Güvenlik açıkları (CVE)

NVD (National Vulnerability Database) verisiyle CVE kayıtlarını arayın. Aktif olarak istismar edilen açıklar için CISA KEV kataloğunu inceleyin.

Yerel veritabanında 21.940 CVE, 0 KEV kaydı · son NVD senkronu 30.10.2026 10:16. Belirli bir CVE kimliği yerelde yoksa NVD'den anlık getirilir.

CVEAçıklamaCVSSYayın
CVE-2026-85858 Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. 7.8 13.10.2026
CVE-2026-85859 Null pointer dereference in Windows Message Queuing Queue Manager allows an authorized attacker to deny service over a network. 6.5 13.10.2026
CVE-2026-85860 Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to elevate privileges locally. 7.8 13.10.2026
CVE-2026-85861 Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally. 7.8 13.10.2026
CVE-2026-85849 Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally. 7.8 13.10.2026
CVE-2026-85850 Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges locally. 7.8 13.10.2026
CVE-2026-85851 Use after free in Windows SmartScreen allows an authorized attacker to elevate privileges locally. 7.8 13.10.2026
CVE-2026-85852 Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally. 5.5 13.10.2026
CVE-2026-85853 Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. 7.0 13.10.2026
CVE-2026-85854 Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. 7.0 13.10.2026
CVE-2026-85855 Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. 7.0 13.10.2026
CVE-2026-85841 Use after free in Windows DHCP Server allows an authorized attacker to execute code over a network. 6.6 13.10.2026
CVE-2026-85842 Use of externally-controlled format string in Windows Image Acquisition allows an authorized attacker to elevate privileges locally. 7.8 13.10.2026
CVE-2026-85843 Use of uninitialized resource in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally. 7.8 13.10.2026
CVE-2026-85846 Use after free in Windows Web Account Manager allows an authorized attacker to elevate privileges locally. 7.0 13.10.2026
CVE-2026-85847 Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose information over a network. 6.5 13.10.2026
CVE-2026-85848 Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally. 7.8 13.10.2026
CVE-2026-85833 Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally. 7.8 13.10.2026
CVE-2026-85834 Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally. 7.0 13.10.2026
CVE-2026-85840 Files or directories accessible to external parties in Windows Event Viewer allows an authorized attacker to disclose information over a network. 6.5 13.10.2026
CVE-2026-85828 Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally. 7.0 13.10.2026
CVE-2026-85829 Double free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally. 7.8 13.10.2026
CVE-2026-85830 Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally. 5.5 13.10.2026
CVE-2026-85831 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to disclose information locally. 5.5 13.10.2026
CVE-2026-85832 Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally. 7.8 13.10.2026

Kaynak: NIST NVD CVE API 2.0. CVE açıklamaları kaynağındaki İngilizce metinle gösterilir. Bu ürün NVD API'sini kullanır ancak NVD tarafından onaylanmamış veya sertifikalandırılmamıştır.

Onaylıyor musunuz?