Güvenlik açıkları (CVE)

NVD (National Vulnerability Database) verisiyle CVE kayıtlarını arayın. Aktif olarak istismar edilen açıklar için CISA KEV kataloğunu inceleyin.

Yerel veritabanında 22.082 CVE, 0 KEV kaydı · son NVD senkronu 30.10.2026 16:16. Belirli bir CVE kimliği yerelde yoksa NVD'den anlık getirilir.

CVEAçıklamaCVSSYayın
CVE-2026-85318 Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally. 7.8 13.10.2026
CVE-2026-83933 Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to disclose information locally. 5.5 13.10.2026
CVE-2026-83922 Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally. 7.8 13.10.2026
CVE-2026-83923 Relative path traversal in OpenSSH for Windows allows an unauthorized attacker to execute code over a network. 8.8 13.10.2026
CVE-2026-83916 Double free in Windows Error Reporting allows an authorized attacker to execute code locally. 7.0 13.10.2026
CVE-2026-83917 Use after free in Windows ALPC allows an authorized attacker to elevate privileges locally. 7.0 13.10.2026
CVE-2026-83918 Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges locally. 7.8 13.10.2026
CVE-2026-83919 Heap-based buffer overflow in Microsoft Internet Messaging API allows an authorized attacker to execute code locally. 7.8 13.10.2026
CVE-2026-83920 Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. 7.8 13.10.2026
CVE-2026-83921 Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. 7.0 13.10.2026
CVE-2026-83910 Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network. 9.8 13.10.2026
CVE-2026-83911 Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. 7.0 13.10.2026
CVE-2026-83912 Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally. 7.8 13.10.2026
CVE-2026-83913 Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. 7.8 13.10.2026
CVE-2026-83914 Use after free in Microsoft XML allows an unauthorized attacker to execute code over a network. 8.1 13.10.2026
CVE-2026-83915 Use after free in Windows Diagnostic Policy Service allows an authorized attacker to elevate privileges locally. 7.0 13.10.2026
CVE-2026-83905 Exposure of sensitive system information to an unauthorized control sphere in Windows Shell allows an authorized attacker to disclose information locally. 4.7 13.10.2026
CVE-2026-83906 Incorrect implementation of authentication algorithm in Windows Shell allows an unauthorized attacker to perform spoofing over a network. 6.5 13.10.2026
CVE-2026-83907 Exposure of sensitive system information to an unauthorized control sphere in Windows Hello allows an authorized attacker to disclose information locally. 5.5 13.10.2026
CVE-2026-83908 Release of invalid pointer or reference in RPC Runtime allows an authorized attacker to elevate privileges locally. 7.0 13.10.2026
CVE-2026-83909 Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. 4.7 13.10.2026
CVE-2026-83901 Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. 7.0 13.10.2026
CVE-2026-83902 Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally. 7.8 13.10.2026
CVE-2026-83903 Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally. 7.8 13.10.2026
CVE-2026-83904 Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally. 5.5 13.10.2026

Kaynak: NIST NVD CVE API 2.0. CVE açıklamaları kaynağındaki İngilizce metinle gösterilir. Bu ürün NVD API'sini kullanır ancak NVD tarafından onaylanmamış veya sertifikalandırılmamıştır.

Onaylıyor musunuz?