Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based)...
CVE-2026-58289
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized
#severity:critical
共收录 1468 条相关情报。
← 返回所有主题9router's Hardcoded Default fallback JWT Secret Allows Authentication Bypass
CVE-2026-49352
### Summary 9router uses a publicly known hardcoded string `"9router-default-secret-change-me"` as the fallback of JWT s
LaunchServer FileServerHandler has an unauthenticated path traversal issue
CVE-2026-54617
### Summary An unauthenticated path traversal in the LaunchServer HTTP file server (`FileServerHandler`) lets any remote
fast-mcp-telegram: Bearer token path traversal bypasses reserved Telegram session protection
CVE-2026-52830
## Summary fast-mcp-telegram validates HTTP Bearer tokens by joining the raw token string into a session-file path. The
9router: Missing Authorization and OS Command Injection
# Unauthenticated RCE via `/api/tunnel/tailscale-install` **Affected:** `9router` (npm package) — current master (`v0.4
Use after free in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to...
CVE-2026-14425
Use after free in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandb
Out of bounds read in Dawn in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to...
CVE-2026-14416
Out of bounds read in Dawn in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sa
Use after free in Dawn in Google Chrome on Mac prior to 150.0.7871.46 allowed a remote attacker...
CVE-2026-14424
Use after free in Dawn in Google Chrome on Mac prior to 150.0.7871.46 allowed a remote attacker to potentially perform a
Out of bounds read and write in Dawn in Google Chrome prior to 150.0.7871.46 allowed a remote...
CVE-2026-14420
Out of bounds read and write in Dawn in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially pe
Use after free in Dawn in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to...
CVE-2026-14417
Use after free in Dawn in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbo
Type Confusion in Tint in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to...
CVE-2026-14423
Type Confusion in Tint in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbo
Use after free in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to...
CVE-2026-14419
Use after free in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbo
A path traversal vulnerability exists in the Git Service component shared by Altium Enterprise...
CVE-2026-14439
A path traversal vulnerability exists in the Git Service component shared by Altium Enterprise Server and Altium 365. Th
Out of bounds write in ANGLE in Google Chrome on Mac prior to 150.0.7871.46 allowed a remote...
CVE-2026-14397
Out of bounds write in ANGLE in Google Chrome on Mac prior to 150.0.7871.46 allowed a remote attacker to potentially per
Use after free in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to...
CVE-2026-14390
Use after free in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandb
Use after free in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to...
CVE-2026-14398
Use after free in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandb
Uninitialized Use in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to...
CVE-2026-14405
Uninitialized Use in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute arbitrary code insi
Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.46...
CVE-2026-14411
Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to
Integer overflow in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to...
CVE-2026-14387
Integer overflow in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sand
Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.46...
CVE-2026-14382
Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to