Güvenlik açıkları (CVE)

NVD (National Vulnerability Database) verisiyle CVE kayıtlarını arayın. Aktif olarak istismar edilen açıklar için CISA KEV kataloğunu inceleyin.

Yerel veritabanında 22.082 CVE, 0 KEV kaydı · son NVD senkronu 30.10.2026 16:16. Belirli bir CVE kimliği yerelde yoksa NVD'den anlık getirilir.

CVEAçıklamaCVSSYayın
CVE-2026-88152 Use after free in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally. 7.8 13.10.2026
CVE-2026-88157 Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network. 8.8 13.10.2026
CVE-2026-88146 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally. 7.0 13.10.2026
CVE-2026-88147 Heap-based buffer overflow in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges locally. 7.8 13.10.2026
CVE-2026-88149 Double free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. 7.0 13.10.2026
CVE-2026-88139 Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. 7.0 13.10.2026
CVE-2026-88140 Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally. 5.5 13.10.2026
CVE-2026-88141 Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. 7.0 13.10.2026
CVE-2026-88142 Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network. 8.8 13.10.2026
CVE-2026-88143 Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally. 7.8 13.10.2026
CVE-2026-88133 Improper authorization in Windows Portable Device Enumerator Service allows an authorized attacker to elevate privileges locally. 7.8 13.10.2026
CVE-2026-88134 Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. 7.8 13.10.2026
CVE-2026-88124 Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. 7.0 13.10.2026
CVE-2026-88127 Use after free in Windows SMB Server allows an authorized attacker to elevate privileges locally. 7.0 13.10.2026
CVE-2026-88128 Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. 7.8 13.10.2026
CVE-2026-88117 Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network. 8.1 13.10.2026
CVE-2026-88118 Integer overflow or wraparound in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally. 7.8 13.10.2026
CVE-2026-88119 Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network. 8.1 13.10.2026
CVE-2026-88120 Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network. 8.1 13.10.2026
CVE-2026-88121 Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network. 8.8 13.10.2026
CVE-2026-88110 Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. 7.0 13.10.2026
CVE-2026-88113 Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. 7.0 13.10.2026
CVE-2026-88115 Out-of-bounds read in Windows Server for NFS allows an unauthorized attacker to execute code over a network. 8.8 13.10.2026
CVE-2026-88106 Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. 7.0 13.10.2026
CVE-2026-88107 Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. 7.0 13.10.2026

Kaynak: NIST NVD CVE API 2.0. CVE açıklamaları kaynağındaki İngilizce metinle gösterilir. Bu ürün NVD API'sini kullanır ancak NVD tarafından onaylanmamış veya sertifikalandırılmamıştır.

Onaylıyor musunuz?