Out of bounds write in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker...
CVE-2026-14400
Out of bounds write in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised the r
#severity:high
共收录 5441 条相关情报。
← 返回所有主题Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote...
CVE-2026-14407
Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute arbitrar
Uninitialized Use in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who...
CVE-2026-14413
Uninitialized Use in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised the ren
Use after free in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute...
CVE-2026-14403
Use after free in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute arbitrary code inside
Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote...
CVE-2026-14383
Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute arbitrar
Apify Model Context Protocol (MCP) server: Actor MCP path authority injection leaks Apify token
CVE-2026-50143
## Actor MCP path authority injection leaks Apify token ### Summary `@apify/actors-mcp-server` version `0.10.7` builds
goshs: WebDAV listener ignores --read-only, --upload-only, and --no-delete mode flags
CVE-2026-50138
# WebDAV listener ignores `--read-only`, `--upload-only`, and `--no-delete` mode flags **Ecosystem:** Go **Package:** `
OnGres SCRAM silent channel-binding authentication downgrade via unsupported certificate algorithms
CVE-2026-53712
## Summary A flaw in `com.ongres.scram:scram-client` allows an attacker capable of performing a TLS man-in-the-middle (
`oras-go` tar extraction: Hardlink entry with relative Linkname escapes extract dir via process CWD resolution
CVE-2026-50163
### Root cause The tar-extraction helper `ensureLinkPath` at [`content/file/utils.go:262-275`](https://github.com/oras-
Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code...
CVE-2026-50521
Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network.
Ladybird contains a dangling-reference memory-safety flaw in its WebAssembly ESM-integration...
CVE-2026-58592
Ladybird contains a dangling-reference memory-safety flaw in its WebAssembly ESM-integration module loader. When a JavaS
Horde IMP before 7.0.1 contains a path traversal vulnerability in lib/Compose.php that allows...
CVE-2026-58451
Horde IMP before 7.0.1 contains a path traversal vulnerability in lib/Compose.php that allows authenticated attackers to
NodeBB does not bind the claimed author of an inbound ActivityPub object to the authenticated...
CVE-2026-58593
NodeBB does not bind the claimed author of an inbound ActivityPub object to the authenticated remote actor. The inbound
Dell Device Management Agent, versions prior to DDMA 26.05, contain an Improper Link Resolution...
CVE-2026-41121
Dell Device Management Agent, versions prior to DDMA 26.05, contain an Improper Link Resolution Before File Access ('Lin
Gradio before 6.16.0 contain a path traversal vulnerability in the FileExplorer component's...
CVE-2026-49119
Gradio before 6.16.0 contain a path traversal vulnerability in the FileExplorer component's preprocess() method that all
oras-go blob upload vulnerable to credential forwarding via unvalidated Location header
CVE-2026-50151
## Summary oras-go follows a registry-controlled `Location` header during the monolithic blob upload flow and reuses th
Keycloak has privilege escalation via improper scope mapping enforcement
CVE-2026-9795
### Description A flaw was found in Keycloak's Fine-Grained Admin Permissions (FGAPv2) feature. An administrator with li
Rancher has over-inclusive team membership expansion in GitHub App authentication provider
CVE-2026-41053
### Impact A vulnerability has been identified within Rancher Manager in the GitHub App authentication provider. When ev
Rancher Fleet has Unauthenticated Webhook: Regex Injection via Unsanitized Repository URL Components
CVE-2026-44937
### Impact A vulnerability has been identified in Fleet when the webhook endpoint is configured without a secret; an att
Fleet has PSS Bypass through addLabelsFromOptions in Fleet Agent
CVE-2026-44938
### Impact A vulnerability has been identified in Fleet's agent-side deployer, which did not filter security-sensitive k