Attestkeep
Dil: Türkçe
Kayıt ol
Zafiyetler

Gate'in zaten bildiği kritik zafiyetler.

Attestkeep her altı saatte bir Trivy vulnerability database'ini çeker; tarayıcı cluster'ınızın içinde aynı database'i okur. Bunlar database'in bu hafta kritik saydığı kayıtlar ve ne zaman saydığı. Haberin çıktığı an değil, gate'in öğrendiği an.

Database son güncelleme27 Eki 2026, 19:17 UTC
29kritik, son 7 gün411yüksek, son 7 gün649orta, son 7 gün145düşük, son 7 gün
IDZafiyetBu seviyede olduğu tarihYayın
CVE-2026-98893
orta		kernel: firmware: arm_scmi: Validate SENSOR_UPDATE payload size07:13 UTC derlemesi
CVE-2026-98892
orta		kernel: firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size07:13 UTC derlemesi
CVE-2026-98891
orta		kernel: wifi: mac80211: validate deauth frame length before reason access07:13 UTC derlemesi
CVE-2026-98890
orta		kernel: wifi: libertas: reject short monitor TX frames07:13 UTC derlemesi
CVE-2026-98889
orta		kernel: wifi: iwlwifi: mvm: fix sched scan IE sizing07:13 UTC derlemesi
CVE-2026-98888
orta		kernel: arm64: kprobes: Allow reentering kprobes while single-stepping07:13 UTC derlemesi
CVE-2026-98887
orta		kernel: wifi: mac80211_hwsim: reject undersized HWSIM_ATTR_TX_INFO07:13 UTC derlemesi
CVE-2026-98886
orta		kernel: drm/gma500: return errors from Oaktrail HDMI I2C reads07:13 UTC derlemesi
CVE-2026-98884
orta		kernel: mmc: core: Add validation for host-provided max_segs07:13 UTC derlemesi
CVE-2026-98883
orta		kernel: serial: 8250_port: recognize UPIO_AU07:13 UTC derlemesi
CVE-2026-98882
orta		kernel: media: chips-media: wave5: Add range checks for dec_output_info07:13 UTC derlemesi
CVE-2026-98881
orta		kernel: net: bridge: remove stale rcu_barrier() in br_multicast_dev_del()07:13 UTC derlemesi
CVE-2026-98880
orta		kernel: ntfs3: handle set_blocksize failures07:13 UTC derlemesi
CVE-2026-98879
orta		kernel: isofs: handle set_blocksize failures07:13 UTC derlemesi
CVE-2026-98878
orta		kernel: irqchip/gic-v5: Immediately exec priority drop following activate07:13 UTC derlemesi
CVE-2026-98877
orta		kernel: irqchip/gic-v4: Don't advertise VLPIs if no ITS is probed07:13 UTC derlemesi
CVE-2026-115360
orta		github.com/openbao/openbao: OpenBao: Open redirect via OIDC identity provider user interface07:13 UTC derlemesi
CVE-2026-93237
orta		kernel: LoongArch: Add DIRECT_MAP_PHYSMEM_END definition07:13 UTC derlemesi
CVE-2026-80728
orta		kernel: Revert "drm/amdgpu: fix aperture mapping leak"07:13 UTC derlemesi
CVE-2026-43670
orta		A Content Security Policy bypass was addressed with improved enforceme ...07:13 UTC derlemesi
CVE-2024-43768
orta		In skia_alloc_func of SkDeflate.cpp, there is a possible out of bounds ...07:13 UTC derlemesi
CVE-2026-116152
orta		ImageMagick: ImageMagick: Denial of Service via memory leak in MAT decoder01:25 UTC derlemesi
CVE-2026-106074
orta		nodejs: nodejs: predictable random values via snapshot entropy cache reuse01:25 UTC derlemesi
CVE-2026-106072
orta		nodejs: nodejs: Authentication bypass via non-canonical IPv4 hostname verification01:25 UTC derlemesi
CVE-2026-105481
orta		nodejs: nodejs: Response desynchronization via improper HTTP keep-alive connection reuse01:25 UTC derlemesi
CVE-2026-55889
orta		xdg-desktop-portal: xdg-desktop-portal: unauthorized data disclosure via predictable token generation01:25 UTC derlemesi
CVE-2026-98876
orta		kernel: host1x: bus: Fix missing ops null check in error teardown01:25 UTC derlemesi
CVE-2026-98875
orta		kernel: drm/nouveau/gsp: add SEC2 to GA100 chip table01:25 UTC derlemesi
CVE-2026-98872
orta		kernel: freevxfs: don't BUG() on unknown typed-extent type01:25 UTC derlemesi
CVE-2026-98871
orta		kernel: crypto: ccp - Fix possible deadlock in SEV init failure path01:25 UTC derlemesi
CVE-2026-98870
orta		kernel: ksmbd: remove stale channels from all sessions on teardown01:25 UTC derlemesi
CVE-2026-115327
orta		libyang: libyang: Denial of Service via crafted NETCONF RPC action envelope01:25 UTC derlemesi
CVE-2026-115207
orta		patch: Filename validation bypass in reversal fallback allows file creation outside the working directory01:25 UTC derlemesi
CVE-2026-92822
orta		libmodulemd: libmodulemd: unbounded recursion when parsing nested xmd YAML01:25 UTC derlemesi
CVE-2026-114038
orta		device-mapper-multipath: device-mapper-multipath: Information disclosure via malformed format string01:25 UTC derlemesi
CVE-2026-108518
orta		perl-dbi: perl-dbi: Denial of Service via type confusion in dbi_profile01:25 UTC derlemesi
CVE-2026-92539
orta		grafana: Grafana: Unauthorized cross-organization user management via the SCIM API01:25 UTC derlemesi
CVE-2026-113680
orta		harfbuzz: harfbuzz: Denial of Service via crafted font in WebAssembly shaper01:25 UTC derlemesi
CVE-2026-113679
orta		harfbuzz: HarfBuzz: Out-of-bounds write via crafted font in WebAssembly shaper01:25 UTC derlemesi
CVE-2026-113496
orta		cockpit-machines: VNC console password disclosure through virt-xml command-line arguments01:25 UTC derlemesi
CVE-2026-113495
orta		cockpit-machines: RHSM access-token disclosure through image helper command-line arguments01:25 UTC derlemesi
CVE-2026-101201
orta		qt5-qtbase: qt6-qt5compat: qt: Denial of Service via out-of-bounds read in QBinaryJson01:25 UTC derlemesi
CVE-2026-8168
orta		qt5-qtsvg: qt6-qtsvg: qt: Denial of Service via deeply nested SVG elements01:25 UTC derlemesi
CVE-2026-112283
orta		libbluray: libbluray: Denial of Service via uncontrolled memory allocation in clpi_parse01:25 UTC derlemesi
CVE-2026-112276
orta		netpbm: netpbm: Denial of Service via out-of-bounds read in rasttopnm01:25 UTC derlemesi
CVE-2026-112275
orta		netpbm: netpbm: Denial of Service via heap-based buffer overflow in rasttopnm01:25 UTC derlemesi
CVE-2026-98868
orta		kernel: dm-pcache: reject a kset that overruns its segment01:25 UTC derlemesi
CVE-2026-98866
orta		kernel: sched/cache: Introduce task_struct->sched_cache_grp to fix UAF01:25 UTC derlemesi
CVE-2026-98864
orta		kernel: sched_ext: Wait for SCX_OPSS_DISPATCHING before reenqueueing a task01:25 UTC derlemesi
CVE-2026-98863
orta		kernel: KVM: x86: Re-pend GET_NESTED_STATE_PAGES if getting said pages fails01:25 UTC derlemesi

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.