#cwe-862

共收录 4167 条相关情报。

← 返回所有主题
漏洞预警2026-08-25 发布INFO

Missing authorization in Sensor in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a ...

CVE-2026-79104

Missing authorization in Sensor in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised th

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-25 发布INFO

Missing authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium securi...

CVE-2026-79099

Missing authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system acce

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-25 发布INFO

Missing authorization in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to obtain sensitive information via a co-installed app. (Chrom...

CVE-2026-79086

Missing authorization in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to ob

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-25 发布INFO

Missing authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a cra...

CVE-2026-79085

Missing authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-25 发布INFO

Missing authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions ...

CVE-2026-79067

Missing authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-25 发布INFO

Missing authorization in Passwords in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted ...

CVE-2026-79058

Missing authorization in Passwords in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-25 发布INFO

Missing authorization in Lighthouse in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering t...

CVE-2026-79053

Missing authorization in Lighthouse in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromise

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-25 发布INFO

Missing authorization in WebAppInstalls in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain sensit...

CVE-2026-79044

Missing authorization in WebAppInstalls in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-25 发布INFO

Missing authorization in Payments in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially bypass system acce...

CVE-2026-79042

Missing authorization in Payments in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker levera

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-25 发布INFO

Missing authorization in Browser in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy into a pri...

CVE-2026-79041

Missing authorization in Browser in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker leveraging

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-25 发布INFO

Missing authorization in InterestGroups in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass system access restri...

CVE-2026-79021

Missing authorization in InterestGroups in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compro

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-25 发布INFO

Missing authorization in Core in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially spoof address bar via a c...

CVE-2026-78968

Missing authorization in Core in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-25 发布INFO

Missing authorization in BFCache in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions ...

CVE-2026-78967

Missing authorization in BFCache in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-25 发布INFO

Missing authorization in SiteIsolation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a ...

CVE-2026-78953

Missing authorization in SiteIsolation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had comprom

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-25 发布INFO

Missing authorization in BrowserTag in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted...

CVE-2026-78897

Missing authorization in BrowserTag in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-25 发布INFO

An authorization weakness in JFrog Artifactory Composer repository handling may allow an authenticated user, under specific conditions, to read package metadata from repositorie...

CVE-2026-70550

An authorization weakness in JFrog Artifactory Composer repository handling may allow an authenticated user, under speci

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-25 发布INFO

An authenticated user may initiate repository migration operations without required repository permissions, potentially causing information disclosure, unauthorized state change...

CVE-2026-69104

An authenticated user may initiate repository migration operations without required repository permissions, potentially

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-25 发布INFO

PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, praisonai serve agents and praisonai serve unified parse --api-key but _create_agents_app() and _create_unifi...

CVE-2026-55541

PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, praisonai serve agents and praisonai serve unified p

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-25 发布INFO

PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, ast_grep_rewrite lacks the @require_approval decorator used by sibling mutation tools. With dry_run=Fal...

CVE-2026-55530

PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, ast_grep_rewrite lacks the @require_approval d

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-25 发布INFO

PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, AgentServer exposes ServerConfig.auth_token but AgentServer._create_app does not check it on any route....

CVE-2026-55528

PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, AgentServer exposes ServerConfig.auth_token bu

历史摘要 · 未重新核验 · NVD