Yayın tarihine göre
Eylül 2026: sömürülen ve yeni ciddi CVE kayıtları
7.961 kayıt · 32 KEV. Yayın sırasıyla.
Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.
Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.
Sayfa 20 / 80
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
29İzleyin | CVE-2026-28656İstismar yok | In multiple functions of DeviceAdminAdd.java, there is a possible way to an overlay due to a tapjacking/overlay attack.google · android · CWE-1021 | Yüksek7,3 | — | %0,0 | 8 Eyl 2026 |
31İzleyin | CVE-2026-28657İstismar yok | In onActivityResult of AppWidgetConfigActivityProxy.java, there is a possible unauthorized URI permission grant due to a confused deputy.google · android · CWE-441 | Yüksek7,8 | — | %0,0 | 8 Eyl 2026 |
31İzleyin | CVE-2026-28658İstismar yok | In findMetaAuthUid of AccountsDb.java, there is a possible frp bypass due to a logic error in the code.google · android · CWE-693 | Yüksek7,8 | — | %0,1 | 8 Eyl 2026 |
32İzleyin | CVE-2026-28662İstismar yok | In p2p_process_prov_disc_bootstrap_req of p2p_pd.c, there is a possible out of bounds write due to a heap buffer overflow.google · android · CWE-122 | Yüksek8,0 | — | %0,1 | 8 Eyl 2026 |
31İzleyin | CVE-2026-28663İstismar yok | In buildIntentSenderForUser of LauncherAppsService.java, there is a possible way to launch an activity from the background due to BAL Bypassgoogle · android · CWE-863 | Yüksek7,8 | — | %0,0 | 8 Eyl 2026 |
31İzleyin | CVE-2026-28664İstismar yok | In WriteImageToDisk of runtime_image.cc, there is a possible file tampering due to a logic error in the code.google · android · CWE-693 | Yüksek7,8 | — | %0,1 | 8 Eyl 2026 |
35İzleyin | CVE-2026-28666İstismar yok | In multiple functions of LocalImageResolver.java, there is a possible Remote Persistent Denial of Service due to a DNG image rendering checkgoogle · android · CWE-863 | Yüksek8,8 | — | %0,3 | 8 Eyl 2026 |
31İzleyin | CVE-2026-28668İstismar yok | In LimitRealloc of malloc_limit.cpp, there is a possible use after free due to a logic error in the code.google · android · CWE-693 | Yüksek7,8 | — | %0,1 | 8 Eyl 2026 |
31İzleyin | CVE-2026-45515İstismar yok | In a2dp_vendor_opus_decoder_decode_packet of a2dp_vendor_opus_decoder.cc, there is a possible out of bounds write due to a heap buffer overfgoogle · android · CWE-122 | Yüksek7,8 | — | %0,0 | 8 Eyl 2026 |
31İzleyin | CVE-2026-45520İstismar yok | In onAttach of BiometricsSettingsBase.java, there is a possible authentication bypass due to a confused deputy.google · android · CWE-441 | Yüksek7,8 | — | %0,1 | 8 Eyl 2026 |
29İzleyin | CVE-2026-45528İstismar yok | In getManageSpaceActivityIntent of StorageManagerService.java, there is a possible LaunchAnyWhere chain due to an unsafe PendingIntent.google · android · CWE-926 | Yüksek7,3 | — | %0,0 | 8 Eyl 2026 |
31İzleyin | CVE-2026-45531İstismar yok | In read_boot_region of fsck.c, there is a possible out of bounds read due to a heap buffer overflow.google · android · CWE-122 | Yüksek7,8 | — | %0,0 | 8 Eyl 2026 |
35İzleyin | CVE-2026-49879İstismar yok | In multiple functions of rw_t3t.cc, there is a possible out of bounds write due to an integer overflow.google · android · CWE-787 | Yüksek8,8 | — | %0,3 | 8 Eyl 2026 |
31İzleyin | CVE-2026-49881Kavram kanıtı | In serviceClassExists of InCallController.java, there is a possible arbitrary code execution due to a logic error in the code.google · android · CWE-693 | Yüksek7,8 | — | %0,1 | 8 Eyl 2026 |
35İzleyin | CVE-2026-49882İstismar yok | In rw_mfc_handle_read_op of rw_mfc.cc, there is a possible memory safety issue due to a heap buffer overflow.google · android · CWE-122 | Yüksek8,8 | — | %0,3 | 8 Eyl 2026 |
31İzleyin | CVE-2026-49884İstismar yok | In rw_mfc_handle_read_op of rw_mfc.cc, there is a possible out of bounds write due to an incorrect bounds check.google · android · CWE-120 | Yüksek7,8 | — | %0,0 | 8 Eyl 2026 |
31İzleyin | CVE-2026-49887İstismar yok | In maybeRemoveInvalidInstallerPackageName of InstallRepository.kt, there is a possible unauthorized app update due to a permissions bypass.google · android · CWE-288 | Yüksek7,8 | — | %0,0 | 8 Eyl 2026 |
31İzleyin | CVE-2026-49918İstismar yok | In multiple functions, there is a possible out of bounds write due to an integer overflow.google · android · CWE-787 | Yüksek7,8 | — | %0,0 | 8 Eyl 2026 |
31İzleyin | CVE-2026-49919İstismar yok | In tt_face_colr_blend_layer of ttcolr.c, there is a possible remote code execution due to an integer overflow.google · android · CWE-190 | Yüksek7,8 | — | %0,0 | 8 Eyl 2026 |
39İzleyin | CVE-2026-49921İstismar yok | In multiple locations, there is a possible memory safety issue due to a heap buffer overflow.google · android · CWE-122 | Kritik9,8 | — | %0,3 | 8 Eyl 2026 |
31İzleyin | CVE-2026-49927İstismar yok | In multiple locations, there is a possible out of bounds write due to an integer overflow.google · android · CWE-190 | Yüksek7,8 | — | %0,0 | 8 Eyl 2026 |
31İzleyin | CVE-2026-49932İstismar yok | In parseParts of PduParser.java, there is a possible out of bounds read due to a heap buffer overflow.google · android · CWE-122 | Yüksek7,8 | — | %0,0 | 8 Eyl 2026 |
31İzleyin | CVE-2026-55273İstismar yok | In AppendCommentLine of AnnotationProcessor.cpp, there is a possible supply chain risk due to improper input validation.google · android · CWE-20 | Yüksek7,8 | — | %0,0 | 8 Eyl 2026 |
32İzleyin | CVE-2026-55277İstismar yok | In checkUiccListenConfigNeeded of RoutingManager.cpp, there is a possible out of bounds write due to a missing bounds check.google · android · CWE-120 | Yüksek8,0 | — | %0,1 | 8 Eyl 2026 |
31İzleyin | CVE-2026-55285İstismar yok | In openLogicalChannel of multiple files, there is a possible out-of-bounds write due to a missing bounds check.google · android · CWE-120 | Yüksek7,8 | — | %0,1 | 8 Eyl 2026 |
31İzleyin | CVE-2026-55294İstismar yok | In ihevcd_get_tu_data_size of ihevcd_utils.c, there is a possible out of bounds write due to a heap buffer overflow.google · android · CWE-122 | Yüksek7,8 | — | %0,0 | 8 Eyl 2026 |
31İzleyin | CVE-2026-58820İstismar yok | In multiple locations, there is a possible memory safety issue due to integer overflow.google · android · CWE-122 | Yüksek7,8 | — | %0,0 | 8 Eyl 2026 |
39İzleyin | CVE-2026-58822İstismar yok | In multiple functions of ftsmooth.c, there is a possible memory safety issue due to improper casting.google · android · CWE-704 | Kritik9,8 | — | %0,3 | 8 Eyl 2026 |
31İzleyin | CVE-2026-58823İstismar yok | In stpropnci_process_std of stpropnci_std.cc, there is a possible memory safety issue due to a missing bounds check.google · android · CWE-120 | Yüksek7,8 | — | %0,0 | 8 Eyl 2026 |
31İzleyin | CVE-2026-58839İstismar yok | In forEachLine of MountRegistry.cpp, there is a possible out of bounds read due to a buffer overflow.google · android · CWE-120 | Yüksek7,8 | — | %0,0 | 8 Eyl 2026 |
31İzleyin | CVE-2026-58846İstismar yok | In kvm_iommu_map_sg of iommu.c, there is a possible use after free due to a missing permission check.google · android · CWE-269 | Yüksek7,8 | — | %0,1 | 8 Eyl 2026 |
28İzleyin | CVE-2026-58848İstismar yok | In multiple functions of alloc.c, there is a possible unauthorized read/write access due to a race condition.google · android · CWE-362 | Yüksek7,0 | — | %0,0 | 8 Eyl 2026 |
31İzleyin | CVE-2026-58874İstismar yok | In multiple functions of SmsController.java, there is a possible escalation of privilege due to a missing permission check.google · android · CWE-269 | Yüksek7,8 | — | %0,0 | 8 Eyl 2026 |
31İzleyin | CVE-2026-58941İstismar yok | In multiple functions of iommu.c, there is a possible out of bounds read/write due to improper input validation.google · android · CWE-20 | Yüksek7,8 | — | %0,1 | 8 Eyl 2026 |
39İzleyin | CVE-2026-66302İstismar yok | Skype for Business Remote Code Execution Vulnerabilitymicrosoft · skype for business server · CWE-73 | Kritik9,8 | — | %0,9 | 8 Eyl 2026 |
30İzleyin | CVE-2026-66304İstismar yok | Skype for Business Information Disclosure Vulnerabilitymicrosoft · skype for business server · CWE-918 | Yüksek7,5 | — | %0,9 | 8 Eyl 2026 |
28İzleyin | CVE-2026-66305İstismar yok | Skype for Business Spoofing Vulnerabilitymicrosoft · skype for business server · CWE-603 | Yüksek7,1 | — | %0,5 | 8 Eyl 2026 |
30İzleyin | CVE-2026-66307İstismar yok | Skype for Business and Lync Denial of Service Vulnerabilitymicrosoft · skype for business server · CWE-191 | Yüksek7,5 | — | %1,1 | 8 Eyl 2026 |
33İzleyin | CVE-2026-69646İstismar yok | Skype for Business Spoofing Vulnerabilitymicrosoft · skype for business server · CWE-347 | Yüksek8,3 | — | %0,3 | 8 Eyl 2026 |
37İzleyin | CVE-2026-76200İstismar yok | Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)adobe · magento · CWE-79 | Kritik9,3 | — | %0,7 | 8 Eyl 2026 |
37İzleyin | CVE-2026-76201İstismar yok | Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)adobe · commerce · CWE-79 | Kritik9,3 | — | %0,7 | 8 Eyl 2026 |
32İzleyin | CVE-2026-76202İstismar yok | Adobe Commerce | Incorrect Authorization (CWE-863)adobe · commerce · CWE-863 | Yüksek8,2 | — | %0,6 | 8 Eyl 2026 |
30İzleyin | CVE-2026-77108İstismar yok | Adobe Commerce | Incorrect Authorization (CWE-863)adobe · commerce · CWE-863 | Yüksek7,5 | — | %0,8 | 8 Eyl 2026 |
34İzleyin | CVE-2026-77109İstismar yok | Adobe Commerce | Incorrect Authorization (CWE-863)adobe · commerce · CWE-863 | Yüksek8,6 | — | %0,6 | 8 Eyl 2026 |
30İzleyin | CVE-2026-77110İstismar yok | Adobe Commerce | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)adobe · commerce · CWE-22 | Yüksek7,6 | — | %1,0 | 8 Eyl 2026 |
34İzleyin | CVE-2026-77111İstismar yok | Adobe Commerce | Incorrect Authorization (CWE-863)adobe · commerce · CWE-863 | Yüksek8,7 | — | %0,8 | 8 Eyl 2026 |
34İzleyin | CVE-2026-77774İstismar yok | Adobe Commerce | Incorrect Authorization (CWE-863)adobe · commerce · CWE-863 | Yüksek8,6 | — | %0,8 | 8 Eyl 2026 |
34İzleyin | CVE-2026-79721İstismar yok | Code execution can occur in versions of the MLflow platform running version 0.0.1 or newer, enabling a maliciously crafted model artifact tomlflow · mlflow · CWE-829 | Yüksek8,6 | — | %0,4 | 8 Eyl 2026 |
41Planlayın | CVE-2026-82004İstismar yok | Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)adobe · campaign · CWE-78 | Kritik10,0 | — | %3,2 | 8 Eyl 2026 |
30İzleyin | CVE-2026-82536İstismar yok | Roo-Code 3.54.0 Auto-Approve Bypass via Shell Command Pipe Operatorroocodeinc · roo-code · CWE-184 | Yüksek7,7 | — | %0,5 | 8 Eyl 2026 |
30İzleyin | CVE-2026-82537İstismar yok | Roo-Code 3.54.0 Auto-Approve Bypass via Shell Parser Word-Boundary Mismatchroocodeinc · roo-code · CWE-436 | Yüksek7,7 | — | %0,4 | 8 Eyl 2026 |
34İzleyin | CVE-2026-85384İstismar yok | Authenticated Stack-Based Buffer Overflow in RE210 AC750 Configuration Importtp-link systems inc. · re210 ac750 · CWE-121 | Yüksek8,5 | — | %0,3 | 8 Eyl 2026 |
39İzleyin | CVE-2026-19232İstismar yok | Adobe Experience Manager | Incorrect Authorization (CWE-863)adobe · experience manager · CWE-863 | Kritik9,9 | — | %1,0 | 8 Eyl 2026 |
39İzleyin | CVE-2026-48273İstismar yok | ColdFusion | Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') (CWE-95)adobe · coldfusion · CWE-95 | Kritik9,9 | — | %1,2 | 8 Eyl 2026 |
40Planlayın | CVE-2026-49883İstismar yok | In checkReadPermission of PermissionsManager.java, there is a possible way to monitor sensitive device state data due to a missing permissiogoogle · android · CWE-269 | Kritik10,0 | — | %0,1 | 8 Eyl 2026 |
30İzleyin | CVE-2026-16025İstismar yok | Improper Payment Validation in PayTR's PayTR Virtual Pos iFrame API WHMCS Modulepaytr payment and electronic money institution inc. · paytr virtual pos iframe api (v9x) whmcs module · CWE-1284 | Yüksek7,5 | — | %0,4 | 8 Eyl 2026 |
30İzleyin | CVE-2026-16037İstismar yok | Callback Authentication Bypass via Timing Attack in PayTR's PayTR Virtual Pos iFrame API WHMCS Modulepaytr payment and electronic money institution inc. · paytr virtual pos iframe api (v9x) whmcs module · CWE-208 | Yüksek7,5 | — | %0,4 | 8 Eyl 2026 |
31İzleyin | CVE-2026-75631İstismar yok | Photoshop Desktop | Out-of-bounds Write (CWE-787)adobe · photoshop · CWE-787 | Yüksek7,8 | — | %0,2 | 8 Eyl 2026 |
36İzleyin | CVE-2026-75746İstismar yok | ColdFusion | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)adobe · coldfusion · CWE-89 | Kritik9,1 | — | %0,9 | 8 Eyl 2026 |
31İzleyin | CVE-2026-75771İstismar yok | Photoshop Desktop | Integer Overflow or Wraparound (CWE-190)adobe · photoshop · CWE-190 | Yüksek7,8 | — | %0,3 | 8 Eyl 2026 |
31İzleyin | CVE-2026-75862İstismar yok | Photoshop Desktop | Integer Overflow or Wraparound (CWE-190)adobe · photoshop · CWE-190 | Yüksek7,8 | — | %0,3 | 8 Eyl 2026 |
31İzleyin | CVE-2026-75863İstismar yok | Photoshop Desktop | Integer Overflow or Wraparound (CWE-190)adobe · photoshop · CWE-190 | Yüksek7,8 | — | %0,3 | 8 Eyl 2026 |
34İzleyin | CVE-2026-75990İstismar yok | Illustrator | Incorrect Authorization (CWE-863)adobe · illustrator · CWE-863 | Yüksek8,6 | — | %0,2 | 8 Eyl 2026 |
34İzleyin | CVE-2026-75991İstismar yok | Illustrator | Improper Input Validation (CWE-20)adobe · illustrator · CWE-20 | Yüksek8,6 | — | %0,3 | 8 Eyl 2026 |
31İzleyin | CVE-2026-75992İstismar yok | Illustrator | Out-of-bounds Write (CWE-787)adobe · illustrator · CWE-787 | Yüksek7,8 | — | %0,2 | 8 Eyl 2026 |
34İzleyin | CVE-2026-75993İstismar yok | ColdFusion | Cross-site Scripting (Reflected XSS) (CWE-79)adobe · coldfusion · CWE-79 | Yüksek8,5 | — | %0,4 | 8 Eyl 2026 |
30İzleyin | CVE-2026-75998İstismar yok | ColdFusion | Improper Access Control (CWE-284)adobe · coldfusion · CWE-284 | Yüksek7,5 | — | %0,8 | 8 Eyl 2026 |
33İzleyin | CVE-2026-75999İstismar yok | ColdFusion | Improper Input Validation (CWE-20)adobe · coldfusion · CWE-20 | Yüksek8,4 | — | %0,4 | 8 Eyl 2026 |
34İzleyin | CVE-2026-76190İstismar yok | ColdFusion | Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') (CWE-95)adobe · coldfusion · CWE-95 | Yüksek8,6 | — | %0,8 | 8 Eyl 2026 |
34İzleyin | CVE-2026-76199İstismar yok | Photoshop Desktop | Uncontrolled Search Path Element (CWE-427)adobe · photoshop · CWE-427 | Yüksek8,6 | — | %0,2 | 8 Eyl 2026 |
39İzleyin | CVE-2026-78623İstismar yok | Improper Handling of SAML Assertion Attributes in Okta Access Gateway Advanced Mode Datastoresokta · access gateway · CWE-89 | Kritik9,9 | — | %0,4 | 8 Eyl 2026 |
35İzleyin | CVE-2026-78834İstismar yok | A code execution vulnerability exists in CMSimple 5.22 in the CoAuthors plugin.CWE-94 | Yüksek8,8 | — | %0,6 | 8 Eyl 2026 |
31İzleyin | CVE-2026-82005İstismar yok | Photoshop Desktop | Out-of-bounds Write (CWE-787)adobe · photoshop · CWE-787 | Yüksek7,8 | — | %0,2 | 8 Eyl 2026 |
31İzleyin | CVE-2026-82006İstismar yok | Photoshop Desktop | Heap-based Buffer Overflow (CWE-122)adobe · photoshop · CWE-122 | Yüksek7,8 | — | %0,3 | 8 Eyl 2026 |
31İzleyin | CVE-2026-82007İstismar yok | Photoshop Desktop | Integer Overflow or Wraparound (CWE-190)adobe · photoshop · CWE-190 | Yüksek7,8 | — | %0,3 | 8 Eyl 2026 |
36İzleyin | CVE-2026-84197İstismar yok | In Eclipse Ditto's Node.js JavaScript client, all released versions of @eclipse-ditto/ditto-javascript-client-node from 2.0.0 to 3.9.0 and oeclipse foundation · eclipse ditto · CWE-295 | Kritik9,2 | — | %0,3 | 8 Eyl 2026 |
69Bu hafta | CVE-2026-84869Silahlaştırılmış | ScreenConnect Client: Guest-to-Host File Execution via File-Transfer Actionsconnectwise · screenconnect · CWE-269 | Kritik9,9 | KEV | %0,9 | 8 Eyl 2026 |
39İzleyin | CVE-2026-86464İstismar yok | In the current development version of Eclipse aeriOS, for which no official release has yet been published, the Identity Manager (IdM) deploeclipse foundation · eclipse aerios · CWE-200 | Kritik9,9 | — | %0,5 | 8 Eyl 2026 |
29İzleyin | CVE-2026-19651İstismar yok | IBM Enterprise Build of Quarkus is affected by multiple vulnerabilitiesibm · enterprise build of quarkus · CWE-639 | Yüksek7,4 | — | %0,3 | 8 Eyl 2026 |
28İzleyin | CVE-2026-20293İstismar yok | Cisco UCS and UCS-Based Appliances UEFI Shell Secure Boot Bypass Vulnerabilitycisco · enterprise nfv infrastructure software · CWE-749 | Yüksek7,1 | — | %0,1 | 8 Eyl 2026 |
20İzleyin | CVE-2026-84386İstismar yok | A unverified ownership vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.7, FortiClientWindows 7.2 all versions may allow attacfortinet · forticlientwindows · CWE-283 | Orta5,1 | — | %0,1 | 8 Eyl 2026 |
28İzleyin | CVE-2026-84387İstismar yok | An Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability [CWE-77] vulnerability in Fortinet Fortfortinet · fortisandbox · CWE-77 | Yüksek7,2 | — | %1,5 | 8 Eyl 2026 |
32İzleyin | CVE-2026-84393İstismar yok | A improper validation of certificate with host mismatch vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6, FortiProxy 7.6.2 through 7.6.fortinet · fortios · CWE-297 | Yüksek8,1 | — | %0,2 | 8 Eyl 2026 |
33İzleyin | CVE-2026-77827İstismar yok | Maono Link local privilege escalationmaono · maono link · CWE-428 | Yüksek8,4 | — | %0,1 | 8 Eyl 2026 |
31İzleyin | CVE-2026-79907İstismar yok | Acrobat Reader | Double Free (CWE-415)adobe · acrobat · CWE-415 | Yüksek7,8 | — | %0,2 | 8 Eyl 2026 |
31İzleyin | CVE-2026-79908İstismar yok | Acrobat Reader | Out-of-bounds Write (CWE-787)adobe · acrobat · CWE-787 | Yüksek7,8 | — | %0,2 | 8 Eyl 2026 |
31İzleyin | CVE-2026-79909İstismar yok | Acrobat Reader | Use After Free (CWE-416)adobe · acrobat · CWE-416 | Yüksek7,8 | — | %0,3 | 8 Eyl 2026 |
31İzleyin | CVE-2026-80161İstismar yok | Acrobat Reader | Access of Resource Using Incompatible Type ('Type Confusion') (CWE-843)adobe · acrobat · CWE-843 | Yüksek7,8 | — | %0,2 | 8 Eyl 2026 |
28İzleyin | CVE-2026-81192İstismar yok | OpenTelemetry.Resources.Host vulnerable to arbitrary code execution via local PATH hijacking on macOSopen-telemetry · opentelemetry-dotnet-contrib · CWE-426 | Yüksek7,0 | — | %0,1 | 8 Eyl 2026 |
31İzleyin | CVE-2026-81973İstismar yok | Acrobat Reader | Use After Free (CWE-416)adobe · acrobat · CWE-416 | Yüksek7,8 | — | %0,3 | 8 Eyl 2026 |
31İzleyin | CVE-2026-81975İstismar yok | Acrobat Reader | Use After Free (CWE-416)adobe · acrobat · CWE-416 | Yüksek7,8 | — | %0,3 | 8 Eyl 2026 |
31İzleyin | CVE-2026-81976İstismar yok | Acrobat Reader | Use After Free (CWE-416)adobe · acrobat · CWE-416 | Yüksek7,8 | — | %0,3 | 8 Eyl 2026 |
31İzleyin | CVE-2026-81979İstismar yok | Acrobat Reader | Out-of-bounds Write (CWE-787)adobe · acrobat · CWE-787 | Yüksek7,8 | — | %0,2 | 8 Eyl 2026 |
31İzleyin | CVE-2026-81980İstismar yok | Acrobat Reader | Out-of-bounds Write (CWE-787)adobe · acrobat · CWE-787 | Yüksek7,8 | — | %0,2 | 8 Eyl 2026 |
31İzleyin | CVE-2026-81981İstismar yok | Acrobat Reader | Out-of-bounds Write (CWE-787)adobe · acrobat · CWE-787 | Yüksek7,8 | — | %0,2 | 8 Eyl 2026 |
31İzleyin | CVE-2026-81983İstismar yok | Acrobat Reader | Out-of-bounds Write (CWE-787)adobe · acrobat · CWE-787 | Yüksek7,8 | — | %0,2 | 8 Eyl 2026 |
31İzleyin | CVE-2026-81985İstismar yok | Acrobat Reader | Use After Free (CWE-416)adobe · acrobat · CWE-416 | Yüksek7,8 | — | %0,3 | 8 Eyl 2026 |
31İzleyin | CVE-2026-81986İstismar yok | Acrobat Reader | Use After Free (CWE-416)adobe · acrobat · CWE-416 | Yüksek7,8 | — | %0,3 | 8 Eyl 2026 |
31İzleyin | CVE-2026-81987İstismar yok | Acrobat Reader | Integer Overflow or Wraparound (CWE-190)adobe · acrobat · CWE-190 | Yüksek7,8 | — | %0,3 | 8 Eyl 2026 |
31İzleyin | CVE-2026-81988İstismar yok | Acrobat Reader | Use After Free (CWE-416)adobe · acrobat · CWE-416 | Yüksek7,8 | — | %0,3 | 8 Eyl 2026 |
- CVE-2026-2865629İzleyin
In multiple functions of DeviceAdminAdd.java, there is a possible way to an overlay due to a tapjacking/overlay attack.
YüksekCVSS 7,3İstismar yokEPSS %0google · android8 Eyl 2026
- CVE-2026-2865731İzleyin
In onActivityResult of AppWidgetConfigActivityProxy.java, there is a possible unauthorized URI permission grant due to a confused deputy.
YüksekCVSS 7,8İstismar yokEPSS %0google · android8 Eyl 2026
- CVE-2026-2865831İzleyin
In findMetaAuthUid of AccountsDb.java, there is a possible frp bypass due to a logic error in the code.
YüksekCVSS 7,8İstismar yokEPSS %0google · android8 Eyl 2026
- CVE-2026-2866232İzleyin
In p2p_process_prov_disc_bootstrap_req of p2p_pd.c, there is a possible out of bounds write due to a heap buffer overflow.
YüksekCVSS 8,0İstismar yokEPSS %0google · android8 Eyl 2026
- CVE-2026-2866331İzleyin
In buildIntentSenderForUser of LauncherAppsService.java, there is a possible way to launch an activity from the background due to BAL Bypass
YüksekCVSS 7,8İstismar yokEPSS %0google · android8 Eyl 2026
- CVE-2026-2866431İzleyin
In WriteImageToDisk of runtime_image.cc, there is a possible file tampering due to a logic error in the code.
YüksekCVSS 7,8İstismar yokEPSS %0google · android8 Eyl 2026
- CVE-2026-2866635İzleyin
In multiple functions of LocalImageResolver.java, there is a possible Remote Persistent Denial of Service due to a DNG image rendering check
YüksekCVSS 8,8İstismar yokEPSS %0google · android8 Eyl 2026
- CVE-2026-2866831İzleyin
In LimitRealloc of malloc_limit.cpp, there is a possible use after free due to a logic error in the code.
YüksekCVSS 7,8İstismar yokEPSS %0google · android8 Eyl 2026
- CVE-2026-4551531İzleyin
In a2dp_vendor_opus_decoder_decode_packet of a2dp_vendor_opus_decoder.cc, there is a possible out of bounds write due to a heap buffer overf
YüksekCVSS 7,8İstismar yokEPSS %0google · android8 Eyl 2026
- CVE-2026-4552031İzleyin
In onAttach of BiometricsSettingsBase.java, there is a possible authentication bypass due to a confused deputy.
YüksekCVSS 7,8İstismar yokEPSS %0google · android8 Eyl 2026
- CVE-2026-4552829İzleyin
In getManageSpaceActivityIntent of StorageManagerService.java, there is a possible LaunchAnyWhere chain due to an unsafe PendingIntent.
YüksekCVSS 7,3İstismar yokEPSS %0google · android8 Eyl 2026
- CVE-2026-4553131İzleyin
In read_boot_region of fsck.c, there is a possible out of bounds read due to a heap buffer overflow.
YüksekCVSS 7,8İstismar yokEPSS %0google · android8 Eyl 2026
- CVE-2026-4987935İzleyin
In multiple functions of rw_t3t.cc, there is a possible out of bounds write due to an integer overflow.
YüksekCVSS 8,8İstismar yokEPSS %0google · android8 Eyl 2026
- CVE-2026-4988131İzleyin
In serviceClassExists of InCallController.java, there is a possible arbitrary code execution due to a logic error in the code.
YüksekCVSS 7,8Kavram kanıtıEPSS %0google · android8 Eyl 2026
- CVE-2026-4988235İzleyin
In rw_mfc_handle_read_op of rw_mfc.cc, there is a possible memory safety issue due to a heap buffer overflow.
YüksekCVSS 8,8İstismar yokEPSS %0google · android8 Eyl 2026
- CVE-2026-4988431İzleyin
In rw_mfc_handle_read_op of rw_mfc.cc, there is a possible out of bounds write due to an incorrect bounds check.
YüksekCVSS 7,8İstismar yokEPSS %0google · android8 Eyl 2026
- CVE-2026-4988731İzleyin
In maybeRemoveInvalidInstallerPackageName of InstallRepository.kt, there is a possible unauthorized app update due to a permissions bypass.
YüksekCVSS 7,8İstismar yokEPSS %0google · android8 Eyl 2026
- CVE-2026-4991831İzleyin
In multiple functions, there is a possible out of bounds write due to an integer overflow.
YüksekCVSS 7,8İstismar yokEPSS %0google · android8 Eyl 2026
- CVE-2026-4991931İzleyin
In tt_face_colr_blend_layer of ttcolr.c, there is a possible remote code execution due to an integer overflow.
YüksekCVSS 7,8İstismar yokEPSS %0google · android8 Eyl 2026
- CVE-2026-4992139İzleyin
In multiple locations, there is a possible memory safety issue due to a heap buffer overflow.
KritikCVSS 9,8İstismar yokEPSS %0google · android8 Eyl 2026
- CVE-2026-4992731İzleyin
In multiple locations, there is a possible out of bounds write due to an integer overflow.
YüksekCVSS 7,8İstismar yokEPSS %0google · android8 Eyl 2026
- CVE-2026-4993231İzleyin
In parseParts of PduParser.java, there is a possible out of bounds read due to a heap buffer overflow.
YüksekCVSS 7,8İstismar yokEPSS %0google · android8 Eyl 2026
- CVE-2026-5527331İzleyin
In AppendCommentLine of AnnotationProcessor.cpp, there is a possible supply chain risk due to improper input validation.
YüksekCVSS 7,8İstismar yokEPSS %0google · android8 Eyl 2026
- CVE-2026-5527732İzleyin
In checkUiccListenConfigNeeded of RoutingManager.cpp, there is a possible out of bounds write due to a missing bounds check.
YüksekCVSS 8,0İstismar yokEPSS %0google · android8 Eyl 2026
- CVE-2026-5528531İzleyin
In openLogicalChannel of multiple files, there is a possible out-of-bounds write due to a missing bounds check.
YüksekCVSS 7,8İstismar yokEPSS %0google · android8 Eyl 2026
- CVE-2026-5529431İzleyin
In ihevcd_get_tu_data_size of ihevcd_utils.c, there is a possible out of bounds write due to a heap buffer overflow.
YüksekCVSS 7,8İstismar yokEPSS %0google · android8 Eyl 2026
- CVE-2026-5882031İzleyin
In multiple locations, there is a possible memory safety issue due to integer overflow.
YüksekCVSS 7,8İstismar yokEPSS %0google · android8 Eyl 2026
- CVE-2026-5882239İzleyin
In multiple functions of ftsmooth.c, there is a possible memory safety issue due to improper casting.
KritikCVSS 9,8İstismar yokEPSS %0google · android8 Eyl 2026
- CVE-2026-5882331İzleyin
In stpropnci_process_std of stpropnci_std.cc, there is a possible memory safety issue due to a missing bounds check.
YüksekCVSS 7,8İstismar yokEPSS %0google · android8 Eyl 2026
- CVE-2026-5883931İzleyin
In forEachLine of MountRegistry.cpp, there is a possible out of bounds read due to a buffer overflow.
YüksekCVSS 7,8İstismar yokEPSS %0google · android8 Eyl 2026
- CVE-2026-5884631İzleyin
In kvm_iommu_map_sg of iommu.c, there is a possible use after free due to a missing permission check.
YüksekCVSS 7,8İstismar yokEPSS %0google · android8 Eyl 2026
- CVE-2026-5884828İzleyin
In multiple functions of alloc.c, there is a possible unauthorized read/write access due to a race condition.
YüksekCVSS 7,0İstismar yokEPSS %0google · android8 Eyl 2026
- CVE-2026-5887431İzleyin
In multiple functions of SmsController.java, there is a possible escalation of privilege due to a missing permission check.
YüksekCVSS 7,8İstismar yokEPSS %0google · android8 Eyl 2026
- CVE-2026-5894131İzleyin
In multiple functions of iommu.c, there is a possible out of bounds read/write due to improper input validation.
YüksekCVSS 7,8İstismar yokEPSS %0google · android8 Eyl 2026
- CVE-2026-6630239İzleyin
Skype for Business Remote Code Execution Vulnerability
KritikCVSS 9,8İstismar yokEPSS %0microsoft · skype for business server8 Eyl 2026
- CVE-2026-6630430İzleyin
Skype for Business Information Disclosure Vulnerability
YüksekCVSS 7,5İstismar yokEPSS %0microsoft · skype for business server8 Eyl 2026
- CVE-2026-6630528İzleyin
Skype for Business Spoofing Vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0microsoft · skype for business server8 Eyl 2026
- CVE-2026-6630730İzleyin
Skype for Business and Lync Denial of Service Vulnerability
YüksekCVSS 7,5İstismar yokEPSS %1microsoft · skype for business server8 Eyl 2026
- CVE-2026-6964633İzleyin
Skype for Business Spoofing Vulnerability
YüksekCVSS 8,3İstismar yokEPSS %0microsoft · skype for business server8 Eyl 2026
- CVE-2026-7620037İzleyin
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
KritikCVSS 9,3İstismar yokEPSS %0adobe · magento8 Eyl 2026
- CVE-2026-7620137İzleyin
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
KritikCVSS 9,3İstismar yokEPSS %0adobe · commerce8 Eyl 2026
- CVE-2026-7620232İzleyin
Adobe Commerce | Incorrect Authorization (CWE-863)
YüksekCVSS 8,2İstismar yokEPSS %0adobe · commerce8 Eyl 2026
- CVE-2026-7710830İzleyin
Adobe Commerce | Incorrect Authorization (CWE-863)
YüksekCVSS 7,5İstismar yokEPSS %0adobe · commerce8 Eyl 2026
- CVE-2026-7710934İzleyin
Adobe Commerce | Incorrect Authorization (CWE-863)
YüksekCVSS 8,6İstismar yokEPSS %0adobe · commerce8 Eyl 2026
- CVE-2026-7711030İzleyin
Adobe Commerce | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
YüksekCVSS 7,6İstismar yokEPSS %1adobe · commerce8 Eyl 2026
- CVE-2026-7711134İzleyin
Adobe Commerce | Incorrect Authorization (CWE-863)
YüksekCVSS 8,7İstismar yokEPSS %0adobe · commerce8 Eyl 2026
- CVE-2026-7777434İzleyin
Adobe Commerce | Incorrect Authorization (CWE-863)
YüksekCVSS 8,6İstismar yokEPSS %0adobe · commerce8 Eyl 2026
- CVE-2026-7972134İzleyin
Code execution can occur in versions of the MLflow platform running version 0.0.1 or newer, enabling a maliciously crafted model artifact to
YüksekCVSS 8,6İstismar yokEPSS %0mlflow · mlflow8 Eyl 2026
- CVE-2026-8200441Planlayın
Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)
KritikCVSS 10,0İstismar yokEPSS %3adobe · campaign8 Eyl 2026
- CVE-2026-8253630İzleyin
Roo-Code 3.54.0 Auto-Approve Bypass via Shell Command Pipe Operator
YüksekCVSS 7,7İstismar yokEPSS %0roocodeinc · roo-code8 Eyl 2026
- CVE-2026-8253730İzleyin
Roo-Code 3.54.0 Auto-Approve Bypass via Shell Parser Word-Boundary Mismatch
YüksekCVSS 7,7İstismar yokEPSS %0roocodeinc · roo-code8 Eyl 2026
- CVE-2026-8538434İzleyin
Authenticated Stack-Based Buffer Overflow in RE210 AC750 Configuration Import
YüksekCVSS 8,5İstismar yokEPSS %0tp-link systems inc. · re210 ac7508 Eyl 2026
- CVE-2026-1923239İzleyin
Adobe Experience Manager | Incorrect Authorization (CWE-863)
KritikCVSS 9,9İstismar yokEPSS %1adobe · experience manager8 Eyl 2026
- CVE-2026-4827339İzleyin
ColdFusion | Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') (CWE-95)
KritikCVSS 9,9İstismar yokEPSS %1adobe · coldfusion8 Eyl 2026
- CVE-2026-4988340Planlayın
In checkReadPermission of PermissionsManager.java, there is a possible way to monitor sensitive device state data due to a missing permissio
KritikCVSS 10,0İstismar yokEPSS %0google · android8 Eyl 2026
- CVE-2026-1602530İzleyin
Improper Payment Validation in PayTR's PayTR Virtual Pos iFrame API WHMCS Module
YüksekCVSS 7,5İstismar yokEPSS %0paytr payment and electronic money institution inc. · paytr virtual pos iframe api (v9x) whmcs module8 Eyl 2026
- CVE-2026-1603730İzleyin
Callback Authentication Bypass via Timing Attack in PayTR's PayTR Virtual Pos iFrame API WHMCS Module
YüksekCVSS 7,5İstismar yokEPSS %0paytr payment and electronic money institution inc. · paytr virtual pos iframe api (v9x) whmcs module8 Eyl 2026
- CVE-2026-7563131İzleyin
Photoshop Desktop | Out-of-bounds Write (CWE-787)
YüksekCVSS 7,8İstismar yokEPSS %0adobe · photoshop8 Eyl 2026
- CVE-2026-7574636İzleyin
ColdFusion | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)
KritikCVSS 9,1İstismar yokEPSS %0adobe · coldfusion8 Eyl 2026
- CVE-2026-7577131İzleyin
Photoshop Desktop | Integer Overflow or Wraparound (CWE-190)
YüksekCVSS 7,8İstismar yokEPSS %0adobe · photoshop8 Eyl 2026
- CVE-2026-7586231İzleyin
Photoshop Desktop | Integer Overflow or Wraparound (CWE-190)
YüksekCVSS 7,8İstismar yokEPSS %0adobe · photoshop8 Eyl 2026
- CVE-2026-7586331İzleyin
Photoshop Desktop | Integer Overflow or Wraparound (CWE-190)
YüksekCVSS 7,8İstismar yokEPSS %0adobe · photoshop8 Eyl 2026
- CVE-2026-7599034İzleyin
Illustrator | Incorrect Authorization (CWE-863)
YüksekCVSS 8,6İstismar yokEPSS %0adobe · illustrator8 Eyl 2026
- CVE-2026-7599134İzleyin
Illustrator | Improper Input Validation (CWE-20)
YüksekCVSS 8,6İstismar yokEPSS %0adobe · illustrator8 Eyl 2026
- CVE-2026-7599231İzleyin
Illustrator | Out-of-bounds Write (CWE-787)
YüksekCVSS 7,8İstismar yokEPSS %0adobe · illustrator8 Eyl 2026
- CVE-2026-7599334İzleyin
ColdFusion | Cross-site Scripting (Reflected XSS) (CWE-79)
YüksekCVSS 8,5İstismar yokEPSS %0adobe · coldfusion8 Eyl 2026
- CVE-2026-7599830İzleyin
ColdFusion | Improper Access Control (CWE-284)
YüksekCVSS 7,5İstismar yokEPSS %0adobe · coldfusion8 Eyl 2026
- CVE-2026-7599933İzleyin
ColdFusion | Improper Input Validation (CWE-20)
YüksekCVSS 8,4İstismar yokEPSS %0adobe · coldfusion8 Eyl 2026
- CVE-2026-7619034İzleyin
ColdFusion | Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') (CWE-95)
YüksekCVSS 8,6İstismar yokEPSS %0adobe · coldfusion8 Eyl 2026
- CVE-2026-7619934İzleyin
Photoshop Desktop | Uncontrolled Search Path Element (CWE-427)
YüksekCVSS 8,6İstismar yokEPSS %0adobe · photoshop8 Eyl 2026
- CVE-2026-7862339İzleyin
Improper Handling of SAML Assertion Attributes in Okta Access Gateway Advanced Mode Datastores
KritikCVSS 9,9İstismar yokEPSS %0okta · access gateway8 Eyl 2026
- CVE-2026-7883435İzleyin
A code execution vulnerability exists in CMSimple 5.22 in the CoAuthors plugin.
YüksekCVSS 8,8İstismar yokEPSS %08 Eyl 2026
- CVE-2026-8200531İzleyin
Photoshop Desktop | Out-of-bounds Write (CWE-787)
YüksekCVSS 7,8İstismar yokEPSS %0adobe · photoshop8 Eyl 2026
- CVE-2026-8200631İzleyin
Photoshop Desktop | Heap-based Buffer Overflow (CWE-122)
YüksekCVSS 7,8İstismar yokEPSS %0adobe · photoshop8 Eyl 2026
- CVE-2026-8200731İzleyin
Photoshop Desktop | Integer Overflow or Wraparound (CWE-190)
YüksekCVSS 7,8İstismar yokEPSS %0adobe · photoshop8 Eyl 2026
- CVE-2026-8419736İzleyin
In Eclipse Ditto's Node.js JavaScript client, all released versions of @eclipse-ditto/ditto-javascript-client-node from 2.0.0 to 3.9.0 and o
KritikCVSS 9,2İstismar yokEPSS %0eclipse foundation · eclipse ditto8 Eyl 2026
- CVE-2026-8486969Bu hafta
ScreenConnect Client: Guest-to-Host File Execution via File-Transfer Actions
KritikCVSS 9,9KEVSilahlaştırılmışEPSS %0connectwise · screenconnect8 Eyl 2026
- CVE-2026-8646439İzleyin
In the current development version of Eclipse aeriOS, for which no official release has yet been published, the Identity Manager (IdM) deplo
KritikCVSS 9,9İstismar yokEPSS %0eclipse foundation · eclipse aerios8 Eyl 2026
- CVE-2026-1965129İzleyin
IBM Enterprise Build of Quarkus is affected by multiple vulnerabilities
YüksekCVSS 7,4İstismar yokEPSS %0ibm · enterprise build of quarkus8 Eyl 2026
- CVE-2026-2029328İzleyin
Cisco UCS and UCS-Based Appliances UEFI Shell Secure Boot Bypass Vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0cisco · enterprise nfv infrastructure software8 Eyl 2026
- CVE-2026-8438620İzleyin
A unverified ownership vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.7, FortiClientWindows 7.2 all versions may allow attac
OrtaCVSS 5,1İstismar yokEPSS %0fortinet · forticlientwindows8 Eyl 2026
- CVE-2026-8438728İzleyin
An Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability [CWE-77] vulnerability in Fortinet Fort
YüksekCVSS 7,2İstismar yokEPSS %1fortinet · fortisandbox8 Eyl 2026
- CVE-2026-8439332İzleyin
A improper validation of certificate with host mismatch vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6, FortiProxy 7.6.2 through 7.6.
YüksekCVSS 8,1İstismar yokEPSS %0fortinet · fortios8 Eyl 2026
- CVE-2026-7782733İzleyin
Maono Link local privilege escalation
YüksekCVSS 8,4İstismar yokEPSS %0maono · maono link8 Eyl 2026
- CVE-2026-7990731İzleyin
Acrobat Reader | Double Free (CWE-415)
YüksekCVSS 7,8İstismar yokEPSS %0adobe · acrobat8 Eyl 2026
- CVE-2026-7990831İzleyin
Acrobat Reader | Out-of-bounds Write (CWE-787)
YüksekCVSS 7,8İstismar yokEPSS %0adobe · acrobat8 Eyl 2026
- CVE-2026-7990931İzleyin
Acrobat Reader | Use After Free (CWE-416)
YüksekCVSS 7,8İstismar yokEPSS %0adobe · acrobat8 Eyl 2026
- CVE-2026-8016131İzleyin
Acrobat Reader | Access of Resource Using Incompatible Type ('Type Confusion') (CWE-843)
YüksekCVSS 7,8İstismar yokEPSS %0adobe · acrobat8 Eyl 2026
- CVE-2026-8119228İzleyin
OpenTelemetry.Resources.Host vulnerable to arbitrary code execution via local PATH hijacking on macOS
YüksekCVSS 7,0İstismar yokEPSS %0open-telemetry · opentelemetry-dotnet-contrib8 Eyl 2026
- CVE-2026-8197331İzleyin
Acrobat Reader | Use After Free (CWE-416)
YüksekCVSS 7,8İstismar yokEPSS %0adobe · acrobat8 Eyl 2026
- CVE-2026-8197531İzleyin
Acrobat Reader | Use After Free (CWE-416)
YüksekCVSS 7,8İstismar yokEPSS %0adobe · acrobat8 Eyl 2026
- CVE-2026-8197631İzleyin
Acrobat Reader | Use After Free (CWE-416)
YüksekCVSS 7,8İstismar yokEPSS %0adobe · acrobat8 Eyl 2026
- CVE-2026-8197931İzleyin
Acrobat Reader | Out-of-bounds Write (CWE-787)
YüksekCVSS 7,8İstismar yokEPSS %0adobe · acrobat8 Eyl 2026
- CVE-2026-8198031İzleyin
Acrobat Reader | Out-of-bounds Write (CWE-787)
YüksekCVSS 7,8İstismar yokEPSS %0adobe · acrobat8 Eyl 2026
- CVE-2026-8198131İzleyin
Acrobat Reader | Out-of-bounds Write (CWE-787)
YüksekCVSS 7,8İstismar yokEPSS %0adobe · acrobat8 Eyl 2026
- CVE-2026-8198331İzleyin
Acrobat Reader | Out-of-bounds Write (CWE-787)
YüksekCVSS 7,8İstismar yokEPSS %0adobe · acrobat8 Eyl 2026
- CVE-2026-8198531İzleyin
Acrobat Reader | Use After Free (CWE-416)
YüksekCVSS 7,8İstismar yokEPSS %0adobe · acrobat8 Eyl 2026
- CVE-2026-8198631İzleyin
Acrobat Reader | Use After Free (CWE-416)
YüksekCVSS 7,8İstismar yokEPSS %0adobe · acrobat8 Eyl 2026
- CVE-2026-8198731İzleyin
Acrobat Reader | Integer Overflow or Wraparound (CWE-190)
YüksekCVSS 7,8İstismar yokEPSS %0adobe · acrobat8 Eyl 2026
- CVE-2026-8198831İzleyin
Acrobat Reader | Use After Free (CWE-416)
YüksekCVSS 7,8İstismar yokEPSS %0adobe · acrobat8 Eyl 2026