2026-10-07 归档

今日共收录 1979 条安全情报，包含 1214 个 CVE，387 篇安全通告，以及 100 篇研究论文。

漏洞预警2026-10-06 发布INFO

Incorrect authorization in Scheduling in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security s...

CVE-2026-106297

Incorrect authorization in Scheduling in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web or

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-10-06 发布INFO

Improper privilege management in UI in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restriction...

CVE-2026-106296

Improper privilege management in UI in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker leveragi

历史摘要 · 未重新核验 · NVD

#cve #cwe-269

漏洞预警2026-10-06 发布INFO

Incorrect authorization in Unbounded Element in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements via ...

CVE-2026-106295

Incorrect authorization in Unbounded Element in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had c

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-10-06 发布INFO

Incomplete cleanup in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via crafted network traffic. (C...

CVE-2026-106294

Incomplete cleanup in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to bypass s

历史摘要 · 未重新核验 · NVD

#cve #cwe-459

漏洞预警2026-10-06 发布INFO

Type confusion in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside ...

CVE-2026-106293

Type confusion in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the render

历史摘要 · 未重新核验 · NVD

#cve #cwe-843

漏洞预警2026-10-06 发布INFO

Buffer overflow in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside...

CVE-2026-106292

Buffer overflow in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the rende

历史摘要 · 未重新核验 · NVD

#cve #cwe-122

漏洞预警2026-10-06 发布INFO

Use after free in GarbageCollection in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chro...

CVE-2026-106291

Use after free in GarbageCollection in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitra

历史摘要 · 未重新核验 · NVD

#cve #cwe-416

漏洞预警2026-10-06 发布INFO

Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to read memory outside the...

CVE-2026-106290

Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had co

历史摘要 · 未重新核验 · NVD

#cve #cwe-908

漏洞预警2026-10-06 发布INFO

Missing authorization in FedCM in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity...

CVE-2026-106289

Missing authorization in FedCM in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin po

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-06 发布INFO

Missing authorization in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a craft...

CVE-2026-106288

Missing authorization in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social eng

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-06 发布INFO

Information loss in CORS in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via crafted network traffic. (Chromium security severity: ...

CVE-2026-106287

Information loss in CORS in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy v

历史摘要 · 未重新核验 · NVD

#cve #cwe-221

漏洞预警2026-10-06 发布INFO

Confused deputy in Omnibox in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via crafted network traffic. (Chromium security severity...

CVE-2026-106286

Confused deputy in Omnibox in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy

历史摘要 · 未重新核验 · NVD

#cve #cwe-441

漏洞预警2026-10-06 发布INFO

UI misrepresentation in WebAppInstalls in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a...

CVE-2026-106285

UI misrepresentation in WebAppInstalls in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging soci

历史摘要 · 未重新核验 · NVD

#cve #cwe-451

漏洞预警2026-10-06 发布INFO

Out of bounds read in Printing in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engi...

CVE-2026-106284

Out of bounds read in Printing in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker who had c

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-10-06 发布INFO

Use after free in Streaming in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code inside the sand...

CVE-2026-106283

Use after free in Streaming in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineer

历史摘要 · 未重新核验 · NVD

#cve #cwe-416

漏洞预警2026-10-06 发布INFO

UI misrepresentation in WebOTP in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-106282

UI misrepresentation in WebOTP in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements vi

历史摘要 · 未重新核验 · NVD

#cve #cwe-451

漏洞预警2026-10-06 发布INFO

Incorrect authorization in PermissionElement in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. (...

CVE-2026-106280

Incorrect authorization in PermissionElement in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potent

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-10-06 发布INFO

Incorrect reference resolution in Passwords in Google Chrome on on iOS prior to 155.0.8059.39 allowed a local attacker who had compromised the renderer process to potentially ex...

CVE-2026-106279

Incorrect reference resolution in Passwords in Google Chrome on on iOS prior to 155.0.8059.39 allowed a local attacker w

历史摘要 · 未重新核验 · NVD

#cve #cwe-706

漏洞预警2026-10-06 发布INFO

Use after free in Select in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a craft...

CVE-2026-106278

Use after free in Select in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering

历史摘要 · 未重新核验 · NVD

#cve #cwe-416

漏洞预警2026-10-06 发布INFO

Information leak in Animation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: M...

CVE-2026-106277

Information leak in Animation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak cross-origin dat

历史摘要 · 未重新核验 · NVD

#cve #cwe-200