adm-zip versions 0.5.14 through 0.6.0 fail to apply zlib decompression output limits when ZIP...
CVE-2026-92000
adm-zip versions 0.5.14 through 0.6.0 fail to apply zlib decompression output limits when ZIP entries declare zero uncom
2026-09-16 归档
今日共收录 2620 条安全情报，包含 1789 个 CVE，446 篇安全通告，以及 100 篇研究论文。
← 返回归档列表Use after free in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute...
CVE-2026-91745
Use after free in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside
Use after free in PDF in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to...
CVE-2026-91737
Use after free in PDF in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside
Incorrect authorization in WebUI in Google Chrome prior to 153.0.8010.47 allowed a remote...
CVE-2026-91735
Incorrect authorization in WebUI in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised t
Type confusion in CacheStorage in Google Chrome prior to 153.0.8010.47 allowed a remote attacker...
CVE-2026-91741
Type confusion in CacheStorage in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary co
Race condition in PlatformIntegration in Google Chrome on on Mac prior to 153.0.8010.47 allowed a...
CVE-2026-91744
Race condition in PlatformIntegration in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who ha
Use after free in DigitalCredentials in Google Chrome prior to 153.0.8010.47 allowed a remote...
CVE-2026-91729
Use after free in DigitalCredentials in Google Chrome prior to 153.0.8010.47 allowed a remote attacker leveraging social
QloApps through 1.7.0 reflects unescaped child feature names into back-office validation error...
CVE-2026-92234
QloApps through 1.7.0 reflects unescaped child feature names into back-office validation error messages in the Hotel Res
Race condition in Core in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had...
CVE-2026-91743
Race condition in Core in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the rendere
Use after free in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had...
CVE-2026-91747
Use after free in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the rendere
Use after free in Input in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had...
CVE-2026-91724
Use after free in Input in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the render
Race condition in WebAppInstalls in Google Chrome prior to 153.0.8010.47 allowed a remote...
CVE-2026-91723
Race condition in WebAppInstalls in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to spoof UI elements
Use after free in Auth in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to...
CVE-2026-91716
Use after free in Auth in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outsi
Incorrect reference resolution in Extensions in Google Chrome on on Mac prior to 153.0.8010.47...
CVE-2026-91727
Incorrect reference resolution in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a local attacker
Use after free in Internals in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to...
CVE-2026-91721
Use after free in Internals in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arb
Observable discrepancy in CSS in Google Chrome prior to 153.0.8010.47 allowed a remote attacker...
CVE-2026-91725
Observable discrepancy in CSS in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to leak sensitive inform
Use after free in Input in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to...
CVE-2026-91722
Use after free in Input in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitra
Uninitialized resource in ANGLE in Google Chrome prior to 153.0.8010.47 allowed a remote attacker...
CVE-2026-91720
Uninitialized resource in ANGLE in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to read memory outside
emp3r0r has an unauthenticated HTTP Polling DoS
CVE-2026-61554
### Summary The `http_poll` C2 transport accepts attacker-controlled HTTP polling sessions before CBOR `MsgAuth` authent
libp2p-quic: Remote panic via certificate expiry race during QUIC handshake
CVE-2026-61544
### Summary `libp2p-quic` can panic on an inbound QUIC handshake if a malicious peer presents a valid, short lived libp