Use after free in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute...
CVE-2026-110921
Use after free in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside
#severity:high
共收录 5410 条相关情报。
← 返回所有主题Driftregion iso14229 before 0.10.1 contains an integer wraparound in...
CVE-2026-111282
Driftregion iso14229 before 0.10.1 contains an integer wraparound in Handle_0x38_RequestFileTransfer that lets unauthent
NivoCart through 2.5.1 contains a missing authorization vulnerability in the download() action of...
CVE-2026-111277
NivoCart through 2.5.1 contains a missing authorization vulnerability in the download() action of account/order that all
Use after free in Prerender in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to...
CVE-2026-110922
Use after free in Prerender in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code
Use after free in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute...
CVE-2026-110919
Use after free in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside
Memory corruption in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to...
CVE-2026-110920
Memory corruption in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code insi
Use after free in Compositing in Google Chrome prior to 155.0.8059.84 allowed a remote attacker...
CVE-2026-110915
Use after free in Compositing in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary cod
Claude Code: Plugin Hash Pin Bypass Allows Bypass of Hash Pinning
CVE-2026-86063
The plugin install flow in Claude Code and Claude Desktop checked out a marketplace's pinned commit SHA using `git check
Qwik: Crashing any Qwik Server via Resource thenable
CVE-2026-84994
### Summary A Qwik server in the default configuration can be crashed with one unauthenticated HTTP request. During qwi
containerd CRI plugin: Checkpoint restore bypasses destination security context
CVE-2026-95837
### Impact A vulnerability in containerd's CRI implementation allows a container restored from an untrusted checkpoint
kin-openapi: Incomplete Fix for GHSA-p6wj-qrr4-pgh5: Three Unpatched nil-Items Panic Paths in openapi3filter
CVE-2026-100353
## Summary The fix for GHSA-p6wj-qrr4-pgh5 addressed a nil-pointer dereference that occurs when an OpenAPI 3.1 array sc
kin-openapi: Uncontrolled Recursion on Circular allOf/anyOf/oneOf Schemas Causes Fatal Process Crash
CVE-2026-100354
## Summary kin-openapi's spec loader and spec-time validator both handle circular schema references safely: the loader
kin-openapi: YAML NaN/Inf Values Bypass Built-in Guards and Panic via OAS 3.1 Validation Path
CVE-2026-100352
## Summary kin-openapi guards against `NaN` and `Inf` values in its built-in schema visitor (`visitJSON`) by returning
kin-openapi: ValidationHandler security-requirement bypass via encoded-path operation confusion
CVE-2026-100351
## Summary `openapi3filter.ValidationHandler.Middleware` validates requests with kin-openapi's legacy router, which sel
Dio: Cross-origin redirect leaks sensitive request headers in `dio_http2_adapter`
CVE-2026-103030
### Summary `dio_http2_adapter` follows HTTP `Location` redirects without stripping sensitive request headers when the
mise permits untrusted local configuration to override default shell arguments
CVE-2026-103929
## Summary Untrusted local .mise.toml [settings] can set the shell interpreter args (unix/windows default_inline / defa
Backdrop CMS Core 1.35.x before 1.35.2 and 1.34.x before 1.34.6 mishandles tokens. A token is a...
CVE-2026-110907
Backdrop CMS Core 1.35.x before 1.35.2 and 1.34.x before 1.34.6 mishandles tokens. A token is a small placeholder string
A vulnerability in the finger daemon of HPE NonStop TCP/IP UTILITIES could allow an...
CVE-2026-76659
A vulnerability in the finger daemon of HPE NonStop TCP/IP UTILITIES could allow an unauthenticated remote attacker to c
A vulnerability in HPE NonStop CIPSAM allows an out-of-bounds write that can corrupt buffer data.
CVE-2026-76660
A vulnerability in HPE NonStop CIPSAM allows an out-of-bounds write that can corrupt buffer data.
Netgate pfSense FRR package (pfSense-pkg-frr) 2.0.2_1 and source revision 2.1.2_1 contain an OS...
CVE-2026-110908
Netgate pfSense FRR package (pfSense-pkg-frr) 2.0.2_1 and source revision 2.1.2_1 contain an OS command injection vulner