Heap buffer overflow in SwiftShader in Google Chrome on Mac and iOS prior to 148.0.7778.168...
CVE-2026-8560
Heap buffer overflow in SwiftShader in Google Chrome on Mac and iOS prior to 148.0.7778.168 allowed a remote attacker to
#severity:medium
共收录 5624 条相关情报。
← 返回所有主题Incorrect security UI in Fullscreen in Google Chrome prior to 148.0.7778.168 allowed a remote...
CVE-2026-8561
Incorrect security UI in Fullscreen in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to perform UI spo
Integer overflow in ANGLE in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote...
CVE-2026-8567
Integer overflow in ANGLE in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker to perform an ou
Inappropriate implementation in Downloads in Google Chrome on Mac prior to 148.0.7778.168 allowed...
CVE-2026-8565
Inappropriate implementation in Downloads in Google Chrome on Mac prior to 148.0.7778.168 allowed an attacker who convin
Integer overflow in Internationalization in Google Chrome on Windows prior to 148.0.7778.168...
CVE-2026-8559
Integer overflow in Internationalization in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker t
Type Confusion in V8 in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to obtain...
CVE-2026-8570
Type Confusion in V8 in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to obtain potentially sensitive
Script injection in SanitizerAPI in Google Chrome on Android prior to 148.0.7778.168 allowed a...
CVE-2026-8539
Script injection in SanitizerAPI in Google Chrome on Android prior to 148.0.7778.168 allowed a remote attacker to inject
Out of bounds read in UI in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who...
CVE-2026-8541
Out of bounds read in UI in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the rend
Out of bounds read in GPU in Google Chrome on Mac and Windows prior to 148.0.7778.168 allowed a...
CVE-2026-8546
Out of bounds read in GPU in Google Chrome on Mac and Windows prior to 148.0.7778.168 allowed a remote attacker who had
Insufficient validation of untrusted input in GPU in Google Chrome prior to 148.0.7778.168...
CVE-2026-8538
Insufficient validation of untrusted input in GPU in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who
Out of bounds read in FileSystem in Google Chrome on Mac prior to 148.0.7778.168 allowed a remote...
CVE-2026-8543
Out of bounds read in FileSystem in Google Chrome on Mac prior to 148.0.7778.168 allowed a remote attacker who convinced
Out of bounds read in Media in Google Chrome on Linux and ChromeOS prior to 148.0.7778.168...
CVE-2026-8535
Out of bounds read in Media in Google Chrome on Linux and ChromeOS prior to 148.0.7778.168 allowed a remote attacker who
Use after free in Google Lens in Google Chrome prior to 148.0.7778.168 allowed a remote attacker...
CVE-2026-8550
Use after free in Google Lens in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the
@utcp/http: SSRF via attacker-controlled OpenAPI servers[0].url in HTTP communication protocol
CVE-2026-45366
## Summary The `@utcp/http` package is vulnerable to a blind Server-Side Request Forgery (SSRF) caused by a trust-bound
slack-go `SecretsVerifier` accepts empty signing secret without precondition
```go func NewSecretsVerifier(header http.Header, secret string) (SecretsVerifier, error) { hash := hmac.New(sha256.
Svelte: SSR XSS via Insecure Promise Serialization in hydratable
Contents of `hydratable` promises were not properly stringified, potentially leading to an XSS exploit. You are vulnerab
electerm's encrypt method not safe enough
CVE-2026-45787
### Impact _Insecure sync encryption: deterministic AES-192-CBC with a fixed zero IV, constant KDF salt, and no MAC lead
Svelte Vulnerable to XSS via DOM Clobbering of Internal Framework State
CVE-2026-42573
Svelte was vulnerable to DOM clobbering of its internal framework state on elements, potentially leading to XSS attacks.
Svelte: ReDoS in `<svelte:element>` Tag Validation
CVE-2026-42567
An internal regex in the Svelte runtime can take exponential time to test in ``. You are only vulnerable to this if you
Open WebUI: Unauthenticated endpoint can trigger embedding generation (cost/DoS)
CVE-2026-45667
### Summary GET `/api/v1/memories/ef` is accessible without authentication and executes `request.app.state.EMBEDDING_FUN