#CVE

共收录 69535 条相关情报。

漏洞预警2026-10-20 发布HIGH

Missing authorization in Bluetooth in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to...

CVE-2026-113005

Missing authorization in Bluetooth in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised

来源摘录 · NVD

#cve #cwe-862

漏洞预警2026-10-20 发布HIGH

Type confusion in Sync in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory outside the sandbox via a crafted file. (Chromium security severity: Low)

CVE-2026-113004

Type confusion in Sync in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory outside the sand

来源摘录 · NVD

#cve #cwe-843

漏洞预警2026-10-20 发布HIGH

Memory corruption in HID in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Ch...

CVE-2026-113003

Memory corruption in HID in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitr

来源摘录 · NVD

#cve #cwe-119

漏洞预警2026-10-20 发布MEDIUM

Incorrect authorization in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to obtain sensitive information ...

CVE-2026-113002

Incorrect authorization in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker lever

来源摘录 · NVD

#cve #cwe-863

漏洞预警2026-10-20 发布HIGH

Incorrect authorization in Workers in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security seve...

CVE-2026-113001

Incorrect authorization in Workers in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origi

来源摘录 · NVD

#cve #cwe-863

漏洞预警2026-10-20 发布HIGH

Information leak in Paint in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)

CVE-2026-113000

Information leak in Paint in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to obtain cross-origin data

来源摘录 · NVD

#cve #cwe-200

漏洞预警2026-10-20 发布HIGH

Incorrect authorization in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security...

CVE-2026-112999

Incorrect authorization in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass system access

来源摘录 · NVD

#cve #cwe-863

漏洞预警2026-10-20 发布HIGH

Use after free in Views in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chr...

CVE-2026-112998

Use after free in Views in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitra

来源摘录 · NVD

#cve #cwe-416

漏洞预警2026-10-20 发布HIGH

Information leak in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: Med...

CVE-2026-112997

Information leak in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to leak sensitive information

来源摘录 · NVD

#cve #cwe-200

漏洞预警2026-10-20 发布HIGH

Incorrect authorization in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security sever...

CVE-2026-112996

Incorrect authorization in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin

来源摘录 · NVD

#cve #cwe-863

漏洞预警2026-10-20 发布HIGH

Observable discrepancy in Animation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security...

CVE-2026-112995

Observable discrepancy in Animation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to obtain sensitiv

来源摘录 · NVD

#cve #cwe-203

漏洞预警2026-10-20 发布HIGH

UI misrepresentation in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Ch...

CVE-2026-112994

UI misrepresentation in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engi

来源摘录 · NVD

#cve #cwe-451

漏洞预警2026-10-20 发布HIGH

Missing authorization in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML pag...

CVE-2026-112993

Missing authorization in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engin

来源摘录 · NVD

#cve #cwe-862

漏洞预警2026-10-20 发布CRITICAL

Observable discrepancy in Canvas in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity...

CVE-2026-112992

Observable discrepancy in Canvas in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to leak cross-origin

来源摘录 · NVD

#cve #cwe-203

漏洞预警2026-10-20 发布MEDIUM

DBI versions before 1.656 for Perl hang on a later open of a DBD::DBM table because a failed open_data does not release the table's lock. open_data creates the table's lock fil...

CVE-2026-111879

DBI versions before 1.656 for Perl hang on a later open of a DBD::DBM table because a failed open_data does not release

来源摘录 · NVD

#cve #cwe-667

漏洞预警2026-10-20 发布LOW

DBI versions before 1.656 for Perl crash via type confusion in dbi_profile when a database handle is destroyed under a Profile Path with an {attr} element. An {attr} element na...

CVE-2026-108518

DBI versions before 1.656 for Perl crash via type confusion in dbi_profile when a database handle is destroyed under a P

来源摘录 · NVD

#cve #cwe-843

漏洞预警2026-10-20 发布INFO

Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions that are affected are 12.2.3-12.2.15. ...

CVE-2026-101857

Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools).

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-20 发布MEDIUM

Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions that are affected are 12.2.3-12.2.15. ...

CVE-2026-101856

Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools).

来源摘录 · NVD

#cve #cwe-200

漏洞预警2026-10-20 发布MEDIUM

Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exp...

CVE-2026-101855

Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported

来源摘录 · NVD

#cve #cwe-200

漏洞预警2026-10-20 发布HIGH

Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exp...

CVE-2026-101854

Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported

来源摘录 · NVD

#cve #cwe-284