Attestkeep
Dil: Türkçe
Kayıt ol
Zafiyetler

Gate'in zaten bildiği kritik zafiyetler.

Attestkeep her altı saatte bir Trivy vulnerability database'ini çeker; tarayıcı cluster'ınızın içinde aynı database'i okur. Bunlar database'in bu hafta kritik saydığı kayıtlar ve ne zaman saydığı. Haberin çıktığı an değil, gate'in öğrendiği an.

Database son güncelleme28 Eki 2026, 01:21 UTC
27kritik, son 7 gün324yüksek, son 7 gün661orta, son 7 gün104düşük, son 7 gün
IDZafiyetBu seviyede olduğu tarihYayın
CVE-2026-98423
orta		kernel: wifi: mac80211_hwsim: don't hand frames to mac80211 while stopping07:11 UTC derlemesi
CVE-2026-98420
orta		kernel: ksmbd: follow SMB2 session expiration semantics07:11 UTC derlemesi
CVE-2026-98419
orta		kernel: drop_monitor: fix out-of-bounds write in reset_per_cpu_data()07:11 UTC derlemesi
CVE-2026-98418
orta		kernel: sched/core: Avoid false migration warning for proxy donors07:11 UTC derlemesi
CVE-2026-98416
orta		kernel: dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn()07:11 UTC derlemesi
CVE-2026-98415
orta		kernel: soc: samsung: exynos-pmu: fix use-after-free of interrupt generator node07:11 UTC derlemesi
CVE-2026-98413
orta		kernel: selinux: always fill AVC decision in avc_has_perm_noaudit()07:11 UTC derlemesi
CVE-2026-98412
orta		kernel: power: sequencing: fix NULL-pointer dereference in pwrseq_unit_new()07:11 UTC derlemesi
CVE-2026-98411
orta		kernel: power: sequencing: fix NULL-pointer dereference in pwrseq_device_register()07:11 UTC derlemesi
CVE-2026-98410
orta		kernel: watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog07:11 UTC derlemesi
CVE-2026-98409
orta		kernel: watchdog: rtd119x: Avoid division by zero07:11 UTC derlemesi
CVE-2026-98408
orta		kernel: watchdog: rzv2h: Avoid division by zero07:11 UTC derlemesi
CVE-2026-98407
orta		kernel: wifi: rsi: fix heap OOB write on key removal07:11 UTC derlemesi
CVE-2026-98403
orta		kernel: s390/boot: Avoid IPL parameter append past command line07:11 UTC derlemesi
CVE-2026-98401
orta		kernel: net: iptunnel: fix stale transport header during tunnel decapsulation07:11 UTC derlemesi
CVE-2026-98397
orta		kernel: platform/x86: x86-android-tablets: hold device reference for secondary fwnode teardown07:11 UTC derlemesi
CVE-2026-98396
orta		kernel: powerpc: Do not restore KUAP in arch_exit_to_user_mode_prepare()07:11 UTC derlemesi
CVE-2026-98395
orta		kernel: powerpc/entry: Fix irq_soft_mask corruption on replayed interrupt exit07:11 UTC derlemesi
CVE-2026-98392
orta		kernel: Bluetooth: btintel_pcie: fix tx_handle bounds off-by-one07:11 UTC derlemesi
CVE-2026-109968
orta		clevis: clevis: PKCS#11 LUKS passphrase logged in plaintext to world-readable file07:11 UTC derlemesi
CVE-2026-88829
orta		busybox: busybox: HTTP request smuggling via pipelined requests in httpd reverse proxy07:11 UTC derlemesi
CVE-2026-109971
orta		clevis: clevis: PKCS#11 token PIN exposed on command line via pkcs11-tool07:11 UTC derlemesi
CVE-2026-109970
orta		clevis: clevis: PKCS#11 token PIN written to world-readable file07:11 UTC derlemesi
CVE-2026-109969
orta		clevis: clevis: no authentication on PKCS#11 AF_UNIX sockets allows key injection under permissive umask07:11 UTC derlemesi
CVE-2026-84790
orta		OpenVPN 2.7_alpha1 through 2.7.7 allows remote authenticated users to ...07:11 UTC derlemesi
CVE-2026-77207
orta		libreswan: Null Pointer Dereference in PKCS#7 bundle with no CERTS07:11 UTC derlemesi
CVE-2026-77206
orta		libreswan: IKEv2 pre-authentication Null Pointer deref in EAP code07:11 UTC derlemesi
CVE-2026-110142
orta		chromium-browser: Use after free in FileSystem07:11 UTC derlemesi
CVE-2026-56826
orta		Shopping privilege escalation through missing authorization in Settings components07:11 UTC derlemesi
GHSA-86xp-94pg-8r6r
orta		Microsoft Security Advisory CVE-2026-92707 - ASP.NET Core Denial of Service Vulnerability07:11 UTC derlemesi
CVE-2026-96303
orta		Microsoft PowerShell Security Feature Bypass Vulnerability07:11 UTC derlemesi
CVE-2026-96238
orta		dotnet8.0: dotnet10.0: dotnet9.0: dotnet: .NET Security Feature Bypass Vulnerability07:11 UTC derlemesi
CVE-2026-96234
orta		dotnet: .NET Information Disclosure Vulnerability07:11 UTC derlemesi
CVE-2026-96229
orta		dotnet: .NET Information Disclosure Vulnerability07:11 UTC derlemesi
CVE-2026-85790
orta		Microsoft Security Advisory CVE-2026-85790 - .NET Information Disclosure Vulnerability07:11 UTC derlemesi
CVE-2026-85747
orta		Distribution is a toolkit to pack, ship, store, and deliver container ...07:11 UTC derlemesi
CVE-2026-70196
orta		dotnet9.0: dotnet8.0: dotnet10.0: ASP.NET Core Denial of Service Vulnerability07:11 UTC derlemesi
CVE-2026-70194
orta		dotnet: .NET Framework Security Feature Bypass Vulnerability07:11 UTC derlemesi
CVE-2026-70165
orta		dotnet: dotnet: Local privilege escalation via improper link resolution07:11 UTC derlemesi
CVE-2026-70162
orta		dotnet: dotnet: Denial of Service via specially crafted web requests07:11 UTC derlemesi
CVE-2026-66822
orta		dotnet10.0: dotnet8.0: dotnet9.0: dotnet: .NET Information Disclosure Vulnerability07:11 UTC derlemesi
CVE-2026-93294
orta		grafana: Grafana: Information disclosure via Azure Monitor resource proxy07:11 UTC derlemesi
CVE-2026-33374
orta		grafana: grafana: Denial of Service via unbounded request body size in Prometheus rule conversion API07:11 UTC derlemesi
CVE-2026-15577
orta		grafana: Grafana: Unauthorized configuration modification via status subresource07:11 UTC derlemesi
CVE-2026-88838
orta		busybox: busybox: non-root mount option filter bypass allows clearing fstab security restrictions07:11 UTC derlemesi
CVE-2026-88833
orta		busybox: busybox: udhcpc integer underflow in DHCP packet length calculation causes denial of service07:11 UTC derlemesi
CVE-2026-109828
orta		libsndfile: libsndfile: Information disclosure via uninitialized variable use in WAV parsing07:11 UTC derlemesi
CVE-2026-104250
orta		unstructured: Stored XSS via unescaped HTML generation07:11 UTC derlemesi
CVE-2026-79611
orta		xen: xen: Denial of Service of guest virtual machines via VM entry failure07:11 UTC derlemesi
CVE-2026-79609
orta		xen: Xen: Denial of Service via guest page table access beyond direct memory mapping07:11 UTC derlemesi

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.