#CVE

共收录 57397 条相关情报。

← 返回所有主题
漏洞预警2026-10-30 发布HIGH

Use after free in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security...

CVE-2026-119271

Use after free in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code insid

来源摘录 · NVD

漏洞预警2026-10-30 发布HIGH

Improper input validation in CacheStorage in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafte...

CVE-2026-119270

Improper input validation in CacheStorage in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potential

来源摘录 · NVD

漏洞预警2026-10-30 发布HIGH

Use after free in Blink in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium securit...

CVE-2026-119269

Use after free in Blink in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code insi

来源摘录 · NVD

漏洞预警2026-10-30 发布HIGH

Integer overflow in Editing in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (...

CVE-2026-119268

Integer overflow in Editing in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arb

来源摘录 · NVD

漏洞预警2026-10-30 发布HIGH

Memory corruption in DOM in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chr...

CVE-2026-119267

Memory corruption in DOM in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitr

来源摘录 · NVD

漏洞预警2026-10-30 发布HIGH

Use after free in Quota in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chro...

CVE-2026-119266

Use after free in Quota in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitra

来源摘录 · NVD

漏洞预警2026-10-30 发布HIGH

Memory corruption in Quota in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (C...

CVE-2026-119265

Memory corruption in Quota in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbi

来源摘录 · NVD

漏洞预警2026-10-30 发布HIGH

Memory corruption in Dawn in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Ch...

CVE-2026-119264

Memory corruption in Dawn in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbit

来源摘录 · NVD

漏洞预警2026-10-30 发布CRITICAL

Memory corruption in GarbageCollection in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted ...

CVE-2026-119263

Memory corruption in GarbageCollection in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially

来源摘录 · NVD

漏洞预警2026-10-30 发布HIGH

Improper input validation in V8 in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML pag...

CVE-2026-119262

Improper input validation in V8 in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute

来源摘录 · NVD

漏洞预警2026-10-30 发布CRITICAL

Improper input validation in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML ...

CVE-2026-119261

Improper input validation in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execu

来源摘录 · NVD

漏洞预警2026-10-30 发布HIGH

Use after free in Frames in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium securi...

CVE-2026-119260

Use after free in Frames in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code ins

来源摘录 · NVD

漏洞预警2026-10-30 发布MEDIUM

A flaw was found in the required action provider mechanism of Keycloak. The issue occurs when an authorization request includes the kc_action query parameter set to a mandatory ...

CVE-2026-118959

A flaw was found in the required action provider mechanism of Keycloak. The issue occurs when an authorization request i

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-30 发布MEDIUM

A flaw was found in the UMA resource registration endpoint of the keycloak-services component, which provides the core logic for Keycloak's authorization and identity services. ...

CVE-2026-118947

A flaw was found in the UMA resource registration endpoint of the keycloak-services component, which provides the core l

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-30 发布INFO

This issue was addressed with improved handling of symlinks. This issue is fixed in Xcode 27.2. An app may be able to read arbitrary files.

CVE-2026-112605

This issue was addressed with improved handling of symlinks. This issue is fixed in Xcode 27.2. An app may be able to re

来源摘录 · NVD

漏洞预警2026-10-30 发布INFO

An authorization issue was addressed with improved state management. This issue is fixed in Xcode 27.2. An app may be able to access sensitive user data.

CVE-2026-112602

An authorization issue was addressed with improved state management. This issue is fixed in Xcode 27.2. An app may be ab

来源摘录 · NVD

漏洞预警2026-10-30 发布MEDIUM

A flaw was found in Ghostscript. When processing a specially crafted TrueType font or document embedding one, an accounting error during font rendering can bypass buffer size ch...

CVE-2026-110133

A flaw was found in Ghostscript. When processing a specially crafted TrueType font or document embedding one, an account

来源摘录 · NVD

漏洞预警2026-10-29 发布INFO

Under certain conditions, privilege manager agent allows a remote unauthenticated attacker to execute arbitrary code as LocalSystem.

CVE-2026-92744

Under certain conditions, privilege manager agent allows a remote unauthenticated attacker to execute arbitrary code as

来源摘录 · NVD

漏洞预警2026-10-29 发布INFO

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-112211

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-29 发布INFO

A vulnerability allowing a member of the Veeam Virtualization Extensions Users group to perform remote code execution (RCE) on servers running the Veeam Management Pack for Micr...

CVE-2026-107239

A vulnerability allowing a member of the Veeam Virtualization Extensions Users group to perform remote code execution (R

来源摘录 · NVD