Zafiyetler

Gate'in zaten bildiği kritik zafiyetler.

Attestkeep her altı saatte bir Trivy vulnerability database'ini çeker; tarayıcı cluster'ınızın içinde aynı database'i okur. Bunlar database'in bu hafta kritik saydığı kayıtlar ve ne zaman saydığı. Haberin çıktığı an değil, gate'in öğrendiği an.

IDZafiyetBu seviyede olduğu tarihYayın
CVE-2026-95308
düşük
chromium-browser: Integer overflow in Metrics07:11 UTC derlemesi
CVE-2026-95307
düşük
chromium-browser: UI misrepresentation in ExtensionsMenu07:11 UTC derlemesi
CVE-2026-95305
düşük
chromium-browser: UI misrepresentation in Chromoting07:11 UTC derlemesi
CVE-2026-95296
düşük
chromium-browser: Missing authorization in Core07:11 UTC derlemesi
CVE-2026-95292
düşük
chromium-browser: Incorrect authorization in Safebrowsing07:11 UTC derlemesi
CVE-2026-95288
düşük
chromium-browser: UI misrepresentation in Mobile07:11 UTC derlemesi
CVE-2026-95285
düşük
chromium-browser: Missing authorization in WebView07:11 UTC derlemesi
CVE-2026-95279
düşük
chromium-browser: UI misrepresentation in Omnibox07:11 UTC derlemesi
CVE-2026-95278
düşük
chromium-browser: Missing authorization in WakeLock07:11 UTC derlemesi
CVE-2026-92223
düşük
Joomla! Core - [20260910] - Core - Improper ACL checks for workflow stage changes in Joomla 5.0.0-5.4.8, 6.0.0-6.1.307:11 UTC derlemesi
CVE-2026-90916
düşük
Joomla! Core - [20260906] - Core - Improper ACL checks in content history comparison view in Joomla 4.0.0-5.4.8, 6.0.0-6.1.307:11 UTC derlemesi
CVE-2026-35191
düşük
openssl: openssl: Traffic amplification Denial of Service via QUIC packet over-accounting07:11 UTC derlemesi
CVE-2026-35189
düşük
openssl: openssl: Denial of Service via excessive memory allocation in CRL distribution point processing07:11 UTC derlemesi
CVE-2026-102601
düşük
Flysystem is an open source file storage library for PHP. Prior to 3.3 ...07:11 UTC derlemesi
CVE-2026-100831
düşük
firefox: Use-after-free in the DOM: UI Events & Focus Handling component07:11 UTC derlemesi
CVE-2026-100830
düşük
firefox: Mitigation bypass in the DOM: Navigation component07:11 UTC derlemesi
CVE-2026-100829
düşük
firefox: Mitigation bypass in the DOM: Security component07:11 UTC derlemesi
CVE-2026-100826
düşük
firefox: Denial-of-service in the Storage: StorageManager component07:11 UTC derlemesi
CVE-2026-100823
düşük
firefox: Spoofing issue in the Downloads component in Firefox for Android07:11 UTC derlemesi
CVE-2026-100822
düşük
firefox: Spoofing issue in the Networking: HTTP component07:11 UTC derlemesi
CVE-2026-4523
düşük
Missing Authorization in GitLab07:11 UTC derlemesi
CVE-2026-97027
düşük
flatpak: flatpak: Denial of service via unsanitized keys in exported Desktop Entry / D-Bus Service files07:11 UTC derlemesi
CVE-2026-97026
düşük
flatpak: flatpak: World-writable temporary child repositories in system-helper cache path07:11 UTC derlemesi
CVE-2026-97025
düşük
flatpak: flatpak: World-readable OCI authentication token in system-helper cache path07:11 UTC derlemesi
CVE-2026-102279
düşük
Laravel is a web application framework. Prior to 12.69.0 and 13.30.0, ...07:11 UTC derlemesi
CVE-2026-101915
düşük
@grpc/grpc-js: The server transmits some error messages thrown by method handlers to the client in status messages07:11 UTC derlemesi
CVE-2026-97399
düşük
glibc: glibc: Denial of Service via out-of-bounds read in strncasecmp07:11 UTC derlemesi
CVE-2026-96284
düşük
flatpak: flatpak: Arbitrary read-access to files in the system-helper context via OCI symlink following07:11 UTC derlemesi
CVE-2026-96283
düşük
flatpak: flatpak: flatpak-system-helper cross-user CancelPull orphans another user's ongoing pull07:11 UTC derlemesi
CVE-2026-96282
düşük
flatpak: flatpak: Extension metadata path traversal file existence oracle07:11 UTC derlemesi

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.