İçeriğe atla
Noroxi

Yayın tarihine göre

Ekim 2026: sömürülen ve yeni ciddi CVE kayıtları

6.164 kayıt · 12 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 10 / 62

  • CVE-2026-77178
    36İzleyin

    Oracle VM VirtualBox before 7.2.8 allows guest OS users to cause an out-of-bounds write in the host OS in pcnetReceiveNoSync in DevPCNet.cpp

    KritikCVSS 9,1İstismar yokEPSS %0

    6 Eki 2026

  • CVE-2026-85523
    35İzleyin

    OS Command Injection in Felisify Informatics' SambaBox

    YüksekCVSS 8,8İstismar yokEPSS %0

    felisify information technologies industry and trade inc. · sambabox6 Eki 2026

  • CVE-2026-91140
    39İzleyin

    OS command injection in Progress Software Autonomous REST Connector GenAI Agents

    KritikCVSS 9,6İstismar yokEPSS %1

    progress software · autonomous rest connector genai agents6 Eki 2026

  • CVE-2026-104069
    34İzleyin

    HortusFox < 6.2 Remote Code Execution via Theme Import

    YüksekCVSS 8,6İstismar yokEPSS %0

    danielbrendel · hortusfox-web6 Eki 2026

  • CVE-2026-105791
    30İzleyin

    Microsoft UFO: Arbitrary code execution in `run_shell` via `explorer.exe` argument injection

    YüksekCVSS 7,5İstismar yokEPSS %0

    microsoft · ufo6 Eki 2026

  • CVE-2026-105793
    36İzleyin

    Microsoft UFO: Authenticated Android shell command injection in Mobile MCP `press_key`

    KritikCVSS 9,1İstismar yokEPSS %0

    microsoft · ufo6 Eki 2026

  • CVE-2026-105794
    36İzleyin

    MsQuic: Improper Certificate Validation in Microsoft.Native.Quic.MsQuic.OpenSSL

    KritikCVSS 9,1İstismar yokEPSS %1

    microsoft · msquic6 Eki 2026

  • CVE-2026-105796
    35İzleyin

    Kiota: Code injection through doc-comment delimiter reformation in Kiota Java and PHP generators

    YüksekCVSS 8,8İstismar yokEPSS %0

    microsoft · kiota6 Eki 2026

  • CVE-2026-105797
    35İzleyin

    SimpleChat: Command injection via authorization-gate ordering flaw (arbitrary process spawn through MCP stdio transport)

    YüksekCVSS 8,8İstismar yokEPSS %0

    microsoft · simplechat6 Eki 2026

  • CVE-2026-105798
    34İzleyin

    SimpleChat: Stored XSS via group document filename in inline onclick handler

    YüksekCVSS 8,7İstismar yokEPSS %0

    microsoft · simplechat6 Eki 2026

  • CVE-2026-105801
    33İzleyin

    openapi-python-client: Malicious OpenAPI Documents can cause Arbitrary Code Generation

    YüksekCVSS 8,4İstismar yokEPSS %0

    openapi-generators · openapi-python-client6 Eki 2026

  • CVE-2026-54472
    30İzleyin

    Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Use of Hard-coded Credentials vulnerability in the csm-docs.

    YüksekCVSS 7,5İstismar yokEPSS %0

    dell · container storage modules6 Eki 2026

  • CVE-2026-61421
    39İzleyin

    Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Use of Hard-coded Credentials vulnerability in the CSM Authorization

    KritikCVSS 9,8İstismar yokEPSS %0

    dell · container storage modules6 Eki 2026

  • CVE-2026-63688
    40Planlayın

    Dell Container Storage Modules (CSM), versions prior to v1.18.0, contains a Missing Authentication for Critical Function vulnerability in th

    KritikCVSS 10,0İstismar yokEPSS %0

    dell · container storage modules6 Eki 2026

  • CVE-2026-63692
    40Planlayın

    Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authentication for Critical Function vulnerability.

    KritikCVSS 10,0İstismar yokEPSS %0

    dell · container storage modules6 Eki 2026

  • CVE-2026-67269
    39İzleyin

    Dell Container Storage Modules (CSM) Operator, versions prior to 1.18.0 contains an Improper Privilege Management vulnerability in the Conta

    KritikCVSS 9,9İstismar yokEPSS %0

    dell · container storage modules6 Eki 2026

  • CVE-2026-105806
    34İzleyin

    Payload: Improper access control for MCP API keys

    YüksekCVSS 8,6İstismar yokEPSS %0

    payloadcms · payload6 Eki 2026

  • CVE-2026-105844
    37İzleyin

    Payload: Prototype pollution in Payload Import Export plugin

    KritikCVSS 9,3Kavram kanıtıEPSS %0

    payloadcms · payload6 Eki 2026

  • CVE-2026-105845
    39İzleyin

    Payload: SQL Injection in SQLite and Postgres

    KritikCVSS 9,8İstismar yokEPSS %0

    payloadcms · payload6 Eki 2026

  • CVE-2026-105950
    20İzleyin

    getformwork URI Sanitizer DomSanitizer.php sanitizeNodeAttribute cross site scripting

    OrtaCVSS 5,1Kavram kanıtıEPSS %0

    getformwork · formwork6 Eki 2026

  • CVE-2026-26287
    28İzleyin

    External Secrets Operator: label enforcement bypass in webhook generator enables secret exfiltration

    YüksekCVSS 7,1İstismar yokEPSS %0

    external-secrets · external-secrets6 Eki 2026

  • CVE-2026-61411
    30İzleyin

    Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Insertion of Sensitive Information into Log File vulnerability.

    YüksekCVSS 7,7İstismar yokEPSS %0

    dell · container storage modules6 Eki 2026

  • CVE-2026-63690
    29İzleyin

    Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authentication for Critical Function vulnerability in the csi

    YüksekCVSS 7,4İstismar yokEPSS %0

    dell · container storage modules6 Eki 2026

  • CVE-2026-63691
    38İzleyin

    Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authorization vulnerability in the Dell CSI Driver for PowerM

    KritikCVSS 9,6İstismar yokEPSS %0

    dell · container storage modules6 Eki 2026

  • CVE-2026-67270
    29İzleyin

    Dell Container Storage Modules (CSM) versions prior to 1.18.0, contains an Improper Certificate Validation vulnerability in the proxy-server

    YüksekCVSS 7,4İstismar yokEPSS %0

    dell · container storage modules6 Eki 2026

  • CVE-2026-67273
    38İzleyin

    Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Improper Neutralization of Special Elements Used in a Template Engin

    KritikCVSS 9,6İstismar yokEPSS %0

    dell · container storage modules6 Eki 2026

  • CVE-2026-76105
    28İzleyin

    Dell Container Storage Modules, versions prior to 1.18.0 contain(s) an Use of Insufficiently Random Values vulnerability.

    YüksekCVSS 7,1İstismar yokEPSS %0

    dell · container storage modules6 Eki 2026

  • CVE-2025-71383
    39İzleyin

    Dbit WIFI4 N300 1.0.0 devices allow the management interface to be crashed via a request (from the local Wi-Fi network) that lacks a /api/lo

    KritikCVSS 9,8İstismar yokEPSS %0

    6 Eki 2026

  • CVE-2025-71384
    26İzleyin

    Dbit WIFI4 N300 1.0.0 devices allows administrators (from the local Wi-Fi network) to execute OS commands by leveraging a stack-based buffer

    OrtaCVSS 6,7Kavram kanıtıEPSS %0

    6 Eki 2026

  • CVE-2026-104070
    37İzleyin

    SPIP Crayons Plugin < 3.5.0 Authorization Bypass RCE

    KritikCVSS 9,3İstismar yokEPSS %0

    spip · spip crayons plugin6 Eki 2026

  • CVE-2026-104850
    30İzleyin

    MCP TypeScript SDK: OAuth client could send credentials to an authorization server chosen by the MCP server

    YüksekCVSS 7,5İstismar yokEPSS %0

    modelcontextprotocol · typescript-sdk6 Eki 2026

  • CVE-2026-105847
    28İzleyin

    Payload: Polymorphic join queries could disclose hidden fields

    YüksekCVSS 7,1İstismar yokEPSS %0

    payloadcms · payload6 Eki 2026

  • CVE-2026-105849
    30İzleyin

    Payload: API key disclosure through ordinary document reads

    YüksekCVSS 7,7İstismar yokEPSS %0

    payloadcms · payload6 Eki 2026

  • CVE-2026-105850
    35İzleyin

    Payload: Order confirmation validation issue in Payload Ecommerce

    YüksekCVSS 8,8İstismar yokEPSS %0

    payloadcms · payload6 Eki 2026

  • CVE-2026-105851
    37İzleyin

    Payload: Field access control bypass on auth collections

    KritikCVSS 9,3İstismar yokEPSS %0

    payloadcms · payload6 Eki 2026

  • CVE-2026-105853
    28İzleyin

    Payload: Token refresh and password reset responses may expose restricted user fields

    YüksekCVSS 7,1İstismar yokEPSS %0

    payloadcms · payload6 Eki 2026

  • CVE-2026-105854
    34İzleyin

    Payload: ReDoS in Multipart Content-Type Validation

    YüksekCVSS 8,7İstismar yokEPSS %0

    payloadcms · payload6 Eki 2026

  • CVE-2026-105855
    30İzleyin

    Payload: Field-level password update restrictions were not enforced

    YüksekCVSS 7,6İstismar yokEPSS %0

    payloadcms · payload6 Eki 2026

  • CVE-2026-105856
    34İzleyin

    Payload: SQL injection in SQLite/Postgres

    YüksekCVSS 8,6İstismar yokEPSS %0

    payloadcms · payload6 Eki 2026

  • CVE-2026-105857
    40Planlayın

    Payload: RCE in Payload Form Builder

    KritikCVSS 10,0İstismar yokEPSS %0

    payloadcms · payload6 Eki 2026

  • CVE-2026-105858
    32İzleyin

    Payload: Remote Code Execution through first-register

    YüksekCVSS 8,1İstismar yokEPSS %0

    payloadcms · payload6 Eki 2026

  • CVE-2026-105859
    39İzleyin

    Payload: Unauthorized update to collection documents

    KritikCVSS 9,8İstismar yokEPSS %0

    payloadcms · payload6 Eki 2026

  • CVE-2026-105860
    28İzleyin

    Payload: Tenant authorization bypass in Multi-Tenant Plugin

    YüksekCVSS 7,1İstismar yokEPSS %0

    payloadcms · payload6 Eki 2026

  • CVE-2026-105861
    28İzleyin

    Payload external upload trust validation issue

    YüksekCVSS 7,2İstismar yokEPSS %0

    payloadcms · payload6 Eki 2026

  • CVE-2026-105862
    34İzleyin

    Payload: Bypassed sanitization of user uploaded SVGs

    YüksekCVSS 8,7İstismar yokEPSS %0

    payloadcms · payload6 Eki 2026

  • CVE-2026-105863
    36İzleyin

    Payload authentication token field handling issue

    KritikCVSS 9,2İstismar yokEPSS %0

    payloadcms · payload6 Eki 2026

  • CVE-2026-105865
    32İzleyin

    Payload: Incomplete validation during the upload file lifecycle

    YüksekCVSS 8,1İstismar yokEPSS %0

    payloadcms · payload6 Eki 2026

  • CVE-2026-105867
    28İzleyin

    Payload: Client uploads could overwrite S3 objects

    YüksekCVSS 7,1İstismar yokEPSS %0

    payloadcms · payload6 Eki 2026

  • CVE-2026-105868
    34İzleyin

    Payload: Uploaded XML files could execute same-origin JavaScript

    YüksekCVSS 8,6İstismar yokEPSS %0

    payloadcms · payload6 Eki 2026

  • CVE-2026-106100
    28İzleyin

    Payload: Field-level write access bypass in Payload on MongoDB

    YüksekCVSS 7,1İstismar yokEPSS %0

    payloadcms · payload6 Eki 2026

  • CVE-2026-106102
    40Planlayın

    Quasar Framework: Stored/Reflected XSS via unescaped SSR meta tag rendering in getHead()

    KritikCVSS 10,0İstismar yokEPSS %0

    quasarframework · quasar6 Eki 2026

  • CVE-2026-106218
    40Planlayın

    In JetBrains TeamCity before 2026.1.3 2025.11.7 kotlin DSL sandbox escape leading to RCE on the server was possible

    KritikCVSS 10,0İstismar yokEPSS %0

    jetbrains · teamcity6 Eki 2026

  • CVE-2026-106219
    30İzleyin

    In JetBrains TeamCity before 2026.2.1 missing validation of Git submodule URLs allowed reading local repositories on the server

    YüksekCVSS 7,5İstismar yokEPSS %0

    jetbrains · teamcity6 Eki 2026

  • CVE-2026-95140
    30İzleyin

    kkFileView v5.0.0 through v5.0.2 contains a directory traversal vulnerability in FileController.java.

    YüksekCVSS 7,5İstismar yokEPSS %0

    6 Eki 2026

  • CVE-2025-45871
    32İzleyin

    LogicalDOC Enterprise up to and for 9.1.1 is vulnerable to blind SQL injection in the WorkflowsDataServlet component, allowing authenticated

    YüksekCVSS 8,1İstismar yokEPSS %0

    6 Eki 2026

  • CVE-2026-101207
    35İzleyin

    Dell OpenManage Integration with Microsoft Windows Admin Center, versions prior to 3.7.0, contains an Improper Neutralization of Special Ele

    YüksekCVSS 8,8İstismar yokEPSS %1

    dell · openmanage integration6 Eki 2026

  • CVE-2026-106103
    28İzleyin

    Quasar Framework: Path Traversal / Arbitrary File Write via crafted Icon Genie profile

    YüksekCVSS 7,1İstismar yokEPSS %0

    quasarframework · quasar6 Eki 2026

  • CVE-2026-106104
    34İzleyin

    Quasar Framework: Super-linear regex backtracking on User-Agent lets one request stall a Quasar SSR server

    YüksekCVSS 8,7İstismar yokEPSS %0

    quasarframework · quasar6 Eki 2026

  • CVE-2026-106105
    33İzleyin

    Quasar Framework: Development TLS private keys are cached with overly permissive filesystem permissions

    YüksekCVSS 8,4İstismar yokEPSS %0

    quasarframework · quasar6 Eki 2026

  • CVE-2026-106106
    28İzleyin

    Quasar Framework: SSR/SSG dev error page discloses the full shell environment and its </script> escape is bypassable

    YüksekCVSS 7,1İstismar yokEPSS %0

    quasarframework · quasar6 Eki 2026

  • CVE-2026-106107
    33İzleyin

    Quasar Framework: App Vite SSR and SSG nonce attributes are not safely constrained

    YüksekCVSS 8,3İstismar yokEPSS %0

    quasarframework · quasar6 Eki 2026

  • CVE-2026-106110
    30İzleyin

    ImageSharp: TIFF CCITT T4 encoder can write past its compressed output buffer

    YüksekCVSS 7,5İstismar yokEPSS %0

    sixlabors · imagesharp6 Eki 2026

  • CVE-2026-106112
    30İzleyin

    ImageSharp: ICC LUT16 output channel count can write beyond Vector4

    YüksekCVSS 7,5İstismar yokEPSS %0

    sixlabors · imagesharp6 Eki 2026

  • CVE-2026-106113
    30İzleyin

    ImageSharp: HistogramEqualization uses an unvalidated luminance as an unchecked histogram index

    YüksekCVSS 7,5İstismar yokEPSS %0

    sixlabors · imagesharp6 Eki 2026

  • CVE-2026-106115
    30İzleyin

    ImageSharp: TIFF CCITT T6 encoder writes beyond an undersized output buffer

    YüksekCVSS 7,5İstismar yokEPSS %0

    sixlabors · imagesharp6 Eki 2026

  • CVE-2026-106117
    30İzleyin

    ImageSharp: CCITT fax decompression (T4/Modified Huffman): unbounded WriteBits overflows strip buffer — heap OOB write in SixLabors.ImageSharp

    YüksekCVSS 7,5İstismar yokEPSS %0

    sixlabors · imagesharp6 Eki 2026

  • CVE-2026-66666
    27İzleyin

    WordPress Core <= 7.1.2 - Unauthenticated Sensitive Data Exposure of Comments on Private and Unpublished Posts via Comment Feed vulnerability

    OrtaCVSS 6,9İstismar yokEPSS %0

    automattic · wordpress6 Eki 2026

  • CVE-2026-102322
    38İzleyin

    Incorrect Authorization in SiteIsolation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code via a c

    KritikCVSS 9,6İstismar yokEPSS %0

    google · chrome6 Eki 2026

  • CVE-2026-104944
    28İzleyin

    Unauthenticated TDP Function Pointer Dispatch Denial of Service in TP-Link Tapo C500

    YüksekCVSS 7,1Kavram kanıtıEPSS %0

    tp-link systems inc. · tapo c500 v2.06 Eki 2026

  • CVE-2026-104945
    27İzleyin

    Authenticated ONVIF PTZ Out-of-Bounds Stack Write Denial of Service in TP-Link Tapo C500

    OrtaCVSS 6,8Kavram kanıtıEPSS %0

    tp-link systems inc. · tapo c500 v2.06 Eki 2026

  • CVE-2026-105488
    28İzleyin

    Missing authorization in the global vault in Devolutions Server 2026.3.7.0 and earlier allows an authenticated user with only the global vau

    YüksekCVSS 7,1İstismar yokEPSS %0

    devolutions · server6 Eki 2026

  • CVE-2026-106118
    30İzleyin

    ImageSharp: Tiled fax TIFF: tile buffer sized by TileWidth but fax decompressor writes scanlines of ImageWidth — heap OOB write

    YüksekCVSS 7,5İstismar yokEPSS %0

    sixlabors · imagesharp6 Eki 2026

  • CVE-2026-106121
    30İzleyin

    RabbitMQ: JSONReader in the default JSON-RPC mapper never terminates on truncated input, causing DoS

    YüksekCVSS 7,5İstismar yokEPSS %0

    vmware · rabbitmq java client6 Eki 2026

  • CVE-2026-106186
    34İzleyin

    Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to 155.0.8059.39 allowed a local attacker to pot

    YüksekCVSS 8,6İstismar yokEPSS %0

    google · chrome6 Eki 2026

  • CVE-2026-106188
    28İzleyin

    Confused deputy in SignIn in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictio

    YüksekCVSS 7,1İstismar yokEPSS %0

    google · chrome6 Eki 2026

  • CVE-2026-106189
    29İzleyin

    Code injection in ReaderMode in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to by

    YüksekCVSS 7,3İstismar yokEPSS %0

    google · chrome6 Eki 2026

  • CVE-2026-106190
    35İzleyin

    Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a

    YüksekCVSS 8,8İstismar yokEPSS %0

    google · chrome6 Eki 2026

  • CVE-2026-106191
    33İzleyin

    Missing authorization in Actor in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to

    YüksekCVSS 8,3İstismar yokEPSS %0

    google · chrome6 Eki 2026

  • CVE-2026-106193
    35İzleyin

    Use after free in Parser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via

    YüksekCVSS 8,8İstismar yokEPSS %0

    google · chrome6 Eki 2026

  • CVE-2026-106194
    33İzleyin

    Missing authorization in WebAppInstalls in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer p

    YüksekCVSS 8,3İstismar yokEPSS %0

    google · chrome6 Eki 2026

  • CVE-2026-106195
    36İzleyin

    Incorrect authorization in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to bypass system access re

    KritikCVSS 9,1İstismar yokEPSS %0

    google · chrome6 Eki 2026

  • CVE-2026-106196
    30İzleyin

    Missing authorization in Navigation in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy

    YüksekCVSS 7,6İstismar yokEPSS %0

    google · chrome6 Eki 2026

  • CVE-2026-106197
    38İzleyin

    Use after free in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox vi

    KritikCVSS 9,6İstismar yokEPSS %0

    google · chrome6 Eki 2026

  • CVE-2026-106198
    32İzleyin

    Missing authorization in FileSystem in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer proce

    YüksekCVSS 8,2İstismar yokEPSS %0

    google · chrome6 Eki 2026

  • CVE-2026-106199
    32İzleyin

    Incorrect authorization in Actor in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the ren

    YüksekCVSS 8,2İstismar yokEPSS %0

    google · chrome6 Eki 2026

  • CVE-2026-106200
    35İzleyin

    Use after free in Track in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a

    YüksekCVSS 8,8İstismar yokEPSS %0

    google · chrome6 Eki 2026

  • CVE-2026-106201
    35İzleyin

    Race condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr

    YüksekCVSS 8,8İstismar yokEPSS %0

    google · chrome6 Eki 2026

  • CVE-2026-106203
    35İzleyin

    Incomplete cleanup in Autofill in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to

    YüksekCVSS 8,8İstismar yokEPSS %0

    google · chrome6 Eki 2026

  • CVE-2026-106204
    35İzleyin

    Use after free in PDF in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a c

    YüksekCVSS 8,8İstismar yokEPSS %0

    google · chrome6 Eki 2026

  • CVE-2026-106205
    32İzleyin

    Missing authorization in Passwords in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the r

    YüksekCVSS 8,1İstismar yokEPSS %0

    google · chrome6 Eki 2026

  • CVE-2026-106207
    35İzleyin

    Race condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr

    YüksekCVSS 8,8İstismar yokEPSS %0

    google · chrome6 Eki 2026

  • CVE-2026-106211
    38İzleyin

    Use after free in TabStrip in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially ex

    KritikCVSS 9,6İstismar yokEPSS %0

    google · chrome6 Eki 2026

  • CVE-2026-106212
    35İzleyin

    Incorrect authorization in Autofill in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtai

    YüksekCVSS 8,8İstismar yokEPSS %0

    google · chrome6 Eki 2026

  • CVE-2026-106220
    35İzleyin

    Information leak in Passwords in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafte

    YüksekCVSS 8,8İstismar yokEPSS %0

    google · chrome6 Eki 2026

  • CVE-2026-106221
    33İzleyin

    Confused deputy in WebAPKs in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to

    YüksekCVSS 8,3İstismar yokEPSS %0

    google · chrome6 Eki 2026

  • CVE-2026-106225
    35İzleyin

    Missing authorization in Autofill in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain

    YüksekCVSS 8,8İstismar yokEPSS %0

    google · chrome6 Eki 2026

  • CVE-2026-106227
    38İzleyin

    Use after free in Core in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a

    KritikCVSS 9,6İstismar yokEPSS %0

    google · chrome6 Eki 2026

  • CVE-2026-106228
    33İzleyin

    Confused deputy in Google Lens in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to

    YüksekCVSS 8,3İstismar yokEPSS %0

    google · chrome6 Eki 2026

  • CVE-2026-106233
    33İzleyin

    Use after free in Metrics in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to exec

    YüksekCVSS 8,3İstismar yokEPSS %0

    google · chrome6 Eki 2026

  • CVE-2026-106234
    38İzleyin

    Use after free in Network in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially exe

    KritikCVSS 9,6İstismar yokEPSS %0

    google · chrome6 Eki 2026

Ekim 2026: sömürülen ve yeni ciddi CVE kayıtları · sayfa 10 — Noroxi