2026-07-30 归档

今日共收录 1598 条安全情报，包含 743 个 CVE，444 篇安全通告，以及 115 篇研究论文。

漏洞预警2026-07-30 发布INFO

Inappropriate implementation in Media in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Ch...

CVE-2026-17994

Inappropriate implementation in Media in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to by

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-07-30 发布INFO

Race in Updater in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacker to perform privilege escalation via a malicious file. (Chromium security severity: Low)

CVE-2026-17993

Race in Updater in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacker to perform privilege escalat

历史摘要 · 未重新核验 · NVD

#cve #cwe-362

漏洞预警2026-07-30 发布INFO

Uninitialized Use in Skia in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a craf...

CVE-2026-17992

Uninitialized Use in Skia in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker to obtain potenti

历史摘要 · 未重新核验 · NVD

#cve #cwe-457

漏洞预警2026-07-30 发布INFO

Insufficient validation of untrusted input in AI in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perfor...

CVE-2026-17991

Insufficient validation of untrusted input in AI in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who h

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-07-30 发布INFO

Insufficient validation of untrusted input in WebAuthn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially ...

CVE-2026-17990

Insufficient validation of untrusted input in WebAuthn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-07-30 发布INFO

Type Confusion in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security sev...

CVE-2026-17989

Type Confusion in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside

历史摘要 · 未重新核验 · NVD

#cve #cwe-843

漏洞预警2026-07-30 发布INFO

Insufficient validation of untrusted input in Navigation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to bypass nav...

CVE-2026-17988

Insufficient validation of untrusted input in Navigation in Google Chrome prior to 151.0.7922.72 allowed a remote attack

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-07-30 发布INFO

Insufficient validation of untrusted input in Notifications in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potenti...

CVE-2026-17987

Insufficient validation of untrusted input in Notifications in Google Chrome prior to 151.0.7922.72 allowed a remote att

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-07-30 发布INFO

Insufficient policy enforcement in Bluetooth in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to bypass same origin pol...

CVE-2026-17986

Insufficient policy enforcement in Bluetooth in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had c

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-07-30 发布INFO

Insufficient policy enforcement in Speech in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromium security ...

CVE-2026-17985

Insufficient policy enforcement in Speech in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass si

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-07-30 发布INFO

Inappropriate implementation in Browser in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to leak cross-origin data via a crafted HTML page. (Chromium ...

CVE-2026-17984

Inappropriate implementation in Browser in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to l

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-07-30 发布INFO

Inappropriate implementation in Global Media Controls in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium...

CVE-2026-17983

Inappropriate implementation in Global Media Controls in Google Chrome prior to 151.0.7922.72 allowed a remote attacker

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-07-30 发布INFO

Insufficient validation of untrusted input in Cast in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chrom...

CVE-2026-17982

Insufficient validation of untrusted input in Cast in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-07-30 发布INFO

Inappropriate implementation in Blink in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security sev...

CVE-2026-17981

Inappropriate implementation in Blink in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-or

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-07-30 发布INFO

Inappropriate implementation in UI in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cr...

CVE-2026-17980

Inappropriate implementation in UI in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who conv

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-07-30 发布INFO

Race in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-17979

Race in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox

历史摘要 · 未重新核验 · NVD

#cve #cwe-362

漏洞预警2026-07-30 发布INFO

Side-channel information leakage in WebCodecs in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory v...

CVE-2026-17978

Side-channel information leakage in WebCodecs in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtai

历史摘要 · 未重新核验 · NVD

#cve #cwe-1300

漏洞预警2026-07-30 发布INFO

Policy bypass in CSS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-17977

Policy bypass in CSS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a c

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-07-30 发布INFO

Insufficient policy enforcement in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to bypass discret...

CVE-2026-17976

Insufficient policy enforcement in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-07-30 发布INFO

Inappropriate implementation in IME in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via ...

CVE-2026-17975

Inappropriate implementation in IME in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker to obtain p

历史摘要 · 未重新核验 · NVD

#cve