Zafiyetler

Gate'in zaten bildiği kritik zafiyetler.

Attestkeep her altı saatte bir Trivy vulnerability database'ini çeker; tarayıcı cluster'ınızın içinde aynı database'i okur. Bunlar database'in bu hafta kritik saydığı kayıtlar ve ne zaman saydığı. Haberin çıktığı an değil, gate'in öğrendiği an.

IDZafiyetBu seviyede olduğu tarihYayın
CVE-2026-106422
düşük
chromium-browser: Incorrect authorization in API07:11 UTC derlemesi
CVE-2026-106418
düşük
chromium-browser: Missing authorization in Network07:11 UTC derlemesi
CVE-2026-106417
düşük
chromium-browser: Integer overflow in Media07:11 UTC derlemesi
CVE-2026-106413
düşük
chromium-browser: Race condition in Browser07:11 UTC derlemesi
CVE-2026-106399
düşük
chromium-browser: skia: Out of bounds read in Skia07:11 UTC derlemesi
CVE-2026-106394
düşük
chromium-browser: Incomplete cleanup in Glic07:11 UTC derlemesi
CVE-2026-106390
düşük
chromium-browser: Incorrect provision of specified functionality in SanitizerAPI07:11 UTC derlemesi
CVE-2026-106385
düşük
chromium-browser: Race condition in Chromoting07:11 UTC derlemesi
CVE-2026-106380
düşük
chromium-browser: UI misrepresentation in UI07:11 UTC derlemesi
CVE-2026-106374
düşük
chromium-browser: Type confusion in V807:11 UTC derlemesi
CVE-2026-106371
düşük
chromium-browser: Incorrect authorization in Transactions Platform07:11 UTC derlemesi
CVE-2026-106368
düşük
chromium-browser: UI misrepresentation in UI07:11 UTC derlemesi
CVE-2026-106362
düşük
chromium-browser: Missing authorization in DevTools07:11 UTC derlemesi
CVE-2026-106359
düşük
chromium-browser: Confused deputy in DeviceBoundSessionCredentials07:11 UTC derlemesi
CVE-2026-106355
düşük
chromium-browser: Missing authorization in Media07:11 UTC derlemesi
CVE-2026-106353
düşük
chromium-browser: Improper input validation in Mobile07:11 UTC derlemesi
CVE-2026-106350
düşük
chromium-browser: Incorrect authorization in Browser07:11 UTC derlemesi
CVE-2026-106345
düşük
chromium-browser: Use of released resource in Session07:11 UTC derlemesi
CVE-2026-106344
düşük
chromium-browser: Missing authorization in Permissions07:11 UTC derlemesi
CVE-2026-106343
düşük
chromium-browser: Improper state validation in Autofill AI07:11 UTC derlemesi
CVE-2026-106340
düşük
chromium-browser: Missing authorization in CredentialProvider07:11 UTC derlemesi
CVE-2026-106339
düşük
chromium-browser: Use of released resource in Core07:11 UTC derlemesi
CVE-2026-106338
düşük
chromium-browser: UI misrepresentation in PictureInPicture07:11 UTC derlemesi
CVE-2026-106334
düşük
chromium-browser: Information leak in Payments07:11 UTC derlemesi
CVE-2026-106331
düşük
chromium-browser: Improper input validation in Extensions07:11 UTC derlemesi
CVE-2026-106325
düşük
chromium-browser: Incorrect reference resolution in Core07:11 UTC derlemesi
CVE-2026-106320
düşük
chromium-browser: Use of released resource in UI07:11 UTC derlemesi
CVE-2026-106317
düşük
chromium-browser: UI misrepresentation in FullScreen07:11 UTC derlemesi
CVE-2026-106316
düşük
chromium-browser: UI misrepresentation in Chromoting07:11 UTC derlemesi
CVE-2026-106312
düşük
chromium-browser: Missing authorization in SignIn07:11 UTC derlemesi
CVE-2026-106310
düşük
chromium-browser: Use of released resource in FontAccess07:11 UTC derlemesi
CVE-2026-106309
düşük
chromium-browser: Incorrect authorization in Selection07:11 UTC derlemesi
CVE-2026-106306
düşük
chromium-browser: Incorrect authorization in DevTools07:11 UTC derlemesi
CVE-2026-106305
düşük
chromium-browser: UI misrepresentation in Mobile07:11 UTC derlemesi
CVE-2026-106299
düşük
chromium-browser: Improper input validation in WebAudio07:11 UTC derlemesi
CVE-2026-106297
düşük
chromium-browser: Incorrect authorization in Scheduling07:11 UTC derlemesi
CVE-2026-106296
düşük
chromium-browser: Improper privilege management in UI07:11 UTC derlemesi
CVE-2026-106288
düşük
chromium-browser: Missing authorization in Browser07:11 UTC derlemesi
CVE-2026-106287
düşük
chromium-browser: Information loss in CORS07:11 UTC derlemesi
CVE-2026-106285
düşük
chromium-browser: UI misrepresentation in WebAppInstalls07:11 UTC derlemesi
CVE-2026-106276
düşük
chromium-browser: UI misrepresentation in Payments07:11 UTC derlemesi
CVE-2026-106275
düşük
chromium-browser: Uninitialized resource in GPU07:11 UTC derlemesi
CVE-2026-106272
düşük
chromium-browser: UI misrepresentation in Chromoting07:11 UTC derlemesi
CVE-2026-106270
düşük
chromium-browser: Incorrect authorization in WebAppInstalls07:11 UTC derlemesi
CVE-2026-106269
düşük
chromium-browser: Use after free in CSS07:11 UTC derlemesi
CVE-2026-106264
düşük
chromium-browser: Missing authorization in Web Authentication (Passkeys & Security Keys)07:11 UTC derlemesi
CVE-2026-106260
düşük
chromium-browser: Incorrect authorization in DevTools07:11 UTC derlemesi
CVE-2026-106259
düşük
chromium-browser: Incorrect authorization in PermissionElement07:11 UTC derlemesi
CVE-2026-106256
düşük
chromium-browser: Information leak in Passwords07:11 UTC derlemesi
CVE-2026-106252
düşük
chromium-browser: Incorrect comparison in Fonts07:11 UTC derlemesi

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.