Integer overflow in XML in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to...
CVE-2026-8532
Integer overflow in XML in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code ins
#severity:high
共收录 5513 条相关情报。
← 返回所有主题Insufficient policy enforcement in Passwords in Google Chrome on Windows prior to 148.0.7778.168...
CVE-2026-8547
Insufficient policy enforcement in Passwords in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attack
Use after free in Core in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote...
CVE-2026-8542
Use after free in Core in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker who had compromised
Insufficient validation of untrusted input in Downloads in Google Chrome prior to 148.0.7778.168...
CVE-2026-8527
Insufficient validation of untrusted input in Downloads in Google Chrome prior to 148.0.7778.168 allowed a remote attack
Use after free in Media in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to...
CVE-2026-8544
Use after free in Media in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code ins
Heap buffer overflow in WebML in Google Chrome on Windows prior to 148.0.7778.168 allowed a...
CVE-2026-8531
Heap buffer overflow in WebML in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker to potential
Heap buffer overflow in Codecs in Google Chrome prior to 148.0.7778.168 allowed a remote attacker...
CVE-2026-8529
Heap buffer overflow in Codecs in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary c
Type Confusion in V8 in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to...
CVE-2026-8540
Type Confusion in V8 in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside
Use after free in Accessibility in Google Chrome prior to 148.0.7778.168 allowed a remote...
CVE-2026-8533
Use after free in Accessibility in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised t
Use after free in Media in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to...
CVE-2026-8549
Use after free in Media in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code ins
Out of bounds write in Media in Google Chrome prior to 148.0.7778.168 allowed a remote attacker...
CVE-2026-8548
Out of bounds write in Media in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the
python-utcp: Full Process Environment Exposed to CLI Subprocess - Secrets Leakage via Command Injection
CVE-2026-45370
## Summary `_prepare_environment()` in `cli_communication_protocol.py` passes a full copy of `os.environ` to every CLI
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in @ranfdev/deepobj
CVE-2026-46509
### Impact Prototype pollution is possible when property paths contain `__proto__`/`constructor`/`prototype`. The proper
DeepSeek TUI has SSRF IPV6 bypass
CVE-2026-45373
### Summary Although SSRF is validated against hostnames that resolve to private IPv6 addresses, when providing the IPV6
DeepSeek TUI has SSRF via HTTP Redirect Bypass in fetch_url Tool
CVE-2026-45310
### Summary The `fetch_url` tool validates the initial URL's resolved IP address against a restricted-IP blocklist (`is_
Open WebUI: LDAP and OAuth First-User Race Condition Allows Multiple Admin Accounts
CVE-2026-45675
## Summary The LDAP and OAuth authentication flows use a TOCTOU (Time-of-Check-Time-of-Use) pattern for first-user admi
Open WebUI: Jupyter code execution works despite `ENABLE_CODE_EXECUTION=false` — feature gate bypassed
CVE-2026-45672
### Summary The `/api/v1/utils/code/execute` endpoint executes arbitrary Python code via Jupyter for any verified user,
Open WebUI: shared-chat branch ignores access_type, allowing unauthorized file deletion
CVE-2026-45671
### Summary Any authenticated user can permanently delete files owned by other users via `DELETE /api/v1/files/{id}` wh
Open WebUI has Stored XSS in Banner Component via Improper Sanitization Order
CVE-2026-45665
### Summary A Stored Cross-Site Scripting (XSS) vulnerability exists in the Banner component due to an improper sanitiza
Open WebUI: Cross-User File Access via Unchecked file_id in Folder Knowledge and Knowledge-Base Attach Endpoints
CVE-2026-45402
# Cross-User File Access via Unchecked file_id in Folder Knowledge and Knowledge-Base Attach Endpoints ## Summary Mult