Güvenlik açıkları (CVE)

NVD (National Vulnerability Database) verisiyle CVE kayıtlarını arayın. Aktif olarak istismar edilen açıklar için CISA KEV kataloğunu inceleyin.

Yerel veritabanında 24.267 CVE, 0 KEV kaydı · son NVD senkronu 31.10.2026 16:17. Belirli bir CVE kimliği yerelde yoksa NVD'den anlık getirilir.

CVEAçıklamaCVSSYayın
CVE-2026-83718 Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. 7.0 13.10.2026
CVE-2026-83719 Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally. 5.5 13.10.2026
CVE-2026-83720 Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally. 7.0 13.10.2026
CVE-2026-83708 Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. 7.0 13.10.2026
CVE-2026-83709 Heap-based buffer overflow in Windows NTLM allows an authorized attacker to elevate privileges locally. 7.8 13.10.2026
CVE-2026-83710 Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally. 7.0 13.10.2026
CVE-2026-83712 Out-of-bounds write in Windows NTFS allows an authorized attacker to execute code locally. 7.8 13.10.2026
CVE-2026-83713 Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally. 5.5 13.10.2026
CVE-2026-83714 Use of uninitialized resource in Windows HTTP.sys allows an authorized attacker to disclose information locally. 5.5 13.10.2026
CVE-2026-83703 Out-of-bounds read in Windows Wi-Fi Driver allows an unauthorized attacker to deny service over an adjacent network. 6.5 13.10.2026
CVE-2026-83704 Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. 7.8 13.10.2026
CVE-2026-83705 Exposure of sensitive system information to an unauthorized control sphere in Windows HTTP.sys allows an authorized attacker to disclose information locally. 5.5 13.10.2026
CVE-2026-83706 Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally. 6.7 13.10.2026
CVE-2026-83707 Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally. 7.0 13.10.2026
CVE-2026-83697 Time-of-check time-of-use (toctou) race condition in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally. 4.7 13.10.2026
CVE-2026-83698 Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally. 7.8 13.10.2026
CVE-2026-83699 Stack-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally. 7.8 13.10.2026
CVE-2026-83700 Use after free in Windows Now Playing Session Manager allows an authorized attacker to elevate privileges locally. 7.8 13.10.2026
CVE-2026-83701 Use after free in Windows Now Playing Session Manager allows an authorized attacker to elevate privileges locally. 7.0 13.10.2026
CVE-2026-83702 Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. 7.0 13.10.2026
CVE-2026-83691 Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to elevate privileges locally. 7.8 13.10.2026
CVE-2026-83692 Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. 7.8 13.10.2026
CVE-2026-83693 Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network. 9.8 13.10.2026
CVE-2026-83694 Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally. 7.0 13.10.2026
CVE-2026-83695 Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally. 5.5 13.10.2026

Kaynak: NIST NVD CVE API 2.0. CVE açıklamaları kaynağındaki İngilizce metinle gösterilir. Bu ürün NVD API'sini kullanır ancak NVD tarafından onaylanmamış veya sertifikalandırılmamıştır.

Onaylıyor musunuz?