Güvenlik açıkları (CVE)

NVD (National Vulnerability Database) verisiyle CVE kayıtlarını arayın. Aktif olarak istismar edilen açıklar için CISA KEV kataloğunu inceleyin.

Yerel veritabanında 24.296 CVE, 0 KEV kaydı · son NVD senkronu 31.10.2026 22:17. Belirli bir CVE kimliği yerelde yoksa NVD'den anlık getirilir.

CVEAçıklamaCVSSYayın
CVE-2026-70118 Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally. 7.0 13.10.2026
CVE-2026-70122 Time-of-check time-of-use (toctou) race condition in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. 6.5 13.10.2026
CVE-2026-70123 Numeric truncation error in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. 7.8 13.10.2026
CVE-2026-70126 Out-of-bounds read in Windows Bluetooth Port Driver allows an unauthorized attacker to execute code over an adjacent network. 7.1 13.10.2026
CVE-2026-70112 Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to execute code locally. 7.8 13.10.2026
CVE-2026-70113 Integer overflow or wraparound in Windows Client for NFS allows an authorized attacker to elevate privileges locally. 7.8 13.10.2026
CVE-2026-70115 Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. 7.0 13.10.2026
CVE-2026-70116 Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to bypass a security feature with a physical attack. 4.2 13.10.2026
CVE-2026-70106 Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. 7.8 13.10.2026
CVE-2026-70109 Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally. 7.8 13.10.2026
CVE-2026-70110 Stack-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally. 7.8 13.10.2026
CVE-2026-70086 Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. 7.0 13.10.2026
CVE-2026-70089 Heap-based buffer overflow in Windows GDI allows an unauthorized attacker to execute code over a network. 8.8 13.10.2026
CVE-2026-70090 Use of uninitialized resource in Windows Netlogon allows an authorized attacker to disclose information locally. 5.5 13.10.2026
CVE-2026-70075 Time-of-check time-of-use (toctou) race condition in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to bypass a security feature locally. 4.4 13.10.2026
CVE-2026-70076 Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. 7.0 13.10.2026
CVE-2026-70077 Use after free in Windows Kernel allows an authorized attacker to disclose information locally. 4.7 13.10.2026
CVE-2026-70084 Improper access control in Windows Projected File System allows an authorized attacker to disclose information locally. 5.5 13.10.2026
CVE-2026-70068 Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an unauthorized attacker to elevate privileges over a network. 8.8 13.10.2026
CVE-2026-70069 Stack-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network. 8.8 13.10.2026
CVE-2026-70072 Allocation of resources without limits or throttling in Windows Netlogon allows an authorized attacker to deny service over a network. 6.5 13.10.2026
CVE-2026-70060 Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. 7.8 13.10.2026
CVE-2026-70062 Double free in Windows Libarchive allows an unauthorized attacker to execute code over a network. 8.1 13.10.2026
CVE-2026-70063 Out-of-bounds read in Windows Kernel allows an authorized attacker to disclose information locally. 4.7 13.10.2026
CVE-2026-70064 Integer underflow (wrap or wraparound) in Windows Kerberos allows an authorized attacker to elevate privileges locally. 7.8 13.10.2026

Kaynak: NIST NVD CVE API 2.0. CVE açıklamaları kaynağındaki İngilizce metinle gösterilir. Bu ürün NVD API'sini kullanır ancak NVD tarafından onaylanmamış veya sertifikalandırılmamıştır.

Onaylıyor musunuz?