2026-09-30 归档

今日共收录 1598 条安全情报,包含 728 个 CVE,467 篇安全通告,以及 100 篇研究论文。

← 返回归档列表
漏洞预警2026-09-29 发布INFO

Use after free in Views in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox ...

CVE-2026-95351

Use after free in Views in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the render

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Use after free in Bluetooth in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outs...

CVE-2026-95348

Use after free in Bluetooth in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the re

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

UI misrepresentation in Chromoting in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to spoof UI elements via crafted network traffic. (Chromium security severit...

CVE-2026-95346

UI misrepresentation in Chromoting in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to spoof UI element

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Use after free in Actor in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium securit...

CVE-2026-95345

Use after free in Actor in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code insi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Race condition in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass site isolation via a crafted Chrome extensio...

CVE-2026-95344

Race condition in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineeri

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Use after free in WebAudio in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium secu...

CVE-2026-95343

Use after free in WebAudio in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code i

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Missing authorization in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-95342

Missing authorization in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass web origin polic

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Improper input validation in Desktop in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary ...

CVE-2026-95341

Improper input validation in Desktop in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromis

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Incorrect authorization in PictureInPicture in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass web origin policy via a cra...

CVE-2026-95340

Incorrect authorization in PictureInPicture in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Use after free in PDFium in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted PDF file. (Chromium securit...

CVE-2026-95338

Use after free in PDFium in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code ins

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

UI misrepresentation in Messages in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to potentially spoof UI elements v...

CVE-2026-95337

UI misrepresentation in Messages in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker leverag

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Information leak in Transactions Platform in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to obtain sensitive information via a c...

CVE-2026-95336

Information leak in Transactions Platform in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging s

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Use after free in HID in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside th...

CVE-2026-95335

Use after free in HID in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Incorrect reference resolution in WebProtect in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute ar...

CVE-2026-95334

Incorrect reference resolution in WebProtect in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had c

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Use after free in Metrics in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. (Chromium ...

CVE-2026-95333

Use after free in Metrics in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code ou

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Use of uninitialized variable in Tint in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page....

CVE-2026-95332

Use of uninitialized variable in Tint in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Improper state validation in Downloads in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium ...

CVE-2026-95330

Improper state validation in Downloads in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass syste

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Confused deputy in Mobile in Google Chrome on on Android prior to 154.0.8037.57 allowed a local attacker leveraging social engineering to obtain sensitive information via a co-i...

CVE-2026-95328

Confused deputy in Mobile in Google Chrome on on Android prior to 154.0.8037.57 allowed a local attacker leveraging soci

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Information leak in Networking in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severi...

CVE-2026-95327

Information leak in Networking in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to leak sensitive infor

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Incomplete cleanup in Bluetooth in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafte...

CVE-2026-95326

Incomplete cleanup in Bluetooth in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engi

历史摘要 · 未重新核验 · NVD