Chromium: CVE-2026-118330 Use after free in Browser
CVE-2026-118330
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. P
2026-11-01 归档
今日共收录 398 条安全情报，包含 188 个 CVE，99 篇安全通告，以及 64 篇研究论文。
← 返回归档列表Kubeflow Pipelines: Run-log endpoint permits unauthorized access to pod logs
CVE-2026-118759
## Summary The Kubeflow Pipelines API server's `GET /apis/v1alpha1/runs/{run_id}/nodes/{node_id}/log` handler retrieves
Authlib RFC 7592 examples omit registration-access-token client binding
CVE-2026-116672
## Description ### Summary RFC 7592 (OAuth 2.0 Dynamic Client Registration Management Protocol) lets a previously regi
Forge: X.509 basicConstraints bypass in verifyCertificateChain() via deprecated extension OIDs 2.5.29.10 and 2.5.29.13
CVE-2026-119190
### Summary node-forge parses certificate extensions with the deprecated OIDs `2.5.29.10` and `2.5.29.13` as `basicConst
The Payable Payment Gateway for WooCommerce WordPress plugin before 1.3.1 does not verify the...
CVE-2026-94361
The Payable Payment Gateway for WooCommerce WordPress plugin before 1.3.1 does not verify the authenticity of an incomin
A vulnerability has been found in WAVLINK WL-WN530BE1-A V251117. Affected is the function...
CVE-2026-120198
A vulnerability has been found in WAVLINK WL-WN530BE1-A V251117. Affected is the function con_check_read_finish of the f
Forge: TLS client crash when the server sends no certificate
CVE-2026-118778
### Summary The forge TLS client's check for a missing server certificate read the wrong property and never ran. A malic
The Privacy and Security Risks of Edge LLM Optimization
Edge deployment of Large Language Models requires optimization techniques that reduce memory, computation, and energy co
Surprise Alone Learns Lies: Evidence-Gated Continual Learning for LLMs from Streaming Claims
Continual learning methods for large language models increasingly decide what to learn by surprise, keeping the inputs t
InferD: A Honeypot Framework for AI Inference Infrastructure
Large language model serving stacks, commercial inference APIs, vector databases, and agent orchestration gateways are n
Judging Before Propagation: Task-Graph Contextual Integrity for Multi-Agent Privacy
Multi-agent LLM systems increasingly rely on persistent memory and inter-agent communication. These capabilities create
Where You Inject Matters: The Trust Region Effect in LLM Agents
LLM agents are increasingly adopted in long-horizon tasks and interact with diverse external environments. Despite their
The Uncanny Toolkit for LearnDash plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 3.8.2 via the `email` parameter of the `uo_login_...
CVE-2026-119096
The Uncanny Toolkit for LearnDash plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and inc
Glob: AbortSignal cancellation bypass allows post-timeout filesystem traversal
CVE-2026-118773
### Summary In glob 13.0.6, an aborted async walk rejects or emits an error but continues recursively reading directori
Forge: Prototype Pollution in forge.http cookie handling via a malicious Set-Cookie
CVE-2026-118777
### Summary The `forge.http` client stored cookies from `Set-Cookie` response headers in a plain object keyed by cookie
Chromium: CVE-2026-118359 Memory corruption in V8
CVE-2026-118359
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. P
Chromium: CVE-2026-118358 Memory corruption in WebAudio
CVE-2026-118358
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. P
Chromium: CVE-2026-118355 Improper input validation in Command
CVE-2026-118355
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. P
Chromium: CVE-2026-118353 Use after free in Paint
CVE-2026-118353
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. P
Chromium: CVE-2026-118352 Memory corruption in Cache
CVE-2026-118352
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. P