Use after free in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote...
CVE-2026-17967
Use after free in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to potentially
2026-07-30 归档
今日共收录 1598 条安全情报，包含 743 个 CVE，444 篇安全通告，以及 115 篇研究论文。
← 返回归档列表Incorrect security UI in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a...
CVE-2026-17965
Incorrect security UI in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perf
Inappropriate implementation in UI in Google Chrome on Android prior to 151.0.7922.72 allowed a...
CVE-2026-17980
Inappropriate implementation in UI in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who conv
Race in PictureInPicture in Google Chrome on Android prior to 151.0.7922.72 allowed a remote...
CVE-2026-17999
Race in PictureInPicture in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to perform domain
Insufficient policy enforcement in USB in Google Chrome on Android prior to 151.0.7922.72 allowed...
CVE-2026-18000
Insufficient policy enforcement in USB in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who
Uninitialized Use in WebXR in Google Chrome on Android prior to 151.0.7922.72 allowed a remote...
CVE-2026-17968
Uninitialized Use in WebXR in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to obtain potent
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72...
CVE-2026-17972
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker
Insufficient validation of untrusted input in Picture-in-Picture in Google Chrome on Android...
CVE-2026-17940
Insufficient validation of untrusted input in Picture-in-Picture in Google Chrome on Android prior to 151.0.7922.72 allo
Uninitialized Use in GPU in Google Chrome on Android prior to 151.0.7922.72 allowed a remote...
CVE-2026-17949
Uninitialized Use in GPU in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to leak cross-orig
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72...
CVE-2026-17941
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker
Inappropriate implementation in Session in Google Chrome on Android prior to 151.0.7922.72...
CVE-2026-17961
Inappropriate implementation in Session in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to
Inappropriate implementation in FullScreen in Google Chrome on Android prior to 151.0.7922.72...
CVE-2026-17938
Inappropriate implementation in FullScreen in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72...
CVE-2026-17944
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker
Insufficient policy enforcement in WebView in Google Chrome on Android prior to 151.0.7922.72...
CVE-2026-17953
Insufficient policy enforcement in WebView in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker
Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72...
CVE-2026-17960
Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attack
mathlive's Lack of Escaping of HTML allows for XSS
CVE-2026-54705
### Summary Despite the 0.104.0 patch escaping attribute-bearing constructs (`\htmlData`, `\href`), text-content reflec
Easy!Appointments disable_booking_message rendered as raw HTML on public booking page — Stored XSS
CVE-2026-52838
## Summary Easy!Appointments allows administrators to define a custom "booking disabled" message through the booking s
Easy!Appointments: Authorization bypass in Google OAuth provider binding lets any backend user rebind a peer provider's Google sync
CVE-2026-52841
### Summary `Google::oauth` at `application/controllers/Google.php:278` stores its URL-supplied `provider_id` in the se
Easy!Appointments has unauthenticated customer PII disclosure on booking reschedule page
CVE-2026-52837
## Summary The booking reschedule view at `/index.php/booking/reschedule/{appointment_hash}` (handled by `Booking::inde
Easy!Appointments Vulnerable to Appointments Takeover via Excessive Data Exposure
CVE-2026-55651
### Summary An Excessive Data Exposure vulnerability in the customers search endpoint allows an authenticated user to ob