Chromium: CVE-2026-84349 Use after free in Browser
CVE-2026-84349
根据 Microsoft MSRC 公告，CVE-2026-84349 是 Chromium 项目中的一个 Use after free（释放后使用）漏洞，影响浏览器组件。该 CVE 由 Chrome 团队分配，Microsoft Edge
2026-09-04 归档
今日共收录 1362 条安全情报，包含 399 个 CVE，552 篇安全通告，以及 120 篇研究论文。
← 返回归档列表Waku: Open Redirect via `unstable_redirect` Helper
CVE-2026-49456
Waku is the minimal React framework. Prior to version 1.0.0-beta.1, the unstable_redirect() helper exported from waku/ro
ovpn: run deferred work on a module-owned workqueue
CVE-2026-80753
In the Linux kernel, the following vulnerability has been resolved: ovpn: run deferred work on a module-owned workqueue
ovpn: ensure socket is owned by ovpn before deref sk_user_data
CVE-2026-80735
In the Linux kernel, the following vulnerability has been resolved: ovpn: ensure socket is owned by ovpn before deref s
Ivanti Endpoint Manager Mobile代码注入漏洞
Ivanti Endpoint Manager Mobile代码注入漏洞
Huawei Secoway USG firewall weak password
Huawei Secoway USG firewall weak password
Missing authorization vulnerability has been discovered in 2Checkout payment gateway of WHMCS...
CVE-2026-67398
Missing authorization vulnerability has been discovered in 2Checkout payment gateway of WHMCS from 8.13.0 before 8.13.8,
An insecure Apache configuration in ConfigServer Security & Firewall maps /usr/bin as CGI...
CVE-2026-67402
An insecure Apache configuration in ConfigServer Security & Firewall maps /usr/bin as CGI programs through the Messenger
MOOS-IvP versions through 24.8.1 contain a quadratic processing vulnerability in uFldNodeComms...
CVE-2026-85446
MOOS-IvP versions through 24.8.1 contain a quadratic processing vulnerability in uFldNodeComms where each new node ident
SiYuan: Unauthenticated SQL execution and REGEXP injection via fullTextSearchAssetContent (publish mode): reader-reachable raw SQL (method 2) and unescaped REGEXP (method 3) on ...
CVE-2026-69083
**CVE:** This vulnerability corresponds to [CVE-2026-69083](https://nvd.nist.gov/vuln/detail/CVE-2026-69083). ### Summa
SiYuan: Unauthenticated arbitrary SQL execution via searchEmbedBlock (publish mode) : reader-reachable raw statement on read-write handle, cross-notebook read/write
CVE-2026-69084
**CVE:** This vulnerability corresponds to [CVE-2026-69084](https://nvd.nist.gov/vuln/detail/CVE-2026-69084). ### Summa
AI Agent Firewall Startup AIR Security Emerges From Stealth With $50 Million
AIR Security 是一家从隐秘模式中走出的新兴安全初创公司，专注于 AI Agent 防火墙领域，并宣布已获得 5000 万美元融资。据 SecurityWeek 报道，该公司的核心产品是评估 AI 技能（Skills）、插件（Pl
MOOS essential-moos through 10.0.1 contains an authentication bypass vulnerability in pShare that...
CVE-2026-85430
MOOS essential-moos through 10.0.1 contains an authentication bypass vulnerability in pShare that accepts UDP datagrams
Out of bounds write in WebGL in Google Chrome on on Android prior to 152.0.7977.82 allowed a...
CVE-2026-85050
Out of bounds write in WebGL in Google Chrome on on Android prior to 152.0.7977.82 allowed a remote attacker to execute
InverTune: A Backdoor Defense Method for Multimodal Contrastive Learning via Backdoor-Adversarial Correlation Analysis.
多模态对比学习模型（如CLIP）凭借出色的视觉-语言对齐能力，已广泛用作大规模多模态系统的核心基础组件。然而，这类模型极易遭受后门攻击：攻击者可向训练数据注入隐蔽触发器，使模型在推理时遇到特定图案便产生恶意输出，且后门效应会沿下游任务传播，
PACS: Privacy-Preserving Attribute-Driven Community Search over Attributed Graphs.
在数据驱动应用中，属性驱动社区搜索（Attribute-driven Community Search）受到越来越多的关注，其目标是在属性图上帮助用户发现满足特定结构紧密性和属性相关性的高质量子图。然而，现有方法大多未考虑搜索过程中的数据隐
BKPIR: Keyword PIR for Private Boolean Retrieval.
本文提出了一种名为 BKPIR 的新型关键词隐私信息检索（Keyword PIR）方案，旨在解决现有 Keyword PIR 方案难以支持布尔检索模型的问题。在实际应用场景中，用户往往需要通过逻辑组合（如 AND、OR、NOT）来精确表达查
Exploring Widevine for Fun and Profit.
本文针对广泛部署于数十亿设备上的闭源数字版权管理（DRM）系统 Widevine 展开内部机制研究，重点聚焦 Android 平台。研究动机在于：随着 Netflix、Prime Video 等 OTT（Over-the-Top）平台内容消
Citrix NetScaler 内存泄漏(CVE-2025-5777)
CVE-2025-5777
Citrix NetScaler 内存泄漏(CVE-2025-5777)
Chromium: CVE-2026-84359 Information leak in Skia
CVE-2026-84359
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.