#cwe-602

共收录 70 条相关情报。

漏洞预警2026-06-30 发布INFO

Insufficient policy enforcement in Serial in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform privilege escalation via a crafted HTML page. (Chromium se...

CVE-2026-14041

Insufficient policy enforcement in Serial in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform p

历史摘要 · 未重新核验 · NVD

#cve #cwe-602

漏洞预警2026-06-30 发布INFO

Insufficient policy enforcement in Bluetooth in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform privilege escalation via a crafted HTML page. (Chromium...

CVE-2026-14036

Insufficient policy enforcement in Bluetooth in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perfor

历史摘要 · 未重新核验 · NVD

#cve #cwe-602

漏洞预警2026-06-30 发布INFO

Insufficient policy enforcement in Media in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromium...

CVE-2026-14033

Insufficient policy enforcement in Media in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker to

历史摘要 · 未重新核验 · NVD

#cve #cwe-602

漏洞预警2026-06-30 发布INFO

Insufficient policy enforcement in PermissionsPolicy in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page....

CVE-2026-14007

Insufficient policy enforcement in PermissionsPolicy in Google Chrome prior to 150.0.7871.47 allowed a remote attacker t

历史摘要 · 未重新核验 · NVD

#cve #cwe-602

漏洞预警2026-06-30 发布INFO

Insufficient policy enforcement in Actor in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium s...

CVE-2026-13930

Insufficient policy enforcement in Actor in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass nav

历史摘要 · 未重新核验 · NVD

#cve #cwe-602

漏洞预警2026-06-30 发布INFO

Insufficient policy enforcement in Extensions in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to bypass site isolation...

CVE-2026-13919

Insufficient policy enforcement in Extensions in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had

历史摘要 · 未重新核验 · NVD

#cve #cwe-602

漏洞预警2026-06-30 发布INFO

Insufficient policy enforcement in Bluetooth in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform privilege escalation via a crafted HTML page. (Chromium...

CVE-2026-13903

Insufficient policy enforcement in Bluetooth in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perfor

历史摘要 · 未重新核验 · NVD

#cve #cwe-602

漏洞预警2026-06-30 发布INFO

Insufficient policy enforcement in Serial in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a san...

CVE-2026-13901

Insufficient policy enforcement in Serial in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had comp

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-602

漏洞预警2026-06-30 发布INFO

Insufficient policy enforcement in Glic in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium se...

CVE-2026-13896

Insufficient policy enforcement in Glic in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass navi

历史摘要 · 未重新核验 · NVD

#cve #cwe-602

漏洞预警2026-06-30 发布INFO

Insufficient policy enforcement in Network in Google Chrome prior to 150.0.7871.47 allowed an attacker in a privileged network position to bypass navigation restrictions via a c...

CVE-2026-13894

Insufficient policy enforcement in Network in Google Chrome prior to 150.0.7871.47 allowed an attacker in a privileged n

历史摘要 · 未重新核验 · NVD

#cve #cwe-602

漏洞预警2026-06-30 发布INFO

Insufficient policy enforcement in GuestView in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to bypass site isolation ...

CVE-2026-13871

Insufficient policy enforcement in GuestView in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had c

历史摘要 · 未重新核验 · NVD

#cve #cwe-602

漏洞预警2026-06-30 发布INFO

Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to bypass navigation restrictions via a crafted HTML p...

CVE-2026-13795

Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attack

历史摘要 · 未重新核验 · NVD

#cve #cwe-602

漏洞预警2026-06-30 发布INFO

IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.2.2, 5.3.0 could allow an authenticated user to bypass security controls and perform unauthorized actions due to client-side enforc...

CVE-2025-36327

IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.2.2, 5.3.0 could allow an authenticated user to bypass security controls a

历史摘要 · 未重新核验 · NVD

#cve #cwe-602

漏洞预警2026-06-26 发布INFO

Johnson & Johnson Audit Tracking Management System (ATMS) before 2026-04-21 allows viewing of meeting minutes and transcripts.

CVE-2026-57913

Johnson & Johnson Audit Tracking Management System (ATMS) before 2026-04-21 allows viewing of meeting minutes and transc

历史摘要 · 未重新核验 · NVD

#cve #cwe-602

漏洞预警2026-06-26 发布INFO

Johnson & Johnson Campus Recruiting before 2025-10-31 allows viewing of data provided by recruited students, and notes entered about students by interviewers.

CVE-2026-57912

Johnson & Johnson Campus Recruiting before 2025-10-31 allows viewing of data provided by recruited students, and notes e

历史摘要 · 未重新核验 · NVD

#cve #cwe-602

漏洞预警2026-06-24 发布INFO

Capgo before 12.128.2 enforces mandatory two-factor authentication only at the UI level. Sensitive Organization (ORG) management API endpoints (e.g., editing organization detail...

CVE-2026-56256

Capgo before 12.128.2 enforces mandatory two-factor authentication only at the UI level. Sensitive Organization (ORG) ma

历史摘要 · 未重新核验 · NVD

#cve #cwe-602

安全公告2026-06-18 发布INFO

The U.S. Government Accountability Office (GAO) Electronic Protest Docketing System (EPDS) and...

CVE-2026-54104

The U.S. Government Accountability Office (GAO) Electronic Protest Docketing System (EPDS) and Civilian Board of Contrac

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-602 #severity:high

漏洞预警2026-06-18 发布INFO

The U.S. Government Accountability Office (GAO) Electronic Protest Docketing System (EPDS) and Civilian Board of Contract Appeals (CBCA) Electronic Docketing System (EDS) trusts...

CVE-2026-54104

The U.S. Government Accountability Office (GAO) Electronic Protest Docketing System (EPDS) and Civilian Board of Contrac

历史摘要 · 未重新核验 · NVD

#cve #cwe-602

漏洞预警2026-06-05 发布INFO

Insufficient policy enforcement in Navigation in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass nav...

CVE-2026-11287

Insufficient policy enforcement in Navigation in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attack

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-602

漏洞预警2026-06-05 发布INFO

Insufficient policy enforcement in Extensions in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to bypass content...

CVE-2026-11267

Insufficient policy enforcement in Extensions in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced

历史摘要 · 未重新核验 · NVD

#cve #cwe-602