Güvenlik açıkları (CVE)
NVD (National Vulnerability Database) verisiyle CVE kayıtlarını arayın. Aktif olarak istismar edilen açıklar için CISA KEV kataloğunu inceleyin.
Yerel veritabanında 22.082 CVE, 0 KEV kaydı. Belirli bir CVE kimliği yerelde yoksa NVD'den anlık getirilir.
| CVE | Açıklama | CVSS | Yayın |
|---|---|---|---|
| CVE-2026-83570 | Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-83571 | Null pointer dereference in Windows Audio Service allows an authorized attacker to disclose information locally. | 5.5 | 13.10.2026 |
| CVE-2026-83573 | Integer overflow or wraparound in Windows Kernel Mode Driver allows an unauthorized attacker to elevate privileges with a physical attack. | 6.8 | 13.10.2026 |
| CVE-2026-83521 | Out-of-bounds read in Windows IKE Extension allows an authorized attacker to disclose information over a network. | 6.5 | 13.10.2026 |
| CVE-2026-83522 | Reliance on untrusted inputs in a security decision in Windows IKE Extension allows an unauthorized attacker to perform spoofing over a network. | 8.1 | 13.10.2026 |
| CVE-2026-83523 | Heap-based buffer overflow in Windows Image Acquisition allows an unauthorized attacker to execute code over a network. | 9.8 | 13.10.2026 |
| CVE-2026-83564 | Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
| CVE-2026-83565 | Buffer over-read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally. | 5.5 | 13.10.2026 |
| CVE-2026-83566 | Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
| CVE-2026-83515 | Use of uninitialized resource in RPC Runtime allows an unauthorized attacker to disclose information over a network. | 7.5 | 13.10.2026 |
| CVE-2026-83516 | Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over a network. | 7.5 | 13.10.2026 |
| CVE-2026-83517 | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. | 9.8 | 13.10.2026 |
| CVE-2026-83518 | Heap-based buffer overflow in RPC Runtime allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-83519 | Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network. | 9.8 | 13.10.2026 |
| CVE-2026-83509 | Untrusted search path in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
| CVE-2026-83510 | Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
| CVE-2026-83511 | Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network. | 7.4 | 13.10.2026 |
| CVE-2026-83513 | Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-83514 | Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-83499 | Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-83500 | Url redirection to untrusted site ('open redirect') in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack. | 6.1 | 13.10.2026 |
| CVE-2026-83504 | Time-of-check time-of-use (toctou) race condition in Windows SmartScreen allows an authorized attacker to disclose information locally. | 4.7 | 13.10.2026 |
| CVE-2026-83505 | Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
| CVE-2026-83506 | Untrusted search path in Servicing Stack Updates allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-83507 | Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to disclose information locally. | 5.5 | 13.10.2026 |
Kaynak: NIST NVD CVE API 2.0. CVE açıklamaları kaynağındaki İngilizce metinle gösterilir. Bu ürün NVD API'sini kullanır ancak NVD tarafından onaylanmamış veya sertifikalandırılmamıştır.