8.2.0.Final manag
PLANET VDR-300NU ADSL Router - 未授权修改DNS
PLANET VDR-300NU ADSL Router - 未授权修改DNS
Acknowledgements
Acknowledgements
The Persian Elementor (المنتور فارسی) plugin for WordPress is vulnerable to Price Manipulation in all versions up to, and including, 2.8.1. This is due to the plugin trusting a ...
CVE-2026-1982
CVE-2026-1982 影响 WordPress 插件 Persian Elementor（المنتور فارسی）所有版本（包括 2.8.1）。该插件在集成 ZarinPal 支付网关时，未对用户提交的 'amount' 参数进行
Firewall for AI
Firewall for AI
Russian hackers exploit Exchange OWA zero-day for long-term mailbox access
The Russian state-sponsored hacking group Laundry Bear, also known as Void Blizzard, is exploiting an Exchange Outlook W
Inappropriate implementation in Browser in Google Chrome on Mac prior to 151.0.7922.72 allowed a...
CVE-2026-17996
Inappropriate implementation in Browser in Google Chrome on Mac prior to 151.0.7922.72 allowed a local attacker to bypas
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72...
CVE-2026-18011
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a local attacker t
Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could...
CVE-2026-48449
Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code
Inappropriate implementation in Input in Google Chrome on Android prior to 151.0.7922.72 allowed...
CVE-2026-18007
Inappropriate implementation in Input in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to pe
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72...
CVE-2026-18013
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72...
CVE-2026-18003
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker
Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72...
CVE-2026-18016
Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attack
Incorrect security UI in UI in Google Chrome on Android prior to 151.0.7922.72 allowed a remote...
CVE-2026-17964
Incorrect security UI in UI in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to perform doma
Inappropriate implementation in Media in Google Chrome on Android prior to 151.0.7922.72 allowed...
CVE-2026-17994
Inappropriate implementation in Media in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to by
Inappropriate implementation in Browser in Google Chrome on Android prior to 151.0.7922.72...
CVE-2026-17984
Inappropriate implementation in Browser in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to l