Use after free in UI in Google Chrome prior to 152.0.7977.65 allowed a local attacker who had...
CVE-2026-79245
Use after free in UI in Google Chrome prior to 152.0.7977.65 allowed a local attacker who had compromised the renderer p
#advisory
共收录 23507 条相关情报。
← 返回所有主题Use after free in Animation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to...
CVE-2026-79244
Use after free in Animation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code
Code injection in Bisection in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to...
CVE-2026-79249
Code injection in Bisection in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive inform
Incorrect authorization in Input in Google Chrome prior to 152.0.7977.65 allowed a remote...
CVE-2026-79248
Incorrect authorization in Input in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised t
Improper input validation in Network in Google Chrome on on Windows prior to 152.0.7977.65...
CVE-2026-79253
Improper input validation in Network in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker lev
Out of bounds write in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a...
CVE-2026-79240
Out of bounds write in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to potentia
Improper input validation in ReadingList in Google Chrome on on Windows prior to 152.0.7977.65...
CVE-2026-79243
Improper input validation in ReadingList in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker
UI misrepresentation in Navigation in Google Chrome prior to 152.0.7977.65 allowed a remote...
CVE-2026-79250
UI misrepresentation in Navigation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to spoof address ba
Improper input validation in Safebrowsing in Google Chrome prior to 152.0.7977.65 allowed a...
CVE-2026-79259
Improper input validation in Safebrowsing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass sy
Use after free in Chromoting in Google Chrome on on Windows prior to 152.0.7977.65 allowed a...
CVE-2026-79247
Use after free in Chromoting in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had com
Incomplete cleanup in GetUserMedia in Google Chrome prior to 152.0.7977.65 allowed a remote...
CVE-2026-79265
Incomplete cleanup in GetUserMedia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised
Incorrect authorization in WebXR in Google Chrome prior to 152.0.7977.65 allowed a remote...
CVE-2026-79258
Incorrect authorization in WebXR in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social eng
Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to...
CVE-2026-79257
Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outs
Incorrect authorization in Navigation in Google Chrome prior to 152.0.7977.65 allowed a remote...
CVE-2026-79237
Incorrect authorization in Navigation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web or
Information leak in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote...
CVE-2026-79252
Information leak in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-orig
JupyterHub has Unauthenticated Denial of Service via Unbounded Username Logging on Failed Login
CVE-2026-54338
### Impact Invalid input to login resulted in unbounded logging output. Only form-based Authenticators (the default PAM
icalendar has Algorithmic Complexity in Equality
CVE-2026-55099
### Summary `Component.__eq__` compares subcomponents in `O(2^n)` time relative to nesting depth. Because the parser ac
Chainlist has SSRF via MCP SSE and streamable-http transports that allows unauthenticated internal network access
CVE-2026-45019
### Am I affected? Only if your deployment sets `features.mcp.enabled = true` in `.chainlit/config.toml`. **MCP has bee
Chainlit has command injection via MCP stdio transport that allows unauthenticated remote code execution
CVE-2026-45018
### Am I affected? Only if your deployment sets `features.mcp.enabled = true` in `.chainlit/config.toml`. **MCP has bee
@arikusi/deepseek-mcp-server: Missing Authentication on Self-Hosted HTTP MCP Endpoint
CVE-2026-55605
## Summary The self-hosted HTTP transport of `@arikusi/deepseek-mcp-server` exposes `POST /mcp` without any authenticati