#cwe-284

共收录 2028 条相关情报。

← 返回所有主题
漏洞预警2026-06-30 发布INFO

Inappropriate implementation in Dawn in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a craf...

CVE-2026-14061

Inappropriate implementation in Dawn in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potenti

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-30 发布INFO

Insufficient policy enforcement in FileSystem in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass discretionary access control via a crafted HTML page. (...

CVE-2026-14052

Insufficient policy enforcement in FileSystem in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypas

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-30 发布INFO

Insufficient policy enforcement in Bluetooth in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory vi...

CVE-2026-14035

Insufficient policy enforcement in Bluetooth in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-30 发布INFO

Inappropriate implementation in WebXR in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Ch...

CVE-2026-14034

Inappropriate implementation in WebXR in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to by

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-30 发布INFO

Insufficient policy enforcement in Extensions in Google Chrome prior to 150.0.7871.47 allowed an attacker who convinced a user to install a malicious extension to leak cross-ori...

CVE-2026-14003

Insufficient policy enforcement in Extensions in Google Chrome prior to 150.0.7871.47 allowed an attacker who convinced

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-30 发布INFO

Insufficient policy enforcement in XML in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memo...

CVE-2026-13954

Insufficient policy enforcement in XML in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to o

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-30 发布INFO

Insufficient policy enforcement in Payments in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process...

CVE-2026-13949

Insufficient policy enforcement in Payments in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-30 发布INFO

Inappropriate implementation in Passwords in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process m...

CVE-2026-13936

Inappropriate implementation in Passwords in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-30 发布INFO

Insufficient policy enforcement in Passwords in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially sen...

CVE-2026-13933

Insufficient policy enforcement in Passwords in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had c

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-30 发布INFO

Inappropriate implementation in Sharing in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to leak cross-origi...

CVE-2026-13932

Inappropriate implementation in Sharing in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-30 发布INFO

Inappropriate implementation in Media in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI spoofin...

CVE-2026-13931

Inappropriate implementation in Media in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who h

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-30 发布INFO

Inappropriate implementation in Passwords in Google Chrome on Mac prior to 150.0.7871.47 allowed a local attacker to obtain potentially sensitive information from process memory...

CVE-2026-13914

Inappropriate implementation in Passwords in Google Chrome on Mac prior to 150.0.7871.47 allowed a local attacker to obt

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-30 发布INFO

Insufficient policy enforcement in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform privilege escalation via a crafted HTML page. (Chromiu...

CVE-2026-13897

Insufficient policy enforcement in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perfo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-30 发布INFO

Insufficient policy enforcement in WebHID in Google Chrome prior to 150.0.7871.47 allowed an attacker who convinced a user to install a malicious extension to perform privilege ...

CVE-2026-13864

Insufficient policy enforcement in WebHID in Google Chrome prior to 150.0.7871.47 allowed an attacker who convinced a us

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-30 发布INFO

Inappropriate implementation in Enterprise in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via ...

CVE-2026-13828

Inappropriate implementation in Enterprise in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain p

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-30 发布INFO

Inappropriate implementation in Passwords in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium ...

CVE-2026-13818

Inappropriate implementation in Passwords in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass na

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-30 发布INFO

Inappropriate implementation in Updater in Google Chrome on Windows prior to 150.0.7871.47 allowed a local attacker to perform OS-level privilege escalation via a malicious file...

CVE-2026-13800

Inappropriate implementation in Updater in Google Chrome on Windows prior to 150.0.7871.47 allowed a local attacker to p

历史摘要 · 未重新核验 · NVD

安全公告2026-06-30 发布INFO

Fission Environment CRD podspec passthrough enables hostPID/hostNetwork/privileged pods, node escape

CVE-2026-50564

### Summary Fission's `Environment` CRD exposes `spec.runtime.podSpec` and `spec.builder.podSpec`, which are merged int

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-30 发布INFO

Fission Container Executor Function PodSpec Injection Leading to Node Escape

CVE-2026-50563

### Summary Fission's Container Executor path lets a tenant supply `Function.spec.podspec` directly; the executor merge

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-30 发布INFO

Fission Environment CRD PodSpec Injection Leading to Node Escape and Cluster Takeover

CVE-2026-50545

### Summary A stronger framing of the same root cause as GHSA-gx55-f84r-v3r7: the `Environment.spec.runtime.podSpec` /

历史摘要 · 未重新核验 · GitHub Advisory