Yayın tarihine göre

Ekim 2026: sömürülen ve yeni ciddi CVE kayıtları

6.225 kayıt · 12 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 11 / 63

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
35İzleyin	CVE-2026-106235İstismar yok	Use after free in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox vigoogle · chrome · CWE-416 Girişsiz RCE Bellek hatası	Yüksek8,8	—	%0,3	6 Eki 2026
38İzleyin	CVE-2026-106237İstismar yok	Information leak in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass site isolation via a crafted HTMgoogle · chrome · CWE-200 Kimlik doğrulamasız Bilgi sızıntısı	Kritik9,6	—	%0,2	6 Eki 2026
33İzleyin	CVE-2026-106238İstismar yok	Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentgoogle · chrome · CWE-362 Girişsiz RCE Yarış durumu	Yüksek8,3	—	%0,2	6 Eki 2026
38İzleyin	CVE-2026-106239İstismar yok	Integer overflow in WebGL in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary cgoogle · chrome · CWE-190 Girişsiz RCE Bellek hatası	Kritik9,6	—	%0,4	6 Eki 2026
35İzleyin	CVE-2026-106240İstismar yok	Type confusion in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crgoogle · chrome · CWE-843 Girişsiz RCE	Yüksek8,8	—	%0,4	6 Eki 2026
38İzleyin	CVE-2026-106241İstismar yok	Incorrect authorization in Search in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineergoogle · chrome · CWE-863 Girişsiz RCE Erişim denetimi (IDOR)	Kritik9,6	—	%0,3	6 Eki 2026
33İzleyin	CVE-2026-106247İstismar yok	Buffer overflow in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potengoogle · chrome · CWE-122 Girişsiz RCE Bellek hatası	Yüksek8,3	—	%0,3	6 Eki 2026
35İzleyin	CVE-2026-106248İstismar yok	Use after free in Bindings in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox vigoogle · chrome · CWE-416 Girişsiz RCE Bellek hatası	Yüksek8,8	—	%0,3	6 Eki 2026
35İzleyin	CVE-2026-106249İstismar yok	Incorrect authorization in Autofill in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive infogoogle · chrome · CWE-863 Kimlik doğrulamasız Erişim denetimi (IDOR)	Yüksek8,8	—	%0,2	6 Eki 2026
35İzleyin	CVE-2026-106252İstismar yok	Incorrect comparison in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code insidegoogle · chrome · CWE-697 Girişsiz RCE	Yüksek8,8	—	%0,3	6 Eki 2026
35İzleyin	CVE-2026-106255İstismar yok	Race condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code inside the sandgoogle · chrome · CWE-362 Girişsiz RCE Yarış durumu	Yüksek8,8	—	%0,2	6 Eki 2026
35İzleyin	CVE-2026-106256İstismar yok	Information leak in Passwords in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering google · chrome · CWE-200 Kimlik doğrulamasız Bilgi sızıntısı	Yüksek8,8	—	%0,2	6 Eki 2026
35İzleyin	CVE-2026-106257İstismar yok	Use after free in HTML in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a google · chrome · CWE-416 Girişsiz RCE Bellek hatası	Yüksek8,8	—	%0,3	6 Eki 2026
35İzleyin	CVE-2026-106268İstismar yok	Use after free in WebRTC in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via google · chrome · CWE-416 Girişsiz RCE Bellek hatası	Yüksek8,8	—	%0,3	6 Eki 2026
35İzleyin	CVE-2026-106269İstismar yok	Use after free in CSS in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a cgoogle · chrome · CWE-416 Girişsiz RCE Bellek hatası	Yüksek8,8	—	%0,3	6 Eki 2026
32İzleyin	CVE-2026-106271İstismar yok	Missing authorization in Workers in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process google · chrome · CWE-862 Erişim denetimi (IDOR)	Yüksek8,1	—	%0,2	6 Eki 2026
35İzleyin	CVE-2026-106274İstismar yok	Incorrect reference resolution in Browser in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker leveraging social engigoogle · chrome · CWE-706 Kimlik doğrulamasız	Yüksek8,8	—	%0,2	6 Eki 2026
35İzleyin	CVE-2026-106278İstismar yok	Use after free in Select in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to execute arbitrargoogle · chrome · CWE-416 Girişsiz RCE Bellek hatası	Yüksek8,8	—	%0,3	6 Eki 2026
29İzleyin	CVE-2026-106279İstismar yok	Incorrect reference resolution in Passwords in Google Chrome on on iOS prior to 155.0.8059.39 allowed a local attacker who had compromised tgoogle · chrome · CWE-706 RCE	Yüksek7,4	—	%0,0	6 Eki 2026
38İzleyin	CVE-2026-106281İstismar yok	Use after free in Tint in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sgoogle · chrome · CWE-416 Girişsiz RCE Bellek hatası	Kritik9,6	—	%0,3	6 Eki 2026
35İzleyin	CVE-2026-106283İstismar yok	Use after free in Streaming in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially egoogle · chrome · CWE-416 Girişsiz RCE Bellek hatası	Yüksek8,8	—	%0,3	6 Eki 2026
35İzleyin	CVE-2026-106291İstismar yok	Use after free in GarbageCollection in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sgoogle · chrome · CWE-416 Girişsiz RCE Bellek hatası	Yüksek8,8	—	%0,3	6 Eki 2026
33İzleyin	CVE-2026-106292İstismar yok	Buffer overflow in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potengoogle · chrome · CWE-122 Girişsiz RCE Bellek hatası	Yüksek8,3	—	%0,3	6 Eki 2026
33İzleyin	CVE-2026-106293İstismar yok	Type confusion in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentgoogle · chrome · CWE-843 Girişsiz RCE	Yüksek8,3	—	%0,3	6 Eki 2026
36İzleyin	CVE-2026-106294İstismar yok	Incomplete cleanup in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to bypass system access restricgoogle · chrome · CWE-459 Kimlik doğrulamasız	Kritik9,1	—	%0,3	6 Eki 2026
38İzleyin	CVE-2026-106298İstismar yok	Use after free in Chrome Tabs in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary cgoogle · chrome · CWE-416 Girişsiz RCE Bellek hatası	Kritik9,6	—	%0,3	6 Eki 2026
32İzleyin	CVE-2026-106301İstismar yok	Confused deputy in Contextual Tasks in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer procegoogle · chrome · CWE-441 Kimlik doğrulamasız	Yüksek8,1	—	%0,2	6 Eki 2026
35İzleyin	CVE-2026-106308İstismar yok	Incorrect reference resolution in Autofill in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging socialgoogle · chrome · CWE-706 Kimlik doğrulamasız	Yüksek8,8	—	%0,2	6 Eki 2026
35İzleyin	CVE-2026-106309İstismar yok	Incorrect authorization in Selection in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive informagoogle · chrome · CWE-863 Kimlik doğrulamasız Erişim denetimi (IDOR)	Yüksek8,8	—	%0,2	6 Eki 2026
35İzleyin	CVE-2026-106314İstismar yok	Incorrect authorization in Bluetooth in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via agoogle · chrome · CWE-863 Kimlik doğrulamasız Erişim denetimi (IDOR)	Yüksek8,8	—	%0,2	6 Eki 2026
35İzleyin	CVE-2026-106315İstismar yok	Use after free in Modularization in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandgoogle · chrome · CWE-416 Girişsiz RCE Bellek hatası	Yüksek8,8	—	%0,3	6 Eki 2026
35İzleyin	CVE-2026-106318İstismar yok	Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via agoogle · chrome · CWE-416 Girişsiz RCE Bellek hatası	Yüksek8,8	—	%0,3	6 Eki 2026
38İzleyin	CVE-2026-106323İstismar yok	Missing authorization in Chrome for iOS in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social enginegoogle · chrome · CWE-862 Girişsiz RCE Erişim denetimi (IDOR)	Kritik9,6	—	%0,3	6 Eki 2026
38İzleyin	CVE-2026-106329İstismar yok	Incorrect authorization in FileSystem in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potgoogle · chrome · CWE-863 Girişsiz RCE Erişim denetimi (IDOR)	Kritik9,6	—	%0,3	6 Eki 2026
35İzleyin	CVE-2026-106334İstismar yok	Information leak in Payments in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensigoogle · chrome · CWE-200 Kimlik doğrulamasız Bilgi sızıntısı	Yüksek8,8	—	%0,2	6 Eki 2026
35İzleyin	CVE-2026-106335İstismar yok	Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via agoogle · chrome · CWE-416 Girişsiz RCE Bellek hatası	Yüksek8,8	—	%0,3	6 Eki 2026
35İzleyin	CVE-2026-106341İstismar yok	Type confusion in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code inside the sandgoogle · chrome · CWE-843 Girişsiz RCE	Yüksek8,8	—	%0,3	6 Eki 2026
35İzleyin	CVE-2026-106342İstismar yok	Information leak in Autofill in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a craftedgoogle · chrome · CWE-200 Kimlik doğrulamasız Bilgi sızıntısı	Yüksek8,8	—	%0,2	6 Eki 2026
35İzleyin	CVE-2026-106346İstismar yok	Improper state validation in DevTools in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary codgoogle · chrome · CWE-754 Girişsiz RCE	Yüksek8,8	—	%0,3	6 Eki 2026
35İzleyin	CVE-2026-106347İstismar yok	Use after free in Track in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via agoogle · chrome · CWE-416 Girişsiz RCE Bellek hatası	Yüksek8,8	—	%0,3	6 Eki 2026
35İzleyin	CVE-2026-106349İstismar yok	Use after free in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crgoogle · chrome · CWE-416 Girişsiz RCE Bellek hatası	Yüksek8,8	—	%0,3	6 Eki 2026
35İzleyin	CVE-2026-106350İstismar yok	Incorrect authorization in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a cgoogle · chrome · CWE-863 Kimlik doğrulamasız Erişim denetimi (IDOR)	Yüksek8,8	—	%0,2	6 Eki 2026
35İzleyin	CVE-2026-106352İstismar yok	Incorrect authorization in WebProtect in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtgoogle · chrome · CWE-863 Kimlik doğrulamasız Erişim denetimi (IDOR)	Yüksek8,8	—	%0,3	6 Eki 2026
35İzleyin	CVE-2026-106357İstismar yok	Use after free in WebRTC in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via google · chrome · CWE-416 Girişsiz RCE Bellek hatası	Yüksek8,8	—	%0,5	6 Eki 2026
38İzleyin	CVE-2026-106358İstismar yok	Use after free in Navigation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandboxgoogle · chrome · CWE-416 Girişsiz RCE Bellek hatası	Kritik9,6	—	%0,4	6 Eki 2026
33İzleyin	CVE-2026-106363İstismar yok	Missing authorization in FullScreen in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer procegoogle · chrome · CWE-862 Kimlik doğrulamasız Erişim denetimi (IDOR)	Yüksek8,3	—	%0,2	6 Eki 2026
33İzleyin	CVE-2026-106367İstismar yok	Missing authorization in Mobile in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker leveraging social engineeringgoogle · chrome · CWE-862 RCE Erişim denetimi (IDOR)	Yüksek8,4	—	%0,0	6 Eki 2026
35İzleyin	CVE-2026-106371İstismar yok	Incorrect authorization in Transactions Platform in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to obtain sgoogle · chrome · CWE-863 Kimlik doğrulamasız Erişim denetimi (IDOR)	Yüksek8,8	—	%0,2	6 Eki 2026
38İzleyin	CVE-2026-106372İstismar yok	Incorrect authorization in UI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outsidgoogle · chrome · CWE-863 Girişsiz RCE Erişim denetimi (IDOR)	Kritik9,6	—	%0,3	6 Eki 2026
35İzleyin	CVE-2026-106373İstismar yok	Use after free in Fonts in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside thegoogle · chrome · CWE-416 Girişsiz RCE Bellek hatası	Yüksek8,8	—	%0,3	6 Eki 2026
35İzleyin	CVE-2026-106374İstismar yok	Type confusion in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crgoogle · chrome · CWE-843 Girişsiz RCE	Yüksek8,8	—	%0,3	6 Eki 2026
38İzleyin	CVE-2026-106375İstismar yok	Incomplete cleanup in Dawn in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside tgoogle · chrome · CWE-459 Girişsiz RCE	Kritik9,6	—	%0,4	6 Eki 2026
33İzleyin	CVE-2026-106377İstismar yok	Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to executgoogle · chrome · CWE-362 Girişsiz RCE Yarış durumu	Yüksek8,3	—	%0,2	6 Eki 2026
33İzleyin	CVE-2026-106378İstismar yok	Privilege elevation in Sandbox in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer google · chrome · CWE-250 Girişsiz RCE	Yüksek8,3	—	%0,3	6 Eki 2026
38İzleyin	CVE-2026-106382İstismar yok	Use after free in Chromecast in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandboxgoogle · chrome · CWE-416 Girişsiz RCE Bellek hatası	Kritik9,6	—	%0,3	6 Eki 2026
35İzleyin	CVE-2026-106383İstismar yok	Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via agoogle · chrome · CWE-416 Girişsiz RCE Bellek hatası	Yüksek8,8	—	%0,3	6 Eki 2026
35İzleyin	CVE-2026-106387İstismar yok	Missing authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering togoogle · chrome · CWE-862 Kimlik doğrulamasız Erişim denetimi (IDOR)	Yüksek8,8	—	%0,3	6 Eki 2026
33İzleyin	CVE-2026-106393İstismar yok	Use after free in Storage in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execgoogle · chrome · CWE-416 Girişsiz RCE Bellek hatası	Yüksek8,3	—	%0,2	6 Eki 2026
38İzleyin	CVE-2026-106401İstismar yok	Out of bounds write in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outsidegoogle · chrome · CWE-787 Girişsiz RCE Bellek hatası	Kritik9,6	—	%0,3	6 Eki 2026
32İzleyin	CVE-2026-106403İstismar yok	Incorrect authorization in Accessibility in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer google · chrome · CWE-863 Kimlik doğrulamasız Erişim denetimi (IDOR)	Yüksek8,1	—	%0,2	6 Eki 2026
33İzleyin	CVE-2026-106409İstismar yok	Incorrect reference resolution in WebAppInstalls in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had compromgoogle · chrome · CWE-706 Girişsiz RCE	Yüksek8,3	—	%0,2	6 Eki 2026
35İzleyin	CVE-2026-106411İstismar yok	Use after free in Parser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via google · chrome · CWE-416 Girişsiz RCE Bellek hatası	Yüksek8,8	—	%0,3	6 Eki 2026
33İzleyin	CVE-2026-106412İstismar yok	Race condition in Core in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process google · chrome · CWE-367 Girişsiz RCE Yarış durumu	Yüksek8,3	—	%0,2	6 Eki 2026
38İzleyin	CVE-2026-106414İstismar yok	Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineeringoogle · chrome · CWE-20 Girişsiz RCE	Kritik9,6	—	%0,3	6 Eki 2026
38İzleyin	CVE-2026-106417İstismar yok	Integer overflow in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside thgoogle · chrome · CWE-190 Girişsiz RCE Bellek hatası	Kritik9,6	—	%0,3	6 Eki 2026
38İzleyin	CVE-2026-106419İstismar yok	Use after free in ANGLE in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside thgoogle · chrome · CWE-416 Girişsiz RCE Bellek hatası	Kritik9,6	—	%0,3	6 Eki 2026
35İzleyin	CVE-2026-106421İstismar yok	Use after free in PDF in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a cgoogle · chrome · CWE-416 Girişsiz RCE Bellek hatası	Yüksek8,8	—	%0,3	6 Eki 2026
35İzleyin	CVE-2026-106423İstismar yok	Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via agoogle · chrome · CWE-416 Girişsiz RCE Bellek hatası	Yüksek8,8	—	%0,3	6 Eki 2026
33İzleyin	CVE-2026-106426İstismar yok	Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the google · chrome · CWE-362 Girişsiz RCE Yarış durumu	Yüksek8,3	—	%0,2	6 Eki 2026
34İzleyin	CVE-2026-106439İstismar yok	Hydra: Mutable instantiate policy sets allow target blocklist bypasshydra-ecosystem · hydra · CWE-470 Yerel yetki yükseltme	Yüksek8,5	—	%0,4	6 Eki 2026
31İzleyin	CVE-2026-106440İstismar yok	Hydra: Optuna custom_search_space can resolve and execute untrusted callables via get_methodhydra-ecosystem · hydra · CWE-470 Yerel yetki yükseltme	Yüksek7,8	—	%0,2	6 Eki 2026
31İzleyin	CVE-2026-106441İstismar yok	Hydra logging configuration permits unsafe callable resolutionhydra-ecosystem · hydra · CWE-94 RCE Yerel yetki yükseltme	Yüksek7,8	—	%0,1	6 Eki 2026
31İzleyin	CVE-2026-106442İstismar yok	Hydra instantiate target blacklist bypasses permit code executionhydra-ecosystem · hydra · CWE-184 Deserializasyon Yerel yetki yükseltme	Yüksek7,8	—	%0,1	6 Eki 2026
35İzleyin	CVE-2026-106443İstismar yok	WeasyPrint: EPS images reach the Ghostscript interpreter resulting in RCEkozea · weasyprint · CWE-20 RCE	Yüksek8,8	—	%0,6	6 Eki 2026
39İzleyin	CVE-2026-106511İstismar yok	MultiversX's multisig-improved (repository: mx-multisig-and-modules) reference implementation of their on-chain multisig smart contract systmultiversx labs s.r.l. · multisig-improved · CWE-306 Kimlik doğrulamasız Kimlik doğrulama atlatma	Kritik9,8	—	%0,3	6 Eki 2026
33İzleyin	CVE-2026-106512İstismar yok	MISP sachertortephp - CakeResponse::download() HTTP Response Splitting via Unsanitized Filename Enables Stored XSSmisp · sachertortephp · CWE-20 XSS	Yüksek8,4	—	%0,3	6 Eki 2026
39İzleyin	CVE-2026-55330İstismar yok	In BluetoothCccHandlerCallbackImpl of bluetooth_ccc.cc, there is a possible use-after-free due to a logic error in the code.google · android · CWE-416 Girişsiz RCE Bellek hatası	Kritik9,8	—	%0,2	6 Eki 2026
28İzleyin	CVE-2026-56906İstismar yok	In ep_free of eventpoll.c, there is a possible use-after-free due to a race condition.google · android · CWE-362 Yerel yetki yükseltme Yarış durumu	Yüksek7,0	—	%0,0	6 Eki 2026
28İzleyin	CVE-2026-63697İstismar yok	Dell System Update, versions prior to 2.3.0.0, contains an Improper Certificate Validation vulnerability.dell · system update · CWE-295 Zayıf kripto	Yüksek7,2	—	%0,2	6 Eki 2026
31İzleyin	CVE-2026-71168İstismar yok	Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vudell · system update · CWE-22 Yol geçişi Yerel yetki yükseltme	Yüksek7,8	—	%0,2	6 Eki 2026
39İzleyin	CVE-2026-82162İstismar yok	Dell Command \| Configure (DCC), versions prior to 5.2.3.35, contain an Improper Handling of Mixed Encoding vulnerability.dell · command\|configure · CWE-175 Kimlik doğrulamasız	Kritik9,8	—	%0,3	6 Eki 2026
28İzleyin	CVE-2026-83550İstismar yok	Postgres-exporter: net/http/pprof exposed on metrics listenerred hat · multicluster global hub · CWE-489 Kimlik doğrulamasız	Yüksek7,1	—	%0,2	6 Eki 2026
38İzleyin	CVE-2026-86360İstismar yok	Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vudell · system update · CWE-22 Girişsiz RCE Yol geçişi	Kritik9,6	—	%0,6	6 Eki 2026
32İzleyin	CVE-2026-86361İstismar yok	Dell System Update, versions prior to 2.3.0.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability.dell · system update · CWE-732 Yerel yetki yükseltme	Yüksek8,2	—	%0,1	6 Eki 2026
32İzleyin	CVE-2026-86362İstismar yok	Dell System Update, versions prior to 2.3.0.0, contains an Improper Access Control vulnerability.dell · system update · CWE-284 Yerel yetki yükseltme Erişim denetimi (IDOR)	Yüksek8,2	—	%0,1	6 Eki 2026
34İzleyin	CVE-2026-96890İstismar yok	Server-Side Request Forgery vulnerability was identified in GitHub Enterprise Server that allowed requests to attacker-controlled internal hostsgithub · enterprise server · CWE-918 RCE SSRF	Yüksek8,7	—	%0,4	6 Eki 2026
30İzleyin	CVE-2026-101027İstismar yok	Gitea migration SSRF through ALLOWED_DOMAINS address check bypassgitea · gitea · CWE-346 SSRF	Yüksek7,7	—	%0,1	6 Eki 2026
30İzleyin	CVE-2026-101152İstismar yok	Security Advisory 0187arista networks · cloudvision portal · CWE-601 Kimlik doğrulamasız Açık yönlendirme	Yüksek7,6	—	%0,3	6 Eki 2026
28İzleyin	CVE-2026-101153İstismar yok	Security Advisory 0188arista networks · cloudvision portal · CWE-22 Yol geçişi	Yüksek7,2	—	%0,3	6 Eki 2026
34İzleyin	CVE-2026-101154İstismar yok	Security Advisory 0189arista networks · cloudvision portal · CWE-22 Yol geçişi	Yüksek8,6	—	%0,5	6 Eki 2026
34İzleyin	CVE-2026-101155İstismar yok	Security Advisory 0189arista networks · cloudvision portal · CWE-22 Yol geçişi	Yüksek8,6	—	%0,5	6 Eki 2026
37İzleyin	CVE-2026-101157İstismar yok	Security Advisory 0192arista networks · cloudvision cue · CWE-79 Kimlik doğrulamasız XSS	Kritik9,3	—	%0,2	6 Eki 2026
37İzleyin	CVE-2026-101158İstismar yok	Security Advisory 0185arista networks · cloudvision portal · CWE-79 XSS	Kritik9,3	—	%0,2	6 Eki 2026
28İzleyin	CVE-2026-102155İstismar yok	Security Advisory 0190arista networks · cloudvision cue · CWE-611 XXE	Yüksek7,1	—	%0,3	6 Eki 2026
28İzleyin	CVE-2026-102158İstismar yok	Security Advisory 0190arista networks · cloudvision cue · CWE-74 SQL enjeksiyonu	Yüksek7,1	—	%0,2	6 Eki 2026
37İzleyin	CVE-2026-102159İstismar yok	Security Advisory 0190arista networks · cloudvision cue · CWE-306 Kimlik doğrulamasız Kimlik doğrulama atlatma	Kritik9,3	—	%0,3	6 Eki 2026
34İzleyin	CVE-2026-102160İstismar yok	Security Advisory 0190arista networks · cloudvision cue · CWE-78 RCE Komut enjeksiyonu	Yüksek8,6	—	%1,3	6 Eki 2026
34İzleyin	CVE-2026-102161İstismar yok	Security Advisory 0190arista networks · cloudvision cue · CWE-290 Kimlik doğrulamasız Kimlik doğrulama atlatma	Yüksek8,7	—	%0,2	6 Eki 2026
37İzleyin	CVE-2026-102162İstismar yok	Security Advisory 0193arista networks · wi-fi access points · CWE-121 Girişsiz RCE Bellek hatası	Kritik9,4	—	%0,2	6 Eki 2026
34İzleyin	CVE-2026-102163İstismar yok	Security Advisory 0195arista networks · wi-fi access points · CWE-787 Girişsiz RCE Bellek hatası	Yüksek8,7	—	%0,3	6 Eki 2026

CVE-2026-106235
35İzleyin
Use after free in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox vi
YüksekCVSS 8,8İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
google · chrome6 Eki 2026
CVE-2026-106237
38İzleyin
Information leak in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass site isolation via a crafted HTM
KritikCVSS 9,6İstismar yokEPSS %0
- Kimlik doğrulamasız
- Bilgi sızıntısı
google · chrome6 Eki 2026
CVE-2026-106238
33İzleyin
Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potent
YüksekCVSS 8,3İstismar yokEPSS %0
- Girişsiz RCE
- Yarış durumu
google · chrome6 Eki 2026
CVE-2026-106239
38İzleyin
Integer overflow in WebGL in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary c
KritikCVSS 9,6İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
google · chrome6 Eki 2026
CVE-2026-106240
35İzleyin
Type confusion in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr
YüksekCVSS 8,8İstismar yokEPSS %0
- Girişsiz RCE
google · chrome6 Eki 2026
CVE-2026-106241
38İzleyin
Incorrect authorization in Search in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineer
KritikCVSS 9,6İstismar yokEPSS %0
- Girişsiz RCE
- Erişim denetimi (IDOR)
google · chrome6 Eki 2026
CVE-2026-106247
33İzleyin
Buffer overflow in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to poten
YüksekCVSS 8,3İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
google · chrome6 Eki 2026
CVE-2026-106248
35İzleyin
Use after free in Bindings in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox vi
YüksekCVSS 8,8İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
google · chrome6 Eki 2026
CVE-2026-106249
35İzleyin
Incorrect authorization in Autofill in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive info
YüksekCVSS 8,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
google · chrome6 Eki 2026
CVE-2026-106252
35İzleyin
Incorrect comparison in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code inside
YüksekCVSS 8,8İstismar yokEPSS %0
- Girişsiz RCE
google · chrome6 Eki 2026
CVE-2026-106255
35İzleyin
Race condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code inside the sand
YüksekCVSS 8,8İstismar yokEPSS %0
- Girişsiz RCE
- Yarış durumu
google · chrome6 Eki 2026
CVE-2026-106256
35İzleyin
Information leak in Passwords in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering
YüksekCVSS 8,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- Bilgi sızıntısı
google · chrome6 Eki 2026
CVE-2026-106257
35İzleyin
Use after free in HTML in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a
YüksekCVSS 8,8İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
google · chrome6 Eki 2026
CVE-2026-106268
35İzleyin
Use after free in WebRTC in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via
YüksekCVSS 8,8İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
google · chrome6 Eki 2026
CVE-2026-106269
35İzleyin
Use after free in CSS in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a c
YüksekCVSS 8,8İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
google · chrome6 Eki 2026
CVE-2026-106271
32İzleyin
Missing authorization in Workers in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process
YüksekCVSS 8,1İstismar yokEPSS %0
- Erişim denetimi (IDOR)
google · chrome6 Eki 2026
CVE-2026-106274
35İzleyin
Incorrect reference resolution in Browser in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker leveraging social engi
YüksekCVSS 8,8İstismar yokEPSS %0
- Kimlik doğrulamasız
google · chrome6 Eki 2026
CVE-2026-106278
35İzleyin
Use after free in Select in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to execute arbitrar
YüksekCVSS 8,8İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
google · chrome6 Eki 2026
CVE-2026-106279
29İzleyin
Incorrect reference resolution in Passwords in Google Chrome on on iOS prior to 155.0.8059.39 allowed a local attacker who had compromised t
YüksekCVSS 7,4İstismar yokEPSS %0
- RCE
google · chrome6 Eki 2026
CVE-2026-106281
38İzleyin
Use after free in Tint in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the s
KritikCVSS 9,6İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
google · chrome6 Eki 2026
CVE-2026-106283
35İzleyin
Use after free in Streaming in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially e
YüksekCVSS 8,8İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
google · chrome6 Eki 2026
CVE-2026-106291
35İzleyin
Use after free in GarbageCollection in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the s
YüksekCVSS 8,8İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
google · chrome6 Eki 2026
CVE-2026-106292
33İzleyin
Buffer overflow in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to poten
YüksekCVSS 8,3İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
google · chrome6 Eki 2026
CVE-2026-106293
33İzleyin
Type confusion in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potent
YüksekCVSS 8,3İstismar yokEPSS %0
- Girişsiz RCE
google · chrome6 Eki 2026
CVE-2026-106294
36İzleyin
Incomplete cleanup in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to bypass system access restric
KritikCVSS 9,1İstismar yokEPSS %0
- Kimlik doğrulamasız
google · chrome6 Eki 2026
CVE-2026-106298
38İzleyin
Use after free in Chrome Tabs in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary c
KritikCVSS 9,6İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
google · chrome6 Eki 2026
CVE-2026-106301
32İzleyin
Confused deputy in Contextual Tasks in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer proce
YüksekCVSS 8,1İstismar yokEPSS %0
- Kimlik doğrulamasız
google · chrome6 Eki 2026
CVE-2026-106308
35İzleyin
Incorrect reference resolution in Autofill in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social
YüksekCVSS 8,8İstismar yokEPSS %0
- Kimlik doğrulamasız
google · chrome6 Eki 2026
CVE-2026-106309
35İzleyin
Incorrect authorization in Selection in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive informa
YüksekCVSS 8,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
google · chrome6 Eki 2026
CVE-2026-106314
35İzleyin
Incorrect authorization in Bluetooth in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a
YüksekCVSS 8,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
google · chrome6 Eki 2026
CVE-2026-106315
35İzleyin
Use after free in Modularization in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sand
YüksekCVSS 8,8İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
google · chrome6 Eki 2026
CVE-2026-106318
35İzleyin
Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a
YüksekCVSS 8,8İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
google · chrome6 Eki 2026
CVE-2026-106323
38İzleyin
Missing authorization in Chrome for iOS in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engine
KritikCVSS 9,6İstismar yokEPSS %0
- Girişsiz RCE
- Erişim denetimi (IDOR)
google · chrome6 Eki 2026
CVE-2026-106329
38İzleyin
Incorrect authorization in FileSystem in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to pot
KritikCVSS 9,6İstismar yokEPSS %0
- Girişsiz RCE
- Erişim denetimi (IDOR)
google · chrome6 Eki 2026
CVE-2026-106334
35İzleyin
Information leak in Payments in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensi
YüksekCVSS 8,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- Bilgi sızıntısı
google · chrome6 Eki 2026
CVE-2026-106335
35İzleyin
Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a
YüksekCVSS 8,8İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
google · chrome6 Eki 2026
CVE-2026-106341
35İzleyin
Type confusion in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code inside the sand
YüksekCVSS 8,8İstismar yokEPSS %0
- Girişsiz RCE
google · chrome6 Eki 2026
CVE-2026-106342
35İzleyin
Information leak in Autofill in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted
YüksekCVSS 8,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- Bilgi sızıntısı
google · chrome6 Eki 2026
CVE-2026-106346
35İzleyin
Improper state validation in DevTools in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary cod
YüksekCVSS 8,8İstismar yokEPSS %0
- Girişsiz RCE
google · chrome6 Eki 2026
CVE-2026-106347
35İzleyin
Use after free in Track in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a
YüksekCVSS 8,8İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
google · chrome6 Eki 2026
CVE-2026-106349
35İzleyin
Use after free in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr
YüksekCVSS 8,8İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
google · chrome6 Eki 2026
CVE-2026-106350
35İzleyin
Incorrect authorization in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a c
YüksekCVSS 8,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
google · chrome6 Eki 2026
CVE-2026-106352
35İzleyin
Incorrect authorization in WebProtect in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obt
YüksekCVSS 8,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
google · chrome6 Eki 2026
CVE-2026-106357
35İzleyin
Use after free in WebRTC in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via
YüksekCVSS 8,8İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
google · chrome6 Eki 2026
CVE-2026-106358
38İzleyin
Use after free in Navigation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox
KritikCVSS 9,6İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
google · chrome6 Eki 2026
CVE-2026-106363
33İzleyin
Missing authorization in FullScreen in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer proce
YüksekCVSS 8,3İstismar yokEPSS %0
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
google · chrome6 Eki 2026
CVE-2026-106367
33İzleyin
Missing authorization in Mobile in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker leveraging social engineering
YüksekCVSS 8,4İstismar yokEPSS %0
- RCE
- Erişim denetimi (IDOR)
google · chrome6 Eki 2026
CVE-2026-106371
35İzleyin
Incorrect authorization in Transactions Platform in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to obtain s
YüksekCVSS 8,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
google · chrome6 Eki 2026
CVE-2026-106372
38İzleyin
Incorrect authorization in UI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outsid
KritikCVSS 9,6İstismar yokEPSS %0
- Girişsiz RCE
- Erişim denetimi (IDOR)
google · chrome6 Eki 2026
CVE-2026-106373
35İzleyin
Use after free in Fonts in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the
YüksekCVSS 8,8İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
google · chrome6 Eki 2026
CVE-2026-106374
35İzleyin
Type confusion in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr
YüksekCVSS 8,8İstismar yokEPSS %0
- Girişsiz RCE
google · chrome6 Eki 2026
CVE-2026-106375
38İzleyin
Incomplete cleanup in Dawn in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside t
KritikCVSS 9,6İstismar yokEPSS %0
- Girişsiz RCE
google · chrome6 Eki 2026
CVE-2026-106377
33İzleyin
Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execut
YüksekCVSS 8,3İstismar yokEPSS %0
- Girişsiz RCE
- Yarış durumu
google · chrome6 Eki 2026
CVE-2026-106378
33İzleyin
Privilege elevation in Sandbox in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer
YüksekCVSS 8,3İstismar yokEPSS %0
- Girişsiz RCE
google · chrome6 Eki 2026
CVE-2026-106382
38İzleyin
Use after free in Chromecast in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox
KritikCVSS 9,6İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
google · chrome6 Eki 2026
CVE-2026-106383
35İzleyin
Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a
YüksekCVSS 8,8İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
google · chrome6 Eki 2026
CVE-2026-106387
35İzleyin
Missing authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to
YüksekCVSS 8,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
google · chrome6 Eki 2026
CVE-2026-106393
33İzleyin
Use after free in Storage in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to exec
YüksekCVSS 8,3İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
google · chrome6 Eki 2026
CVE-2026-106401
38İzleyin
Out of bounds write in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside
KritikCVSS 9,6İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
google · chrome6 Eki 2026
CVE-2026-106403
32İzleyin
Incorrect authorization in Accessibility in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer
YüksekCVSS 8,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
google · chrome6 Eki 2026
CVE-2026-106409
33İzleyin
Incorrect reference resolution in WebAppInstalls in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had comprom
YüksekCVSS 8,3İstismar yokEPSS %0
- Girişsiz RCE
google · chrome6 Eki 2026
CVE-2026-106411
35İzleyin
Use after free in Parser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via
YüksekCVSS 8,8İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
google · chrome6 Eki 2026
CVE-2026-106412
33İzleyin
Race condition in Core in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process
YüksekCVSS 8,3İstismar yokEPSS %0
- Girişsiz RCE
- Yarış durumu
google · chrome6 Eki 2026
CVE-2026-106414
38İzleyin
Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineerin
KritikCVSS 9,6İstismar yokEPSS %0
- Girişsiz RCE
google · chrome6 Eki 2026
CVE-2026-106417
38İzleyin
Integer overflow in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside th
KritikCVSS 9,6İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
google · chrome6 Eki 2026
CVE-2026-106419
38İzleyin
Use after free in ANGLE in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside th
KritikCVSS 9,6İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
google · chrome6 Eki 2026
CVE-2026-106421
35İzleyin
Use after free in PDF in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a c
YüksekCVSS 8,8İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
google · chrome6 Eki 2026
CVE-2026-106423
35İzleyin
Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a
YüksekCVSS 8,8İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
google · chrome6 Eki 2026
CVE-2026-106426
33İzleyin
Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the
YüksekCVSS 8,3İstismar yokEPSS %0
- Girişsiz RCE
- Yarış durumu
google · chrome6 Eki 2026
CVE-2026-106439
34İzleyin
Hydra: Mutable instantiate policy sets allow target blocklist bypass
YüksekCVSS 8,5İstismar yokEPSS %0
- Yerel yetki yükseltme
hydra-ecosystem · hydra6 Eki 2026
CVE-2026-106440
31İzleyin
Hydra: Optuna custom_search_space can resolve and execute untrusted callables via get_method
YüksekCVSS 7,8İstismar yokEPSS %0
- Yerel yetki yükseltme
hydra-ecosystem · hydra6 Eki 2026
CVE-2026-106441
31İzleyin
Hydra logging configuration permits unsafe callable resolution
YüksekCVSS 7,8İstismar yokEPSS %0
- RCE
- Yerel yetki yükseltme
hydra-ecosystem · hydra6 Eki 2026
CVE-2026-106442
31İzleyin
Hydra instantiate target blacklist bypasses permit code execution
YüksekCVSS 7,8İstismar yokEPSS %0
- Deserializasyon
- Yerel yetki yükseltme
hydra-ecosystem · hydra6 Eki 2026
CVE-2026-106443
35İzleyin
WeasyPrint: EPS images reach the Ghostscript interpreter resulting in RCE
YüksekCVSS 8,8İstismar yokEPSS %0
- RCE
kozea · weasyprint6 Eki 2026
CVE-2026-106511
39İzleyin
MultiversX's multisig-improved (repository: mx-multisig-and-modules) reference implementation of their on-chain multisig smart contract syst
KritikCVSS 9,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
multiversx labs s.r.l. · multisig-improved6 Eki 2026
CVE-2026-106512
33İzleyin
MISP sachertortephp - CakeResponse::download() HTTP Response Splitting via Unsanitized Filename Enables Stored XSS
YüksekCVSS 8,4İstismar yokEPSS %0
- XSS
misp · sachertortephp6 Eki 2026
CVE-2026-55330
39İzleyin
In BluetoothCccHandlerCallbackImpl of bluetooth_ccc.cc, there is a possible use-after-free due to a logic error in the code.
KritikCVSS 9,8İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
google · android6 Eki 2026
CVE-2026-56906
28İzleyin
In ep_free of eventpoll.c, there is a possible use-after-free due to a race condition.
YüksekCVSS 7,0İstismar yokEPSS %0
- Yerel yetki yükseltme
- Yarış durumu
google · android6 Eki 2026
CVE-2026-63697
28İzleyin
Dell System Update, versions prior to 2.3.0.0, contains an Improper Certificate Validation vulnerability.
YüksekCVSS 7,2İstismar yokEPSS %0
- Zayıf kripto
dell · system update6 Eki 2026
CVE-2026-71168
31İzleyin
Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vu
YüksekCVSS 7,8İstismar yokEPSS %0
- Yol geçişi
- Yerel yetki yükseltme
dell · system update6 Eki 2026
CVE-2026-82162
39İzleyin
Dell Command | Configure (DCC), versions prior to 5.2.3.35, contain an Improper Handling of Mixed Encoding vulnerability.
KritikCVSS 9,8İstismar yokEPSS %0
- Kimlik doğrulamasız
dell · command|configure6 Eki 2026
CVE-2026-83550
28İzleyin
Postgres-exporter: net/http/pprof exposed on metrics listener
YüksekCVSS 7,1İstismar yokEPSS %0
- Kimlik doğrulamasız
red hat · multicluster global hub6 Eki 2026
CVE-2026-86360
38İzleyin
Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vu
KritikCVSS 9,6İstismar yokEPSS %0
- Girişsiz RCE
- Yol geçişi
dell · system update6 Eki 2026
CVE-2026-86361
32İzleyin
Dell System Update, versions prior to 2.3.0.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability.
YüksekCVSS 8,2İstismar yokEPSS %0
- Yerel yetki yükseltme
dell · system update6 Eki 2026
CVE-2026-86362
32İzleyin
Dell System Update, versions prior to 2.3.0.0, contains an Improper Access Control vulnerability.
YüksekCVSS 8,2İstismar yokEPSS %0
- Yerel yetki yükseltme
- Erişim denetimi (IDOR)
dell · system update6 Eki 2026
CVE-2026-96890
34İzleyin
Server-Side Request Forgery vulnerability was identified in GitHub Enterprise Server that allowed requests to attacker-controlled internal hosts
YüksekCVSS 8,7İstismar yokEPSS %0
- RCE
- SSRF
github · enterprise server6 Eki 2026
CVE-2026-101027
30İzleyin
Gitea migration SSRF through ALLOWED_DOMAINS address check bypass
YüksekCVSS 7,7İstismar yokEPSS %0
- SSRF
gitea · gitea6 Eki 2026
CVE-2026-101152
30İzleyin
Security Advisory 0187
YüksekCVSS 7,6İstismar yokEPSS %0
- Kimlik doğrulamasız
- Açık yönlendirme
arista networks · cloudvision portal6 Eki 2026
CVE-2026-101153
28İzleyin
Security Advisory 0188
YüksekCVSS 7,2İstismar yokEPSS %0
- Yol geçişi
arista networks · cloudvision portal6 Eki 2026
CVE-2026-101154
34İzleyin
Security Advisory 0189
YüksekCVSS 8,6İstismar yokEPSS %0
- Yol geçişi
arista networks · cloudvision portal6 Eki 2026
CVE-2026-101155
34İzleyin
Security Advisory 0189
YüksekCVSS 8,6İstismar yokEPSS %0
- Yol geçişi
arista networks · cloudvision portal6 Eki 2026
CVE-2026-101157
37İzleyin
Security Advisory 0192
KritikCVSS 9,3İstismar yokEPSS %0
- Kimlik doğrulamasız
- XSS
arista networks · cloudvision cue6 Eki 2026
CVE-2026-101158
37İzleyin
Security Advisory 0185
KritikCVSS 9,3İstismar yokEPSS %0
- XSS
arista networks · cloudvision portal6 Eki 2026
CVE-2026-102155
28İzleyin
Security Advisory 0190
YüksekCVSS 7,1İstismar yokEPSS %0
- XXE
arista networks · cloudvision cue6 Eki 2026
CVE-2026-102158
28İzleyin
Security Advisory 0190
YüksekCVSS 7,1İstismar yokEPSS %0
- SQL enjeksiyonu
arista networks · cloudvision cue6 Eki 2026
CVE-2026-102159
37İzleyin
Security Advisory 0190
KritikCVSS 9,3İstismar yokEPSS %0
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
arista networks · cloudvision cue6 Eki 2026
CVE-2026-102160
34İzleyin
Security Advisory 0190
YüksekCVSS 8,6İstismar yokEPSS %1
- RCE
- Komut enjeksiyonu
arista networks · cloudvision cue6 Eki 2026
CVE-2026-102161
34İzleyin
Security Advisory 0190
YüksekCVSS 8,7İstismar yokEPSS %0
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
arista networks · cloudvision cue6 Eki 2026
CVE-2026-102162
37İzleyin
Security Advisory 0193
KritikCVSS 9,4İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
arista networks · wi-fi access points6 Eki 2026
CVE-2026-102163
34İzleyin
Security Advisory 0195
YüksekCVSS 8,7İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
arista networks · wi-fi access points6 Eki 2026