Güvenlik açıkları (CVE)
NVD (National Vulnerability Database) verisiyle CVE kayıtlarını arayın. Aktif olarak istismar edilen açıklar için CISA KEV kataloğunu inceleyin.
Yerel veritabanında 20.758 CVE, 0 KEV kaydı · son NVD senkronu 29.10.2026 16:15. Belirli bir CVE kimliği yerelde yoksa NVD'den anlık getirilir.
| CVE | Açıklama | CVSS | Yayın |
|---|---|---|---|
| CVE-2026-110690 | Cloud Commander (cloudcmd) versions 19.20.2 through 19.21.1 contains a path traversal vulnerability in the GET /api/v1/pack endpoint where the onGET handler at server/rest/index.js:130 calls the unguarded root() function instead of the root.resolve() validatio | 8.7 | 14.10.2026 |
| CVE-2026-110447 | Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as exploited in the wild in September and October 2026, a different vulnerability than CVE-2025-66208. This is an OS command injection in | 9.2 | 14.10.2026 |
| CVE-2026-96521 | Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | 7.8 | 14.10.2026 |
| CVE-2026-96866 | Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a network. | 7.5 | 13.10.2026 |
| CVE-2026-96861 | Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a network. | 7.5 | 13.10.2026 |
| CVE-2026-96862 | Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-96863 | Heap-based buffer overflow in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack. | 6.8 | 13.10.2026 |
| CVE-2026-96864 | Double free in Microsoft Failover Cluster Virtual Driver allows an unauthorized attacker to execute code over a network. | 9.8 | 13.10.2026 |
| CVE-2026-96865 | Exposure of sensitive system information to an unauthorized control sphere in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally. | 5.6 | 13.10.2026 |
| CVE-2026-96858 | Missing authentication for critical function in Windows Security Account Manager allows an authorized attacker to perform tampering locally. | 5.5 | 13.10.2026 |
| CVE-2026-96859 | Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally. | 5.5 | 13.10.2026 |
| CVE-2026-96860 | Out-of-bounds read in Windows USB Print Driver allows an authorized attacker to disclose information locally. | 5.5 | 13.10.2026 |
| CVE-2026-88159 | Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network. | 8.8 | 13.10.2026 |
| CVE-2026-88152 | Use after free in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-88157 | Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network. | 8.8 | 13.10.2026 |
| CVE-2026-88146 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
| CVE-2026-88147 | Heap-based buffer overflow in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-88149 | Double free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
| CVE-2026-88139 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
| CVE-2026-88140 | Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally. | 5.5 | 13.10.2026 |
| CVE-2026-88141 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
| CVE-2026-88142 | Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network. | 8.8 | 13.10.2026 |
| CVE-2026-88143 | Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-88133 | Improper authorization in Windows Portable Device Enumerator Service allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-88134 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
Kaynak: NIST NVD CVE API 2.0. CVE açıklamaları kaynağındaki İngilizce metinle gösterilir. Bu ürün NVD API'sini kullanır ancak NVD tarafından onaylanmamış veya sertifikalandırılmamıştır.