今日共收录 1979 条安全情报，包含 1214 个 CVE，387 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2026-106382
Use after free in Chromecast in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code
CVE-2026-106375
Incomplete cleanup in Dawn in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbi
CVE-2026-106372
Incorrect authorization in UI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute a
CVE-2026-106358
Use after free in Navigation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code
CVE-2026-106329
Incorrect authorization in FileSystem in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging socia
CVE-2026-106323
Missing authorization in Chrome for iOS in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leve
CVE-2026-106298
Use after free in Chrome Tabs in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to potentially
CVE-2026-106281
Use after free in Tint in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrar
CVE-2026-106241
Incorrect authorization in Search in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker levera
CVE-2026-106239
Integer overflow in WebGL in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to potentially
CVE-2026-106234
Use after free in Network in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineerin
CVE-2026-106227
Use after free in Core in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outsi
CVE-2026-106211
Use after free in TabStrip in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineeri
CVE-2026-106197
Use after free in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code ou
CVE-2026-102322
Incorrect Authorization in SiteIsolation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute ar
CVE-2026-106102
Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to 2.22.0, the SSR-only getH
CVE-2026-105859
Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions befo
CVE-2026-105857
Payload is a free and open source headless content management system. In @payloadcms/plugin-form-builder versions before
CVE-2026-104070
The Crayons plugin for SPIP before 3.5.0 contains a missing authorization vulnerability that allows unauthenticated atta
CVE-2026-67273
Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Improper Neutralization of Special Elements Used