İçeriğe atla
Noroxi

Yayın tarihine göre

Ağustos 2026: sömürülen ve yeni ciddi CVE kayıtları

7.295 kayıt · 20 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 30 / 73

  • CVE-2026-72461
    31İzleyin

    apparmor: fix refcount leak when updating the sk_ctx

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72462
    35İzleyin

    apparmor: fix race in unix socket mediation when peer_path is used

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72465
    30İzleyin

    xprtrdma: Sanitize the reply credit grant after parsing

    YüksekCVSS 7,5İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72470
    31İzleyin

    fs/ntfs3: resize log->one_page_buf when adopting on-disk page size

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72471
    28İzleyin

    fs/ntfs3: prevent potential lcn remains uninitialized

    YüksekCVSS 7,1İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72480
    31İzleyin

    iio: adc: xilinx-ams: fix out-of-bounds channel lookup in event handling

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72482
    31İzleyin

    gpib: fix double decrement of descriptor_busy in command_ioctl()

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72483
    31İzleyin

    usb: host: max3421: Fix shift-out-of-bounds in max3421_hub_control()

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72489
    33İzleyin

    staging: nvec: fix use-after-free in nvec_rx_completed()

    YüksekCVSS 8,4İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72492
    35İzleyin

    ksmbd: fix use-after-free in same_client_has_lease()

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74275
    33İzleyin

    cxl/region: Fix out-of-bounds access in cxl_cancel_auto_attach()

    YüksekCVSS 8,4İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74280
    40Planlayın

    crypto: marvell/octeontx - fix DMA cleanup using wrong loop index

    KritikCVSS 10,0İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74285
    35İzleyin

    net: Stop leased rxq before uninstalling its memory provider

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74306
    31İzleyin

    vfio/qat: fix f_pos race in qat_vf_resume_write()

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74309
    40Planlayın

    vdpa/octeon_ep: fix IRQ-to-ring mapping in interrupt handler

    KritikCVSS 10,0İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74311
    31İzleyin

    virtio: rtc: tear down old virtqueues before restore

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74315
    39İzleyin

    lockd: Avoid hashing uninitialized bytes in nlm4svc_lookup_file()

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74328
    35İzleyin

    iommufd: Destroy the pages content after detaching from dmabuf

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74341
    35İzleyin

    wifi: wcn36xx: fix heap overflow from oversized firmware HAL response

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74343
    31İzleyin

    kernfs: fix xattr race condition with multiple superblocks

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74357
    31İzleyin

    drm/amdgpu: fix KASAN slab-out-of-bounds in amdgpu_coredump ring dump

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74364
    28İzleyin

    bpf: Reject exclusive maps as inner maps in map-in-map

    YüksekCVSS 7,1İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74371
    31İzleyin

    bpf: fix BPF_PROG_QUERY OOB write and cgroup backward compat

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74383
    33İzleyin

    nvme-pci: fix out-of-bounds access in nvme_setup_descriptor_pools

    YüksekCVSS 8,4İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74403
    31İzleyin

    crypto: ccp - Check for page allocation failure correctly in TIO

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74419
    29İzleyin

    accel/amdxdna: Adjust size for copy_to_user()

    YüksekCVSS 7,3İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74425
    30İzleyin

    afs: handle CB.InitCallBackState3 requests without a server record

    YüksekCVSS 7,5İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74428
    39İzleyin

    rxrpc: Fix double unlock in rxrpc_recvmsg()

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74429
    30İzleyin

    rxrpc: Fix the reception of a reply packet before data transmission

    YüksekCVSS 7,5İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74430
    30İzleyin

    rxrpc: Fix ACKALL packet handling

    YüksekCVSS 7,5İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74431
    30İzleyin

    rxrpc: Fix potential infinite loop in rxrpc_recvmsg()

    YüksekCVSS 7,5İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74433
    39İzleyin

    rxrpc: Fix UAF in rxgk_issue_challenge()

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74434
    39İzleyin

    rxrpc: Don't move a peeked OOB message onto the pending queue

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74435
    30İzleyin

    rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc

    YüksekCVSS 7,5İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74438
    31İzleyin

    crypto: sun4i-ss - Remove insecure and unused rng_alg

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-14279
    35İzleyin

    Wholesale Market <= 2.2.2 - Authenticated (Subscriber+) Privilege Escalation via 'role_required' Parameter

    YüksekCVSS 8,8İstismar yokEPSS %0

    cedcommerce · wholesale market15 Ağu 2026

  • CVE-2026-15826
    40Planlayın

    User Profile Builder <= 3.16.4 - Unauthenticated Authentication Bypass via Type Confusion to Administrator Account Takeover via 'username' Parameter

    KritikCVSS 9,8Kavram kanıtıEPSS %3

    cozmoslabs · user profile builder – beautiful user registration forms, user profiles & user role editor15 Ağu 2026

  • CVE-2026-14433
    28İzleyin

    Online Booking & Scheduling Calendar for WordPress by vcita <= 4.6.0 - Unauthenticated Stored Cross-Site Scripting via REST API 'business_id' Parameter

    YüksekCVSS 7,2İstismar yokEPSS %0

    vcita · online booking & scheduling calendar for wordpress by vcita15 Ağu 2026

  • CVE-2026-15142
    30İzleyin

    Real Estate Manager Pro <= 12.8.6 - Authenticated (Subscriber+) Privilege Escalation via 'user_has_cap' Filter ID Collision

    YüksekCVSS 7,5İstismar yokEPSS %0

    webcodingplace · real estate manager pro15 Ağu 2026

  • CVE-2026-16142
    39İzleyin

    TrueBooker <= 1.2.6 - Unauthenticated Account Takeover via Insecure Direct Object Reference in 'truebooker_wp_user_id' Parameter

    KritikCVSS 9,8İstismar yokEPSS %0

    themetechmount · truebooker – appointment booking and scheduler system15 Ağu 2026

  • CVE-2026-18438
    35İzleyin

    Templately <= 3.7.1 - Authenticated (Contributor+) Arbitrary File Upload to Remote Code Execution via Gutenberg Cloud Import Attachment Filename Mismatch

    YüksekCVSS 8,8İstismar yokEPSS %1

    wpdevteam · templately – elementor & gutenberg template library: 6500+ free & pro ready templates and cloud!15 Ağu 2026

  • CVE-2026-68461
    31İzleyin

    device property: initialize the remaining fields of fwnode_handle in fwnode_init()

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-68470
    35İzleyin

    wifi: mac80211: validate extension-frame layout before RX

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-68471
    35İzleyin

    wifi: ieee80211: validate MLE common info length

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-68472
    32İzleyin

    wifi: cfg80211: validate EHT MLE before MLD ID read

    YüksekCVSS 8,1İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-68477
    39İzleyin

    ipvs: fix more places with wrong ipv6 transport offsets

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-68479
    31İzleyin

    Bluetooth: btrtl: validate firmware patch bounds

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72003
    35İzleyin

    wifi: brcmfmac: cyw: fix heap overflow on a short auth frame

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72005
    31İzleyin

    wifi: rt2x00: avoid full teardown before work setup in probe

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72009
    31İzleyin

    pmdomain: imx93-blk-ctrl: Extract PHY as shared domain for DSI/CSI

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72012
    31İzleyin

    tracing/osnoise: Call synchronize_rcu() when unregistering

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72014
    39İzleyin

    drbd: reject data replies with an out-of-range payload size

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72018
    31İzleyin

    dibs: loopback: validate offset and size in move_data()

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72019
    29İzleyin

    macsec: don't read an unset MAC header in macsec_encrypt()

    YüksekCVSS 7,3İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72020
    39İzleyin

    ipvs: reset full ip_vs_seq structs in ip_vs_conn_new

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72021
    32İzleyin

    ipvs: use parsed transport offset in SCTP state lookup

    YüksekCVSS 8,2İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72024
    31İzleyin

    mac802154: remove interfaces with RCU list deletion

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72029
    35İzleyin

    net: wwan: iosm: bound device offsets in the MUX downlink decoder

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72034
    31İzleyin

    fhandle: reject detached mounts in capable_wrt_mount()

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72035
    32İzleyin

    net/sched: sch_taprio: Replace direct dequeue call with peek and qdisc_dequeue_peeked

    YüksekCVSS 8,2İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72036
    31İzleyin

    net/sched: sch_multiq: Replace direct dequeue call with peek and qdisc_dequeue_peeked

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72041
    39İzleyin

    espintcp: use sk_msg_free_partial to fix partial send

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72045
    35İzleyin

    octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72049
    28İzleyin

    ieee802154: admin-gate legacy LLSEC dump operations

    YüksekCVSS 7,1İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72051
    35İzleyin

    net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72052
    35İzleyin

    net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72053
    35İzleyin

    net: ipip: require CAP_NET_ADMIN in the device netns for changelink

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72054
    35İzleyin

    net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72055
    35İzleyin

    net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72057
    32İzleyin

    net/sched: act_ct: preserve tc_skb_cb across defragmentation

    YüksekCVSS 8,2İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72061
    35İzleyin

    net: sit: require CAP_NET_ADMIN in the device netns for changelink

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72064
    39İzleyin

    net: mana: Sync page pool RX frags for CPU

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72065
    39İzleyin

    net: mana: Validate the packet length reported by the NIC

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72066
    31İzleyin

    cpu: hotplug: Bound hotplug states sysfs output

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72067
    31İzleyin

    cpu: hotplug: Preserve per instance callback errors

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72069
    39İzleyin

    locking/rt: Fix the incorrect RCU protection in rt_spin_unlock()

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72072
    31İzleyin

    net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72080
    31İzleyin

    fs/resctrl: Fix use-after-free during unmount

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72083
    39İzleyin

    scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72084
    39İzleyin

    scsi: target: Bound PR-OUT TransportID parsing to the received buffer

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72085
    37İzleyin

    scsi: xen: scsiback: Free unsubmitted command instead of double-putting it

    KritikCVSS 9,3İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72095
    31İzleyin

    dma-fence: Make dma_fence_dedup_array() robust against 0-count input

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72098
    39İzleyin

    dm-verity: fix buffer overflow in FEC calculation

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72099
    28İzleyin

    dm-integrity: don't increment hash_offset twice

    YüksekCVSS 7,1İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72100
    35İzleyin

    dm-integrity: fix a bug if the bio is out of limits

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72102
    31İzleyin

    dm_early_create: fix freeing used table on dm_resume failure

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72103
    29İzleyin

    dm: avoid leaking the caller's thread keyring via the table device file

    YüksekCVSS 7,3İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72105
    31İzleyin

    dm-log: fix a bitset_size overflow on 32bit machines

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72107
    35İzleyin

    dm era: fix out-of-bounds memory access for non-zero start sector

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72108
    31İzleyin

    dm thin metadata: fix metadata snapshot consistency on commit failure

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72110
    31İzleyin

    bpf,fork: wipe ->bpf_storage before bailouts that access it

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72111
    35İzleyin

    bpf: Reset register bounds before narrowing retval range in check_mem_access()

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72113
    31İzleyin

    can: bcm: add missing device refcount for CAN filter removal

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72114
    31İzleyin

    can: bcm: validate frame length in bcm_rx_setup() for RTR replies

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72115
    32İzleyin

    can: bcm: track a single source interface for ANYDEV timeout/throttle ops

    YüksekCVSS 8,1İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72116
    28İzleyin

    can: bcm: fix stale rx/tx ops after device removal

    YüksekCVSS 7,1İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72119
    31İzleyin

    can: bcm: extend bcm_tx_lock usage for data and timer updates

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72120
    31İzleyin

    can: bcm: add missing rcu list annotations and operations

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72121
    35İzleyin

    can: bcm: add locking when updating filter and timer values

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72122
    29İzleyin

    can: bcm: fix lockless bound/ifindex race and silent RX_SETUP failure

    YüksekCVSS 7,3İstismar yokEPSS %0

    linux · linux15 Ağu 2026