CVE-2026-98438 düşük kernel: mptcp: options: fix uninit-value in mptcp_write_data_fin 27 Eki 2026 01:25 UTC derlemesi 18 Eki 2026 CVE-2026-111802 düşük nautilus: nautilus: Arbitrary File Deletion via Trash Symlink 27 Eki 2026 01:25 UTC derlemesi 16 Eki 2026 CVE-2026-46472 düşük gstreamer1-plugins-good: gstreamer1-plugins-good: Information disclosure via out-of-bounds read in qtdemux_parse_chnl 27 Eki 2026 01:25 UTC derlemesi 16 Eki 2026 CVE-2026-111581 düşük libblockdev: libblockdev: argument injection in NTFS/VFAT label-setting helpers via udisks2 SetLabel() D-Bus method 27 Eki 2026 01:25 UTC derlemesi 16 Eki 2026 CVE-2026-98427 düşük kernel: net/sched: codel: bound the dropping loop per dequeue call 27 Eki 2026 01:25 UTC derlemesi 14 Eki 2026 CVE-2026-98414 düşük kernel: memcg: avoid charging the root memcg from obj_cgroup_charge_pages() 27 Eki 2026 01:25 UTC derlemesi 14 Eki 2026 CVE-2026-98402 düşük kernel: net: icmp: avoid invalid transport header access in icmp_send tracepoint 27 Eki 2026 01:25 UTC derlemesi 14 Eki 2026 CVE-2026-98398 düşük kernel: locking/lockdep: Invalidate stale class_cache entries for zapped classes 27 Eki 2026 01:25 UTC derlemesi 14 Eki 2026 CVE-2026-98394 düşük kernel: af_unix: Return immediately when manage_oob() returns NULL for 0-length buffer 27 Eki 2026 01:25 UTC derlemesi 14 Eki 2026 CVE-2026-98393 düşük kernel: net: ipv4: Fix UDP length overflow with PMTU discover and big MTU 27 Eki 2026 01:25 UTC derlemesi 14 Eki 2026 CVE-2026-98391 düşük kernel: drm/xe: Guard page-fault worker with runtime PM check 27 Eki 2026 01:25 UTC derlemesi 14 Eki 2026 CVE-2026-98390 düşük kernel: x86/amd_node: Avoid divide by zero on virtualized systems 27 Eki 2026 01:25 UTC derlemesi 14 Eki 2026 CVE-2026-98389 düşük kernel: drm/amdgpu: skip gfx switch_power_profile during GPU reset 27 Eki 2026 01:25 UTC derlemesi 14 Eki 2026 CVE-2026-100229 düşük gstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: out-of-bounds write in gst_h266_parser_parse_dci() due to off-by-one array bound check 27 Eki 2026 01:25 UTC derlemesi 14 Eki 2026 CVE-2026-109278 düşük ImageMagick: ImageMagick: Denial of Service via memory leak in wavelet-denoise operation 27 Eki 2026 01:25 UTC derlemesi 12 Eki 2026 CVE-2026-105081 düşük ImageMagick: ImageMagick: Security policy bypass via symbolic link 27 Eki 2026 01:25 UTC derlemesi 12 Eki 2026 CVE-2026-98356 düşük kernel: RDMA/bnxt_re: check create_singlethread_workqueue() in DCB setup 27 Eki 2026 01:25 UTC derlemesi 6 Eki 2026 CVE-2026-104029 düşük sssd: sssd: Denial of Service via out-of-bounds read in autofs responder 27 Eki 2026 01:25 UTC derlemesi 5 Eki 2026 CVE-2026-105712 düşük gnupg2: gnupg: Arbitrary file overwrite via symlink traversal in gpgtar 27 Eki 2026 01:25 UTC derlemesi 5 Eki 2026 CVE-2026-102621 düşük poppler: poppler: Denial of Service via integer overflow in SplashClip 27 Eki 2026 01:25 UTC derlemesi 29 Eyl 2026 CVE-2026-98055 düşük kernel: ASoC: Intel: avs: Clean up the bus when fetching ML caps fails 27 Eki 2026 01:25 UTC derlemesi 25 Eyl 2026 CVE-2026-96546 düşük gimp: gimp: one-byte out-of-bounds heap read in the uncompressed DDS loader 27 Eki 2026 01:25 UTC derlemesi 23 Eyl 2026 CVE-2026-116190 düşük github.com/rclone/rclone: rclone: Information disclosure via cross-host HTTP redirects 26 Eki 2026 19:14 UTC derlemesi 25 Eki 2026 CVE-2026-106073 düşük nodejs: Node.js: Filesystem read permission bypass via fs.realpathSync() 26 Eki 2026 19:14 UTC derlemesi 23 Eki 2026 CVE-2026-98874 düşük kernel: wifi: iwlwifi: mld: don't WARN on WoWLAN suspend w/o netdetect 26 Eki 2026 19:14 UTC derlemesi 23 Eki 2026 CVE-2026-98873 düşük kernel: netfilter: nf_conntrack_expect: zero at allocation time 26 Eki 2026 19:14 UTC derlemesi 23 Eki 2026 CVE-2026-112769 düşük Parse Server before 8.6.98 and 9.x before 9.10.3 Session Class-Level Permission Bypass 26 Eki 2026 14:38 UTC derlemesi 19 Eki 2026 CVE-2026-116160 düşük ImageMagick: ImageMagick: Denial of Service via crafted image in X11 animate operation 26 Eki 2026 07:15 UTC derlemesi 25 Eki 2026 CVE-2026-116158 düşük ImageMagick: ImageMagick: Denial of Service via memory leak in compare command 26 Eki 2026 07:15 UTC derlemesi 25 Eki 2026 CVE-2026-116157 düşük ImageMagick: ImageMagick: Denial of Service via memory leak in PerlMagick 26 Eki 2026 07:15 UTC derlemesi 25 Eki 2026 CVE-2026-116156 düşük ImageMagick: ImageMagick: Denial of Service via memory leak in -set profile option 26 Eki 2026 07:15 UTC derlemesi 25 Eki 2026 CVE-2026-116153 düşük ImageMagick: ImageMagick: Denial of Service via heap-based buffer overflow in convex-hull calculations 26 Eki 2026 07:15 UTC derlemesi 25 Eki 2026 CVE-2026-116143 düşük ImageMagick: ImageMagick: Denial of Service via scene selection policy bypass 26 Eki 2026 07:15 UTC derlemesi 25 Eki 2026 CVE-2026-116140 düşük ImageMagick: ImageMagick: Security policy bypass via flawed delegate invocation parsing 26 Eki 2026 07:15 UTC derlemesi 25 Eki 2026 CVE-2026-116137 düşük adm-zip: adm-zip: File integrity check bypass via duplicate archive entries 26 Eki 2026 07:15 UTC derlemesi 25 Eki 2026 GHSA-h4fr-cmh5-qr62 düşük Fallow: A `.*` glob segment let an analyzed repository make Fallow test paths in the parent of the project root en geç 24 Eki 2026 07:11 UTC derlemesi 23 Eki 2026 GHSA-xmj3-9gf7-h52w düşük setuptools: Windows path escape via namespace_packages.txt during legacy wheel installation Description en geç 24 Eki 2026 07:11 UTC derlemesi 23 Eki 2026 CVE-2026-83813 düşük twisted: twisted: DNS spoofing via missing response source verification en geç 24 Eki 2026 07:11 UTC derlemesi 23 Eki 2026 CVE-2026-115569 düşük Fallow: Jest and Vitest `projects` entries let an analyzed repository make Fallow read files outside the project root en geç 24 Eki 2026 07:11 UTC derlemesi 23 Eki 2026 CVE-2026-54711 düşük PGHoard: Password written to debug log en geç 24 Eki 2026 07:11 UTC derlemesi 23 Eki 2026 CVE-2026-115730 düşük i18next-http-backend: i18next-http-backend: Cross-site scripting via protocol-relative URL injection en geç 24 Eki 2026 07:11 UTC derlemesi 23 Eki 2026 CVE-2026-114614 düşük authlib: Authlib: Transport security bypass via improper URL validation en geç 24 Eki 2026 07:11 UTC derlemesi 22 Eki 2026 CVE-2026-115393 düşük wasmtime: wasmtime: Memory corruption via cross-engine object validation failure en geç 24 Eki 2026 07:11 UTC derlemesi 22 Eki 2026 CVE-2026-115389 düşük wasmtime: wasmtime: Denial of Service via untracked host memory allocation in Val API en geç 24 Eki 2026 07:11 UTC derlemesi 22 Eki 2026 CVE-2026-115386 düşük wasmtime: wasmtime: Information disclosure via uninitialized struct padding in fd_readdir en geç 24 Eki 2026 07:11 UTC derlemesi 22 Eki 2026 GHSA-c6gr-qvv4-5v3f düşük DOMPurify: SMIL attributeName=href guard is skipped when PARSER_MEDIA_TYPE is application/xhtml+xml en geç 24 Eki 2026 07:11 UTC derlemesi 22 Eki 2026 CVE-2026-115319 düşük github.com/junegunn/fzf: fzf: Denial of Service via inefficient string concatenation en geç 24 Eki 2026 07:11 UTC derlemesi 22 Eki 2026 CVE-2026-114130 düşük Nuxt: Incomplete fix for GHSA-934w-87qh-qr26: a `javascript:` URL prefixed with an ASCII control character executes from `<NuxtLink>` when `pages` is disabled en geç 24 Eki 2026 07:11 UTC derlemesi 21 Eki 2026 CVE-2026-114124 düşük Electron: Off-screen rendering on macOS trusts GPU-supplied frame geometry en geç 24 Eki 2026 07:11 UTC derlemesi 21 Eki 2026 CVE-2026-114122 düşük Electron: Frame subscription trusts GPU-supplied frame geometry en geç 24 Eki 2026 07:11 UTC derlemesi 21 Eki 2026 