2026-09-30 归档

今日共收录 1598 条安全情报,包含 728 个 CVE,467 篇安全通告,以及 100 篇研究论文。

← 返回归档列表
漏洞预警2026-09-29 发布INFO

Uninitialized resource in GPU in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a...

CVE-2026-95324

Uninitialized resource in GPU in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

UI misrepresentation in Chromium in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to spoof address bar via a crafted HTM...

CVE-2026-95323

UI misrepresentation in Chromium in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker leveraging

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Out of bounds write in GPU in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to execute arbitrary code out...

CVE-2026-95322

Out of bounds write in GPU in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker who had compr

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

UI misrepresentation in Payments in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security...

CVE-2026-95321

UI misrepresentation in Payments in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to spoo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Missing authorization in Navigation in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to spoof address bar via a crafted...

CVE-2026-95320

Missing authorization in Navigation in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromise

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Use after free in Printing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outsi...

CVE-2026-95319

Use after free in Printing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the ren

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Incorrect authorization in MediaCapture in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a crafted...

CVE-2026-95317

Incorrect authorization in MediaCapture in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging soc

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Unchecked return value in Performance in Google Chrome prior to 154.0.8037.57 allowed a local attacker to potentially read memory via a local program. (Chromium security severit...

CVE-2026-95316

Unchecked return value in Performance in Google Chrome prior to 154.0.8037.57 allowed a local attacker to potentially re

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Use after free in Aura in Google Chrome prior to 154.0.8037.57 allowed a local attacker to potentially execute arbitrary code outside the sandbox via UI Interaction. (Chromium s...

CVE-2026-95315

Use after free in Aura in Google Chrome prior to 154.0.8037.57 allowed a local attacker to potentially execute arbitrary

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Incorrect authorization in HID in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions vi...

CVE-2026-95314

Incorrect authorization in HID in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Information leak in Passwords in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafte...

CVE-2026-95312

Information leak in Passwords in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

UI misrepresentation in Mobile in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security sever...

CVE-2026-95309

UI misrepresentation in Mobile in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker to spoof UI e

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Integer overflow in Metrics in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially read memory outside the san...

CVE-2026-95308

Integer overflow in Metrics in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the re

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

UI misrepresentation in ExtensionsMenu in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML pa...

CVE-2026-95307

UI misrepresentation in ExtensionsMenu in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging soci

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Type confusion in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security s...

CVE-2026-95306

Type confusion in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

UI misrepresentation in Chromoting in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to spoof UI elements via crafted network traff...

CVE-2026-95305

UI misrepresentation in Chromoting in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social e

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Out of bounds write in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium secur...

CVE-2026-95304

Out of bounds write in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code in

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Incomplete cleanup in SmartCard in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafte...

CVE-2026-95303

Incomplete cleanup in SmartCard in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Incorrect authorization in WebAPKs in Google Chrome on on Android prior to 154.0.8037.57 allowed a local attacker to obtain cross-origin data via a co-installed app. (Chromium s...

CVE-2026-95302

Incorrect authorization in WebAPKs in Google Chrome on on Android prior to 154.0.8037.57 allowed a local attacker to obt

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Missing authorization in Extensions in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a cra...

CVE-2026-95301

Missing authorization in Extensions in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromise

历史摘要 · 未重新核验 · NVD