Chromium CVE-2026-87615: Race condition in Payments
CVE-2026-87615
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. P
2026-09-16 归档
今日共收录 2620 条安全情报，包含 1789 个 CVE，446 篇安全通告，以及 100 篇研究论文。
← 返回归档列表Chromium CVE-2026-87614: Incorrect authorization in ServiceWorker
CVE-2026-87614
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. P
Chromium CVE-2026-87613: Incorrect reference resolution in Extensions
CVE-2026-87613
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. P
Chromium CVE-2026-87611: Missing authorization in FileSystem
CVE-2026-87611
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. P
Chromium CVE-2026-87610: Incorrect authorization in Omnibox
CVE-2026-87610
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. P
CrowdStrike Announces Continuous Identity for AI Agents
CrowdStrike 于 2026 年 9 月 16 日通过官方博客发布公告，推出面向 AI Agent（AI 代理）的持续身份（Continuous Identity）能力。该公告属于厂商产品/能力发布性质，正文摘要未包含技术实现细节、
Stable Channel Update for Desktop
CVE-2026-91748 · CVE-2026-91716 · CVE-2026-91715 · CVE-2026-91721 · CVE-2026-91728 · CVE-2026-91709 · CVE-2026-91720 · CVE-2026-91735 · CVE-2026-91737 · CVE-2026-91745 · CVE-2026-91744 · CVE-2026-91712 · CVE-2026-91710 · CVE-2026-91708 · CVE-2026-91729 · CVE-2026-91743 · CVE-2026-91749 · CVE-2026-91741 · CVE-2026-91731 · CVE-2026-91736 · CVE-2026-91724 · CVE-2026-91718 · CVE-2026-91711 · CVE-2026-91734 · CVE-2026-91726 · CVE-2026-91717 · CVE-2026-91746 · CVE-2026-91740 · CVE-2026-91727 · CVE-2026-91733 · CVE-2026-91747
The Stable channel has been updated to 153.0.8010.47/.48 for Windows and Mac and 153.0.8010.47 for Linux, which will rol
Cisco Secure Email Gateway vulnerability (CVE-2026-76461) in active exploitation
CVE-2026-76461
Categories: Threat ResearchTags: advisory, vulnerability, Cisco
A command injection vulnerability exists in the command line interface of EdgeConnect SD-WAN Gateways. Successful exploitation could allow an authenticated remote attacker with ...
CVE-2026-76675
A command injection vulnerability exists in the command line interface of EdgeConnect SD-WAN Gateways. Successful exploi
Buffer overflow vulnerabilities exist in the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated remote attacker to exe...
CVE-2026-76674
Buffer overflow vulnerabilities exist in the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways t
Vulnerabilities have been identified in the API of EdgeConnect SD-WAN Orchestrator that could potentially allow an unauthenticated remote actor to circumvent existing authentica...
CVE-2026-76673
Vulnerabilities have been identified in the API of EdgeConnect SD-WAN Orchestrator that could potentially allow an unaut
Privilege escalation vulnerabilities exist in the API of HPE Networking EdgeConnect SD-WAN Orchestrator. Successful exploitation could allow a remote low-privileged authenticate...
CVE-2026-76670
Privilege escalation vulnerabilities exist in the API of HPE Networking EdgeConnect SD-WAN Orchestrator. Successful expl
Privilege escalation vulnerabilities exist in the API of HPE Networking EdgeConnect SD-WAN Orchestrator. Successful exploitation could allow a remote low-privileged authenticate...
CVE-2026-76669
Privilege escalation vulnerabilities exist in the API of HPE Networking EdgeConnect SD-WAN Orchestrator. Successful expl
MCP Context Forge is an AI gateway, registry, and proxy for MCP, A2A, REST, and gRPC APIs. Prior to 1.0.2, the python_sandbox_server in mcp-servers/python/python_sandbox_server/...
CVE-2026-53710
MCP Context Forge is an AI gateway, registry, and proxy for MCP, A2A, REST, and gRPC APIs. Prior to 1.0.2, the python_sa
PLANET VDR-300NU ADSL Router - 未授权修改DNS
PLANET VDR-300NU ADSL Router - 未授权修改DNS
Acknowledgements
Acknowledgements
A vulnerability was found in vllm-project vLLM 0.26.0/0.27.0. Affected is the function...
CVE-2026-92220
A vulnerability was found in vllm-project vLLM 0.26.0/0.27.0. Affected is the function MoRIIOConnectorScheduler.request_
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate...
CVE-2026-85893
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.
Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to...
CVE-2026-69486
Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a net
Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in...
CVE-2026-76859
Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in the user_pass_show.cgi c