2026-09-30 归档

今日共收录 1598 条安全情报,包含 728 个 CVE,467 篇安全通告,以及 100 篇研究论文。

← 返回归档列表
漏洞预警2026-09-29 发布INFO

Use after free in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a cra...

CVE-2026-95373

Use after free in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineeri

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Use after free in Chromecast in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code out...

CVE-2026-95372

Use after free in Chromecast in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the r

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Missing authorization in Views in Google Chrome on on Mac prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process and leveraged social engineer...

CVE-2026-95371

Missing authorization in Views in Google Chrome on on Mac prior to 154.0.8037.57 allowed a remote attacker who had compr

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Inappropriate implementation in NFC in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium sec...

CVE-2026-95370

Inappropriate implementation in NFC in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass system a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Inappropriate implementation in XML in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML...

CVE-2026-95369

Inappropriate implementation in XML in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially exe

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Incorrect authorization in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to potentially obtain cross-origin data via a...

CVE-2026-95368

Incorrect authorization in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Information leak in DataTransfer in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to o...

CVE-2026-95367

Information leak in DataTransfer in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Use of released resource in Core in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a cra...

CVE-2026-95366

Use of released resource in Core in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Type confusion in IndexedDB in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (...

CVE-2026-95365

Type confusion in IndexedDB in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arb

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Improper input validation in Passwords in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severit...

CVE-2026-95364

Improper input validation in Passwords in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to spoof UI ele

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

UI misrepresentation in FileSystem in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. ...

CVE-2026-95363

UI misrepresentation in FileSystem in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social e

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Cross-site request forgery in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted ...

CVE-2026-95362

Cross-site request forgery in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging soci

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Confused deputy in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. ...

CVE-2026-95361

Confused deputy in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineer

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Race condition in Editing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page...

CVE-2026-95360

Race condition in Editing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineerin

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Uninitialized resource in GPU in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to read memory outside the...

CVE-2026-95359

Uninitialized resource in GPU in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker who had co

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Incorrect authorization in Mobile in Google Chrome on on Android prior to 154.0.8037.57 allowed a local attacker to bypass system access restrictions into a privileged page via ...

CVE-2026-95358

Incorrect authorization in Mobile in Google Chrome on on Android prior to 154.0.8037.57 allowed a local attacker to bypa

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Incorrect authorization in Navigation in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute...

CVE-2026-95355

Incorrect authorization in Navigation in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker who ha

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Use after free in Verifier in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outsi...

CVE-2026-95354

Use after free in Verifier in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the ren

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Use after free in Bindings in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium secu...

CVE-2026-95353

Use after free in Bindings in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code i

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Incorrect authorization in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chr...

CVE-2026-95352

Incorrect authorization in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social

历史摘要 · 未重新核验 · NVD