EUVD-2026-87713

Capgo capgo.app is affected by an authorization flaw in the app icon update path. The PUT /app/:id endpoint accepts a user-controlled icon value, normalizes it, and stores it in public.apps.iconurl without verifying that the image path belongs to the target app's own image namespace e.g...

CVE-2026-100618

Capgo (capgo.app) is impacted by an authorization flaw in the app icon update path affecting all versions . The PUT /app/:id endpoint accepts a user-controlled icon value and stores it in public.apps.icon_url without verifying that the path belongs to the target app's specific namespace. This act...

Google Chrome 缓冲区错误漏洞

Google Chrome is a web browser from Google, an American company. A buffer error vulnerability previously existed in Google Chrome version 90.0.4430.212. The vulnerability stems from an out-of-scope write security issue found in the program's Tab Strip component. No details of the vulnerability ar...