Güvenlik açıkları (CVE)
NVD (National Vulnerability Database) verisiyle CVE kayıtlarını arayın. Aktif olarak istismar edilen açıklar için CISA KEV kataloğunu inceleyin.
Yerel veritabanında 24.267 CVE, 0 KEV kaydı · son NVD senkronu 31.10.2026 16:17. Belirli bir CVE kimliği yerelde yoksa NVD'den anlık getirilir.
| CVE | Açıklama | CVSS | Yayın |
|---|---|---|---|
| CVE-2026-83914 | Use after free in Microsoft XML allows an unauthorized attacker to execute code over a network. | 8.1 | 13.10.2026 |
| CVE-2026-83915 | Use after free in Windows Diagnostic Policy Service allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
| CVE-2026-83905 | Exposure of sensitive system information to an unauthorized control sphere in Windows Shell allows an authorized attacker to disclose information locally. | 4.7 | 13.10.2026 |
| CVE-2026-83906 | Incorrect implementation of authentication algorithm in Windows Shell allows an unauthorized attacker to perform spoofing over a network. | 6.5 | 13.10.2026 |
| CVE-2026-83907 | Exposure of sensitive system information to an unauthorized control sphere in Windows Hello allows an authorized attacker to disclose information locally. | 5.5 | 13.10.2026 |
| CVE-2026-83908 | Release of invalid pointer or reference in RPC Runtime allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
| CVE-2026-83909 | Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. | 4.7 | 13.10.2026 |
| CVE-2026-83901 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
| CVE-2026-83902 | Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-83903 | Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-83904 | Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally. | 5.5 | 13.10.2026 |
| CVE-2026-83898 | Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally. | 5.5 | 13.10.2026 |
| CVE-2026-83892 | Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally. | 5.5 | 13.10.2026 |
| CVE-2026-83884 | Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally. | 5.5 | 13.10.2026 |
| CVE-2026-83887 | Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally. | 5.5 | 13.10.2026 |
| CVE-2026-83877 | Integer overflow or wraparound in HID Parser Library allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-83875 | Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally. | 5.5 | 13.10.2026 |
| CVE-2026-83868 | Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
| CVE-2026-83862 | Use after free in Windows Network Load Balancing allows an unauthorized attacker to execute code over an adjacent network. | 8.8 | 13.10.2026 |
| CVE-2026-83863 | Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-83852 | Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
| CVE-2026-83845 | Improper privilege management in Windows Internet (wininet.dll) allows an authorized attacker to perform spoofing locally. | 8.4 | 13.10.2026 |
| CVE-2026-83846 | Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
| CVE-2026-83847 | Heap-based buffer overflow in Microsoft Account allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-83848 | Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
Kaynak: NIST NVD CVE API 2.0. CVE açıklamaları kaynağındaki İngilizce metinle gösterilir. Bu ürün NVD API'sini kullanır ancak NVD tarafından onaylanmamış veya sertifikalandırılmamıştır.