2026-10-30 归档

今日共收录 1854 条安全情报,包含 1458 个 CVE,156 篇安全通告,以及 125 篇研究论文。

← 返回归档列表
漏洞预警2026-10-29 发布HIGH

IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in code.

CVE-2026-101288

IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary code due to impro

来源摘录 · NVD

漏洞预警2026-10-30 发布INFO

A web page that contains unusual WebGPU content loaded into the GPU GLES render process can trigger a OOB read and/or write crash in the GPU GLES user-space shared library. On c...

CVE-2026-74915

A web page that contains unusual WebGPU content loaded into the GPU GLES render process can trigger a OOB read and/or wr

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-30 发布INFO

Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML pag...

CVE-2026-76030

Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-30 发布LOW

A flaw was found in Eye of GNOME. When parsing a specially crafted PNG image containing malformed color profile metadata, the application fails to validate chunk boundaries whil...

CVE-2026-118475

A flaw was found in Eye of GNOME. When parsing a specially crafted PNG image containing malformed color profile metadata

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-30 发布INFO

Use after free in Input in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium securit...

CVE-2026-76031

Use after free in Input in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code insi

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-30 发布INFO

Software installed and run as a non-privileged user may conduct improper system calls to allocate physical memory. A 32-bit integer overflow in the KM driver during page-to-byte...

CVE-2026-19199

Software installed and run as a non-privileged user may conduct improper system calls to allocate physical memory. A 32-

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-30 发布LOW

A flaw was found in Ghostscript. A remote attacker could exploit this vulnerability by enticing a user to process a specially crafted PDF or PostScript document containing malic...

CVE-2026-112922

A flaw was found in Ghostscript. A remote attacker could exploit this vulnerability by enticing a user to process a spec

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-30 发布INFO

Software installed and run as a non-privileged user may conduct improper GPU system calls to free memory in still in use, replace with another allocation and cause arbitrary mem...

CVE-2026-65586

Software installed and run as a non-privileged user may conduct improper GPU system calls to free memory in still in use

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-30 发布INFO

Memory corruption in Network in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. ...

CVE-2026-76029

Memory corruption in Network in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute ar

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-30 发布INFO

On GPU systems with the security vulnerability fix for CVE-2026-49746 applied, the mapping range of graphics buffers is limited which causes errors when the mapping outside of t...

CVE-2026-74912

On GPU systems with the security vulnerability fix for CVE-2026-49746 applied, the mapping range of graphics buffers is

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-30 发布INFO

Software installed and run as a non-privileged user may conduct improper GPU system calls causing a stack overflow in the kernel. The overflow occurs when processing resolved Li...

CVE-2026-65584

Software installed and run as a non-privileged user may conduct improper GPU system calls causing a stack overflow in th

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-30 发布INFO

Software installed and run as a non-privileged user may conduct improper GPU system calls to cause race condition in hardware performance counters buffer’s destruction path lead...

CVE-2026-15466

Software installed and run as a non-privileged user may conduct improper GPU system calls to cause race condition in har

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-30 发布INFO

A web page that contains unusual WebGPU content loaded into the GPU GLES render process can trigger an OOB write in the GPU user-space driver, leading to memory corruption and p...

CVE-2026-65587

A web page that contains unusual WebGPU content loaded into the GPU GLES render process can trigger an OOB write in the

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-30 发布MEDIUM

A flaw was found in the ChunkReader component of the Undertow web server, which is used to handle chunked transfer encoding in HTTP requests. The issue occurs because a security...

CVE-2026-91920

A flaw was found in the ChunkReader component of the Undertow web server, which is used to handle chunked transfer encod

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-30 发布INFO

A web page that contains unusual GPU shader code is loaded into the GPU compiler process and can lead memory allocation failure. If the allocation failure is not properly handle...

CVE-2026-18629

A web page that contains unusual GPU shader code is loaded into the GPU compiler process and can lead memory allocation

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-30 发布INFO

Memory corruption in CacheStorage in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to read memory via a crafted HTML page. (Chromium security severity: High)

CVE-2026-76027

Memory corruption in CacheStorage in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to read memory via a

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-30 发布INFO

Use after free in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium se...

CVE-2026-76025

Use after free in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-30 发布INFO

Memory corruption in Quota in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (C...

CVE-2026-119265

Memory corruption in Quota in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbi

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-30 发布INFO

Use after free in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security...

CVE-2026-119271

Use after free in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code insid

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-30 发布INFO

Memory corruption in GarbageCollection in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted ...

CVE-2026-119263

Memory corruption in GarbageCollection in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially

来源摘录 · NVD / GitHub Advisory