今日共收录 2620 条安全情报，包含 1789 个 CVE，446 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2026-91719
Code injection in XML in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to bypass web origin policy via
CVE-2026-91718
Use after free in Core in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outsi
CVE-2026-91717
Missing authorization in Android in Google Chrome on on Android prior to 153.0.8010.47 allowed a local attacker to obtai
CVE-2026-91716
Use after free in Auth in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outsi
CVE-2026-91715
Type confusion in ServiceWorker in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary c
CVE-2026-91714
Observable discrepancy in Fonts in Google Chrome prior to 153.0.8010.47 allowed a remote attacker leveraging social engi
CVE-2026-91713
Missing authorization in Browser in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised t
CVE-2026-91712
Race condition in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who had comprom
CVE-2026-91711
Out of bounds write in ServiceWorker in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitr
CVE-2026-91710
Use after free in WebAppInstalls in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary
CVE-2026-91709
Type confusion in ServiceWorker in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary c
CVE-2026-91708
Race condition in Network in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the rend
CVE-2026-81927
Concrete CMS before 9.5.3 contained a stored cross-site scripting vulnerability in SVG file handling. When SVG processin
CVE-2026-81926
Concrete CMS 9.4.0 through 9.5.2 did not escape colliding page paths before rendering them in the location panel's dupli
CVE-2026-79994
The guest-to-host Unix-domain socket relay in Docker Sandboxes validates that a socket path is inside an authorized work
CVE-2026-68953
The affected products are vulnerable to an authentication bypass that allows unauthenticated remote attackers to disclos
CVE-2026-68950
The affected products use hard-coded credentials, which could allow an attacker to run the ftpd service as root, providi
CVE-2026-68491
An insufficient check allowed for the overwrite of arbitrary files via a symlink.
CVE-2026-68070
The affected products are missing authentication for a critical function, which could allow an attacker to run as root a
CVE-2026-66372
The affected products use insufficiently random values, which allows web session tokens to be predictable, bounding toke