Yayın tarihine göre
Eylül 2026: sömürülen ve yeni ciddi CVE kayıtları
7.959 kayıt · 32 KEV. Yayın sırasıyla.
Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.
Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.
Sayfa 75 / 80
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
35İzleyin | CVE-2026-102712İstismar yok | On the first DTLS ClientHello, the parser copies a device-claimed session_id length and validates the ciphersuite-list length against theeclipse foundation · netx duo · CWE-125 | Yüksek8,8 | — | %0,2 | 29 Eyl 2026 |
35İzleyin | CVE-2026-102713İstismar yok | The TFTP server accepts a DATA datagram of any size.eclipse foundation · netx duo · CWE-125 | Yüksek8,8 | — | %0,3 | 29 Eyl 2026 |
28İzleyin | CVE-2026-102714İstismar yok | `_nx_icmpv6_validate_options()` scans the option area with `while (length > 2)` (`common/src/nx_icmpv6_validate_options.c:79`).eclipse foundation · netx duo · CWE-125 | Yüksek7,1 | — | %0,1 | 29 Eyl 2026 |
28İzleyin | CVE-2026-102715İstismar yok | mDNS string-cache lookup matches on slot size, so a peer name aliases a shorter one and the response encoder writes past the packeteclipse foundation · eclipse-threadx/netxduo · CWE-787 | Yüksek7,1 | — | %0,1 | 29 Eyl 2026 |
34İzleyin | CVE-2026-102716İstismar yok | An unauthenticated client can drain the RTSP server's packet pool with a couple of dozen requests that carry a Session header the parser eclipse foundation · eclipse-threadx/netxduo · CWE-401 | Yüksek8,7 | — | %0,2 | 29 Eyl 2026 |
34İzleyin | CVE-2026-102718Kavram kanıtı | hey, `_nx_snmp_utility_object_id_get` in the NetX Duo SNMP addon does not validate the claimed OID data length against the actual buffer eclipse foundation · netx duo · CWE-125 | Yüksek8,7 | — | %0,3 | 29 Eyl 2026 |
30İzleyin | CVE-2026-102728İstismar yok | Two client-side TLS/DTLS handshake parsers in NetX Secure read fields from a server-supplied message before validating that the message is leclipse foundation · netx duo · CWE-126 | Yüksek7,5 | — | %0,2 | 29 Eyl 2026 |
34İzleyin | CVE-2026-102730İstismar yok | Mounting an attacker-controlled NAND flash image (`lx_nand_flash_open()`) triggers an unbounded out-of-bounds heap **write** in LevelX's NANeclipse foundation · eclipse-threadx/levelx(nand driver) · CWE-787 | Yüksek8,6 | — | %0,1 | 29 Eyl 2026 |
34İzleyin | CVE-2026-102757İstismar yok | An unprivileged, memory-protected ThreadX module can have the kernel read and write memory at addresses of its choosing, in privileged mode,eclipse foundation · threadx · CWE-125 | Yüksek8,5 | — | %0,1 | 29 Eyl 2026 |
30İzleyin | CVE-2026-102758İstismar yok | The `_nx_secure_x509_asn1_tlv_block_parse()` function parses ASN.1 TLV (tag-length-value) blocks out of DER-encoded data.eclipse foundation · netx duo · CWE-126 | Yüksek7,5 | — | %0,1 | 29 Eyl 2026 |
33İzleyin | CVE-2026-102760İstismar yok | When NetX Secure is built with `NX_SECURE_KEY_CLEAR`, every TLS record sent on an active session is wiped after it has been handed to TCP.eclipse foundation · netx duo · CWE-416 | Yüksek8,3 | — | %0,2 | 29 Eyl 2026 |
37İzleyin | CVE-2026-102761İstismar yok | NetX Duo's WebSocket client resets the unmasking cursor to the first `NX_PACKET` each time it advances through a chained packet, while the leclipse foundation · netx duo · CWE-787 | Kritik9,3 | — | %0,2 | 29 Eyl 2026 |
32İzleyin | CVE-2026-102762İstismar yok | The NetX Duo MQTT client leaks the packet carrying a malformed PUBLISH message.eclipse foundation · netx duo · CWE-401 | Yüksek8,2 | — | %0,2 | 29 Eyl 2026 |
28İzleyin | CVE-2026-102808İstismar yok | PX4 Autopilot through 1.17.0 NULL Pointer Dereference via sd_stresspx4 · px4-autopilot · CWE-476 | Yüksek7,1 | — | %0,2 | 29 Eyl 2026 |
28İzleyin | CVE-2026-102809İstismar yok | PX4 Autopilot through 1.17.0 Stack Exhaustion via tests file2 Commandpx4 · px4-autopilot · CWE-789 | Yüksek7,1 | — | %0,4 | 29 Eyl 2026 |
34İzleyin | CVE-2026-102810İstismar yok | Marmite through 0.4.2 Path Traversal via Development Serverrochacbruno · marmite · CWE-22 | Yüksek8,7 | — | %0,3 | 29 Eyl 2026 |
34İzleyin | CVE-2026-102811İstismar yok | Marmite through 0.4.2 Unauthenticated API Access via Development Serverrochacbruno · marmite · CWE-306 | Yüksek8,7 | — | %0,6 | 29 Eyl 2026 |
23İzleyin | CVE-2026-12345Kavram kanıtı | Race condition in tempfile.TemporaryDirectory cleanup allows deleting files outside the temporary directorypython software foundation · cpython · CWE-59 | Orta5,9 | — | %0,3 | 29 Eyl 2026 |
31İzleyin | CVE-2026-84414İstismar yok | IBM i is Affected By An Incorrect Permission Assignment Vulnerability in Network Authentication Service []ibm · i · CWE-732 | Yüksek7,8 | — | %0,0 | 29 Eyl 2026 |
35İzleyin | CVE-2026-84421İstismar yok | DataStage on Cloud Pak for Data has several vulnerabilitiesibm · datastage on cloud pak for data · CWE-22 | Yüksek8,8 | — | %0,5 | 29 Eyl 2026 |
28İzleyin | CVE-2026-84422İstismar yok | IBM Guardium Data Protection is affected by multiple vulnerabilities.ibm · guardium data protection · CWE-78 | Yüksek7,2 | — | %0,6 | 29 Eyl 2026 |
36İzleyin | CVE-2026-84436İstismar yok | IBM Guardium Data Protection is affected by multiple vulnerabilities.ibm · guardium data protection · CWE-78 | Kritik9,1 | — | %0,6 | 29 Eyl 2026 |
35İzleyin | CVE-2026-84440İstismar yok | IBM Guardium Data Protection is affected by multiple vulnerabilities.ibm · guardium data protection · CWE-78 | Yüksek8,8 | — | %0,7 | 29 Eyl 2026 |
32İzleyin | CVE-2026-84842İstismar yok | IBM Guardium Data Protection is affected by multiple vulnerabilities.ibm · guardium data protection · CWE-22 | Yüksek8,1 | — | %0,3 | 29 Eyl 2026 |
35İzleyin | CVE-2026-94954İstismar yok | A stack-based buffer overflow vulnerability exists in the web management interface of TOTOLINK N150RT (NTR150) firmware V3.4.0-B20201030.CWE-121 | Yüksek8,8 | — | %0,3 | 29 Eyl 2026 |
33İzleyin | CVE-2026-95274İstismar yok | Improper output encoding in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer procgoogle · chrome · CWE-116 | Yüksek8,3 | — | %0,3 | 29 Eyl 2026 |
33İzleyin | CVE-2026-95276İstismar yok | Improper input validation in Themes in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer procegoogle · chrome · CWE-20 | Yüksek8,3 | — | %0,3 | 29 Eyl 2026 |
38İzleyin | CVE-2026-95277İstismar yok | Use after free in Views in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the google · chrome · CWE-416 | Kritik9,6 | — | %0,3 | 29 Eyl 2026 |
33İzleyin | CVE-2026-95278İstismar yok | Missing authorization in WakeLock in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer processgoogle · chrome · CWE-862 | Yüksek8,4 | — | %0,2 | 29 Eyl 2026 |
30İzleyin | CVE-2026-95280İstismar yok | Race condition in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crgoogle · chrome · CWE-362 | Yüksek7,5 | — | %0,2 | 29 Eyl 2026 |
38İzleyin | CVE-2026-95281İstismar yok | Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside tgoogle · chrome · CWE-122 | Kritik9,6 | — | %0,5 | 29 Eyl 2026 |
35İzleyin | CVE-2026-95282İstismar yok | Use after free in Platform in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox vigoogle · chrome · CWE-416 | Yüksek8,8 | — | %0,3 | 29 Eyl 2026 |
38İzleyin | CVE-2026-95283İstismar yok | Buffer overflow in Tint in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary codgoogle · chrome · CWE-122 | Kritik9,6 | — | %0,3 | 29 Eyl 2026 |
38İzleyin | CVE-2026-95284İstismar yok | Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside tgoogle · chrome · CWE-122 | Kritik9,6 | — | %0,4 | 29 Eyl 2026 |
33İzleyin | CVE-2026-95285İstismar yok | Missing authorization in WebView in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker who had compromised the rengoogle · chrome · CWE-862 | Yüksek8,4 | — | %0,2 | 29 Eyl 2026 |
35İzleyin | CVE-2026-95286İstismar yok | Type confusion in Bindings in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox vigoogle · chrome · CWE-843 | Yüksek8,8 | — | %0,3 | 29 Eyl 2026 |
21İzleyin | CVE-2026-95291İstismar yok | UI misrepresentation in SecurityIndicators in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker to spoof address bar google · chrome · CWE-451 | Orta5,4 | — | %0,2 | 29 Eyl 2026 |
31İzleyin | CVE-2026-95298İstismar yok | Use after free in Browser in Google Chrome prior to 154.0.8037.57 allowed a local attacker to potentially execute arbitrary code outside thegoogle · chrome · CWE-416 | Yüksek7,8 | — | %0,1 | 29 Eyl 2026 |
38İzleyin | CVE-2026-95299İstismar yok | Use after free in GPU in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a google · chrome · CWE-416 | Kritik9,6 | — | %0,3 | 29 Eyl 2026 |
32İzleyin | CVE-2026-95301İstismar yok | Missing authorization in Extensions in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer procegoogle · chrome · CWE-862 | Yüksek8,1 | — | %0,2 | 29 Eyl 2026 |
35İzleyin | CVE-2026-95304İstismar yok | Out of bounds write in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox viagoogle · chrome · CWE-787 | Yüksek8,8 | — | %0,3 | 29 Eyl 2026 |
35İzleyin | CVE-2026-95306İstismar yok | Type confusion in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crgoogle · chrome · CWE-843 | Yüksek8,8 | — | %0,3 | 29 Eyl 2026 |
38İzleyin | CVE-2026-95310İstismar yok | Use after free in AdFilter in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox vgoogle · chrome · CWE-416 | Kritik9,6 | — | %0,4 | 29 Eyl 2026 |
38İzleyin | CVE-2026-95311İstismar yok | Free of non-heap memory in Fonts in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to potentiagoogle · chrome · CWE-590 | Kritik9,6 | — | %0,3 | 29 Eyl 2026 |
38İzleyin | CVE-2026-95313İstismar yok | Use after free in Fullscreen in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outsidegoogle · chrome · CWE-416 | Kritik9,6 | — | %0,4 | 29 Eyl 2026 |
32İzleyin | CVE-2026-95314İstismar yok | Incorrect authorization in HID in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process togoogle · chrome · CWE-863 | Yüksek8,1 | — | %0,2 | 29 Eyl 2026 |
31İzleyin | CVE-2026-95315İstismar yok | Use after free in Aura in Google Chrome prior to 154.0.8037.57 allowed a local attacker to potentially execute arbitrary code outside the sagoogle · chrome · CWE-416 | Yüksek7,8 | — | %0,1 | 29 Eyl 2026 |
38İzleyin | CVE-2026-95318İstismar yok | Buffer overflow in Video in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside thegoogle · chrome · CWE-122 | Kritik9,6 | — | %0,3 | 29 Eyl 2026 |
33İzleyin | CVE-2026-95319İstismar yok | Use after free in Printing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potgoogle · chrome · CWE-416 | Yüksek8,3 | — | %0,2 | 29 Eyl 2026 |
33İzleyin | CVE-2026-95322İstismar yok | Out of bounds write in GPU in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer google · chrome · CWE-787 | Yüksek8,3 | — | %0,3 | 29 Eyl 2026 |
38İzleyin | CVE-2026-95325İstismar yok | Use after free in ANGLE in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the google · chrome · CWE-416 | Kritik9,6 | — | %0,3 | 29 Eyl 2026 |
33İzleyin | CVE-2026-95326İstismar yok | Incomplete cleanup in Bluetooth in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass sygoogle · chrome · CWE-459 | Yüksek8,4 | — | %0,3 | 29 Eyl 2026 |
38İzleyin | CVE-2026-95329İstismar yok | Out of bounds write in WebGL in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrargoogle · chrome · CWE-787 | Kritik9,6 | — | %0,4 | 29 Eyl 2026 |
38İzleyin | CVE-2026-95331İstismar yok | Out of bounds write in ANGLE in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outsidegoogle · chrome · CWE-787 | Kritik9,6 | — | %0,3 | 29 Eyl 2026 |
32İzleyin | CVE-2026-95333İstismar yok | Use after free in Metrics in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox vigoogle · chrome · CWE-416 | Yüksek8,1 | — | %0,3 | 29 Eyl 2026 |
33İzleyin | CVE-2026-95334İstismar yok | Incorrect reference resolution in WebProtect in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the rendegoogle · chrome · CWE-706 | Yüksek8,3 | — | %0,3 | 29 Eyl 2026 |
33İzleyin | CVE-2026-95335İstismar yok | Use after free in HID in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentiagoogle · chrome · CWE-416 | Yüksek8,3 | — | %0,2 | 29 Eyl 2026 |
35İzleyin | CVE-2026-95338İstismar yok | Use after free in PDFium in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via google · chrome · CWE-416 | Yüksek8,8 | — | %0,2 | 29 Eyl 2026 |
38İzleyin | CVE-2026-95339İstismar yok | Use after free in ServiceWorker in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandgoogle · chrome · CWE-416 | Kritik9,6 | — | %0,4 | 29 Eyl 2026 |
33İzleyin | CVE-2026-95341İstismar yok | Improper input validation in Desktop in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer procgoogle · chrome · CWE-20 | Yüksek8,3 | — | %0,2 | 29 Eyl 2026 |
35İzleyin | CVE-2026-95343İstismar yok | Use after free in WebAudio in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox vigoogle · chrome · CWE-416 | Yüksek8,8 | — | %0,3 | 29 Eyl 2026 |
32İzleyin | CVE-2026-95344İstismar yok | Race condition in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass site isgoogle · chrome · CWE-367 | Yüksek8,0 | — | %0,1 | 29 Eyl 2026 |
35İzleyin | CVE-2026-95345İstismar yok | Use after free in Actor in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via agoogle · chrome · CWE-416 | Yüksek8,8 | — | %0,3 | 29 Eyl 2026 |
38İzleyin | CVE-2026-95347İstismar yok | Use after free in Updater in Google Chrome on on Mac prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the google · chrome · CWE-416 | Kritik9,6 | — | %0,3 | 29 Eyl 2026 |
33İzleyin | CVE-2026-95348İstismar yok | Use after free in Bluetooth in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to pogoogle · chrome · CWE-416 | Yüksek8,3 | — | %0,2 | 29 Eyl 2026 |
38İzleyin | CVE-2026-95349İstismar yok | Buffer overflow in WebGL in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary cogoogle · chrome · CWE-122 | Kritik9,6 | — | %0,4 | 29 Eyl 2026 |
38İzleyin | CVE-2026-95350İstismar yok | Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside tgoogle · chrome · CWE-122 | Kritik9,6 | — | %0,5 | 29 Eyl 2026 |
33İzleyin | CVE-2026-95351İstismar yok | Use after free in Views in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to executgoogle · chrome · CWE-416 | Yüksek8,3 | — | %0,2 | 29 Eyl 2026 |
35İzleyin | CVE-2026-95353İstismar yok | Use after free in Bindings in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox vigoogle · chrome · CWE-416 | Yüksek8,8 | — | %0,2 | 29 Eyl 2026 |
33İzleyin | CVE-2026-95354İstismar yok | Use after free in Verifier in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potgoogle · chrome · CWE-416 | Yüksek8,3 | — | %0,2 | 29 Eyl 2026 |
33İzleyin | CVE-2026-95355İstismar yok | Incorrect authorization in Navigation in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker who had compromised the regoogle · chrome · CWE-863 | Yüksek8,3 | — | %0,2 | 29 Eyl 2026 |
38İzleyin | CVE-2026-95356İstismar yok | Use after free in WindowDialog in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to potentiallgoogle · chrome · CWE-416 | Kritik9,6 | — | %0,4 | 29 Eyl 2026 |
38İzleyin | CVE-2026-95357İstismar yok | Out of bounds write in GPU in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary google · chrome · CWE-787 | Kritik9,6 | — | %0,4 | 29 Eyl 2026 |
35İzleyin | CVE-2026-95362İstismar yok | Cross-site request forgery in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bygoogle · chrome · CWE-352 | Yüksek8,8 | — | %0,1 | 29 Eyl 2026 |
35İzleyin | CVE-2026-95365İstismar yok | Type confusion in IndexedDB in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code inside tgoogle · chrome · CWE-843 | Yüksek8,8 | — | %0,3 | 29 Eyl 2026 |
35İzleyin | CVE-2026-95369İstismar yok | Inappropriate implementation in XML in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code google · chrome · CWE-841 | Yüksek8,8 | — | %0,2 | 29 Eyl 2026 |
33İzleyin | CVE-2026-95372İstismar yok | Use after free in Chromecast in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to pgoogle · chrome · CWE-416 | Yüksek8,3 | — | %0,2 | 29 Eyl 2026 |
35İzleyin | CVE-2026-95373İstismar yok | Use after free in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to execute arbitrgoogle · chrome · CWE-416 | Yüksek8,8 | — | %0,2 | 29 Eyl 2026 |
32İzleyin | CVE-2026-95376İstismar yok | Externally controlled reference in DevTools in Google Chrome prior to 154.0.8037.57 allowed an adjacent attacker leveraging social engineerigoogle · chrome · CWE-610 | Yüksek8,0 | — | %0,1 | 29 Eyl 2026 |
35İzleyin | CVE-2026-95380İstismar yok | Type confusion in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to potentially execute google · chrome · CWE-843 | Yüksek8,8 | — | %0,2 | 29 Eyl 2026 |
33İzleyin | CVE-2026-95381İstismar yok | Improper input validation in Printing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer progoogle · chrome · CWE-20 | Yüksek8,3 | — | %0,2 | 29 Eyl 2026 |
30İzleyin | CVE-2026-102823İstismar yok | russh: Client-side channel-scoped Handler callbacks fire for channel IDs the client never openedeugeny · russh · CWE-20 | Yüksek7,5 | — | %0,3 | 29 Eyl 2026 |
32İzleyin | CVE-2026-102826Kavram kanıtı | simple-git allows command execution through unblocked Git configuration includessimple-git project · simple-git · CWE-77 | Yüksek8,1 | — | %0,4 | 29 Eyl 2026 |
39İzleyin | CVE-2026-102827Kavram kanıtı | simple-git: unsafe-operations plugin bypass via git long-option abbreviation (--receive-p/--exe) -> command execution (residual of CVE-2026-28291)simple-git project · simple-git · CWE-77 | Kritik9,8 | — | %0,5 | 29 Eyl 2026 |
36İzleyin | CVE-2026-102828İstismar yok | simple-git unsafe-operation guard does not block trailer command configurationsimple-git project · simple-git · CWE-78 | Kritik9,2 | — | %0,3 | 29 Eyl 2026 |
36İzleyin | CVE-2026-102829İstismar yok | simple-git: `VISUAL` editor environment variable is omitted from unsafe editor detectionsteveukx · git-js · CWE-78 | Kritik9,2 | — | %0,2 | 29 Eyl 2026 |
32İzleyin | CVE-2026-102831İstismar yok | JupyterLab: Cross-site scripting (XSS) in JupyterLab via notebook cells pasted from the system clipboardjupyterlab · jupyterlab · CWE-79 | Yüksek8,1 | — | %0,1 | 29 Eyl 2026 |
39İzleyin | CVE-2024-31026İstismar yok | An issue in Greek Universities Network (GUnet) Open eClass Platform v.3.15 allows a remote attacker to execute arbitrary code via the chat iCWE-94 | Kritik9,8 | — | %0,7 | 29 Eyl 2026 |
37İzleyin | CVE-2026-100291İstismar yok | Initialization of a resource with an insecure default in Anjvision YSSD-RTMP-H5anjvision · yssd-rtmp-h5 · CWE-1188 | Kritik9,3 | — | %0,3 | 29 Eyl 2026 |
34İzleyin | CVE-2026-100292İstismar yok | Improper neutralization of special elements used in an OS command ('OS command injection') in Anjvision YSSD-RTMP-H5anjvision · yssd-rtmp-h5 · CWE-78 | Yüksek8,7 | — | %0,2 | 29 Eyl 2026 |
34İzleyin | CVE-2026-100293İstismar yok | Improper verification of cryptographic signature in Anjvision YSSD-RTMP-H5anjvision · yssd-rtmp-h5 · CWE-347 | Yüksek8,7 | — | %0,1 | 29 Eyl 2026 |
34İzleyin | CVE-2026-100294İstismar yok | Use of Hard-coded Credentials in Anjvision YSSD-RTMP-H5anjvision · yssd-rtmp-h5 · CWE-798 | Yüksek8,7 | — | %0,2 | 29 Eyl 2026 |
28İzleyin | CVE-2026-100296İstismar yok | Improper Check for Unusual or Exceptional Conditions in Anjvision YSSD-RTMP-H5anjvision · yssd-rtmp-h5 · CWE-754 | Yüksek7,2 | — | %0,3 | 29 Eyl 2026 |
34İzleyin | CVE-2026-100298İstismar yok | Insufficiently Protected Credentials in Anjvision YSSD-RTMP-H5anjvision · yssd-rtmp-h5 · CWE-522 | Yüksek8,7 | — | %0,2 | 29 Eyl 2026 |
28İzleyin | CVE-2026-100299İstismar yok | Use of Weak Credentials in Anjvision YSSD-RTMP-H5anjvision · yssd-rtmp-h5 · CWE-1391 | Yüksek7,0 | — | %0,0 | 29 Eyl 2026 |
35İzleyin | CVE-2026-102299İstismar yok | Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crgoogle · chrome · CWE-843 | Yüksek8,8 | — | %0,4 | 29 Eyl 2026 |
33İzleyin | CVE-2026-102301İstismar yok | Out of bounds write in GPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to potgoogle · chrome · CWE-787 | Yüksek8,3 | — | %0,2 | 29 Eyl 2026 |
35İzleyin | CVE-2026-102302İstismar yok | Buffer overflow in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a cgoogle · chrome · CWE-121 | Yüksek8,8 | — | %0,3 | 29 Eyl 2026 |
38İzleyin | CVE-2026-102304İstismar yok | Use after free in Passwords in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code outside the sandbox google · chrome · CWE-416 | Kritik9,6 | — | %0,3 | 29 Eyl 2026 |
38İzleyin | CVE-2026-102306İstismar yok | Use after free in Bluetooth in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to potentially execute arbitrary code outside google · chrome · CWE-416 | Kritik9,6 | — | %0,3 | 29 Eyl 2026 |
- CVE-2026-10271235İzleyin
On the first DTLS ClientHello, the parser copies a device-claimed session_id length and validates the ciphersuite-list length against the
YüksekCVSS 8,8İstismar yokEPSS %0eclipse foundation · netx duo29 Eyl 2026
- CVE-2026-10271335İzleyin
The TFTP server accepts a DATA datagram of any size.
YüksekCVSS 8,8İstismar yokEPSS %0eclipse foundation · netx duo29 Eyl 2026
- CVE-2026-10271428İzleyin
`_nx_icmpv6_validate_options()` scans the option area with `while (length > 2)` (`common/src/nx_icmpv6_validate_options.c:79`).
YüksekCVSS 7,1İstismar yokEPSS %0eclipse foundation · netx duo29 Eyl 2026
- CVE-2026-10271528İzleyin
mDNS string-cache lookup matches on slot size, so a peer name aliases a shorter one and the response encoder writes past the packet
YüksekCVSS 7,1İstismar yokEPSS %0eclipse foundation · eclipse-threadx/netxduo29 Eyl 2026
- CVE-2026-10271634İzleyin
An unauthenticated client can drain the RTSP server's packet pool with a couple of dozen requests that carry a Session header the parser
YüksekCVSS 8,7İstismar yokEPSS %0eclipse foundation · eclipse-threadx/netxduo29 Eyl 2026
- CVE-2026-10271834İzleyin
hey, `_nx_snmp_utility_object_id_get` in the NetX Duo SNMP addon does not validate the claimed OID data length against the actual buffer
YüksekCVSS 8,7Kavram kanıtıEPSS %0eclipse foundation · netx duo29 Eyl 2026
- CVE-2026-10272830İzleyin
Two client-side TLS/DTLS handshake parsers in NetX Secure read fields from a server-supplied message before validating that the message is l
YüksekCVSS 7,5İstismar yokEPSS %0eclipse foundation · netx duo29 Eyl 2026
- CVE-2026-10273034İzleyin
Mounting an attacker-controlled NAND flash image (`lx_nand_flash_open()`) triggers an unbounded out-of-bounds heap **write** in LevelX's NAN
YüksekCVSS 8,6İstismar yokEPSS %0eclipse foundation · eclipse-threadx/levelx(nand driver)29 Eyl 2026
- CVE-2026-10275734İzleyin
An unprivileged, memory-protected ThreadX module can have the kernel read and write memory at addresses of its choosing, in privileged mode,
YüksekCVSS 8,5İstismar yokEPSS %0eclipse foundation · threadx29 Eyl 2026
- CVE-2026-10275830İzleyin
The `_nx_secure_x509_asn1_tlv_block_parse()` function parses ASN.1 TLV (tag-length-value) blocks out of DER-encoded data.
YüksekCVSS 7,5İstismar yokEPSS %0eclipse foundation · netx duo29 Eyl 2026
- CVE-2026-10276033İzleyin
When NetX Secure is built with `NX_SECURE_KEY_CLEAR`, every TLS record sent on an active session is wiped after it has been handed to TCP.
YüksekCVSS 8,3İstismar yokEPSS %0eclipse foundation · netx duo29 Eyl 2026
- CVE-2026-10276137İzleyin
NetX Duo's WebSocket client resets the unmasking cursor to the first `NX_PACKET` each time it advances through a chained packet, while the l
KritikCVSS 9,3İstismar yokEPSS %0eclipse foundation · netx duo29 Eyl 2026
- CVE-2026-10276232İzleyin
The NetX Duo MQTT client leaks the packet carrying a malformed PUBLISH message.
YüksekCVSS 8,2İstismar yokEPSS %0eclipse foundation · netx duo29 Eyl 2026
- CVE-2026-10280828İzleyin
PX4 Autopilot through 1.17.0 NULL Pointer Dereference via sd_stress
YüksekCVSS 7,1İstismar yokEPSS %0px4 · px4-autopilot29 Eyl 2026
- CVE-2026-10280928İzleyin
PX4 Autopilot through 1.17.0 Stack Exhaustion via tests file2 Command
YüksekCVSS 7,1İstismar yokEPSS %0px4 · px4-autopilot29 Eyl 2026
- CVE-2026-10281034İzleyin
Marmite through 0.4.2 Path Traversal via Development Server
YüksekCVSS 8,7İstismar yokEPSS %0rochacbruno · marmite29 Eyl 2026
- CVE-2026-10281134İzleyin
Marmite through 0.4.2 Unauthenticated API Access via Development Server
YüksekCVSS 8,7İstismar yokEPSS %0rochacbruno · marmite29 Eyl 2026
- CVE-2026-1234523İzleyin
Race condition in tempfile.TemporaryDirectory cleanup allows deleting files outside the temporary directory
OrtaCVSS 5,9Kavram kanıtıEPSS %0python software foundation · cpython29 Eyl 2026
- CVE-2026-8441431İzleyin
IBM i is Affected By An Incorrect Permission Assignment Vulnerability in Network Authentication Service []
YüksekCVSS 7,8İstismar yokEPSS %0ibm · i29 Eyl 2026
- CVE-2026-8442135İzleyin
DataStage on Cloud Pak for Data has several vulnerabilities
YüksekCVSS 8,8İstismar yokEPSS %0ibm · datastage on cloud pak for data29 Eyl 2026
- CVE-2026-8442228İzleyin
IBM Guardium Data Protection is affected by multiple vulnerabilities.
YüksekCVSS 7,2İstismar yokEPSS %0ibm · guardium data protection29 Eyl 2026
- CVE-2026-8443636İzleyin
IBM Guardium Data Protection is affected by multiple vulnerabilities.
KritikCVSS 9,1İstismar yokEPSS %0ibm · guardium data protection29 Eyl 2026
- CVE-2026-8444035İzleyin
IBM Guardium Data Protection is affected by multiple vulnerabilities.
YüksekCVSS 8,8İstismar yokEPSS %0ibm · guardium data protection29 Eyl 2026
- CVE-2026-8484232İzleyin
IBM Guardium Data Protection is affected by multiple vulnerabilities.
YüksekCVSS 8,1İstismar yokEPSS %0ibm · guardium data protection29 Eyl 2026
- CVE-2026-9495435İzleyin
A stack-based buffer overflow vulnerability exists in the web management interface of TOTOLINK N150RT (NTR150) firmware V3.4.0-B20201030.
YüksekCVSS 8,8İstismar yokEPSS %029 Eyl 2026
- CVE-2026-9527433İzleyin
Improper output encoding in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer proc
YüksekCVSS 8,3İstismar yokEPSS %0google · chrome29 Eyl 2026
- CVE-2026-9527633İzleyin
Improper input validation in Themes in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer proce
YüksekCVSS 8,3İstismar yokEPSS %0google · chrome29 Eyl 2026
- CVE-2026-9527738İzleyin
Use after free in Views in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the
KritikCVSS 9,6İstismar yokEPSS %0google · chrome29 Eyl 2026
- CVE-2026-9527833İzleyin
Missing authorization in WakeLock in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process
YüksekCVSS 8,4İstismar yokEPSS %0google · chrome29 Eyl 2026
- CVE-2026-9528030İzleyin
Race condition in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr
YüksekCVSS 7,5İstismar yokEPSS %0google · chrome29 Eyl 2026
- CVE-2026-9528138İzleyin
Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside t
KritikCVSS 9,6İstismar yokEPSS %0google · chrome29 Eyl 2026
- CVE-2026-9528235İzleyin
Use after free in Platform in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox vi
YüksekCVSS 8,8İstismar yokEPSS %0google · chrome29 Eyl 2026
- CVE-2026-9528338İzleyin
Buffer overflow in Tint in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary cod
KritikCVSS 9,6İstismar yokEPSS %0google · chrome29 Eyl 2026
- CVE-2026-9528438İzleyin
Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside t
KritikCVSS 9,6İstismar yokEPSS %0google · chrome29 Eyl 2026
- CVE-2026-9528533İzleyin
Missing authorization in WebView in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker who had compromised the ren
YüksekCVSS 8,4İstismar yokEPSS %0google · chrome29 Eyl 2026
- CVE-2026-9528635İzleyin
Type confusion in Bindings in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox vi
YüksekCVSS 8,8İstismar yokEPSS %0google · chrome29 Eyl 2026
- CVE-2026-9529121İzleyin
UI misrepresentation in SecurityIndicators in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker to spoof address bar
OrtaCVSS 5,4İstismar yokEPSS %0google · chrome29 Eyl 2026
- CVE-2026-9529831İzleyin
Use after free in Browser in Google Chrome prior to 154.0.8037.57 allowed a local attacker to potentially execute arbitrary code outside the
YüksekCVSS 7,8İstismar yokEPSS %0google · chrome29 Eyl 2026
- CVE-2026-9529938İzleyin
Use after free in GPU in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a
KritikCVSS 9,6İstismar yokEPSS %0google · chrome29 Eyl 2026
- CVE-2026-9530132İzleyin
Missing authorization in Extensions in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer proce
YüksekCVSS 8,1İstismar yokEPSS %0google · chrome29 Eyl 2026
- CVE-2026-9530435İzleyin
Out of bounds write in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via
YüksekCVSS 8,8İstismar yokEPSS %0google · chrome29 Eyl 2026
- CVE-2026-9530635İzleyin
Type confusion in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr
YüksekCVSS 8,8İstismar yokEPSS %0google · chrome29 Eyl 2026
- CVE-2026-9531038İzleyin
Use after free in AdFilter in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox v
KritikCVSS 9,6İstismar yokEPSS %0google · chrome29 Eyl 2026
- CVE-2026-9531138İzleyin
Free of non-heap memory in Fonts in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to potentia
KritikCVSS 9,6İstismar yokEPSS %0google · chrome29 Eyl 2026
- CVE-2026-9531338İzleyin
Use after free in Fullscreen in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside
KritikCVSS 9,6İstismar yokEPSS %0google · chrome29 Eyl 2026
- CVE-2026-9531432İzleyin
Incorrect authorization in HID in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to
YüksekCVSS 8,1İstismar yokEPSS %0google · chrome29 Eyl 2026
- CVE-2026-9531531İzleyin
Use after free in Aura in Google Chrome prior to 154.0.8037.57 allowed a local attacker to potentially execute arbitrary code outside the sa
YüksekCVSS 7,8İstismar yokEPSS %0google · chrome29 Eyl 2026
- CVE-2026-9531838İzleyin
Buffer overflow in Video in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the
KritikCVSS 9,6İstismar yokEPSS %0google · chrome29 Eyl 2026
- CVE-2026-9531933İzleyin
Use after free in Printing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to pot
YüksekCVSS 8,3İstismar yokEPSS %0google · chrome29 Eyl 2026
- CVE-2026-9532233İzleyin
Out of bounds write in GPU in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer
YüksekCVSS 8,3İstismar yokEPSS %0google · chrome29 Eyl 2026
- CVE-2026-9532538İzleyin
Use after free in ANGLE in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the
KritikCVSS 9,6İstismar yokEPSS %0google · chrome29 Eyl 2026
- CVE-2026-9532633İzleyin
Incomplete cleanup in Bluetooth in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass sy
YüksekCVSS 8,4İstismar yokEPSS %0google · chrome29 Eyl 2026
- CVE-2026-9532938İzleyin
Out of bounds write in WebGL in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrar
KritikCVSS 9,6İstismar yokEPSS %0google · chrome29 Eyl 2026
- CVE-2026-9533138İzleyin
Out of bounds write in ANGLE in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside
KritikCVSS 9,6İstismar yokEPSS %0google · chrome29 Eyl 2026
- CVE-2026-9533332İzleyin
Use after free in Metrics in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox vi
YüksekCVSS 8,1İstismar yokEPSS %0google · chrome29 Eyl 2026
- CVE-2026-9533433İzleyin
Incorrect reference resolution in WebProtect in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the rende
YüksekCVSS 8,3İstismar yokEPSS %0google · chrome29 Eyl 2026
- CVE-2026-9533533İzleyin
Use after free in HID in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentia
YüksekCVSS 8,3İstismar yokEPSS %0google · chrome29 Eyl 2026
- CVE-2026-9533835İzleyin
Use after free in PDFium in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via
YüksekCVSS 8,8İstismar yokEPSS %0google · chrome29 Eyl 2026
- CVE-2026-9533938İzleyin
Use after free in ServiceWorker in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sand
KritikCVSS 9,6İstismar yokEPSS %0google · chrome29 Eyl 2026
- CVE-2026-9534133İzleyin
Improper input validation in Desktop in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer proc
YüksekCVSS 8,3İstismar yokEPSS %0google · chrome29 Eyl 2026
- CVE-2026-9534335İzleyin
Use after free in WebAudio in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox vi
YüksekCVSS 8,8İstismar yokEPSS %0google · chrome29 Eyl 2026
- CVE-2026-9534432İzleyin
Race condition in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass site is
YüksekCVSS 8,0İstismar yokEPSS %0google · chrome29 Eyl 2026
- CVE-2026-9534535İzleyin
Use after free in Actor in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a
YüksekCVSS 8,8İstismar yokEPSS %0google · chrome29 Eyl 2026
- CVE-2026-9534738İzleyin
Use after free in Updater in Google Chrome on on Mac prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the
KritikCVSS 9,6İstismar yokEPSS %0google · chrome29 Eyl 2026
- CVE-2026-9534833İzleyin
Use after free in Bluetooth in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to po
YüksekCVSS 8,3İstismar yokEPSS %0google · chrome29 Eyl 2026
- CVE-2026-9534938İzleyin
Buffer overflow in WebGL in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary co
KritikCVSS 9,6İstismar yokEPSS %0google · chrome29 Eyl 2026
- CVE-2026-9535038İzleyin
Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside t
KritikCVSS 9,6İstismar yokEPSS %0google · chrome29 Eyl 2026
- CVE-2026-9535133İzleyin
Use after free in Views in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to execut
YüksekCVSS 8,3İstismar yokEPSS %0google · chrome29 Eyl 2026
- CVE-2026-9535335İzleyin
Use after free in Bindings in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox vi
YüksekCVSS 8,8İstismar yokEPSS %0google · chrome29 Eyl 2026
- CVE-2026-9535433İzleyin
Use after free in Verifier in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to pot
YüksekCVSS 8,3İstismar yokEPSS %0google · chrome29 Eyl 2026
- CVE-2026-9535533İzleyin
Incorrect authorization in Navigation in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker who had compromised the re
YüksekCVSS 8,3İstismar yokEPSS %0google · chrome29 Eyl 2026
- CVE-2026-9535638İzleyin
Use after free in WindowDialog in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to potentiall
KritikCVSS 9,6İstismar yokEPSS %0google · chrome29 Eyl 2026
- CVE-2026-9535738İzleyin
Out of bounds write in GPU in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary
KritikCVSS 9,6İstismar yokEPSS %0google · chrome29 Eyl 2026
- CVE-2026-9536235İzleyin
Cross-site request forgery in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to by
YüksekCVSS 8,8İstismar yokEPSS %0google · chrome29 Eyl 2026
- CVE-2026-9536535İzleyin
Type confusion in IndexedDB in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code inside t
YüksekCVSS 8,8İstismar yokEPSS %0google · chrome29 Eyl 2026
- CVE-2026-9536935İzleyin
Inappropriate implementation in XML in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code
YüksekCVSS 8,8İstismar yokEPSS %0google · chrome29 Eyl 2026
- CVE-2026-9537233İzleyin
Use after free in Chromecast in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to p
YüksekCVSS 8,3İstismar yokEPSS %0google · chrome29 Eyl 2026
- CVE-2026-9537335İzleyin
Use after free in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to execute arbitr
YüksekCVSS 8,8İstismar yokEPSS %0google · chrome29 Eyl 2026
- CVE-2026-9537632İzleyin
Externally controlled reference in DevTools in Google Chrome prior to 154.0.8037.57 allowed an adjacent attacker leveraging social engineeri
YüksekCVSS 8,0İstismar yokEPSS %0google · chrome29 Eyl 2026
- CVE-2026-9538035İzleyin
Type confusion in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to potentially execute
YüksekCVSS 8,8İstismar yokEPSS %0google · chrome29 Eyl 2026
- CVE-2026-9538133İzleyin
Improper input validation in Printing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer pro
YüksekCVSS 8,3İstismar yokEPSS %0google · chrome29 Eyl 2026
- CVE-2026-10282330İzleyin
russh: Client-side channel-scoped Handler callbacks fire for channel IDs the client never opened
YüksekCVSS 7,5İstismar yokEPSS %0eugeny · russh29 Eyl 2026
- CVE-2026-10282632İzleyin
simple-git allows command execution through unblocked Git configuration includes
YüksekCVSS 8,1Kavram kanıtıEPSS %0simple-git project · simple-git29 Eyl 2026
- CVE-2026-10282739İzleyin
simple-git: unsafe-operations plugin bypass via git long-option abbreviation (--receive-p/--exe) -> command execution (residual of CVE-2026-28291)
KritikCVSS 9,8Kavram kanıtıEPSS %0simple-git project · simple-git29 Eyl 2026
- CVE-2026-10282836İzleyin
simple-git unsafe-operation guard does not block trailer command configuration
KritikCVSS 9,2İstismar yokEPSS %0simple-git project · simple-git29 Eyl 2026
- CVE-2026-10282936İzleyin
simple-git: `VISUAL` editor environment variable is omitted from unsafe editor detection
KritikCVSS 9,2İstismar yokEPSS %0steveukx · git-js29 Eyl 2026
- CVE-2026-10283132İzleyin
JupyterLab: Cross-site scripting (XSS) in JupyterLab via notebook cells pasted from the system clipboard
YüksekCVSS 8,1İstismar yokEPSS %0jupyterlab · jupyterlab29 Eyl 2026
- CVE-2024-3102639İzleyin
An issue in Greek Universities Network (GUnet) Open eClass Platform v.3.15 allows a remote attacker to execute arbitrary code via the chat i
KritikCVSS 9,8İstismar yokEPSS %029 Eyl 2026
- CVE-2026-10029137İzleyin
Initialization of a resource with an insecure default in Anjvision YSSD-RTMP-H5
KritikCVSS 9,3İstismar yokEPSS %0anjvision · yssd-rtmp-h529 Eyl 2026
- CVE-2026-10029234İzleyin
Improper neutralization of special elements used in an OS command ('OS command injection') in Anjvision YSSD-RTMP-H5
YüksekCVSS 8,7İstismar yokEPSS %0anjvision · yssd-rtmp-h529 Eyl 2026
- CVE-2026-10029334İzleyin
Improper verification of cryptographic signature in Anjvision YSSD-RTMP-H5
YüksekCVSS 8,7İstismar yokEPSS %0anjvision · yssd-rtmp-h529 Eyl 2026
- CVE-2026-10029434İzleyin
Use of Hard-coded Credentials in Anjvision YSSD-RTMP-H5
YüksekCVSS 8,7İstismar yokEPSS %0anjvision · yssd-rtmp-h529 Eyl 2026
- CVE-2026-10029628İzleyin
Improper Check for Unusual or Exceptional Conditions in Anjvision YSSD-RTMP-H5
YüksekCVSS 7,2İstismar yokEPSS %0anjvision · yssd-rtmp-h529 Eyl 2026
- CVE-2026-10029834İzleyin
Insufficiently Protected Credentials in Anjvision YSSD-RTMP-H5
YüksekCVSS 8,7İstismar yokEPSS %0anjvision · yssd-rtmp-h529 Eyl 2026
- CVE-2026-10029928İzleyin
Use of Weak Credentials in Anjvision YSSD-RTMP-H5
YüksekCVSS 7,0İstismar yokEPSS %0anjvision · yssd-rtmp-h529 Eyl 2026
- CVE-2026-10229935İzleyin
Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr
YüksekCVSS 8,8İstismar yokEPSS %0google · chrome29 Eyl 2026
- CVE-2026-10230133İzleyin
Out of bounds write in GPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to pot
YüksekCVSS 8,3İstismar yokEPSS %0google · chrome29 Eyl 2026
- CVE-2026-10230235İzleyin
Buffer overflow in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a c
YüksekCVSS 8,8İstismar yokEPSS %0google · chrome29 Eyl 2026
- CVE-2026-10230438İzleyin
Use after free in Passwords in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code outside the sandbox
KritikCVSS 9,6İstismar yokEPSS %0google · chrome29 Eyl 2026
- CVE-2026-10230638İzleyin
Use after free in Bluetooth in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to potentially execute arbitrary code outside
KritikCVSS 9,6İstismar yokEPSS %0google · chrome29 Eyl 2026