Güvenlik açıkları (CVE)

NVD (National Vulnerability Database) verisiyle CVE kayıtlarını arayın. Aktif olarak istismar edilen açıklar için CISA KEV kataloğunu inceleyin.

Yerel veritabanında 22.082 CVE, 0 KEV kaydı · son NVD senkronu 30.10.2026 16:16. Belirli bir CVE kimliği yerelde yoksa NVD'den anlık getirilir.

CVEAçıklamaCVSSYayın
CVE-2026-83836 Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code locally. 7.8 13.10.2026
CVE-2026-83837 Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. 7.8 13.10.2026
CVE-2026-83838 Integer underflow (wrap or wraparound) in Windows Bluetooth A2DP driver allows an authorized attacker to elevate privileges over an adjacent network. 8.0 13.10.2026
CVE-2026-83826 Untrusted pointer dereference in Windows Error Reporting allows an authorized attacker to elevate privileges locally. 7.8 13.10.2026
CVE-2026-83827 Heap-based buffer overflow in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges locally. 7.0 13.10.2026
CVE-2026-83828 Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally. 7.8 13.10.2026
CVE-2026-83829 Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. 7.8 13.10.2026
CVE-2026-83830 Heap-based buffer overflow in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally. 7.8 13.10.2026
CVE-2026-83832 Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally. 7.8 13.10.2026
CVE-2026-83792 Incorrect authorization in Windows Device Install Service allows an authorized attacker to elevate privileges locally. 7.8 13.10.2026
CVE-2026-83793 Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally. 7.0 13.10.2026
CVE-2026-83794 Out-of-bounds read in Windows Portable Device MTP Driver allows an authorized attacker to disclose information locally. 5.5 13.10.2026
CVE-2026-83795 Heap-based buffer overflow in Windows IKE Extension allows an unauthorized attacker to deny service over a network. 7.5 13.10.2026
CVE-2026-83796 Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. 7.8 13.10.2026
CVE-2026-83797 Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network. 8.8 13.10.2026
CVE-2026-83798 Improper verification of cryptographic signature in Windows Update Stack allows an authorized attacker to perform spoofing locally. 5.5 13.10.2026
CVE-2026-83786 Generation of error message containing sensitive information in Windows NTFS allows an authorized attacker to disclose information locally. 4.7 13.10.2026
CVE-2026-83787 Insufficient verification of data authenticity in Windows DHCP Server allows an authorized attacker to bypass a security feature locally. 5.5 13.10.2026
CVE-2026-83788 Buffer over-read in Windows RNDIS allows an unauthorized attacker to disclose information with a physical attack. 4.6 13.10.2026
CVE-2026-83789 Heap-based buffer overflow in Windows SMB Client allows an unauthorized attacker to elevate privileges over a network. 9.8 13.10.2026
CVE-2026-83790 Use after free in Windows Hello allows an authorized attacker to elevate privileges locally. 7.0 13.10.2026
CVE-2026-83791 Improper authorization in Windows Virtual Input allows an authorized attacker to elevate privileges locally. 7.8 13.10.2026
CVE-2026-83784 Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges over a network. 8.8 13.10.2026
CVE-2026-83785 Use after free in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally. 7.0 13.10.2026
CVE-2026-83769 Use after free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally. 7.8 13.10.2026

Kaynak: NIST NVD CVE API 2.0. CVE açıklamaları kaynağındaki İngilizce metinle gösterilir. Bu ürün NVD API'sini kullanır ancak NVD tarafından onaylanmamış veya sertifikalandırılmamıştır.

Onaylıyor musunuz?