Güvenlik açıkları (CVE)
NVD (National Vulnerability Database) verisiyle CVE kayıtlarını arayın. Aktif olarak istismar edilen açıklar için CISA KEV kataloğunu inceleyin.
Yerel veritabanında 24.267 CVE, 0 KEV kaydı · son NVD senkronu 31.10.2026 16:17. Belirli bir CVE kimliği yerelde yoksa NVD'den anlık getirilir.
| CVE | Açıklama | CVSS | Yayın |
|---|---|---|---|
| CVE-2026-83518 | Heap-based buffer overflow in RPC Runtime allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-83519 | Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network. | 9.8 | 13.10.2026 |
| CVE-2026-83509 | Untrusted search path in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
| CVE-2026-83510 | Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
| CVE-2026-83511 | Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network. | 7.4 | 13.10.2026 |
| CVE-2026-83513 | Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-83514 | Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-83499 | Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-83500 | Url redirection to untrusted site ('open redirect') in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack. | 6.1 | 13.10.2026 |
| CVE-2026-83504 | Time-of-check time-of-use (toctou) race condition in Windows SmartScreen allows an authorized attacker to disclose information locally. | 4.7 | 13.10.2026 |
| CVE-2026-83505 | Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
| CVE-2026-83506 | Untrusted search path in Servicing Stack Updates allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-83507 | Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to disclose information locally. | 5.5 | 13.10.2026 |
| CVE-2026-83508 | Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-78459 | Heap-based buffer overflow in Windows Internet Information Services allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-81964 | Use of hard-coded credentials in Windows Update Orchestrator Service allows an authorized attacker to bypass a security feature locally. | 5.5 | 13.10.2026 |
| CVE-2026-81969 | Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-81971 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows NTFS allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
| CVE-2026-77496 | Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network. | 8.8 | 13.10.2026 |
| CVE-2026-72969 | Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
| CVE-2026-73027 | External control of system or configuration setting in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-70580 | Missing authentication for critical function in Windows Credential Guard allows an authorized attacker to perform spoofing locally. | 7.8 | 13.10.2026 |
| CVE-2026-71347 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Security Center allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
| CVE-2026-72934 | Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
| CVE-2026-72955 | Use after free in Windows Application Compatibility Cache allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
Kaynak: NIST NVD CVE API 2.0. CVE açıklamaları kaynağındaki İngilizce metinle gösterilir. Bu ürün NVD API'sini kullanır ancak NVD tarafından onaylanmamış veya sertifikalandırılmamıştır.