2026-07-30 归档

今日共收录 1598 条安全情报，包含 743 个 CVE，444 篇安全通告，以及 115 篇研究论文。

漏洞预警2026-07-30 发布LOW

Side-channel information leakage in Media in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security...

CVE-2026-18019

CVE-2026-18019 是 Google Chrome 浏览器中的一个侧信道信息泄露漏洞，影响版本低于 151.0.7922.72 的 Media 组件。攻击者可以通过构造恶意的 HTML 页面，利用该漏洞泄露跨源数据。该漏洞的严重性

历史摘要 · 未重新核验 · NVD

#cve #cwe-1300

漏洞预警2026-07-30 发布LOW

Use after free in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security s...

CVE-2026-18017

CVE-2026-18017 是 Google Chrome 浏览器中 Dawn 组件的一个释放后使用（Use After Free）漏洞。Dawn 是 Chrome 用于实现 WebGPU 标准的底层图形库，负责处理 GPU 相关的渲染与

历史摘要 · 未重新核验 · NVD

#cve #cwe-416

漏洞预警2026-07-30 发布LOW

Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a malicious file. ...

CVE-2026-18014

该漏洞存在于Google Chrome浏览器的开发者工具（DevTools）组件中，影响151.0.7922.72之前的所有版本。由于DevTools在处理不可信输入时缺乏充分的验证，攻击者可以构造一个特制的恶意文件，诱使用户在DevToo

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-07-30 发布LOW

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a local attacker to obtain potentially sensitive information from process m...

CVE-2026-18011

CVE-2026-18011 是影响 Google Chrome for iOS 的一个漏洞（Google Chrome 在 iOS 上版本早于 151.0.7922.72）。该漏洞源于 Chrome 在 iOS 系统上的实现不当（Inap

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-07-30 发布INFO

Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via malicious network traffic. (Chromium secur...

CVE-2026-18010

Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform U

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-07-30 发布INFO

Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via malicious network traffic. (...

CVE-2026-18009

Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacke

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-07-30 发布INFO

Inappropriate implementation in Settings in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via malicious network traffic. (Chromium securi...

CVE-2026-18008

Inappropriate implementation in Settings in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-07-30 发布INFO

Inappropriate implementation in Input in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium secu...

CVE-2026-18007

Inappropriate implementation in Input in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to pe

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-07-30 发布INFO

Inappropriate implementation in Google Lens in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via...

CVE-2026-18006

Inappropriate implementation in Google Lens in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had co

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-07-30 发布INFO

Inappropriate implementation in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a cra...

CVE-2026-18005

Inappropriate implementation in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potent

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-07-30 发布INFO

Insufficient policy enforcement in Speech in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data vi...

CVE-2026-18004

Insufficient policy enforcement in Speech in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had comp

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-07-30 发布INFO

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium...

CVE-2026-18003

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-07-30 发布INFO

Insufficient validation of untrusted input in Google Lens in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potential...

CVE-2026-18002

Insufficient validation of untrusted input in Google Lens in Google Chrome prior to 151.0.7922.72 allowed a remote attac

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-07-30 发布INFO

Inappropriate implementation in WebGL in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a cra...

CVE-2026-18001

Inappropriate implementation in WebGL in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potent

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-07-30 发布INFO

Insufficient policy enforcement in USB in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin...

CVE-2026-18000

Insufficient policy enforcement in USB in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-07-30 发布INFO

Race in PictureInPicture in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chromium security seve...

CVE-2026-17999

Race in PictureInPicture in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to perform domain

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-07-30 发布INFO

Incorrect security UI in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to perform UI spoofing via ...

CVE-2026-17998

Incorrect security UI in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-07-30 发布INFO

Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data vi...

CVE-2026-17997

Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had comp

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-07-30 发布INFO

Inappropriate implementation in Browser in Google Chrome on Mac prior to 151.0.7922.72 allowed a local attacker to bypass navigation restrictions via a malicious file. (Chromium...

CVE-2026-17996

Inappropriate implementation in Browser in Google Chrome on Mac prior to 151.0.7922.72 allowed a local attacker to bypas

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-07-30 发布INFO

Out of bounds read in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security ...

CVE-2026-17995

Out of bounds read in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform an out of bounds

历史摘要 · 未重新核验 · NVD

#cve #cwe-125