Güvenlik açıkları (CVE)
NVD (National Vulnerability Database) verisiyle CVE kayıtlarını arayın. Aktif olarak istismar edilen açıklar için CISA KEV kataloğunu inceleyin.
Yerel veritabanında 22.082 CVE, 0 KEV kaydı. Belirli bir CVE kimliği yerelde yoksa NVD'den anlık getirilir.
| CVE | Açıklama | CVSS | Yayın |
|---|---|---|---|
| CVE-2026-70201 | Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service locally. | 5.5 | 13.10.2026 |
| CVE-2026-70205 | Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
| CVE-2026-70207 | Heap-based buffer overflow in Network Policy Server (NPS) allows an authorized attacker to execute code over a network. | 7.5 | 13.10.2026 |
| CVE-2026-70208 | Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to disclose information locally. | 5.5 | 13.10.2026 |
| CVE-2026-70195 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to disclose information locally. | 4.7 | 13.10.2026 |
| CVE-2026-70197 | Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network. | 8.1 | 13.10.2026 |
| CVE-2026-70198 | Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
| CVE-2026-70184 | Improper resolution of path equivalence in Windows Backup Engine allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-70185 | Protection mechanism failure in Windows PowerShell allows an authorized attacker to bypass a security feature locally. | 8.8 | 13.10.2026 |
| CVE-2026-70172 | Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-70173 | Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally. | 5.5 | 13.10.2026 |
| CVE-2026-70177 | Numeric truncation error in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-70164 | Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
| CVE-2026-70168 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
| CVE-2026-70169 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
| CVE-2026-70157 | Heap-based buffer overflow in Windows System Information Console allows an unauthorized attacker to execute code over a network. | 9.8 | 13.10.2026 |
| CVE-2026-70158 | Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine | 8.8 | 13.10.2026 |
| CVE-2026-70163 | Allocation of resources without limits or throttling in OpenSSH for Windows allows an unauthorized attacker to deny service over a network. | 7.5 | 13.10.2026 |
| CVE-2026-70149 | Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose information locally. | 8.8 | 13.10.2026 |
| CVE-2026-70150 | Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
| CVE-2026-70151 | Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-70153 | Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network. | 9.8 | 13.10.2026 |
| CVE-2026-70156 | Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
| CVE-2026-70141 | Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally. | 5.5 | 13.10.2026 |
| CVE-2026-70142 | Untrusted search path in Windows Update Service allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
Kaynak: NIST NVD CVE API 2.0. CVE açıklamaları kaynağındaki İngilizce metinle gösterilir. Bu ürün NVD API'sini kullanır ancak NVD tarafından onaylanmamış veya sertifikalandırılmamıştır.