Zafiyetler

Gate'in zaten bildiği kritik zafiyetler.

Attestkeep her altı saatte bir Trivy vulnerability database'ini çeker; tarayıcı cluster'ınızın içinde aynı database'i okur. Bunlar database'in bu hafta kritik saydığı kayıtlar ve ne zaman saydığı. Haberin çıktığı an değil, gate'in öğrendiği an.

Database son güncelleme28 Eki 2026, 01:21 UTC

27kritik, son 7 gün 324yüksek, son 7 gün 661orta, son 7 gün 104düşük, son 7 gün

ID	Zafiyet	Bu seviyede olduğu tarih	Yayın
CVE-2026-109774 orta	Invalid pointer, undefined behavior in the DOM: Notifications com ...	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-109773 orta	Denial-of-service in the Sync component. This vulnerability was f ...	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-109772 orta	Same-origin policy bypass in the DevTools component. This vulnera ...	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-109771 orta	Information disclosure in the WebRTC: Networking component. This ...	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-109770 orta	Spoofing issue in the DOM: Web Serial component. This vulnerability wa ...	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-109769 orta	Information disclosure in the Networking: Cache component. This v ...	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-109768 orta	Denial-of-service in the Site Reports component. This vulnerabili ...	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-109767 orta	Information disclosure in the Networking component. This vulnerability ...	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-109766 orta	Mitigation bypass in the Enterprise Policies component. This vulnerabi ...	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-109765 orta	firefox: Race condition, use-after-free in the Graphics: Text component	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-109764 orta	Mitigation bypass in the Enterprise Policies component. This vulnerabi ...	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-109763 orta	Mitigation bypass in the File Handling component. This vulnerability w ...	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-109762 orta	Incorrect boundary conditions in the SVG component. This vulnerability ...	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-109761 orta	Use-after-free in the JavaScript: WebAssembly component. This vul ...	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-109760 orta	Mitigation bypass in the Networking: HTTP component. This vulnerabilit ...	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-109759 orta	Site isolation issue in the Networking component. This vulnerability w ...	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-109757 orta	Sandbox escape due to race condition in the Networking component. This ...	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-109756 orta	Privilege escalation in the DOM: Navigation component. This vulnerabil ...	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-109755 orta	Sandbox escape in the DOM: Content Processes component. This vuln ...	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-109754 orta	Incorrect boundary conditions in the DOM: Editor component. This vulne ...	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-109753 orta	Incorrect boundary conditions in the Layout component. This vulnerabil ...	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-109752 orta	Use-after-free in the DOM: Workers component. This vulnerability was f ...	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-109751 orta	Information disclosure in the Networking component. This vulnerability ...	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-109750 orta	Site isolation issue in the DOM: Web Authentication component. Th ...	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-109749 orta	Use-after-free in the JavaScript: WebAssembly component. This vul ...	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-109748 orta	Use-after-free in the JavaScript: WebAssembly component. This vul ...	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-109747 orta	Other issue in the Address Bar component. This vulnerability was ...	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-109746 orta	Mitigation bypass in the DOM: Security component. This vulnerabil ...	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-109745 orta	Sandbox escape due to uninitialized memory in the DOM: Web Serial comp ...	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-109744 orta	Other issue in the DOM: File component. This vulnerability was fixed i ...	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-109743 orta	Privilege escalation in the Panning and Zooming component. This vulner ...	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-109742 orta	Information disclosure in the PDF Viewer component. This vulnerability ...	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-109741 orta	firefox: Use-after-free in the Storage: Bucket File System component	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-109739 orta	Privilege escalation in the WebExtensions component. This vulnera ...	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-109738 orta	Use-after-free in the Audio/Video: Playback component. This vulnerabil ...	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-109737 orta	Mitigation bypass in the Enterprise Policies component. This vulnerabi ...	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-109736 orta	Frame poisoning in the Layout component. This vulnerability was fixed ...	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-109735 orta	Use-after-free in the DOM: Animation component. This vulnerabilit ...	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-109734 orta	Mitigation bypass in the DOM: Security component. This vulnerability w ...	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-109733 orta	JIT miscompilation in the JavaScript Engine: JIT component. This vulne ...	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-109731 orta	Incorrect boundary conditions in the Graphics: Canvas2D component. Thi ...	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-109730 orta	Integer overflow in the Graphics component. This vulnerability was fix ...	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-109728 orta	Use-after-free in the DOM: Animation component. This vulnerability was ...	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-109725 orta	Use-after-free in the DOM: Core & HTML component. This vulnerability w ...	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-109724 orta	Use-after-free in the DOM: Core & HTML component. This vulnerability w ...	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-109723 orta	Integer overflow in the Layout: Text and Fonts component. This vulnera ...	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-109722 orta	JIT miscompilation in the JavaScript Engine: JIT component. This vulne ...	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-109721 orta	Incorrect boundary conditions in the JavaScript Engine: JIT component. ...	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-109720 orta	JIT miscompilation in the JavaScript: WebAssembly component. This vuln ...	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026
CVE-2026-109718 orta	Use-after-free in the XML component. This vulnerability was fixed in F ...	en geç 24 Eki 202607:11 UTC derlemesi	13 Eki 2026

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.