Güvenlik açıkları (CVE)
NVD (National Vulnerability Database) verisiyle CVE kayıtlarını arayın. Aktif olarak istismar edilen açıklar için CISA KEV kataloğunu inceleyin.
Yerel veritabanında 22.082 CVE, 0 KEV kaydı · son NVD senkronu 30.10.2026 16:16. Belirli bir CVE kimliği yerelde yoksa NVD'den anlık getirilir.
| CVE | Açıklama | CVSS | Yayın |
|---|---|---|---|
| CVE-2026-110076 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of t | 5.4 | 13.10.2026 |
| CVE-2026-110077 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of t | 5.4 | 13.10.2026 |
| CVE-2026-110078 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of t | 5.4 | 13.10.2026 |
| CVE-2026-110079 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of t | 5.4 | 13.10.2026 |
| CVE-2026-110080 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of t | 5.4 | 13.10.2026 |
| CVE-2026-109415 | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when | 5.4 | 13.10.2026 |
| CVE-2026-110037 | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when | 5.4 | 13.10.2026 |
| CVE-2026-110073 | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when | 5.4 | 13.10.2026 |
| CVE-2026-106632 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of t | 5.4 | 13.10.2026 |
| CVE-2026-106633 | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when | 5.4 | 13.10.2026 |
| CVE-2026-96951 | Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network. | 8.8 | 13.10.2026 |
| CVE-2026-96866 | Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a network. | 7.5 | 13.10.2026 |
| CVE-2026-96861 | Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a network. | 7.5 | 13.10.2026 |
| CVE-2026-96862 | Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-96863 | Heap-based buffer overflow in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack. | 6.8 | 13.10.2026 |
| CVE-2026-96864 | Double free in Microsoft Failover Cluster Virtual Driver allows an unauthorized attacker to execute code over a network. | 9.8 | 13.10.2026 |
| CVE-2026-96865 | Exposure of sensitive system information to an unauthorized control sphere in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally. | 5.6 | 13.10.2026 |
| CVE-2026-96858 | Missing authentication for critical function in Windows Security Account Manager allows an authorized attacker to perform tampering locally. | 5.5 | 13.10.2026 |
| CVE-2026-96859 | Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally. | 5.5 | 13.10.2026 |
| CVE-2026-96860 | Out-of-bounds read in Windows USB Print Driver allows an authorized attacker to disclose information locally. | 5.5 | 13.10.2026 |
| CVE-2026-96202 | Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network. | 8.8 | 13.10.2026 |
| CVE-2026-96206 | Use of uninitialized resource in Windows Subsystem for Linux allows an authorized attacker to disclose information locally. | 5.5 | 13.10.2026 |
| CVE-2026-96108 | Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-95943 | Double free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
| CVE-2026-88159 | Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network. | 8.8 | 13.10.2026 |
Kaynak: NIST NVD CVE API 2.0. CVE açıklamaları kaynağındaki İngilizce metinle gösterilir. Bu ürün NVD API'sini kullanır ancak NVD tarafından onaylanmamış veya sertifikalandırılmamıştır.