Improper input validation in Safebrowsing in Google Chrome on on Android prior to 153.0.8010.36...
CVE-2026-87600
Improper input validation in Safebrowsing in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacke
#advisory
共收录 23717 条相关情报。
← 返回所有主题Server-side request forgery in Mobile in Google Chrome prior to 153.0.8010.36 allowed a remote...
CVE-2026-87595
Server-side request forgery in Mobile in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging socia
Information leak in Editing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to...
CVE-2026-87593
Information leak in Editing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive inform
Use after free in Chromecast in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to...
CVE-2026-87588
Use after free in Chromecast in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code
Incorrect authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote...
CVE-2026-87598
Incorrect authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web
Use after free in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker...
CVE-2026-87581
Use after free in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineeri
Improper input validation in Passwords in Google Chrome prior to 153.0.8010.36 allowed a remote...
CVE-2026-87590
Improper input validation in Passwords in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially
Use after free in Receiver in Google Chrome prior to 153.0.8010.36 allowed an adjacent attacker...
CVE-2026-87578
Use after free in Receiver in Google Chrome prior to 153.0.8010.36 allowed an adjacent attacker to execute arbitrary cod
Improper certificate validation in Loader in Google Chrome prior to 153.0.8010.36 allowed a...
CVE-2026-87571
Improper certificate validation in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging s
Out of bounds read in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to...
CVE-2026-87586
Out of bounds read in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory outside the
Incorrect authorization in DataTransfer in Google Chrome prior to 153.0.8010.36 allowed a remote...
CVE-2026-87594
Incorrect authorization in DataTransfer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compro
n8n: Agent Workflow Tool Bypasses Sub-Workflow Caller Policy
CVE-2026-86996
## Impact A workflow's "_This workflow can be called by_" setting was enforced by the Execute Workflow node but was not
Nodemailer: IDN/Punycode domain allow-list bypass leads to email delivery to an attacker-controlled domain
### Summary Nodemailer resolves an international (IDN / non-ASCII) recipient **domain** to a different Punycode `xn--`
Nodemailer: Quadratic (O(n²)) time complexity in addressparser allows remote denial of service via a crafted address list
### Summary Nodemailer's address parser (`lib/addressparser/index.js`) parses a list of comma‑separated addresses in **
Nodemailer: Recipient-domain validation bypass via RFC 5322 comment mis-parsing leads to email delivery to an attacker-controlled domain
### Summary Nodemailer's email-address parser treats an **RFC 5322 comment** `( ... )` inside the domain as a point to
OpenAPI3 version value escapes `emitterOutputDir` and overwrites YAML/JSON outside the output tree
### Summary The `@typespec/openapi3` emitter retains the value of a `@versioned` enum member and interpolates it into t
multer vulnerable to Denial of Service via crafted multipart field names
CVE-2026-77078
### Impact A vulnerability in multer allows a remote, unauthenticated attacker to crash the Node.js process with a sing
multer vulnerable to Denial of Service via file descriptor leak on aborted uploads
CVE-2026-77037
### Impact A vulnerability in multer `2.2.0` allows an attacker to trigger a Denial of Service (DoS) by aborting or tru
multer vulnerable to file size limit bypass via async fileFilter race condition
CVE-2026-77063
### Impact When `multer` is configured with an asynchronous `fileFilter`, the `limits.fileSize` limit can be bypassed.
multer vulnerable to Denial of Service via oversized array index in field names
CVE-2026-82333
### Impact multer is vulnerable to a Denial of Service (DoS) via a crafted array index in multipart field names. The `a