Zafiyetler

Gate'in zaten bildiği kritik zafiyetler.

Attestkeep her altı saatte bir Trivy vulnerability database'ini çeker; tarayıcı cluster'ınızın içinde aynı database'i okur. Bunlar database'in bu hafta kritik saydığı kayıtlar ve ne zaman saydığı. Haberin çıktığı an değil, gate'in öğrendiği an.

IDZafiyetBu seviyede olduğu tarihYayın
CVE-2026-102331
yüksek
chromium-browser: angle: chromium-browser: arbitrary code execution via buffer overflow in ANGLE07:11 UTC derlemesi
CVE-2026-102329
yüksek
chromium-browser: chromium-browser: Cross-site scripting in WebUI07:11 UTC derlemesi
CVE-2026-102328
yüksek
chromium-browser: chromium-browser: Type confusion in V807:11 UTC derlemesi
CVE-2026-102327
yüksek
chromium-browser: chromium-browser: Incorrect authorization in WebView07:11 UTC derlemesi
CVE-2026-102326
yüksek
chromium-browser: chromium-browser: Type confusion in V807:11 UTC derlemesi
CVE-2026-102324
yüksek
chromium-browser: chromium-browser: Use after free in PictureInPicture07:11 UTC derlemesi
CVE-2026-102323
yüksek
chromium-browser: chromium-browser: Type confusion in V807:11 UTC derlemesi
CVE-2026-102321
yüksek
chromium-browser: chromium-browser: Type confusion in V807:11 UTC derlemesi
CVE-2026-102319
yüksek
chromium-browser: chromium-browser: Uninitialized resource in GPU07:11 UTC derlemesi
CVE-2026-102318
yüksek
chromium-browser: chromium-browser: Out of bounds read in WebGL07:11 UTC derlemesi
CVE-2026-102317
yüksek
chromium-browser: chromium-browser: Improper privilege management in Mojo07:11 UTC derlemesi
CVE-2026-102316
yüksek
chromium-browser: chromium-browser: Use after free in Views07:11 UTC derlemesi
CVE-2026-102315
yüksek
chromium-browser: chromium-browser: Uninitialized resource in Media07:11 UTC derlemesi
CVE-2026-102313
yüksek
chromium-browser: angle: chromium-browser: Information disclosure via uninitialized resource in ANGLE07:11 UTC derlemesi
CVE-2026-102311
yüksek
chromium-browser: chromium-browser: Uninitialized resource in GPU07:11 UTC derlemesi
CVE-2026-102309
yüksek
chromium-browser: chromium-browser: Use after free in FullScreen07:11 UTC derlemesi
CVE-2026-102307
yüksek
chromium-browser: chromium-browser: Uninitialized resource in Dawn07:11 UTC derlemesi
CVE-2026-102306
yüksek
chromium-browser: chromium-browser: Use after free in Bluetooth07:11 UTC derlemesi
CVE-2026-102304
yüksek
chromium-browser: chromium-browser: Use after free in Passwords07:11 UTC derlemesi
CVE-2026-102302
yüksek
chromium-browser: chromium-browser: Buffer overflow in V807:11 UTC derlemesi
CVE-2026-102301
yüksek
chromium-browser: chromium-browser: Out of bounds write in GPU07:11 UTC derlemesi
CVE-2026-102299
yüksek
chromium-browser: chromium-browser: Type confusion in V807:11 UTC derlemesi
CVE-2026-102831
yüksek
jupyterlab: JupyterLab: Cross-Site Scripting via malicious clipboard cell pasting07:11 UTC derlemesi
CVE-2026-102829
yüksek
simple-git: simple-git: `VISUAL` editor environment variable is omitted from unsafe editor detection07:11 UTC derlemesi
CVE-2026-102826
yüksek
simple-git: simple-git allows command execution through unblocked Git configuration includes07:11 UTC derlemesi
CVE-2026-102823
yüksek
russh: russh: State corruption via unverified SSH channel identifiers07:11 UTC derlemesi
GHSA-rcw4-f5rp-g42v
yüksek
adm-zip: Decompression-bomb protection (fix for CVE-2026-39244) can be bypassed by declaring uncompressed size as 007:11 UTC derlemesi
CVE-2026-95373
yüksek
chromium-browser: Use after free in DevTools07:11 UTC derlemesi
CVE-2026-95372
yüksek
chromium-browser: Use after free in Chromecast07:11 UTC derlemesi
CVE-2026-95365
yüksek
chromium-browser: Type confusion in IndexedDB07:11 UTC derlemesi
CVE-2026-95357
yüksek
chromium-browser: Out of bounds write in GPU07:11 UTC derlemesi
CVE-2026-95356
yüksek
chromium-browser: Use after free in WindowDialog07:11 UTC derlemesi
CVE-2026-95355
yüksek
chromium-browser: Incorrect authorization in Navigation07:11 UTC derlemesi
CVE-2026-95351
yüksek
chromium-browser: Use after free in Views07:11 UTC derlemesi
CVE-2026-95350
yüksek
chromium-browser: angle: Buffer overflow in ANGLE07:11 UTC derlemesi
CVE-2026-95349
yüksek
chromium-browser: Buffer overflow in WebGL07:11 UTC derlemesi
CVE-2026-95348
yüksek
chromium-browser: Use after free in Bluetooth07:11 UTC derlemesi
CVE-2026-95343
yüksek
chromium-browser: Use after free in WebAudio07:11 UTC derlemesi
CVE-2026-95339
yüksek
chromium-browser: Use after free in ServiceWorker07:11 UTC derlemesi
CVE-2026-95338
yüksek
chromium-browser: Use after free in PDFium07:11 UTC derlemesi
CVE-2026-95335
yüksek
chromium-browser: Use after free in HID07:11 UTC derlemesi
CVE-2026-95329
yüksek
chromium-browser: Out of bounds write in WebGL07:11 UTC derlemesi
CVE-2026-95324
yüksek
chromium-browser: Uninitialized resource in GPU07:11 UTC derlemesi
CVE-2026-95322
yüksek
chromium-browser: Out of bounds write in GPU07:11 UTC derlemesi
CVE-2026-95318
yüksek
chromium-browser: Buffer overflow in Video07:11 UTC derlemesi
CVE-2026-95315
yüksek
chromium-browser: Use after free in Aura07:11 UTC derlemesi
CVE-2026-95313
yüksek
chromium-browser: Use after free in Fullscreen07:11 UTC derlemesi
CVE-2026-95310
yüksek
chromium-browser: Use after free in AdFilter07:11 UTC derlemesi
CVE-2026-95306
yüksek
chromium-browser: Type confusion in V807:11 UTC derlemesi
CVE-2026-95304
yüksek
chromium-browser: Out of bounds write in V807:11 UTC derlemesi

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.