Memory corruption in Turbolev in Google Chrome prior to 156.0.8078.73 allowed a remote attacker...
CVE-2026-118305
Memory corruption in Turbolev in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute a
#advisory
共收录 23093 条相关情报。
← 返回所有主题Use after free in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to...
CVE-2026-118308
Use after free in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary
Use after free in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to...
CVE-2026-118307
Use after free in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitra
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-112155
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker...
CVE-2026-118306
Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute
A vulnerability has been found in a2aproject a2a-js up to 1.1.0. Impacted is the function...
CVE-2026-118128
A vulnerability has been found in a2aproject a2a-js up to 1.1.0. Impacted is the function ResultManager.applyStatusUpdat
Memory corruption in Media in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to...
CVE-2026-118311
Memory corruption in Media in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbi
Improper input validation in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote...
CVE-2026-118304
Improper input validation in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execut
Memory corruption in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to...
CVE-2026-118312
Memory corruption in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbi
In childTextNodesAreLiteral, walking up the tree previously stopped at the nearest foreign...
CVE-2026-97045
In childTextNodesAreLiteral, walking up the tree previously stopped at the nearest foreign ancestor once an HTML integra
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-111479
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-111467
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
MLflow vulnerable to arbitrary file read on unauthenticated servers via prompt model version source
CVE-2026-116690
### Summary On MLflow tracking servers running without authentication, which is the default for mlflow server, a remote
MLflow CrewAI autologging records LLM provider API keys in logged trace spans
CVE-2026-116691
### Summary `mlflow.crewai.autolog()` leaks CrewAI LLM provider API keys into MLflow trace telemetry. When a CrewAI `A
MLflow vulnerable to remote code execution on unauthenticated servers via third-party scorer deserialization importing caller-placed artifact modules
CVE-2026-116692
## Summary MLflow 3.12.0 introduced registration and deserialization support for third-party scorers in OSS MLflow. Dur
Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 22.8-cert3, an authenticated...
CVE-2026-57200
Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2
russh is a Rust SSH client and server library that includes an SSH agent protocol implementation. Prior to 0.65.0, the client Session::process_packet path in russh/src/client/en...
CVE-2026-116773
russh is a Rust SSH client and server library that includes an SSH agent protocol implementation. Prior to 0.65.0, the c
Crass is a Ruby CSS parser that is compliant with the CSS Syntax Level 3 specification. Prior to 1.0.8, Crass incorrectly treats a closing parenthesis after an escaped backslash...
CVE-2026-116695
Crass is a Ruby CSS parser that is compliant with the CSS Syntax Level 3 specification. Prior to 1.0.8, Crass incorrectl
dd-trace is the Datadog APM client for Node.js. From 2.0.0 until 5.131.1 and 6.20.1, the default DD_TRACE_OBFUSCATION_QUERY_STRING_REGEXP can perform excessive backtracking on a...
CVE-2026-116693
dd-trace is the Datadog APM client for Node.js. From 2.0.0 until 5.131.1 and 6.20.1, the default DD_TRACE_OBFUSCATION_QU
dd-trace: ReDOS in URL query string obfuscation
CVE-2026-116693
### Summary A regular expression used to obfuscate URL query strings can consume excessive CPU when processing certain