Kasım 2026: sömürülen ve yeni ciddi CVE kayıtları

Improper resource exposure in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to ex

• Girişsiz RCE

google · chrome1 gün önce

Improper resource control in WebCodecs in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a c

• Kimlik doğrulamasız

google · chrome1 gün önce

Confused deputy in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass web or

• Kimlik doğrulamasız

google · chrome1 gün önce

Missing authorization in BackgroundFetch in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a

• Kimlik doğrulamasız
• Erişim denetimi (IDOR)

google · chrome1 gün önce

Use after free in Aura in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to potenti

• Girişsiz RCE
• Bellek hatası

google · chrome1 gün önce

Use after free in PDFium in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via

• Girişsiz RCE
• Bellek hatası

google · chrome1 gün önce

Buffer overflow in Media in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via

• Girişsiz RCE
• Bellek hatası

google · chrome1 gün önce

Use after free in Editing in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via

• Girişsiz RCE
• Bellek hatası

google · chrome1 gün önce

Use after free in DOM in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a c

• Girişsiz RCE
• Bellek hatası

google · chrome1 gün önce

Incorrect authorization in Extensions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer pro

• Girişsiz RCE
• Erişim denetimi (IDOR)

google · chrome1 gün önce

Out of bounds read in Media in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside t

• Girişsiz RCE
• Bellek hatası

google · chrome1 gün önce

Use after free in PictureInPicture in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to execut

• Girişsiz RCE
• Bellek hatası

google · chrome1 gün önce

Use after free in PerformanceAPIs in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the san

• Girişsiz RCE
• Bellek hatası

google · chrome1 gün önce

Use after free in Browser in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code outside the sandbox vi

• Girişsiz RCE
• Bellek hatası

google · chrome1 gün önce

Incorrect authorization in TrustedTypes in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a

• Kimlik doğrulamasız
• Erişim denetimi (IDOR)

google · chrome1 gün önce

Confused deputy in WebUI in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass web origi

• Kimlik doğrulamasız

google · chrome1 gün önce

Incorrect reference resolution in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering t

• Girişsiz RCE

google · chrome1 gün önce

Use after free in Animation in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox v

• Girişsiz RCE
• Bellek hatası

google · chrome1 gün önce

Use after free in Autofill in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to potentially ex

• Girişsiz RCE
• Bellek hatası

google · chrome1 gün önce

Use after free in Geometry in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox vi

• Girişsiz RCE
• Bellek hatası

google · chrome1 gün önce

Incomplete cleanup in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted H

• Kimlik doğrulamasız

google · chrome1 gün önce

Incorrect authorization in CORS in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass we

• Kimlik doğrulamasız
• Erişim denetimi (IDOR)

google · chrome1 gün önce

Out of bounds read in Media in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside t

• Girişsiz RCE
• Bellek hatası

google · chrome1 gün önce

Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr

• Girişsiz RCE

google · chrome1 gün önce

Use after free in PowerBookmarks in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process

• Girişsiz RCE
• Bellek hatası

google · chrome1 gün önce

Incorrect authorization in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted

• Kimlik doğrulamasız
• Erişim denetimi (IDOR)

google · chrome1 gün önce

Use after free in Passwords in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside

• Girişsiz RCE
• Bellek hatası

google · chrome1 gün önce

Use after free in Streaming in Google Chrome prior to 157.0.8103.38 allowed an adjacent attacker to execute arbitrary code inside the sandbo

• Girişsiz RCE
• Bellek hatası

google · chrome1 gün önce

Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr

• Girişsiz RCE

google · chrome1 gün önce

Integer overflow in GPU in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to potent

• Girişsiz RCE
• Bellek hatası

google · chrome1 gün önce

Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside the sand

• Girişsiz RCE

google · chrome1 gün önce

Incorrect authorization in Forms in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted

• Kimlik doğrulamasız
• Erişim denetimi (IDOR)

google · chrome1 gün önce

Security issue in Desktop in Google Chrome on on Mac prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer proce

• Girişsiz RCE

google · chrome1 gün önce

Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside the sand

• Girişsiz RCE

google · chrome1 gün önce

Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr

• Girişsiz RCE

google · chrome1 gün önce

Memory corruption in ANGLE in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary

• Girişsiz RCE
• Bellek hatası

google · chrome1 gün önce

Race condition in ANGLE in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the

• Girişsiz RCE
• Yarış durumu

google · chrome1 gün önce

Type confusion in CacheStorage in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbo

• Girişsiz RCE

google · chrome1 gün önce

Privilege elevation in Contacts in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbit

• Girişsiz RCE

google · chrome1 gün önce

Improper input validation in Network in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a cra

• Kimlik doğrulamasız

google · chrome1 gün önce

Use after free in Source in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via

• Girişsiz RCE
• Bellek hatası

google · chrome1 gün önce

Use after free in Navigation in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrar

• Girişsiz RCE
• Bellek hatası

google · chrome1 gün önce

Use after free in WebGL in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary cod

• Girişsiz RCE
• Bellek hatası

google · chrome1 gün önce

Buffer overflow in Dawn in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary cod

• Girişsiz RCE
• Bellek hatası

google · chrome1 gün önce

Buffer overflow in ANGLE in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code outside the sandbox via

• Girişsiz RCE
• Bellek hatası

google · chrome1 gün önce

Use after free in Extensions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to potentially

• Girişsiz RCE
• Bellek hatası

google · chrome1 gün önce

Missing authorization in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML

• Kimlik doğrulamasız
• Erişim denetimi (IDOR)

google · chrome1 gün önce

Incorrect authorization in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted

• Kimlik doğrulamasız
• Erişim denetimi (IDOR)

google · chrome1 gün önce

Use of released resource in GPU in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process t

• Girişsiz RCE

google · chrome1 gün önce

Use after free in TabStrip in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside t

• Girişsiz RCE
• Bellek hatası

google · chrome1 gün önce

Github.com/argoproj-labs/argocd-image-updater: argocd-image-updater: arbitrary command execution via crafted ssh repository proxy configuration

• RCE
• Komut enjeksiyonu

red hat · red hat openshift gitops1 gün önce

TinyUSB 0.21.0 Out-of-Bounds Write via mtp_container_get_string()

• Bellek hatası

hathach · tinyusb1 gün önce

Dell OS Recovery tool versions, prior to 2.4.4, contain a use of Untrusted Search Path vulnerability.

• RCE

dell · os recovery tool1 gün önce

Dell Wyse Management Suite, versions prior to 2609.0.0.155, contain an Improper Neutralization of Input During Web Page Generation ('Cross-s

• XSS

dell · wyse management suite1 gün önce

Dell Wyse Management Suite, versions prior to 2609.0.0.155, contain an Improper Neutralization of Input During Web Page Generation ('Cross-s

• XSS

dell · wyse management suite1 gün önce

node-opcua: Namespace-Level RBAC Fail-Open - Anonymous Write/Call Bypass via Unbound `DefaultRolePermissions

• Kimlik doğrulamasız
• Erişim denetimi (IDOR)

node-opcua · node-opcua1 gün önce

Etrel INCH AC Charging Station Hard-coded Default Credentials

• Kimlik doğrulamasız
• Gömülü kimlik bilgisi

etrel d.o.o. · etrel inch1 gün önce

HumHub 1.19.0 - Stored cross-site scripting in friendship confirmation

• XSS

humhub · humhub community edition1 gün önce

Authenticated OS Command Injection in Archer AX3000 v2 Offline Download Component

• RCE
• Komut enjeksiyonu

tp-link systems inc. · archer ax3000 v21 gün önce

Remote Code Execution via Unsafe Class Loading in Amazon Redshift JDBC Driver Connection Parameters

• Girişsiz RCE

aws · amazon-redshift-jdbc-driver1 gün önce

Out of bounds write in WebGL in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outsi

• Girişsiz RCE
• Bellek hatası

google · chrome1 gün önce

Docker Sandboxes host Git executes repository-controlled programs

docker · docker sandboxes1 gün önce

CVE-2026-22058 Authentication Bypass Vulnerability in StorageGRID (formerly StorageGRID Webscale)

• Kimlik doğrulamasız
• Kimlik doğrulama atlatma

netapp · storagegrid (formerly storagegrid webscale)1 gün önce

Emerson Ovation has several protocols that have no authentication, which could allow an attacker to change controller configuration or cause

• Kimlik doğrulamasız
• Kimlik doğrulama atlatma

1 gün önce

Emerson Ovation  was found to have no authentication of firmware signing and relies on an insecure checksum for integrity.

• Girişsiz RCE

1 gün önce

Use-after-free vulnerability in GitHub Enterprise Server allowed remote code execution in the Git service

• RCE
• Bellek hatası

github · enterprise server1 gün önce

The Core Temp kernel driver provided by ALCPU is vulnerable to insufficient access control in an exposed IOCTL, which may allow physical mem

alcpu · core temp1 gün önce

Tanium addressed an unauthorized code execution vulnerability in Threat Response.

• RCE
• Komut enjeksiyonu

tanium · threat response1 gün önce

Tanium addressed an unauthorized code execution vulnerability in Threat Response.

• RCE
• Komut enjeksiyonu

tanium · threat response1 gün önce

Tanium addressed a heap-based buffer overflow vulnerability in Deploy.

• Bellek hatası

tanium · deploy1 gün önce

Tanium addressed an improper certificate validation vulnerability in multiple products

• Kimlik doğrulamasız
• Zayıf kripto

tanium · tanos1 gün önce

Kore before 4.3.0 Integer Underflow Memory Exhaustion via http_header_recv()

• Kimlik doğrulamasız
• Bellek hatası

jorisvink · kore1 gün önce

emailflare before commit cf31f33 Missing Authorization via /api/keys Routes

• Erişim denetimi (IDOR)

0xdps · emailflare1 gün önce

emailflare before commit cf31f33 Missing Authorization via Inbox Compose Endpoint

• Erişim denetimi (IDOR)

0xdps · emailflare1 gün önce

RosarioSIS before 12.9 SQL Injection via period_id in Attendance Absence Report

• SQL enjeksiyonu

francoisjacquet · rosariosis1 gün önce

NoMachine nxwebrunner Heap-based Buffer Overflow Remote Code Execution Vulnerability.

• Girişsiz RCE
• Bellek hatası

1 gün önce

libwebsockets MQTT Protocol PUBACK Packet Handling Out-Of-Bounds Write Remote Code Execution Vulnerability.

• Girişsiz RCE
• Bellek hatası

1 gün önce

MLflow PickleEvaluationArtifact Deserialization of Untrusted Data Remote Code Execution Vulnerability

• RCE
• Deserializasyon

mlflow · mlflow1 gün önce

MLflow SHAP load_explainer Deserialization of Untrusted Data Remote Code Execution Vulnerability

• RCE
• Deserializasyon

mlflow · mlflow1 gün önce

MLflow get-artifacts Server-Side Request Forgery Information Disclosure Vulnerability.

• Kimlik doğrulamasız
• SSRF

1 gün önce

A weakness has been identified in TOTOLINK A950RG 4.1.2cu.5268_B20221104.

• Bellek hatası

1 gün önce

Quest Foglight for Databases AbstractParser XML External Entity Processing Information Disclosure Vulnerability.

• Kimlik doğrulamasız
• XXE

1 gün önce

Quest Foglight for Databases paFnUploadFileAndCreateInfo Directory Traversal Remote Code Execution Vulnerability.

• RCE
• Yol geçişi

1 gün önce

Quest Foglight for Databases extractAndCreateUploadInfoList Directory Traversal Remote Code Execution Vulnerability.

• RCE
• Yol geçişi

1 gün önce

Quest Foglight for Databases ForgeMBeanServerSupport Missing Authentication Remote Code Execution Vulnerability.

• Girişsiz RCE
• Kimlik doğrulama atlatma

1 gün önce

Quest Foglight for Databases writeTopologySectionToFile External Control of File Path Remote Code Execution Vulnerability.

• Girişsiz RCE
• Yol geçişi

1 gün önce

Quest Foglight for Databases baseRmiServiceExporter Deserialization of Untrusted Data Remote Code Execution Vulnerability.

• Girişsiz RCE
• Deserializasyon

1 gün önce

Quest Foglight for Databases runScript Incorrect Authorization Remote Code Execution Vulnerability.

• RCE
• Erişim denetimi (IDOR)

1 gün önce

Quest Foglight for Databases installLicense Directory Traversal Remote Code Execution Vulnerability.

• RCE
• Yol geçişi

1 gün önce

Quest Foglight for Databases loadManageServerLicense Directory Traversal Remote Code Execution Vulnerability.

• RCE
• Yol geçişi

1 gün önce

Quest Foglight for Databases loadEvolveLicense Directory Traversal Remote Code Execution Vulnerability.

• RCE
• Yol geçişi

1 gün önce

Quest Foglight for Databases renderTemplateString Server-Side Template Injection Remote Code Execution Vulnerability.

• RCE
• SSTI

1 gün önce

Quest Foglight for Databases unzipFile Directory Traversal Remote Code Execution Vulnerability.

• RCE
• Yol geçişi

1 gün önce

Quest Foglight for Databases getSource XML External Entity Processing Information Disclosure Vulnerability.

• Kimlik doğrulamasız
• XXE

1 gün önce

Quest Foglight for Databases EncryptionUtil Hardcoded Encyption Key Local Privilege Escalation Vulnerability.

• RCE
• Yerel yetki yükseltme
• Gömülü kimlik bilgisi

1 gün önce

Quest Foglight for Databases Incorrect Permission Assignment Local Privilege Escalation Vulnerability.

• RCE
• Yerel yetki yükseltme

1 gün önce

Pixar Animation Studio OpenUSD Crate File Parsing Double Free Remote Code Execution Vulnerability.

• RCE
• Bellek hatası

1 gün önce

TOTOLINK A950RG Basic Wireless Configuration cstecgi.cgi strcpy stack-based overflow

• Bellek hatası

totolink · a950rg1 gün önce

TOTOLINK A950RG Multi-SSID Configuration cstecgi.cgi delWiFiMultipleConfig stack-based overflow

• Bellek hatası

totolink · a950rg1 gün önce

TOTOLINK A950RG MAC Filter cstecgi.cgi setMacFilterRules stack-based overflow

• Bellek hatası

totolink · a950rg1 gün önce