Güvenlik açıkları (CVE)
NVD (National Vulnerability Database) verisiyle CVE kayıtlarını arayın. Aktif olarak istismar edilen açıklar için CISA KEV kataloğunu inceleyin.
Yerel veritabanında 24.296 CVE, 0 KEV kaydı · son NVD senkronu 31.10.2026 22:17. Belirli bir CVE kimliği yerelde yoksa NVD'den anlık getirilir.
| CVE | Açıklama | CVSS | Yayın |
|---|---|---|---|
| CVE-2026-70066 | Use after free in Windows DHCP Server allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
| CVE-2026-70067 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
| CVE-2026-70054 | Heap-based buffer overflow in Windows NetBIOS allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-70055 | Exposure of sensitive system information to an unauthorized control sphere in Windows Cryptographic Services allows an authorized attacker to disclose information locally. | 5.5 | 13.10.2026 |
| CVE-2026-70056 | Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
| CVE-2026-70057 | Incorrect authorization in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to bypass a security feature locally. | 5.5 | 13.10.2026 |
| CVE-2026-70058 | Out-of-bounds write in Windows DHCP Server allows an unauthorized attacker to execute code over a network. | 7.5 | 13.10.2026 |
| CVE-2026-70059 | Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-70048 | Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-70051 | Access of resource using incompatible type ('type confusion') in Windows SmartScreen allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-70052 | Integer overflow or wraparound in Windows PowerShell allows an authorized attacker to execute code locally. | 7.8 | 13.10.2026 |
| CVE-2026-70010 | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-70011 | Out-of-bounds read in Windows IP Over USB Service allows an authorized attacker to disclose information locally. | 5.5 | 13.10.2026 |
| CVE-2026-70005 | Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to bypass a security feature over a network. | 5.9 | 13.10.2026 |
| CVE-2026-70006 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | 7.5 | 13.10.2026 |
| CVE-2026-70008 | Integer overflow or wraparound in Windows IP Over USB Service allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-69984 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | 7.5 | 13.10.2026 |
| CVE-2026-69985 | Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network. | 8.8 | 13.10.2026 |
| CVE-2026-69986 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | 7.5 | 13.10.2026 |
| CVE-2026-69987 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | 7.5 | 13.10.2026 |
| CVE-2026-69988 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | 7.5 | 13.10.2026 |
| CVE-2026-69974 | Out-of-bounds read in Desktop Window Manager allows an authorized attacker to disclose information locally. | 4.7 | 13.10.2026 |
| CVE-2026-69976 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | 7.5 | 13.10.2026 |
| CVE-2026-69977 | Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
| CVE-2026-69978 | Null pointer dereference in Windows VMSwitch allows an authorized attacker to deny service locally. | 5.5 | 13.10.2026 |
Kaynak: NIST NVD CVE API 2.0. CVE açıklamaları kaynağındaki İngilizce metinle gösterilir. Bu ürün NVD API'sini kullanır ancak NVD tarafından onaylanmamış veya sertifikalandırılmamıştır.