Chromium: CVE-2026-118315 Improper input validation in SVG
CVE-2026-118315
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. P
2026-11-01 归档
今日共收录 398 条安全情报，包含 188 个 CVE，99 篇安全通告，以及 64 篇研究论文。
← 返回归档列表Chromium: CVE-2026-118304 Improper input validation in SVG
CVE-2026-118304
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. P
Chromium: CVE-2026-118313 Use after free in Video
CVE-2026-118313
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. P
Chromium: CVE-2026-118311 Memory corruption in Media
CVE-2026-118311
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. P
CVE-2026-111497 Portfolio Status: Impact of Brotli Vulnerability (CVE-2026-111497) on Palo Alto Networks Products (Severity: CRITICAL)
CVE-2026-111497
CVE-2026-111497 Portfolio Status: Impact of Brotli Vulnerability (CVE-2026-111497) on Palo Alto Networks Products (Sever
Kubeflow Pipelines: Pipeline archive upload allows decompression bomb to exhaust server memory
CVE-2026-118761
## Summary The Kubeflow Pipelines API server decompresses uploaded pipeline archives without adequately bounding expand
pypdf has possible infinite loop when hitting EOF in standard xref table during trailer search
CVE-2026-119203
### Impact An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires openi
pypdf has possible large memory usage when parsing page tree
CVE-2026-119204
### Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires par
pypdf has possible infinite loop when cloning dictionaries
CVE-2026-119205
### Impact An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires cloni
joi: quadratic-time split in `string().email({ multiple: true })` allows denial of service
CVE-2026-118772
### Summary `Joi.string().email({ multiple: true })` takes quadratic time to split a value that contains a long run of
@hapi/content: quadratic-time parsing of Content-Disposition parameters allows denial of service
CVE-2026-119202
### Summary `Content.disposition()` takes quadratic time when a `Content-Disposition` parameter contains a long token w
pypdf has possible long runtimes when retrieving page labels
CVE-2026-119206
### Impact An attacker who uses this vulnerability can craft a PDF which leads to large runtimes. This requires retriev
pypdf has possible large memory usage for exceptions in strict mode
CVE-2026-119207
### Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires loa
pypdf has possible long runtimes/large memory usage for encrypted PDF files
CVE-2026-119208
### Impact An attacker who uses this vulnerability can craft a PDF which leads to large runtimes/memory usage. This req
pypdf has possible large memory usage when parsing cross-reference streams
CVE-2026-119209
### Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires ope
pyasn1 has quadratic CPU consumption in constructed BIT STRING decoding
CVE-2026-119196
## Summary In pyasn1 through 0.6.4, decoding a constructed BIT STRING with many fragments repeatedly shifts and copies
pyasn1 has quadratic-complexity denial of service in binary REAL decoding
CVE-2026-119197
## Summary In pyasn1 0.6.4 and earlier, decoding a binary-encoded ASN.1 REAL with a large mantissa can consume CPU time
pyasn1 has quadratic-time denial of service in constructed string and indefinite-length ANY decoding
CVE-2026-119195
## Summary In pyasn1 0.6.4 and earlier, decoding a constructed OCTET STRING or character string made of many fragments
pyasn1 has quadratic CPU use in schemaless BER/CER/DER container decoding
CVE-2026-119194
### Summary When an application decodes attacker-controlled BER, CER, or DER data without an ASN.1 schema, a container
Forge: Regular expression denial of service in PEM decoding (pem.decode)
CVE-2026-118779
### Summary `pem.decode()`, which every node-forge API that parses PEM input uses, split messages with a regular express