Chromium: CVE-2026-19556 Use after free in V8
CVE-2026-19556
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
2026-08-15 归档
今日共收录 1312 条安全情报，包含 424 个 CVE，492 篇安全通告，以及 116 篇研究论文。
← 返回归档列表Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2026-72970
Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a net
CrowdStrike and Zscaler Bring Continuous Identity to Zero Trust Access
本文是CrowdStrike与Zscaler于2026年8月15日发布的官方博客，宣布双方合作将连续身份认证能力引入零信任访问解决方案。此次整合将CrowdStrike的端点检测与响应（EDR）数据与Zscaler的零信任安全访问相结合，使
CrowdStrike Announces Continuous Identity for AI Agents
2026年8月15日，CrowdStrike 官方博客宣布推出名为 'Continuous Identity for AI Agents' 的新功能。该功能旨在为 AI 代理（包括自动化脚本、大语言模型驱动的应用、RPA 机器人等）提供持续
Evading and crashing anti-malware solutions via data collection overloading during analysis serialization.
恶意软件分析系统（包括动态分析沙箱和数字取证与事件响应平台）依赖遥测管道（由收集代理、序列化器和数据库后端组成）来捕获程序行为并呈现给分析人员。本文揭示这些数据处理组件本身构成可利用的攻击面，攻击者无需禁用传感器或获取高权限即可触发“分析拒
Squeezing Juicy Variant Bugs Out of Modern Browsers.
本论文（arXiv 预印本）围绕现代浏览器中的“变体漏洞”（variant bugs）挖掘问题展开。变体漏洞是指同一根本缺陷在不同代码路径或不同组件中的衍生表现形式，通常由补丁不完整或修复不彻底导致。论文由 Han Zheng、Flavio
Fabric CA Developer's Guide: LDAP Injection via Unescaped Username in GetUser Filter
CVE-2026-53658
When fabric-ca is configured with an LDAP backend, the username from HTTP Basic authentication is included in an LDAP ui
Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to...
CVE-2026-72970
Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a net
francoisjacquet RosarioSIS Modules.php cross-site request forgery
CVE-2026-19786
A vulnerability was found in francoisjacquet RosarioSIS up to 12.8. This issue affects some unknown processing of the fi
francoisjacquet RosarioSIS Student Medical Medical.inc.php sql injection
CVE-2026-19785
A vulnerability has been found in francoisjacquet RosarioSIS up to 12.7.4. This vulnerability affects unknown code of th
francoisjacquet RosarioSIS Referrals.php DBUpdate authorization
CVE-2026-19784
A flaw has been found in francoisjacquet RosarioSIS up to 12.8. This affects the function DBUpdate of the file Disciplin
dromara lamp-cloud chunk-check endpoint FileChunkController.java path traversal
CVE-2026-19758
A vulnerability was determined in dromara lamp-cloud up to 5.10.0. This issue affects some unknown processing of the fil
Dromara lamp-cloud File-Upload Controller FileAnyoneController.java path traversal
CVE-2026-19757
A vulnerability was found in Dromara lamp-cloud up to 5.10.0. This vulnerability affects unknown code of the file FileAn
Dromara lamp-cloud Code Generator DefGenProjectController.java path traversal
CVE-2026-19756
A vulnerability has been found in Dromara lamp-cloud up to 5.10.0. This affects an unknown part of the file DefGenProjec
Budibase: SSO OAuth2 Token Leakage via User Metadata Endpoints to Power-Role Users
CVE-2026-73304
Budibase is an open-source low-code platform. Prior to 3.39.25, GET /api/users/metadata and GET /api/users/metadata/:id
Budibase: OIDC SSO account takeover: incoming identity linked by email without checking email_verified
CVE-2026-73302
Budibase is an open-source low-code platform. Prior to 3.39.30, the OIDC flow in packages/backend-core/src/middleware/pa
filebrowser through 2.63.16 Privilege Escalation via Signup
CVE-2026-72839
filebrowser through 2.63.16 fails to properly restrict scope and permissions when self-signup is enabled with default Cr
django-helpdesk < 2.3.3 Stored XSS via HTML Attachments
CVE-2026-73531
django-helpdesk before 2.3.3 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers
Velocity.js: Remote Code Execution via property-read to Function constructor (bypass of CVE-2026-44966 fix)
CVE-2026-73649
Velocity.js is a JavaScript implementation of the Apache Velocity template engine. Prior to 2.1.7, the earlier fix for C
SSRF via Migration Asset Downloads Bypasses hostmatcher — Reads Internal Files and Cloud Metadata
CVE-2026-34966 · CVE-2026-59765
SSRF via Migration Asset Downloads Bypasses hostmatcher — Reads Internal Files and Cloud Metadata