2026-07-30 归档

今日共收录 1598 条安全情报，包含 743 个 CVE，444 篇安全通告，以及 115 篇研究论文。

漏洞预警2026-07-30 发布INFO

Use after free in Views in Google Chrome on Linux prior to 151.0.7922.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium secu...

CVE-2026-17894

Use after free in Views in Google Chrome on Linux prior to 151.0.7922.72 allowed a remote attacker to potentially exploi

历史摘要 · 未重新核验 · NVD

#cve #cwe-416

漏洞预警2026-07-30 发布INFO

Insufficient validation of untrusted input in Updater in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potent...

CVE-2026-17893

Insufficient validation of untrusted input in Updater in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote at

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-07-30 发布INFO

Inappropriate implementation in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a cra...

CVE-2026-17892

Inappropriate implementation in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potent

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-07-30 发布INFO

Use after free in ANGLE in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox es...

CVE-2026-17891

Use after free in ANGLE in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised

历史摘要 · 未重新核验 · NVD

#cve #cwe-416

漏洞预警2026-07-30 发布INFO

Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially ...

CVE-2026-17890

Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-07-30 发布INFO

Uninitialized Use in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-17889

Uninitialized Use in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data v

历史摘要 · 未重新核验 · NVD

#cve #cwe-457

漏洞预警2026-07-30 发布INFO

Insufficient validation of untrusted input in WebUI in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via malicious netwo...

CVE-2026-17888

Insufficient validation of untrusted input in WebUI in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-07-30 发布INFO

Use after free in TabStrip in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap c...

CVE-2026-17887

Use after free in TabStrip in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who convinced a user to eng

历史摘要 · 未重新核验 · NVD

#cve #cwe-416

漏洞预警2026-07-30 发布INFO

Use after free in Enterprise in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security...

CVE-2026-17886

Use after free in Enterprise in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially exploit he

历史摘要 · 未重新核验 · NVD

#cve #cwe-416

漏洞预警2026-07-30 发布INFO

Inappropriate implementation in Paint in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security sev...

CVE-2026-17885

Inappropriate implementation in Paint in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-or

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-07-30 发布INFO

Object lifecycle issue in WebRTC in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium secu...

CVE-2026-17884

Object lifecycle issue in WebRTC in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially exploi

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-07-30 发布INFO

Inappropriate implementation in Headless in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium securi...

CVE-2026-17883

Inappropriate implementation in Headless in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass sam

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-07-30 发布INFO

Policy bypass in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to bypass site isolation via a craf...

CVE-2026-17882

Policy bypass in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-07-30 发布INFO

Integer overflow in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium securit...

CVE-2026-17881

Integer overflow in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code in

历史摘要 · 未重新核验 · NVD

#cve #cwe-416

漏洞预警2026-07-30 发布INFO

Inappropriate implementation in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security ...

CVE-2026-17880

Inappropriate implementation in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-07-30 发布INFO

Inappropriate implementation in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security ...

CVE-2026-17879

Inappropriate implementation in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-07-30 发布INFO

Inappropriate implementation in CSS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromi...

CVE-2026-17878

Inappropriate implementation in CSS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrar

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-07-30 发布INFO

Inappropriate implementation in Chromoting in Google Chrome on Linux prior to 151.0.7922.72 allowed a local attacker to perform OS-level privilege escalation via malicious netwo...

CVE-2026-17877

Inappropriate implementation in Chromoting in Google Chrome on Linux prior to 151.0.7922.72 allowed a local attacker to

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-07-30 发布INFO

Inappropriate implementation in Payments in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security ...

CVE-2026-17876

Inappropriate implementation in Payments in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-07-30 发布INFO

Use after free in PDFium in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file. (Chromium security ...

CVE-2026-17875

Use after free in PDFium in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code ins

历史摘要 · 未重新核验 · NVD

#cve #cwe-416