Use after free in Translate in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to...

CVE-2026-19145

Use after free in Translate in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code

历史摘要 · 未重新核验 · GitHub Advisory

Inappropriate implementation in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote...

CVE-2026-19168

Inappropriate implementation in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitra

历史摘要 · 未重新核验 · GitHub Advisory

Use after free in Views in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote...

CVE-2026-19158

Use after free in Views in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote attacker who convinced a us

历史摘要 · 未重新核验 · GitHub Advisory

Heap buffer overflow in Base in Google Chrome prior to 151.0.7922.109 allowed an attacker who...

CVE-2026-19156

Heap buffer overflow in Base in Google Chrome prior to 151.0.7922.109 allowed an attacker who convinced a user to instal

历史摘要 · 未重新核验 · GitHub Advisory

Use after free in HTML in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to...

CVE-2026-19144

Use after free in HTML in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to potentially exploit heap co

历史摘要 · 未重新核验 · GitHub Advisory

Use after free in Extensions in Google Chrome prior to 151.0.7922.109 allowed an attacker who...

CVE-2026-19165

Use after free in Extensions in Google Chrome prior to 151.0.7922.109 allowed an attacker who convinced a user to instal

历史摘要 · 未重新核验 · GitHub Advisory

h2: Duplicate Host header could facilitate request smuggling

CVE-2026-71554

### Impact h2 <=4.4.0 accepts request header blocks containing more than one Host header, and forwards every Host header

历史摘要 · 未重新核验 · GitHub Advisory

PHP_CodeSniffer gitblame report command injection via crafted filename

CVE-2026-67434

### Impact PHP_CodeSniffer versions before v3.13.6 and v4.0.2 contain a command injection vulnerability in the code cre

历史摘要 · 未重新核验 · GitHub Advisory

node-re2: Out-of-bounds heap read in `replace`/`split` via a `Buffer` ending in a truncated multi-byte UTF-8 character → adjacent heap memory disclosed to JavaScript

CVE-2026-71498

## Summary `re2` infers a character's byte length from its UTF-8 lead byte alone, with no bound on the bytes actually r

历史摘要 · 未重新核验 · GitHub Advisory

node-re2: String.prototype.replace(re2, template) aborts the Node process (uncatchable ToLocalChecked on empty MaybeLocal) when the result exceeds V8's max string length

CVE-2026-71430

## Description `WrappedRE2::Replace` builds the replacement result and hands it to V8 with `.ToLocalChecked()` **withou

历史摘要 · 未重新核验 · GitHub Advisory

PDF.js: Arbitrary JavaScript execution upon opening a malicious PDF

CVE-2026-16633

### Impact If PDF.js is used to load a malicious PDF, and PDF.js is configured with `enableScripting` set to true (whic

历史摘要 · 未重新核验 · GitHub Advisory

jsoup: Cleaner may expose markup with custom raw-text elements

CVE-2026-71497

When a custom `Safelist` permits certain raw-text elements, jsoup may incorrectly sanitize malformed HTML containing a t

历史摘要 · 未重新核验 · GitHub Advisory

Craft CMS: Missing authorization check allows non-admin control panel users to reorder Global Sets

CVE-2026-14793

The `reorder-sets` action in Craft CMS’s `GlobalsController` is missing the `requireAdmin()` check that the adjacent `sa

历史摘要 · 未重新核验 · GitHub Advisory

league/commonmark: Quadratic-time denial of service when parsing crafted Markdown

CVE-2026-71488

### Impact Affected versions of `league/commonmark` can have quadratic time complexity when parsing specially crafted M

历史摘要 · 未重新核验 · GitHub Advisory

Silverstripe: XSS in breadcrumbs in page list view

CVE-2026-54717

### Impact Page breadcrumbs in the CMS are vulnerable to XSS when viewed using the page list view ### Reporter Fase Rai

历史摘要 · 未重新核验 · GitHub Advisory

Mermaid radar diagrams are vulnerable to DoS

CVE-2026-71439

### Impact Mermaid radar diagrams allow arbitrary large values for `ticks`, which can cause high CPU usage, freezing th

历史摘要 · 未重新核验 · GitHub Advisory

Mermaid configuration APIs allow prototype pollution

CVE-2026-71438

### Summary Mermaid's configuration setters (`mermaid.initialize`, `mermaidAPI.setConfig`, and `mermaidAPI.updateSiteCo

历史摘要 · 未重新核验 · GitHub Advisory

Mermaid allows CSS injection applying to sibling elements of the diagram

CVE-2026-50159

### Summary Mermaid does not fully restrict CSS to the rendered SVG subtree. Although selectors are prefixed with `#mer

历史摘要 · 未重新核验 · GitHub Advisory

关于Microsoft ExchangeServer存在多个...

关于Microsoft ExchangeServer存在多个...

历史摘要 · 未重新核验 · CNCERT

关于家用路由器DNS被恶意篡改导致异常跳转风险的提示

关于家用路由器DNS被恶意篡改导致异常跳转风险的提示

历史摘要 · 未重新核验 · CNCERT