Attestkeep
Dil: Türkçe
Kayıt ol
Zafiyetler

Gate'in zaten bildiği kritik zafiyetler.

Attestkeep her altı saatte bir Trivy vulnerability database'ini çeker; tarayıcı cluster'ınızın içinde aynı database'i okur. Bunlar database'in bu hafta kritik saydığı kayıtlar ve ne zaman saydığı. Haberin çıktığı an değil, gate'in öğrendiği an.

Database son güncelleme27 Eki 2026, 19:17 UTC
29kritik, son 7 gün411yüksek, son 7 gün649orta, son 7 gün145düşük, son 7 gün
IDZafiyetBu seviyede olduğu tarihYayın
CVE-2026-90915
orta		Joomla! Core - [20260905] - Core - Arbitrary directory deletion via cache purge action in Joomla 4.0.0-5.4.8, 6.0.0-6.1.307:11 UTC derlemesi
CVE-2026-90914
orta		Joomla! Core - [20260904] - Core - XSS in the generic media output layouts in Joomla 4.0.0-5.4.8, 6.0.0-6.1.307:11 UTC derlemesi
CVE-2026-90913
orta		Joomla! Core - [20260903] - Core - Improper ACL checks for access level webservice endpoints in Joomla 4.0.0-5.4.8, 6.0.0-6.1.307:11 UTC derlemesi
CVE-2026-90907
orta		Joomla! Core - [20260902] - Core - Unauthorized user account creation via profile.save controller in Joomla 1.5.0-5.4.8, 6.0.0-6.1.307:11 UTC derlemesi
CVE-2026-102674
orta		electron: Electron: Sandbox bypass via popup window creation07:11 UTC derlemesi
CVE-2026-102673
orta		electron: Electron: Sandbox bypass via popups opened from sandboxed iframes07:11 UTC derlemesi
CVE-2026-102635
orta		ImageMagick: ImageMagick: Information disclosure via crafted GIF file07:11 UTC derlemesi
CVE-2026-102633
orta		expat: expat: Denial of Service via integer overflow in expat_realloc07:11 UTC derlemesi
CVE-2026-102623
orta		kubevirt: kubevirt: virt-controller nil-pointer dereference via malformed ephemeral volume07:11 UTC derlemesi
CVE-2026-97711
orta		serialize-javascript: serialize-javascript: Cross-Site Scripting via unescaped script-closing tags in serialized functions07:11 UTC derlemesi
CVE-2026-97688
orta		urllib3: urllib3: Denial of Service via infinite loop during chunked Deflate decoding07:11 UTC derlemesi
CVE-2026-84784
orta		openssl: OpenSSL: Denial of Service via unbounded QUIC connection identifier backlog07:11 UTC derlemesi
CVE-2026-84783
orta		openssl: openssl: Denial of Service via race condition in certificate extension caching07:11 UTC derlemesi
CVE-2026-77696
orta		openssl: OpenSSL: Private key recovery via SM2 timing side-channel07:11 UTC derlemesi
CVE-2026-75806
orta		openssl: OpenSSL: Denial of Service via undersized DTLS record07:11 UTC derlemesi
CVE-2026-75805
orta		openssl: openssl: Denial of Service via crafted CMP certificate revocation response07:11 UTC derlemesi
CVE-2026-75804
orta		openssl: OpenSSL: Denial of Service via unenforced QUIC connection flow control07:11 UTC derlemesi
CVE-2026-72897
orta		openssl: openssl: Denial of Service via out-of-bounds write during TLS context switch07:11 UTC derlemesi
CVE-2026-54875
orta		openssl: openssl: information disclosure via non-constant-time SM2 scalar multiplication on ARM64 and RISC-V07:11 UTC derlemesi
CVE-2026-54873
orta		openssl: openssl: Denial of Service via excessive QUIC packet buffer retention07:11 UTC derlemesi
CVE-2026-54872
orta		openssl: OpenSSL: Private key recovery via timing side-channel in generic elliptic curve operations07:11 UTC derlemesi
CVE-2026-42772
orta		openssl: openssl: Denial of Service via inefficient QUIC stream reassembly07:11 UTC derlemesi
CVE-2026-102598
orta		werkzeug: werkzeug: Denial of Service via safe_join() Windows special device paths07:11 UTC derlemesi
CVE-2026-102371
orta		In wsl-pro-service before 0.1.19ubuntu3, the service component wh ...07:11 UTC derlemesi
CVE-2026-98164
orta		kernel: KVM: x86/mmu: Check write tracking in all address spaces07:11 UTC derlemesi
CVE-2026-96869
orta		firefox: thunderbird: Information disclosure in the Networking component07:11 UTC derlemesi
CVE-2026-100828
orta		Mitigation bypass in the Bookmarks & History component. This vulnerabi ...07:11 UTC derlemesi
CVE-2026-100825
orta		Use-after-free in the JavaScript Engine: JIT component. This vulnerabi ...07:11 UTC derlemesi
CVE-2026-100824
orta		Privilege escalation in the Places component. This vulnerability was f ...07:11 UTC derlemesi
CVE-2026-100821
orta		firefox: thunderbird: Site isolation issue in the Panning and Zooming component07:11 UTC derlemesi
CVE-2026-100820
orta		firefox: thunderbird: Privilege escalation in the Address Bar component07:11 UTC derlemesi
CVE-2026-100819
orta		firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the XPCOM component07:11 UTC derlemesi
CVE-2026-100818
orta		firefox: thunderbird: Sandbox escape due to use-after-free in the Widget: Gtk component07:11 UTC derlemesi
CVE-2026-100817
orta		Other issue in the JavaScript: WebAssembly component. This vulner ...07:11 UTC derlemesi
CVE-2026-100816
orta		firefox: Site isolation issue in the DOM: Networking component07:11 UTC derlemesi
CVE-2026-100815
orta		firefox: Use-after-free in the CSS Parsing and Computation component07:11 UTC derlemesi
CVE-2026-100814
orta		firefox: Incorrect boundary conditions in the JavaScript Engine: JIT component07:11 UTC derlemesi
CVE-2026-100813
orta		firefox: Invalid pointer in the JavaScript Engine: JIT component07:11 UTC derlemesi
CVE-2026-100812
orta		firefox: Denial-of-service in the Graphics component07:11 UTC derlemesi
CVE-2026-100810
orta		firefox: Other issue in the DevTools component07:11 UTC derlemesi
CVE-2026-100809
orta		Same-origin policy bypass in the DevTools component. This vulnerabilit ...07:11 UTC derlemesi
CVE-2026-100808
orta		Mitigation bypass in the DOM: Service Workers component. This vulnerab ...07:11 UTC derlemesi
CVE-2026-100807
orta		firefox: thunderbird: Privilege escalation in the DOM: Service Workers component07:11 UTC derlemesi
CVE-2026-100806
orta		Uninitialized memory in the Graphics: WebGPU component. This vulnerabi ...07:11 UTC derlemesi
CVE-2026-100805
orta		firefox: Race condition, use-after-free in the Audio/Video component07:11 UTC derlemesi
CVE-2026-100804
orta		firefox: Sandbox escape due to use-after-free in the Preferences: Backend component07:11 UTC derlemesi
CVE-2026-100803
orta		firefox: thunderbird: Same-origin policy bypass in the WebExtensions component07:11 UTC derlemesi
CVE-2026-100802
orta		firefox: Uninitialized memory in the Graphics: WebGPU component07:11 UTC derlemesi
CVE-2026-100801
orta		firefox: thunderbird: Privilege escalation in the DLL Services component07:11 UTC derlemesi
CVE-2026-100800
orta		firefox: Sandbox escape due to use-after-free in the Disability Access APIs component07:11 UTC derlemesi

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.