İçeriğe atla
Noroxi

Yayın tarihine göre

Kasım 2026: sömürülen ve yeni ciddi CVE kayıtları

3.409 kayıt · 10 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 31 / 35

  • CVE-2026-58789
    30İzleyin

    In s_gen_tile_param of multiple files, there is a possible way to trigger an out of bounds write in tile parameter arrays due to an incorrec

    YüksekCVSS 7,5İstismar yok

    google · android1 gün önce

  • CVE-2026-58807
    30İzleyin

    In Retry_MtsMessageInPending of MtsMessageController.cpp, there is a possible way to trigger memory exhaustion via leaked message objects du

    YüksekCVSS 7,5İstismar yok

    google · android1 gün önce

  • CVE-2026-59582
    30İzleyin

    In StartTimer of UcePublishManager.cpp, there is a possible way to trigger a process abort during timer calculation due to an integer overfl

    YüksekCVSS 7,5İstismar yok

    google · android1 gün önce

  • CVE-2026-59585
    30İzleyin

    In SetDisplayName of RegInfoContact.cpp, there is a possible denial of service due to a missing null check.

    YüksekCVSS 7,5İstismar yok

    google · android1 gün önce

  • CVE-2026-59595
    30İzleyin

    In DecodeHeaderComponent of SipStack.cpp, there is a possible way to trigger stack exhaustion via unbounded mutual recursion due to a resour

    YüksekCVSS 7,5İstismar yok

    google · android1 gün önce

  • CVE-2026-59603
    30İzleyin

    In RespondReceivedMessage of MtsMessageController.cpp, there is a possible way to trigger a double free and process abort during message ret

    YüksekCVSS 7,5İstismar yok

    google · android1 gün önce

  • CVE-2026-59611
    30İzleyin

    In multiple locations, there is a possible way to trigger a temporary denial of service via an integer overflow trap due to improper input v

    YüksekCVSS 7,5İstismar yok

    google · android1 gün önce

  • CVE-2026-59613
    30İzleyin

    In multiple locations, there is a possible way to trigger an out of bounds read and temporary denial of service due to improper input valida

    YüksekCVSS 7,5İstismar yok

    google · android1 gün önce

  • CVE-2026-59623
    30İzleyin

    In CompareTelUris of SipAddress.cpp, there is a possible way to trigger an unhandled out of range exception and process crash due to an inco

    YüksekCVSS 7,5İstismar yok

    google · android1 gün önce

  • CVE-2026-59632
    30İzleyin

    In RespondReceivedMessage of MtsMessageController.cpp, there is a possible way to trigger memory exhaustion via an undrained message queue d

    YüksekCVSS 7,5İstismar yok

    google · android1 gün önce

  • CVE-2026-95780
    32İzleyin

    Authentication and Session Management Vulnerability Could Permit Continued Unauthorized Access

    YüksekCVSS 8,1İstismar yok

    hewlett packard enterprise (hpe) · private 5g core (p5g core)1 gün önce

  • CVE-2026-95781
    30İzleyin

    AthonetOS Vulnerability Could Enable Unauthorized Access or Compromise Service Integrity

    YüksekCVSS 7,5İstismar yok

    hewlett packard enterprise (hpe) · private 5g core (p5g core)1 gün önce

  • CVE-2026-95782
    30İzleyin

    Monitoring Interface Vulnerability Could Permit Unauthorized Access to Protected Information

    YüksekCVSS 7,5İstismar yok

    hewlett packard enterprise (hpe) · private 5g core (p5g core)1 gün önce

  • CVE-2026-95783
    30İzleyin

    Network Processing Vulnerability Could Cause Service Disruption

    YüksekCVSS 7,5İstismar yok

    hewlett packard enterprise (hpe) · private 5g core (p5g core)1 gün önce

  • CVE-2026-95784
    30İzleyin

    System Component Vulnerability Could Cause Service Unavailability

    YüksekCVSS 7,5İstismar yok

    hewlett packard enterprise (hpe) · private 5g core (p5g core)1 gün önce

  • CVE-2026-95785
    28İzleyin

    Authenticated Component Vulnerability Could Affect System Confidentiality, Integrity, Availability, and Trusted Operations

    YüksekCVSS 7,2İstismar yok

    hewlett packard enterprise (hpe) · private 5g core (p5g core)1 gün önce

  • CVE-2026-104352
    31İzleyin

    Premiere Pro | Out-of-bounds Write (CWE-787)

    YüksekCVSS 7,8İstismar yok

    adobe · premiere1 gün önce

  • CVE-2026-105986
    34İzleyin

    Incorrect authorization in the Admin API RBAC of Kong Gateway Enterprise allows a delegated administrator to elevate  privileges via a perce

    YüksekCVSS 8,7İstismar yok

    kong inc. · kong gateway enterprise1 gün önce

  • CVE-2026-110085
    31İzleyin

    Premiere Pro | Out-of-bounds Write (CWE-787)

    YüksekCVSS 7,8İstismar yok

    adobe · premiere1 gün önce

  • CVE-2026-110086
    31İzleyin

    Premiere Pro | Out-of-bounds Write (CWE-787)

    YüksekCVSS 7,8İstismar yok

    adobe · premiere1 gün önce

  • CVE-2026-110088
    31İzleyin

    Premiere Pro | Buffer Overflow (CWE-120)

    YüksekCVSS 7,8İstismar yok

    adobe · premiere1 gün önce

  • CVE-2026-110089
    31İzleyin

    Premiere Pro | Buffer Underwrite ('Buffer Underflow') (CWE-124)

    YüksekCVSS 7,8İstismar yok

    adobe · premiere1 gün önce

  • CVE-2026-110090
    28İzleyin

    Premiere Pro | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)

    YüksekCVSS 7,1İstismar yok

    adobe · premiere1 gün önce

  • CVE-2026-110091
    28İzleyin

    Premiere Pro | Missing Authentication for Critical Function (CWE-306)

    YüksekCVSS 7,1İstismar yok

    adobe · premiere1 gün önce

  • CVE-2026-113512
    31İzleyin

    After Effects | Stack-based Buffer Overflow (CWE-121)

    YüksekCVSS 7,8İstismar yok

    adobe · after effects1 gün önce

  • CVE-2026-113516
    31İzleyin

    After Effects | Out-of-bounds Write (CWE-787)

    YüksekCVSS 7,8İstismar yok

    adobe · after effects1 gün önce

  • CVE-2026-113517
    31İzleyin

    After Effects | Out-of-bounds Write (CWE-787)

    YüksekCVSS 7,8İstismar yok

    adobe · after effects1 gün önce

  • CVE-2026-113523
    31İzleyin

    After Effects | Out-of-bounds Write (CWE-787)

    YüksekCVSS 7,8İstismar yok

    adobe · after effects1 gün önce

  • CVE-2026-113525
    31İzleyin

    After Effects | Out-of-bounds Write (CWE-787)

    YüksekCVSS 7,8İstismar yok

    adobe · after effects1 gün önce

  • CVE-2026-113526
    34İzleyin

    After Effects | Violation of Secure Design Principles (CWE-657)

    YüksekCVSS 8,6İstismar yok

    adobe · after effects1 gün önce

  • CVE-2026-113528
    31İzleyin

    After Effects | Out-of-bounds Write (CWE-787)

    YüksekCVSS 7,8İstismar yok

    adobe · after effects1 gün önce

  • CVE-2026-113530
    31İzleyin

    After Effects | Out-of-bounds Write (CWE-787)

    YüksekCVSS 7,8İstismar yok

    adobe · after effects1 gün önce

  • CVE-2026-113532
    34İzleyin

    After Effects | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)

    YüksekCVSS 8,6İstismar yok

    adobe · after effects1 gün önce

  • CVE-2026-113534
    34İzleyin

    After Effects | Improper Input Validation (CWE-20)

    YüksekCVSS 8,6İstismar yok

    adobe · after effects1 gün önce

  • CVE-2026-113536
    31İzleyin

    After Effects | Out-of-bounds Write (CWE-787)

    YüksekCVSS 7,8İstismar yok

    adobe · after effects1 gün önce

  • CVE-2026-113538
    31İzleyin

    After Effects | Out-of-bounds Write (CWE-787)

    YüksekCVSS 7,8İstismar yok

    adobe · after effects1 gün önce

  • CVE-2026-113541
    31İzleyin

    Media Encoder | Out-of-bounds Write (CWE-787)

    YüksekCVSS 7,8İstismar yok

    adobe · media encoder1 gün önce

  • CVE-2026-113543
    31İzleyin

    Media Encoder | Out-of-bounds Write (CWE-787)

    YüksekCVSS 7,8İstismar yok

    adobe · media encoder1 gün önce

  • CVE-2026-113545
    31İzleyin

    Media Encoder | Out-of-bounds Write (CWE-787)

    YüksekCVSS 7,8İstismar yok

    adobe · media encoder1 gün önce

  • CVE-2026-113547
    31İzleyin

    Media Encoder | Out-of-bounds Write (CWE-787)

    YüksekCVSS 7,8İstismar yok

    adobe · media encoder1 gün önce

  • CVE-2026-113551
    34İzleyin

    Audition | Violation of Secure Design Principles (CWE-657)

    YüksekCVSS 8,7İstismar yok

    adobe · audition1 gün önce

  • CVE-2026-113553
    31İzleyin

    Audition | Out-of-bounds Write (CWE-787)

    YüksekCVSS 7,8İstismar yok

    adobe · audition1 gün önce

  • CVE-2026-113555
    31İzleyin

    Audition | Out-of-bounds Write (CWE-787)

    YüksekCVSS 7,8İstismar yok

    adobe · audition1 gün önce

  • CVE-2026-113557
    34İzleyin

    Audition | Improper Input Validation (CWE-20)

    YüksekCVSS 8,6İstismar yok

    adobe · audition1 gün önce

  • CVE-2026-113558
    34İzleyin

    Audition | Improper Input Validation (CWE-20)

    YüksekCVSS 8,6İstismar yok

    adobe · audition1 gün önce

  • CVE-2026-113560
    30İzleyin

    Audition | Incorrect Authorization (CWE-863)

    YüksekCVSS 7,7İstismar yok

    adobe · audition1 gün önce

  • CVE-2026-113562
    30İzleyin

    Audition | Improper Input Validation (CWE-20)

    YüksekCVSS 7,7İstismar yok

    adobe · audition1 gün önce

  • CVE-2026-113563
    34İzleyin

    Audition | Violation of Secure Design Principles (CWE-657)

    YüksekCVSS 8,6İstismar yok

    adobe · audition1 gün önce

  • CVE-2026-113565
    31İzleyin

    Audition | Out-of-bounds Write (CWE-787)

    YüksekCVSS 7,8İstismar yok

    adobe · audition1 gün önce

  • CVE-2026-113567
    31İzleyin

    Audition | Out-of-bounds Write (CWE-787)

    YüksekCVSS 7,8İstismar yok

    adobe · audition1 gün önce

  • CVE-2026-113575
    31İzleyin

    Photoshop Desktop | Heap-based Buffer Overflow (CWE-122)

    YüksekCVSS 7,8İstismar yok

    adobe · photoshop1 gün önce

  • CVE-2026-116003
    31İzleyin

    Photoshop Desktop | Out-of-bounds Write (CWE-787)

    YüksekCVSS 7,8İstismar yok

    adobe · photoshop1 gün önce

  • CVE-2026-116480
    31İzleyin

    Photoshop Desktop | Heap-based Buffer Overflow (CWE-122)

    YüksekCVSS 7,8İstismar yok

    adobe · photoshop1 gün önce

  • CVE-2026-117546
    31İzleyin

    Photoshop Desktop | Use After Free (CWE-416)

    YüksekCVSS 7,8İstismar yok

    adobe · photoshop1 gün önce

  • CVE-2026-117547
    31İzleyin

    Photoshop Desktop | Out-of-bounds Write (CWE-787)

    YüksekCVSS 7,8İstismar yok

    adobe · photoshop1 gün önce

  • CVE-2026-118383
    38İzleyin

    Pre-authentication use-after-free in MongoDB Server replica set primary catch-up

    KritikCVSS 9,5İstismar yok

    mongodb · mongodb server1 gün önce

  • CVE-2026-120817
    28İzleyin

    Post-authentication race condition in MongoDB Server geospatial schema validation

    YüksekCVSS 7,1İstismar yok

    mongodb · mongodb server1 gün önce

  • CVE-2026-120818
    28İzleyin

    Use-After-Free in MongoDB Server JavaScript Support for Aggregation Leads to Information Disclosure

    YüksekCVSS 7,1İstismar yok

    mongodb · mongodb server1 gün önce

  • CVE-2026-120821
    28İzleyin

    Post-authentication use-after-free in MongoDB Server aggregation sub-pipelines

    YüksekCVSS 7,1İstismar yok

    mongodb · mongodb server1 gün önce

  • CVE-2026-120822
    34İzleyin

    Missing Authorization Check in MongoDB Server Replication-Related Administrative Command Leads to Unauthorized Data Access

    YüksekCVSS 8,6İstismar yok

    mongodb · mongodb server1 gün önce

  • CVE-2026-120824
    34İzleyin

    Post-authentication use-after-free in MongoDB Server time-series bucket validation

    YüksekCVSS 8,7İstismar yok

    mongodb · mongodb server1 gün önce

  • CVE-2026-120825
    28İzleyin

    Improper Authorization in MongoDB Server Aggregation Framework View Definition Validation Leads to Unauthorized Collection Access

    YüksekCVSS 7,1İstismar yok

    mongodb · mongodb server1 gün önce

  • CVE-2026-120826
    28İzleyin

    Improper Authorization in MongoDB Server Sharded View Definition Handling Leads to Cross-Database Unauthorized Access

    YüksekCVSS 7,1İstismar yok

    mongodb · mongodb server1 gün önce

  • CVE-2026-120828
    34İzleyin

    Memory exhaustion via abandoned far-future read-concern waiters in disaggregated storage

    YüksekCVSS 8,7İstismar yok

    mongodb · mongodb server1 gün önce

  • CVE-2026-123263
    31İzleyin

    After Effects | Heap-based Buffer Overflow (CWE-122)

    YüksekCVSS 7,8İstismar yok

    adobe · after effects1 gün önce

  • CVE-2026-126065
    39İzleyin

    OpenObserve: Empty external password allows authentication bypass

    KritikCVSS 9,8İstismar yok

    openobserve · openobserve1 gün önce

  • CVE-2026-126080
    30İzleyin

    Active Support: Possible DoS vulnerability in Active Support safe_constantize

    YüksekCVSS 7,5İstismar yok

    rails · rails1 gün önce

  • CVE-2026-126081
    30İzleyin

    Action Pack: Possible Strong Parameters bypass in Parameters#each_key

    YüksekCVSS 7,5İstismar yok

    rails · rails1 gün önce

  • CVE-2026-126082
    39İzleyin

    Active Storage: Possible arbitrary file write and read in Active Storage image analysis

    KritikCVSS 9,8İstismar yok

    rails · rails1 gün önce

  • CVE-2026-126083
    29İzleyin

    Action Pack: Possible IP spoofing in Action Dispatch RemoteIp

    YüksekCVSS 7,4İstismar yok

    rails · rails1 gün önce

  • CVE-2026-48402
    31İzleyin

    Premiere Pro | Untrusted Search Path (CWE-426)

    YüksekCVSS 7,8İstismar yok

    adobe · premiere1 gün önce

  • CVE-2026-82002
    30İzleyin

    Media Encoder | Incorrect Authorization (CWE-863)

    YüksekCVSS 7,7İstismar yok

    adobe · media encoder1 gün önce

  • CVE-2026-82012
    31İzleyin

    Premiere Pro | Out-of-bounds Write (CWE-787)

    YüksekCVSS 7,8İstismar yok

    adobe · premiere1 gün önce

  • CVE-2026-92544
    34İzleyin

    SQL injection in the LLM usage counters of Kong Gateway Enterprise and Kong AI Gateway may allow a client to execute arbitrary SQL against t

    YüksekCVSS 8,7İstismar yok

    kong inc. · kong gateway enterprise1 gün önce

  • CVE-2026-107356
    34İzleyin

    U.S. Geological Survey Area Species Management Research Program unrestricted file upload

    YüksekCVSS 8,7İstismar yok

    u.s. geological survey · area species management research program1 gün önce

  • CVE-2026-113579
    39İzleyin

    Adobe Experience Manager | Improper Control of Generation of Code ('Code Injection') (CWE-94)

    KritikCVSS 9,9İstismar yok

    adobe · adobe experience manager as a cloud service1 gün önce

  • CVE-2026-113580
    39İzleyin

    Adobe Experience Manager | Improper Control of Generation of Code ('Code Injection') (CWE-94)

    KritikCVSS 9,9İstismar yok

    adobe · adobe experience manager as a cloud service1 gün önce

  • CVE-2026-114371
    39İzleyin

    Adobe Experience Manager | Incorrect Authorization (CWE-863)

    KritikCVSS 9,9İstismar yok

    adobe · adobe experience manager as a cloud service1 gün önce

  • CVE-2026-118483
    32İzleyin

    Dimension | Improper Input Validation (CWE-20)

    YüksekCVSS 8,2İstismar yok

    adobe · adobe dimension1 gün önce

  • CVE-2026-119017
    39İzleyin

    Adobe Experience Manager | Incorrect Authorization (CWE-863)

    KritikCVSS 9,9İstismar yok

    adobe · adobe experience manager 6.51 gün önce

  • CVE-2026-121349
    38İzleyin

    Adobe Connect | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)

    KritikCVSS 9,6İstismar yok

    adobe · adobe connect1 gün önce

  • CVE-2026-121350
    30İzleyin

    Adobe Connect | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)

    YüksekCVSS 7,7İstismar yok

    adobe · adobe connect1 gün önce

  • CVE-2026-121351
    40Planlayın

    Adobe Connect | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)

    KritikCVSS 10,0İstismar yok

    adobe · adobe connect1 gün önce

  • CVE-2026-121352
    40Planlayın

    Adobe Connect | Incorrect Authorization (CWE-863)

    KritikCVSS 10,0İstismar yok

    adobe · adobe connect1 gün önce

  • CVE-2026-121353
    40Planlayın

    Adobe Connect | Improper Neutralization of CRLF Sequences ('CRLF Injection') (CWE-93)

    KritikCVSS 10,0İstismar yok

    adobe · adobe connect1 gün önce

  • CVE-2026-121354
    39İzleyin

    Adobe Connect | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)

    KritikCVSS 9,9İstismar yok

    adobe · adobe connect1 gün önce

  • CVE-2026-121355
    36İzleyin

    Adobe Connect | Incorrect Authorization (CWE-863)

    KritikCVSS 9,1İstismar yok

    adobe · adobe connect1 gün önce

  • CVE-2026-121356
    40Planlayın

    Adobe Connect | Server-Side Request Forgery (SSRF) (CWE-918)

    KritikCVSS 10,0İstismar yok

    adobe · adobe connect1 gün önce

  • CVE-2026-121887
    39İzleyin

    Adobe Connect | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)

    KritikCVSS 9,9İstismar yok

    adobe · adobe connect1 gün önce

  • CVE-2026-121889
    40Planlayın

    Adobe Connect | Server-Side Request Forgery (SSRF) (CWE-918)

    KritikCVSS 10,0İstismar yok

    adobe · adobe connect1 gün önce

  • CVE-2026-121890
    30İzleyin

    Adobe Connect | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)

    YüksekCVSS 7,7İstismar yok

    adobe · adobe connect1 gün önce

  • CVE-2026-121892
    39İzleyin

    Adobe Connect | Improper Control of Generation of Code ('Code Injection') (CWE-94)

    KritikCVSS 9,9İstismar yok

    adobe · adobe connect1 gün önce

  • CVE-2026-121894
    39İzleyin

    Adobe Connect | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)

    KritikCVSS 9,9İstismar yok

    adobe · adobe connect1 gün önce

  • CVE-2026-121896
    39İzleyin

    Adobe Connect | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)

    KritikCVSS 9,9İstismar yok

    adobe · adobe connect1 gün önce

  • CVE-2026-121898
    39İzleyin

    Adobe Connect | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)

    KritikCVSS 9,9İstismar yok

    adobe · adobe connect1 gün önce

  • CVE-2026-121900
    33İzleyin

    Adobe Connect | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)

    YüksekCVSS 8,3İstismar yok

    adobe · adobe connect1 gün önce

  • CVE-2026-121902
    37İzleyin

    Adobe Connect | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)

    KritikCVSS 9,4İstismar yok

    adobe · adobe connect1 gün önce

  • CVE-2026-121904
    38İzleyin

    Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)

    KritikCVSS 9,6İstismar yok

    adobe · adobe connect1 gün önce

  • CVE-2026-121906
    39İzleyin

    Adobe Connect | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)

    KritikCVSS 9,9İstismar yok

    adobe · adobe connect1 gün önce

  • CVE-2026-121908
    39İzleyin

    Adobe Connect | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)

    KritikCVSS 9,9İstismar yok

    adobe · adobe connect1 gün önce