Güvenlik açıkları (CVE)
NVD (National Vulnerability Database) verisiyle CVE kayıtlarını arayın. Aktif olarak istismar edilen açıklar için CISA KEV kataloğunu inceleyin.
Yerel veritabanında 24.296 CVE, 0 KEV kaydı · son NVD senkronu 31.10.2026 22:17. Belirli bir CVE kimliği yerelde yoksa NVD'den anlık getirilir.
| CVE | Açıklama | CVSS | Yayın |
|---|---|---|---|
| CVE-2026-70169 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
| CVE-2026-70157 | Heap-based buffer overflow in Windows System Information Console allows an unauthorized attacker to execute code over a network. | 9.8 | 13.10.2026 |
| CVE-2026-70158 | Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine | 8.8 | 13.10.2026 |
| CVE-2026-70163 | Allocation of resources without limits or throttling in OpenSSH for Windows allows an unauthorized attacker to deny service over a network. | 7.5 | 13.10.2026 |
| CVE-2026-70149 | Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose information locally. | 8.8 | 13.10.2026 |
| CVE-2026-70150 | Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
| CVE-2026-70151 | Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-70153 | Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network. | 9.8 | 13.10.2026 |
| CVE-2026-70156 | Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
| CVE-2026-70141 | Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally. | 5.5 | 13.10.2026 |
| CVE-2026-70142 | Untrusted search path in Windows Update Service allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-70143 | Heap-based buffer overflow in Windows Network File System allows an authorized attacker to execute code locally. | 7.8 | 13.10.2026 |
| CVE-2026-70147 | Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network. | 9.8 | 13.10.2026 |
| CVE-2026-70148 | Improper authorization in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally. | 6.5 | 13.10.2026 |
| CVE-2026-70135 | Out-of-bounds read in Windows Remote POS Driver allows an authorized attacker to disclose information locally. | 5.5 | 13.10.2026 |
| CVE-2026-70136 | Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
| CVE-2026-70137 | Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to disclose information locally. | 5.5 | 13.10.2026 |
| CVE-2026-70138 | Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-70139 | Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-70140 | Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
| CVE-2026-70128 | Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally. | 5.5 | 13.10.2026 |
| CVE-2026-70131 | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-70132 | Heap-based buffer overflow in Windows Portable Device File System Driver allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-70133 | Allocation of resources without limits or throttling in Windows SMB Server allows an unauthorized attacker to deny service over a network. | 7.5 | 13.10.2026 |
| CVE-2026-70134 | Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
Kaynak: NIST NVD CVE API 2.0. CVE açıklamaları kaynağındaki İngilizce metinle gösterilir. Bu ürün NVD API'sini kullanır ancak NVD tarafından onaylanmamış veya sertifikalandırılmamıştır.