Güvenlik açıkları (CVE)

NVD (National Vulnerability Database) verisiyle CVE kayıtlarını arayın. Aktif olarak istismar edilen açıklar için CISA KEV kataloğunu inceleyin.

Yerel veritabanında 21.940 CVE, 0 KEV kaydı · son NVD senkronu 30.10.2026 10:16. Belirli bir CVE kimliği yerelde yoksa NVD'den anlık getirilir.

CVEAçıklamaCVSSYayın
CVE-2026-87704 Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. 7.0 13.10.2026
CVE-2026-87705 Improper verification of source of a communication channel in Windows Hyper-V allows an unauthorized attacker to bypass a security feature over an adjacent network. 7.4 13.10.2026
CVE-2026-87706 Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally. 7.8 13.10.2026
CVE-2026-87707 Heap-based buffer overflow in Windows Fax and Scan Service allows an authorized attacker to elevate privileges locally. 7.8 13.10.2026
CVE-2026-87708 Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. 7.0 13.10.2026
CVE-2026-87695 Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally. 7.8 13.10.2026
CVE-2026-87696 Improper verification of cryptographic signature in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network. 7.5 13.10.2026
CVE-2026-87698 Out-of-bounds read in Windows Remote Access Service Infrastructure allows an authorized attacker to disclose information locally. 5.5 13.10.2026
CVE-2026-87699 Heap-based buffer overflow in Winlogon allows an authorized attacker to elevate privileges locally. 7.8 13.10.2026
CVE-2026-87700 Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. 7.8 13.10.2026
CVE-2026-85943 Time-of-check time-of-use (toctou) race condition in Reliable Multicast Transport Driver (RMCAST) allows an authorized attacker to elevate privileges locally. 7.0 13.10.2026
CVE-2026-85945 Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. 7.8 13.10.2026
CVE-2026-87691 Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally. 7.8 13.10.2026
CVE-2026-87692 Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally. 7.8 13.10.2026
CVE-2026-87693 Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. 7.0 13.10.2026
CVE-2026-87694 Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. 7.8 13.10.2026
CVE-2026-85935 Buffer over-read in Windows USB Driver allows an authorized attacker to disclose information locally. 5.5 13.10.2026
CVE-2026-85936 Double free in Windows Shell allows an unauthorized attacker to execute code over a network. 8.8 13.10.2026
CVE-2026-85938 Improper access control in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally. 5.5 13.10.2026
CVE-2026-85939 Weak authentication in Windows Kernel allows an authorized attacker to bypass a security feature over a network. 5.3 13.10.2026
CVE-2026-85941 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally. 7.0 13.10.2026
CVE-2026-85930 Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally. 7.0 13.10.2026
CVE-2026-85931 Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network. 8.8 13.10.2026
CVE-2026-85933 Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. 7.8 13.10.2026
CVE-2026-85934 Use after free in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally. 7.0 13.10.2026

Kaynak: NIST NVD CVE API 2.0. CVE açıklamaları kaynağındaki İngilizce metinle gösterilir. Bu ürün NVD API'sini kullanır ancak NVD tarafından onaylanmamış veya sertifikalandırılmamıştır.

Onaylıyor musunuz?