#cwe-863

共收录 2098 条相关情报。

漏洞预警2026-10-06 发布INFO

Incorrect Authorization (CWE-863) in Kibana can lead to sensitive information disclosure via Accessing Functionality Not Properly Constrained by ACLs (CAPEC-1). An authenticated...

CVE-2026-102412

Incorrect Authorization (CWE-863) in Kibana can lead to sensitive information disclosure via Accessing Functionality Not

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-10-06 发布INFO

Incorrect Authorization (CWE-863) in Elasticsearch can lead to unauthorized data stream modification via Accessing Functionality Not Properly Constrained by ACLs (CAPEC-1). An a...

CVE-2026-102407

Incorrect Authorization (CWE-863) in Elasticsearch can lead to unauthorized data stream modification via Accessing Funct

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-10-06 发布INFO

Incorrect authorization in API in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity...

CVE-2026-106422

Incorrect authorization in API in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin po

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-10-06 发布INFO

Incorrect authorization in GetUserMedia in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restri...

CVE-2026-106407

Incorrect authorization in GetUserMedia in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compro

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-10-06 发布INFO

Incorrect authorization in FontAccess in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrict...

CVE-2026-106404

Incorrect authorization in FontAccess in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromi

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-10-06 发布INFO

Incorrect authorization in Accessibility in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site isolation via ...

CVE-2026-106403

Incorrect authorization in Accessibility in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compr

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-10-06 发布INFO

Incorrect authorization in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted Chrome e...

CVE-2026-106402

Incorrect authorization in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging socia

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-10-06 发布INFO

Incorrect authorization in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity...

CVE-2026-106398

Incorrect authorization in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak cross-origin

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-10-06 发布INFO

Incorrect authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions ...

CVE-2026-106397

Incorrect authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-10-06 发布INFO

Incorrect authorization in WebShare in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements...

CVE-2026-106391

Incorrect authorization in WebShare in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-10-06 发布INFO

Incorrect authorization in USB in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted...

CVE-2026-106389

Incorrect authorization in USB in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engin

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-10-06 发布INFO

Incorrect authorization in Passwords in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium s...

CVE-2026-106381

Incorrect authorization in Passwords in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypa

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-10-06 发布INFO

Incorrect authorization in UI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page...

CVE-2026-106372

Incorrect authorization in UI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute a

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-10-06 发布INFO

Incorrect authorization in Transactions Platform in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HT...

CVE-2026-106371

Incorrect authorization in Transactions Platform in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-10-06 发布INFO

Incorrect authorization in Omnibox in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via...

CVE-2026-106364

Incorrect authorization in Omnibox in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-10-06 发布INFO

Incorrect authorization in WebProtect in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a craft...

CVE-2026-106352

Incorrect authorization in WebProtect in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging socia

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-10-06 发布INFO

Incorrect authorization in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security ...

CVE-2026-106350

Incorrect authorization in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-10-06 发布INFO

Incorrect authorization in Input in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (C...

CVE-2026-106333

Incorrect authorization in Input in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social eng

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-10-06 发布INFO

Incorrect authorization in FileSystem in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outsi...

CVE-2026-106329

Incorrect authorization in FileSystem in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging socia

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-10-06 发布INFO

Incorrect authorization in PDF in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker leveraging social engineering to obtain sensitive information via a...

CVE-2026-106328

Incorrect authorization in PDF in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker leveraging

历史摘要 · 未重新核验 · NVD

#cve #cwe-863