Alert for CVE-2021-44228
CVE-2021-44228
Alert for CVE-2021-44228
2026-10-29 归档
今日共收录 3209 条安全情报，包含 2330 个 CVE，388 篇安全通告，以及 93 篇研究论文。
← 返回归档列表Linux 内核提权 CVE-2026-31431(copy-fail)
CVE-2026-31431
Linux 内核提权 CVE-2026-31431(copy-fail)
Alert for CVE-2026-35273
CVE-2026-35273
Alert for CVE-2026-35273
Alert for CVE-2026-91403
CVE-2026-91403
Alert for CVE-2026-91403
Alert for CVE-2026-114820
CVE-2026-114820
Alert for CVE-2026-114820
Stable Channel Update for Desktop
CVE-2026-118305 · CVE-2026-118306 · CVE-2026-118307 · CVE-2026-118317 · CVE-2026-118318 · CVE-2026-118320 · CVE-2026-118321 · CVE-2026-118322 · CVE-2026-118327 · CVE-2026-118328 · CVE-2026-118329 · CVE-2026-118331 · CVE-2026-118333 · CVE-2026-118336 · CVE-2026-118337 · CVE-2026-118339 · CVE-2026-118340 · CVE-2026-118344 · CVE-2026-118348 · CVE-2026-118349 · CVE-2026-118350 · CVE-2026-118351 · CVE-2026-118352 · CVE-2026-118353 · CVE-2026-118354 · CVE-2026-118355 · CVE-2026-118357 · CVE-2026-118358 · CVE-2026-118359
The Stable channel has been updated to 156.0.8078.73/.74 for Windows and Mac and 156.0.8078.73 to Linux which will roll
StatefulSet and ControllerRevision write permissions allow cross-namespace pod creation
CVE-2026-2270
StatefulSet and ControllerRevision write permissions allow cross-namespace pod creation
Tencent RapidJSON Regex stream.h Take out-of-bounds
CVE-2026-116620
Tencent RapidJSON Regex stream.h Take out-of-bounds
libdwarf through 2.3.3 Heap Out-of-Bounds Read via dwarf_debug_addr_table
CVE-2026-116732
libdwarf through 2.3.3 Heap Out-of-Bounds Read via dwarf_debug_addr_table
Tornado: Event loop blocking and excess memory use from chunked bodies with many small chunks
CVE-2026-115927
### Summary When Tornado reads an HTTP/1.1 body that uses chunked transfer encoding, it processes all chunks that have
Tornado: Quadratic CPU usage when parsing HTTP headers with line folding
CVE-2026-116577
### Summary Tornado's HTTP header parser takes quadratic time (O(n²)) when a header value is continued across many "obs
systeminformation vulnerable to Windows command injection in services() through Unicode quotation marks
CVE-2026-116576
### Summary On Windows, `systeminformation@5.33.15` builds a PowerShell command using the value passed to `services()`.
Seroval: Code injection through a typed array's own constructor property
CVE-2026-116583
### Summary seroval writes a typed array as a call to its constructor. In affected versions, the constructor name in th
Seroval: Script injection through RegExp sources in serialized output
CVE-2026-116582
### Summary seroval writes a `RegExp` as a regular expression literal. In affected versions, the `` element that the se
Seroval: fromJSON deserializer trusts node-supplied array length and sequence doneAt (unauthenticated event-loop DoS)
CVE-2026-116581
### Summary `fromJSON` and `fromCrossJSON` used two node fields without checking them. - An array node's element list
Seroval `fromJSON`/`fromCrossJSON` denial of service via unvalidated array node length
CVE-2026-116584
### Summary `fromJSON` and `fromCrossJSON` did not check that an array node's element list is an array. A small crafted
Seroval: Deserialization invokes attacker-chosen callables: AsyncIteratorFactoryInstance calls source.on(listener) without type check
CVE-2026-116580
### Summary When `fromJSON` rebuilt an async iterator, it called `on()` on the iterator's source without checking that
Mem0: Cross-tenant conversation leak via unescaped delimiter collision in session-scope key (_build_session_scope)
CVE-2026-116575
Summary _build_session_scope() in mem0/memory/main.py builds the conversation-history scope key used to fetch/store the
ONNX: Out-of-bounds read in ConvTranspose shape inference via undersized weight rank
CVE-2026-115920
## Summary ONNX ConvTranspose shape inference performed an out-of-bounds read when the weight tensor had fewer than thr
ONNX: Denial of service via unchecked expansion of packed sub-byte tensors in ONNX Python APIs
CVE-2026-115922
## Summary ONNX's Python tensor-materialization helpers could allocate memory according to attacker-controlled tensor d