Attestkeep
Dil: Türkçe
Kayıt ol
Zafiyetler

Gate'in zaten bildiği kritik zafiyetler.

Attestkeep her altı saatte bir Trivy vulnerability database'ini çeker; tarayıcı cluster'ınızın içinde aynı database'i okur. Bunlar database'in bu hafta kritik saydığı kayıtlar ve ne zaman saydığı. Haberin çıktığı an değil, gate'in öğrendiği an.

Database son güncelleme27 Eki 2026, 19:17 UTC
29kritik, son 7 gün411yüksek, son 7 gün649orta, son 7 gün145düşük, son 7 gün
IDZafiyetBu seviyede olduğu tarihYayın
CVE-2026-106251
düşük		chromium-browser: UI misrepresentation in Chromoting07:11 UTC derlemesi
CVE-2026-106249
düşük		chromium-browser: Incorrect authorization in Autofill07:11 UTC derlemesi
CVE-2026-106247
düşük		chromium-browser: angle: Buffer overflow in ANGLE07:11 UTC derlemesi
CVE-2026-106236
düşük		chromium-browser: UI misrepresentation in Chromoting07:11 UTC derlemesi
CVE-2026-106234
düşük		chromium-browser: Use after free in Network07:11 UTC derlemesi
CVE-2026-106220
düşük		chromium-browser: Information leak in Passwords07:11 UTC derlemesi
CVE-2026-106192
düşük		chromium-browser: Information leak in Mobile07:11 UTC derlemesi
CVE-2026-106191
düşük		chromium-browser: Missing authorization in Actor07:11 UTC derlemesi
CVE-2026-106187
düşük		chromium-browser: Missing authorization in Permissions07:11 UTC derlemesi
CVE-2026-106186
düşük		chromium-browser: Uncontrolled search path element in CredentialProvider07:11 UTC derlemesi
CVE-2026-106179
düşük		chromium-browser: UI misrepresentation in WebAppInstalls07:11 UTC derlemesi
CVE-2026-106101
düşük		Quasar Framework: DOM Clobbering in Quasar openURL() SafariViewController Integration Causes Client-Side Denial of Service07:11 UTC derlemesi
CVE-2026-105800
düşük		i18next-http-backend: i18next-http-backend: Server-Side Request Forgery via crafted path template parameters07:11 UTC derlemesi
CVE-2026-105799
düşük		LangChain: RediSearch Filter Injection via Unescaped Tag/Text Values07:11 UTC derlemesi
CVE-2026-105795
düşük		Kiota: Unsafe oauth_card_path references in Kiota-generated API plugin manifests07:11 UTC derlemesi
CVE-2026-75820
düşük		aspell: aspell: Denial of Service via integer truncation in wordlist processing07:11 UTC derlemesi
CVE-2026-75818
düşük		aspell: aspell: Denial of Service via crafted compressed file in prezip-bin07:11 UTC derlemesi
CVE-2026-98363
düşük		kernel: firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS07:11 UTC derlemesi
CVE-2026-98362
düşük		kernel: clk: scpi: bound-check DVFS index in scpi_dvfs_recalc_rate07:11 UTC derlemesi
CVE-2026-98346
düşük		kernel: wifi: cfg80211: don't get the radio mask for netdev-less wdevs07:11 UTC derlemesi
CVE-2026-98345
düşük		kernel: wifi: cfg80211: check IP header size in cfg80211_classify8021d()07:11 UTC derlemesi
CVE-2026-98344
düşük		kernel: dmaengine: Fix device kref underflow in dma_chan_put()07:11 UTC derlemesi
CVE-2026-98338
düşük		kernel: wifi: cfg80211: ibss: ref BSS entry for joined event07:11 UTC derlemesi
CVE-2026-98337
düşük		kernel: wifi: mac80211: don't start a ROC while scanning07:11 UTC derlemesi
CVE-2026-98334
düşük		kernel: wifi: mac80211: reset state when starting AP fails07:11 UTC derlemesi
CVE-2026-98332
düşük		kernel: wifi: mac80211: only operate on TDLS peers in the TDLS code07:11 UTC derlemesi
CVE-2026-98329
düşük		kernel: wifi: mac80211: don't allow injecting frames wider than the chanctx07:11 UTC derlemesi
CVE-2026-98328
düşük		kernel: wifi: mac80211: add HE 6 GHz capability in the scan elems len07:11 UTC derlemesi
CVE-2026-98326
düşük		kernel: wifi: mac80211: mesh: release the channel if start fails07:11 UTC derlemesi
CVE-2026-98325
düşük		kernel: wifi: mac80211: set up the TX info early to fix failure paths07:11 UTC derlemesi
CVE-2026-98321
düşük		kernel: netfilter: nf_nat: unregister and release hooks on error07:11 UTC derlemesi
CVE-2026-98319
düşük		kernel: drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr07:11 UTC derlemesi
CVE-2026-98317
düşük		kernel: neighbour: Enforce min/max to NDTPA_INTERVAL_PROBE_TIME_MS07:11 UTC derlemesi
CVE-2026-98308
düşük		kernel: ALSA: hda: trace PCM open only after assigning a stream07:11 UTC derlemesi
CVE-2026-98307
düşük		kernel: wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all()07:11 UTC derlemesi
CVE-2026-98304
düşük		kernel: net: bcmgenet: restore the hardware filters on open07:11 UTC derlemesi
CVE-2026-98297
düşük		kernel: Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained07:11 UTC derlemesi
CVE-2026-98289
düşük		kernel: af_unix: Unify scc_index when finalising SCC in __unix_walk_scc()07:11 UTC derlemesi
CVE-2026-98285
düşük		kernel: net: bridge: vlan: fix bugs caused by switchdev deletion errors07:11 UTC derlemesi
CVE-2026-98278
düşük		kernel: net: remove WARN_ON_ONCE() from the dev_fill_forward_path() loop check07:11 UTC derlemesi
CVE-2026-98270
düşük		kernel: drm/amdgpu: check ras and obj before dereference07:11 UTC derlemesi
CVE-2026-98268
düşük		kernel: perf: Fix null pointer access in is_include_guest_event()07:11 UTC derlemesi
CVE-2026-98263
düşük		kernel: ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config->type07:11 UTC derlemesi
CVE-2026-98259
düşük		kernel: fs/dax: check zero or empty entry before converting xarray entry07:11 UTC derlemesi
CVE-2026-98240
düşük		kernel: net: ip_tunnel: initialize `options_len` before referencing options07:11 UTC derlemesi
CVE-2026-98237
düşük		kernel: net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain07:11 UTC derlemesi
CVE-2026-98235
düşük		kernel: net/sched: act_api: release tail references on DELACTION failure07:11 UTC derlemesi
CVE-2026-98234
düşük		kernel: net/sched: hhf: cap hh_flows_limit at change time07:11 UTC derlemesi
CVE-2026-98233
düşük		kernel: net/packet: clear RX owner on VNET header error07:11 UTC derlemesi
CVE-2026-98224
düşük		kernel: mm/vma: correctly unaccount on mmap_prepare() failure07:11 UTC derlemesi

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.