Chromium CVE-2026-87597: UI misrepresentation in CustomTabs
CVE-2026-87597
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. P
2026-10-02 归档
今日共收录 1399 条安全情报，包含 504 个 CVE，518 篇安全通告，以及 100 篇研究论文。
← 返回归档列表Chromium CVE-2026-87576: Uninitialized resource in GPU
CVE-2026-87576
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. P
Chromium CVE-2026-87555: Uninitialized resource in GPU
CVE-2026-87555
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. P
Chromium CVE-2026-87552: Missing authorization in TrustedWebActivities
CVE-2026-87552
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. P
Chromium CVE-2026-87534: Missing authorization in WebView
CVE-2026-87534
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. P
Chromium CVE-2026-87522: Missing authorization in WebView
CVE-2026-87522
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. P
Chromium CVE-2026-87520: Use after free in Dawn
CVE-2026-87520
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. P
Chromium CVE-2026-87503: Inappropriate implementation in Downloads
CVE-2026-87503
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. P
Chromium CVE-2026-87488: Use after free in WebGL
CVE-2026-87488
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. P
Chromium CVE-2026-87486: Clickjacking in TrustedWebActivities
CVE-2026-87486
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. P
Chromium CVE-2026-87481: Incorrect authorization in WebView
CVE-2026-87481
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. P
CrowdStrike Announces Continuous Identity for AI Agents
CrowdStrike 于 2026-10-02 在官方博客发布 Continuous Identity for AI Agents（面向 AI 代理的持续身份）能力。该内容属于厂商产品与能力公告，而非威胁研究报告：其核心围绕 AI Age
Ghost 5.19.0 before 6.57.1 Cross-Site Request Forgery
CVE-2026-103285
Ghost versions from 5.19.0 before 6.57.1 contain a cross-site request forgery vulnerability in the post feedback functio
decolua 9Router Search Endpoint ssrfGuard.js fetch server-side request forgery
CVE-2026-103530
A vulnerability was detected in decolua 9Router up to 0.5.55. The affected element is the function fetch of the file src
Axios: Header Injection via Inherited headers After Minimal Interceptor
CVE-2026-101904
Axios: Header Injection via Inherited headers After Minimal Interceptor
Axios: Prototype-Pollution Gadget in the Default Instance Allows Inherited Object.prototype.method to Override HTTP Method
CVE-2026-101902
Axios: Prototype-Pollution Gadget in the Default Instance Allows Inherited Object.prototype.method to Override HTTP Meth
PyJWT accepts inconsistent OKP x/d JWKs, causing public/private key identity confusion
CVE-2026-102275
PyJWT accepts inconsistent OKP x/d JWKs, causing public/private key identity confusion
Fortinet warns of critical FortiMail flaw exploited in zero-day attacks
CVE-2026-104286
Fortinet is warning customers of a critical FortiMail vulnerability, tracked as CVE-2026-104286, that is being actively
Vvveb: Server-side request forgery in Vvveb via IPv6 bypass of validateUrl() in editor oEmbed proxy
CVE-2026-55232
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to version
Vvveb: Stored XSS in Vvveb via sanitizeHTML() filter bypass using a quoted greater-than character
CVE-2026-55230
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to version