İçeriğe atla
Noroxi

Yayın tarihine göre

Ağustos 2026: sömürülen ve yeni ciddi CVE kayıtları

7.296 kayıt · 20 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 61 / 73

  • CVE-2026-76193
    40Planlayın

    Adobe Campaign Classic (ACC) | Server-Side Request Forgery (SSRF) (CWE-918)

    KritikCVSS 10,0İstismar yokEPSS %1

    adobe · campaign25 Ağu 2026

  • CVE-2026-76195
    41Planlayın

    Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)

    KritikCVSS 10,0İstismar yokEPSS %3

    adobe · campaign25 Ağu 2026

  • CVE-2026-76197
    41Planlayın

    Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)

    KritikCVSS 10,0İstismar yokEPSS %3

    adobe · campaign25 Ağu 2026

  • CVE-2026-15310
    8İzleyin

    zipfile: bzip2/LZMA/Zstandard members decompress without a max_length bound, defeating chunked-read memory limits

    DüşükCVSS 2,1İstismar yokEPSS %0

    python software foundation · cpython25 Ağu 2026

  • CVE-2026-55609
    28İzleyin

    sublinear-time-solver: Arbitrary file write in consciousness-explorer / sublinear-time-solver MCP export_state

    YüksekCVSS 7,1İstismar yokEPSS %0

    ruvnet · sublinear-time-solver25 Ağu 2026

  • CVE-2026-55620
    30İzleyin

    eml_parser: DoS via deeply nested parens in Received headers

    YüksekCVSS 7,5İstismar yokEPSS %0

    govcert-lu · eml_parser25 Ağu 2026

  • CVE-2026-78379
    36İzleyin

    Consent bypass in python_repl tool via batch kwargs forwarding in Amazon Strands Agents Tools

    KritikCVSS 9,2İstismar yokEPSS %0

    amazon · strands-agents-tools25 Ağu 2026

  • CVE-2026-79786
    28İzleyin

    Coroot 1.20.2 through 1.24.5 Unvalidated Redirect URI in MCP OAuth Client Registration

    YüksekCVSS 7,0İstismar yokEPSS %0

    coroot · coroot25 Ağu 2026

  • CVE-2026-79787
    37İzleyin

    Alluxio through 2.9.5 S3 REST Proxy Authentication Bypass via Unverified Request Signature

    KritikCVSS 9,3İstismar yokEPSS %0

    alluxio · alluxio25 Ağu 2026

  • CVE-2026-79788
    28İzleyin

    Dradis Community Edition 5.1.0 through 5.2.0 Server-Side Request Forgery via Unrestricted AI Provider Address

    YüksekCVSS 7,1İstismar yokEPSS %0

    dradis · dradis-ce25 Ağu 2026

  • CVE-2026-80049
    34İzleyin

    Airbyte Platform through 2.0.0 Cross-Workspace Authorization Bypass via Caller-Supplied workspaceId

    YüksekCVSS 8,7İstismar yokEPSS %0

    airbytehq · airbyte-platform25 Ağu 2026

  • CVE-2026-80050
    28İzleyin

    ContiNew Admin through 4.1.0 Missing Authorization and File-Type Allowlist on Multipart Upload Endpoints

    YüksekCVSS 7,1İstismar yokEPSS %0

    continew-org · continew-admin25 Ağu 2026

  • GHSA-9qhg-99ww-9mqc
    32İzleyin

    utcp-http SSRF: HTTP tool invocation follows redirects without re-validating the target

    YüksekCVSS 8,2İstismar yok

    PyPI · utcp-http25 Ağu 2026

  • GHSA-8cp3-qxj6-px34
    28İzleyin

    utcp-http has an OAuth2 `tokenUrl` Trust Boundary Bypass in OpenAPI Conversion

    YüksekCVSS 7,1İstismar yok

    PyPI · utcp-http25 Ağu 2026

  • GHSA-8qx3-8gm5-9cj2
    32İzleyin

    pickem vulnerable to terminal escape-sequence injection via unsanitized item text

    YüksekCVSS 8,0İstismar yok

    npm · pickem25 Ağu 2026

  • CVE-2026-43670
    35İzleyin

    A Content Security Policy bypass was addressed with improved enforcement in AudioWorklet contexts.

    YüksekCVSS 8,8İstismar yokEPSS %0

    apple · safari25 Ağu 2026

  • CVE-2026-45018
    39İzleyin

    Chainlit: Command injection via MCP stdio transport allows unauthenticated remote code execution

    KritikCVSS 9,8İstismar yokEPSS %1

    chainlit · chainlit25 Ağu 2026

  • CVE-2026-45019
    28İzleyin

    Chainlit: SSRF via MCP SSE and streamable-http transports allows unauthenticated internal network access

    YüksekCVSS 7,2İstismar yokEPSS %0

    chainlit · chainlit25 Ağu 2026

  • CVE-2026-55099
    30İzleyin

    icalendar: Algorithmic Complexity in Equality

    YüksekCVSS 7,5İstismar yokEPSS %0

    collective · icalendar25 Ağu 2026

  • CVE-2026-59981
    28İzleyin

    OpenEXR: Heap OOB read in SampleCountChannel row when using nonzero dataWindow

    YüksekCVSS 7,1İstismar yokEPSS %0

    academysoftwarefoundation · openexr25 Ağu 2026

  • CVE-2026-64705
    22İzleyin

    A buffer overflow was addressed with improved bounds checking.

    OrtaCVSS 5,5Kavram kanıtıEPSS %0

    apple · macos25 Ağu 2026

  • CVE-2026-66152
    35İzleyin

    A Path traversal vulnerability in the SonicWall NetExtender Linux client file extractor component allows an attacker to write arbitrary file

    YüksekCVSS 8,8İstismar yokEPSS %0

    sonicwall · netextender25 Ağu 2026

  • CVE-2026-66153
    28İzleyin

    The NEService auto-upgrade process insecurely handles temporary files in SonicWall NetExtender Linux client which allows an attacker to mani

    YüksekCVSS 7,0İstismar yokEPSS %0

    sonicwall · netextender25 Ağu 2026

  • CVE-2026-68513
    28İzleyin

    OpenEXR: Heap buffer overflow in PyOpenEXR from literal/prefixed RGB channel name collision

    YüksekCVSS 7,1İstismar yokEPSS %0

    academysoftwarefoundation · openexr25 Ağu 2026

  • CVE-2026-68515
    28İzleyin

    OpenEXR: Heap out-of-bounds write in exrmultiview with subsampled channel union

    YüksekCVSS 7,1İstismar yokEPSS %0

    academysoftwarefoundation · openexr25 Ağu 2026

  • CVE-2026-74932
    30İzleyin

    WP Fastest Cache 0.9.0.3 - 1.5.0 - Unauthenticated Stored XSS via Host Header Cache Poisoning

    YüksekCVSS 7,5İstismar yokEPSS %0

    unknown · wp fastest cache25 Ağu 2026

  • CVE-2026-79774
    37İzleyin

    Winter CMS before 1.2.13 Twig Sandbox Escape via SecurityPolicy

    KritikCVSS 9,3İstismar yokEPSS %0

    wintercms · winter25 Ağu 2026

  • CVE-2026-39113
    16İzleyin

    Buffer Overflow vulnerability in SQLite affected version source snapshots/builds containing Fossil check-in 8bdc0d485e3ad0c7a1e818da66f10695

    OrtaCVSS 4,0Kavram kanıtıEPSS %0

    25 Ağu 2026

  • CVE-2026-51368
    39İzleyin

    An issue in Beijing Tongtech Co., Ltd tongweb v.7.0.24 in the Spring HttpInovkerServiceExporter component allows a remote attacker to execut

    KritikCVSS 9,8İstismar yokEPSS %0

    25 Ağu 2026

  • CVE-2026-52489
    31İzleyin

    Buffer Overflow vulnerability in gpac 31becc9e08b88e525a4a62013a4000de1c0f8fd9 allows an attacker to execute arbitrary code via the svgNameT

    YüksekCVSS 7,8İstismar yokEPSS %0

    25 Ağu 2026

  • CVE-2026-52491
    33İzleyin

    An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the libtiff/tools/thumbnail.c:

    YüksekCVSS 8,4İstismar yokEPSS %0

    25 Ağu 2026

  • CVE-2026-65081
    39İzleyin

    NVIDIA NemoClaw for Linux contains a vulnerability in its installation process, where an attacker could cause execution of untrusted code.

    KritikCVSS 9,8İstismar yokEPSS %0

    nvidia · nemoclaw25 Ağu 2026

  • CVE-2026-65082
    31İzleyin

    NVIDIA NemoClaw for Linux contains a vulnerability in its migration command, where a local attacker could cause code injection.

    YüksekCVSS 7,8İstismar yokEPSS %0

    nvidia · nemoclaw25 Ağu 2026

  • CVE-2026-65083
    39İzleyin

    NVIDIA OpenShell for Linux contains a vulnerability in its sandbox provisioning API, where an attacker could cause an incomplete list of dis

    KritikCVSS 9,9İstismar yokEPSS %0

    nvidia · openshell25 Ağu 2026

  • CVE-2026-65084
    39İzleyin

    NVIDIA NemoClaw for Linux contains a vulnerability in its deployment process, where an attacker could cause improper certificate validation.

    KritikCVSS 9,8İstismar yokEPSS %0

    nvidia · nemoclaw25 Ağu 2026

  • CVE-2026-65089
    31İzleyin

    NVIDIA NemoClaw for Linux contains a vulnerability in its status and logs plugin commands, where an attacker could cause OS command injectio

    YüksekCVSS 7,8İstismar yokEPSS %1

    nvidia · nemoclaw25 Ağu 2026

  • CVE-2026-65090
    31İzleyin

    NVIDIA NemoClaw for Linux contains a vulnerability in its NIM management component, where an attacker could cause OS command injection.

    YüksekCVSS 7,8İstismar yokEPSS %1

    nvidia · nemoclaw25 Ağu 2026

  • CVE-2026-65091
    36İzleyin

    NVIDIA OpenShell for all platforms contains a vulnerability where a malicious gateway could cause OS command injection.

    YüksekCVSS 8,8İstismar yokEPSS %2

    nvidia · openshell25 Ağu 2026

  • CVE-2026-65092
    34İzleyin

    NVIDIA OpenShell Sandbox for Linux contains a vulnerability where an attacker could cause a path traversal bypass of L7 REST network policy.

    YüksekCVSS 8,5İstismar yokEPSS %0

    nvidia · openshell25 Ağu 2026

  • CVE-2026-65093
    39İzleyin

    NVIDIA OpenShell for Linux contains a vulnerability where an attacker could cause a sandbox escape.

    KritikCVSS 9,9İstismar yokEPSS %0

    nvidia · openshell25 Ağu 2026

  • CVE-2026-65096
    31İzleyin

    NVIDIA NemoClaw for Linux contains a vulnerability in the Telegram bridge component, where an attacker could cause an OS command injection.

    YüksekCVSS 7,8İstismar yokEPSS %1

    nvidia · nemoclaw25 Ağu 2026

  • CVE-2026-65097
    35İzleyin

    NVIDIA NemoClaw for Linux contains a vulnerability in its installation scripts, where an attacker could cause a download of code without int

    YüksekCVSS 8,8İstismar yokEPSS %0

    nvidia · nemoclaw25 Ağu 2026

  • CVE-2026-65098
    39İzleyin

    NVIDIA NemoClaw for Linux contains a vulnerability in its remote-access helper workflow, where an attacker could cause weak authentication.

    KritikCVSS 9,8İstismar yokEPSS %0

    nvidia · nemoclaw25 Ağu 2026

  • CVE-2026-65099
    31İzleyin

    NVIDIA NemoClaw for Linux contains a vulnerability in its command-line interface, where an attacker could cause OS command injection.

    YüksekCVSS 7,8İstismar yokEPSS %1

    nvidia · nemoclaw25 Ağu 2026

  • CVE-2026-65105
    32İzleyin

    NVIDIA NemoClaw for Linux contains a vulnerability in its inference server setup, where a remote attacker may access the inference service w

    YüksekCVSS 8,1İstismar yokEPSS %0

    nvidia · nemoclaw25 Ağu 2026

  • CVE-2026-75465
    30İzleyin

    The /api.php/user/get_list endpoint in Maccms v10 v2026.1000.4055 is vulnerable to an Incorrect Access Control issue.

    YüksekCVSS 7,5İstismar yokEPSS %0

    25 Ağu 2026

  • CVE-2026-77357
    34İzleyin

    Mesop: DoS in /hot-reload endpoint allows unauthenticated attacker to exhaust worker threads and crash the server

    YüksekCVSS 8,7İstismar yokEPSS %0

    mesop-dev · mesop25 Ağu 2026

  • CVE-2026-77680
    21İzleyin

    Libsoup3: libsoup: quadratic cpu denial of service in http range coalescing after cve-2025-32907 fix

    OrtaCVSS 5,3Kavram kanıtıEPSS %0

    red hat · red hat enterprise linux 1025 Ağu 2026

  • CVE-2026-78891
    35İzleyin

    Buffer overflow in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via

    YüksekCVSS 8,8İstismar yokEPSS %0

    google · chrome25 Ağu 2026

  • CVE-2026-78892
    28İzleyin

    Incorrect authorization in Chromoting in Google Chrome on on Windows prior to 152.0.7977.65 allowed a local attacker to bypass system access

    YüksekCVSS 7,1İstismar yokEPSS %0

    google · chrome25 Ağu 2026

  • CVE-2026-78899
    35İzleyin

    Use after free in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr

    YüksekCVSS 8,8İstismar yokEPSS %0

    google · chrome25 Ağu 2026

  • CVE-2026-78900
    38İzleyin

    Improper input validation in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code o

    KritikCVSS 9,6İstismar yokEPSS %0

    google · chrome25 Ağu 2026

  • CVE-2026-78901
    30İzleyin

    Race condition in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr

    YüksekCVSS 7,5İstismar yokEPSS %0

    google · chrome25 Ağu 2026

  • CVE-2026-78904
    38İzleyin

    Type confusion in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the

    KritikCVSS 9,6İstismar yokEPSS %0

    google · chrome25 Ağu 2026

  • CVE-2026-78905
    35İzleyin

    Type confusion in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the

    YüksekCVSS 8,8İstismar yokEPSS %0

    google · chrome25 Ağu 2026

  • CVE-2026-78906
    30İzleyin

    Race condition in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the

    YüksekCVSS 7,5İstismar yokEPSS %0

    google · chrome25 Ağu 2026

  • CVE-2026-78909
    38İzleyin

    Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary

    KritikCVSS 9,6İstismar yokEPSS %0

    google · chrome25 Ağu 2026

  • CVE-2026-78910
    35İzleyin

    Buffer overflow in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a c

    YüksekCVSS 8,8İstismar yokEPSS %0

    google · chrome25 Ağu 2026

  • CVE-2026-78911
    33İzleyin

    Incorrect authorization in USB in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process an

    YüksekCVSS 8,3İstismar yokEPSS %0

    google · chrome25 Ağu 2026

  • CVE-2026-78913
    32İzleyin

    Use after free in Chromoting in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside

    YüksekCVSS 8,1İstismar yokEPSS %0

    google · chrome25 Ağu 2026

  • CVE-2026-78915
    30İzleyin

    Race condition in Enterprise in Google Chrome on on Windows prior to 152.0.7977.65 allowed an adjacent attacker to potentially execute arbit

    YüksekCVSS 7,5İstismar yokEPSS %0

    google · chrome25 Ağu 2026

  • CVE-2026-78934
    33İzleyin

    Race condition in ReadAloud in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbit

    YüksekCVSS 8,3İstismar yokEPSS %0

    google · chrome25 Ağu 2026

  • CVE-2026-78935
    38İzleyin

    Use of uninitialized variable in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to potentially execute a

    KritikCVSS 9,6İstismar yokEPSS %0

    google · chrome25 Ağu 2026

  • CVE-2026-78937
    38İzleyin

    Use after free in Search in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to po

    KritikCVSS 9,6İstismar yokEPSS %0

    google · chrome25 Ağu 2026

  • CVE-2026-78938
    35İzleyin

    Type confusion in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    google · chrome25 Ağu 2026

  • CVE-2026-78939
    38İzleyin

    Use after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to e

    KritikCVSS 9,6İstismar yokEPSS %0

    google · chrome25 Ağu 2026

  • CVE-2026-78944
    35İzleyin

    Use after free in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitr

    YüksekCVSS 8,8İstismar yokEPSS %0

    google · chrome25 Ağu 2026

  • CVE-2026-78945
    38İzleyin

    Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially execu

    KritikCVSS 9,6İstismar yokEPSS %0

    google · chrome25 Ağu 2026

  • CVE-2026-78948
    38İzleyin

    Buffer overflow in WebGL in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via

    KritikCVSS 9,6İstismar yokEPSS %0

    google · chrome25 Ağu 2026

  • CVE-2026-78950
    35İzleyin

    Integer overflow in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code inside th

    YüksekCVSS 8,8İstismar yokEPSS %0

    google · chrome25 Ağu 2026

  • CVE-2026-78951
    38İzleyin

    Use after free in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sand

    KritikCVSS 9,6İstismar yokEPSS %0

    google · chrome25 Ağu 2026

  • CVE-2026-78952
    33İzleyin

    Out of bounds write in Crashpad in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the rend

    YüksekCVSS 8,3İstismar yokEPSS %0

    google · chrome25 Ağu 2026

  • CVE-2026-78956
    35İzleyin

    Type confusion in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary co

    YüksekCVSS 8,8İstismar yokEPSS %0

    google · chrome25 Ağu 2026

  • CVE-2026-78963
    35İzleyin

    Improper input validation in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code o

    YüksekCVSS 8,8İstismar yokEPSS %0

    google · chrome25 Ağu 2026

  • CVE-2026-78964
    38İzleyin

    Use after free in Sync in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code out

    KritikCVSS 9,6İstismar yokEPSS %0

    google · chrome25 Ağu 2026

  • CVE-2026-78978
    35İzleyin

    Out of bounds read in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary

    YüksekCVSS 8,8İstismar yokEPSS %0

    google · chrome25 Ağu 2026

  • CVE-2026-78983
    33İzleyin

    Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execut

    YüksekCVSS 8,3İstismar yokEPSS %0

    google · chrome25 Ağu 2026

  • CVE-2026-78985
    38İzleyin

    Incorrect reference resolution in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering

    KritikCVSS 9,6İstismar yokEPSS %0

    google · chrome25 Ağu 2026

  • CVE-2026-78989
    38İzleyin

    Out of bounds read in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary

    KritikCVSS 9,6İstismar yokEPSS %0

    google · chrome25 Ağu 2026

  • CVE-2026-78990
    35İzleyin

    Use after free in Compositing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox

    YüksekCVSS 8,8İstismar yokEPSS %0

    google · chrome25 Ağu 2026

  • CVE-2026-78999
    33İzleyin

    Improper privilege management in Navigation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the render

    YüksekCVSS 8,3İstismar yokEPSS %0

    google · chrome25 Ağu 2026

  • CVE-2026-79008
    33İzleyin

    Improper input validation in GPU in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the ren

    YüksekCVSS 8,3İstismar yokEPSS %0

    google · chrome25 Ağu 2026

  • CVE-2026-79011
    32İzleyin

    UI misrepresentation in Browser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass sy

    YüksekCVSS 8,1İstismar yokEPSS %0

    google · chrome25 Ağu 2026

  • CVE-2026-79012
    38İzleyin

    Use after free in Safebrowsing in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to

    KritikCVSS 9,6İstismar yokEPSS %0

    google · chrome25 Ağu 2026

  • CVE-2026-79019
    38İzleyin

    Out of bounds write in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrar

    KritikCVSS 9,6İstismar yokEPSS %0

    google · chrome25 Ağu 2026

  • CVE-2026-79020
    32İzleyin

    Out of bounds read in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially read memory inside the sandbox v

    YüksekCVSS 8,1İstismar yokEPSS %0

    google · chrome25 Ağu 2026

  • CVE-2026-79026
    38İzleyin

    Use after free in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially

    KritikCVSS 9,6İstismar yokEPSS %0

    google · chrome25 Ağu 2026

  • CVE-2026-79027
    32İzleyin

    Use after free in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via

    YüksekCVSS 8,1İstismar yokEPSS %0

    google · chrome25 Ağu 2026

  • CVE-2026-79033
    35İzleyin

    Insufficient control flow management in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social enginee

    YüksekCVSS 8,8İstismar yokEPSS %0

    google · chrome25 Ağu 2026

  • CVE-2026-79039
    32İzleyin

    Use after free in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the s

    YüksekCVSS 8,1İstismar yokEPSS %0

    google · chrome25 Ağu 2026

  • CVE-2026-79043
    38İzleyin

    Out of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside

    KritikCVSS 9,6İstismar yokEPSS %0

    google · chrome25 Ağu 2026

  • CVE-2026-79045
    35İzleyin

    Type confusion in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to read memory inside t

    YüksekCVSS 8,8İstismar yokEPSS %0

    google · chrome25 Ağu 2026

  • CVE-2026-79047
    38İzleyin

    Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary

    KritikCVSS 9,6İstismar yokEPSS %0

    google · chrome25 Ağu 2026

  • CVE-2026-79048
    35İzleyin

    Out of bounds write in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrar

    YüksekCVSS 8,8İstismar yokEPSS %0

    google · chrome25 Ağu 2026

  • CVE-2026-79052
    38İzleyin

    Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a

    KritikCVSS 9,6İstismar yokEPSS %0

    google · chrome25 Ağu 2026

  • CVE-2026-79054
    33İzleyin

    Use after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to e

    YüksekCVSS 8,3İstismar yokEPSS %0

    google · chrome25 Ağu 2026

  • CVE-2026-79056
    38İzleyin

    Use after free in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outs

    KritikCVSS 9,6İstismar yokEPSS %0

    google · chrome25 Ağu 2026

  • CVE-2026-79057
    32İzleyin

    Race condition in Start in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker leveraging social engineering to pote

    YüksekCVSS 8,1İstismar yokEPSS %0

    google · chrome25 Ağu 2026

  • CVE-2026-79058
    36İzleyin

    Missing authorization in Passwords in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer proces

    KritikCVSS 9,1İstismar yokEPSS %0

    google · chrome25 Ağu 2026

  • CVE-2026-79064
    38İzleyin

    Use after free in Network in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execu

    KritikCVSS 9,6İstismar yokEPSS %0

    google · chrome25 Ağu 2026