Güvenlik açıkları (CVE)
NVD (National Vulnerability Database) verisiyle CVE kayıtlarını arayın. Aktif olarak istismar edilen açıklar için CISA KEV kataloğunu inceleyin.
Yerel veritabanında 22.082 CVE, 0 KEV kaydı. Belirli bir CVE kimliği yerelde yoksa NVD'den anlık getirilir.
| CVE | Açıklama | CVSS | Yayın |
|---|---|---|---|
| CVE-2026-83508 | Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-78459 | Heap-based buffer overflow in Windows Internet Information Services allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-81964 | Use of hard-coded credentials in Windows Update Orchestrator Service allows an authorized attacker to bypass a security feature locally. | 5.5 | 13.10.2026 |
| CVE-2026-81969 | Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-81971 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows NTFS allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
| CVE-2026-77496 | Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network. | 8.8 | 13.10.2026 |
| CVE-2026-72969 | Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
| CVE-2026-73027 | External control of system or configuration setting in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-70580 | Missing authentication for critical function in Windows Credential Guard allows an authorized attacker to perform spoofing locally. | 7.8 | 13.10.2026 |
| CVE-2026-71347 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Security Center allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
| CVE-2026-72934 | Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
| CVE-2026-72955 | Use after free in Windows Application Compatibility Cache allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
| CVE-2026-72968 | Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
| CVE-2026-70566 | Null pointer dereference in Windows Schannel allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-70299 | Improper access control in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. | 8.8 | 13.10.2026 |
| CVE-2026-70286 | Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-70277 | Out-of-bounds read in Windows Fast FAT Driver allows an unauthorized attacker to disclose information locally. | 5.5 | 13.10.2026 |
| CVE-2026-70278 | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-70280 | Incorrect authorization in Windows Hello allows an authorized attacker to bypass a security feature locally. | 5.5 | 13.10.2026 |
| CVE-2026-70272 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
| CVE-2026-70274 | Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-70275 | Untrusted pointer dereference in Windows CD-ROM Driver allows an unauthorized attacker to execute code over a network. | 9.8 | 13.10.2026 |
| CVE-2026-70270 | Untrusted pointer dereference in Windows Container Isolation FS Filter Driver allows an authorized attacker to elevate privileges locally. | 5.5 | 13.10.2026 |
| CVE-2026-70258 | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. | 8.8 | 13.10.2026 |
| CVE-2026-70260 | Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally. | 5.5 | 13.10.2026 |
Kaynak: NIST NVD CVE API 2.0. CVE açıklamaları kaynağındaki İngilizce metinle gösterilir. Bu ürün NVD API'sini kullanır ancak NVD tarafından onaylanmamış veya sertifikalandırılmamıştır.