Zafiyetler

Gate'in zaten bildiği kritik zafiyetler.

Attestkeep her altı saatte bir Trivy vulnerability database'ini çeker; tarayıcı cluster'ınızın içinde aynı database'i okur. Bunlar database'in bu hafta kritik saydığı kayıtlar ve ne zaman saydığı. Haberin çıktığı an değil, gate'in öğrendiği an.

IDZafiyetBu seviyede olduğu tarihYayın
CVE-2026-47558
yüksek
nvidia-driver: nvidia-driver: Privilege escalation via double-free of imported memory state07:11 UTC derlemesi
CVE-2026-47556
yüksek
nvidia-driver: nvidia-driver: arbitrary code execution via kernel-mode integer overflow07:11 UTC derlemesi
CVE-2026-47554
yüksek
nvidia-driver: nvidia-driver: Data tampering via signature verification bypass under memory pressure07:11 UTC derlemesi
CVE-2026-47553
yüksek
nvidia-driver: nvidia-driver: Privilege escalation via out-of-bounds write in kernel mode layer07:11 UTC derlemesi
CVE-2026-47552
yüksek
nvidia-driver: nvidia-driver: Privilege escalation via authorization check bypass07:11 UTC derlemesi
CVE-2026-47551
yüksek
nvidia-driver: nvidia-driver: Arbitrary code execution via kernel-mode use-after-free07:11 UTC derlemesi
CVE-2026-47550
yüksek
nvidia-driver: nvidia-driver: Privilege escalation via untrusted pointer dereference07:11 UTC derlemesi
CVE-2026-47548
yüksek
nvidia-driver: nvidia-driver: Arbitrary code execution via out-of-bounds write in kernel mode layer07:11 UTC derlemesi
CVE-2026-47545
yüksek
nvidia-driver: nvidia-driver: Privilege escalation via kernel-mode out-of-bounds read07:11 UTC derlemesi
CVE-2026-47540
yüksek
nvidia-driver: nvidia-driver: Arbitrary code execution via integer underflow in the kernel mode layer07:11 UTC derlemesi
CVE-2026-47530
yüksek
nvidia-driver: nvidia-driver: Privilege escalation via out-of-bounds write in kernel mode layer07:11 UTC derlemesi
CVE-2026-47528
yüksek
nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: arbitrary code execution via uninitialized pointer access07:11 UTC derlemesi
CVE-2026-47523
yüksek
nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Privilege escalation via out-of-bounds write in kernel mode layer07:11 UTC derlemesi
CVE-2026-47519
yüksek
nvidia-vgpu-software: nvidia-vgpu-software: Arbitrary code execution via kernel-mode out-of-bounds read07:11 UTC derlemesi
CVE-2026-47516
yüksek
nvidia-driver: xorg-x11-drv-nvidia: NVIDIA GPU Display Driver: Arbitrary code execution via use-after-free07:11 UTC derlemesi
CVE-2026-47514
yüksek
nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: arbitrary code execution via kernel stack disclosure07:11 UTC derlemesi
CVE-2026-47513
yüksek
nvidia-driver: nvidia-driver: arbitrary code execution via kernel heap out-of-bounds read07:11 UTC derlemesi
CVE-2026-47512
yüksek
nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: privilege escalation via out-of-bounds read in kernel mode layer07:11 UTC derlemesi
CVE-2026-47511
yüksek
nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Arbitrary code execution via kernel-mode out-of-bounds write07:11 UTC derlemesi
CVE-2026-47510
yüksek
nvidia-driver: nvidia-driver: Arbitrary code execution via integer overflow in kernel mode layer07:11 UTC derlemesi
CVE-2026-47508
yüksek
nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Code execution via incorrect numeric type conversion07:11 UTC derlemesi
CVE-2026-47507
yüksek
nvidia-driver: nvidia-driver: Privilege escalation via out-of-bounds array access in the kernel mode layer07:11 UTC derlemesi
CVE-2026-47505
yüksek
nvidia-driver: nvidia-driver: Arbitrary code execution via use-after-free in kernel mode layer07:11 UTC derlemesi
CVE-2026-47504
yüksek
nvidia-driver: nvidia-driver: Arbitrary code execution via type confusion in the NGX updater07:11 UTC derlemesi
CVE-2026-47501
yüksek
nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Privilege escalation via out-of-bounds write during event buffer setup07:11 UTC derlemesi
CVE-2026-47500
yüksek
nvidia-driver: nvidia-driver: arbitrary code execution via use-after-free in kernel mode layer07:11 UTC derlemesi
CVE-2026-47496
yüksek
nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Privilege escalation via crafted RPC in Virtual GPU Manager07:11 UTC derlemesi
CVE-2026-47494
yüksek
nvidia-driver: nvidia-driver: Arbitrary code execution via format string flaw07:11 UTC derlemesi
CVE-2026-47491
yüksek
nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Privilege escalation via improper memory release07:11 UTC derlemesi
CVE-2026-47489
yüksek
nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Privilege escalation via unpreserved read-only memory permissions07:11 UTC derlemesi
GHSA-3q6v-r5mr-hxv8
yüksek
league/commonmark: Quadratic-time denial of service in the GitHub Flavored Markdown Table extension block-start scan07:11 UTC derlemesi
CVE-2026-102984
yüksek
Astro: Malformed port in the Host header can crash the Node adapter07:11 UTC derlemesi
GHSA-9c5c-9qcx-q35q
yüksek
@nestjs/platform-fastify: Path-scoped middleware bypass via absolute-form request targets07:11 UTC derlemesi
CVE-2026-88920
yüksek
org.apache.wss4j/wss4j-ws-security-dom: Apache WSS4J: Authentication bypass via unsigned SAML sender-vouches assertion07:11 UTC derlemesi
CVE-2026-62146
yüksek
cri-o: cri-o: Sandbox state poisoning via pod annotations may expose runtime socket07:11 UTC derlemesi
CVE-2026-94002
yüksek
org.apache.sshd/sshd-sftp: Apache MINA SSHD: Denial of Service via unsolicited SFTP replies07:11 UTC derlemesi
CVE-2026-93994
yüksek
org.apache.sshd/sshd-core: Apache MINA SSHD: Authentication bypass via duplicate public key presentation07:11 UTC derlemesi
CVE-2026-77185
yüksek
org.apache.sshd/sshd-core: Apache MINA SSHD: Asynchronous authentication can bypass signature verification07:11 UTC derlemesi
CVE-2026-102578
yüksek
Moodle: sql injection in question bank web service07:11 UTC derlemesi
CVE-2026-92871
yüksek
pgpool-II: pgpool-II: Denial of Service via NULL pointer dereference in watchdog process07:11 UTC derlemesi
CVE-2026-92870
yüksek
pgpool-II: pgpool-II: Denial of Service via stack-based buffer overflow07:11 UTC derlemesi
CVE-2026-92867
yüksek
pgpool-II: Pgpool-II: arbitrary code execution via out-of-bounds write07:11 UTC derlemesi
CVE-2026-103111
yüksek
pcre2: pcre2: Out-of-bounds write via crafted regular expression07:11 UTC derlemesi
GHSA-v53p-9fqp-m79j
yüksek
Nodemailer: Quadratic backtracking in the addressparser free-text fallback allows remote denial of service07:11 UTC derlemesi
GHSA-8238-w5pm-2374
yüksek
adm-zip: Unhandled error event in async DEFLATE decompression crashes Node.js process (DoS)07:11 UTC derlemesi
CVE-2026-102937
yüksek
virtualenv: virtualenv: Arbitrary code execution via unescaped prompt in Windows activation script07:11 UTC derlemesi
CVE-2026-102930
yüksek
virtualenv: virtualenv: Arbitrary code execution via unverified downloaded seed wheels07:11 UTC derlemesi
CVE-2026-102925
yüksek
virtualenv: virtualenv: Arbitrary code execution via crafted paths in activation scripts07:11 UTC derlemesi
CVE-2026-102253
yüksek
iperf3: iperf3: Denial of Service via UDP receive worker infinite loop07:11 UTC derlemesi
CVE-2026-67987
yüksek
Polynomial-Time Regular Expression Denial of Service (ReDoS) vulnerability07:11 UTC derlemesi

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.