Zafiyetler

Gate'in zaten bildiği kritik zafiyetler.

Attestkeep her altı saatte bir Trivy vulnerability database'ini çeker; tarayıcı cluster'ınızın içinde aynı database'i okur. Bunlar database'in bu hafta kritik saydığı kayıtlar ve ne zaman saydığı. Haberin çıktığı an değil, gate'in öğrendiği an.

IDZafiyetBu seviyede olduğu tarihYayın
CVE-2026-95301
yüksek
chromium-browser: Missing authorization in Extensions07:11 UTC derlemesi
CVE-2026-95299
yüksek
chromium-browser: Use after free in GPU07:11 UTC derlemesi
CVE-2026-95298
yüksek
chromium-browser: Use after free in Browser07:11 UTC derlemesi
CVE-2026-95293
yüksek
chromium-browser: Uninitialized resource in GPU07:11 UTC derlemesi
CVE-2026-95291
yüksek
chromium-browser: UI misrepresentation in SecurityIndicators07:11 UTC derlemesi
CVE-2026-95286
yüksek
chromium-browser: Type confusion in Bindings07:11 UTC derlemesi
CVE-2026-95284
yüksek
chromium-browser: angle: Buffer overflow in ANGLE07:11 UTC derlemesi
CVE-2026-95283
yüksek
chromium-browser: Buffer overflow in Tint07:11 UTC derlemesi
CVE-2026-95282
yüksek
chromium-browser: Use after free in Platform07:11 UTC derlemesi
CVE-2026-95281
yüksek
chromium-browser: angle: Buffer overflow in ANGLE07:11 UTC derlemesi
CVE-2026-95280
yüksek
chromium-browser: Race condition in V807:11 UTC derlemesi
CVE-2026-95277
yüksek
chromium-browser: Use after free in Views07:11 UTC derlemesi
CVE-2026-95274
yüksek
chromium-browser: Improper output encoding in DevTools07:11 UTC derlemesi
CVE-2026-102677
yüksek
electron: Electron: Privilege escalation via sandboxed preload code cache poisoning07:11 UTC derlemesi
CVE-2026-102559
yüksek
libsoup: libsoup: Heap buffer overflow during WebSocket client-frame masking07:11 UTC derlemesi
CVE-2026-102558
yüksek
libsoup: libsoup: Heap buffer overflow during WebSocket receive-buffer growth07:11 UTC derlemesi
CVE-2026-102555
yüksek
libsoup: libsoup: Heap buffer overflow via uninitialized length in data-URI base64 decoding07:11 UTC derlemesi
CVE-2026-92227
yüksek
Joomla! Core - [20260914] - Core - MFA Authentication Bypass through rememberme cookies in Joomla 4.0.0-5.4.8, 6.0.0-6.1.307:11 UTC derlemesi
CVE-2026-92222
yüksek
Joomla! Core - [20260909] - Core - SSRF vectors in various core extensions in Joomla 4.0.0-5.4.8, 6.0.0-6.1.307:11 UTC derlemesi
CVE-2026-90906
yüksek
Joomla! Core - [20260901] - XSS in HTMLHelper::link method in Joomla 1.5.0-5.4.8, 6.0.0-6.1.307:11 UTC derlemesi
CVE-2026-102675
yüksek
electron: Electron: Cross-origin information disclosure via improper CORS enforcement in custom protocol handlers07:11 UTC derlemesi
CVE-2026-102557
yüksek
libsoup: libsoup: Heap buffer overflow during WebSocket message reassembly07:11 UTC derlemesi
CVE-2026-102556
yüksek
libsoup: libsoup: Heap buffer overflow from WebSocket Pong signal type confusion07:11 UTC derlemesi
CVE-2026-97689
yüksek
urllib3: urllib3: Denial of Service via unbounded memory allocation in chunk parser07:11 UTC derlemesi
CVE-2026-97687
yüksek
urllib3: urllib3: Traffic interception via HTTPS proxy TLS configuration override07:11 UTC derlemesi
CVE-2026-84782
yüksek
openssl: compat-openssl: openssl: Information disclosure via DTLS handshake retransmission07:11 UTC derlemesi
CVE-2026-102600
yüksek
Socket.IO: Prototype Pollution via Unsafe Client Session Lookup07:11 UTC derlemesi
CVE-2026-100308
yüksek
gluonts: gluonts: Arbitrary command execution via untrusted model deserialization07:11 UTC derlemesi
CVE-2026-68911
yüksek
nicotine-plus: nicotine-plus: Denial of Service via decompression bomb in peer messages07:11 UTC derlemesi
CVE-2026-63209
yüksek
github.com/klauspost/compress: klauspost/compress: Denial of Service via integer overflow in dictionary processing07:11 UTC derlemesi
CVE-2026-100832
yüksek
firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component07:11 UTC derlemesi
CVE-2026-100811
yüksek
firefox: firefox: Sandbox escape via use-after-free in DOM component07:11 UTC derlemesi
CVE-2026-100793
yüksek
firefox: JIT miscompilation in the JavaScript Engine component07:11 UTC derlemesi
CVE-2026-100792
yüksek
firefox: thunderbird: JIT miscompilation in the JavaScript: WebAssembly component07:11 UTC derlemesi
CVE-2026-100791
yüksek
firefox: Use-after-free in the DOM: Core & HTML component07:11 UTC derlemesi
CVE-2026-100790
yüksek
firefox: thunderbird: Use-after-free in the XSLT component07:11 UTC derlemesi
CVE-2026-100789
yüksek
firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component07:11 UTC derlemesi
CVE-2026-100788
yüksek
firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component07:11 UTC derlemesi
CVE-2026-100787
yüksek
firefox: Sandbox escape in the XUL component07:11 UTC derlemesi
CVE-2026-100786
yüksek
firefox: Sandbox escape due to use-after-free in the Graphics component07:11 UTC derlemesi
CVE-2026-100785
yüksek
firefox: thunderbird: Use-after-free in the DOM: Core & HTML component07:11 UTC derlemesi
CVE-2026-100784
yüksek
firefox: Use-after-free in the Layout: Text and Fonts component07:11 UTC derlemesi
CVE-2026-100783
yüksek
firefox: thunderbird: Uninitialized memory in the Audio/Video component07:11 UTC derlemesi
CVE-2026-100782
yüksek
firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics component07:11 UTC derlemesi
CVE-2026-100781
yüksek
firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component07:11 UTC derlemesi
CVE-2026-100780
yüksek
firefox: thunderbird: Use-after-free in the DOM: Core & HTML component07:11 UTC derlemesi
CVE-2026-100779
yüksek
firefox: thunderbird: Use-after-free in the XSLT component07:11 UTC derlemesi
CVE-2026-100778
yüksek
firefox: Sandbox escape due to use-after-free in the DOM: Core & HTML component07:11 UTC derlemesi
CVE-2026-100777
yüksek
firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component07:11 UTC derlemesi
CVE-2026-100776
yüksek
firefox: thunderbird: Use-after-free in the JavaScript: WebAssembly component07:11 UTC derlemesi

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.