Güvenlik açıkları (CVE)
NVD (National Vulnerability Database) verisiyle CVE kayıtlarını arayın. Aktif olarak istismar edilen açıklar için CISA KEV kataloğunu inceleyin.
Yerel veritabanında 22.082 CVE, 0 KEV kaydı · son NVD senkronu 30.10.2026 16:16. Belirli bir CVE kimliği yerelde yoksa NVD'den anlık getirilir.
| CVE | Açıklama | CVSS | Yayın |
|---|---|---|---|
| CVE-2026-88094 | Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Storage Library allows an authorized attacker to elevate privileges over a network. | 8.1 | 13.10.2026 |
| CVE-2026-87709 | Improper access control in Windows Host Guardian Service allows an authorized attacker to perform tampering locally. | 5.5 | 13.10.2026 |
| CVE-2026-87702 | Integer overflow or wraparound in Windows Resource Management (MRM) allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-87704 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
| CVE-2026-87705 | Improper verification of source of a communication channel in Windows Hyper-V allows an unauthorized attacker to bypass a security feature over an adjacent network. | 7.4 | 13.10.2026 |
| CVE-2026-87706 | Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-87707 | Heap-based buffer overflow in Windows Fax and Scan Service allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-87708 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
| CVE-2026-87695 | Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-87696 | Improper verification of cryptographic signature in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network. | 7.5 | 13.10.2026 |
| CVE-2026-87698 | Out-of-bounds read in Windows Remote Access Service Infrastructure allows an authorized attacker to disclose information locally. | 5.5 | 13.10.2026 |
| CVE-2026-87699 | Heap-based buffer overflow in Winlogon allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-87700 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-85943 | Time-of-check time-of-use (toctou) race condition in Reliable Multicast Transport Driver (RMCAST) allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
| CVE-2026-85945 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-87691 | Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-87692 | Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-87693 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
| CVE-2026-87694 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-85935 | Buffer over-read in Windows USB Driver allows an authorized attacker to disclose information locally. | 5.5 | 13.10.2026 |
| CVE-2026-85936 | Double free in Windows Shell allows an unauthorized attacker to execute code over a network. | 8.8 | 13.10.2026 |
| CVE-2026-85938 | Improper access control in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally. | 5.5 | 13.10.2026 |
| CVE-2026-85939 | Weak authentication in Windows Kernel allows an authorized attacker to bypass a security feature over a network. | 5.3 | 13.10.2026 |
| CVE-2026-85941 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
| CVE-2026-85930 | Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
Kaynak: NIST NVD CVE API 2.0. CVE açıklamaları kaynağındaki İngilizce metinle gösterilir. Bu ürün NVD API'sini kullanır ancak NVD tarafından onaylanmamış veya sertifikalandırılmamıştır.