Chromium: CVE-2026-79179 Incorrect authorization in DOM
CVE-2026-79179
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
2026-08-29 归档
今日共收录 1687 条安全情报，包含 687 个 CVE，604 篇安全通告，以及 114 篇研究论文。
← 返回归档列表Chromium: CVE-2026-79174 Incorrect authorization in Extensions
CVE-2026-79174
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-79173 UI misrepresentation in WebAppInstalls
CVE-2026-79173
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
CVE-2026-70309
Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature
Chromium: CVE-2026-79237 Incorrect authorization in Navigation
CVE-2026-79237
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
CrowdStrike and Zscaler Bring Continuous Identity to Zero Trust Access
CrowdStrike 与 Zscaler 于 2026 年 8 月宣布达成技术合作，旨在将连续身份安全能力整合到零信任访问架构中。根据官方博客标题及公开行业背景，该合作预计将 CrowdStrike Falcon 平台（以 EDR、威胁狩
CrowdStrike Announces Continuous Identity for AI Agents
2026年8月29日，CrowdStrike发布了关于“面向AI代理的持续身份（Continuous Identity for AI Agents）”的产品公告。该公告来自CrowdStrike官方博客，主要介绍其在身份安全与AI代理结合方
hwmon: (occ) unregister sysfs devices outside occ lock
CVE-2026-80660
In the Linux kernel, the following vulnerability has been resolved: hwmon: (occ) unregister sysfs devices outside occ l
A pre-authentication stack-based buffer overflow vulnerability exists in the http_gdpr_decrypt...
CVE-2026-75118
A pre-authentication stack-based buffer overflow vulnerability exists in the http_gdpr_decrypt function of TL-MR100 V3.2
org.mariadb:r2dbc-mariadb has Inappropriate Encoding for Output Context and Improper Encoding or Escaping of Output
CVE-2026-55859
### Summary The connector encodes and decodes all character data assuming the connection character set is UTF-8. A serv
org.mariadb.jdbc:mariadb-java-client has Inappropriate Encoding for Output Context
CVE-2026-55858
### Summary The connector encodes and decodes all character data assuming the connection character set is UTF-8. A serv
Quivr versions through 0.0.322 fail to validate chat ownership in the GET /chat/{chat_id}/history...
CVE-2026-82284
Quivr versions through 0.0.322 fail to validate chat ownership in the GET /chat/{chat_id}/history, DELETE /chat/{chat_id
alos-http has unauthenticated remote DoS: malformed path starting with "?" triggers out-of-bounds panic in sanitizeRequestPath, crashing entire server
CVE-2026-55484
### Summary A single unauthenticated HTTP request to a path starting with `?` (e.g. `GET ? HTTP/1.1`) crashes the entire
gitoxide before 0.37.1 HTTP Basic credential leak via URL parsing
CVE-2026-82247
gitoxide's gix-url crate (?@ so that gitoxide sends the caller's HTTP Basic Authorization credentials to an unintended h
Budibase Server before 3.41.3 SSRF via Query Import
CVE-2026-82246
Budibase Server before 3.41.3 contains a server-side request forgery vulnerability in the query import endpoint that fai
Budibase Server before 3.41.3 SSRF with Credential Leakage
CVE-2026-82243
Budibase Server before 3.41.3 contains a server-side request forgery vulnerability in the datasource verify endpoint tha
filebrowser through 2.63.23 Stale Share Link via File Rename
CVE-2026-82237
filebrowser through 2.63.23 does not remove share records when a shared file is renamed (only deletion triggers share cl
File Browser 2.63.6 through 2.63.23 Share Link Exposure via File Deletion
CVE-2026-82236
File Browser versions from 2.63.6 through 2.63.23 fail to clean up public share links when a privileged user deletes ano
filebrowser through 2.63.23 Denial of Service via named pipes
CVE-2026-82235
filebrowser through 2.63.23 fails to validate named pipes in directory archive and public download handlers, allowing at
SiYuan before v3.8.1 SSRF via DNS-Rebinding TOCTOU
CVE-2026-82234
SiYuan versions before v3.8.1 contain a server-side request forgery vulnerability in the http_request and web_fetch agen