Chromium CVE-2026-113186: Memory corruption
CVE-2026-113186
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. P
#microsoft
共收录 2274 条相关情报。
← 返回所有主题Chromium CVE-2026-113340: Memory corruption
CVE-2026-113340
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. P
AI-driven, large-scale nation-state campaign using ARTEX enables supply chain compromise
Storm-0940 used ARTEX agentic AI to accelerate a ConnectWise supply chain compromise, enabling application credential ab
Openssh: openssh: gssapi delegated credentials can be stored after a failed authentication
CVE-2026-110924
Openssh: openssh: gssapi delegated credentials can be stored after a failed authentication
Openssh: openssh: a compressed payload can expand past the maximum packet size
CVE-2026-110927
Openssh: openssh: a compressed payload can expand past the maximum packet size
Openssh: openssh: shared lz77 compression dictionary leaks plaintext across channels
CVE-2026-110926
Openssh: openssh: shared lz77 compression dictionary leaks plaintext across channels
Nfs-utils: nfs-utils: denial of service via assertion failure in fsidd
CVE-2026-89098
Nfs-utils: nfs-utils: denial of service via assertion failure in fsidd
MariaDB: GRANT PROXY with empty password incorrectly checks grantor's privileges
CVE-2026-97380
MariaDB: GRANT PROXY with empty password incorrectly checks grantor's privileges
Libarchive: libarchive: use-after-free via aliased mac metadata copy
CVE-2026-17591
Libarchive: libarchive: use-after-free via aliased mac metadata copy
Cifs-utils: mount.cifs credential-file option injection allows local privilege boundary bypass
CVE-2026-104715
Cifs-utils: mount.cifs credential-file option injection allows local privilege boundary bypass
Busybox: busybox: http request smuggling via pipelined requests in httpd reverse proxy
CVE-2026-88829
Busybox: busybox: http request smuggling via pipelined requests in httpd reverse proxy
Busybox: busybox: dpkg-deb extraction-root escape via per-ar-member deferred symlink flush
CVE-2026-90954
Busybox: busybox: dpkg-deb extraction-root escape via per-ar-member deferred symlink flush
Busybox: busybox: dpkg stale field_start pointer causes out-of-bounds read and status file corruption
CVE-2026-88842
Busybox: busybox: dpkg stale field_start pointer causes out-of-bounds read and status file corruption
RabbitMQ: JWKS Fetch Ignores HTTP Response Status Code - Signing Key Destruction Causes Authentication DoS
CVE-2026-67409
RabbitMQ: JWKS Fetch Ignores HTTP Response Status Code - Signing Key Destruction Causes Authentication DoS
RabbitMQ: OAuth2 silent verify_none fallback for JWKS fetch
CVE-2026-67404
RabbitMQ: OAuth2 silent verify_none fallback for JWKS fetch
RabbitMQ: JMS topic exchange erl_scan atom exhaustion
CVE-2026-67220
RabbitMQ: JMS topic exchange erl_scan atom exhaustion
RabbitMQ: Cross-vhost quorum-queue status and stream tracking disclosure
CVE-2026-66076
RabbitMQ: Cross-vhost quorum-queue status and stream tracking disclosure
An issue was discovered in compare_digest in Lib/hmac.py in Python through 3.9.1. Constant-time-defeating optimisations were possible in the accumulator variable in hmac.compare_digest.
CVE-2022-48566
An issue was discovered in compare_digest in Lib/hmac.py in Python through 3.9.1. Constant-time-defeating optimisations
An XML External Entity (XXE) issue was discovered in Python through 3.9.1. The plistlib module no longer accepts entity declarations in XML plist files to avoid XML vulnerabilities.
CVE-2022-48565
An XML External Entity (XXE) issue was discovered in Python through 3.9.1. The plistlib module no longer accepts entity
read_ints in plistlib.py in Python through 3.9.1 is vulnerable to a potential DoS attack via CPU and RAM exhaustion when processing malformed Apple Property List files in binary format.
CVE-2022-48564
read_ints in plistlib.py in Python through 3.9.1 is vulnerable to a potential DoS attack via CPU and RAM exhaustion when