Chrome for Android Update
Hi, everyone! We've just released Chrome 151 (151.0.7922.83) for Android. It'll become available on Google Play over
2026-08-07 归档
今日共收录 1483 条安全情报，包含 647 个 CVE，430 篇安全通告，以及 120 篇研究论文。
← 返回归档列表Missing authorization in Microsoft Teams allows an unauthorized attacker to elevate privileges...
CVE-2026-65667
Missing authorization in Microsoft Teams allows an unauthorized attacker to elevate privileges over a network.
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an unauthorized attacker...
CVE-2026-70332
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing ov
Missing authentication for critical function in Microsoft Planetary Computer Pro allows an...
CVE-2026-63508
Missing authentication for critical function in Microsoft Planetary Computer Pro allows an unauthorized attacker to elev
Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over...
CVE-2026-62830
Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network.
Improper authentication in Microsoft Teams allows an authorized attacker to elevate privileges...
CVE-2026-62896
Improper authentication in Microsoft Teams allows an authorized attacker to elevate privileges over a network.
'.../...//' in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to...
CVE-2026-59115
'.../...//' in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate privileges ove
Improper access control in Azure Logic Apps allows an authorized attacker to disclose information...
CVE-2026-56161
Improper access control in Azure Logic Apps allows an authorized attacker to disclose information over a network.
Improper authorization in Microsoft Power Apps allows an unauthorized attacker to elevate...
CVE-2026-59118
Improper authorization in Microsoft Power Apps allows an unauthorized attacker to elevate privileges over a network.
Deserialization of untrusted data in Azure Service Bus allows an authorized attacker to execute...
CVE-2026-50515
Deserialization of untrusted data in Azure Service Bus allows an authorized attacker to execute code over a network.
Improper verification of cryptographic signature in Microsoft 365 Admin Center allows an...
CVE-2026-62873
Improper verification of cryptographic signature in Microsoft 365 Admin Center allows an unauthorized attacker to elevat
AIL Framework contains a stored cross-site scripting vulnerability in the crawler domain view....
CVE-2026-71446
AIL Framework contains a stored cross-site scripting vulnerability in the crawler domain view. Crawled URLs were embedde
AIL Project contains a stored cross-site scripting vulnerability in the translation controls...
CVE-2026-71447
AIL Project contains a stored cross-site scripting vulnerability in the translation controls displayed for chat messages
Improper authentication in Azure SQL Database allows an unauthorized attacker to elevate...
CVE-2026-56162
Improper authentication in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network.
Modification of assumed-immutable data (maid) in Azure Active Directory allows an authorized...
CVE-2026-50481
Modification of assumed-immutable data (maid) in Azure Active Directory allows an authorized attacker to elevate privile
llama.cpp builds b1886 through b7445 contain a race condition use-after-free vulnerability in the...
CVE-2026-70640
llama.cpp builds b1886 through b7445 contain a race condition use-after-free vulnerability in the LLaMA-Android JNI wrap
llama.cpp builds b1886 through b7445 contain an integer overflow vulnerability in the LLaMA...
CVE-2026-70638
llama.cpp builds b1886 through b7445 contain an integer overflow vulnerability in the LLaMA-Android JNI wrapper where th
AIL Framework contained a reflected cross-site scripting vulnerability in the /tag/add_tags...
CVE-2026-71445
AIL Framework contained a reflected cross-site scripting vulnerability in the /tag/add_tags endpoint. When an error occu
llama.cpp builds b1886 through b7445 contain a null pointer dereference vulnerability in the...
CVE-2026-70639
llama.cpp builds b1886 through b7445 contain a null pointer dereference vulnerability in the LLaMA-Android JNI wrapper w
FFmpeg versions from 3.0 up to, but not including, 9.0 contain an uninitialized heap memory read...
CVE-2026-70630
FFmpeg versions from 3.0 up to, but not including, 9.0 contain an uninitialized heap memory read vulnerability in the na