Yayın tarihine göre
Kasım 2026: sömürülen ve yeni ciddi CVE kayıtları
3.408 kayıt · 10 KEV. Yayın sırasıyla.
Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.
Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.
Sayfa 21 / 35
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
28İzleyin | CVE-2026-16478İstismar yok | Arbitrary Package Installation in TÜBİTAK BİLGEM's pardus-nvidia-installertübi̇tak bi̇lgem software technologies research institute · pardus-nvidia-installer · CWE-183 | Yüksek7,0 | — | — | 1 gün önce |
30İzleyin | CVE-2026-120399İstismar yok | Flightctl-api: flightctl-remote-access: flightctl: unbounded tls handshake in conncontext can block accepting connectionsred hat · red hat edge manager 1 · CWE-1322 | Yüksek7,5 | — | — | 1 gün önce |
35İzleyin | CVE-2026-124852İstismar yok | Incorrect boundary conditions in the Graphics: CanvasWebGL componentmozilla · firefox · CWE-120 | Yüksek8,8 | — | — | 1 gün önce |
38İzleyin | CVE-2026-124853İstismar yok | Sandbox escape due to incorrect boundary conditions in the Graphics: Text componentmozilla · firefox | Kritik9,6 | — | — | 1 gün önce |
35İzleyin | CVE-2026-124856İstismar yok | Incorrect boundary conditions in the Networking: HTTP componentmozilla · firefox · CWE-120 | Yüksek8,8 | — | — | 1 gün önce |
35İzleyin | CVE-2026-124857İstismar yok | Use-after-free in the Graphics: Canvas2D componentmozilla · firefox · CWE-416 | Yüksek8,8 | — | — | 1 gün önce |
35İzleyin | CVE-2026-124858İstismar yok | Use-after-free in the DOM: HTML Parser componentmozilla · firefox · CWE-416 | Yüksek8,8 | — | — | 1 gün önce |
38İzleyin | CVE-2026-124859İstismar yok | Sandbox escape due to incorrect boundary conditions in the Storage: Cache API componentmozilla · firefox · CWE-120 | Kritik9,6 | — | — | 1 gün önce |
35İzleyin | CVE-2026-124860İstismar yok | Use-after-free in the Audio/Video componentmozilla · firefox · CWE-416 | Yüksek8,8 | — | — | 1 gün önce |
38İzleyin | CVE-2026-124861İstismar yok | Sandbox escape due to use-after-free in the Audio/Video: cubeb componentmozilla · firefox | Kritik9,6 | — | — | 1 gün önce |
35İzleyin | CVE-2026-124862İstismar yok | Use-after-free in the DOM: Core & HTML componentmozilla · firefox · CWE-416 | Yüksek8,8 | — | — | 1 gün önce |
35İzleyin | CVE-2026-124863İstismar yok | Use-after-free in the DOM: HTML Parser componentmozilla · firefox · CWE-416 | Yüksek8,8 | — | — | 1 gün önce |
38İzleyin | CVE-2026-124864İstismar yok | Sandbox escape due to use-after-free in the DOM: Service Workers componentmozilla · firefox · CWE-416 | Kritik9,6 | — | — | 1 gün önce |
35İzleyin | CVE-2026-124865İstismar yok | Use-after-free in the Audio/Video componentmozilla · firefox · CWE-416 | Yüksek8,8 | — | — | 1 gün önce |
35İzleyin | CVE-2026-124866İstismar yok | Use-after-free in the Layout componentmozilla · firefox · CWE-416 | Yüksek8,8 | — | — | 1 gün önce |
35İzleyin | CVE-2026-124867İstismar yok | Use-after-free in the DOM: Editor componentmozilla · firefox · CWE-416 | Yüksek8,8 | — | — | 1 gün önce |
35İzleyin | CVE-2026-124868İstismar yok | Incorrect boundary conditions in the DOM: Core & HTML componentmozilla · firefox · CWE-120 | Yüksek8,8 | — | — | 1 gün önce |
35İzleyin | CVE-2026-124869İstismar yok | Use-after-free in the DOM: Core & HTML componentmozilla · firefox · CWE-416 | Yüksek8,8 | — | — | 1 gün önce |
35İzleyin | CVE-2026-124870İstismar yok | Incorrect boundary conditions in the JavaScript: GC componentmozilla · firefox · CWE-120 | Yüksek8,8 | — | — | 1 gün önce |
35İzleyin | CVE-2026-124871İstismar yok | Use-after-free in the DOM: HTML Parser componentmozilla · firefox · CWE-416 | Yüksek8,8 | — | — | 1 gün önce |
35İzleyin | CVE-2026-124872İstismar yok | Use-after-free in the Cycle Collector componentmozilla · firefox · CWE-416 | Yüksek8,8 | — | — | 1 gün önce |
35İzleyin | CVE-2026-124875İstismar yok | Incorrect boundary conditions in the DOM: CSS Object Model componentmozilla · firefox · CWE-120 | Yüksek8,8 | — | — | 1 gün önce |
35İzleyin | CVE-2026-124876İstismar yok | Use-after-free in the CSS Parsing and Computation componentmozilla · firefox · CWE-416 | Yüksek8,8 | — | — | 1 gün önce |
35İzleyin | CVE-2026-124877İstismar yok | Use-after-free in the Layout: Positioned componentmozilla · firefox · CWE-416 | Yüksek8,8 | — | — | 1 gün önce |
35İzleyin | CVE-2026-124878İstismar yok | Use-after-free in the Layout: Positioned componentmozilla · firefox · CWE-416 | Yüksek8,8 | — | — | 1 gün önce |
35İzleyin | CVE-2026-124880İstismar yok | Use-after-free in the DOM: Core & HTML componentmozilla · firefox · CWE-416 | Yüksek8,8 | — | — | 1 gün önce |
35İzleyin | CVE-2026-124881İstismar yok | Use-after-free in the CSS Parsing and Computation componentmozilla · firefox · CWE-416 | Yüksek8,8 | — | — | 1 gün önce |
35İzleyin | CVE-2026-124882İstismar yok | Use-after-free in the CSS Parsing and Computation componentmozilla · firefox · CWE-416 | Yüksek8,8 | — | — | 1 gün önce |
35İzleyin | CVE-2026-124883İstismar yok | Use-after-free in the DOM: Core & HTML componentmozilla · firefox · CWE-416 | Yüksek8,8 | — | — | 1 gün önce |
35İzleyin | CVE-2026-124884İstismar yok | Use-after-free in the JavaScript: GC componentmozilla · firefox · CWE-416 | Yüksek8,8 | — | — | 1 gün önce |
35İzleyin | CVE-2026-124885İstismar yok | Use-after-free in the Graphics: Text componentmozilla · firefox · CWE-416 | Yüksek8,8 | — | — | 1 gün önce |
35İzleyin | CVE-2026-124887İstismar yok | Incorrect boundary conditions in the Layout: Text and Fonts componentmozilla · firefox · CWE-120 | Yüksek8,8 | — | — | 1 gün önce |
35İzleyin | CVE-2026-124888İstismar yok | Incorrect boundary conditions in the Layout: Text and Fonts componentmozilla · firefox · CWE-120 | Yüksek8,8 | — | — | 1 gün önce |
35İzleyin | CVE-2026-124889İstismar yok | Use-after-free in the CSS Parsing and Computation componentmozilla · firefox · CWE-416 | Yüksek8,8 | — | — | 1 gün önce |
35İzleyin | CVE-2026-124890İstismar yok | Use-after-free in the DOM: Core & HTML componentmozilla · firefox · CWE-416 | Yüksek8,8 | — | — | 1 gün önce |
35İzleyin | CVE-2026-124891İstismar yok | Incorrect boundary conditions in the DOM: Selection componentmozilla · firefox · CWE-120 | Yüksek8,8 | — | — | 1 gün önce |
35İzleyin | CVE-2026-124892İstismar yok | Use-after-free in the JavaScript: GC componentmozilla · firefox · CWE-416 | Yüksek8,8 | — | — | 1 gün önce |
35İzleyin | CVE-2026-124893İstismar yok | Use-after-free in the DOM: Workers componentmozilla · firefox · CWE-416 | Yüksek8,8 | — | — | 1 gün önce |
35İzleyin | CVE-2026-124894İstismar yok | Use-after-free in the Networking: Cookies componentmozilla · firefox · CWE-416 | Yüksek8,8 | — | — | 1 gün önce |
35İzleyin | CVE-2026-124895İstismar yok | Use-after-free in the Storage: localStorage & sessionStorage componentmozilla · firefox · CWE-416 | Yüksek8,8 | — | — | 1 gün önce |
35İzleyin | CVE-2026-124897İstismar yok | Use-after-free in the JavaScript: GC componentmozilla · firefox · CWE-416 | Yüksek8,8 | — | — | 1 gün önce |
35İzleyin | CVE-2026-124898İstismar yok | Use-after-free in the DOM: Editor componentmozilla · firefox · CWE-416 | Yüksek8,8 | — | — | 1 gün önce |
35İzleyin | CVE-2026-124899İstismar yok | Use-after-free in the Layout: Text and Fonts componentmozilla · firefox · CWE-416 | Yüksek8,8 | — | — | 1 gün önce |
38İzleyin | CVE-2026-124900İstismar yok | Sandbox escape due to use-after-free in the DOM: Service Workers componentmozilla · firefox · CWE-416 | Kritik9,6 | — | — | 1 gün önce |
38İzleyin | CVE-2026-124903İstismar yok | Sandbox escape due to use-after-free in the IPC componentmozilla · firefox · CWE-416 | Kritik9,6 | — | — | 1 gün önce |
35İzleyin | CVE-2026-124904İstismar yok | Use-after-free in the SVG componentmozilla · firefox · CWE-416 | Yüksek8,8 | — | — | 1 gün önce |
35İzleyin | CVE-2026-124906İstismar yok | Use-after-free in the Graphics: WebRender componentmozilla · firefox · CWE-416 | Yüksek8,8 | — | — | 1 gün önce |
35İzleyin | CVE-2026-124907İstismar yok | Privilege escalation, sandbox escape due to use-after-free in the Graphics: CanvasWebGL componentmozilla · firefox · CWE-416 | Yüksek8,8 | — | — | 1 gün önce |
35İzleyin | CVE-2026-124908İstismar yok | Use-after-free in the CSS Parsing and Computation componentmozilla · firefox · CWE-416 | Yüksek8,8 | — | — | 1 gün önce |
35İzleyin | CVE-2026-124915İstismar yok | Incorrect boundary conditions in the Graphics: WebGPU componentmozilla · firefox · CWE-120 | Yüksek8,8 | — | — | 1 gün önce |
38İzleyin | CVE-2026-124917İstismar yok | Sandbox escape due to use-after-free in the Widget: Gtk componentmozilla · firefox | Kritik9,6 | — | — | 1 gün önce |
35İzleyin | CVE-2026-124918İstismar yok | Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender componentmozilla · firefox · CWE-120 | Yüksek8,8 | — | — | 1 gün önce |
35İzleyin | CVE-2026-124919İstismar yok | Privilege escalation due to use-after-free in the WebRTC: Networking componentmozilla · firefox · CWE-416 | Yüksek8,8 | — | — | 1 gün önce |
35İzleyin | CVE-2026-124922İstismar yok | Use-after-free in the CSS Transitions and Animations componentmozilla · firefox · CWE-416 | Yüksek8,8 | — | — | 1 gün önce |
35İzleyin | CVE-2026-124924İstismar yok | Incorrect boundary conditions in the Graphics: WebRender componentmozilla · firefox · CWE-120 | Yüksek8,8 | — | — | 1 gün önce |
35İzleyin | CVE-2026-124926İstismar yok | Incorrect boundary conditions in the WebRTC componentmozilla · firefox · CWE-120 | Yüksek8,8 | — | — | 1 gün önce |
35İzleyin | CVE-2026-124932İstismar yok | Use-after-free in the Graphics componentmozilla · firefox · CWE-416 | Yüksek8,8 | — | — | 1 gün önce |
35İzleyin | CVE-2026-124943İstismar yok | Use-after-free in the Layout componentmozilla · firefox · CWE-416 | Yüksek8,8 | — | — | 1 gün önce |
35İzleyin | CVE-2026-124947İstismar yok | Incorrect boundary conditions in the Graphics componentmozilla · firefox · CWE-120 | Yüksek8,8 | — | — | 1 gün önce |
35İzleyin | CVE-2026-124948İstismar yok | Incorrect boundary conditions, use-after-free in the Graphics componentmozilla · firefox · CWE-119 | Yüksek8,8 | — | — | 1 gün önce |
35İzleyin | CVE-2026-124952İstismar yok | Use-after-free in the Audio/Video componentmozilla · firefox · CWE-416 | Yüksek8,8 | — | — | 1 gün önce |
34İzleyin | CVE-2026-12708İstismar yok | Unbounded HTTP/3 Datagram flow map growth in tokio-quichecloudflare · tokio-quiche · CWE-401 | Yüksek8,7 | — | — | 1 gün önce |
36İzleyin | CVE-2026-82509İstismar yok | V Programming Language net.http TLS Certificate Validation Bypassvlang · v · CWE-295 | Kritik9,1 | — | — | 1 gün önce |
30İzleyin | CVE-2026-113422İstismar yok | In Eclipse Kura versions 5.0.0 through 5.6.2, the Wire Graph update functionality of the Kura Web UI, and the Wire Service REST API v1 (avaieclipse foundation · eclipse kura · CWE-807 | Yüksek7,7 | — | — | 1 gün önce |
28İzleyin | CVE-2026-114359İstismar yok | Eclipse Kura downloads deployment packages (DPs) from a remote URL without any limit on the size of the data it receives.eclipse foundation · eclipse kura · CWE-770 | Yüksek7,0 | — | — | 1 gün önce |
30İzleyin | GHSA-6qrw-m8cv-hcxfİstismar yok | Forge: RSA PKCS#1 v1.5 signature forgery via non-canonical DigestInfo encodingCWE-347 | Yüksek7,5 | — | — | 1 gün önce |
28İzleyin | CVE-2026-105425İstismar yok | OS command injection in Ivanti Sentry before versions 11.0.0, 10.8.3, and 10.7.4 as well as in Ivanti EPMM before versions 12.11.0.0, 12.10.ivanti · sentry · CWE-78 | Yüksek7,2 | — | — | 1 gün önce |
38İzleyin | CVE-2026-108186İstismar yok | Improper Input Validation in Zoom Workplace for Windows may allow an unauthenticated user to conduct an escalation of privilege via network zoom communications · zoom workplace · CWE-20 | Kritik9,6 | — | — | 1 gün önce |
32İzleyin | CVE-2026-108187İstismar yok | Origin Validation Error in Zoom Workplace for Windows may allow an unauthenticated user to conduct an escalation of privilege via network aczoom communications · zoom workplace · CWE-346 | Yüksek8,1 | — | — | 1 gün önce |
34İzleyin | CVE-2026-112191İstismar yok | In Eclipse Kura versions 5.4.0 through 5.6.2, the Identity REST APIs (identity/v1, and identity/v2 since 5.5.0, provided by org.eclipse.kuraeclipse foundation · eclipse kura · CWE-269 | Yüksek8,6 | — | — | 1 gün önce |
35İzleyin | CVE-2026-11316İstismar yok | A out-of-bounds write vulnerability exists in the dr_wav drwav__read_cue_to_metadata_obj functionality of dr_libs (version(s): 0.14.5).mackron · dr_libs · CWE-787 | Yüksek8,8 | — | — | 1 gün önce |
39İzleyin | CVE-2026-121653İstismar yok | SQL injection in the Core of Ivanti Endpoint Manager before version 2024 SU8 allows a remote unauthenticated attacker to achieve remote codeivanti · endpoint manager · CWE-89 | Kritik9,8 | — | — | 1 gün önce |
37İzleyin | CVE-2026-121683İstismar yok | Missing authentication in Ivanti Cloud Services Application version 5.0.8 allows a remote unauthenticated attacker to add and delete arbitraivanti · cloud services application · CWE-306 | Kritik9,4 | — | — | 1 gün önce |
30İzleyin | CVE-2026-124036İstismar yok | Cross-organization access to saved-search alerts in FlockOSflock · flockos · CWE-639 | Yüksek7,6 | — | — | 1 gün önce |
32İzleyin | CVE-2026-124037İstismar yok | Information exposure in Flock Safety Platform public access-list sign-upflock · flock safety platform · CWE-359 | Yüksek8,2 | — | — | 1 gün önce |
28İzleyin | CVE-2026-125750İstismar yok | Firekylin through 2.18.1 Improper Authorization via Admin REST API GET Actionsfirekylin · firekylin · CWE-862 | Yüksek7,1 | — | — | 1 gün önce |
32İzleyin | CVE-2026-125753İstismar yok | ABP Framework before 10.6.2 and 10.7.0 Path Traversal via Blogging File Endpointsabpframework · abp · CWE-22 | Yüksek8,2 | — | — | 1 gün önce |
28İzleyin | CVE-2026-125754İstismar yok | Dolibarr 20.0.0 through 23.0.4 and 24.x before 24.0.2 IDOR via ExpenseReport Payment APIdolibarr · dolibarr · CWE-639 | Yüksek7,1 | — | — | 1 gün önce |
33İzleyin | CVE-2026-125755İstismar yok | Nodemailer 3.0.0 before 10.4.1 Recipient Allow-List Bypass via addressparsernodemailer · nodemailer · CWE-436 | Yüksek8,3 | — | — | 1 gün önce |
32İzleyin | CVE-2026-125756İstismar yok | postal-mime before 4.2.1 Sender Spoofing via Address Parser Domain Truncationpostalsys · postal-mime · CWE-436 | Yüksek8,2 | — | — | 1 gün önce |
37İzleyin | CVE-2026-125757Kavram kanıtı | mailcow: dockerized before 2026-11 Template Injection RCE via Domain-Wide Footermailcow · mailcow: dockerized · CWE-1336 | Kritik9,4 | — | — | 1 gün önce |
36İzleyin | CVE-2026-125758İstismar yok | Aptabase before commit 61d4c01 Authentication Bypass via Known Example AUTH_SECRETaptabase · aptabase · CWE-1188 | Kritik9,1 | — | — | 1 gün önce |
30İzleyin | CVE-2026-125759İstismar yok | Nango before 0.71.3 SQL Injection via Orchestrator Task Group Keynangohq · nango · CWE-89 | Yüksek7,7 | — | — | 1 gün önce |
28İzleyin | CVE-2026-111729İstismar yok | In Kura versions <= 5.6.2, the "Command" file-upload handler at `POST /admin/denali/file/command` extracts a client-supplied ZIP archive inteclipse foundation · eclipse kura · CWE-22 | Yüksek7,0 | — | — | 1 gün önce |
34İzleyin | CVE-2026-112185İstismar yok | In Eclipse Kura versions 5.1.0 through 5.6.2, the Configuration REST API v2 (org.eclipse.kura.rest.configuration.provider) does not restricteclipse foundation · eclipse kura · CWE-522 | Yüksek8,6 | — | — | 1 gün önce |
34İzleyin | CVE-2026-112186İstismar yok | In Eclipse Kura versions 5.4.0 through 5.6.2, the Service Listing V1 REST API read the JSON body of every request into memory, with no limiteclipse foundation · eclipse kura · CWE-674 | Yüksek8,7 | — | — | 1 gün önce |
35İzleyin | CVE-2026-124251İstismar yok | WordPress WPIDE – File Manager & Code Editor plugin <= 3.6.4 - Cross Site Request Forgery (CSRF) vulnerabilityxplodedthemes · wpide – file manager & code editor · CWE-352 | Yüksek8,8 | — | — | 1 gün önce |
34İzleyin | CVE-2026-125271İstismar yok | AWS API MCP Server Security Policy Bypass via Incorrect Operation Name Normalizationaws · aws-api-mcp-server · CWE-863 | Yüksek8,5 | — | — | 1 gün önce |
29İzleyin | CVE-2026-126042İstismar yok | VNote 3.11.0 before 4.12.0 OS Command Injection via Tasks Magic Variablesvnotex · vnote · CWE-78 | Yüksek7,3 | — | — | 1 gün önce |
34İzleyin | CVE-2026-126050İstismar yok | apitrace 2.0 through 14.0 Heap Buffer Overflow via SnappyFile::flushReadCache()apitrace · apitrace · CWE-122 | Yüksek8,5 | — | — | 1 gün önce |
34İzleyin | CVE-2026-32667İstismar yok | Out-of-bounds write for the Intel(R) VTune(TM) Profiler software within Ring 1: Device Drivers may allow an escalation of privilege.CWE-787 | Yüksek8,5 | — | — | 1 gün önce |
34İzleyin | CVE-2026-32670İstismar yok | Time-of-check time-of-use race condition for the Intel(R) VTune(TM) Profiler software within Ring 1: Device Drivers may allow an escalation CWE-367 | Yüksek8,5 | — | — | 1 gün önce |
34İzleyin | CVE-2026-34016İstismar yok | Time-of-check time-of-use race condition for the Intel(R) VTune(TM) Profiler software before version 2026.0.0 within Ring 1: Device Drivers CWE-367 | Yüksek8,5 | — | — | 1 gün önce |
33İzleyin | CVE-2026-50109İstismar yok | Out-of-bounds write for some Intel(R) Performance Counter Monitor (Intel(R) PCM) within Ring 3: User Applications may allow a denial of servCWE-787 | Yüksek8,3 | — | — | 1 gün önce |
34İzleyin | CVE-2026-57907İstismar yok | WatchGuard Endpoint Protection Local Privilege Escalation in Console-Service Communication Allows SYSTEM Code Executionwatchguard · endpoint security · CWE-269 | Yüksek8,5 | — | — | 1 gün önce |
29İzleyin | CVE-2026-59986İstismar yok | rabbitmq-c: amqp_decode_bytes size_t integer overflow bypasses bounds check on 32-bit (OOB read)alanxz · rabbitmq-c · CWE-125 | Yüksek7,4 | — | — | 1 gün önce |
39İzleyin | CVE-2026-61547İstismar yok | rabbitmq-c: Heap Buffer Overflow in amqp_send_frame() When Serializing Oversized AMQP_FRAME_BODYalanxz · rabbitmq-c · CWE-787 | Kritik9,8 | — | — | 1 gün önce |
34İzleyin | CVE-2026-63010İstismar yok | Group-Office: Stored XSS via Manual Remindersintermesh · groupoffice · CWE-79 | Yüksek8,7 | — | — | 1 gün önce |
37İzleyin | CVE-2026-63011İstismar yok | GroupOffice Vulnerable to RCE in TemplateParser eval() via Contact/labelsintermesh · groupoffice · CWE-94 | Kritik9,4 | — | — | 1 gün önce |
34İzleyin | CVE-2026-63651İstismar yok | LiveDocs: fetch_docs/introspect fetch client-supplied URLs with no host allowlist and follow redirectspsychquant · livedocs · CWE-918 | Yüksek8,7 | — | — | 1 gün önce |
- CVE-2026-1647828İzleyin
Arbitrary Package Installation in TÜBİTAK BİLGEM's pardus-nvidia-installer
YüksekCVSS 7,0İstismar yoktübi̇tak bi̇lgem software technologies research institute · pardus-nvidia-installer1 gün önce
- CVE-2026-12039930İzleyin
Flightctl-api: flightctl-remote-access: flightctl: unbounded tls handshake in conncontext can block accepting connections
YüksekCVSS 7,5İstismar yokred hat · red hat edge manager 11 gün önce
- CVE-2026-12485235İzleyin
Incorrect boundary conditions in the Graphics: CanvasWebGL component
YüksekCVSS 8,8İstismar yokmozilla · firefox1 gün önce
- CVE-2026-12485338İzleyin
Sandbox escape due to incorrect boundary conditions in the Graphics: Text component
KritikCVSS 9,6İstismar yokmozilla · firefox1 gün önce
- CVE-2026-12485635İzleyin
Incorrect boundary conditions in the Networking: HTTP component
YüksekCVSS 8,8İstismar yokmozilla · firefox1 gün önce
- CVE-2026-12485735İzleyin
Use-after-free in the Graphics: Canvas2D component
YüksekCVSS 8,8İstismar yokmozilla · firefox1 gün önce
- CVE-2026-12485835İzleyin
Use-after-free in the DOM: HTML Parser component
YüksekCVSS 8,8İstismar yokmozilla · firefox1 gün önce
- CVE-2026-12485938İzleyin
Sandbox escape due to incorrect boundary conditions in the Storage: Cache API component
KritikCVSS 9,6İstismar yokmozilla · firefox1 gün önce
- CVE-2026-12486035İzleyin
Use-after-free in the Audio/Video component
YüksekCVSS 8,8İstismar yokmozilla · firefox1 gün önce
- CVE-2026-12486138İzleyin
Sandbox escape due to use-after-free in the Audio/Video: cubeb component
KritikCVSS 9,6İstismar yokmozilla · firefox1 gün önce
- CVE-2026-12486235İzleyin
Use-after-free in the DOM: Core & HTML component
YüksekCVSS 8,8İstismar yokmozilla · firefox1 gün önce
- CVE-2026-12486335İzleyin
Use-after-free in the DOM: HTML Parser component
YüksekCVSS 8,8İstismar yokmozilla · firefox1 gün önce
- CVE-2026-12486438İzleyin
Sandbox escape due to use-after-free in the DOM: Service Workers component
KritikCVSS 9,6İstismar yokmozilla · firefox1 gün önce
- CVE-2026-12486535İzleyin
Use-after-free in the Audio/Video component
YüksekCVSS 8,8İstismar yokmozilla · firefox1 gün önce
- CVE-2026-12486635İzleyin
Use-after-free in the Layout component
YüksekCVSS 8,8İstismar yokmozilla · firefox1 gün önce
- CVE-2026-12486735İzleyin
Use-after-free in the DOM: Editor component
YüksekCVSS 8,8İstismar yokmozilla · firefox1 gün önce
- CVE-2026-12486835İzleyin
Incorrect boundary conditions in the DOM: Core & HTML component
YüksekCVSS 8,8İstismar yokmozilla · firefox1 gün önce
- CVE-2026-12486935İzleyin
Use-after-free in the DOM: Core & HTML component
YüksekCVSS 8,8İstismar yokmozilla · firefox1 gün önce
- CVE-2026-12487035İzleyin
Incorrect boundary conditions in the JavaScript: GC component
YüksekCVSS 8,8İstismar yokmozilla · firefox1 gün önce
- CVE-2026-12487135İzleyin
Use-after-free in the DOM: HTML Parser component
YüksekCVSS 8,8İstismar yokmozilla · firefox1 gün önce
- CVE-2026-12487235İzleyin
Use-after-free in the Cycle Collector component
YüksekCVSS 8,8İstismar yokmozilla · firefox1 gün önce
- CVE-2026-12487535İzleyin
Incorrect boundary conditions in the DOM: CSS Object Model component
YüksekCVSS 8,8İstismar yokmozilla · firefox1 gün önce
- CVE-2026-12487635İzleyin
Use-after-free in the CSS Parsing and Computation component
YüksekCVSS 8,8İstismar yokmozilla · firefox1 gün önce
- CVE-2026-12487735İzleyin
Use-after-free in the Layout: Positioned component
YüksekCVSS 8,8İstismar yokmozilla · firefox1 gün önce
- CVE-2026-12487835İzleyin
Use-after-free in the Layout: Positioned component
YüksekCVSS 8,8İstismar yokmozilla · firefox1 gün önce
- CVE-2026-12488035İzleyin
Use-after-free in the DOM: Core & HTML component
YüksekCVSS 8,8İstismar yokmozilla · firefox1 gün önce
- CVE-2026-12488135İzleyin
Use-after-free in the CSS Parsing and Computation component
YüksekCVSS 8,8İstismar yokmozilla · firefox1 gün önce
- CVE-2026-12488235İzleyin
Use-after-free in the CSS Parsing and Computation component
YüksekCVSS 8,8İstismar yokmozilla · firefox1 gün önce
- CVE-2026-12488335İzleyin
Use-after-free in the DOM: Core & HTML component
YüksekCVSS 8,8İstismar yokmozilla · firefox1 gün önce
- CVE-2026-12488435İzleyin
Use-after-free in the JavaScript: GC component
YüksekCVSS 8,8İstismar yokmozilla · firefox1 gün önce
- CVE-2026-12488535İzleyin
Use-after-free in the Graphics: Text component
YüksekCVSS 8,8İstismar yokmozilla · firefox1 gün önce
- CVE-2026-12488735İzleyin
Incorrect boundary conditions in the Layout: Text and Fonts component
YüksekCVSS 8,8İstismar yokmozilla · firefox1 gün önce
- CVE-2026-12488835İzleyin
Incorrect boundary conditions in the Layout: Text and Fonts component
YüksekCVSS 8,8İstismar yokmozilla · firefox1 gün önce
- CVE-2026-12488935İzleyin
Use-after-free in the CSS Parsing and Computation component
YüksekCVSS 8,8İstismar yokmozilla · firefox1 gün önce
- CVE-2026-12489035İzleyin
Use-after-free in the DOM: Core & HTML component
YüksekCVSS 8,8İstismar yokmozilla · firefox1 gün önce
- CVE-2026-12489135İzleyin
Incorrect boundary conditions in the DOM: Selection component
YüksekCVSS 8,8İstismar yokmozilla · firefox1 gün önce
- CVE-2026-12489235İzleyin
Use-after-free in the JavaScript: GC component
YüksekCVSS 8,8İstismar yokmozilla · firefox1 gün önce
- CVE-2026-12489335İzleyin
Use-after-free in the DOM: Workers component
YüksekCVSS 8,8İstismar yokmozilla · firefox1 gün önce
- CVE-2026-12489435İzleyin
Use-after-free in the Networking: Cookies component
YüksekCVSS 8,8İstismar yokmozilla · firefox1 gün önce
- CVE-2026-12489535İzleyin
Use-after-free in the Storage: localStorage & sessionStorage component
YüksekCVSS 8,8İstismar yokmozilla · firefox1 gün önce
- CVE-2026-12489735İzleyin
Use-after-free in the JavaScript: GC component
YüksekCVSS 8,8İstismar yokmozilla · firefox1 gün önce
- CVE-2026-12489835İzleyin
Use-after-free in the DOM: Editor component
YüksekCVSS 8,8İstismar yokmozilla · firefox1 gün önce
- CVE-2026-12489935İzleyin
Use-after-free in the Layout: Text and Fonts component
YüksekCVSS 8,8İstismar yokmozilla · firefox1 gün önce
- CVE-2026-12490038İzleyin
Sandbox escape due to use-after-free in the DOM: Service Workers component
KritikCVSS 9,6İstismar yokmozilla · firefox1 gün önce
- CVE-2026-12490338İzleyin
Sandbox escape due to use-after-free in the IPC component
KritikCVSS 9,6İstismar yokmozilla · firefox1 gün önce
- CVE-2026-12490435İzleyin
Use-after-free in the SVG component
YüksekCVSS 8,8İstismar yokmozilla · firefox1 gün önce
- CVE-2026-12490635İzleyin
Use-after-free in the Graphics: WebRender component
YüksekCVSS 8,8İstismar yokmozilla · firefox1 gün önce
- CVE-2026-12490735İzleyin
Privilege escalation, sandbox escape due to use-after-free in the Graphics: CanvasWebGL component
YüksekCVSS 8,8İstismar yokmozilla · firefox1 gün önce
- CVE-2026-12490835İzleyin
Use-after-free in the CSS Parsing and Computation component
YüksekCVSS 8,8İstismar yokmozilla · firefox1 gün önce
- CVE-2026-12491535İzleyin
Incorrect boundary conditions in the Graphics: WebGPU component
YüksekCVSS 8,8İstismar yokmozilla · firefox1 gün önce
- CVE-2026-12491738İzleyin
Sandbox escape due to use-after-free in the Widget: Gtk component
KritikCVSS 9,6İstismar yokmozilla · firefox1 gün önce
- CVE-2026-12491835İzleyin
Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component
YüksekCVSS 8,8İstismar yokmozilla · firefox1 gün önce
- CVE-2026-12491935İzleyin
Privilege escalation due to use-after-free in the WebRTC: Networking component
YüksekCVSS 8,8İstismar yokmozilla · firefox1 gün önce
- CVE-2026-12492235İzleyin
Use-after-free in the CSS Transitions and Animations component
YüksekCVSS 8,8İstismar yokmozilla · firefox1 gün önce
- CVE-2026-12492435İzleyin
Incorrect boundary conditions in the Graphics: WebRender component
YüksekCVSS 8,8İstismar yokmozilla · firefox1 gün önce
- CVE-2026-12492635İzleyin
Incorrect boundary conditions in the WebRTC component
YüksekCVSS 8,8İstismar yokmozilla · firefox1 gün önce
- CVE-2026-12493235İzleyin
Use-after-free in the Graphics component
YüksekCVSS 8,8İstismar yokmozilla · firefox1 gün önce
- CVE-2026-12494335İzleyin
Use-after-free in the Layout component
YüksekCVSS 8,8İstismar yokmozilla · firefox1 gün önce
- CVE-2026-12494735İzleyin
Incorrect boundary conditions in the Graphics component
YüksekCVSS 8,8İstismar yokmozilla · firefox1 gün önce
- CVE-2026-12494835İzleyin
Incorrect boundary conditions, use-after-free in the Graphics component
YüksekCVSS 8,8İstismar yokmozilla · firefox1 gün önce
- CVE-2026-12495235İzleyin
Use-after-free in the Audio/Video component
YüksekCVSS 8,8İstismar yokmozilla · firefox1 gün önce
- CVE-2026-1270834İzleyin
Unbounded HTTP/3 Datagram flow map growth in tokio-quiche
YüksekCVSS 8,7İstismar yokcloudflare · tokio-quiche1 gün önce
- CVE-2026-8250936İzleyin
V Programming Language net.http TLS Certificate Validation Bypass
KritikCVSS 9,1İstismar yokvlang · v1 gün önce
- CVE-2026-11342230İzleyin
In Eclipse Kura versions 5.0.0 through 5.6.2, the Wire Graph update functionality of the Kura Web UI, and the Wire Service REST API v1 (avai
YüksekCVSS 7,7İstismar yokeclipse foundation · eclipse kura1 gün önce
- CVE-2026-11435928İzleyin
Eclipse Kura downloads deployment packages (DPs) from a remote URL without any limit on the size of the data it receives.
YüksekCVSS 7,0İstismar yokeclipse foundation · eclipse kura1 gün önce
- GHSA-6qrw-m8cv-hcxf30İzleyin
Forge: RSA PKCS#1 v1.5 signature forgery via non-canonical DigestInfo encoding
YüksekCVSS 7,5İstismar yok1 gün önce
- CVE-2026-10542528İzleyin
OS command injection in Ivanti Sentry before versions 11.0.0, 10.8.3, and 10.7.4 as well as in Ivanti EPMM before versions 12.11.0.0, 12.10.
YüksekCVSS 7,2İstismar yokivanti · sentry1 gün önce
- CVE-2026-10818638İzleyin
Improper Input Validation in Zoom Workplace for Windows may allow an unauthenticated user to conduct an escalation of privilege via network
KritikCVSS 9,6İstismar yokzoom communications · zoom workplace1 gün önce
- CVE-2026-10818732İzleyin
Origin Validation Error in Zoom Workplace for Windows may allow an unauthenticated user to conduct an escalation of privilege via network ac
YüksekCVSS 8,1İstismar yokzoom communications · zoom workplace1 gün önce
- CVE-2026-11219134İzleyin
In Eclipse Kura versions 5.4.0 through 5.6.2, the Identity REST APIs (identity/v1, and identity/v2 since 5.5.0, provided by org.eclipse.kura
YüksekCVSS 8,6İstismar yokeclipse foundation · eclipse kura1 gün önce
- CVE-2026-1131635İzleyin
A out-of-bounds write vulnerability exists in the dr_wav drwav__read_cue_to_metadata_obj functionality of dr_libs (version(s): 0.14.5).
YüksekCVSS 8,8İstismar yokmackron · dr_libs1 gün önce
- CVE-2026-12165339İzleyin
SQL injection in the Core of Ivanti Endpoint Manager before version 2024 SU8 allows a remote unauthenticated attacker to achieve remote code
KritikCVSS 9,8İstismar yokivanti · endpoint manager1 gün önce
- CVE-2026-12168337İzleyin
Missing authentication in Ivanti Cloud Services Application version 5.0.8 allows a remote unauthenticated attacker to add and delete arbitra
KritikCVSS 9,4İstismar yokivanti · cloud services application1 gün önce
- CVE-2026-12403630İzleyin
Cross-organization access to saved-search alerts in FlockOS
YüksekCVSS 7,6İstismar yokflock · flockos1 gün önce
- CVE-2026-12403732İzleyin
Information exposure in Flock Safety Platform public access-list sign-up
YüksekCVSS 8,2İstismar yokflock · flock safety platform1 gün önce
- CVE-2026-12575028İzleyin
Firekylin through 2.18.1 Improper Authorization via Admin REST API GET Actions
YüksekCVSS 7,1İstismar yokfirekylin · firekylin1 gün önce
- CVE-2026-12575332İzleyin
ABP Framework before 10.6.2 and 10.7.0 Path Traversal via Blogging File Endpoints
YüksekCVSS 8,2İstismar yokabpframework · abp1 gün önce
- CVE-2026-12575428İzleyin
Dolibarr 20.0.0 through 23.0.4 and 24.x before 24.0.2 IDOR via ExpenseReport Payment API
YüksekCVSS 7,1İstismar yokdolibarr · dolibarr1 gün önce
- CVE-2026-12575533İzleyin
Nodemailer 3.0.0 before 10.4.1 Recipient Allow-List Bypass via addressparser
YüksekCVSS 8,3İstismar yoknodemailer · nodemailer1 gün önce
- CVE-2026-12575632İzleyin
postal-mime before 4.2.1 Sender Spoofing via Address Parser Domain Truncation
YüksekCVSS 8,2İstismar yokpostalsys · postal-mime1 gün önce
- CVE-2026-12575737İzleyin
mailcow: dockerized before 2026-11 Template Injection RCE via Domain-Wide Footer
KritikCVSS 9,4Kavram kanıtımailcow · mailcow: dockerized1 gün önce
- CVE-2026-12575836İzleyin
Aptabase before commit 61d4c01 Authentication Bypass via Known Example AUTH_SECRET
KritikCVSS 9,1İstismar yokaptabase · aptabase1 gün önce
- CVE-2026-12575930İzleyin
Nango before 0.71.3 SQL Injection via Orchestrator Task Group Key
YüksekCVSS 7,7İstismar yoknangohq · nango1 gün önce
- CVE-2026-11172928İzleyin
In Kura versions <= 5.6.2, the "Command" file-upload handler at `POST /admin/denali/file/command` extracts a client-supplied ZIP archive int
YüksekCVSS 7,0İstismar yokeclipse foundation · eclipse kura1 gün önce
- CVE-2026-11218534İzleyin
In Eclipse Kura versions 5.1.0 through 5.6.2, the Configuration REST API v2 (org.eclipse.kura.rest.configuration.provider) does not restrict
YüksekCVSS 8,6İstismar yokeclipse foundation · eclipse kura1 gün önce
- CVE-2026-11218634İzleyin
In Eclipse Kura versions 5.4.0 through 5.6.2, the Service Listing V1 REST API read the JSON body of every request into memory, with no limit
YüksekCVSS 8,7İstismar yokeclipse foundation · eclipse kura1 gün önce
- CVE-2026-12425135İzleyin
WordPress WPIDE – File Manager & Code Editor plugin <= 3.6.4 - Cross Site Request Forgery (CSRF) vulnerability
YüksekCVSS 8,8İstismar yokxplodedthemes · wpide – file manager & code editor1 gün önce
- CVE-2026-12527134İzleyin
AWS API MCP Server Security Policy Bypass via Incorrect Operation Name Normalization
YüksekCVSS 8,5İstismar yokaws · aws-api-mcp-server1 gün önce
- CVE-2026-12604229İzleyin
VNote 3.11.0 before 4.12.0 OS Command Injection via Tasks Magic Variables
YüksekCVSS 7,3İstismar yokvnotex · vnote1 gün önce
- CVE-2026-12605034İzleyin
apitrace 2.0 through 14.0 Heap Buffer Overflow via SnappyFile::flushReadCache()
YüksekCVSS 8,5İstismar yokapitrace · apitrace1 gün önce
- CVE-2026-3266734İzleyin
Out-of-bounds write for the Intel(R) VTune(TM) Profiler software within Ring 1: Device Drivers may allow an escalation of privilege.
YüksekCVSS 8,5İstismar yok1 gün önce
- CVE-2026-3267034İzleyin
Time-of-check time-of-use race condition for the Intel(R) VTune(TM) Profiler software within Ring 1: Device Drivers may allow an escalation
YüksekCVSS 8,5İstismar yok1 gün önce
- CVE-2026-3401634İzleyin
Time-of-check time-of-use race condition for the Intel(R) VTune(TM) Profiler software before version 2026.0.0 within Ring 1: Device Drivers
YüksekCVSS 8,5İstismar yok1 gün önce
- CVE-2026-5010933İzleyin
Out-of-bounds write for some Intel(R) Performance Counter Monitor (Intel(R) PCM) within Ring 3: User Applications may allow a denial of serv
YüksekCVSS 8,3İstismar yok1 gün önce
- CVE-2026-5790734İzleyin
WatchGuard Endpoint Protection Local Privilege Escalation in Console-Service Communication Allows SYSTEM Code Execution
YüksekCVSS 8,5İstismar yokwatchguard · endpoint security1 gün önce
- CVE-2026-5998629İzleyin
rabbitmq-c: amqp_decode_bytes size_t integer overflow bypasses bounds check on 32-bit (OOB read)
YüksekCVSS 7,4İstismar yokalanxz · rabbitmq-c1 gün önce
- CVE-2026-6154739İzleyin
rabbitmq-c: Heap Buffer Overflow in amqp_send_frame() When Serializing Oversized AMQP_FRAME_BODY
KritikCVSS 9,8İstismar yokalanxz · rabbitmq-c1 gün önce
- CVE-2026-6301034İzleyin
Group-Office: Stored XSS via Manual Reminders
YüksekCVSS 8,7İstismar yokintermesh · groupoffice1 gün önce
- CVE-2026-6301137İzleyin
GroupOffice Vulnerable to RCE in TemplateParser eval() via Contact/labels
KritikCVSS 9,4İstismar yokintermesh · groupoffice1 gün önce
- CVE-2026-6365134İzleyin
LiveDocs: fetch_docs/introspect fetch client-supplied URLs with no host allowlist and follow redirects
YüksekCVSS 8,7İstismar yokpsychquant · livedocs1 gün önce