#CVE

共收录 58490 条相关情报。

← 返回所有主题
漏洞预警2026-10-30 发布INFO

A web page that contains unusual WebGPU content loaded into the GPU GLES render process can trigger an OOB write in the GPU user-space driver, leading to memory corruption and p...

CVE-2026-65587

A web page that contains unusual WebGPU content loaded into the GPU GLES render process can trigger an OOB write in the

来源摘录 · NVD

漏洞预警2026-10-30 发布INFO

Software installed and run as a non-privileged user may conduct improper GPU system calls to free memory in still in use, replace with another allocation and cause arbitrary mem...

CVE-2026-65586

Software installed and run as a non-privileged user may conduct improper GPU system calls to free memory in still in use

来源摘录 · NVD

漏洞预警2026-10-30 发布INFO

Software installed and run as a non-privileged user may conduct improper GPU system calls causing a stack overflow in the kernel. The overflow occurs when processing resolved Li...

CVE-2026-65584

Software installed and run as a non-privileged user may conduct improper GPU system calls causing a stack overflow in th

来源摘录 · NVD

漏洞预警2026-10-30 发布INFO

Software installed and run as a non-privileged user may conduct improper system calls to allocate physical memory. A 32-bit integer overflow in the KM driver during page-to-byte...

CVE-2026-19199

Software installed and run as a non-privileged user may conduct improper system calls to allocate physical memory. A 32-

来源摘录 · NVD

漏洞预警2026-10-30 发布INFO

A web page that contains unusual GPU shader code is loaded into the GPU compiler process and can lead memory allocation failure. If the allocation failure is not properly handle...

CVE-2026-18629

A web page that contains unusual GPU shader code is loaded into the GPU compiler process and can lead memory allocation

来源摘录 · NVD

漏洞预警2026-10-30 发布INFO

Software installed and run as a non-privileged user may conduct improper GPU system calls to cause race condition in hardware performance counters buffer’s destruction path lead...

CVE-2026-15466

Software installed and run as a non-privileged user may conduct improper GPU system calls to cause race condition in har

来源摘录 · NVD

漏洞预警2026-10-30 发布LOW

A flaw was found in Eye of GNOME. When parsing a specially crafted PNG image containing malformed color profile metadata, the application fails to validate chunk boundaries whil...

CVE-2026-118475

A flaw was found in Eye of GNOME. When parsing a specially crafted PNG image containing malformed color profile metadata

来源摘录 · NVD

漏洞预警2026-10-30 发布LOW

A flaw was found in Ghostscript. A remote attacker could exploit this vulnerability by enticing a user to process a specially crafted PDF or PostScript document containing malic...

CVE-2026-112922

A flaw was found in Ghostscript. A remote attacker could exploit this vulnerability by enticing a user to process a spec

来源摘录 · NVD

漏洞预警2026-10-30 发布HIGH

Incorrect authorization in Input in Google Chrome prior to 156.0.8078.79 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML p...

CVE-2026-76031

Incorrect authorization in Input in Google Chrome prior to 156.0.8078.79 allowed a remote attacker leveraging social eng

来源摘录 · NVD

漏洞预警2026-10-30 发布HIGH

Incorrect authorization in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outsi...

CVE-2026-76030

Incorrect authorization in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker leveraging socia

来源摘录 · NVD

漏洞预警2026-10-30 发布HIGH

Improper input validation in Network in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via crafted network traffic. ...

CVE-2026-76029

Improper input validation in Network in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitr

来源摘录 · NVD

漏洞预警2026-10-30 发布HIGH

Incorrect authorization in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandb...

CVE-2026-76028

Incorrect authorization in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker leveraging socia

来源摘录 · NVD

漏洞预警2026-10-30 发布MEDIUM

Information loss in CacheStorage in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severi...

CVE-2026-76027

Information loss in CacheStorage in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to obtain cross-origi

来源摘录 · NVD

漏洞预警2026-10-30 发布HIGH

Origin validation error in Autofill in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security sev...

CVE-2026-76026

Origin validation error in Autofill in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to bypass web orig

来源摘录 · NVD

漏洞预警2026-10-30 发布HIGH

Incorrect authorization in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandb...

CVE-2026-76025

Incorrect authorization in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker leveraging socia

来源摘录 · NVD

漏洞预警2026-10-30 发布MEDIUM

Use after free in MediaStream in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium s...

CVE-2026-76024

Use after free in MediaStream in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary cod

来源摘录 · NVD

漏洞预警2026-10-30 发布MEDIUM

Incorrect authorization in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker leveraging social engineering to obtain sensitive information via a craft...

CVE-2026-119272

Incorrect authorization in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker leveraging socia

来源摘录 · NVD

漏洞预警2026-10-30 发布HIGH

Uninitialized resource in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via ...

CVE-2026-119271

Uninitialized resource in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote attacker who had compromised the

来源摘录 · NVD

漏洞预警2026-10-30 发布HIGH

Incorrect reference resolution in CacheStorage in Google Chrome prior to 156.0.8078.79 allowed a remote attacker who had compromised the renderer process to obtain sensitive inf...

CVE-2026-119270

Incorrect reference resolution in CacheStorage in Google Chrome prior to 156.0.8078.79 allowed a remote attacker who had

来源摘录 · NVD

漏洞预警2026-10-30 发布HIGH

Incorrect authorization in Blink in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severi...

CVE-2026-119269

Incorrect authorization in Blink in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to bypass web origin

来源摘录 · NVD