Güvenlik açıkları (CVE)

NVD (National Vulnerability Database) verisiyle CVE kayıtlarını arayın. Aktif olarak istismar edilen açıklar için CISA KEV kataloğunu inceleyin.

Yerel veritabanında 22.082 CVE, 0 KEV kaydı. Belirli bir CVE kimliği yerelde yoksa NVD'den anlık getirilir.

CVEAçıklamaCVSSYayın
CVE-2026-70089 Heap-based buffer overflow in Windows GDI allows an unauthorized attacker to execute code over a network. 8.8 13.10.2026
CVE-2026-70090 Use of uninitialized resource in Windows Netlogon allows an authorized attacker to disclose information locally. 5.5 13.10.2026
CVE-2026-70075 Time-of-check time-of-use (toctou) race condition in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to bypass a security feature locally. 4.4 13.10.2026
CVE-2026-70076 Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. 7.0 13.10.2026
CVE-2026-70077 Use after free in Windows Kernel allows an authorized attacker to disclose information locally. 4.7 13.10.2026
CVE-2026-70084 Improper access control in Windows Projected File System allows an authorized attacker to disclose information locally. 5.5 13.10.2026
CVE-2026-70068 Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an unauthorized attacker to elevate privileges over a network. 8.8 13.10.2026
CVE-2026-70069 Stack-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network. 8.8 13.10.2026
CVE-2026-70072 Allocation of resources without limits or throttling in Windows Netlogon allows an authorized attacker to deny service over a network. 6.5 13.10.2026
CVE-2026-70060 Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. 7.8 13.10.2026
CVE-2026-70062 Double free in Windows Libarchive allows an unauthorized attacker to execute code over a network. 8.1 13.10.2026
CVE-2026-70063 Out-of-bounds read in Windows Kernel allows an authorized attacker to disclose information locally. 4.7 13.10.2026
CVE-2026-70064 Integer underflow (wrap or wraparound) in Windows Kerberos allows an authorized attacker to elevate privileges locally. 7.8 13.10.2026
CVE-2026-70066 Use after free in Windows DHCP Server allows an authorized attacker to elevate privileges locally. 7.0 13.10.2026
CVE-2026-70067 Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. 7.0 13.10.2026
CVE-2026-70054 Heap-based buffer overflow in Windows NetBIOS allows an authorized attacker to elevate privileges locally. 7.8 13.10.2026
CVE-2026-70055 Exposure of sensitive system information to an unauthorized control sphere in Windows Cryptographic Services allows an authorized attacker to disclose information locally. 5.5 13.10.2026
CVE-2026-70056 Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally. 7.0 13.10.2026
CVE-2026-70057 Incorrect authorization in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to bypass a security feature locally. 5.5 13.10.2026
CVE-2026-70058 Out-of-bounds write in Windows DHCP Server allows an unauthorized attacker to execute code over a network. 7.5 13.10.2026
CVE-2026-70059 Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally. 7.8 13.10.2026
CVE-2026-70048 Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally. 7.8 13.10.2026
CVE-2026-70051 Access of resource using incompatible type ('type confusion') in Windows SmartScreen allows an authorized attacker to elevate privileges locally. 7.8 13.10.2026
CVE-2026-70052 Integer overflow or wraparound in Windows PowerShell allows an authorized attacker to execute code locally. 7.8 13.10.2026
CVE-2026-70010 Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. 7.8 13.10.2026

Kaynak: NIST NVD CVE API 2.0. CVE açıklamaları kaynağındaki İngilizce metinle gösterilir. Bu ürün NVD API'sini kullanır ancak NVD tarafından onaylanmamış veya sertifikalandırılmamıştır.

Onaylıyor musunuz?