Güvenlik açıkları (CVE)
NVD (National Vulnerability Database) verisiyle CVE kayıtlarını arayın. Aktif olarak istismar edilen açıklar için CISA KEV kataloğunu inceleyin.
Yerel veritabanında 41.269 CVE, 0 KEV kaydı · son NVD senkronu 15.11.2026 05:30. Belirli bir CVE kimliği yerelde yoksa NVD'den anlık getirilir.
| CVE | Açıklama | CVSS | Yayın |
|---|---|---|---|
| CVE-2026-24227 | NVIDIA TensorRT for contains a vulnerability where a user might cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution. | 9.8 | 15.07.2026 |
| CVE-2026-15766 | Uninitialized Use in Skia in Google Chrome prior to 150.0.7871.125 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High) | 6.5 | 15.07.2026 |
| CVE-2026-15767 | Heap buffer overflow in libyuv in Google Chrome on Windows prior to 150.0.7871.125 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted video file. (Chromium security severity: High) | 8.8 | 15.07.2026 |
| CVE-2026-15768 | Insufficient policy enforcement in HTML-in-Canvas in Google Chrome prior to 150.0.7871.125 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: High) | 6.5 | 15.07.2026 |
| CVE-2026-15769 | Insufficient validation of untrusted input in Linux Toolkit Theming in Google Chrome on Linux prior to 150.0.7871.125 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium | 8.3 | 15.07.2026 |
| CVE-2026-15770 | Uninitialized Use in V8 in Google Chrome prior to 150.0.7871.125 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High) | 6.5 | 15.07.2026 |
| CVE-2026-15771 | Insufficient validation of untrusted input in Media in Google Chrome on Windows prior to 150.0.7871.125 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. | 5.3 | 15.07.2026 |
| CVE-2026-15772 | Use after free in GPU in Google Chrome on Android prior to 150.0.7871.125 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High) | 8.3 | 15.07.2026 |
| CVE-2026-15643 | AWS HealthLake MCP Server (awslabs.healthlake-mcp-server) is a Model Context Protocol server that enables AI assistants to interact with AWS HealthLake FHIR datastores. A server-side request forgery in the pagination handling component in AWS awslabs.healthlak | 9.2 | 15.07.2026 |
| CVE-2026-15738 | Incorrect behavior order in the Gateway API listener-rule generation in Amazon AWS Load Balancer Controller before 3.4.2 might allow an authenticated remote user to intercept, spoof, or deny another namespace's gRPC traffic on a shared Gateway via a crafted HT | 5.8 | 15.07.2026 |
| CVE-2026-15749 | A security flaw has been discovered in mastergo-design mastergo-magic-mcp up to 0.2.0. This issue affects the function execute of the file src/tools/get-c2d.ts of the component mcp__C2d. Performing a manipulation of the argument filePath results in path traver | 1.9 | 15.07.2026 |
| CVE-2026-15764 | Use after free in Ozone in Google Chrome on Linux prior to 150.0.7871.125 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical) | 7.5 | 15.07.2026 |
| CVE-2026-15765 | Use after free in Ozone in Google Chrome prior to 150.0.7871.125 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical) | 7.5 | 15.07.2026 |
| CVE-2026-53633 | Vitest is a testing framework powered by Vite. From 3.0.0 until 3.2.5, 4.1.8, and 5.0.0-beta.4, Vitest Browser Mode exposed a cdp() API that forwarded raw Chrome DevTools Protocol methods without being gated by allowWrite or allowExec, allowing a remote client | 9.8 | 14.07.2026 |
| CVE-2026-50649 | Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally. | 7.8 | 14.07.2026 |
| CVE-2026-50650 | Improper control of generation of code ('code injection') in .NET Framework allows an unauthorized attacker to elevate privileges locally. | 7.8 | 14.07.2026 |
| CVE-2026-50651 | Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network. | 7.5 | 14.07.2026 |
| CVE-2026-50659 | Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network. | 6.5 | 14.07.2026 |
| CVE-2026-50524 | Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to deny service over a network. | 7.5 | 14.07.2026 |
| CVE-2026-50525 | Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network. | 7.5 | 14.07.2026 |
| CVE-2026-50526 | Improper link resolution before file access ('link following') in .NET allows an authorized attacker to perform tampering locally. | 5.5 | 14.07.2026 |
| CVE-2026-50527 | Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network. | 7.5 | 14.07.2026 |
| CVE-2026-50528 | Incorrect authorization in .NET allows an unauthorized attacker to bypass a security feature over a network. | 8.2 | 14.07.2026 |
| CVE-2026-50646 | Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally. | 7.8 | 14.07.2026 |
| CVE-2026-50648 | Allocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny service over a network. | 7.5 | 14.07.2026 |
Kaynak: NIST NVD CVE API 2.0. CVE açıklamaları kaynağındaki İngilizce metinle gösterilir. Bu ürün NVD API'sini kullanır ancak NVD tarafından onaylanmamış veya sertifikalandırılmamıştır.