#msrc

共收录 2151 条相关情报。

← 返回所有主题
安全公告2026-09-07 发布INFO

node-forge through 1.4.0 RSA PKCS#1 v1.5 Signature Forgery via Nested DigestAlgorithm Padding

CVE-2026-85393

node-forge through 1.4.0 RSA PKCS#1 v1.5 Signature Forgery via Nested DigestAlgorithm Padding

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-06 发布INFO

xmldom: Quadratic-memory consumption

CVE-2026-83615

xmldom: Quadratic-memory consumption

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-06 发布INFO

xmldom: Quadratic-time parsing via the malformed-input recovery path — `parseElementStartPart` re-scan and `normalize()` adjacent-text merge

CVE-2026-83614

xmldom: Quadratic-time parsing via the malformed-input recovery path — `parseElementStartPart` re-scan and `normalize()`

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-06 发布INFO

xmldom: Processing Instruction Target Injection Bypasses requireWellFormed

CVE-2026-83616

xmldom: Processing Instruction Target Injection Bypasses requireWellFormed

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-06 发布INFO

xmldom: Attribute name injection via setAttribute() bypasses requireWellFormed

CVE-2026-83605

xmldom: Attribute name injection via setAttribute() bypasses requireWellFormed

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-06 发布INFO

xmldom: DocType `name` Injection Bypasses requireWellFormed

CVE-2026-83608

xmldom: DocType `name` Injection Bypasses requireWellFormed

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-03 发布INFO

Chromium: CVE-2026-84359 Information leak in Skia

CVE-2026-84359

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-03 发布INFO

Chromium: CVE-2026-84358 Improper privilege management in Downloads

CVE-2026-84358

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-03 发布INFO

Chromium: CVE-2026-84357 Improper input validation in Omnibox

CVE-2026-84357

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-03 发布INFO

Chromium: CVE-2026-84356 UI misrepresentation in FullScreen

CVE-2026-84356

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-03 发布INFO

Chromium: CVE-2026-84355 Incorrect authorization in Navigation

CVE-2026-84355

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-03 发布INFO

Chromium: CVE-2026-84354 Incorrect authorization in FileSystem

CVE-2026-84354

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-03 发布INFO

Chromium: CVE-2026-84353 Use after free in Shared Tab Groups

CVE-2026-84353

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-03 发布INFO

Chromium: CVE-2026-84351 Buffer overflow in GPU

CVE-2026-84351

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-03 发布INFO

Chromium: CVE-2026-84350 Use after free in TabStrip

CVE-2026-84350

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-03 发布INFO

Chromium: CVE-2026-84349 Use after free in Browser

CVE-2026-84349

CVE-2026-84349 是 Chromium 中浏览器组件(Browser)存在的一处释放后使用(Use after free)漏洞。Microsoft Edge(基于 Chromium)会集成 Chromium 的上游代码,因此该漏

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-03 发布INFO

Chromium: CVE-2026-84348 Information leak in MediaCapture

CVE-2026-84348

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-03 发布INFO

Chromium: CVE-2026-84347 Use after free in WebRTC

CVE-2026-84347

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-03 发布INFO

Chromium: CVE-2026-84335 Incorrect authorization in TabStrip

CVE-2026-84335

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-03 发布INFO

Chromium: CVE-2026-84334 Incorrect authorization in Chromoting

CVE-2026-84334

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC