iOS 26.7.2 and iPadOS 26.7.2
iOS 26.7.2 and iPadOS 26.7.2
2026-10-28 归档
今日共收录 2009 条安全情报，包含 1141 个 CVE，471 篇安全通告，以及 100 篇研究论文。
← 返回归档列表iOS 18.7.11 and iPadOS 18.7.11
iOS 18.7.11 and iPadOS 18.7.11
MFSA 2026-117Security Vulnerabilities fixed in Firefox for iOS 156.1
MFSA 2026-117Security Vulnerabilities fixed in Firefox for iOS 156.1
Chrome for Android Update
Hi, everyone! We've just released Chrome 156 (156.0.8078.73) for Android. It'll become available on Google Play ove
Beta Channel Update for ChromeOS / ChromeOS Flex
The Beta channel is being updated to OS version 16852.15.0 (Browser version 157.0.8103.23) for most ChromeOS devices.If
Chrome Stable for iOS Update
Hi everyone! We've just released Chrome Stable 157 (157.0.8103.24) for iOS; it'll become available on App Store in the n
Firewall for AI
Firewall for AI
[原创]ROP（Return-Oriented Programming）返回导向编程 · 游戏安全相关技术边界探索【2】
[原创]ROP（Return-Oriented Programming）返回导向编程 · 游戏安全相关技术边界探索【2】
The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to Stored Cross-Site...
CVE-2026-97019
The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'headlin
The Pie Register Premium plugin for WordPress is vulnerable to Unrestricted File Type Upload in...
CVE-2026-84999
The Pie Register Premium plugin for WordPress is vulnerable to Unrestricted File Type Upload in all versions up to, and
libexpat through 2.9.0 contains a NULL pointer dereference vulnerability in...
CVE-2026-117610
libexpat through 2.9.0 contains a NULL pointer dereference vulnerability in externalEntityInitProcessor2() in lib/xmlpar
nopCommerce before 5.00.0 contains a missing authorization vulnerability in the admin...
CVE-2026-117605
nopCommerce before 5.00.0 contains a missing authorization vulnerability in the admin ProductController RelatedProductAd
Linksys WAG200G through 1.01.06 contains a stored cross-site scripting vulnerability that allows...
CVE-2013-20009
Linksys WAG200G through 1.01.06 contains a stored cross-site scripting vulnerability that allows authenticated attackers
Linksys WAG200G through 1.01.06 contains a weak password change mechanism that allows attackers...
CVE-2013-20008
Linksys WAG200G through 1.01.06 contains a weak password change mechanism that allows attackers to change the administra
The Jupiter X Core plugin for WordPress is vulnerable to Authentication Bypass via the Twitter/X...
CVE-2026-106013
The Jupiter X Core plugin for WordPress is vulnerable to Authentication Bypass via the Twitter/X Social Login handler in
Use after free in Browser in Google Chrome on on Windows prior to 156.0.8078.73 allowed a remote...
CVE-2026-118330
Use after free in Browser in Google Chrome on on Windows prior to 156.0.8078.73 allowed a remote attacker to execute arb
Improper input validation in Core in Google Chrome on on Android prior to 156.0.8078.73 allowed a...
CVE-2026-118321
Improper input validation in Core in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker to pot
Improper input validation in UI in Google Chrome on on Android prior to 156.0.8078.73 allowed a...
CVE-2026-118314
Improper input validation in UI in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker to poten
Improper input validation in UI in Google Chrome on on Android prior to 156.0.8078.73 allowed a...
CVE-2026-118309
Improper input validation in UI in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker to poten
MLflow vulnerable to remote code execution on unauthenticated servers via third-party scorer deserialization importing caller-placed artifact modules
CVE-2026-116692
## Summary MLflow 3.12.0 introduced registration and deserialization support for third-party scorers in OSS MLflow. Dur