İçeriğe atla
Noroxi

Yayın tarihine göre

Ekim 2026: sömürülen ve yeni ciddi CVE kayıtları

7.673 kayıt · 17 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 51 / 77

  • CVE-2026-103899
    28İzleyin

    EU VAT Assistant for WooCommerce <= 2.1.30.260413 - Unauthenticated Stored Cross-Site Scripting via 'vat_number' Parameter

    YüksekCVSS 7,2İstismar yokEPSS %0

    daigo75 · eu vat assistant for woocommerce17 Eki 2026

  • CVE-2026-104736
    39İzleyin

    LearnPress <= 4.4.10 - Unauthenticated PHP Object Injection via 'checkout-email' Parameter

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    thimpress · learnpress – wordpress lms plugin for create and sell online courses17 Eki 2026

  • CVE-2026-108123
    30İzleyin

    WP Booking System <= 2.1.0.3 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'wpbs_action=email_logs' Action

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    murgroland · wp booking system – booking calendar17 Eki 2026

  • CVE-2026-92798
    32İzleyin

    User Registration & Membership <= 5.2.8 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via Referer Header via 'referrer_url' Smart Tag

    YüksekCVSS 8,1İstismar yokEPSS %0

    wpeverest · user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builder17 Eki 2026

  • CVE-2026-96660
    28İzleyin

    User Registration & Membership <= 5.2.8 - Unauthenticated Stored Cross-Site Scripting via Checkbox Field Value

    YüksekCVSS 7,2İstismar yokEPSS %0

    wpeverest · user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builder17 Eki 2026

  • CVE-2026-110384
    28İzleyin

    WordPress Fancy Comments WordPress plugin <= 1.2.21 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    heateor support · fancy comments wordpress17 Eki 2026

  • CVE-2026-100316
    28İzleyin

    European VAT Compliance Assistant for WooCommerce <= 1.36.10 - Unauthenticated Stored Cross-Site Scripting via CF-IPCountry Header

    YüksekCVSS 7,2İstismar yokEPSS %0

    davidanderson · european vat compliance assistant for woocommerce17 Eki 2026

  • CVE-2026-111110
    28İzleyin

    Payment forms, Buy now buttons, and Invoicing System | GetPaid <= 2.8.61 - Unauthenticated Stored Cross-Site Scripting via 'mmdwqzpoxadd' Parameter

    YüksekCVSS 7,2İstismar yokEPSS %0

    stiofansisland · payment forms, buy now buttons, and invoicing system | getpaid17 Eki 2026

  • CVE-2026-110889
    30İzleyin

    WordPress Gantry 5 Framework plugin <= 5.6.4 - Sensitive Data Exposure vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    gantry · gantry 5 framework17 Eki 2026

  • CVE-2026-109701
    28İzleyin

    WordPress PAYCOMET for WooCommerce plugin <= 5.45 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    paycomet · paycomet for woocommerce17 Eki 2026

  • CVE-2026-111880
    33İzleyin

    FreeRDP 2.0.0 before 3.32.0 Heap Out-of-Bounds Write via NTLM MIC Offset

    YüksekCVSS 8,3İstismar yokEPSS %0

    freerdp · freerdp17 Eki 2026

  • CVE-2026-111881
    28İzleyin

    FreeRDP 3.14.1 before 3.32.0 Integer Underflow in BMP Writer via Clipboard

    YüksekCVSS 7,2İstismar yokEPSS %0

    freerdp · freerdp17 Eki 2026

  • CVE-2026-111882
    34İzleyin

    phpMyFAQ 3.2.0-alpha before 4.1.9 and 4.2.0-alpha before 4.2.0-beta TOTP 2FA Bypass via SSO Callbacks

    YüksekCVSS 8,6İstismar yokEPSS %0

    thorsten · phpmyfaq17 Eki 2026

  • CVE-2026-111884
    34İzleyin

    phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta Missing Current-Password Step-Up on E-mail Change Enables Account Takeover

    YüksekCVSS 8,7İstismar yokEPSS %0

    thorsten · phpmyfaq17 Eki 2026

  • CVE-2026-111885
    28İzleyin

    phpMyFAQ 4.2.0-alpha before 4.2.0-beta Missing Authorization via deleteGroup API

    YüksekCVSS 7,0İstismar yokEPSS %0

    thorsten · phpmyfaq17 Eki 2026

  • CVE-2026-111886
    28İzleyin

    phpMyFAQ 4.2.0-alpha.2 before 4.2.0-beta 2FA Brute-Force via remove-twofactor Endpoint

    YüksekCVSS 7,1İstismar yokEPSS %0

    thorsten · phpmyfaq17 Eki 2026

  • CVE-2026-111890
    28İzleyin

    phpMyFAQ 4.2.0-alpha.2 before 4.2.0-beta Privilege Escalation via updateUserRights

    YüksekCVSS 7,0İstismar yokEPSS %0

    thorsten · phpmyfaq17 Eki 2026

  • CVE-2026-111891
    28İzleyin

    phpMyFAQ from 4.2.0-alpha.2 before 4.2.0-beta Privilege Escalation via Group Permissions API

    YüksekCVSS 7,0İstismar yokEPSS %0

    thorsten · phpmyfaq17 Eki 2026

  • CVE-2026-111893
    34İzleyin

    phpMyFAQ 4.2.0-alpha before 4.2.0-beta Privilege Escalation via Group Category Restrictions API

    YüksekCVSS 8,5İstismar yokEPSS %0

    thorsten · phpmyfaq17 Eki 2026

  • CVE-2026-111895
    30İzleyin

    phpMyFAQ 3.2.0 before 4.0.0 and 4.0.2 before 4.2.0-beta Account Takeover via Entra ID preferred_username

    YüksekCVSS 7,6İstismar yokEPSS %0

    thorsten · phpmyfaq17 Eki 2026

  • CVE-2026-111897
    28İzleyin

    phpMyFAQ 4.2.0-alpha before 4.2.0-beta Authorization Bypass in Attachment Administration Endpoints

    YüksekCVSS 7,1İstismar yokEPSS %0

    thorsten · phpmyfaq17 Eki 2026

  • CVE-2026-111898
    30İzleyin

    phpMyFAQ 4.2.0-alpha before 4.2.0-beta Account Takeover via Keycloak Implicit Account Linking

    YüksekCVSS 7,7İstismar yokEPSS %0

    thorsten · phpmyfaq17 Eki 2026

  • CVE-2026-111901
    34İzleyin

    phpMyFAQ 4.2.0-alpha before 4.2.0-beta Unauthenticated DoS via API Pagination

    YüksekCVSS 8,7İstismar yokEPSS %0

    thorsten · phpmyfaq17 Eki 2026

  • CVE-2026-111905
    28İzleyin

    phpMyFAQ 3.2.0 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta IDOR Leaks TOTP Secret via /admin/api/user/data

    YüksekCVSS 7,0İstismar yokEPSS %0

    thorsten · phpmyfaq17 Eki 2026

  • CVE-2026-111906
    28İzleyin

    phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta CSRF in Elasticsearch/OpenSearch Admin API Index Operations

    YüksekCVSS 7,1İstismar yokEPSS %0

    thorsten · phpmyfaq17 Eki 2026

  • CVE-2026-111907
    28İzleyin

    phpMyFAQ 4.0.0 before 4.1.9 CSRF via /admin/api/update-database

    YüksekCVSS 7,1İstismar yokEPSS %0

    thorsten · phpmyfaq17 Eki 2026

  • CVE-2026-111908
    34İzleyin

    phpMyFAQ 4.0.0 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta BOLA in FAQ Update via REST API

    YüksekCVSS 8,7İstismar yokEPSS %0

    thorsten · phpmyfaq17 Eki 2026

  • CVE-2026-111909
    28İzleyin

    phpMyFAQ before 4.1.9 Missing Authorization Allows Superadmin Deletion via deleteUser API

    YüksekCVSS 7,2İstismar yokEPSS %0

    thorsten · phpmyfaq17 Eki 2026

  • CVE-2026-111910
    28İzleyin

    phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta Authorization Bypass via attachment.php Downloads

    YüksekCVSS 7,1İstismar yokEPSS %0

    thorsten · phpmyfaq17 Eki 2026

  • CVE-2026-111911
    37İzleyin

    phpMyFAQ 4.0.0 before 4.1.9 Authentication Bypass via WebAuthn Credential Injection

    KritikCVSS 9,3İstismar yokEPSS %0

    thorsten · phpmyfaq17 Eki 2026

  • CVE-2026-111912
    28İzleyin

    Admidio 5.0.0 before 5.0.16 IDOR via Forum Topic Update

    YüksekCVSS 7,1İstismar yokEPSS %0

    admidio · admidio17 Eki 2026

  • CVE-2026-111914
    28İzleyin

    Admidio 5.0.11 before 5.0.16 Broken Access Control via inventory_data.php

    YüksekCVSS 7,1İstismar yokEPSS %0

    admidio · admidio17 Eki 2026

  • CVE-2026-111917
    28İzleyin

    Vikunja 2.3.0 before 2.7.0 WebSocket Authentication Ignores Session Revocation

    YüksekCVSS 7,1İstismar yokEPSS %0

    go-vikunja · vikunja17 Eki 2026

  • CVE-2026-111919
    28İzleyin

    Vikunja 0.22.0 before 2.7.0 Improper Access Revocation via Webhooks

    YüksekCVSS 7,1İstismar yokEPSS %0

    go-vikunja · vikunja17 Eki 2026

  • CVE-2026-111922
    28İzleyin

    Vikunja 2.2.0 before 2.7.0 Permissive CORS Policy Trusting Localhost Origins

    YüksekCVSS 7,2İstismar yokEPSS %0

    go-vikunja · vikunja17 Eki 2026

  • CVE-2026-111923
    34İzleyin

    Fleet before 4.89.0 Unauthenticated DoS via Apple MDM Enrollment Plist Parsing

    YüksekCVSS 8,7İstismar yokEPSS %0

    fleetdm · fleet17 Eki 2026

  • CVE-2026-111924
    34İzleyin

    Fleet before 4.83.0 Denial of Service via Unbounded Gzip Decompression

    YüksekCVSS 8,7İstismar yokEPSS %0

    fleetdm · fleet17 Eki 2026

  • CVE-2026-111927
    34İzleyin

    Coder before 2.35.4 Credential Theft via Workspace Proxy Hostname Prefix Match

    YüksekCVSS 8,7İstismar yokEPSS %0

    coder · coder17 Eki 2026

  • CVE-2026-110031
    28İzleyin

    Salon Booking System 10.17 - 10.31.10 - Salon Staff+ Privilege Escalation to Administrator via Case-Insensitive User Meta Key

    YüksekCVSS 7,2İstismar yokEPSS %0

    unknown · salon booking system18 Eki 2026

  • CVE-2026-110981
    28İzleyin

    WP Photo Album Plus < 9.2.11.002 - Reflected XSS via 'wppa-cat' Parameter

    YüksekCVSS 7,1İstismar yokEPSS %0

    unknown · wp photo album plus18 Eki 2026

  • CVE-2026-96534
    30İzleyin

    Modern Events Calendar (Lite & Pro) < 7.37.0 - Subscriber+ SQLi via mec_fes_csv_export

    YüksekCVSS 7,7İstismar yokEPSS %0

    unknown · modern events calendar lite18 Eki 2026

  • CVE-2026-107436
    35İzleyin

    WordPress Strong Testimonials plugin <= 3.3.12 - PHP Object Injection vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    wp chill · strong testimonials18 Eki 2026

  • CVE-2026-108485
    28İzleyin

    WordPress eStore theme <= 1.6.13 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    themegrill · estore18 Eki 2026

  • CVE-2026-109894
    37İzleyin

    WordPress Booktics plugin <= 1.0.29 - SQL Injection vulnerability

    KritikCVSS 9,3İstismar yokEPSS %0

    arraytics · booktics18 Eki 2026

  • CVE-2026-109895
    28İzleyin

    WordPress Booktics plugin <= 1.0.29 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    arraytics · booktics18 Eki 2026

  • CVE-2026-110372
    39İzleyin

    WordPress OttoKit plugin <= 1.1.40 - Privilege Escalation vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    brainstorm force · ottokit18 Eki 2026

  • CVE-2026-110373
    32İzleyin

    WordPress Login with phone number plugin <= 1.8.77 - Privilege Escalation vulnerability

    YüksekCVSS 8,1İstismar yokEPSS %0

    hamid alinia · login with phone number18 Eki 2026

  • CVE-2026-110382
    28İzleyin

    WordPress Simply Schedule Appointments plugin <= 1.6.12.35 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    nsquared · simply schedule appointments18 Eki 2026

  • CVE-2026-110383
    30İzleyin

    WordPress Electronic Signature Add-on for Fluent Forms plugin <= 2.0.5 - Insecure Direct Object References (IDOR) vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    wp e-signature · electronic signature add-on for fluent forms18 Eki 2026

  • CVE-2026-110886
    39İzleyin

    WordPress Conversational Forms for ChatBot plugin <= 1.5.1 - PHP Object Injection vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    quantumcloud · conversational forms for chatbot18 Eki 2026

  • CVE-2026-110895
    34İzleyin

    WordPress Support Genix plugin <= 1.4.54 - SQL Injection vulnerability

    YüksekCVSS 8,5İstismar yokEPSS %0

    devitems · support genix18 Eki 2026

  • CVE-2026-110897
    28İzleyin

    WordPress PowerPack Lite for Beaver Builder plugin <= 1.3.1 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    ideabox creations · powerpack lite for beaver builder18 Eki 2026

  • RUSTSEC-2026-0414
    30İzleyin

    Exponential event growth with `ENABLE_WIKILINKS`

    YüksekCVSS 7,5İstismar yok

    18 Eki 2026

  • CVE-2026-111998
    37İzleyin

    Vanus 0.8.0 through 0.9.0 Default Admin Credentials via Gateway

    KritikCVSS 9,3İstismar yokEPSS %0

    vanus-labs · vanus18 Eki 2026

  • CVE-2026-111999
    34İzleyin

    Vanus 0.8.0 through 0.9.0 Missing Authentication via Gateway CloudEvents HTTP Receiver

    YüksekCVSS 8,7İstismar yokEPSS %0

    vanus-labs · vanus18 Eki 2026

  • CVE-2026-112000
    28İzleyin

    Vanus 0.8.0 through 0.9.0 Missing Authorization in Gateway Streaming RPCs

    YüksekCVSS 7,2İstismar yokEPSS %0

    vanus-labs · vanus18 Eki 2026

  • CVE-2026-112001
    34İzleyin

    ProjectSend 2.0.0 before 2.7.0 Incorrect Authorization via Users API Token Abilities

    YüksekCVSS 8,6İstismar yokEPSS %0

    projectsend · projectsend18 Eki 2026

  • CVE-2026-112002
    30İzleyin

    ProjectSend 2.5.0 before 2.7.0 Unverified Password Change via /settings/password

    YüksekCVSS 7,6İstismar yokEPSS %0

    projectsend · projectsend18 Eki 2026

  • CVE-2026-112005
    36İzleyin

    WhoDB 0.104.0 before 0.135.0 Arbitrary File Read/Write via DuckDB Query Editor

    KritikCVSS 9,2İstismar yokEPSS %0

    clidey · whodb18 Eki 2026

  • CVE-2026-112006
    33İzleyin

    OpenTelemetry opentelemetry-exporter-otlp-proto-http 1.5.0 before 1.45.0 Improper Certificate Validation

    YüksekCVSS 8,3İstismar yokEPSS %0

    opentelemetry · opentelemetry-exporter-otlp-proto-http18 Eki 2026

  • CVE-2026-112015
    30İzleyin

    Omnigent 0.3.0 before 0.14.0 Path Traversal via Sub-Agent os_env.cwd

    YüksekCVSS 7,7İstismar yokEPSS %0

    omnigent-ai · omnigent18 Eki 2026

  • CVE-2026-112017
    28İzleyin

    JeecgBoot before 3.9.5 SQL Injection via SqlInjectionUtil Newline Bypass

    YüksekCVSS 7,1İstismar yokEPSS %0

    jeecgboot · jeecgboot18 Eki 2026

  • CVE-2026-112018
    29İzleyin

    cgltf through 1.15 Heap Out-of-Bounds Write via cgltf_accessor_unpack_floats()

    YüksekCVSS 7,3İstismar yokEPSS %0

    jkuhlmann · cgltf18 Eki 2026

  • CVE-2026-112021
    34İzleyin

    snac2 before 2.93 Heap-Based Buffer Overflow via JSON Parser _xs_json_load_lexer()

    YüksekCVSS 8,7İstismar yokEPSS %0

    grunfink · snac218 Eki 2026

  • CVE-2026-78497
    33İzleyin

    JQ::Lite versions before 2.51 for Perl execute Perl code embedded in a query's regular expression by compiling it with string eval

    YüksekCVSS 8,4İstismar yokEPSS %0

    18 Eki 2026

  • CVE-2026-112051
    33İzleyin

    Xinference through 4.0.1 Path Traversal via model_name in Custom Model Registration

    YüksekCVSS 8,3İstismar yokEPSS %0

    xorbitsai · inference18 Eki 2026

  • CVE-2026-98436
    31İzleyin

    accel/amdxdna: Disable device buffer exporting

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux18 Eki 2026

  • CVE-2026-98440
    28İzleyin

    KVM: arm64: nv: Delay freeing of shadow S2 structures until VM destruction

    YüksekCVSS 7,0İstismar yokEPSS %0

    linux · linux18 Eki 2026

  • CVE-2026-98441
    31İzleyin

    net/sched: act_ct: avoid modifying shared unconfirmed ct entry

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux18 Eki 2026

  • CVE-2026-98442
    31İzleyin

    net/sched: act_ct: fix helper UAF due to extensions realloc

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux18 Eki 2026

  • CVE-2026-98443
    31İzleyin

    xfs: fix cursor and pointer handling when recovering iunlink buckets

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux18 Eki 2026

  • CVE-2026-98451
    35İzleyin

    smb: client: use finish_no_open() for non-regular inodes

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux18 Eki 2026

  • CVE-2026-98454
    32İzleyin

    smb: client: fix create context out-of-bounds reads

    YüksekCVSS 8,1İstismar yokEPSS %0

    linux · linux18 Eki 2026

  • CVE-2026-98456
    28İzleyin

    Bluetooth: mgmt: fix race in read_unconf_index_list()

    YüksekCVSS 7,0İstismar yokEPSS %0

    linux · linux18 Eki 2026

  • CVE-2026-98464
    37İzleyin

    RISC-V: KVM: Synchronize hrtimer callback during teardown

    KritikCVSS 9,3İstismar yokEPSS %0

    linux · linux18 Eki 2026

  • CVE-2026-98465
    28İzleyin

    RISC-V: KVM: Serialize IMSIC attributes with vCPU migration

    YüksekCVSS 7,0İstismar yokEPSS %0

    linux · linux18 Eki 2026

  • CVE-2026-98466
    32İzleyin

    KVM: arm64: Transfer the hyp stack pages out of the host stage-2

    YüksekCVSS 8,2İstismar yokEPSS %0

    linux · linux18 Eki 2026

  • CVE-2026-98469
    28İzleyin

    KVM: arm64: Fix AArch32 DBGBXVR<n> handling

    YüksekCVSS 7,1İstismar yokEPSS %0

    linux · linux18 Eki 2026

  • CVE-2026-98471
    28İzleyin

    KVM: SEV: Do cache maintenance on the source VM during intra-host migration

    YüksekCVSS 7,1İstismar yokEPSS %0

    linux · linux18 Eki 2026

  • CVE-2026-98479
    30İzleyin

    scsi: libiscsi_tcp: Check the data direction of a Data-In PDU

    YüksekCVSS 7,5İstismar yokEPSS %0

    linux · linux18 Eki 2026

  • CVE-2026-98485
    28İzleyin

    netfilter: ip6t_rt: fix zero-address non-strict match out-of-bounds read

    YüksekCVSS 7,1İstismar yokEPSS %0

    linux · linux18 Eki 2026

  • CVE-2026-98487
    31İzleyin

    net: bridge: mdb: restart port group walk after deletion

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux18 Eki 2026

  • CVE-2026-98490
    39İzleyin

    net: openvswitch: conntrack: fix helper UAF due to extensions realloc

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux18 Eki 2026

  • CVE-2026-98491
    31İzleyin

    net: openvswitch: conntrack: avoid modifying shared unconfirmed ct entry

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux18 Eki 2026

  • CVE-2026-98497
    30İzleyin

    net/mlx5e: fix swapped IPv6 IPsec policy masks

    YüksekCVSS 7,5İstismar yokEPSS %0

    linux · linux18 Eki 2026

  • CVE-2026-98499
    32İzleyin

    HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce()

    YüksekCVSS 8,1İstismar yokEPSS %0

    linux · linux18 Eki 2026

  • CVE-2026-98501
    28İzleyin

    HID: alps: fix use-after-free on input2 registration failure

    YüksekCVSS 7,1İstismar yokEPSS %0

    linux · linux18 Eki 2026

  • CVE-2026-98507
    31İzleyin

    mm/rmap: fix missing barrier between anon_vma init and vma->anon_vma publish

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux18 Eki 2026

  • CVE-2026-98510
    31İzleyin

    drm/xe/vm: nuke PTs only after unlinking contested VMAs

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux18 Eki 2026

  • CVE-2026-98512
    28İzleyin

    drm/nouveau: RCU-free the scheduler-containing nouveau_sched

    YüksekCVSS 7,1İstismar yokEPSS %0

    linux · linux18 Eki 2026

  • CVE-2026-98515
    31İzleyin

    drm/nouveau: fix double-free in nvif_vmm_dtor

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux18 Eki 2026

  • CVE-2026-98517
    31İzleyin

    drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux18 Eki 2026

  • CVE-2026-98518
    28İzleyin

    drm/nouveau/dmem: pin VRAM for the whole registered range

    YüksekCVSS 7,0İstismar yokEPSS %0

    linux · linux18 Eki 2026

  • CVE-2026-98520
    31İzleyin

    drm/amdkfd: fix use-after-free and multi-container gap in kfd_dev_mapping

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux18 Eki 2026

  • CVE-2026-98524
    31İzleyin

    rds: ib: Clear the sg list when mapping an MR fails

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux18 Eki 2026

  • CVE-2026-98532
    32İzleyin

    ipv6: do not let ipv6_find_hdr() return an offset past the packet end

    YüksekCVSS 8,1İstismar yokEPSS %0

    linux · linux18 Eki 2026

  • CVE-2026-98543
    29İzleyin

    bpf: fs/xattr: don't assume the inode is locked in path_unlink/path_rmdir

    YüksekCVSS 7,3İstismar yokEPSS %0

    linux · linux18 Eki 2026

  • CVE-2026-98548
    39İzleyin

    sctp: discard the rest of the packet on a stale-cookie error

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux18 Eki 2026

  • CVE-2026-98549
    36İzleyin

    tcp: prevent collapsing skbs across boundary in rtx queue

    KritikCVSS 9,1İstismar yokEPSS %0

    linux · linux18 Eki 2026

  • CVE-2026-98550
    30İzleyin

    tipc: reject invalid and unexpected GRP_ACK_MSG to prevent bc_ackers underflow

    YüksekCVSS 7,5İstismar yokEPSS %0

    linux · linux18 Eki 2026