Güvenlik açıkları (CVE)
NVD (National Vulnerability Database) verisiyle CVE kayıtlarını arayın. Aktif olarak istismar edilen açıklar için CISA KEV kataloğunu inceleyin.
Yerel veritabanında 24.296 CVE, 0 KEV kaydı · son NVD senkronu 31.10.2026 22:17. Belirli bir CVE kimliği yerelde yoksa NVD'den anlık getirilir.
| CVE | Açıklama | CVSS | Yayın |
|---|---|---|---|
| CVE-2026-70286 | Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-70277 | Out-of-bounds read in Windows Fast FAT Driver allows an unauthorized attacker to disclose information locally. | 5.5 | 13.10.2026 |
| CVE-2026-70278 | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-70280 | Incorrect authorization in Windows Hello allows an authorized attacker to bypass a security feature locally. | 5.5 | 13.10.2026 |
| CVE-2026-70272 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
| CVE-2026-70274 | Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-70275 | Untrusted pointer dereference in Windows CD-ROM Driver allows an unauthorized attacker to execute code over a network. | 9.8 | 13.10.2026 |
| CVE-2026-70270 | Untrusted pointer dereference in Windows Container Isolation FS Filter Driver allows an authorized attacker to elevate privileges locally. | 5.5 | 13.10.2026 |
| CVE-2026-70271 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
| CVE-2026-70258 | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. | 8.8 | 13.10.2026 |
| CVE-2026-70260 | Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally. | 5.5 | 13.10.2026 |
| CVE-2026-70261 | Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally. | 5.5 | 13.10.2026 |
| CVE-2026-70262 | Heap-based buffer overflow in WebDAV allows an unauthorized attacker to elevate privileges over a network. | 9.8 | 13.10.2026 |
| CVE-2026-70252 | Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
| CVE-2026-70255 | Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-70248 | Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally. | 6.5 | 13.10.2026 |
| CVE-2026-70250 | Use after free in Windows DHCP Client allows an unauthorized attacker to execute code over an adjacent network. | 8.8 | 13.10.2026 |
| CVE-2026-70245 | Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-70247 | Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to execute code locally. | 7.8 | 13.10.2026 |
| CVE-2026-70235 | Improper authentication in Windows Event Tracing allows an authorized attacker to perform spoofing locally. | 5.5 | 13.10.2026 |
| CVE-2026-70237 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
| CVE-2026-70238 | Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-70241 | Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
| CVE-2026-70228 | Out-of-bounds read in Desktop Window Manager allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-70229 | Incorrect authorization in Active Directory Domain Services allows an unauthorized attacker to execute code over a network. | 8.1 | 13.10.2026 |
Kaynak: NIST NVD CVE API 2.0. CVE açıklamaları kaynağındaki İngilizce metinle gösterilir. Bu ürün NVD API'sini kullanır ancak NVD tarafından onaylanmamış veya sertifikalandırılmamıştır.