Chromium CVE-2026-102327: Incorrect authorization in WebView
CVE-2026-102327
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. P
2026-10-28 归档
今日共收录 2009 条安全情报，包含 1141 个 CVE，471 篇安全通告，以及 100 篇研究论文。
← 返回归档列表Chromium CVE-2026-110158: Use after free in Passwords
CVE-2026-110158
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. P
Chromium CVE-2026-106372: Incorrect authorization in UI
CVE-2026-106372
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. P
Chromium CVE-2026-106282: UI misrepresentation in WebOTP
CVE-2026-106282
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. P
CVE-2026-111497 Portfolio Status: Impact of Brotli Vulnerability (CVE-2026-111497) on Palo Alto Networks Products (Severity: CRITICAL)
CVE-2026-111497
CVE-2026-111497 Portfolio Status: Impact of Brotli Vulnerability (CVE-2026-111497) on Palo Alto Networks Products (Sever
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2026-62765
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
CVE-2026-96196
Incomplete list of disallowed inputs in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a secu
Microsoft Edge (Chromium-based) Spoofing Vulnerability
CVE-2026-88078
Microsoft Edge (Chromium-based) Spoofing Vulnerability
Microsoft Edge (Chromium-based) Spoofing Vulnerability
CVE-2026-20942
Improper restriction of rendered ui layers or frames in Microsoft Edge (Chromium-based) allows an unauthorized attacker
CrowdStrike Announces Continuous Identity for AI Agents
CrowdStrike Announces Continuous Identity for AI Agents
Asterisk: ARI setChannelVar bypasses live_dangerously and permits FILE() writes
CVE-2026-57202
Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2
Asterisk: Stack buffer overflow in res_xmpp XMPP namespace prefix handling
CVE-2026-57188
Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2
Asterisk: Possible RED T.140 Generation Accumulation OOB Write
CVE-2026-57189
Asterisk is an open source private branch exchange and telephony toolkit. In affected deployments, an authenticated atta
Asterisk: Stack Buffer Overflow in H.323 ooTrace() via Unbounded vsprintf into Fixed 2048-byte Buffer
CVE-2026-57201
Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2
Asterisk: chan_unistim DIALPAGE digit handling can overflow phone_number and crash Asterisk
CVE-2026-57194
Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2
Asterisk: Possible RED T.140 Heap Buffer Overflow
CVE-2026-57198
Asterisk is an open source private branch exchange and telephony toolkit. In affected deployments, an authenticated atta
Asterisk: Buffer over-read in Asterisk PJSIP MWI body parser
CVE-2026-57185
Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2
Asterisk: Heap Buffer Overflow in OGG/Speex File Playback (format_ogg_speex)
CVE-2026-57197
Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2
FileBrowser Quantum: Symlink following escapes user scope allowing arbitrary file read outside the served directory
CVE-2026-116682
FileBrowser Quantum is a free, self-hosted, web-based file manager. Prior to 1.5.2-stable and 2.0.1-beta, file read hand
Homebox generic notifier SSRF via HTTP redirect after URL validation
CVE-2026-116680
HomeBox is a home inventory and organization system. Prior to version 0.27.0, Homebox validates generic notifier URLs wi