Yayın tarihine göre

Ağustos 2026: sömürülen ve yeni ciddi CVE kayıtları

7.294 kayıt · 20 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 62 / 73

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
32İzleyin	CVE-2026-79072İstismar yok	Improper state validation in Performance in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially read memory insidegoogle · chrome · CWE-754 Kimlik doğrulamasız	Yüksek8,1	—	%0,3	25 Ağu 2026
35İzleyin	CVE-2026-79073İstismar yok	Improper state validation in Parser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code google · chrome · CWE-754 Girişsiz RCE	Yüksek8,8	—	%0,4	25 Ağu 2026
38İzleyin	CVE-2026-79078İstismar yok	Use after free in FedCM in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrarygoogle · chrome · CWE-416 Girişsiz RCE Bellek hatası	Kritik9,6	—	%0,4	25 Ağu 2026
30İzleyin	CVE-2026-79083İstismar yok	Improper enforcement of behavioral workflow in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised tgoogle · chrome · CWE-841 Girişsiz RCE	Yüksek7,5	—	%0,3	25 Ağu 2026
39İzleyin	CVE-2026-79090İstismar yok	Improper privilege management in Actor in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bygoogle · chrome · CWE-269 Kimlik doğrulamasız	Kritik9,8	—	%0,4	25 Ağu 2026
38İzleyin	CVE-2026-79091İstismar yok	Use after free in Bluetooth in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to exegoogle · chrome · CWE-416 Girişsiz RCE Bellek hatası	Kritik9,6	—	%0,4	25 Ağu 2026
35İzleyin	CVE-2026-79097İstismar yok	Use after free in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crgoogle · chrome · CWE-416 Girişsiz RCE Bellek hatası	Yüksek8,8	—	%0,4	25 Ağu 2026
33İzleyin	CVE-2026-79109İstismar yok	Improper input validation in Printing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer progoogle · chrome · CWE-20 Girişsiz RCE	Yüksek8,3	—	%0,4	25 Ağu 2026
38İzleyin	CVE-2026-79111İstismar yok	Improper input validation in Dawn in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code ougoogle · chrome · CWE-20 Girişsiz RCE	Kritik9,6	—	%0,4	25 Ağu 2026
35İzleyin	CVE-2026-79119İstismar yok	Use after free in PDF in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a cgoogle · chrome · CWE-416 Girişsiz RCE Bellek hatası	Yüksek8,8	—	%0,3	25 Ağu 2026
33İzleyin	CVE-2026-79121İstismar yok	Improper input validation in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer pgoogle · chrome · CWE-20 Girişsiz RCE	Yüksek8,3	—	%0,4	25 Ağu 2026
35İzleyin	CVE-2026-79127İstismar yok	Out of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandboxgoogle · chrome · CWE-787 Girişsiz RCE Bellek hatası	Yüksek8,8	—	%0,4	25 Ağu 2026
38İzleyin	CVE-2026-79128İstismar yok	Use after free in Views in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sagoogle · chrome · CWE-416 Girişsiz RCE Bellek hatası	Kritik9,6	—	%0,4	25 Ağu 2026
38İzleyin	CVE-2026-79129İstismar yok	Use after free in Sessions in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to google · chrome · CWE-416 Girişsiz RCE Bellek hatası	Kritik9,6	—	%0,4	25 Ağu 2026
38İzleyin	CVE-2026-79130İstismar yok	Buffer overflow in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox viagoogle · chrome · CWE-122 Girişsiz RCE Bellek hatası	Kritik9,6	—	%0,4	25 Ağu 2026
38İzleyin	CVE-2026-79131İstismar yok	Out of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandboxgoogle · chrome · CWE-787 Girişsiz RCE Bellek hatası	Kritik9,6	—	%0,4	25 Ağu 2026
33İzleyin	CVE-2026-79132İstismar yok	Improper input validation in Input in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the rgoogle · chrome · CWE-20 Girişsiz RCE	Yüksek8,3	—	%0,4	25 Ağu 2026
38İzleyin	CVE-2026-79138İstismar yok	Out of bounds write in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrargoogle · chrome · CWE-787 Girişsiz RCE Bellek hatası	Kritik9,6	—	%0,3	25 Ağu 2026
30İzleyin	CVE-2026-79139İstismar yok	Improper input validation in Media in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the rgoogle · chrome · CWE-20 Girişsiz RCE	Yüksek7,5	—	%0,3	25 Ağu 2026
38İzleyin	CVE-2026-79140İstismar yok	Use after free in Views in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sagoogle · chrome · CWE-416 Girişsiz RCE Bellek hatası	Kritik9,6	—	%0,4	25 Ağu 2026
35İzleyin	CVE-2026-79142İstismar yok	Buffer overflow in ANGLE in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside tgoogle · chrome · CWE-122 Girişsiz RCE Bellek hatası	Yüksek8,8	—	%0,4	25 Ağu 2026
36İzleyin	CVE-2026-79148İstismar yok	Off-by-one error in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially google · chrome · CWE-193 Kimlik doğrulamasız	Kritik9,1	—	%0,3	25 Ağu 2026
38İzleyin	CVE-2026-79149İstismar yok	Use after free in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via google · chrome · CWE-416 Girişsiz RCE Bellek hatası	Kritik9,6	—	%0,4	25 Ağu 2026
38İzleyin	CVE-2026-79150İstismar yok	Use after free in Views in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sagoogle · chrome · CWE-416 Girişsiz RCE Bellek hatası	Kritik9,6	—	%0,4	25 Ağu 2026
39İzleyin	CVE-2026-79152İstismar yok	Incorrect authorization in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to bypass web origin pogoogle · chrome · CWE-863 Kimlik doğrulamasız Erişim denetimi (IDOR)	Kritik9,8	—	%0,3	25 Ağu 2026
33İzleyin	CVE-2026-79155İstismar yok	Race condition in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to pgoogle · chrome · CWE-367 Girişsiz RCE Yarış durumu	Yüksek8,3	—	%0,3	25 Ağu 2026
33İzleyin	CVE-2026-79175İstismar yok	Type confusion in Accessibility in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the rendgoogle · chrome · CWE-843 Girişsiz RCE	Yüksek8,3	—	%0,4	25 Ağu 2026
35İzleyin	CVE-2026-79182İstismar yok	Improper input validation in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code ogoogle · chrome · CWE-20 Girişsiz RCE	Yüksek8,8	—	%0,4	25 Ağu 2026
35İzleyin	CVE-2026-79183İstismar yok	Use after free in Accessibility in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute agoogle · chrome · CWE-416 Girişsiz RCE Bellek hatası	Yüksek8,8	—	%0,3	25 Ağu 2026
35İzleyin	CVE-2026-79187İstismar yok	Use after free in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via google · chrome · CWE-416 Girişsiz RCE Bellek hatası	Yüksek8,8	—	%0,5	25 Ağu 2026
38İzleyin	CVE-2026-79188İstismar yok	Out of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outsidegoogle · chrome · CWE-787 Girişsiz RCE Bellek hatası	Kritik9,6	—	%0,4	25 Ağu 2026
38İzleyin	CVE-2026-79189İstismar yok	Out of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outsidegoogle · chrome · CWE-787 Girişsiz RCE Bellek hatası	Kritik9,6	—	%0,3	25 Ağu 2026
32İzleyin	CVE-2026-79194İstismar yok	Use after free in Chromoting in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outsigoogle · chrome · CWE-416 Girişsiz RCE Bellek hatası	Yüksek8,1	—	%0,5	25 Ağu 2026
35İzleyin	CVE-2026-79195İstismar yok	Use after free in Script in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via google · chrome · CWE-416 Girişsiz RCE Bellek hatası	Yüksek8,8	—	%0,4	25 Ağu 2026
35İzleyin	CVE-2026-79197İstismar yok	Use after free in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crgoogle · chrome · CWE-416 Girişsiz RCE Bellek hatası	Yüksek8,8	—	%0,4	25 Ağu 2026
35İzleyin	CVE-2026-79198İstismar yok	Use after free in Platform in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox vigoogle · chrome · CWE-416 Girişsiz RCE Bellek hatası	Yüksek8,8	—	%0,4	25 Ağu 2026
38İzleyin	CVE-2026-79200İstismar yok	Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via agoogle · chrome · CWE-416 Girişsiz RCE Bellek hatası	Kritik9,6	—	%0,4	25 Ağu 2026
35İzleyin	CVE-2026-79202İstismar yok	Use after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox google · chrome · CWE-416 Girişsiz RCE Bellek hatası	Yüksek8,8	—	%0,4	25 Ağu 2026
35İzleyin	CVE-2026-79209İstismar yok	Type confusion in Animation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code inside tgoogle · chrome · CWE-843 Girişsiz RCE	Yüksek8,8	—	%0,4	25 Ağu 2026
33İzleyin	CVE-2026-79210İstismar yok	Use after free in Audio in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer progoogle · chrome · CWE-416 Girişsiz RCE Bellek hatası	Yüksek8,3	—	%0,4	25 Ağu 2026
35İzleyin	CVE-2026-79215İstismar yok	Integer overflow in WebGL in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside thgoogle · chrome · CWE-190 Girişsiz RCE Bellek hatası	Yüksek8,8	—	%0,5	25 Ağu 2026
30İzleyin	CVE-2026-79216İstismar yok	Buffer overflow in Blink in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execugoogle · chrome · CWE-122 Girişsiz RCE Bellek hatası	Yüksek7,5	—	%0,3	25 Ağu 2026
33İzleyin	CVE-2026-79218İstismar yok	Incorrect authorization in Sandbox in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer procesgoogle · chrome · CWE-863 Girişsiz RCE Erişim denetimi (IDOR)	Yüksek8,3	—	%0,3	25 Ağu 2026
35İzleyin	CVE-2026-79219İstismar yok	Use after free in Bluetooth in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitgoogle · chrome · CWE-416 Girişsiz RCE Bellek hatası	Yüksek8,8	—	%0,3	25 Ağu 2026
35İzleyin	CVE-2026-79223İstismar yok	Integer overflow in Chromium in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to read memory inside the sandbox via a craftgoogle · chrome · CWE-190 Kimlik doğrulamasız Bellek hatası	Yüksek8,8	—	%0,3	25 Ağu 2026
33İzleyin	CVE-2026-79224İstismar yok	Use after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to egoogle · chrome · CWE-416 Girişsiz RCE Bellek hatası	Yüksek8,3	—	%0,4	25 Ağu 2026
35İzleyin	CVE-2026-79226İstismar yok	Improper privilege management in Regional Capabilities in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social egoogle · chrome · CWE-269 Kimlik doğrulamasız	Yüksek8,8	—	%0,3	25 Ağu 2026
35İzleyin	CVE-2026-79227İstismar yok	Type confusion in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrgoogle · chrome · CWE-843 Girişsiz RCE	Yüksek8,8	—	%0,4	25 Ağu 2026
35İzleyin	CVE-2026-79230İstismar yok	Improper input validation in ANGLE in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrgoogle · chrome · CWE-20 Girişsiz RCE	Yüksek8,8	—	%0,2	25 Ağu 2026
35İzleyin	CVE-2026-79231İstismar yok	Buffer overflow in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via google · chrome · CWE-122 Girişsiz RCE Bellek hatası	Yüksek8,8	—	%0,4	25 Ağu 2026
38İzleyin	CVE-2026-79232İstismar yok	Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sgoogle · chrome · CWE-416 Girişsiz RCE Bellek hatası	Kritik9,6	—	%0,4	25 Ağu 2026
38İzleyin	CVE-2026-79235İstismar yok	Use after free in WebGL in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via google · chrome · CWE-416 Girişsiz RCE Bellek hatası	Kritik9,6	—	%0,4	25 Ağu 2026
35İzleyin	CVE-2026-79236İstismar yok	Type confusion in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crgoogle · chrome · CWE-843 Girişsiz RCE	Yüksek8,8	—	%0,4	25 Ağu 2026
35İzleyin	CVE-2026-79240İstismar yok	Out of bounds write in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrargoogle · chrome · CWE-787 Girişsiz RCE Bellek hatası	Yüksek8,8	—	%0,3	25 Ağu 2026
35İzleyin	CVE-2026-79244İstismar yok	Use after free in Animation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox vgoogle · chrome · CWE-416 Girişsiz RCE Bellek hatası	Yüksek8,8	—	%0,4	25 Ağu 2026
30İzleyin	CVE-2026-79245İstismar yok	Use after free in UI in Google Chrome prior to 152.0.7977.65 allowed a local attacker who had compromised the renderer process to execute argoogle · chrome · CWE-416 RCE Bellek hatası	Yüksek7,7	—	%0,1	25 Ağu 2026
33İzleyin	CVE-2026-79247İstismar yok	Use after free in Chromoting in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderegoogle · chrome · CWE-416 Girişsiz RCE Bellek hatası	Yüksek8,3	—	%0,3	25 Ağu 2026
33İzleyin	CVE-2026-79256İstismar yok	Externally controlled reference in WebView in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromisgoogle · chrome · CWE-610 Girişsiz RCE	Yüksek8,3	—	%0,4	25 Ağu 2026
38İzleyin	CVE-2026-79257İstismar yok	Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via google · chrome · CWE-416 Girişsiz RCE Bellek hatası	Kritik9,6	—	%0,3	25 Ağu 2026
32İzleyin	CVE-2026-79263İstismar yok	Race condition in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox google · chrome · CWE-367 Girişsiz RCE Yarış durumu	Yüksek8,1	—	%0,3	25 Ağu 2026
35İzleyin	CVE-2026-79266Kavram kanıtı	Use after free in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrgoogle · chrome · CWE-416 Girişsiz RCE Bellek hatası	Yüksek8,8	—	%0,3	25 Ağu 2026
38İzleyin	CVE-2026-79275İstismar yok	Use after free in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via google · chrome · CWE-416 Girişsiz RCE Bellek hatası	Kritik9,6	—	%0,4	25 Ağu 2026
38İzleyin	CVE-2026-79282İstismar yok	Use after free in ANGLE in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside thgoogle · chrome · CWE-416 Girişsiz RCE Bellek hatası	Kritik9,6	—	%0,4	25 Ağu 2026
29İzleyin	CVE-2026-79286İstismar yok	Missing authorization in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to potentially execute argoogle · chrome · CWE-862 RCE Erişim denetimi (IDOR)	Yüksek7,4	—	%0,1	25 Ağu 2026
38İzleyin	CVE-2026-79290İstismar yok	Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via agoogle · chrome · CWE-416 Girişsiz RCE Bellek hatası	Kritik9,6	—	%0,4	25 Ağu 2026
33İzleyin	CVE-2026-79292İstismar yok	Integer overflow in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process togoogle · chrome · CWE-190 Girişsiz RCE Bellek hatası	Yüksek8,3	—	%0,4	25 Ağu 2026
37İzleyin	CVE-2026-80104İstismar yok	DB-GPT 0.8.0 Path Traversal Arbitrary File Write via Skill Upload Filenameeosphoros-ai · db-gpt · CWE-22 Kimlik doğrulamasız Yol geçişi	Kritik9,3	—	%1,1	25 Ağu 2026
32İzleyin	GHSA-vwf3-4xxj-qg6hİstismar yok	mcp-contextforge-gateway has Server-Side Template Injection (SSTI) leading to Remote Code Execution in `PromptService._render_template` via PyPI · mcp-contextforge-gateway · CWE-1336 RCE SSTI	Yüksek8,0	—	—	25 Ağu 2026
36İzleyin	CVE-2026-62862İstismar yok	TypeBot: Account takeover via brute-forceable 6-digit magic-link codebaptistearno · typebot.io · CWE-307 Kimlik doğrulamasız Gömülü kimlik bilgisi CSRF	Kritik9,1	—	%0,5	25 Ağu 2026
34İzleyin	CVE-2026-62865İstismar yok	TypeBot: Arbitrary server file read via Send Email block attachment pathbaptistearno · typebot.io · CWE-73 Kimlik doğrulamasız Yol geçişi	Yüksek8,7	—	%0,3	25 Ağu 2026
34İzleyin	CVE-2026-63403İstismar yok	Faktory: Unrecovered panic in command handlers allows full-server denial of servicecontribsys · faktory · CWE-248 Kimlik doğrulamasız	Yüksek8,7	—	%0,4	25 Ağu 2026
29İzleyin	CVE-2026-63404İstismar yok	Faktory: Insecure predictable /tmp/redis.conf enables local Redis config hijack (network exposure / root RCE primitive)contribsys · faktory · CWE-377 RCE Yerel yetki yükseltme	Yüksek7,3	—	%0,1	25 Ağu 2026
36İzleyin	CVE-2026-65182İstismar yok	Apache Tomcat: Bypass longest prefix security constraintapache · tomcat · CWE-284 Kimlik doğrulamasız Erişim denetimi (IDOR)	Kritik9,1	—	%0,5	25 Ağu 2026
32İzleyin	CVE-2026-65183İstismar yok	Apache Tomcat: TOCTOU when setting specific permissions for Unix Domain Socketsapache · tomcat · CWE-367 Kimlik doğrulamasız Yarış durumu	Yüksek8,1	—	%0,3	25 Ağu 2026
39İzleyin	CVE-2026-65637İstismar yok	Apache Tomcat: HTTP/2 no-authority bypass of strict SNI validation - CVE-2026-32990 fix incompleteapache · tomcat · CWE-20 Kimlik doğrulamasız	Kritik9,8	—	%0,5	25 Ağu 2026
39İzleyin	CVE-2026-65905İstismar yok	Apache Tomcat: Limited replay attack possible with DIGEST authenticationapache · tomcat · CWE-294 Kimlik doğrulamasız Kimlik doğrulama atlatma	Kritik9,8	—	%0,5	25 Ağu 2026
30İzleyin	CVE-2026-65927İstismar yok	Apache Tomcat: RewriteValve [N] restarts at the second rule and may bypass access controlapache · tomcat · CWE-193 Kimlik doğrulamasız Hizmet dışı bırakma	Yüksek7,5	—	%0,6	25 Ağu 2026
32İzleyin	CVE-2026-66422İstismar yok	Apache Tomcat: Servlet role references can bypass declarative role constraintsapache · tomcat · CWE-285 Erişim denetimi (IDOR)	Yüksek8,1	—	%0,4	25 Ağu 2026
36İzleyin	CVE-2026-68525İstismar yok	Apache Tomcat: Redirect after FORM auth may bypass method specific constraintsapache · tomcat · CWE-863 Kimlik doğrulamasız Erişim denetimi (IDOR)	Kritik9,1	—	%0,4	25 Ağu 2026
32İzleyin	CVE-2026-68569İstismar yok	Apache Tomcat: Principal lookup can fail open in some casesapache · tomcat · CWE-287 Kimlik doğrulama atlatma	Yüksek8,1	—	%0,4	25 Ağu 2026
30İzleyin	CVE-2026-68763İstismar yok	Apache Tomcat: DoS via allocation leak in HTTP/2 backlog tracking when a stream is resetapache · tomcat · CWE-400 Kimlik doğrulamasız Hizmet dışı bırakma	Yüksek7,5	—	%0,7	25 Ağu 2026
39İzleyin	CVE-2026-78619İstismar yok	Punk::Plugin::TOTP versions before 0.05 for Perl accept another account's recovery code at the two-factor challenge because totp_use_recovery compares user idenCWE-305 Kimlik doğrulamasız Kimlik doğrulama atlatma	Kritik9,8	—	%0,6	25 Ağu 2026
36İzleyin	CVE-2026-78655İstismar yok	Punk::Plugin::TOTP versions before 0.05 for Perl allow the second-factor attempt limit to be reset by replaying an earlier session cookie because the challenge CWE-307 Kimlik doğrulamasız	Kritik9,1	—	%0,4	25 Ağu 2026
30İzleyin	CVE-2026-80182İstismar yok	In OpenStack Keystone before 29.0.3, tokens obtained via OAuth1 access token, application credential, or trust-scoped authentication could copenstack · keystone · CWE-863 Erişim denetimi (IDOR)	Yüksek7,6	—	%0,5	25 Ağu 2026
30İzleyin	CVE-2026-80184İstismar yok	In OpenStack Keystone before 29.0.3, tokens obtained via delegated authentication mechanisms (OAuth1 access tokens, application credentials,openstack · keystone · CWE-863 Erişim denetimi (IDOR)	Yüksek7,6	—	%0,6	25 Ağu 2026
30İzleyin	CVE-2026-80186İstismar yok	Bluez: stack overflow in name2utf8 causes dos and potential code executionred hat · red hat enterprise linux 10 · CWE-120 Girişsiz RCE Bellek hatası	Yüksek7,6	—	%0,5	25 Ağu 2026
31İzleyin	CVE-2026-79992İstismar yok	Emacs: emacs: command injection via crafted filenames in trampred hat · red hat enterprise linux 10 · CWE-78 RCE Komut enjeksiyonu	Yüksek7,8	—	%0,1	25 Ağu 2026
39İzleyin	GHSA-3h2g-j4wp-7qqqİstismar yok	Duplicate Advisory: JVM argument injection bypass via per-call options in the NLTK Stanford wrappers (incomplete fix of CVE-2026-12841)PyPI · nltk · CWE-88 Kimlik doğrulamasız	Kritik9,8	—	—	25 Ağu 2026
30İzleyin	GHSA-5jhf-fpp7-v2pvİstismar yok	Duplicate Advisory: Nokogiri CSS selector tokenizer has regular expression backtrackingRubyGems · nokogiri · CWE-1333 Kimlik doğrulamasız Hizmet dışı bırakma	Yüksek7,5	—	—	25 Ağu 2026
32İzleyin	GHSA-rcw8-9qrw-27m2İstismar yok	Duplicate Advisory: NLTK: Corpus Reader Sandbox BypassPyPI · nltk · CWE-73 Kimlik doğrulamasız Yol geçişi	Yüksek8,2	—	—	25 Ağu 2026
18İzleyin	CVE-2026-15917İstismar yok	Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-011drupal · drupal core · CWE-79 Kimlik doğrulamasız XSS	Orta4,7	—	%0,1	25 Ağu 2026
39İzleyin	CVE-2026-16639İstismar yok	Internationalization Single Sign-On - Critical - Access bypass - SA-CONTRIB-2026-081drupal · internationalization single sign-on · CWE-288 Kimlik doğrulamasız Kimlik doğrulama atlatma	Kritik9,8	—	%0,3	25 Ağu 2026
39İzleyin	CVE-2026-16641İstismar yok	Commerce Elavon - Critical - Unsupported - SA-CONTRIB-2026-084drupal · commerce elavon · CWE-20 Kimlik doğrulamasız	Kritik9,8	—	%0,2	25 Ağu 2026
36İzleyin	CVE-2026-16644İstismar yok	Webform REST - Moderately critical - Access bypass - SA-CONTRIB-2026-087drupal · webform rest · CWE-863 Kimlik doğrulamasız Erişim denetimi (IDOR)	Kritik9,1	—	%0,3	25 Ağu 2026
36İzleyin	CVE-2026-16645İstismar yok	PhotoSwipe - Responsive JavaScript Modal Image Gallery - Moderately critical - Access bypass - SA-CONTRIB-2026-088drupal · photoswipe - responsive javascript modal image gallery · CWE-862 Kimlik doğrulamasız Erişim denetimi (IDOR)	Kritik9,1	—	%0,2	25 Ağu 2026
30İzleyin	CVE-2026-18259İstismar yok	Token Content Access - Moderately critical - Access bypass - SA-CONTRIB-2026-090drupal · token content access · CWE-208 Kimlik doğrulamasız	Yüksek7,5	—	%0,2	25 Ağu 2026
32İzleyin	CVE-2026-18985İstismar yok	Edit in-place field - Moderately critical - Access bypass - SA-CONTRIB-2026-093drupal · edit in-place field · CWE-863 Erişim denetimi (IDOR)	Yüksek8,1	—	%0,2	25 Ağu 2026
29İzleyin	CVE-2026-41707İstismar yok	Spring Security DPoPProofJwtDecoderFactory vulnerable to DPoP Proof Replayvmware · spring security · CWE-294 Kimlik doğrulamasız Kimlik doğrulama atlatma	Yüksek7,4	—	%0,3	25 Ağu 2026
31İzleyin	CVE-2026-54757İstismar yok	Trestle has Server-Side Template Injection (SSTI) via Recursive Template Re-evaluation of Untrusted Dataoscal-compass · compliance-trestle · CWE-94 RCE SSTI	Yüksek7,8	—	%0,3	25 Ağu 2026
37İzleyin	CVE-2026-79911İstismar yok	TOTOLINK N600R CGI cstecgi.cgi setSystemConfig stack-based overflowtotolink · n600r · CWE-119 Kimlik doğrulamasız Bellek hatası	Kritik9,3	—	%1,0	25 Ağu 2026

CVE-2026-79072
32İzleyin
Improper state validation in Performance in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially read memory inside
YüksekCVSS 8,1İstismar yokEPSS %0
- Kimlik doğrulamasız
google · chrome25 Ağu 2026
CVE-2026-79073
35İzleyin
Improper state validation in Parser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code
YüksekCVSS 8,8İstismar yokEPSS %0
- Girişsiz RCE
google · chrome25 Ağu 2026
CVE-2026-79078
38İzleyin
Use after free in FedCM in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary
KritikCVSS 9,6İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
google · chrome25 Ağu 2026
CVE-2026-79083
30İzleyin
Improper enforcement of behavioral workflow in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised t
YüksekCVSS 7,5İstismar yokEPSS %0
- Girişsiz RCE
google · chrome25 Ağu 2026
CVE-2026-79090
39İzleyin
Improper privilege management in Actor in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to by
KritikCVSS 9,8İstismar yokEPSS %0
- Kimlik doğrulamasız
google · chrome25 Ağu 2026
CVE-2026-79091
38İzleyin
Use after free in Bluetooth in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to exe
KritikCVSS 9,6İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
google · chrome25 Ağu 2026
CVE-2026-79097
35İzleyin
Use after free in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr
YüksekCVSS 8,8İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
google · chrome25 Ağu 2026
CVE-2026-79109
33İzleyin
Improper input validation in Printing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer pro
YüksekCVSS 8,3İstismar yokEPSS %0
- Girişsiz RCE
google · chrome25 Ağu 2026
CVE-2026-79111
38İzleyin
Improper input validation in Dawn in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code ou
KritikCVSS 9,6İstismar yokEPSS %0
- Girişsiz RCE
google · chrome25 Ağu 2026
CVE-2026-79119
35İzleyin
Use after free in PDF in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a c
YüksekCVSS 8,8İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
google · chrome25 Ağu 2026
CVE-2026-79121
33İzleyin
Improper input validation in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer p
YüksekCVSS 8,3İstismar yokEPSS %0
- Girişsiz RCE
google · chrome25 Ağu 2026
CVE-2026-79127
35İzleyin
Out of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox
YüksekCVSS 8,8İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
google · chrome25 Ağu 2026
CVE-2026-79128
38İzleyin
Use after free in Views in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sa
KritikCVSS 9,6İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
google · chrome25 Ağu 2026
CVE-2026-79129
38İzleyin
Use after free in Sessions in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to
KritikCVSS 9,6İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
google · chrome25 Ağu 2026
CVE-2026-79130
38İzleyin
Buffer overflow in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via
KritikCVSS 9,6İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
google · chrome25 Ağu 2026
CVE-2026-79131
38İzleyin
Out of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox
KritikCVSS 9,6İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
google · chrome25 Ağu 2026
CVE-2026-79132
33İzleyin
Improper input validation in Input in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the r
YüksekCVSS 8,3İstismar yokEPSS %0
- Girişsiz RCE
google · chrome25 Ağu 2026
CVE-2026-79138
38İzleyin
Out of bounds write in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrar
KritikCVSS 9,6İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
google · chrome25 Ağu 2026
CVE-2026-79139
30İzleyin
Improper input validation in Media in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the r
YüksekCVSS 7,5İstismar yokEPSS %0
- Girişsiz RCE
google · chrome25 Ağu 2026
CVE-2026-79140
38İzleyin
Use after free in Views in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sa
KritikCVSS 9,6İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
google · chrome25 Ağu 2026
CVE-2026-79142
35İzleyin
Buffer overflow in ANGLE in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside t
YüksekCVSS 8,8İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
google · chrome25 Ağu 2026
CVE-2026-79148
36İzleyin
Off-by-one error in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially
KritikCVSS 9,1İstismar yokEPSS %0
- Kimlik doğrulamasız
google · chrome25 Ağu 2026
CVE-2026-79149
38İzleyin
Use after free in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via
KritikCVSS 9,6İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
google · chrome25 Ağu 2026
CVE-2026-79150
38İzleyin
Use after free in Views in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sa
KritikCVSS 9,6İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
google · chrome25 Ağu 2026
CVE-2026-79152
39İzleyin
Incorrect authorization in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to bypass web origin po
KritikCVSS 9,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
google · chrome25 Ağu 2026
CVE-2026-79155
33İzleyin
Race condition in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to p
YüksekCVSS 8,3İstismar yokEPSS %0
- Girişsiz RCE
- Yarış durumu
google · chrome25 Ağu 2026
CVE-2026-79175
33İzleyin
Type confusion in Accessibility in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the rend
YüksekCVSS 8,3İstismar yokEPSS %0
- Girişsiz RCE
google · chrome25 Ağu 2026
CVE-2026-79182
35İzleyin
Improper input validation in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code o
YüksekCVSS 8,8İstismar yokEPSS %0
- Girişsiz RCE
google · chrome25 Ağu 2026
CVE-2026-79183
35İzleyin
Use after free in Accessibility in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute a
YüksekCVSS 8,8İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
google · chrome25 Ağu 2026
CVE-2026-79187
35İzleyin
Use after free in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via
YüksekCVSS 8,8İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
google · chrome25 Ağu 2026
CVE-2026-79188
38İzleyin
Out of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside
KritikCVSS 9,6İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
google · chrome25 Ağu 2026
CVE-2026-79189
38İzleyin
Out of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside
KritikCVSS 9,6İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
google · chrome25 Ağu 2026
CVE-2026-79194
32İzleyin
Use after free in Chromoting in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outsi
YüksekCVSS 8,1İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
google · chrome25 Ağu 2026
CVE-2026-79195
35İzleyin
Use after free in Script in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via
YüksekCVSS 8,8İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
google · chrome25 Ağu 2026
CVE-2026-79197
35İzleyin
Use after free in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr
YüksekCVSS 8,8İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
google · chrome25 Ağu 2026
CVE-2026-79198
35İzleyin
Use after free in Platform in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox vi
YüksekCVSS 8,8İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
google · chrome25 Ağu 2026
CVE-2026-79200
38İzleyin
Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a
KritikCVSS 9,6İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
google · chrome25 Ağu 2026
CVE-2026-79202
35İzleyin
Use after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox
YüksekCVSS 8,8İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
google · chrome25 Ağu 2026
CVE-2026-79209
35İzleyin
Type confusion in Animation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code inside t
YüksekCVSS 8,8İstismar yokEPSS %0
- Girişsiz RCE
google · chrome25 Ağu 2026
CVE-2026-79210
33İzleyin
Use after free in Audio in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer pro
YüksekCVSS 8,3İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
google · chrome25 Ağu 2026
CVE-2026-79215
35İzleyin
Integer overflow in WebGL in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside th
YüksekCVSS 8,8İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
google · chrome25 Ağu 2026
CVE-2026-79216
30İzleyin
Buffer overflow in Blink in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execu
YüksekCVSS 7,5İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
google · chrome25 Ağu 2026
CVE-2026-79218
33İzleyin
Incorrect authorization in Sandbox in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer proces
YüksekCVSS 8,3İstismar yokEPSS %0
- Girişsiz RCE
- Erişim denetimi (IDOR)
google · chrome25 Ağu 2026
CVE-2026-79219
35İzleyin
Use after free in Bluetooth in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbit
YüksekCVSS 8,8İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
google · chrome25 Ağu 2026
CVE-2026-79223
35İzleyin
Integer overflow in Chromium in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to read memory inside the sandbox via a craft
YüksekCVSS 8,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- Bellek hatası
google · chrome25 Ağu 2026
CVE-2026-79224
33İzleyin
Use after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to e
YüksekCVSS 8,3İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
google · chrome25 Ağu 2026
CVE-2026-79226
35İzleyin
Improper privilege management in Regional Capabilities in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social e
YüksekCVSS 8,8İstismar yokEPSS %0
- Kimlik doğrulamasız
google · chrome25 Ağu 2026
CVE-2026-79227
35İzleyin
Type confusion in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitr
YüksekCVSS 8,8İstismar yokEPSS %0
- Girişsiz RCE
google · chrome25 Ağu 2026
CVE-2026-79230
35İzleyin
Improper input validation in ANGLE in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitr
YüksekCVSS 8,8İstismar yokEPSS %0
- Girişsiz RCE
google · chrome25 Ağu 2026
CVE-2026-79231
35İzleyin
Buffer overflow in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via
YüksekCVSS 8,8İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
google · chrome25 Ağu 2026
CVE-2026-79232
38İzleyin
Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the s
KritikCVSS 9,6İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
google · chrome25 Ağu 2026
CVE-2026-79235
38İzleyin
Use after free in WebGL in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via
KritikCVSS 9,6İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
google · chrome25 Ağu 2026
CVE-2026-79236
35İzleyin
Type confusion in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr
YüksekCVSS 8,8İstismar yokEPSS %0
- Girişsiz RCE
google · chrome25 Ağu 2026
CVE-2026-79240
35İzleyin
Out of bounds write in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrar
YüksekCVSS 8,8İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
google · chrome25 Ağu 2026
CVE-2026-79244
35İzleyin
Use after free in Animation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox v
YüksekCVSS 8,8İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
google · chrome25 Ağu 2026
CVE-2026-79245
30İzleyin
Use after free in UI in Google Chrome prior to 152.0.7977.65 allowed a local attacker who had compromised the renderer process to execute ar
YüksekCVSS 7,7İstismar yokEPSS %0
- RCE
- Bellek hatası
google · chrome25 Ağu 2026
CVE-2026-79247
33İzleyin
Use after free in Chromoting in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the rendere
YüksekCVSS 8,3İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
google · chrome25 Ağu 2026
CVE-2026-79256
33İzleyin
Externally controlled reference in WebView in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromis
YüksekCVSS 8,3İstismar yokEPSS %0
- Girişsiz RCE
google · chrome25 Ağu 2026
CVE-2026-79257
38İzleyin
Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via
KritikCVSS 9,6İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
google · chrome25 Ağu 2026
CVE-2026-79263
32İzleyin
Race condition in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox
YüksekCVSS 8,1İstismar yokEPSS %0
- Girişsiz RCE
- Yarış durumu
google · chrome25 Ağu 2026
CVE-2026-79266
35İzleyin
Use after free in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitr
YüksekCVSS 8,8Kavram kanıtıEPSS %0
- Girişsiz RCE
- Bellek hatası
google · chrome25 Ağu 2026
CVE-2026-79275
38İzleyin
Use after free in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via
KritikCVSS 9,6İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
google · chrome25 Ağu 2026
CVE-2026-79282
38İzleyin
Use after free in ANGLE in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside th
KritikCVSS 9,6İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
google · chrome25 Ağu 2026
CVE-2026-79286
29İzleyin
Missing authorization in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to potentially execute ar
YüksekCVSS 7,4İstismar yokEPSS %0
- RCE
- Erişim denetimi (IDOR)
google · chrome25 Ağu 2026
CVE-2026-79290
38İzleyin
Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a
KritikCVSS 9,6İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
google · chrome25 Ağu 2026
CVE-2026-79292
33İzleyin
Integer overflow in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to
YüksekCVSS 8,3İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
google · chrome25 Ağu 2026
CVE-2026-80104
37İzleyin
DB-GPT 0.8.0 Path Traversal Arbitrary File Write via Skill Upload Filename
KritikCVSS 9,3İstismar yokEPSS %1
- Kimlik doğrulamasız
- Yol geçişi
eosphoros-ai · db-gpt25 Ağu 2026
GHSA-vwf3-4xxj-qg6h
32İzleyin
mcp-contextforge-gateway has Server-Side Template Injection (SSTI) leading to Remote Code Execution in `PromptService._render_template` via
YüksekCVSS 8,0İstismar yok
- RCE
- SSTI
PyPI · mcp-contextforge-gateway25 Ağu 2026
CVE-2026-62862
36İzleyin
TypeBot: Account takeover via brute-forceable 6-digit magic-link code
KritikCVSS 9,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- Gömülü kimlik bilgisi
- CSRF
baptistearno · typebot.io25 Ağu 2026
CVE-2026-62865
34İzleyin
TypeBot: Arbitrary server file read via Send Email block attachment path
YüksekCVSS 8,7İstismar yokEPSS %0
- Kimlik doğrulamasız
- Yol geçişi
baptistearno · typebot.io25 Ağu 2026
CVE-2026-63403
34İzleyin
Faktory: Unrecovered panic in command handlers allows full-server denial of service
YüksekCVSS 8,7İstismar yokEPSS %0
- Kimlik doğrulamasız
contribsys · faktory25 Ağu 2026
CVE-2026-63404
29İzleyin
Faktory: Insecure predictable /tmp/redis.conf enables local Redis config hijack (network exposure / root RCE primitive)
YüksekCVSS 7,3İstismar yokEPSS %0
- RCE
- Yerel yetki yükseltme
contribsys · faktory25 Ağu 2026
CVE-2026-65182
36İzleyin
Apache Tomcat: Bypass longest prefix security constraint
KritikCVSS 9,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
apache · tomcat25 Ağu 2026
CVE-2026-65183
32İzleyin
Apache Tomcat: TOCTOU when setting specific permissions for Unix Domain Sockets
YüksekCVSS 8,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- Yarış durumu
apache · tomcat25 Ağu 2026
CVE-2026-65637
39İzleyin
Apache Tomcat: HTTP/2 no-authority bypass of strict SNI validation - CVE-2026-32990 fix incomplete
KritikCVSS 9,8İstismar yokEPSS %0
- Kimlik doğrulamasız
apache · tomcat25 Ağu 2026
CVE-2026-65905
39İzleyin
Apache Tomcat: Limited replay attack possible with DIGEST authentication
KritikCVSS 9,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
apache · tomcat25 Ağu 2026
CVE-2026-65927
30İzleyin
Apache Tomcat: RewriteValve [N] restarts at the second rule and may bypass access control
YüksekCVSS 7,5İstismar yokEPSS %0
- Kimlik doğrulamasız
- Hizmet dışı bırakma
apache · tomcat25 Ağu 2026
CVE-2026-66422
32İzleyin
Apache Tomcat: Servlet role references can bypass declarative role constraints
YüksekCVSS 8,1İstismar yokEPSS %0
- Erişim denetimi (IDOR)
apache · tomcat25 Ağu 2026
CVE-2026-68525
36İzleyin
Apache Tomcat: Redirect after FORM auth may bypass method specific constraints
KritikCVSS 9,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
apache · tomcat25 Ağu 2026
CVE-2026-68569
32İzleyin
Apache Tomcat: Principal lookup can fail open in some cases
YüksekCVSS 8,1İstismar yokEPSS %0
- Kimlik doğrulama atlatma
apache · tomcat25 Ağu 2026
CVE-2026-68763
30İzleyin
Apache Tomcat: DoS via allocation leak in HTTP/2 backlog tracking when a stream is reset
YüksekCVSS 7,5İstismar yokEPSS %0
- Kimlik doğrulamasız
- Hizmet dışı bırakma
apache · tomcat25 Ağu 2026
CVE-2026-78619
39İzleyin
Punk::Plugin::TOTP versions before 0.05 for Perl accept another account's recovery code at the two-factor challenge because totp_use_recovery compares user iden
KritikCVSS 9,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
25 Ağu 2026
CVE-2026-78655
36İzleyin
Punk::Plugin::TOTP versions before 0.05 for Perl allow the second-factor attempt limit to be reset by replaying an earlier session cookie because the challenge
KritikCVSS 9,1İstismar yokEPSS %0
- Kimlik doğrulamasız
25 Ağu 2026
CVE-2026-80182
30İzleyin
In OpenStack Keystone before 29.0.3, tokens obtained via OAuth1 access token, application credential, or trust-scoped authentication could c
YüksekCVSS 7,6İstismar yokEPSS %0
- Erişim denetimi (IDOR)
openstack · keystone25 Ağu 2026
CVE-2026-80184
30İzleyin
In OpenStack Keystone before 29.0.3, tokens obtained via delegated authentication mechanisms (OAuth1 access tokens, application credentials,
YüksekCVSS 7,6İstismar yokEPSS %0
- Erişim denetimi (IDOR)
openstack · keystone25 Ağu 2026
CVE-2026-80186
30İzleyin
Bluez: stack overflow in name2utf8 causes dos and potential code execution
YüksekCVSS 7,6İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
red hat · red hat enterprise linux 1025 Ağu 2026
CVE-2026-79992
31İzleyin
Emacs: emacs: command injection via crafted filenames in tramp
YüksekCVSS 7,8İstismar yokEPSS %0
- RCE
- Komut enjeksiyonu
red hat · red hat enterprise linux 1025 Ağu 2026
GHSA-3h2g-j4wp-7qqq
39İzleyin
Duplicate Advisory: JVM argument injection bypass via per-call options in the NLTK Stanford wrappers (incomplete fix of CVE-2026-12841)
KritikCVSS 9,8İstismar yok
- Kimlik doğrulamasız
PyPI · nltk25 Ağu 2026
GHSA-5jhf-fpp7-v2pv
30İzleyin
Duplicate Advisory: Nokogiri CSS selector tokenizer has regular expression backtracking
YüksekCVSS 7,5İstismar yok
- Kimlik doğrulamasız
- Hizmet dışı bırakma
RubyGems · nokogiri25 Ağu 2026
GHSA-rcw8-9qrw-27m2
32İzleyin
Duplicate Advisory: NLTK: Corpus Reader Sandbox Bypass
YüksekCVSS 8,2İstismar yok
- Kimlik doğrulamasız
- Yol geçişi
PyPI · nltk25 Ağu 2026
CVE-2026-15917
18İzleyin
Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-011
OrtaCVSS 4,7İstismar yokEPSS %0
- Kimlik doğrulamasız
- XSS
drupal · drupal core25 Ağu 2026
CVE-2026-16639
39İzleyin
Internationalization Single Sign-On - Critical - Access bypass - SA-CONTRIB-2026-081
KritikCVSS 9,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
drupal · internationalization single sign-on25 Ağu 2026
CVE-2026-16641
39İzleyin
Commerce Elavon - Critical - Unsupported - SA-CONTRIB-2026-084
KritikCVSS 9,8İstismar yokEPSS %0
- Kimlik doğrulamasız
drupal · commerce elavon25 Ağu 2026
CVE-2026-16644
36İzleyin
Webform REST - Moderately critical - Access bypass - SA-CONTRIB-2026-087
KritikCVSS 9,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
drupal · webform rest25 Ağu 2026
CVE-2026-16645
36İzleyin
PhotoSwipe - Responsive JavaScript Modal Image Gallery - Moderately critical - Access bypass - SA-CONTRIB-2026-088
KritikCVSS 9,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
drupal · photoswipe - responsive javascript modal image gallery25 Ağu 2026
CVE-2026-18259
30İzleyin
Token Content Access - Moderately critical - Access bypass - SA-CONTRIB-2026-090
YüksekCVSS 7,5İstismar yokEPSS %0
- Kimlik doğrulamasız
drupal · token content access25 Ağu 2026
CVE-2026-18985
32İzleyin
Edit in-place field - Moderately critical - Access bypass - SA-CONTRIB-2026-093
YüksekCVSS 8,1İstismar yokEPSS %0
- Erişim denetimi (IDOR)
drupal · edit in-place field25 Ağu 2026
CVE-2026-41707
29İzleyin
Spring Security DPoPProofJwtDecoderFactory vulnerable to DPoP Proof Replay
YüksekCVSS 7,4İstismar yokEPSS %0
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
vmware · spring security25 Ağu 2026
CVE-2026-54757
31İzleyin
Trestle has Server-Side Template Injection (SSTI) via Recursive Template Re-evaluation of Untrusted Data
YüksekCVSS 7,8İstismar yokEPSS %0
- RCE
- SSTI
oscal-compass · compliance-trestle25 Ağu 2026
CVE-2026-79911
37İzleyin
TOTOLINK N600R CGI cstecgi.cgi setSystemConfig stack-based overflow
KritikCVSS 9,3İstismar yokEPSS %1
- Kimlik doğrulamasız
- Bellek hatası
totolink · n600r25 Ağu 2026