Out of bounds write in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a...
CVE-2026-79240
Out of bounds write in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to potentia
2026-08-26 归档
今日共收录 1656 条安全情报，包含 834 个 CVE，420 篇安全通告，以及 108 篇研究论文。
← 返回归档列表Improper input validation in ReadingList in Google Chrome on on Windows prior to 152.0.7977.65...
CVE-2026-79243
Improper input validation in ReadingList in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker
UI misrepresentation in Navigation in Google Chrome prior to 152.0.7977.65 allowed a remote...
CVE-2026-79250
UI misrepresentation in Navigation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to spoof address ba
Improper input validation in Safebrowsing in Google Chrome prior to 152.0.7977.65 allowed a...
CVE-2026-79259
Improper input validation in Safebrowsing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass sy
Use after free in Chromoting in Google Chrome on on Windows prior to 152.0.7977.65 allowed a...
CVE-2026-79247
Use after free in Chromoting in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had com
Incomplete cleanup in GetUserMedia in Google Chrome prior to 152.0.7977.65 allowed a remote...
CVE-2026-79265
Incomplete cleanup in GetUserMedia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised
Incorrect authorization in WebXR in Google Chrome prior to 152.0.7977.65 allowed a remote...
CVE-2026-79258
Incorrect authorization in WebXR in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social eng
Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to...
CVE-2026-79257
Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outs
Incorrect authorization in Navigation in Google Chrome prior to 152.0.7977.65 allowed a remote...
CVE-2026-79237
Incorrect authorization in Navigation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web or
Information leak in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote...
CVE-2026-79252
Information leak in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-orig
JupyterHub has Unauthenticated Denial of Service via Unbounded Username Logging on Failed Login
CVE-2026-54338
### Impact Invalid input to login resulted in unbounded logging output. Only form-based Authenticators (the default PAM
icalendar has Algorithmic Complexity in Equality
CVE-2026-55099
### Summary `Component.__eq__` compares subcomponents in `O(2^n)` time relative to nesting depth. Because the parser ac
@arikusi/deepseek-mcp-server: Missing Authentication on Self-Hosted HTTP MCP Endpoint
CVE-2026-55605
## Summary The self-hosted HTTP transport of `@arikusi/deepseek-mcp-server` exposes `POST /mcp` without any authenticati
@arikusi/deepseek-mcp-server has an Authorization Bypass Through User-Controlled Key
CVE-2026-55604
# Cross-Session Data Exposure via Caller-Controlled `session_id` Project / Repository: `arikusi/deepseek-mcp-server`
consciousness-explorer / sublinear-time-solver MCP export_state has an arbitrary file write
CVE-2026-55609
### Impact An arbitrary file write vulnerability (CWE-73, External Control of File Name or Path) exists in the `consciou
Whistle vulnerable to path traversal
CVE-2026-55629
This bug was found by nova, which is an automated tool from group of Song Wu, intern, Zhejiang University; BoWang, indep
eml_parser has parser DoS via deeply nested parentheses in e-mail headers
CVE-2026-55619
### Summary `eml_parser` uses the `email.utils.getaddresses()` function from the CPython standard library to parse e-ma
gRPC Erlang package has unbounded request body accumulation in `read_full_body/3`
CVE-2026-48854
### Summary `'Elixir.GRPC.Server.Adapters.Cowboy.Handler':read_full_body/3` accumulates every received chunk into a sin
gRPC Erlang package vulnerable to Remote Code Execution with attacker-controlled gRPC payloads
CVE-2026-48853
### Summary `GRPC.Codec.Erlpack.decode/2` calls `:erlang.binary_to_term/1` directly on the raw gRPC message body withou
qwed Vulnerable to Authenticated Remote Code Execution via Unsafe SymPy `parse_expr()`
CVE-2026-55585
### Summary The `qwed` package (version 5.1.1) passes attacker-controlled input directly to SymPy's `parse_expr()` func