Kasım 2026: sömürülen ve yeni ciddi CVE kayıtları

Local Privilege Escalation Vulnerability in the Virtual Intranet Access (VIA) Client

• RCE
• Yerel yetki yükseltme

hewlett packard enterprise (hpe) · virtual intranet access (via)1 gün önce

Authenticated Local Missing Integrity Verification Vulnerability leads to Local Privilege Escalation in Virtual Intranet Access (VIA) Client

• RCE
• Yerel yetki yükseltme

hewlett packard enterprise (hpe) · virtual intranet access (via)1 gün önce

Unauthenticated Improper Certificate Validation leads to Authentication Bypass in HPE Networking Virtual Intranet Access (VIA)

• Kimlik doğrulamasız
• Kimlik doğrulama atlatma

hewlett packard enterprise (hpe) · virtual intranet access (via)1 gün önce

Authenticated Local Command Injection Vulnerability in the VIA Client for Linux

• RCE
• Yerel yetki yükseltme
• Komut enjeksiyonu

hewlett packard enterprise (hpe) · virtual intranet access (via)1 gün önce

Unauthenticated Buffer Overflow Vulnerability Leading to Denial-of-Service in HPE Networking VIA

• Kimlik doğrulamasız
• Hizmet dışı bırakma

hewlett packard enterprise (hpe) · virtual intranet access (via)1 gün önce

Authenticated Command Injection Vulnerability in HPE Networking VIA

• RCE
• Komut enjeksiyonu

hewlett packard enterprise (hpe) · virtual intranet access (via)1 gün önce

Local Privilege Escalation in Virtual Intranet Access (VIA) Client for Linux

• Yerel yetki yükseltme

hewlett packard enterprise (hpe) · virtual intranet access (via)1 gün önce

Unauthenticated Hardcoded Password Vulnerabilities in HPE Networking Fabric Composer Command-Line Interface allow Unauthorized Administrative Access

• Kimlik doğrulamasız
• Gömülü kimlik bilgisi

hewlett packard enterprise (hpe) · fabric composer1 gün önce

Authentication Bypass in HPE Networking Fabric Composer allows Arbitrary Code Execution

• Girişsiz RCE
• Kimlik doğrulama atlatma

hewlett packard enterprise (hpe) · fabric composer1 gün önce

Use of Hardcoded Credentials in HPE Networking Fabric Composer Could Allow Adjacent Arbitrary Code Execution

• Girişsiz RCE
• Gömülü kimlik bilgisi

hewlett packard enterprise (hpe) · fabric composer1 gün önce

Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer API

hewlett packard enterprise (hpe) · fabric composer1 gün önce

Improper Certificate Validation in HPE Networking Fabric Composer

• Kimlik doğrulamasız

hewlett packard enterprise (hpe) · fabric composer1 gün önce

Unauthenticated Adjacent Improper Certificate Validation Vulnerabilities in HPE Networking Fabric Composer

• Kimlik doğrulamasız

hewlett packard enterprise (hpe) · fabric composer1 gün önce

Local Privilege Escalation in HPE Networking Fabric Composer

• Yerel yetki yükseltme

hewlett packard enterprise (hpe) · fabric composer1 gün önce

Authentication Bypass in the Affected Interface of HPE Networking Fabric Composer

• Kimlik doğrulamasız
• Kimlik doğrulama atlatma

hewlett packard enterprise (hpe) · fabric composer1 gün önce

Unauthenticated Improper Restriction of Excessive Authentication Attempts in the API of HPE Networking Fabric Composer

• Kimlik doğrulamasız

hewlett packard enterprise (hpe) · fabric composer1 gün önce

Unauthenticated Adjacent Improper Certificate Validation Vulnerability leads to Information Disclosure in HPE Networking Fabric Composer

• Kimlik doğrulamasız

hewlett packard enterprise (hpe) · fabric composer1 gün önce

Authenticated Missing Integrity Verification in API of HPE Networking Fabric Composer

hewlett packard enterprise (hpe) · fabric composer1 gün önce

Authenticated Local Arbitrary File Write Vulnerability in HPE Networking Fabric Composer

• Yerel yetki yükseltme

hewlett packard enterprise (hpe) · fabric composer1 gün önce

Local Privilege Escalation Vulnerabilities in HPE Networking Fabric Composer

• Yerel yetki yükseltme

hewlett packard enterprise (hpe) · fabric composer1 gün önce

Authenticated Adjacent Sensitive Information Disclosure in HPE Networking Fabric Composer

hewlett packard enterprise (hpe) · fabric composer1 gün önce

Unauthenticated Remote Denial-of-Service (DoS) Vulnerability in the API of HPE Networking Fabric Composer

• Kimlik doğrulamasız
• Hizmet dışı bırakma

hewlett packard enterprise (hpe) · fabric composer1 gün önce

Authentication Bypass in the API Endpoint of HPE Networking Fabric Composer

• Kimlik doğrulamasız
• Kimlik doğrulama atlatma

hewlett packard enterprise (hpe) · fabric composer1 gün önce

Privilege Escalation in the SSH Interface of HPE Networking Fabric Composer

hewlett packard enterprise (hpe) · fabric composer1 gün önce

Unauthenticated Adjacent SQL Injection Vulnerability in HPE Networking Fabric Composer

• Kimlik doğrulamasız
• SQL enjeksiyonu

hewlett packard enterprise (hpe) · fabric composer1 gün önce

Unauthenticated Missing Integrity Verification in HPE Networking Fabric Composer

• Girişsiz RCE

hewlett packard enterprise (hpe) · fabric composer1 gün önce

Unauthenticated Improper Certificate Validation in HPE Networking Fabric Composer

• Kimlik doğrulamasız

hewlett packard enterprise (hpe) · fabric composer1 gün önce

Unauthenticated Improper Certificate Validation Leads to Authentication Bypass in HPE Networking Fabric Composer

• Kimlik doğrulamasız
• Kimlik doğrulama atlatma

hewlett packard enterprise (hpe) · fabric composer1 gün önce

Local Privilege Escalation in HPE Networking Fabric Composer

• Yerel yetki yükseltme

hewlett packard enterprise (hpe) · fabric composer1 gün önce

Privilege Escalation in HPE Networking Fabric Composer API

hewlett packard enterprise (hpe) · fabric composer1 gün önce

Angular: Denial of Service via RouterLink Query Parameter Retention in Server-Side Rendering (SSR)

• Kimlik doğrulamasız
• Hizmet dışı bırakma

angular · angular1 gün önce

Angular: Denial of Service via Unmatched Empty-Path Outlet Route Matching in Server-Side Rendering (SSR)

• Kimlik doğrulamasız
• Hizmet dışı bırakma

angular · angular1 gün önce

Report Deserialization Code Execution

• RCE
• Deserializasyon

perforce · puppet enterprise1 gün önce

Certificate Name Authorization Bypass

• RCE

perforce · puppet enterprise1 gün önce

Stanza: RCE via pickle deserialization in the lemmatizer

• RCE
• Deserializasyon

stanfordnlp · stanza1 gün önce

Incorrect authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to poten

• Girişsiz RCE
• Erişim denetimi (IDOR)

google · chrome1 gün önce

Use after free in Views in Google Chrome on on Windows prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to exe

• Girişsiz RCE
• Bellek hatası

google · chrome1 gün önce

Use after free in Prerender in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code outside the sandbox

• Girişsiz RCE
• Bellek hatası

google · chrome1 gün önce

Use after free in CSS in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a c

• Girişsiz RCE
• Bellek hatası

google · chrome1 gün önce

Out of bounds write in ANGLE in Google Chrome on on Windows prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrar

• Girişsiz RCE
• Bellek hatası

google · chrome1 gün önce

Use after free in Layout in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via

• Girişsiz RCE
• Bellek hatası

google · chrome1 gün önce

Buffer overflow in Media in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via

• Girişsiz RCE
• Bellek hatası

google · chrome1 gün önce

Race condition in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr

• Girişsiz RCE
• Yarış durumu

google · chrome1 gün önce

Race condition in Mobile in Google Chrome on on iOS prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a craft

• Kimlik doğrulamasız
• Yarış durumu

google · chrome1 gün önce

Use after free in GPU in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a c

• Girişsiz RCE
• Bellek hatası

google · chrome1 gün önce

Improper state validation in XML in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted

• Kimlik doğrulamasız

google · chrome1 gün önce

Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr

• Girişsiz RCE

google · chrome1 gün önce

Incorrect authorization in FileSystem in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to pot

• Girişsiz RCE
• Erişim denetimi (IDOR)

google · chrome1 gün önce

Use after free in Modularization in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sand

• Girişsiz RCE
• Bellek hatası

google · chrome1 gün önce

Improper input validation in Performance in Google Chrome prior to 157.0.8103.38 allowed a local attacker to potentially execute arbitrary c

• RCE

google · chrome1 gün önce

Incorrect authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypas

• Kimlik doğrulamasız
• Erişim denetimi (IDOR)

google · chrome1 gün önce

Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr

• Girişsiz RCE

google · chrome1 gün önce

Use after free in Track in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a

• Girişsiz RCE
• Bellek hatası

google · chrome1 gün önce

Use after free in WTF in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a c

• Girişsiz RCE
• Bellek hatası

google · chrome1 gün önce

Incorrect authorization in FileSystem in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to pot

• Girişsiz RCE
• Erişim denetimi (IDOR)

google · chrome1 gün önce

Use after free in Network in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside th

• Girişsiz RCE
• Bellek hatası

google · chrome1 gün önce

Memory corruption in GPU in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary co

• Girişsiz RCE
• Bellek hatası

google · chrome1 gün önce

Use after free in WebXR in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to execute arbitrary

• Girişsiz RCE
• Bellek hatası

google · chrome1 gün önce

Use after free in Mobile in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to potentially exec

• Girişsiz RCE
• Bellek hatası

google · chrome1 gün önce

Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside the sand

• Girişsiz RCE

google · chrome1 gün önce

Race condition in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr

• Girişsiz RCE
• Yarış durumu

google · chrome1 gün önce

Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr

• Girişsiz RCE

google · chrome1 gün önce

Use after free in Compositing in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox

• Girişsiz RCE
• Bellek hatası

google · chrome1 gün önce

Out of bounds read in Skia in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to exe

• Girişsiz RCE
• Bellek hatası

google · chrome1 gün önce

Buffer overflow in Skia in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code outside the sandbox via

• Girişsiz RCE
• Bellek hatası

google · chrome1 gün önce

Improper input validation in Mobile in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a craf

• Kimlik doğrulamasız

google · chrome1 gün önce

Use after free in WebGPU in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the

• Girişsiz RCE
• Bellek hatası

google · chrome1 gün önce

Improper privilege management in Navigation in Google Chrome on on iOS prior to 157.0.8103.38 allowed a remote attacker who had compromised

• Girişsiz RCE

google · chrome1 gün önce

Uncontrolled recursion in SVG in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside

• Girişsiz RCE
• Hizmet dışı bırakma

google · chrome1 gün önce

Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr

• Girişsiz RCE

google · chrome1 gün önce

Use after free in Printing in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox vi

• Girişsiz RCE
• Bellek hatası

google · chrome1 gün önce

Improper state validation in GPU in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process

• Girişsiz RCE

google · chrome1 gün önce

Use after free in DOM in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a c

• Girişsiz RCE
• Bellek hatası

google · chrome1 gün önce

Missing authorization in BackgroundFetch in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a

• Kimlik doğrulamasız
• Erişim denetimi (IDOR)

google · chrome1 gün önce

Incorrect authorization in FileSystem in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to pot

• Girişsiz RCE
• Erişim denetimi (IDOR)

google · chrome1 gün önce

Incorrect authorization in BackgroundFetch in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via

• Kimlik doğrulamasız
• Erişim denetimi (IDOR)

google · chrome1 gün önce

Confused deputy in BackgroundFetch in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially bypass web origin policy

• Kimlik doğrulamasız

google · chrome1 gün önce

Out of bounds read in Permissions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process

• Girişsiz RCE
• Bellek hatası

google · chrome1 gün önce

Buffer overflow in PDFium in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via

• Girişsiz RCE
• Bellek hatası

google · chrome1 gün önce

Use after free in TabStrip in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code outside the sandbox v

• Girişsiz RCE
• Bellek hatası

google · chrome1 gün önce

Use after free in Paint in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a

• Girişsiz RCE
• Bellek hatası

google · chrome1 gün önce

Use after free in SVG in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a c

• Girişsiz RCE
• Bellek hatası

google · chrome1 gün önce

Use after free in Controls in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox vi

• Girişsiz RCE
• Bellek hatası

google · chrome1 gün önce

Improper input validation in Prerender in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer pr

• Kimlik doğrulamasız

google · chrome1 gün önce

Use after free in Canvas in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via

• Girişsiz RCE
• Bellek hatası

google · chrome1 gün önce

Improper adherence to coding standards in XML in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbit

• Girişsiz RCE

google · chrome1 gün önce

Use after free in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the s

• Girişsiz RCE
• Bellek hatası

google · chrome1 gün önce

Use after free in WebAudio in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox vi

• Girişsiz RCE
• Bellek hatası

google · chrome1 gün önce

Use after free in Scheduling in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox

• Girişsiz RCE
• Bellek hatası

google · chrome1 gün önce

Use after free in WebRTC in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via

• Girişsiz RCE
• Bellek hatası

google · chrome1 gün önce

Use after free in Mobile in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to execute arbitrar

• Girişsiz RCE
• Bellek hatası

google · chrome1 gün önce

Incorrect reference resolution in Images in Google Chrome on on Mac prior to 157.0.8103.38 allowed a remote attacker who had compromised the

• Girişsiz RCE

google · chrome1 gün önce

Information loss in BackgroundFetch in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a craf

• Kimlik doğrulamasız

google · chrome1 gün önce

Security issue in Platform in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML

• Kimlik doğrulamasız

google · chrome1 gün önce

Type confusion in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to execute arbitr

• Girişsiz RCE

google · chrome1 gün önce

Out of bounds read in Internals in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process t

• Girişsiz RCE
• Bellek hatası

google · chrome1 gün önce

Use after free in ANGLE in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code outside the sandbox via

• Girişsiz RCE
• Bellek hatası

google · chrome1 gün önce

Buffer overflow in Dawn in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the

• Girişsiz RCE
• Bellek hatası

google · chrome1 gün önce

Improper input validation in Browser in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer proc

• Girişsiz RCE

google · chrome1 gün önce

Type confusion in PDFium in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via

• Girişsiz RCE

google · chrome1 gün önce