Chromium: CVE-2026-84330 UI misrepresentation in FullScreen
CVE-2026-84330
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
#msrc
共收录 2151 条相关情报。
← 返回所有主题Chromium: CVE-2026-84352 Use after free in WebGL
CVE-2026-84352
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Microsoft Edge (Chromium-based) Spoofing Vulnerability
CVE-2026-77490
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based)
drm/amdkfd: fix QID bit leak in pqm_create_queue()
CVE-2026-74448
drm/amdkfd: fix QID bit leak in pqm_create_queue()
drm/vmwgfx: reject DX_BIND_QUERY without a DX context
CVE-2026-74445
drm/vmwgfx: reject DX_BIND_QUERY without a DX context
mailbox: mchp-ipc-sbi: Add null check for devm_kasprintf()
CVE-2026-80822
mailbox: mchp-ipc-sbi: Add null check for devm_kasprintf()
ipvs: fix the checksum validations
CVE-2026-80901
ipvs: fix the checksum validations
ALSA: usb-audio: fix use-after-free in ump_to_endpoint()
CVE-2026-74501
ALSA: usb-audio: fix use-after-free in ump_to_endpoint()
drm/vmwgfx: use check_add_overflow for shader size+offset bound
CVE-2026-80887
drm/vmwgfx: use check_add_overflow for shader size+offset bound
Bluetooth: btintel: Validate length before parsing diagnostics TLV
CVE-2026-74532
Bluetooth: btintel: Validate length before parsing diagnostics TLV
Type confusion in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-87564
Type confusion in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory inside the sandbox
Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-87587
Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside
Apache Ant: Path traversal in ftp and scp tasks allows arbitrary file write
CVE-2026-78254
Apache Ant: Path traversal in ftp and scp tasks allows arbitrary file write
HID: core: fix number/pointer type confusion on long items
CVE-2026-80918
HID: core: fix number/pointer type confusion on long items
io_uring: defer eventfd signaling when queued from a wakeup handler
CVE-2026-80920
io_uring: defer eventfd signaling when queued from a wakeup handler
Bluetooth: ISO: fix use-after-free of listener socket in iso_conn_ready
CVE-2026-80914
Bluetooth: ISO: fix use-after-free of listener socket in iso_conn_ready
PCI: host-generic: Fix NULL pointer dereference on 32-bit CAM systems
CVE-2026-80917
PCI: host-generic: Fix NULL pointer dereference on 32-bit CAM systems
xhci: dbgtty: Fix unregister on tty_register_driver() failure
CVE-2026-80923
xhci: dbgtty: Fix unregister on tty_register_driver() failure
KVM: s390: vsie: zero stale crypto bits
CVE-2026-80921
KVM: s390: vsie: zero stale crypto bits
vlan: fix skb_under_panic and races when toggling HW VLAN offload
CVE-2026-80925
vlan: fix skb_under_panic and races when toggling HW VLAN offload