İçeriğe atla
Noroxi

Yayın tarihine göre

Ağustos 2026: sömürülen ve yeni ciddi CVE kayıtları

7.294 kayıt · 20 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 9 / 73

  • CVE-2026-61961
    28İzleyin

    WordPress EmbedPress plugin <= 4.5.6 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    wpdeveloper · embedpress6 Ağu 2026

  • CVE-2026-61963
    28İzleyin

    WordPress Media LIbrary Assistant plugin <= 3.38 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    david lingren · media library assistant6 Ağu 2026

  • CVE-2026-61964
    28İzleyin

    WordPress Ninja Tables plugin <= 5.2.9 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    wpmanageninja · ninja tables6 Ağu 2026

  • CVE-2026-61982
    28İzleyin

    WordPress SiteGuard WP Plugin plugin <= 1.8.6 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    jp-secure · siteguard wp plugin6 Ağu 2026

  • CVE-2026-65504
    30İzleyin

    WordPress BOX NOW Delivery Croatia plugin <= 3.3.0 - Broken Access Control vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    ivanbebek · box now delivery croatia6 Ağu 2026

  • CVE-2026-65507
    39İzleyin

    WordPress AIWU plugin <= 1.5.6 - Privilege Escalation vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    sergey · aiwu6 Ağu 2026

  • CVE-2026-65508
    37İzleyin

    WordPress Simply Schedule Appointments plugin <= 1.6.12.10 - SQL Injection vulnerability

    KritikCVSS 9,3İstismar yokEPSS %0

    nsquared · simply schedule appointments6 Ağu 2026

  • CVE-2026-65509
    28İzleyin

    WordPress wpDataTables plugin <= 7.5.1 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    wpdatatables · wpdatatables6 Ağu 2026

  • CVE-2026-65513
    28İzleyin

    WordPress Simply Schedule Appointments plugin <= 1.6.12.10 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    nsquared · simply schedule appointments6 Ağu 2026

  • CVE-2026-65515
    28İzleyin

    WordPress AffiliateWP plugin <= 2.35.0 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    affiliatewp · affiliatewp6 Ağu 2026

  • CVE-2026-65517
    28İzleyin

    WordPress Easy PayPal Buy Now Button plugin <= 2.0.4 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    scott paterson · easy paypal buy now button6 Ağu 2026

  • CVE-2026-65520
    37İzleyin

    WordPress WP OAuth Server plugin <= 6.2.0 - SQL Injection vulnerability

    KritikCVSS 9,3İstismar yokEPSS %0

    miniorange · wp oauth server6 Ağu 2026

  • CVE-2026-65523
    30İzleyin

    WordPress Formidable Forms Signature Online Contract Automation plugin <= 2.0.1 - Insecure Direct Object References (IDOR) vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    approveme · formidable forms signature online contract automation6 Ağu 2026

  • CVE-2026-65541
    29İzleyin

    WordPress Staff Training plugin <= 1.0.7 - Broken Access Control vulnerability

    YüksekCVSS 7,3İstismar yokEPSS %0

    solutioned · staff training6 Ağu 2026

  • CVE-2026-65542
    35İzleyin

    WordPress Super Socializer plugin <= 7.14.5 - Broken Authentication vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    rajat varlani · super socializer6 Ağu 2026

  • CVE-2026-65543
    30İzleyin

    WordPress Vimeo plugin <= 1.2.2 - Sensitive Data Exposure vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    vimeodev · vimeo6 Ağu 2026

  • CVE-2026-65544
    28İzleyin

    WordPress Super Socializer plugin <= 7.14.5 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    rajat varlani · super socializer6 Ağu 2026

  • CVE-2026-65545
    28İzleyin

    WordPress AI Engine plugin <= 3.6.8 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    jordy meow · ai engine6 Ağu 2026

  • CVE-2026-65546
    37İzleyin

    WordPress Qode Tours plugin <= 3.1.3.1 - SQL Injection vulnerability

    KritikCVSS 9,3İstismar yokEPSS %0

    qode · qode tours6 Ağu 2026

  • CVE-2026-65547
    34İzleyin

    WordPress Creative Mail plugin <= 1.6.9 - SQL Injection vulnerability

    YüksekCVSS 8,5İstismar yokEPSS %0

    constant contact · creative mail6 Ağu 2026

  • CVE-2026-65548
    39İzleyin

    WordPress Betheme theme <= 28.4.2 - Remote Code Execution (RCE) vulnerability

    KritikCVSS 9,9İstismar yokEPSS %0

    muffingroup · betheme6 Ağu 2026

  • CVE-2026-65549
    28İzleyin

    WordPress Jeg Elementor Kit plugin <= 3.2.10 - PHP Object Injection vulnerability

    YüksekCVSS 7,2İstismar yokEPSS %0

    jegtheme · jeg kit for elementor6 Ağu 2026

  • CVE-2026-65552
    39İzleyin

    WordPress Export User Data plugin <= 2.2.6 - PHP Object Injection vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    qstudio · export user data6 Ağu 2026

  • CVE-2026-65553
    40Planlayın

    WordPress Spider Analyser – WordPress搜索引擎蜘蛛分析插件 plugin <= 2.1.3 - Remote Code Execution (RCE) vulnerability

    KritikCVSS 10,0İstismar yokEPSS %0

    wbolt.com · spider analyser &#8211; wordpress搜索引擎蜘蛛分析插件6 Ağu 2026

  • CVE-2026-65554
    28İzleyin

    WordPress AnsPress – Question and answer plugin 4.4.4 - Broken Access Control vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    lattepress · anspress – question and answer6 Ağu 2026

  • CVE-2026-65556
    39İzleyin

    WordPress WPBruiser {no- Captcha anti-Spam} plugin <= 3.1.43 - PHP Object Injection vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    mihche · wpbruiser {no- captcha anti-spam}6 Ağu 2026

  • CVE-2026-65559
    28İzleyin

    WordPress Order Delivery Date for WooCommerce plugin <= 4.6.0 - Privilege Escalation vulnerability

    YüksekCVSS 7,2İstismar yokEPSS %0

    tychesoftwares · order delivery date for woocommerce6 Ağu 2026

  • CVE-2026-65560
    28İzleyin

    WordPress Houzez Property Feed plugin <= 2.5.48 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    property hive · houzez property feed6 Ağu 2026

  • CVE-2026-65565
    28İzleyin

    WordPress Survey Maker plugin <= 5.2.3.3 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    ays pro · survey maker6 Ağu 2026

  • CVE-2026-65569
    34İzleyin

    WordPress WP Job Portal plugin <= 2.5.6 - SQL Injection vulnerability

    YüksekCVSS 8,5İstismar yokEPSS %0

    wpjobportal · wp job portal6 Ağu 2026

  • CVE-2026-65570
    32İzleyin

    WordPress Login with phone number plugin <= 1.8.70 - Bypass vulnerability vulnerability

    YüksekCVSS 8,1İstismar yokEPSS %0

    hamid alinia · login with phone number6 Ağu 2026

  • CVE-2026-65571
    39İzleyin

    WordPress 69 Clothing theme <= 1.2.11.1 - PHP Object Injection vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    axiomthemes · 69 clothing6 Ağu 2026

  • CVE-2026-65572
    39İzleyin

    WordPress A.Williams theme <= 1.3.1 - PHP Object Injection vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    axiomthemes · a.williams6 Ağu 2026

  • CVE-2026-65573
    39İzleyin

    WordPress Abelle theme <= 1.22 - PHP Object Injection vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    themerex · abelle6 Ağu 2026

  • CVE-2026-65574
    39İzleyin

    WordPress Abogado theme <= 1.18 - PHP Object Injection vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    ancorathemes · abogado6 Ağu 2026

  • CVE-2026-65575
    39İzleyin

    WordPress Accalia theme <= 1.5.3 - PHP Object Injection vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    ancorathemes · accalia6 Ağu 2026

  • CVE-2026-65576
    39İzleyin

    WordPress Adrena theme <= 1.2.14 - PHP Object Injection vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    ancorathemes · adrena6 Ağu 2026

  • CVE-2026-65577
    39İzleyin

    WordPress Advice theme <= 1.18.0 - PHP Object Injection vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    ancorathemes · advice6 Ağu 2026

  • CVE-2026-65578
    39İzleyin

    WordPress Agora theme <= 1.9 - PHP Object Injection vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    ancorathemes · agora6 Ağu 2026

  • CVE-2026-65579
    39İzleyin

    WordPress Agricola theme <= 1.21.0 - PHP Object Injection vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    axiomthemes · agricola6 Ağu 2026

  • CVE-2026-65581
    39İzleyin

    WordPress AI ANN theme <= 1.29.0 - PHP Object Injection vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    axiomthemes · ai ann6 Ağu 2026

  • CVE-2026-66439
    28İzleyin

    WordPress Advanced AJAX Product Filters plugin <= 3.2.0.3 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    berocket · advanced ajax product filters6 Ağu 2026

  • CVE-2026-66440
    28İzleyin

    WordPress WPIDE – File Manager & Code Editor plugin <= 3.5.7 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    xplodedthemes · wpide – file manager & code editor6 Ağu 2026

  • CVE-2026-66447
    37İzleyin

    WordPress WordPress File Upload plugin <= 5.1.7 - SQL Injection vulnerability

    KritikCVSS 9,3İstismar yokEPSS %0

    nickboss · wordpress file upload6 Ağu 2026

  • CVE-2026-66457
    28İzleyin

    WordPress Events Manager plugin <= 7.4.2 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    pixelite · events manager6 Ağu 2026

  • CVE-2026-66470
    28İzleyin

    WordPress Frontend Admin by DynamiApps plugin <= 3.29.10 - Broken Access Control vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    shabti kaplan · frontend admin by dynamiapps6 Ağu 2026

  • CVE-2026-66662
    39İzleyin

    WordPress Frontend Admin by DynamiApps plugin <= 3.29.10 - Privilege Escalation vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    shabti kaplan · frontend admin by dynamiapps6 Ağu 2026

  • CVE-2026-66663
    28İzleyin

    WordPress WP Data Access plugin <= 5.5.79 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    passionate programmer peter · wp data access6 Ağu 2026

  • CVE-2026-66664
    28İzleyin

    WordPress SEO plugin by Squirrly SEO plugin <= 14.2.0 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    seo squirrly · seo plugin by squirrly seo6 Ağu 2026

  • CVE-2026-66665
    40Planlayın

    WordPress Type Hub plugin <= 2.0.6 - Arbitrary File Upload vulnerability

    KritikCVSS 10,0İstismar yokEPSS %0

    brandexponents · type hub6 Ağu 2026

  • CVE-2026-66690
    28İzleyin

    WordPress GiveWP plugin <= 4.16.5 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    nexcess · givewp6 Ağu 2026

  • CVE-2026-66694
    28İzleyin

    WordPress Thrive Architect plugin <= 10.9.3.1 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    thrive themes coupon · thrive architect6 Ağu 2026

  • CVE-2026-66702
    28İzleyin

    WordPress Rank Math SEO plugin <= 1.0.274.1 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    rank math seo · rank math seo6 Ağu 2026

  • CVE-2026-66705
    28İzleyin

    WordPress Facebook for WordPress plugin <= 5.2.1 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    facebook · facebook for wordpress6 Ağu 2026

  • CVE-2026-66707
    28İzleyin

    WordPress Facebook for WooCommerce plugin <= 3.7.5 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    facebook · facebook for woocommerce6 Ağu 2026

  • CVE-2026-66708
    32İzleyin

    WordPress Total Upkeep plugin <= 1.17.2 - Broken Access Control vulnerability

    YüksekCVSS 8,2İstismar yokEPSS %0

    boldgrid · total upkeep6 Ağu 2026

  • CVE-2026-66709
    36İzleyin

    WordPress CTX Feed plugin <= 6.6.42 - Remote Code Execution (RCE) vulnerability

    KritikCVSS 9,1İstismar yokEPSS %0

    webappick · ctx feed6 Ağu 2026

  • CVE-2026-66710
    32İzleyin

    WordPress e2pdf plugin <= 1.32.40 - Local File Inclusion vulnerability

    YüksekCVSS 8,1İstismar yokEPSS %0

    e2pdf · e2pdf6 Ağu 2026

  • CVE-2026-66711
    28İzleyin

    WordPress WooCommerce Multilingual & Multicurrency plugin <= 5.5.6 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    amir helzer · woocommerce multilingual & multicurrency6 Ağu 2026

  • CVE-2026-66712
    30İzleyin

    WordPress Simple Membership plugin <= 4.7.8 - Broken Access Control vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    wp.insider · simple membership6 Ağu 2026

  • CVE-2026-67261
    40Planlayın

    Dell Virtual Storage Integrator for VMware vSphere Client, versions prior to 10.11.1.0, contain(s) an OS Command Injection vulnerability in

    KritikCVSS 9,8İstismar yokEPSS %2

    dell · virtual storage integrator6 Ağu 2026

  • CVE-2026-70637
    32İzleyin

    LightFTP 2.4 Data Race Condition via ABOR Command in ftpserv.c

    YüksekCVSS 8,2İstismar yokEPSS %0

    hfiref0x · lightftp6 Ağu 2026

  • CVE-2026-70646
    30İzleyin

    aiosend: Deserialization of request body before signature verification (Pre-auth DoS) in webhook handler

    YüksekCVSS 7,5İstismar yokEPSS %0

    vovchic17 · aiosend6 Ağu 2026

  • RUSTSEC-2026-0236
    30İzleyin

    A `BigInt` division panics, and two neighbouring operations answer wrongly in silence

    YüksekCVSS 7,5İstismar yok

    crates.io · viperjs6 Ağu 2026

  • CVE-2025-15028
    28İzleyin

    FormGent – Next-Gen AI Form Builder for WordPress with Multi-Step, Quizzes, Payments & More <= 1.9.2 - Unauthenticated Stored Cross-Site Scripting

    YüksekCVSS 7,2İstismar yokEPSS %0

    wpwax · formgent – next-gen ai form builder for wordpress with multi-step, quizzes, payments & more6 Ağu 2026

  • CVE-2026-18258
    35İzleyin

    Authorization Bypass Through User-Controlled Key in eScriptorium

    YüksekCVSS 8,8İstismar yokEPSS %0

    escriptorium · escriptorium6 Ağu 2026

  • CVE-2026-18277
    28İzleyin

    Missing Authorization in eScriptorium

    YüksekCVSS 7,1İstismar yokEPSS %0

    escriptorium · escriptorium6 Ağu 2026

  • CVE-2026-18359
    34İzleyin

    Server-Side Request Forgery (SSRF) in eScriptorium

    YüksekCVSS 8,5İstismar yokEPSS %0

    escriptorium · escriptorium6 Ağu 2026

  • CVE-2026-18427
    30İzleyin

    @fastify/static vulnerable to route guard bypass via non-canonical path segments

    YüksekCVSS 7,5İstismar yokEPSS %0

    fastify · fastify-static6 Ağu 2026

  • CVE-2026-3430
    34İzleyin

    Creative Mail 1.6.5 - 1.6.9 - Unauthenticated SQLi

    YüksekCVSS 8,6İstismar yokEPSS %0

    unknown · creative mail6 Ağu 2026

  • CVE-2026-43622
    34İzleyin

    llama.cpp b1886–b7445 Double Free via llama-android.cpp

    YüksekCVSS 8,5İstismar yokEPSS %0

    ggml · llama.cpp6 Ağu 2026

  • CVE-2026-53977
    34İzleyin

    OpenChamber 1.11.7 Unauthenticated DoS via /api/system/shutdown

    YüksekCVSS 8,7İstismar yokEPSS %0

    bohdan triapitsyn · openchamber6 Ağu 2026

  • CVE-2026-53985
    34İzleyin

    Ground Station prior to 0.6.0 Unauthenticated DoS via service_control Socket.IO

    YüksekCVSS 8,7İstismar yokEPSS %0

    efstratios goudelis · ground station6 Ağu 2026

  • CVE-2026-5423
    32İzleyin

    Subscription Authentication Bypass via Unverified connectionParams.jwt

    YüksekCVSS 8,2İstismar yokEPSS %0

    neo4j · graphql6 Ağu 2026

  • CVE-2026-68749
    32İzleyin

    Quadratic regex backtracking in the html_sanitize_ex CSS scrubber allows CPU-exhaustion denial of service

    YüksekCVSS 8,2Kavram kanıtıEPSS %0

    rrrene · htmlsanitizeex6 Ağu 2026

  • CVE-2026-68750
    32İzleyin

    Quadratic sibling re-flattening in the html_sanitize_ex traversal engine allows CPU-exhaustion denial of service

    YüksekCVSS 8,2İstismar yokEPSS %0

    rrrene · htmlsanitizeex6 Ağu 2026

  • CVE-2025-49506
    30İzleyin

    Apache Portable Runtime Utility: apr_password_validate() vulnerable to timing attack

    YüksekCVSS 7,5İstismar yokEPSS %0

    apache · apr-util6 Ağu 2026

  • CVE-2024-39024
    35İzleyin

    In Packetfence 13.2.0, the WebGui interface setting allows authenticated remote code execution.

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    6 Ağu 2026

  • CVE-2026-10524
    30İzleyin

    CoCart < 4.9.0 - Unauthenticated Arbitrary Price Manipulation

    YüksekCVSS 7,5İstismar yokEPSS %0

    unknown · cocart6 Ağu 2026

  • CVE-2026-10599
    30İzleyin

    Integrate PhonePe with WooCommerce <= 1.2.1 - Unauthenticated Payment Bypass via Transaction ID Reuse

    YüksekCVSS 7,5İstismar yokEPSS %0

    unknown · integrate phonepe with woocommerce6 Ağu 2026

  • CVE-2026-11976
    40Planlayın

    MonsterInsights Pro 10.2.0/10.2.2 - Backdoored via AWS S3 bucket compromise

    KritikCVSS 10,0İstismar yokEPSS %0

    unknown · monsterinsights pro6 Ağu 2026

  • CVE-2026-12584
    30İzleyin

    Payment Gateway for Redsys & WooCommerce Lite < 7.0.2 - Unauthenticated Payment Confirmation via Unverified Inespay Callback

    YüksekCVSS 7,5İstismar yokEPSS %0

    unknown · payment gateway for redsys & woocommerce lite6 Ağu 2026

  • CVE-2026-13399
    30İzleyin

    Payment Plugins for PayPal WooCommerce < 2.0.20 - Unauthenticated Payment Bypass via Reuse of a Completed PayPal Order

    YüksekCVSS 7,5İstismar yokEPSS %0

    unknown · payment plugins for paypal woocommerce6 Ağu 2026

  • CVE-2026-14812
    40Planlayın

    Premium SEO - Unauthenticated Backdoor (Admin Creation / RCE / SSRF / Content Injection)

    KritikCVSS 10,0İstismar yokEPSS %0

    unknown · premium seo6 Ağu 2026

  • CVE-2026-15732
    39İzleyin

    WGDashboard Server-Side Request Forgery Vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    wgdashboard · wgdashboard6 Ağu 2026

  • CVE-2026-15733
    42Planlayın

    WGDashboard Remote Code Execution vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %10

    wgdashboard · wgdashboard6 Ağu 2026

  • CVE-2026-15734
    39İzleyin

    WGDashboard Server-Side Template Injection vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    wgdashboard · wgdashboard6 Ağu 2026

  • CVE-2026-16619
    30İzleyin

    miniOrange 2FA < 6.2.8 - 2FA Bypass via Unlimited Second-Factor Attempts

    YüksekCVSS 7,5İstismar yokEPSS %0

    unknown · miniorange 2fa6 Ağu 2026

  • CVE-2026-16620
    30İzleyin

    WPC Name Your Price for WooCommerce < 2.2.5 - Unauthenticated Price Manipulation via Select Mode

    YüksekCVSS 7,5İstismar yokEPSS %0

    unknown · wpc name your price for woocommerce6 Ağu 2026

  • CVE-2026-17032
    39İzleyin

    Supsystic Multiple Pro Plugins - Backdoor via Compromised Vendor Update Server

    KritikCVSS 9,8İstismar yokEPSS %0

    unknown · google-maps-easy-pro6 Ağu 2026

  • CVE-2026-18367
    37İzleyin

    A privilege escalation vulnerability allows local users to execute arbitrary code as root via Sophos Endpoint for macOS older than version 2

    KritikCVSS 9,3İstismar yokEPSS %0

    sophos · sophos endpoint for macos6 Ağu 2026

  • CVE-2026-19111
    34İzleyin

    Insecure direct object reference in Strands Agents Tools memory tool namespace isolation

    YüksekCVSS 8,6İstismar yokEPSS %0

    aws · strands-agents-tools6 Ağu 2026

  • CVE-2026-19137
    33İzleyin

    Use after free in WebGL in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer proce

    YüksekCVSS 8,3İstismar yokEPSS %0

    google · chrome6 Ağu 2026

  • CVE-2026-19138
    33İzleyin

    Heap buffer overflow in CrashReporting in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer p

    YüksekCVSS 8,3İstismar yokEPSS %0

    google · chrome6 Ağu 2026

  • CVE-2026-19139
    29İzleyin

    Race in CredentialProvider in Google Chrome on Windows prior to 151.0.7922.109 allowed a local attacker to perform OS-level privilege escala

    YüksekCVSS 7,4İstismar yokEPSS %0

    google · chrome6 Ağu 2026

  • CVE-2026-19140
    33İzleyin

    Use after free in GPU in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potenti

    YüksekCVSS 8,3İstismar yokEPSS %0

    google · chrome6 Ağu 2026

  • CVE-2026-19141
    33İzleyin

    Use after free in Resources in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer p

    YüksekCVSS 8,3İstismar yokEPSS %0

    google · chrome6 Ağu 2026

  • CVE-2026-19142
    30İzleyin

    Use after free in Views in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who convinced a user to engage in specific UI ges

    YüksekCVSS 7,5İstismar yokEPSS %0

    google · chrome6 Ağu 2026

  • CVE-2026-19143
    34İzleyin

    Insufficient validation of untrusted input in WebAPKs in Google Chrome on Android prior to 151.0.7922.109 allowed a local attacker to potent

    YüksekCVSS 8,6İstismar yokEPSS %0

    google · chrome6 Ağu 2026

  • CVE-2026-19144
    35İzleyin

    Use after free in HTML in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to potentially exploit heap corruption via a craft

    YüksekCVSS 8,8İstismar yokEPSS %0

    google · chrome6 Ağu 2026

Ağustos 2026: sömürülen ve yeni ciddi CVE kayıtları · sayfa 9 — Noroxi