CVE-2026-100775 yüksek firefox: thunderbird: Sandbox escape in the Graphics component en geç 24 Eki 2026 07:11 UTC derlemesi 29 Eyl 2026 CVE-2026-100774 yüksek firefox: Use-after-free in the DOM: Core & HTML component en geç 24 Eki 2026 07:11 UTC derlemesi 29 Eyl 2026 CVE-2026-100773 yüksek firefox: thunderbird: Use-after-free in the Storage: IndexedDB component en geç 24 Eki 2026 07:11 UTC derlemesi 29 Eyl 2026 CVE-2026-100772 yüksek firefox: thunderbird: Use-after-free in the DOM: Core & HTML component en geç 24 Eki 2026 07:11 UTC derlemesi 29 Eyl 2026 CVE-2026-100771 yüksek firefox: thunderbird: Undefined behavior in the DOM: Streams component en geç 24 Eki 2026 07:11 UTC derlemesi 29 Eyl 2026 CVE-2026-100770 yüksek firefox: Sandbox escape due to use-after-free in the DOM: Content Processes component en geç 24 Eki 2026 07:11 UTC derlemesi 29 Eyl 2026 CVE-2026-100769 yüksek firefox: thunderbird: Use-after-free in the JavaScript: WebAssembly component en geç 24 Eki 2026 07:11 UTC derlemesi 29 Eyl 2026 CVE-2026-100768 yüksek firefox: Use-after-free in the Graphics: WebGPU component en geç 24 Eki 2026 07:11 UTC derlemesi 29 Eyl 2026 CVE-2026-100767 yüksek firefox: thunderbird: Use-after-free in the Networking: Cache component en geç 24 Eki 2026 07:11 UTC derlemesi 29 Eyl 2026 CVE-2026-100766 yüksek firefox: thunderbird: Information disclosure in the Networking: JAR component en geç 24 Eki 2026 07:11 UTC derlemesi 29 Eyl 2026 CVE-2026-100762 yüksek firefox: Sandbox escape due to use-after-free in the DOM: Content Processes component en geç 24 Eki 2026 07:11 UTC derlemesi 29 Eyl 2026 CVE-2026-100761 yüksek firefox: Privilege escalation due to use-after-free in the Graphics: WebGPU component en geç 24 Eki 2026 07:11 UTC derlemesi 29 Eyl 2026 CVE-2026-100760 yüksek firefox: Sandbox escape in the Security: Process Sandboxing component en geç 24 Eki 2026 07:11 UTC derlemesi 29 Eyl 2026 CVE-2026-100759 yüksek firefox: thunderbird: Uninitialized memory in the Storage: Quota Manager component en geç 24 Eki 2026 07:11 UTC derlemesi 29 Eyl 2026 CVE-2026-100758 yüksek firefox: thunderbird: Sandbox escape in the DOM: Navigation component en geç 24 Eki 2026 07:11 UTC derlemesi 29 Eyl 2026 CVE-2026-100757 yüksek firefox: thunderbird: Use-after-free in the Widget component en geç 24 Eki 2026 07:11 UTC derlemesi 29 Eyl 2026 CVE-2026-100756 yüksek firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Playback component en geç 24 Eki 2026 07:11 UTC derlemesi 29 Eyl 2026 CVE-2026-102496 yüksek org.apache.ws.xmlschema/xmlschema-core: Apache XMLSchema: Denial of Service (DoS) via deeply nested schema structures en geç 24 Eki 2026 07:11 UTC derlemesi 29 Eyl 2026 CVE-2026-102495 yüksek org.apache.ws.xmlschema/xmlschema-core: Apache XMLSchema: Denial of Service via unbounded recursion during schema parsing en geç 24 Eki 2026 07:11 UTC derlemesi 29 Eyl 2026 CVE-2026-95509 yüksek qt: Qt for MCUs: Denial of service via out-of-bounds read in string formatting en geç 24 Eki 2026 07:11 UTC derlemesi 29 Eyl 2026 CVE-2026-96423 yüksek wireshark: Heap-based Buffer Overflow in Wireshark en geç 24 Eki 2026 07:11 UTC derlemesi 29 Eyl 2026 CVE-2026-96419 yüksek wireshark: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Wireshark en geç 24 Eki 2026 07:11 UTC derlemesi 29 Eyl 2026 CVE-2026-95389 yüksek wireshark: Heap-based Buffer Overflow in Wireshark en geç 24 Eki 2026 07:11 UTC derlemesi 29 Eyl 2026 CVE-2026-95387 yüksek wireshark: wireshark: Denial of Service via heap-based buffer overflow in SPDY dissector en geç 24 Eki 2026 07:11 UTC derlemesi 29 Eyl 2026 CVE-2026-84739 yüksek Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab en geç 24 Eki 2026 07:11 UTC derlemesi 29 Eyl 2026 CVE-2026-19547 yüksek ghostscript: ghostscript: Local privilege escalation via predictable resource search path en geç 24 Eki 2026 07:11 UTC derlemesi 29 Eyl 2026 CVE-2026-91012 yüksek org.apache.karaf.config/org.apache.karaf.config.core: Apache Karaf: Privilege escalation via path traversal in configuration service en geç 24 Eki 2026 07:11 UTC derlemesi 29 Eyl 2026 CVE-2026-97024 yüksek flatpak: flatpak: Arbitrary write in root context via path traversal in deploy directory files/etc en geç 24 Eki 2026 07:11 UTC derlemesi 29 Eyl 2026 CVE-2026-102422 yüksek shell-quote: shell-quote: Arbitrary command execution via improper line terminator handling en geç 24 Eki 2026 07:11 UTC derlemesi 29 Eyl 2026 CVE-2026-102281 yüksek Nest: Remote process termination via a deeply nested microservice message pattern en geç 24 Eki 2026 07:11 UTC derlemesi 28 Eyl 2026 CVE-2026-102278 yüksek brace-expansion: brace-expansion: Denial of Service via uncontrolled recursion in nested brace patterns en geç 24 Eki 2026 07:11 UTC derlemesi 28 Eyl 2026 CVE-2026-102276 yüksek brace-expansion: brace-expansion: Denial of Service via stack exhaustion from crafted brace patterns en geç 24 Eki 2026 07:11 UTC derlemesi 28 Eyl 2026 CVE-2026-102275 yüksek pyjwt: PyJWT: Token verification bypass via mismatched OKP key components en geç 24 Eki 2026 07:11 UTC derlemesi 28 Eyl 2026 CVE-2026-102274 yüksek pyjwt: pyjwt: Denial of Service via malformed RSA key in JWK set en geç 24 Eki 2026 07:11 UTC derlemesi 28 Eyl 2026 CVE-2026-102273 yüksek pyjwt: pyjwt: Token forgery via acceptance of public JWK containers as HMAC secrets en geç 24 Eki 2026 07:11 UTC derlemesi 28 Eyl 2026 CVE-2026-102272 yüksek pyjwt: pyjwt: Token forgery via improper Unicode byte-order mark handling en geç 24 Eki 2026 07:11 UTC derlemesi 28 Eyl 2026 CVE-2026-102271 yüksek pyjwt: PyJWT: Authentication bypass via acceptance of DER public keys as HMAC secrets en geç 24 Eki 2026 07:11 UTC derlemesi 28 Eyl 2026 CVE-2026-101918 yüksek pyjwt: PyJWT: Denial of Service via deeply nested JSON token payload en geç 24 Eki 2026 07:11 UTC derlemesi 28 Eyl 2026 CVE-2026-101917 yüksek pyjwt: PyJWT: Denial of Service via outbound request amplification on unknown key identifiers en geç 24 Eki 2026 07:11 UTC derlemesi 28 Eyl 2026 CVE-2026-101916 yüksek grpc-js: grpc-js: Authentication bypass via improper peer certificate validation en geç 24 Eki 2026 07:11 UTC derlemesi 28 Eyl 2026 CVE-2026-96760 yüksek authlib: authlib: Signature verification bypass via deserialize_json en geç 24 Eki 2026 07:11 UTC derlemesi 28 Eyl 2026 CVE-2026-93355 yüksek litellm: LiteLLM: Privilege escalation via unverified email lookup in JWT authentication en geç 24 Eki 2026 07:11 UTC derlemesi 28 Eyl 2026 CVE-2026-97023 yüksek flatpak: flatpak: Arbitrary file deletion in root context via path traversal in deploy directory export/bin en geç 24 Eki 2026 07:11 UTC derlemesi 28 Eyl 2026 CVE-2026-96740 yüksek streamshub/console: console-operator: Streams for Apache Kafka Console: Unfiltered Kafka client properties → SA-token exfiltration via config.providers en geç 24 Eki 2026 07:11 UTC derlemesi 28 Eyl 2026 CVE-2026-55157 yüksek Token Optimizer MCP: OS command injection in smart_user via username in get-user-info en geç 24 Eki 2026 07:11 UTC derlemesi 28 Eyl 2026 CVE-2026-101909 yüksek axios: axios: Denial of Service via prototype pollution gadget in form serialization en geç 24 Eki 2026 07:11 UTC derlemesi 28 Eyl 2026 CVE-2026-101906 yüksek axios: axios: Denial of Service via crafted redirect hostname en geç 24 Eki 2026 07:11 UTC derlemesi 28 Eyl 2026 CVE-2026-101905 yüksek axios: axios: Request socket hijacking via inherited createConnection property en geç 24 Eki 2026 07:11 UTC derlemesi 28 Eyl 2026 CVE-2026-101903 yüksek axios: Axios: Denial of Service via malformed data URLs en geç 24 Eki 2026 07:11 UTC derlemesi 28 Eyl 2026 CVE-2026-101901 yüksek axios: Axios: Denial of Service via unhandled error in HTTP/2 session initialization en geç 24 Eki 2026 07:11 UTC derlemesi 28 Eyl 2026 