Attestkeep
Dil: Türkçe
Kayıt ol
Zafiyetler

Gate'in zaten bildiği kritik zafiyetler.

Attestkeep her altı saatte bir Trivy vulnerability database'ini çeker; tarayıcı cluster'ınızın içinde aynı database'i okur. Bunlar database'in bu hafta kritik saydığı kayıtlar ve ne zaman saydığı. Haberin çıktığı an değil, gate'in öğrendiği an.

Database son güncelleme27 Eki 2026, 13:12 UTC
23kritik, son 7 gün298yüksek, son 7 gün633orta, son 7 gün139düşük, son 7 gün
IDZafiyetBu seviyede olduğu tarihYayın
CVE-2026-99080
düşük		kernel: fs: Free any excess xarray nodes in clear_inode()07:13 UTC derlemesi
CVE-2026-99075
düşük		kernel: kernel: Denial of Service via memory leak in Rust Binder07:13 UTC derlemesi
CVE-2026-99070
düşük		kernel: ipv6: do not warn on route notification size race07:13 UTC derlemesi
CVE-2026-99068
düşük		kernel: ALSA: ctxfi: Fix memory leakage when clearing DAO input mappers07:13 UTC derlemesi
CVE-2026-98885
düşük		kernel: ima: return error early if file xattr cannot be changed07:13 UTC derlemesi
CVE-2026-115369
düşük		github.com/openbao/openbao: OpenBao: Unauthorized certificate issuance via CSR IP SAN validation bypass07:13 UTC derlemesi
CVE-2026-116159
düşük		ImageMagick: ImageMagick: Denial of Service via memory leak in the -cdl option01:25 UTC derlemesi
CVE-2026-116151
düşük		ImageMagick: ImageMagick: Denial of Service via memory leak in JNG encoder01:25 UTC derlemesi
CVE-2026-116150
düşük		ImageMagick: ImageMagick: Denial of Service via memory leak in FPX encoder01:25 UTC derlemesi
CVE-2026-116148
düşük		ImageMagick: ImageMagick: Command injection via unvalidated drawing options in MVG encoder01:25 UTC derlemesi
CVE-2026-116147
düşük		ImageMagick: ImageMagick: Denial of service via unchecked memory allocation in DJVU decoder01:25 UTC derlemesi
CVE-2026-116146
düşük		ImageMagick: ImageMagick: Denial of Service via MSL decoder memory leak01:25 UTC derlemesi
CVE-2026-116144
düşük		ImageMagick: ImageMagick: Denial of Service via uncontrolled recursion in MVG decoder01:25 UTC derlemesi
CVE-2026-106071
düşük		nodejs: nodejs: Permission model bypass via wildcard path matching flaw01:25 UTC derlemesi
CVE-2026-106070
düşük		nodejs: Node.js: Security inspection bypass via crafted ZIP archive header mismatch01:25 UTC derlemesi
CVE-2026-115449
düşük		libslirp: libslirp: ICMP echo reply length desynchronization leaks host IP to guest01:25 UTC derlemesi
CVE-2026-114236
düşük		podman: Goroutine/file-descriptor leak in storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer on malformed layers01:25 UTC derlemesi
CVE-2026-98844
düşük		kernel: netfs: clear post-EOF pagecache when extending a file via write01:25 UTC derlemesi
CVE-2026-98811
düşük		kernel: net/sched: cls_api: reclaim an empty proto on the error path01:25 UTC derlemesi
CVE-2026-98802
düşük		kernel: seg6: ensure packet data is writable before modifying SRH and IPv6 DA01:25 UTC derlemesi
CVE-2026-98777
düşük		kernel: binder: fix leaked fd fixups on TF_UPDATE_TXN supersede01:25 UTC derlemesi
CVE-2026-98774
düşük		kernel: rust_binder: cancel deferred work items in thread exit01:25 UTC derlemesi
CVE-2026-98700
düşük		kernel: wifi: mac80211: set info->band for 802.3 encap offload frames01:25 UTC derlemesi
CVE-2026-98691
düşük		kernel: thunderbolt: Tear down inactive DP tunnels when the domain is stopped01:25 UTC derlemesi
CVE-2026-98643
düşük		kernel: bpf: Fix out-of-bounds read of rtt_min in sock_ops01:25 UTC derlemesi
CVE-2026-98629
düşük		kernel: net/sched: cls_u32: fix manual hash table handle IDR aliasing01:25 UTC derlemesi
CVE-2026-98628
düşük		kernel: bpf: Make post-verification instruction rewrites killable01:25 UTC derlemesi
CVE-2026-98584
düşük		kernel: net/sched: fix potential stack infoleak in em_text_dump()01:25 UTC derlemesi
CVE-2026-98560
düşük		kernel: net/rds: size a connection's path set by the transport it ends up with01:25 UTC derlemesi
CVE-2026-98458
düşük		kernel: Bluetooth: ISO: release unused CIS holds after channel attach01:25 UTC derlemesi
CVE-2026-98451
düşük		kernel: smb: client: use finish_no_open() for non-regular inodes01:25 UTC derlemesi
CVE-2026-98438
düşük		kernel: mptcp: options: fix uninit-value in mptcp_write_data_fin01:25 UTC derlemesi
CVE-2026-111802
düşük		nautilus: nautilus: Arbitrary File Deletion via Trash Symlink01:25 UTC derlemesi
CVE-2026-46472
düşük		gstreamer1-plugins-good: gstreamer1-plugins-good: Information disclosure via out-of-bounds read in qtdemux_parse_chnl01:25 UTC derlemesi
CVE-2026-111581
düşük		libblockdev: libblockdev: argument injection in NTFS/VFAT label-setting helpers via udisks2 SetLabel() D-Bus method01:25 UTC derlemesi
CVE-2026-98427
düşük		kernel: net/sched: codel: bound the dropping loop per dequeue call01:25 UTC derlemesi
CVE-2026-98414
düşük		kernel: memcg: avoid charging the root memcg from obj_cgroup_charge_pages()01:25 UTC derlemesi
CVE-2026-98402
düşük		kernel: net: icmp: avoid invalid transport header access in icmp_send tracepoint01:25 UTC derlemesi
CVE-2026-98398
düşük		kernel: locking/lockdep: Invalidate stale class_cache entries for zapped classes01:25 UTC derlemesi
CVE-2026-98394
düşük		kernel: af_unix: Return immediately when manage_oob() returns NULL for 0-length buffer01:25 UTC derlemesi
CVE-2026-98393
düşük		kernel: net: ipv4: Fix UDP length overflow with PMTU discover and big MTU01:25 UTC derlemesi
CVE-2026-98391
düşük		kernel: drm/xe: Guard page-fault worker with runtime PM check01:25 UTC derlemesi
CVE-2026-98390
düşük		kernel: x86/amd_node: Avoid divide by zero on virtualized systems01:25 UTC derlemesi
CVE-2026-98389
düşük		kernel: drm/amdgpu: skip gfx switch_power_profile during GPU reset01:25 UTC derlemesi
CVE-2026-100229
düşük		gstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: out-of-bounds write in gst_h266_parser_parse_dci() due to off-by-one array bound check01:25 UTC derlemesi
CVE-2026-109278
düşük		ImageMagick: ImageMagick: Denial of Service via memory leak in wavelet-denoise operation01:25 UTC derlemesi
CVE-2026-105081
düşük		ImageMagick: ImageMagick: Security policy bypass via symbolic link01:25 UTC derlemesi
CVE-2026-98356
düşük		kernel: RDMA/bnxt_re: check create_singlethread_workqueue() in DCB setup01:25 UTC derlemesi
CVE-2026-104029
düşük		sssd: sssd: Denial of Service via out-of-bounds read in autofs responder01:25 UTC derlemesi
CVE-2026-105712
düşük		gnupg2: gnupg: Arbitrary file overwrite via symlink traversal in gpgtar01:25 UTC derlemesi

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.