Yayın tarihine göre
Ağustos 2026: sömürülen ve yeni ciddi CVE kayıtları
7.295 kayıt · 20 KEV. Yayın sırasıyla.
Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.
Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.
Sayfa 10 / 73
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
35İzleyin | CVE-2026-19145İstismar yok | Use after free in Translate in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox vigoogle · chrome · CWE-416 | Yüksek8,8 | — | %0,4 | 6 Ağu 2026 |
33İzleyin | CVE-2026-19147İstismar yok | Use after free in Aura in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process google · chrome · CWE-416 | Yüksek8,3 | — | %0,3 | 6 Ağu 2026 |
33İzleyin | CVE-2026-19148İstismar yok | Out of bounds write in GPU in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer procgoogle · chrome · CWE-787 | Yüksek8,3 | — | %0,3 | 6 Ağu 2026 |
38İzleyin | CVE-2026-19149İstismar yok | Use after free in Aura in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape vgoogle · chrome · CWE-416 | Kritik9,6 | — | %0,3 | 6 Ağu 2026 |
35İzleyin | CVE-2026-19150İstismar yok | Inappropriate implementation in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sangoogle · chrome · CWE-693 | Yüksek8,8 | — | %0,4 | 6 Ağu 2026 |
35İzleyin | CVE-2026-19151İstismar yok | Use after free in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a cragoogle · chrome · CWE-416 | Yüksek8,8 | — | %0,4 | 6 Ağu 2026 |
33İzleyin | CVE-2026-19152İstismar yok | Insufficient policy enforcement in Navigation in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the rengoogle · chrome · CWE-693 | Yüksek8,3 | — | %0,3 | 6 Ağu 2026 |
32İzleyin | CVE-2026-19153İstismar yok | Insufficient validation of untrusted input in Workers in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromisedgoogle · chrome · CWE-20 | Yüksek8,1 | — | %0,3 | 6 Ağu 2026 |
33İzleyin | CVE-2026-19154İstismar yok | Use after free in Skia in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer procesgoogle · chrome · CWE-416 | Yüksek8,3 | — | %0,3 | 6 Ağu 2026 |
33İzleyin | CVE-2026-19155İstismar yok | Use after free in Payments in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to pogoogle · chrome · CWE-416 | Yüksek8,3 | — | %0,3 | 6 Ağu 2026 |
30İzleyin | CVE-2026-19156İstismar yok | Heap buffer overflow in Base in Google Chrome prior to 151.0.7922.109 allowed an attacker who convinced a user to install a malicious extensgoogle · chrome · CWE-122 | Yüksek7,5 | — | %0,2 | 6 Ağu 2026 |
38İzleyin | CVE-2026-19157İstismar yok | Out of bounds write in ANGLE in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox google · chrome · CWE-787 | Kritik9,6 | — | %0,3 | 6 Ağu 2026 |
30İzleyin | CVE-2026-19158İstismar yok | Use after free in Views in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote attacker who convinced a user to engage in specgoogle · chrome · CWE-416 | Yüksek7,5 | — | %0,3 | 6 Ağu 2026 |
30İzleyin | CVE-2026-19159İstismar yok | Use after free in Views in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who convinced a user to engage in specific UI gesgoogle · chrome · CWE-416 | Yüksek7,5 | — | %0,3 | 6 Ağu 2026 |
35İzleyin | CVE-2026-19162İstismar yok | Out of bounds write in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via google · chrome · CWE-787 | Yüksek8,8 | — | %0,4 | 6 Ağu 2026 |
33İzleyin | CVE-2026-19163İstismar yok | Use after free in Media in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer procegoogle · chrome · CWE-416 | Yüksek8,3 | — | %0,3 | 6 Ağu 2026 |
38İzleyin | CVE-2026-19164İstismar yok | Insufficient validation of untrusted input in Codecs in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to potentially perfogoogle · chrome · CWE-20 | Kritik9,6 | — | %0,3 | 6 Ağu 2026 |
30İzleyin | CVE-2026-19165İstismar yok | Use after free in Extensions in Google Chrome prior to 151.0.7922.109 allowed an attacker who convinced a user to install a malicious extensgoogle · chrome · CWE-416 | Yüksek7,5 | — | %0,2 | 6 Ağu 2026 |
38İzleyin | CVE-2026-19166İstismar yok | Use after free in Web Authentication in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escgoogle · chrome · CWE-416 | Kritik9,6 | — | %0,3 | 6 Ağu 2026 |
35İzleyin | CVE-2026-19168İstismar yok | Inappropriate implementation in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sangoogle · chrome · CWE-693 | Yüksek8,8 | — | %0,4 | 6 Ağu 2026 |
35İzleyin | CVE-2026-19169İstismar yok | Insufficient validation of untrusted input in Contextual Tasks in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to performgoogle · chrome · CWE-20 | Yüksek8,8 | — | %0,3 | 6 Ağu 2026 |
38İzleyin | CVE-2026-19170İstismar yok | Use after free in WebGL in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escapgoogle · chrome · CWE-416 | Kritik9,6 | — | %0,3 | 6 Ağu 2026 |
38İzleyin | CVE-2026-19171İstismar yok | Use after free in Media in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escapgoogle · chrome · CWE-416 | Kritik9,6 | — | %0,3 | 6 Ağu 2026 |
33İzleyin | CVE-2026-19172İstismar yok | Use after free in Views in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potengoogle · chrome · CWE-416 | Yüksek8,3 | — | %0,3 | 6 Ağu 2026 |
33İzleyin | CVE-2026-19173İstismar yok | Out of bounds write in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to pgoogle · chrome · CWE-787 | Yüksek8,3 | — | %0,3 | 6 Ağu 2026 |
35İzleyin | CVE-2026-19174İstismar yok | Integer overflow in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a cgoogle · chrome · CWE-190 | Yüksek8,8 | — | %0,4 | 6 Ağu 2026 |
38İzleyin | CVE-2026-19175İstismar yok | Use after free in Payments in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a google · chrome · CWE-416 | Kritik9,6 | — | %0,3 | 6 Ağu 2026 |
30İzleyin | CVE-2026-19176İstismar yok | Use after free in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to executgoogle · chrome · CWE-416 | Yüksek7,5 | — | %0,5 | 6 Ağu 2026 |
33İzleyin | CVE-2026-19177İstismar yok | Insufficient validation of untrusted input in UI in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the google · chrome · CWE-20 | Yüksek8,3 | — | %0,3 | 6 Ağu 2026 |
34İzleyin | CVE-2026-3415İstismar yok | XML External Entity (XXE) Injection via Schema Validation in Multiple WSO2 Products Allows File Reading and Denial of Servicewso2 · wso2 api manager · CWE-776 | Yüksek8,7 | — | %0,4 | 6 Ağu 2026 |
36İzleyin | CVE-2026-3418İstismar yok | Arbitrary File Upload via System REST API in Multiple WSO2 Products Allows Remote Code Executionwso2 · wso2 api manager · CWE-434 | Kritik9,1 | — | %0,7 | 6 Ağu 2026 |
34İzleyin | CVE-2026-43627İstismar yok | llama.cpp b1283–b9058 Integer Overflow in llama_batch_init() Functionggml · llama.cpp · CWE-190 | Yüksek8,5 | — | %0,2 | 6 Ağu 2026 |
34İzleyin | CVE-2026-43628İstismar yok | llama.cpp b3978–b9058 Integer Underflow via DRY Samplerggml · llama.cpp · CWE-125 | Yüksek8,5 | — | %0,2 | 6 Ağu 2026 |
36İzleyin | CVE-2026-43629İstismar yok | llama.cpp b4882–b9058 Buffer Overflow in KV Cache State Restoreggml · llama.cpp · CWE-190 | Kritik9,2 | — | %0,6 | 6 Ağu 2026 |
36İzleyin | CVE-2026-43631İstismar yok | llama.cpp b7492–b9060 Use-After-Free RCE via llama-serverggml · llama.cpp · CWE-362 | Kritik9,2 | — | %0,5 | 6 Ağu 2026 |
36İzleyin | CVE-2026-43632İstismar yok | llama.cpp b7492–b9060 Use-After-Free in Tokenization Endpointsggml · llama.cpp · CWE-367 | Kritik9,2 | — | %0,4 | 6 Ağu 2026 |
30İzleyin | CVE-2026-45378İstismar yok | Decidim: Verification documents can be downloaded through reusable linksdecidim · decidim · CWE-200 | Yüksek7,5 | — | %0,4 | 6 Ağu 2026 |
34İzleyin | CVE-2026-45414İstismar yok | Decidim: JWT-backed authentication can be replayed across organizationsdecidim · decidim · CWE-639 | Yüksek8,5 | — | %0,4 | 6 Ağu 2026 |
34İzleyin | CVE-2026-47194İstismar yok | Frappe: Host header poisoning can redirect magic login links to an attacker-controlled domainfrappe · frappe · CWE-346 | Yüksek8,6 | — | %0,2 | 6 Ağu 2026 |
28İzleyin | CVE-2026-47765İstismar yok | Frappe: Lack of Permissions in restore/bulk_restorefrappe · frappe · CWE-862 | Yüksek7,1 | — | %0,4 | 6 Ağu 2026 |
35İzleyin | CVE-2026-48054İstismar yok | OpenZeppelin Contracts Wizard has Code Injection in Generated Hardhat and Foundry Tests via Unsanitized opts.name / opts.uriopenzeppelin · contracts-wizard · CWE-94 | Yüksek8,8 | — | %0,6 | 6 Ağu 2026 |
29İzleyin | CVE-2026-48079İstismar yok | OpenReception's logout page clears local access_token before server-side revocation, leaving duplicated tokens valid until expiryopen-reception · appointment-booking-software · CWE-613 | Yüksek7,4 | — | %0,5 | 6 Ağu 2026 |
32İzleyin | CVE-2026-48080İstismar yok | OpenReception's tenant detail endpoint discloses live PostgreSQL connection string, superuser-scoped in the tested official deploymentopen-reception · appointment-booking-software · CWE-200 | Yüksek8,0 | — | %0,4 | 6 Ağu 2026 |
32İzleyin | CVE-2026-48081İstismar yok | OpenReception vulnerable to stored click-triggered XSS via javascript: tenant links rendered into patient-facing footeropen-reception · appointment-booking-software · CWE-79 | Yüksek8,1 | — | %0,2 | 6 Ağu 2026 |
29İzleyin | CVE-2026-48084İstismar yok | OpenReception doesn't rate limit passphrase login attemptsopen-reception · appointment-booking-software · CWE-307 | Yüksek7,4 | — | %0,3 | 6 Ağu 2026 |
39İzleyin | CVE-2026-48085İstismar yok | OpenReception has unauthenticated GLOBAL_ADMIN account creation post-bootstrapopen-reception · appointment-booking-software · CWE-862 | Kritik9,8 | — | %0,5 | 6 Ağu 2026 |
39İzleyin | CVE-2026-48086İstismar yok | OpenReception: Tenant admin self-promotes to GLOBAL_ADMINopen-reception · appointment-booking-software · CWE-269 | Kritik9,9 | — | %0,4 | 6 Ağu 2026 |
39İzleyin | CVE-2026-48087İstismar yok | OpenReception: WebAuthn passkey injection allows account takeoveropen-reception · appointment-booking-software · CWE-287 | Kritik9,8 | — | %0,5 | 6 Ağu 2026 |
37İzleyin | CVE-2026-48088İstismar yok | OpenReception vulnerable to unauthenticated staff crypto poisoning that breaks E2E recipient directoryopen-reception · appointment-booking-software · CWE-862 | Kritik9,4 | — | %0,3 | 6 Ağu 2026 |
36İzleyin | CVE-2026-53983İstismar yok | Ground Station prior to 0.6.0 Unauthenticated Persistent Blind Server-Side Request Forgery via Orbital Data Source URLefstratios goudelis · ground station · CWE-918 | Kritik9,2 | — | %0,5 | 6 Ağu 2026 |
35İzleyin | CVE-2026-53984İstismar yok | Ground Station prior to 0.6.0 Unauthenticated Database Wipe and Arbitrary Data Injection via Socket.IO database_backup full_restore Actionefstratios goudelis · ground station · CWE-306 | Yüksek8,8 | — | %0,7 | 6 Ağu 2026 |
34İzleyin | CVE-2026-5855İstismar yok | Contiki-NG LwM2M TLV Parser Out-of-Bounds Read via Unchecked Buffer Length in lwm2m_tlv_readcontiki-ng · contiki-ng · CWE-125 | Yüksek8,7 | — | %0,7 | 6 Ağu 2026 |
28İzleyin | CVE-2026-5856İstismar yok | Contiki-NG DNS/mDNS Resolver Out-of-Bounds Read via Unchecked skip_name Traversal Before Transaction-ID Validationcontiki-ng · contiki-ng · CWE-125 | Yüksek7,1 | — | %0,2 | 6 Ağu 2026 |
36İzleyin | CVE-2026-5857İstismar yok | Contiki-NG MQTT Client Out-of-Bounds Write in PUBLISH Topic Parser via Persistent State Between TCP Segmentscontiki-ng · contiki-ng · CWE-787 | Kritik9,2 | — | %0,9 | 6 Ağu 2026 |
35İzleyin | CVE-2026-62857İstismar yok | Fedify: Server-Side Request Forgery in getNodeInfo() Allows Access to Internal Network Resourcesfedify-dev · fedify · CWE-918 | Yüksek8,8 | — | %0,4 | 6 Ağu 2026 |
34İzleyin | CVE-2026-63637İstismar yok | Dgraph: DQL Injection via unvalidated regexp filter argument in GraphQL query rewriterdgraph-io · dgraph · CWE-943 | Yüksek8,6 | — | %0,4 | 6 Ağu 2026 |
34İzleyin | CVE-2026-63725İstismar yok | sysPass FileBackupService Authenticated OS Command Injection via Backup Pathnuxsmin · syspass · CWE-78 | Yüksek8,6 | — | %0,4 | 6 Ağu 2026 |
32İzleyin | CVE-2026-64665İstismar yok | Statamic: Account takeover via OAuth email matching without email-verification checkstatamic · cms · CWE-287 | Yüksek8,1 | — | %0,5 | 6 Ağu 2026 |
70Bu hafta | CVE-2026-65400Silahlaştırılmış | An authentication issue was addressed with improved state management.apple · macos · CWE-287 | Kritik9,8 | KEV | %1,7 | 6 Ağu 2026 |
30İzleyin | CVE-2026-67422İstismar yok | pymdown-extensions: Exponential-backtracking ReDoS in caret, tilde, betterem, and magiclink inline processorsfacelessuser · pymdown-extensions · CWE-1333 | Yüksek7,5 | — | %0,6 | 6 Ağu 2026 |
29İzleyin | CVE-2026-67434İstismar yok | PHP_CodeSniffer gitblame report command injection via crafted filenamephpcsstandards · php_codesniffer · CWE-78 | Yüksek7,3 | — | %1,0 | 6 Ağu 2026 |
28İzleyin | CVE-2026-67621İstismar yok | Flowise 3.1.4 Missing Authorization on Document Store Mutation Endpointsflowiseai · flowise · CWE-862 | Yüksek7,2 | — | %0,4 | 6 Ağu 2026 |
34İzleyin | CVE-2026-67622İstismar yok | Flowise 3.1.4 IDOR in OpenAI Assistants Integrationflowiseai · flowise · CWE-639 | Yüksek8,5 | — | %0,4 | 6 Ağu 2026 |
35İzleyin | CVE-2026-67687Kavram kanıtı | Insecure Permissions vulnerability in ics-park v.2.0 allows a remote attacker to escalate privileges via the /system/role/save endpoint in RCWE-284 | Yüksek8,8 | — | %0,5 | 6 Ağu 2026 |
39İzleyin | CVE-2026-67688İstismar yok | ICS-Park Smart Park Management System v2.0 contains an unrestricted file upload vulnerability in the file upload module.CWE-434 | Kritik9,8 | — | %0,8 | 6 Ağu 2026 |
39İzleyin | CVE-2026-67689Kavram kanıtı | SQL Injection vulnerability in FineAdmin V1.0 allows a remote attacker to execute arbitrary code via the `field` and `order` parameters in pCWE-89 | Kritik9,8 | — | %0,7 | 6 Ağu 2026 |
28İzleyin | CVE-2026-70557İstismar yok | diboot-core Authenticated Arbitrary Field Read via loadRelatedData Discloses Password Hashes and Saltsdiboot · diboot-core · CWE-639 | Yüksek7,1 | — | %0,3 | 6 Ağu 2026 |
37İzleyin | CVE-2026-70558İstismar yok | Dinky Unauthenticated Arbitrary File Write via /download/uploadFromRsByLocal Gated Only by Hardcoded Default Tokendatalinkdc · dinky · CWE-434 | Kritik9,3 | — | %0,8 | 6 Ağu 2026 |
34İzleyin | CVE-2026-70559Kavram kanıtı | Dinky Unauthenticated System Configuration and Credential Disclosure via GET /api/sysConfig/getAlldatalinkdc · dinky · CWE-306 | Yüksek8,7 | — | %0,4 | 6 Ağu 2026 |
34İzleyin | CVE-2026-70628İstismar yok | FFmpeg 0.5 < 9.0 DVB Subtitle Parser Heap Buffer Overflow via WTV Fileffmpeg · ffmpeg · CWE-190 | Yüksek8,5 | — | %0,1 | 6 Ağu 2026 |
34İzleyin | CVE-2026-70632İstismar yok | FFmpeg 4.4 < 9.0 Heap Out-of-Bounds Write in CFHD Decoder via AVI Demuxingffmpeg · ffmpeg · CWE-787 | Yüksek8,5 | — | %0,2 | 6 Ağu 2026 |
28İzleyin | CVE-2026-70633İstismar yok | TimescaleDB 2.29.1 Out-of-Bounds Read DoS via Gorilla Compression Reverse Iteratortimescale · timescaledb · CWE-125 | Yüksek7,1 | — | %0,5 | 6 Ağu 2026 |
28İzleyin | CVE-2026-70634İstismar yok | TimescaleDB 2.29.1 Out-of-Bounds Read Information Disclosure via Dictionary Compression Reverse Iteratortimescale · timescaledb · CWE-125 | Yüksek7,2 | — | %0,5 | 6 Ağu 2026 |
28İzleyin | CVE-2026-70635İstismar yok | TimescaleDB 2.29.1 Out-of-Bounds Read DoS via Bulk Dictionary Decompression Negative Indextimescale · timescaledb · CWE-125 | Yüksek7,1 | — | %0,4 | 6 Ağu 2026 |
34İzleyin | CVE-2026-70636İstismar yok | Flowise 3.1.4 Authentication Bypass via OAuth2 Credential Refresh Endpointflowiseai · flowise · CWE-862 | Yüksek8,7 | — | %0,6 | 6 Ağu 2026 |
34İzleyin | CVE-2026-70638Kavram kanıtı | llama.cpp b1886–b7445 Integer Overflow via new_1batch() in llama-android.cppggml · llama.cpp · CWE-122 | Yüksek8,5 | — | %0,2 | 6 Ağu 2026 |
29İzleyin | CVE-2026-70640İstismar yok | llama.cpp b1886–b7445 Race Condition Use-After-Free via llama-android.cppggml · llama.cpp · CWE-362 | Yüksek7,3 | — | %0,2 | 6 Ağu 2026 |
28İzleyin | CVE-2026-71324İstismar yok | Traefik: Cross-user response poisoning via proxied CONNECT on Traefik's shared backend keep-alive pooltraefik · traefik · CWE-444 | Yüksek7,0 | — | %1,0 | 6 Ağu 2026 |
30İzleyin | CVE-2026-71327İstismar yok | Traefik: Gateway API route identity collision allows cross-namespace backend hijackingtraefik · traefik · CWE-694 | Yüksek7,6 | — | %0,4 | 6 Ağu 2026 |
32İzleyin | CVE-2026-71445İstismar yok | Authenticated Reflected Cross-Site Scripting in Tag Error Responses in ail-frameworkail-project · ail-framework · CWE-79 | Yüksek8,2 | — | %0,3 | 6 Ağu 2026 |
34İzleyin | CVE-2026-71476İstismar yok | Nx: Zip-Slip in the self-hosted remote cachenrwl · nx · CWE-22 | Yüksek8,7 | — | %0,8 | 6 Ağu 2026 |
30İzleyin | CVE-2026-71488İstismar yok | league/commonmark: Quadratic-time denial of service when parsing crafted Markdownthephpleague · commonmark · CWE-407 | Yüksek7,5 | — | %0,6 | 6 Ağu 2026 |
21İzleyin | CVE-2026-71554Kavram kanıtı | h2: Duplicate Host header could facilitate request smugglingpython-hyper · h2 · CWE-444 | Orta5,3 | — | %0,4 | 6 Ağu 2026 |
31İzleyin | CVE-2026-7406İstismar yok | BMP File Parsing Untrusted Pointer Dereference in certain Autodesk productsautodesk · advance steel · CWE-822 | Yüksek7,8 | — | %0,1 | 6 Ağu 2026 |
31İzleyin | CVE-2026-7867Kavram kanıtı | Udisks2: udisks2: local privilege escalation via as-user option spoofingred hat · red hat enterprise linux 10 · CWE-863 | Yüksek7,8 | — | %0,1 | 6 Ağu 2026 |
35İzleyin | CVE-2026-49163İstismar yok | Application Insights Profiler Elevation of Privilege Vulnerabilitymicrosoft · application insights profiler · CWE-22 | Yüksek8,8 | — | %1,0 | 6 Ağu 2026 |
39İzleyin | CVE-2026-50481İstismar yok | Azure Active Directory Elevation of Privilege Vulnerabilitymicrosoft · azure active directory · CWE-471 | Kritik9,9 | — | %0,8 | 6 Ağu 2026 |
40Planlayın | CVE-2026-50515İstismar yok | Azure Service Bus Remote Code Execution Vulnerabilitymicrosoft · azure service bus · CWE-502 | Kritik9,9 | — | %1,6 | 6 Ağu 2026 |
38İzleyin | CVE-2026-56161İstismar yok | Azure Logic Apps Information Disclosure Vulnerabilitymicrosoft · azure logic apps · CWE-284 | Kritik9,6 | — | %0,6 | 6 Ağu 2026 |
40Planlayın | CVE-2026-56162İstismar yok | Azure SQL Database Elevation of Privilege Vulnerabilitymicrosoft · azure sql database · CWE-287 | Kritik10,0 | — | %0,9 | 6 Ağu 2026 |
39İzleyin | CVE-2026-59115İstismar yok | Microsoft Entra Provisioning Service Elevation of Privilege Vulnerabilitymicrosoft · entra provisioning service · CWE-35 | Kritik9,9 | — | %1,0 | 6 Ağu 2026 |
37İzleyin | CVE-2026-59118İstismar yok | Copilot Cowork Elevation of Privilege Vulnerabilitymicrosoft · power apps · CWE-285 | Kritik9,3 | — | %0,7 | 6 Ağu 2026 |
39İzleyin | CVE-2026-62830İstismar yok | Azure SRE Agent Elevation of Privilege Vulnerabilitymicrosoft · azure sre agent · CWE-862 | Kritik9,9 | — | %0,7 | 6 Ağu 2026 |
40Planlayın | CVE-2026-62836İstismar yok | Azure SQL Managed Instance Elevation of Privilege Vulnerabilitymicrosoft · azure sql managed instance · CWE-923 | Kritik10,0 | — | %0,6 | 6 Ağu 2026 |
39İzleyin | CVE-2026-62873İstismar yok | Microsoft 365 Admin Center Elevation of Privilege Vulnerabilitymicrosoft · windows admin center · CWE-347 | Kritik9,8 | — | %0,6 | 6 Ağu 2026 |
38İzleyin | CVE-2026-62896İstismar yok | Microsoft Teams Elevation of Privilege Vulnerabilitymicrosoft · teams · CWE-287 | Kritik9,6 | — | %0,6 | 6 Ağu 2026 |
30İzleyin | CVE-2026-62918İstismar yok | Microsoft Teams Spoofing Vulnerabilitymicrosoft · teams · CWE-347 | Yüksek7,5 | — | %0,4 | 6 Ağu 2026 |
40Planlayın | CVE-2026-63508İstismar yok | Microsoft Planetary Computer Pro Elevation of Privilege Vulnerabilitymicrosoft · planetary computer · CWE-306 | Kritik10,0 | — | %0,7 | 6 Ağu 2026 |
40Planlayın | CVE-2026-65667İstismar yok | Microsoft Teams Elevation of Privilege Vulnerabilitymicrosoft · teams · CWE-862 | Kritik10,0 | — | %0,7 | 6 Ağu 2026 |
35İzleyin | CVE-2026-65668İstismar yok | Microsoft Purview eDiscovery Elevation of Privilege Vulnerabilitymicrosoft · purview ediscovery · CWE-284 | Yüksek8,8 | — | %0,7 | 6 Ağu 2026 |
- CVE-2026-1914535İzleyin
Use after free in Translate in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox vi
YüksekCVSS 8,8İstismar yokEPSS %0google · chrome6 Ağu 2026
- CVE-2026-1914733İzleyin
Use after free in Aura in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process
YüksekCVSS 8,3İstismar yokEPSS %0google · chrome6 Ağu 2026
- CVE-2026-1914833İzleyin
Out of bounds write in GPU in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer proc
YüksekCVSS 8,3İstismar yokEPSS %0google · chrome6 Ağu 2026
- CVE-2026-1914938İzleyin
Use after free in Aura in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape v
KritikCVSS 9,6İstismar yokEPSS %0google · chrome6 Ağu 2026
- CVE-2026-1915035İzleyin
Inappropriate implementation in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a san
YüksekCVSS 8,8İstismar yokEPSS %0google · chrome6 Ağu 2026
- CVE-2026-1915135İzleyin
Use after free in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a cra
YüksekCVSS 8,8İstismar yokEPSS %0google · chrome6 Ağu 2026
- CVE-2026-1915233İzleyin
Insufficient policy enforcement in Navigation in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the ren
YüksekCVSS 8,3İstismar yokEPSS %0google · chrome6 Ağu 2026
- CVE-2026-1915332İzleyin
Insufficient validation of untrusted input in Workers in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised
YüksekCVSS 8,1İstismar yokEPSS %0google · chrome6 Ağu 2026
- CVE-2026-1915433İzleyin
Use after free in Skia in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer proces
YüksekCVSS 8,3İstismar yokEPSS %0google · chrome6 Ağu 2026
- CVE-2026-1915533İzleyin
Use after free in Payments in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to po
YüksekCVSS 8,3İstismar yokEPSS %0google · chrome6 Ağu 2026
- CVE-2026-1915630İzleyin
Heap buffer overflow in Base in Google Chrome prior to 151.0.7922.109 allowed an attacker who convinced a user to install a malicious extens
YüksekCVSS 7,5İstismar yokEPSS %0google · chrome6 Ağu 2026
- CVE-2026-1915738İzleyin
Out of bounds write in ANGLE in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox
KritikCVSS 9,6İstismar yokEPSS %0google · chrome6 Ağu 2026
- CVE-2026-1915830İzleyin
Use after free in Views in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote attacker who convinced a user to engage in spec
YüksekCVSS 7,5İstismar yokEPSS %0google · chrome6 Ağu 2026
- CVE-2026-1915930İzleyin
Use after free in Views in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who convinced a user to engage in specific UI ges
YüksekCVSS 7,5İstismar yokEPSS %0google · chrome6 Ağu 2026
- CVE-2026-1916235İzleyin
Out of bounds write in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via
YüksekCVSS 8,8İstismar yokEPSS %0google · chrome6 Ağu 2026
- CVE-2026-1916333İzleyin
Use after free in Media in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer proce
YüksekCVSS 8,3İstismar yokEPSS %0google · chrome6 Ağu 2026
- CVE-2026-1916438İzleyin
Insufficient validation of untrusted input in Codecs in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to potentially perfo
KritikCVSS 9,6İstismar yokEPSS %0google · chrome6 Ağu 2026
- CVE-2026-1916530İzleyin
Use after free in Extensions in Google Chrome prior to 151.0.7922.109 allowed an attacker who convinced a user to install a malicious extens
YüksekCVSS 7,5İstismar yokEPSS %0google · chrome6 Ağu 2026
- CVE-2026-1916638İzleyin
Use after free in Web Authentication in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox esc
KritikCVSS 9,6İstismar yokEPSS %0google · chrome6 Ağu 2026
- CVE-2026-1916835İzleyin
Inappropriate implementation in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a san
YüksekCVSS 8,8İstismar yokEPSS %0google · chrome6 Ağu 2026
- CVE-2026-1916935İzleyin
Insufficient validation of untrusted input in Contextual Tasks in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to perform
YüksekCVSS 8,8İstismar yokEPSS %0google · chrome6 Ağu 2026
- CVE-2026-1917038İzleyin
Use after free in WebGL in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escap
KritikCVSS 9,6İstismar yokEPSS %0google · chrome6 Ağu 2026
- CVE-2026-1917138İzleyin
Use after free in Media in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escap
KritikCVSS 9,6İstismar yokEPSS %0google · chrome6 Ağu 2026
- CVE-2026-1917233İzleyin
Use after free in Views in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to poten
YüksekCVSS 8,3İstismar yokEPSS %0google · chrome6 Ağu 2026
- CVE-2026-1917333İzleyin
Out of bounds write in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to p
YüksekCVSS 8,3İstismar yokEPSS %0google · chrome6 Ağu 2026
- CVE-2026-1917435İzleyin
Integer overflow in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a c
YüksekCVSS 8,8İstismar yokEPSS %0google · chrome6 Ağu 2026
- CVE-2026-1917538İzleyin
Use after free in Payments in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a
KritikCVSS 9,6İstismar yokEPSS %0google · chrome6 Ağu 2026
- CVE-2026-1917630İzleyin
Use after free in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to execut
YüksekCVSS 7,5İstismar yokEPSS %0google · chrome6 Ağu 2026
- CVE-2026-1917733İzleyin
Insufficient validation of untrusted input in UI in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the
YüksekCVSS 8,3İstismar yokEPSS %0google · chrome6 Ağu 2026
- CVE-2026-341534İzleyin
XML External Entity (XXE) Injection via Schema Validation in Multiple WSO2 Products Allows File Reading and Denial of Service
YüksekCVSS 8,7İstismar yokEPSS %0wso2 · wso2 api manager6 Ağu 2026
- CVE-2026-341836İzleyin
Arbitrary File Upload via System REST API in Multiple WSO2 Products Allows Remote Code Execution
KritikCVSS 9,1İstismar yokEPSS %0wso2 · wso2 api manager6 Ağu 2026
- CVE-2026-4362734İzleyin
llama.cpp b1283–b9058 Integer Overflow in llama_batch_init() Function
YüksekCVSS 8,5İstismar yokEPSS %0ggml · llama.cpp6 Ağu 2026
- CVE-2026-4362834İzleyin
llama.cpp b3978–b9058 Integer Underflow via DRY Sampler
YüksekCVSS 8,5İstismar yokEPSS %0ggml · llama.cpp6 Ağu 2026
- CVE-2026-4362936İzleyin
llama.cpp b4882–b9058 Buffer Overflow in KV Cache State Restore
KritikCVSS 9,2İstismar yokEPSS %0ggml · llama.cpp6 Ağu 2026
- CVE-2026-4363136İzleyin
llama.cpp b7492–b9060 Use-After-Free RCE via llama-server
KritikCVSS 9,2İstismar yokEPSS %0ggml · llama.cpp6 Ağu 2026
- CVE-2026-4363236İzleyin
llama.cpp b7492–b9060 Use-After-Free in Tokenization Endpoints
KritikCVSS 9,2İstismar yokEPSS %0ggml · llama.cpp6 Ağu 2026
- CVE-2026-4537830İzleyin
Decidim: Verification documents can be downloaded through reusable links
YüksekCVSS 7,5İstismar yokEPSS %0decidim · decidim6 Ağu 2026
- CVE-2026-4541434İzleyin
Decidim: JWT-backed authentication can be replayed across organizations
YüksekCVSS 8,5İstismar yokEPSS %0decidim · decidim6 Ağu 2026
- CVE-2026-4719434İzleyin
Frappe: Host header poisoning can redirect magic login links to an attacker-controlled domain
YüksekCVSS 8,6İstismar yokEPSS %0frappe · frappe6 Ağu 2026
- CVE-2026-4776528İzleyin
Frappe: Lack of Permissions in restore/bulk_restore
YüksekCVSS 7,1İstismar yokEPSS %0frappe · frappe6 Ağu 2026
- CVE-2026-4805435İzleyin
OpenZeppelin Contracts Wizard has Code Injection in Generated Hardhat and Foundry Tests via Unsanitized opts.name / opts.uri
YüksekCVSS 8,8İstismar yokEPSS %0openzeppelin · contracts-wizard6 Ağu 2026
- CVE-2026-4807929İzleyin
OpenReception's logout page clears local access_token before server-side revocation, leaving duplicated tokens valid until expiry
YüksekCVSS 7,4İstismar yokEPSS %0open-reception · appointment-booking-software6 Ağu 2026
- CVE-2026-4808032İzleyin
OpenReception's tenant detail endpoint discloses live PostgreSQL connection string, superuser-scoped in the tested official deployment
YüksekCVSS 8,0İstismar yokEPSS %0open-reception · appointment-booking-software6 Ağu 2026
- CVE-2026-4808132İzleyin
OpenReception vulnerable to stored click-triggered XSS via javascript: tenant links rendered into patient-facing footer
YüksekCVSS 8,1İstismar yokEPSS %0open-reception · appointment-booking-software6 Ağu 2026
- CVE-2026-4808429İzleyin
OpenReception doesn't rate limit passphrase login attempts
YüksekCVSS 7,4İstismar yokEPSS %0open-reception · appointment-booking-software6 Ağu 2026
- CVE-2026-4808539İzleyin
OpenReception has unauthenticated GLOBAL_ADMIN account creation post-bootstrap
KritikCVSS 9,8İstismar yokEPSS %0open-reception · appointment-booking-software6 Ağu 2026
- CVE-2026-4808639İzleyin
OpenReception: Tenant admin self-promotes to GLOBAL_ADMIN
KritikCVSS 9,9İstismar yokEPSS %0open-reception · appointment-booking-software6 Ağu 2026
- CVE-2026-4808739İzleyin
OpenReception: WebAuthn passkey injection allows account takeover
KritikCVSS 9,8İstismar yokEPSS %0open-reception · appointment-booking-software6 Ağu 2026
- CVE-2026-4808837İzleyin
OpenReception vulnerable to unauthenticated staff crypto poisoning that breaks E2E recipient directory
KritikCVSS 9,4İstismar yokEPSS %0open-reception · appointment-booking-software6 Ağu 2026
- CVE-2026-5398336İzleyin
Ground Station prior to 0.6.0 Unauthenticated Persistent Blind Server-Side Request Forgery via Orbital Data Source URL
KritikCVSS 9,2İstismar yokEPSS %0efstratios goudelis · ground station6 Ağu 2026
- CVE-2026-5398435İzleyin
Ground Station prior to 0.6.0 Unauthenticated Database Wipe and Arbitrary Data Injection via Socket.IO database_backup full_restore Action
YüksekCVSS 8,8İstismar yokEPSS %0efstratios goudelis · ground station6 Ağu 2026
- CVE-2026-585534İzleyin
Contiki-NG LwM2M TLV Parser Out-of-Bounds Read via Unchecked Buffer Length in lwm2m_tlv_read
YüksekCVSS 8,7İstismar yokEPSS %0contiki-ng · contiki-ng6 Ağu 2026
- CVE-2026-585628İzleyin
Contiki-NG DNS/mDNS Resolver Out-of-Bounds Read via Unchecked skip_name Traversal Before Transaction-ID Validation
YüksekCVSS 7,1İstismar yokEPSS %0contiki-ng · contiki-ng6 Ağu 2026
- CVE-2026-585736İzleyin
Contiki-NG MQTT Client Out-of-Bounds Write in PUBLISH Topic Parser via Persistent State Between TCP Segments
KritikCVSS 9,2İstismar yokEPSS %0contiki-ng · contiki-ng6 Ağu 2026
- CVE-2026-6285735İzleyin
Fedify: Server-Side Request Forgery in getNodeInfo() Allows Access to Internal Network Resources
YüksekCVSS 8,8İstismar yokEPSS %0fedify-dev · fedify6 Ağu 2026
- CVE-2026-6363734İzleyin
Dgraph: DQL Injection via unvalidated regexp filter argument in GraphQL query rewriter
YüksekCVSS 8,6İstismar yokEPSS %0dgraph-io · dgraph6 Ağu 2026
- CVE-2026-6372534İzleyin
sysPass FileBackupService Authenticated OS Command Injection via Backup Path
YüksekCVSS 8,6İstismar yokEPSS %0nuxsmin · syspass6 Ağu 2026
- CVE-2026-6466532İzleyin
Statamic: Account takeover via OAuth email matching without email-verification check
YüksekCVSS 8,1İstismar yokEPSS %0statamic · cms6 Ağu 2026
- CVE-2026-6540070Bu hafta
An authentication issue was addressed with improved state management.
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %1apple · macos6 Ağu 2026
- CVE-2026-6742230İzleyin
pymdown-extensions: Exponential-backtracking ReDoS in caret, tilde, betterem, and magiclink inline processors
YüksekCVSS 7,5İstismar yokEPSS %0facelessuser · pymdown-extensions6 Ağu 2026
- CVE-2026-6743429İzleyin
PHP_CodeSniffer gitblame report command injection via crafted filename
YüksekCVSS 7,3İstismar yokEPSS %1phpcsstandards · php_codesniffer6 Ağu 2026
- CVE-2026-6762128İzleyin
Flowise 3.1.4 Missing Authorization on Document Store Mutation Endpoints
YüksekCVSS 7,2İstismar yokEPSS %0flowiseai · flowise6 Ağu 2026
- CVE-2026-6762234İzleyin
Flowise 3.1.4 IDOR in OpenAI Assistants Integration
YüksekCVSS 8,5İstismar yokEPSS %0flowiseai · flowise6 Ağu 2026
- CVE-2026-6768735İzleyin
Insecure Permissions vulnerability in ics-park v.2.0 allows a remote attacker to escalate privileges via the /system/role/save endpoint in R
YüksekCVSS 8,8Kavram kanıtıEPSS %06 Ağu 2026
- CVE-2026-6768839İzleyin
ICS-Park Smart Park Management System v2.0 contains an unrestricted file upload vulnerability in the file upload module.
KritikCVSS 9,8İstismar yokEPSS %06 Ağu 2026
- CVE-2026-6768939İzleyin
SQL Injection vulnerability in FineAdmin V1.0 allows a remote attacker to execute arbitrary code via the `field` and `order` parameters in p
KritikCVSS 9,8Kavram kanıtıEPSS %06 Ağu 2026
- CVE-2026-7055728İzleyin
diboot-core Authenticated Arbitrary Field Read via loadRelatedData Discloses Password Hashes and Salts
YüksekCVSS 7,1İstismar yokEPSS %0diboot · diboot-core6 Ağu 2026
- CVE-2026-7055837İzleyin
Dinky Unauthenticated Arbitrary File Write via /download/uploadFromRsByLocal Gated Only by Hardcoded Default Token
KritikCVSS 9,3İstismar yokEPSS %0datalinkdc · dinky6 Ağu 2026
- CVE-2026-7055934İzleyin
Dinky Unauthenticated System Configuration and Credential Disclosure via GET /api/sysConfig/getAll
YüksekCVSS 8,7Kavram kanıtıEPSS %0datalinkdc · dinky6 Ağu 2026
- CVE-2026-7062834İzleyin
FFmpeg 0.5 < 9.0 DVB Subtitle Parser Heap Buffer Overflow via WTV File
YüksekCVSS 8,5İstismar yokEPSS %0ffmpeg · ffmpeg6 Ağu 2026
- CVE-2026-7063234İzleyin
FFmpeg 4.4 < 9.0 Heap Out-of-Bounds Write in CFHD Decoder via AVI Demuxing
YüksekCVSS 8,5İstismar yokEPSS %0ffmpeg · ffmpeg6 Ağu 2026
- CVE-2026-7063328İzleyin
TimescaleDB 2.29.1 Out-of-Bounds Read DoS via Gorilla Compression Reverse Iterator
YüksekCVSS 7,1İstismar yokEPSS %0timescale · timescaledb6 Ağu 2026
- CVE-2026-7063428İzleyin
TimescaleDB 2.29.1 Out-of-Bounds Read Information Disclosure via Dictionary Compression Reverse Iterator
YüksekCVSS 7,2İstismar yokEPSS %0timescale · timescaledb6 Ağu 2026
- CVE-2026-7063528İzleyin
TimescaleDB 2.29.1 Out-of-Bounds Read DoS via Bulk Dictionary Decompression Negative Index
YüksekCVSS 7,1İstismar yokEPSS %0timescale · timescaledb6 Ağu 2026
- CVE-2026-7063634İzleyin
Flowise 3.1.4 Authentication Bypass via OAuth2 Credential Refresh Endpoint
YüksekCVSS 8,7İstismar yokEPSS %0flowiseai · flowise6 Ağu 2026
- CVE-2026-7063834İzleyin
llama.cpp b1886–b7445 Integer Overflow via new_1batch() in llama-android.cpp
YüksekCVSS 8,5Kavram kanıtıEPSS %0ggml · llama.cpp6 Ağu 2026
- CVE-2026-7064029İzleyin
llama.cpp b1886–b7445 Race Condition Use-After-Free via llama-android.cpp
YüksekCVSS 7,3İstismar yokEPSS %0ggml · llama.cpp6 Ağu 2026
- CVE-2026-7132428İzleyin
Traefik: Cross-user response poisoning via proxied CONNECT on Traefik's shared backend keep-alive pool
YüksekCVSS 7,0İstismar yokEPSS %1traefik · traefik6 Ağu 2026
- CVE-2026-7132730İzleyin
Traefik: Gateway API route identity collision allows cross-namespace backend hijacking
YüksekCVSS 7,6İstismar yokEPSS %0traefik · traefik6 Ağu 2026
- CVE-2026-7144532İzleyin
Authenticated Reflected Cross-Site Scripting in Tag Error Responses in ail-framework
YüksekCVSS 8,2İstismar yokEPSS %0ail-project · ail-framework6 Ağu 2026
- CVE-2026-7147634İzleyin
Nx: Zip-Slip in the self-hosted remote cache
YüksekCVSS 8,7İstismar yokEPSS %0nrwl · nx6 Ağu 2026
- CVE-2026-7148830İzleyin
league/commonmark: Quadratic-time denial of service when parsing crafted Markdown
YüksekCVSS 7,5İstismar yokEPSS %0thephpleague · commonmark6 Ağu 2026
- CVE-2026-7155421İzleyin
h2: Duplicate Host header could facilitate request smuggling
OrtaCVSS 5,3Kavram kanıtıEPSS %0python-hyper · h26 Ağu 2026
- CVE-2026-740631İzleyin
BMP File Parsing Untrusted Pointer Dereference in certain Autodesk products
YüksekCVSS 7,8İstismar yokEPSS %0autodesk · advance steel6 Ağu 2026
- CVE-2026-786731İzleyin
Udisks2: udisks2: local privilege escalation via as-user option spoofing
YüksekCVSS 7,8Kavram kanıtıEPSS %0red hat · red hat enterprise linux 106 Ağu 2026
- CVE-2026-4916335İzleyin
Application Insights Profiler Elevation of Privilege Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %1microsoft · application insights profiler6 Ağu 2026
- CVE-2026-5048139İzleyin
Azure Active Directory Elevation of Privilege Vulnerability
KritikCVSS 9,9İstismar yokEPSS %0microsoft · azure active directory6 Ağu 2026
- CVE-2026-5051540Planlayın
Azure Service Bus Remote Code Execution Vulnerability
KritikCVSS 9,9İstismar yokEPSS %1microsoft · azure service bus6 Ağu 2026
- CVE-2026-5616138İzleyin
Azure Logic Apps Information Disclosure Vulnerability
KritikCVSS 9,6İstismar yokEPSS %0microsoft · azure logic apps6 Ağu 2026
- CVE-2026-5616240Planlayın
Azure SQL Database Elevation of Privilege Vulnerability
KritikCVSS 10,0İstismar yokEPSS %0microsoft · azure sql database6 Ağu 2026
- CVE-2026-5911539İzleyin
Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability
KritikCVSS 9,9İstismar yokEPSS %1microsoft · entra provisioning service6 Ağu 2026
- CVE-2026-5911837İzleyin
Copilot Cowork Elevation of Privilege Vulnerability
KritikCVSS 9,3İstismar yokEPSS %0microsoft · power apps6 Ağu 2026
- CVE-2026-6283039İzleyin
Azure SRE Agent Elevation of Privilege Vulnerability
KritikCVSS 9,9İstismar yokEPSS %0microsoft · azure sre agent6 Ağu 2026
- CVE-2026-6283640Planlayın
Azure SQL Managed Instance Elevation of Privilege Vulnerability
KritikCVSS 10,0İstismar yokEPSS %0microsoft · azure sql managed instance6 Ağu 2026
- CVE-2026-6287339İzleyin
Microsoft 365 Admin Center Elevation of Privilege Vulnerability
KritikCVSS 9,8İstismar yokEPSS %0microsoft · windows admin center6 Ağu 2026
- CVE-2026-6289638İzleyin
Microsoft Teams Elevation of Privilege Vulnerability
KritikCVSS 9,6İstismar yokEPSS %0microsoft · teams6 Ağu 2026
- CVE-2026-6291830İzleyin
Microsoft Teams Spoofing Vulnerability
YüksekCVSS 7,5İstismar yokEPSS %0microsoft · teams6 Ağu 2026
- CVE-2026-6350840Planlayın
Microsoft Planetary Computer Pro Elevation of Privilege Vulnerability
KritikCVSS 10,0İstismar yokEPSS %0microsoft · planetary computer6 Ağu 2026
- CVE-2026-6566740Planlayın
Microsoft Teams Elevation of Privilege Vulnerability
KritikCVSS 10,0İstismar yokEPSS %0microsoft · teams6 Ağu 2026
- CVE-2026-6566835İzleyin
Microsoft Purview eDiscovery Elevation of Privilege Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0microsoft · purview ediscovery6 Ağu 2026