Attestkeep
Dil: Türkçe
Kayıt ol
Zafiyetler

Gate'in zaten bildiği kritik zafiyetler.

Attestkeep her altı saatte bir Trivy vulnerability database'ini çeker; tarayıcı cluster'ınızın içinde aynı database'i okur. Bunlar database'in bu hafta kritik saydığı kayıtlar ve ne zaman saydığı. Haberin çıktığı an değil, gate'in öğrendiği an.

Database son güncelleme27 Eki 2026, 19:17 UTC
29kritik, son 7 gün411yüksek, son 7 gün649orta, son 7 gün145düşük, son 7 gün
IDZafiyetBu seviyede olduğu tarihYayın
CVE-2026-106298
yüksek		chromium-browser: Use after free in Chrome Tabs07:11 UTC derlemesi
CVE-2026-106293
yüksek		chromium-browser: angle: Type confusion in ANGLE07:11 UTC derlemesi
CVE-2026-106281
yüksek		chromium-browser: Use after free in Tint07:11 UTC derlemesi
CVE-2026-106278
yüksek		chromium-browser: Use after free in Select07:11 UTC derlemesi
CVE-2026-106273
yüksek		chromium-browser: Uninitialized resource in Video07:11 UTC derlemesi
CVE-2026-106268
yüksek		chromium-browser: Use after free in WebRTC07:11 UTC derlemesi
CVE-2026-106258
yüksek		chromium-browser: angle: Uninitialized resource in ANGLE07:11 UTC derlemesi
CVE-2026-106257
yüksek		chromium-browser: Use after free in HTML07:11 UTC derlemesi
CVE-2026-106255
yüksek		chromium-browser: Race condition in V807:11 UTC derlemesi
CVE-2026-106248
yüksek		chromium-browser: Use after free in Bindings07:11 UTC derlemesi
CVE-2026-106245
yüksek		chromium-browser: angle: Uninitialized resource in ANGLE07:11 UTC derlemesi
CVE-2026-106243
yüksek		chromium-browser: Incomplete cleanup in Proxy Auth07:11 UTC derlemesi
CVE-2026-106240
yüksek		chromium-browser: Type confusion in V807:11 UTC derlemesi
CVE-2026-106239
yüksek		chromium-browser: Integer overflow in WebGL07:11 UTC derlemesi
CVE-2026-106235
yüksek		chromium-browser: Use after free in WebAudio07:11 UTC derlemesi
CVE-2026-106233
yüksek		chromium-browser: Use after free in Metrics07:11 UTC derlemesi
CVE-2026-106231
yüksek		chromium-browser: Uninitialized resource in Dawn07:11 UTC derlemesi
CVE-2026-106227
yüksek		chromium-browser: Use after free in Core07:11 UTC derlemesi
CVE-2026-106221
yüksek		chromium-browser: Confused deputy in WebAPKs07:11 UTC derlemesi
CVE-2026-106215
yüksek		chromium-browser: angle: Uninitialized resource in ANGLE07:11 UTC derlemesi
CVE-2026-106214
yüksek		chromium-browser: Information leak in Proxy07:11 UTC derlemesi
CVE-2026-106211
yüksek		chromium-browser: Use after free in TabStrip07:11 UTC derlemesi
CVE-2026-106204
yüksek		chromium-browser: Use after free in PDF07:11 UTC derlemesi
CVE-2026-106203
yüksek		chromium-browser: Incomplete cleanup in Autofill07:11 UTC derlemesi
CVE-2026-106202
yüksek		chromium-browser: angle: Uninitialized resource in ANGLE07:11 UTC derlemesi
CVE-2026-106200
yüksek		chromium-browser: Use after free in Track07:11 UTC derlemesi
CVE-2026-106199
yüksek		chromium-browser: Incorrect authorization in Actor07:11 UTC derlemesi
CVE-2026-106198
yüksek		chromium-browser: Missing authorization in FileSystem07:11 UTC derlemesi
CVE-2026-106197
yüksek		chromium-browser: Use after free in Browser07:11 UTC derlemesi
CVE-2026-106196
yüksek		chromium-browser: Missing authorization in Navigation07:11 UTC derlemesi
CVE-2026-106193
yüksek		chromium-browser: Use after free in Parser07:11 UTC derlemesi
CVE-2026-106190
yüksek		chromium-browser: Use after free in Media07:11 UTC derlemesi
CVE-2026-106188
yüksek		chromium-browser: Confused deputy in SignIn07:11 UTC derlemesi
CVE-2026-106184
yüksek		chromium-browser: Uninitialized resource in Media07:11 UTC derlemesi
CVE-2026-106122
yüksek		The RabbitMQ Java client library allows Java and JVM-based application ...07:11 UTC derlemesi
CVE-2026-106121
yüksek		The RabbitMQ Java client library allows Java and JVM-based application ...07:11 UTC derlemesi
CVE-2026-106118
yüksek		ImageSharp: Tiled fax TIFF: tile buffer sized by TileWidth but fax decompressor writes scanlines of ImageWidth — heap OOB write07:11 UTC derlemesi
CVE-2026-102322
yüksek		chromium-browser: Incorrect Authorization in SiteIsolation07:11 UTC derlemesi
CVE-2026-106117
yüksek		ImageSharp: CCITT fax decompression (T4/Modified Huffman): unbounded WriteBits overflows strip buffer — heap OOB write in SixLabors.ImageSharp07:11 UTC derlemesi
CVE-2026-106115
yüksek		ImageSharp: TIFF CCITT T6 encoder writes beyond an undersized output buffer07:11 UTC derlemesi
CVE-2026-106113
yüksek		ImageSharp: HistogramEqualization uses an unvalidated luminance as an unchecked histogram index07:11 UTC derlemesi
CVE-2026-106112
yüksek		ImageSharp: ICC LUT16 output channel count can write beyond Vector407:11 UTC derlemesi
CVE-2026-106110
yüksek		ImageSharp: TIFF CCITT T4 encoder can write past its compressed output buffer07:11 UTC derlemesi
CVE-2026-106107
yüksek		Quasar Framework: App Vite SSR and SSG nonce attributes are not safely constrained07:11 UTC derlemesi
CVE-2026-106106
yüksek		Quasar Framework: SSR/SSG dev error page discloses the full shell environment and its </script> escape is bypassable07:11 UTC derlemesi
CVE-2026-106105
yüksek		Quasar Framework: Development TLS private keys are cached with overly permissive filesystem permissions07:11 UTC derlemesi
CVE-2026-106104
yüksek		Quasar Framework: Super-linear regex backtracking on User-Agent lets one request stall a Quasar SSR server07:11 UTC derlemesi
CVE-2026-106103
yüksek		Quasar Framework: Path Traversal / Arbitrary File Write via crafted Icon Genie profile07:11 UTC derlemesi
CVE-2026-106100
yüksek		Payload: Field-level write access bypass in Payload on MongoDB07:11 UTC derlemesi
CVE-2026-105868
yüksek		Payload: Uploaded XML files could execute same-origin JavaScript07:11 UTC derlemesi

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.