#cwe-843

共收录 274 条相关情报。

← 返回所有主题
漏洞预警2026-10-06 发布INFO

In sshd in OpenSSH before 10.6, the value "none" for a configuration option is sometimes interpreted as a filename but was intended to mean that a feature is disabled.

CVE-2026-106587

In sshd in OpenSSH before 10.6, the value "none" for a configuration option is sometimes interpreted as a filename but w

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

Handlebars provides the power necessary to let users build semantic templates. From 4.0.0 until 4.7.10, Handlebars.compile() and Handlebars.precompile() accept pre-parsed AST ob...

CVE-2026-106446

Handlebars provides the power necessary to let users build semantic templates. From 4.0.0 until 4.7.10, Handlebars.compi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

Type confusion in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security s...

CVE-2026-106374

Type confusion in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

Type confusion in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromiu...

CVE-2026-106341

Type confusion in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

Type confusion in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside ...

CVE-2026-106293

Type confusion in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the render

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

Type confusion in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security s...

CVE-2026-106240

Type confusion in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to 2.32.2, the openURL() utility in ui/src/utils/open-url/open-url.js trusted window....

CVE-2026-106101

Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to 2.32.2, the openURL() uti

历史摘要 · 未重新核验 · NVD

安全公告2026-10-05 发布INFO

Seroval: `fromJSON()` Promise thenable assimilation invokes plugin-produced callables (bypass of GHSA-mv8w-475r-vwqw)

CVE-2026-104846

A fulfilled Promise node deserialized by `fromJSON()` can trigger unintended invocation of a plugin-produced callable th

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-05 发布INFO

In multiple locations, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with no additional execution privileges need...

CVE-2026-58854

In multiple locations, there is a possible memory corruption due to type confusion. This could lead to local escalation

历史摘要 · 未重新核验 · NVD

安全公告2026-10-05 发布INFO

In mtee, there is a possible escalation of privilege due to type confusion. This could lead to...

CVE-2026-20587

In mtee, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privi

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-05 发布MEDIUM

In mtee, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System...

CVE-2026-20587

In mtee, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privi

来源摘录 · NVD

漏洞预警2026-10-02 发布INFO

Seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities. From 0.12.0 until 1.6.2, fromJSON deserialization of a fulfilled P...

CVE-2026-104846

Seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities. From 0.12

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

Type confusion in V8 in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security s...

CVE-2026-103625

Type confusion in V8 in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code inside

历史摘要 · 未重新核验 · NVD

安全公告2026-09-29 发布INFO

ip-address: isInSubnet() and isHostInSubnet() compare addresses of different families as if they shared an address space, allowing an allowlist check to admit an address outside...

CVE-2026-101912

### Summary `isInSubnet()` and `isHostInSubnet()` accept an address of either family and compare masked binary strings

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-29 发布INFO

Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security s...

CVE-2026-102328

Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security s...

CVE-2026-102326

Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security s...

CVE-2026-102323

Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security s...

CVE-2026-102321

Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security s...

CVE-2026-102299

Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Type confusion in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code inside the sandbox via...

CVE-2026-95380

Type confusion in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to

历史摘要 · 未重新核验 · NVD