Zafiyetler

Gate'in zaten bildiği kritik zafiyetler.

Attestkeep her altı saatte bir Trivy vulnerability database'ini çeker; tarayıcı cluster'ınızın içinde aynı database'i okur. Bunlar database'in bu hafta kritik saydığı kayıtlar ve ne zaman saydığı. Haberin çıktığı an değil, gate'in öğrendiği an.

Database son güncelleme27 Eki 2026, 19:17 UTC

29kritik, son 7 gün 411yüksek, son 7 gün 649orta, son 7 gün 145düşük, son 7 gün

ID	Zafiyet	Bu seviyede olduğu tarih	Yayın
CVE-2026-95370 orta	chromium-browser: Inappropriate implementation in NFC	en geç 24 Eki 202607:11 UTC derlemesi	29 Eyl 2026
CVE-2026-95369 orta	chromium-browser: Inappropriate implementation in XML	en geç 24 Eki 202607:11 UTC derlemesi	29 Eyl 2026
CVE-2026-95366 orta	chromium-browser: Use of released resource in Core	en geç 24 Eki 202607:11 UTC derlemesi	29 Eyl 2026
CVE-2026-95363 orta	chromium-browser: UI misrepresentation in FileSystem	en geç 24 Eki 202607:11 UTC derlemesi	29 Eyl 2026
CVE-2026-95362 orta	chromium-browser: Cross-site request forgery in DevTools	en geç 24 Eki 202607:11 UTC derlemesi	29 Eyl 2026
CVE-2026-95360 orta	chromium-browser: Race condition in Editing	en geç 24 Eki 202607:11 UTC derlemesi	29 Eyl 2026
CVE-2026-95359 orta	chromium-browser: Uninitialized resource in GPU	en geç 24 Eki 202607:11 UTC derlemesi	29 Eyl 2026
CVE-2026-95358 orta	chromium-browser: Incorrect authorization in Mobile	en geç 24 Eki 202607:11 UTC derlemesi	29 Eyl 2026
CVE-2026-95354 orta	chromium-browser: Use after free in Verifier	en geç 24 Eki 202607:11 UTC derlemesi	29 Eyl 2026
CVE-2026-95353 orta	chromium-browser: Use after free in Bindings	en geç 24 Eki 202607:11 UTC derlemesi	29 Eyl 2026
CVE-2026-95347 orta	chromium-browser: Use after free in Updater	en geç 24 Eki 202607:11 UTC derlemesi	29 Eyl 2026
CVE-2026-95346 orta	chromium-browser: UI misrepresentation in Chromoting	en geç 24 Eki 202607:11 UTC derlemesi	29 Eyl 2026
CVE-2026-95345 orta	chromium-browser: Use after free in Actor	en geç 24 Eki 202607:11 UTC derlemesi	29 Eyl 2026
CVE-2026-95344 orta	chromium-browser: Race condition in DevTools	en geç 24 Eki 202607:11 UTC derlemesi	29 Eyl 2026
CVE-2026-95341 orta	chromium-browser: Improper input validation in Desktop	en geç 24 Eki 202607:11 UTC derlemesi	29 Eyl 2026
CVE-2026-95337 orta	chromium-browser: UI misrepresentation in Messages	en geç 24 Eki 202607:11 UTC derlemesi	29 Eyl 2026
CVE-2026-95336 orta	chromium-browser: Information leak in Transactions Platform	en geç 24 Eki 202607:11 UTC derlemesi	29 Eyl 2026
CVE-2026-95333 orta	chromium-browser: Use after free in Metrics	en geç 24 Eki 202607:11 UTC derlemesi	29 Eyl 2026
CVE-2026-95332 orta	chromium-browser: Use of uninitialized variable in Tint	en geç 24 Eki 202607:11 UTC derlemesi	29 Eyl 2026
CVE-2026-95331 orta	chromium-browser: angle: Out of bounds write in ANGLE	en geç 24 Eki 202607:11 UTC derlemesi	29 Eyl 2026
CVE-2026-95330 orta	chromium-browser: Improper state validation in Downloads	en geç 24 Eki 202607:11 UTC derlemesi	29 Eyl 2026
CVE-2026-95325 orta	chromium-browser: angle: Use after free in ANGLE	en geç 24 Eki 202607:11 UTC derlemesi	29 Eyl 2026
CVE-2026-95323 orta	chromium-browser: UI misrepresentation in Chromium	en geç 24 Eki 202607:11 UTC derlemesi	29 Eyl 2026
CVE-2026-95321 orta	chromium-browser: UI misrepresentation in Payments	en geç 24 Eki 202607:11 UTC derlemesi	29 Eyl 2026
CVE-2026-95320 orta	chromium-browser: Missing authorization in Navigation	en geç 24 Eki 202607:11 UTC derlemesi	29 Eyl 2026
CVE-2026-95317 orta	chromium-browser: Incorrect authorization in MediaCapture	en geç 24 Eki 202607:11 UTC derlemesi	29 Eyl 2026
CVE-2026-95314 orta	chromium-browser: Incorrect authorization in HID	en geç 24 Eki 202607:11 UTC derlemesi	29 Eyl 2026
CVE-2026-95312 orta	chromium-browser: Information leak in Passwords	en geç 24 Eki 202607:11 UTC derlemesi	29 Eyl 2026
CVE-2026-95311 orta	chromium-browser: Free of non-heap memory in Fonts	en geç 24 Eki 202607:11 UTC derlemesi	29 Eyl 2026
CVE-2026-95303 orta	chromium-browser: Incomplete cleanup in SmartCard	en geç 24 Eki 202607:11 UTC derlemesi	29 Eyl 2026
CVE-2026-95302 orta	chromium-browser: Incorrect authorization in WebAPKs	en geç 24 Eki 202607:11 UTC derlemesi	29 Eyl 2026
CVE-2026-95300 orta	chromium-browser: Missing authorization in DevTools	en geç 24 Eki 202607:11 UTC derlemesi	29 Eyl 2026
CVE-2026-95297 orta	chromium-browser: Missing authorization in Contextual Tasks	en geç 24 Eki 202607:11 UTC derlemesi	29 Eyl 2026
CVE-2026-95295 orta	chromium-browser: Information leak in Mobile	en geç 24 Eki 202607:11 UTC derlemesi	29 Eyl 2026
CVE-2026-95294 orta	chromium-browser: UI misrepresentation in Browser	en geç 24 Eki 202607:11 UTC derlemesi	29 Eyl 2026
CVE-2026-95290 orta	chromium-browser: Missing authorization in NFC	en geç 24 Eki 202607:11 UTC derlemesi	29 Eyl 2026
CVE-2026-95289 orta	chromium-browser: Incorrect authorization in Scroll	en geç 24 Eki 202607:11 UTC derlemesi	29 Eyl 2026
CVE-2026-95287 orta	chromium-browser: Missing authorization in Navigation	en geç 24 Eki 202607:11 UTC derlemesi	29 Eyl 2026
CVE-2026-95276 orta	chromium-browser: Improper input validation in Themes	en geç 24 Eki 202607:11 UTC derlemesi	29 Eyl 2026
CVE-2026-95275 orta	chromium-browser: Incorrect reference resolution in MediaStream	en geç 24 Eki 202607:11 UTC derlemesi	29 Eyl 2026
CVE-2026-12345 orta	python: python: Arbitrary file deletion via race condition during temporary directory cleanup	en geç 24 Eki 202607:11 UTC derlemesi	29 Eyl 2026
GHSA-253c-mchw-3w2r orta	markdown-it linkify: true has two quadratic paths, so a few hundred KB of markdown blocks the event loop for tens of seconds	en geç 24 Eki 202607:11 UTC derlemesi	29 Eyl 2026
GHSA-r3ph-w7gj-g6xm orta	js-yaml: maxTotalMergeKeys does not limit CPU use for empty merge sources	en geç 24 Eki 202607:11 UTC derlemesi	29 Eyl 2026
CVE-2026-92232 orta	Joomla! Core - [20260916] - Core - XSS filter bypass in InputFilter via whitespace characters in HTML data URIs in Joomla 1.5.0-5.4.8, 6.0.0-6.1.3	en geç 24 Eki 202607:11 UTC derlemesi	29 Eyl 2026
CVE-2026-92231 orta	Joomla! Core - [20260915] - Core - XSS filter bypass in InputFilter via HTML5 entity decode mismatch in Joomla 1.5.0-5.4.8, 6.0.0-6.1.3	en geç 24 Eki 202607:11 UTC derlemesi	29 Eyl 2026
CVE-2026-92226 orta	Joomla! Core - [20260913] - Core - Improper ACL checks for varous webservice edit tasks in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3	en geç 24 Eki 202607:11 UTC derlemesi	29 Eyl 2026
CVE-2026-92225 orta	Joomla! Core - [20260912] - Core - XSS in module list in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3	en geç 24 Eki 202607:11 UTC derlemesi	29 Eyl 2026
CVE-2026-92224 orta	Joomla! Core - [20260911] - Core - XSS in link toolbar layout in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3	en geç 24 Eki 202607:11 UTC derlemesi	29 Eyl 2026
CVE-2026-90918 orta	Joomla! Core - [20260908] - Core - XSS in HTML Mail Templates in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3	en geç 24 Eki 202607:11 UTC derlemesi	29 Eyl 2026
CVE-2026-90917 orta	Joomla! Core - [20260907] - Core - Improper ACL checks in outputs for tagged items in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3	en geç 24 Eki 202607:11 UTC derlemesi	29 Eyl 2026

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.