Güvenlik açıkları (CVE)
NVD (National Vulnerability Database) verisiyle CVE kayıtlarını arayın. Aktif olarak istismar edilen açıklar için CISA KEV kataloğunu inceleyin.
Yerel veritabanında 21.940 CVE, 0 KEV kaydı · son NVD senkronu 30.10.2026 10:16. Belirli bir CVE kimliği yerelde yoksa NVD'den anlık getirilir.
| CVE | Açıklama | CVSS | Yayın |
|---|---|---|---|
| CVE-2026-85927 | Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-85928 | Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network. | 9.8 | 13.10.2026 |
| CVE-2026-85910 | Buffer over-read in Windows StateRepository API allows an authorized attacker to disclose information locally. | 5.5 | 13.10.2026 |
| CVE-2026-85911 | Use after free in Windows StateRepository API allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-85912 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
| CVE-2026-85905 | Heap-based buffer overflow in Windows UI Immersive Server allows an authorized attacker to elevate privileges locally. | 8.8 | 13.10.2026 |
| CVE-2026-85906 | Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-85908 | Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-85909 | Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally. | 5.5 | 13.10.2026 |
| CVE-2026-85879 | Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
| CVE-2026-85881 | Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges over a network. | 8.0 | 13.10.2026 |
| CVE-2026-85884 | Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-85869 | Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-85870 | Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
| CVE-2026-85871 | Heap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-85872 | Use after free in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-85874 | Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to execute code locally. | 7.8 | 13.10.2026 |
| CVE-2026-85863 | Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-85864 | Improper privilege management in Python allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-85865 | Improper authentication in Windows DHCP Server allows an authorized attacker to bypass a security feature locally. | 5.5 | 13.10.2026 |
| CVE-2026-85866 | Exposure of sensitive system information to an unauthorized control sphere in Windows ALPC allows an authorized attacker to disclose information locally. | 4.7 | 13.10.2026 |
| CVE-2026-85867 | Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-85868 | Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
| CVE-2026-85856 | Heap-based buffer overflow in Windows Internet Connection Sharing (ICS) allows an authorized attacker to execute code over an adjacent network. | 7.1 | 13.10.2026 |
| CVE-2026-85857 | Insertion of sensitive information into log file in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally. | 5.5 | 13.10.2026 |
Kaynak: NIST NVD CVE API 2.0. CVE açıklamaları kaynağındaki İngilizce metinle gösterilir. Bu ürün NVD API'sini kullanır ancak NVD tarafından onaylanmamış veya sertifikalandırılmamıştır.