Chrome Beta for Android Update
Hi everyone! We've just released Chrome Beta 155 (155.0.8059.4) for Android. It's now available on Google Play.You can s
2026-09-18 归档
今日共收录 2436 条安全情报，包含 1258 个 CVE，779 篇安全通告，以及 100 篇研究论文。
← 返回归档列表Chrome for Android Update
Hello Everyone! We've just released Chrome 154 (154.0.8037.49) for Android to a small percentage of users. It'll become
【大模型服务平台 TokenHub】&【智能体开发平台 ADP】& 【云开发 CloudBase】 关于腾讯云 GLM-5v-Turbo 模型下线及切换升级的通知
【大模型服务平台 TokenHub】&【智能体开发平台 ADP】& 【云开发 CloudBase】 关于腾讯云 GLM-5v-Turbo 模型下线及切换升级的通知
Chrome for Android Update
Hi, everyone! We've just released Chrome 153 (153.0.8010.52) for Android. It'll become available on Google Play over
Dev Channel Update for ChromeOS / ChromeOS Flex
The Dev channel is being updated to OS version 16820.2.0 (Browser version 155.0.8059.0) for most ChromeOS devices. If yo
Stable Channel Update for ChromeOS / ChromeOS Flex
The Stable channel is being updated to OS version 16765.49.0 (Browser version 152.0.7977.129) for most ChromeOS devices.
Firewall for AI
Firewall for AI
Critical Check Point Management Flaw Lets Unauthenticated Attackers Run Code as Root
A critical vulnerability in Check Point's Security Management and Log Servers could allow an attacker without login cred
The OAKlouds developed by HGiga has a Insecure Deserialization vulnerability. Unauthenticated...
CVE-2026-93467
The OAKlouds developed by HGiga has a Insecure Deserialization vulnerability. Unauthenticated remote attackers can execu
The Photos app's filter-based "smart albums" build their file listing using the search...
CVE-2026-82985
The Photos app's filter-based "smart albums" build their file listing using the search configuration (photosSourceFolder
Circles' remote-instance signature verification fetches the attacker-supplied keyId URL before...
CVE-2026-77164
Circles' remote-instance signature verification fetches the attacker-supplied keyId URL before trust in the remote insta
NASA CryptoLib 1.5.0 contains an authentication downgrade vulnerability in the Telecommand (TC)...
CVE-2026-79954
NASA CryptoLib 1.5.0 contains an authentication downgrade vulnerability in the Telecommand (TC) receive path. The receiv
Aureus ERP through 1.6.0 stores the Payment Term note field unsanitized and renders it as raw...
CVE-2026-93454
Aureus ERP through 1.6.0 stores the Payment Term note field unsanitized and renders it as raw HTML in the Accounting plu
Authentication bypass by spoofing in Microsoft Fabric allows an unauthorized attacker to elevate...
CVE-2026-69843
Authentication bypass by spoofing in Microsoft Fabric allows an unauthorized attacker to elevate privileges over a netwo
Insufficient verification of data authenticity in Azure Billing allows an unauthorized attacker...
CVE-2026-62874
Insufficient verification of data authenticity in Azure Billing allows an unauthorized attacker to elevate privileges ov
Improper neutralization of special elements in output used by a downstream component ('injection'...
CVE-2026-87701
Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Cosmos DB al
Improper authorization in Azure Database for PostgreSQL allows an authorized attacker to elevate...
CVE-2026-85878
Improper authorization in Azure Database for PostgreSQL allows an authorized attacker to elevate privileges over a netwo
Authorization bypass through user-controlled key in Microsoft Container Registry allows an...
CVE-2026-69865
Authorization bypass through user-controlled key in Microsoft Container Registry allows an unauthorized attacker to elev
Improper neutralization of special elements used in a command ('command injection') in M365...
CVE-2026-85885
Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an authorized
Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic...
CVE-2026-70200
Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorize