今日共收录 1854 条安全情报，包含 1458 个 CVE，156 篇安全通告，以及 125 篇研究论文。
← 返回归档列表CVE-2026-119272
Out of bounds read in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to read memory inside
CVE-2026-76024
Memory corruption in MediaStream in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially read m
CVE-2026-119270
Improper input validation in CacheStorage in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potential
CVE-2026-119267
Memory corruption in DOM in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitr
CVE-2026-76028
Use after free in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code
CVE-2026-119262
Improper input validation in V8 in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute
CVE-2026-119269
Use after free in Blink in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code insi
CVE-2026-119266
Use after free in Quota in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitra
CVE-2026-119264
Memory corruption in Dawn in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbit
CVE-2026-76026
Memory corruption in Autofill in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary cod
CVE-2026-119268
Integer overflow in Editing in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arb
CVE-2026-112605
This issue was addressed with improved handling of symlinks. This issue is fixed in Xcode 27.2. An app may be able to re
CVE-2026-110133
A flaw was found in Ghostscript. When processing a specially crafted TrueType font or document embedding one, an account
CVE-2026-112602
An authorization issue was addressed with improved state management. This issue is fixed in Xcode 27.2. An app may be ab
CVE-2026-119261
Improper input validation in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execu
CVE-2026-118959
A flaw was found in the required action provider mechanism of Keycloak. The issue occurs when an authorization request i
CVE-2026-118947
A flaw was found in the UMA resource registration endpoint of the keycloak-services component, which provides the core l
CVE-2026-119260
Use after free in Frames in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code ins
CVE-2026-107238
A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) as the LocalSystem account
CVE-2026-112211
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.