İçeriğe atla
Noroxi

Yayın tarihine göre

Ağustos 2026: sömürülen ve yeni ciddi CVE kayıtları

7.294 kayıt · 20 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 33 / 73

  • CVE-2026-74361
    39İzleyin

    nvme: fix FDP fdpcidx bounds check

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74363
    31İzleyin

    bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74365
    29İzleyin

    nvdimm/btt: Handle preemption in BTT lane acquisition

    YüksekCVSS 7,3İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74367
    31İzleyin

    wifi: ath12k: fix inconsistent arvif state in vdev_create error paths

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74374
    30İzleyin

    md/raid1,raid10: fix error-path detection with md_cloned_bio()

    YüksekCVSS 7,5İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74376
    39İzleyin

    md/raid10: reset read_slot when reusing r10bio for discard

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74377
    31İzleyin

    RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74378
    31İzleyin

    RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74380
    35İzleyin

    gpu: host1x: Fix iommu_map_sgtable() return value check

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74384
    39İzleyin

    nvme-multipath: fix flex array size in struct nvme_ns_head

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74385
    30İzleyin

    nvmet-tcp: check return value of nvmet_tcp_set_queue_sock

    YüksekCVSS 7,5İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74387
    31İzleyin

    ALSA: seq: midi: Serialize output teardown with event_input

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74388
    31İzleyin

    ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74390
    31İzleyin

    RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74394
    39İzleyin

    RDMA/srpt: fix integer overflow in immediate data length check

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74396
    30İzleyin

    RDMA/mlx5: Fix UMR XLT cleanup on ODP populate failure

    YüksekCVSS 7,5İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74397
    31İzleyin

    IB/mlx5: Fix transport-domain rollback and initialize lb mutex earlier

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74398
    39İzleyin

    ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74401
    39İzleyin

    dlm: fix add msg handle in send_queue ordered

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74404
    31İzleyin

    crypto: ccp - Fix snp_filter_reserved_mem_regions() off-by-one

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74405
    31İzleyin

    OPP: Fix race between OPP addition and lookup

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74406
    39İzleyin

    vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive().

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74407
    35İzleyin

    wifi: ath11k: cancel SSR work items during PCI shutdown

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74408
    35İzleyin

    wifi: ath9k: fix OOB access from firmware tx status queue ID

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74409
    35İzleyin

    wifi: rtw89: add bounds check on firmware mac_id in link lookup

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74410
    32İzleyin

    wifi: rtw88: fix OOB read from firmware RX descriptor exceeding DMA buffer

    YüksekCVSS 8,1İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74411
    35İzleyin

    wifi: rtw89: Correct data type for scan index to avoid infinite loop

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74412
    35İzleyin

    wifi: rtw88: fix wrong pci_get_drvdata type in AER handlers

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74413
    35İzleyin

    wifi: rtw89: fix wrong pci_get_drvdata type in AER handlers

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74417
    31İzleyin

    drm/radeon: fix integer overflow in radeon_align_pitch()

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74427
    39İzleyin

    afs: Fix netns teardown to cancel the preallocation charger

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74436
    39İzleyin

    rxrpc: serialize kernel accept preallocation with socket teardown

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74439
    37İzleyin

    iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry

    KritikCVSS 9,3İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-73634
    30İzleyin

    Apache Struts: Unbounded read of a Content Security Policy violation report

    YüksekCVSS 7,5İstismar yokEPSS %0

    apache · struts15 Ağu 2026

  • CVE-2026-73635
    30İzleyin

    Apache Struts: Unbounded growth of localized-text caches driven by the request locale

    YüksekCVSS 7,5İstismar yokEPSS %0

    apache · struts15 Ağu 2026

  • CVE-2026-73193
    39İzleyin

    DBI versions before 1.652 for Perl allow a heap out-of-bounds write on 32-bit perl via an integer wraparound in the output buffer size computed by preparse

    KritikCVSS 9,8İstismar yokEPSS %0

    15 Ağu 2026

  • CVE-2026-73194
    36İzleyin

    DBI versions before 1.652 for Perl allow a heap out-of-bounds write via an unvalidated numeric placeholder that sets the binder counter in preparse

    KritikCVSS 9,1İstismar yokEPSS %0

    15 Ağu 2026

  • CVE-2026-74451
    31İzleyin

    drm/panthor: validate firmware interface structure sizes

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74452
    31İzleyin

    drm/panthor: reject firmware sections with oversized data

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74454
    31İzleyin

    drm/vc4: Supply the overflow slot size in BPOS, not the whole bin BO size

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74478
    39İzleyin

    um: vector: fix use-after-free in vector_mmsg_rx()

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74513
    31İzleyin

    dibs: fix use-after-free of dmb_node in loopback attach/detach/unregister

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74522
    35İzleyin

    ksmbd: fix use-after-free in __close_file_table_ids()

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74528
    32İzleyin

    Bluetooth: hci_sync: hold conn in hci_past_sync() callback

    YüksekCVSS 8,0İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74545
    39İzleyin

    rtase: fix double free of multi-frag skb on DMA map failure

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74549
    31İzleyin

    hwmon: (nct6775-core) Prevent access to unsupported weight registers

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74551
    31İzleyin

    hwmon: (nzxt-smart2) DMA-align output buffer

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74570
    39İzleyin

    ntfs: harden runlist realloc size calculations

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-15689
    39İzleyin

    Dancer2::Plugin::Auth::Extensible versions through 0.713 for Perl allow password reset link poisoning via the request Host header in _default_email_password_res

    KritikCVSS 9,8İstismar yokEPSS %0

    abeverley · dancer2::plugin::auth::extensible15 Ağu 2026

  • CVE-2026-18500
    32İzleyin

    @fastify/jwt vulnerable to authorization bypass via global secret overriding the per-request key

    YüksekCVSS 8,1İstismar yokEPSS %0

    fastify · fastify\/jwt15 Ağu 2026

  • CVE-2026-18549
    30İzleyin

    @fastify/multipart vulnerable to Denial of Service via aborted upload after fileSize limit

    YüksekCVSS 7,5İstismar yokEPSS %0

    fastify · fastify-multipart15 Ağu 2026

  • CVE-2026-19474
    30İzleyin

    @fastify/multipart vulnerable to Denial of Service via temporary file leak on aborted upload

    YüksekCVSS 7,5İstismar yokEPSS %0

    fastify · fastify-multipart15 Ağu 2026

  • CVE-2026-19900
    33İzleyin

    LB-LINK X-PRO shadow hard-coded credentials

    YüksekCVSS 8,2Kavram kanıtıEPSS %2

    lb-link · x-pro15 Ağu 2026

  • CVE-2026-74440
    31İzleyin

    drm/xe: Wait on external BO kernel fences in exec IOCTL

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74443
    35İzleyin

    drm/vmwgfx: bound DMA command body size against suffix pointer

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74444
    31İzleyin

    drm/vmwgfx: validate DRAW_PRIMITIVES header size before division

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74446
    31İzleyin

    drm/amdkfd: hold event_mutex while checkpointing CRIU events

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74447
    31İzleyin

    drm/amdkfd: fix uint32_t overflow in EOP ring buffer size alignment

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74449
    31İzleyin

    drm/amd/display: Fix divide-by-zero in calculate_mcache_setting on zero viewport

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74450
    31İzleyin

    drm/amd/pm: fix pptable use-after-free

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74453
    31İzleyin

    drm/vc4: Zero the tile state data array before each BIN job

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74456
    31İzleyin

    can: peak_usb: peak_usb_start(): fix double free of transfer buffer on URB submit error

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74461
    33İzleyin

    i2c: imx: Cancel hrtimer before clearing slave pointer

    YüksekCVSS 8,4İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74465
    31İzleyin

    net: openvswitch: fix potential UAF on meter attach failure

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74467
    31İzleyin

    s390/qeth: Check CAP_NET_ADMIN for private ioctls

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74469
    35İzleyin

    sctp: prevent peer transport count overflow

    YüksekCVSS 8,8Kavram kanıtıEPSS %1

    linux · linux15 Ağu 2026

  • CVE-2026-74470
    31İzleyin

    scsi: scsi_debug: Fix REPORT ZONES alloc_len underflow OOB write

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74471
    31İzleyin

    tracing: Check return value of __register_event() in trace_module_add_events()

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74473
    39İzleyin

    vxlan: use pskb_network_may_pull() in route_shortcircuit()

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74474
    39İzleyin

    vxlan: use pskb_network_may_pull() for transmit path header pulls

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74475
    40Planlayın

    vxlan: use neigh_ha_snapshot() in route_shortcircuit()

    KritikCVSS 10,0İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74476
    36İzleyin

    veth: convert frag_list skbs before running XDP

    KritikCVSS 9,1İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74479
    31İzleyin

    net: pktgen: fix proc entry use-after-free

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74480
    39İzleyin

    net: bridge: stop fast-leave after deleting a port group

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74481
    31İzleyin

    mm/page_reporting: use system_freezable_wq to fix UAF during suspend

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74482
    31İzleyin

    mm/huge_memory: unlock i_mmap_rwsem before releasing after-split folios

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74485
    28İzleyin

    binfmt_misc: reject a flag character as the field delimiter

    YüksekCVSS 7,1İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74488
    35İzleyin

    wifi: mwifiex: use the subframe length when parsing A-MSDU TDLS frames

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74489
    35İzleyin

    wifi: mac80211: fix tid_tx use-after-free on BA session stop

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74490
    35İzleyin

    tipc: avoid use-after-free in poll trace queue dumps

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74492
    33İzleyin

    netfilter: ipset: do not update comments from kernel-side hash adds

    YüksekCVSS 8,4İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74493
    39İzleyin

    net/smc: fix socket use-after-free during link group termination

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74495
    39İzleyin

    igbvf: Fix leak in TX DMA error cleanup

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74496
    31İzleyin

    fou: Fix use-after-free in fou_create()

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74497
    33İzleyin

    ALSA: usb-audio: Clamp frame size in implicit-feedback mode

    YüksekCVSS 8,4İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74503
    31İzleyin

    ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74506
    31İzleyin

    afs: Fix UAF when sending a message

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74507
    28İzleyin

    Bluetooth: HIDP: validate numbered report payloads

    YüksekCVSS 7,1İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74508
    35İzleyin

    Bluetooth: HIDP: reject frames without a transaction header

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74509
    35İzleyin

    Bluetooth: hci_sync: Fix advertising data UAFs

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74510
    31İzleyin

    Bluetooth: mgmt: fix UAF in pair command cancellation

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74512
    31İzleyin

    audit: fix potential use-after-free in audit_del_rule()

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74515
    35İzleyin

    KVM: s390: pci: Reject adapter interrupt forwarding if already enabled

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74516
    32İzleyin

    KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active

    YüksekCVSS 8,2İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74517
    37İzleyin

    KVM: x86: Cancel delayed I/O APIC EOI handling before destroying vCPUs

    KritikCVSS 9,3İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74518
    31İzleyin

    mm/hugetlb: fix list corruption in allocate_file_region_entries()

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74519
    31İzleyin

    pinctrl: devicetree: don't free uninitialized dev_name on error path

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74520
    35İzleyin

    iommu/iommufd: Fix IOPF group ownership UAF

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74521
    36İzleyin

    ksmbd: use memcmp() to compare ClientGUIDs

    KritikCVSS 9,1İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-74523
    30İzleyin

    qede: sync udp_tunnel ports outside qede_lock in the recovery path

    YüksekCVSS 7,5İstismar yokEPSS %0

    linux · linux15 Ağu 2026