\n<\/p>\n
Google<\/a>, Chrome<\/a> taray\u0131c\u0131s\u0131nda tespit edilen \u00fc\u00e7 g\u00fcvenlik a\u00e7\u0131\u011f\u0131n\u0131 d\u00fczeltmek i\u00e7in pazartesi g\u00fcn\u00fc plan d\u0131\u015f\u0131 (out-of-band) bir g\u00fcncelleme yay\u0131nlad\u0131. Bu a\u00e7\u0131klar\u0131n aras\u0131nda, halihaz\u0131rda siber sald\u0131rganlar taraf\u0131ndan aktif olarak istismar edildi\u011fi s\u00f6ylenen kritik bir zafiyet de bulunuyor.<\/p>\n TEHL\u0130KEL\u0130 A\u00c7IK: CVE-2025-5419<\/strong><\/p>\n CVE-2025-5419 koduyla takip edilen a\u00e7\u0131k, 8.8 CVSS skoru ile y\u00fcksek \u00f6nem derecesine sahip. Sorun, Chrome\u2019un V8 JavaScript ve WebAssembly motorunda yer alan “bellek s\u0131n\u0131rlar\u0131 d\u0131\u015f\u0131nda okuma ve yazma” (out-of-bounds read\/write) hatas\u0131ndan kaynaklan\u0131yor.<\/p>\n ABD Ulusal G\u00fcvenlik A\u00e7\u0131klar\u0131 Veritaban\u0131\u2019nda yay\u0131mlanan a\u00e7\u0131klamada, bu a\u00e7\u0131\u011f\u0131n \u201c\u00f6zel olarak haz\u0131rlanm\u0131\u015f bir HTML sayfas\u0131 arac\u0131l\u0131\u011f\u0131yla bellek bozulmas\u0131na neden olarak uzaktan sald\u0131rganlar\u0131n sistemi istismar etmesine\u201d imkan tan\u0131d\u0131\u011f\u0131 ifade edildi.<\/p>\n ANAL\u0130Z EK\u0130B\u0130 TESP\u0130T ETT\u0130<\/strong><\/p>\n The Hacker News\u2019e g\u00f6re a\u00e7\u0131k, Google Tehdit Analiz Grubu\u2019ndan Cl\u00e9ment Lecigne ve Beno\u00eet Sevens taraf\u0131ndan 27 May\u0131s 2025’te ke\u015ffedildi. Google, bunun ard\u0131ndan yap\u0131land\u0131rma g\u00fcncellemesi yay\u0131nlayarak a\u00e7\u0131\u011f\u0131 kapatt\u0131\u011f\u0131n\u0131 duyurdu.<\/p>\n \u015eirket, sald\u0131r\u0131n\u0131n ayr\u0131nt\u0131lar\u0131 ya da arkas\u0131ndaki tehdit akt\u00f6rleri hakk\u0131nda fazla bilgi vermedi. Bu, genellikle g\u00fcvenlik yamalar\u0131 geni\u015f \u00e7apta kullan\u0131c\u0131lar taraf\u0131ndan uygulanmadan \u00f6nce k\u00f6t\u00fc niyetli ki\u015filerin a\u00e7\u0131\u011f\u0131 daha fazla istismar etmesini \u00f6nlemek i\u00e7in yap\u0131lan bir uygulama.<\/p>\n Google, yapt\u0131\u011f\u0131 a\u00e7\u0131klamada \u015fu ifadeye yer verdi:<\/p>\n \u201cGoogle, CVE-2025-5419 i\u00e7in bir istismar\u0131n dola\u015f\u0131mda oldu\u011funun fark\u0131ndad\u0131r.\u201d<\/p>\n BU YILIN \u0130K\u0130NC\u0130 A\u00c7I\u011eI<\/strong><\/p>\n CVE-2025-5419, Google’\u0131n bu y\u0131l kapatt\u0131\u011f\u0131 ikinci s\u0131f\u0131r g\u00fcn (zero-day) a\u00e7\u0131\u011f\u0131 oldu. \u0130lk a\u00e7\u0131k, CVE-2025-2783 koduyla biliniyor ve Rusya\u2019daki kurulu\u015flara y\u00f6nelik sald\u0131r\u0131larda Kaspersky taraf\u0131ndan tespit edilmi\u015fti.<\/p>\n Bir yaz\u0131l\u0131mda, donan\u0131mda ya da sistemde bulunan hen\u00fcz geli\u015ftirici taraf\u0131ndan fark edilmemi\u015f veya fark edilip hen\u00fcz d\u00fczeltilmemi\u015f bir g\u00fcvenlik a\u00e7\u0131\u011f\u0131na \u201cs\u0131f\u0131r g\u00fcn\u201d ad\u0131 veriliyor.<\/p>\n G\u00dcNCELLEME UYARISI<\/strong><\/p>\n Kullan\u0131c\u0131lar\u0131n, g\u00fcvenlik risklerinden korunmak i\u00e7in Chrome\u2019un a\u015fa\u011f\u0131daki s\u00fcr\u00fcmlerine g\u00fcncelleme yapmalar\u0131 \u00f6neriliyor:<\/p>\n Windows ve macOS: 137.0.7151.68 veya 137.0.7151.69<\/p>\n Linux: 137.0.7151.68<\/p>\n Ayr\u0131ca Microsoft Edge, Brave, Opera ve Vivaldi gibi Chromium tabanl\u0131 taray\u0131c\u0131lar kullananlar\u0131n da benzer g\u00fcvenlik yamalar\u0131 yay\u0131Nland\u0131\u011f\u0131nda derhal g\u00fcncelleme yapmalar\u0131 tavsiye ediliyor.<\/p>\n<\/div>\n