Güvenlik açıkları (CVE)
NVD (National Vulnerability Database) verisiyle CVE kayıtlarını arayın. Aktif olarak istismar edilen açıklar için CISA KEV kataloğunu inceleyin.
Yerel veritabanında 24.296 CVE, 0 KEV kaydı · son NVD senkronu 31.10.2026 22:17. Belirli bir CVE kimliği yerelde yoksa NVD'den anlık getirilir.
| CVE | Açıklama | CVSS | Yayın |
|---|---|---|---|
| CVE-2026-69979 | Improper protection of alternate path in Windows AppX Deployment Service allows an authorized attacker to bypass a security feature locally. | 5.5 | 13.10.2026 |
| CVE-2026-69982 | Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to bypass a security feature over a network. | 5.9 | 13.10.2026 |
| CVE-2026-69967 | Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to disclose information locally. | 5.5 | 13.10.2026 |
| CVE-2026-69968 | Relative path traversal in Windows Libarchive allows an unauthorized attacker to perform tampering over a network. | 6.5 | 13.10.2026 |
| CVE-2026-69969 | Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to disclose information locally. | 4.7 | 13.10.2026 |
| CVE-2026-69970 | Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
| CVE-2026-69971 | Incorrect authorization in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally. | 5.5 | 13.10.2026 |
| CVE-2026-69973 | Improper limitation of a pathname to a restricted directory ('path traversal') in Windows Libarchive allows an unauthorized attacker to perform tampering over a network. | 6.5 | 13.10.2026 |
| CVE-2026-69966 | Integer overflow or wraparound in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-69884 | Buffer over-read in Windows GDI allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-69840 | Use after free in Windows Certificates allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
| CVE-2026-69850 | Untrusted pointer dereference in Windows Certificates allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-69856 | Use after free in Windows Storage allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
| CVE-2026-69766 | Use after free in Windows Storage allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
| CVE-2026-69783 | External control of file name or path in Windows Update allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-69789 | Heap-based buffer overflow in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over an adjacent network. | 7.5 | 13.10.2026 |
| CVE-2026-69795 | Null pointer dereference in Windows Clipboard Server allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
| CVE-2026-69798 | Use after free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-69802 | Weak authentication in Network Device Enrollment Service (NDES) allows an unauthorized attacker to execute code over a network. | 8.1 | 13.10.2026 |
| CVE-2026-69830 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DHCP Server allows an unauthorized attacker to execute code over a network. | 8.1 | 13.10.2026 |
| CVE-2026-69733 | Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-69743 | Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
| CVE-2026-69763 | Use after free in Windows Storage allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
| CVE-2026-69765 | Use after free in Windows Storport Miniport Driver allows an unauthorized attacker to execute code over a network. | 8.8 | 13.10.2026 |
| CVE-2026-69644 | Exposure of sensitive system information to an unauthorized control sphere in Windows iSCSI allows an authorized attacker to disclose information locally. | 5.5 | 13.10.2026 |
Kaynak: NIST NVD CVE API 2.0. CVE açıklamaları kaynağındaki İngilizce metinle gösterilir. Bu ürün NVD API'sini kullanır ancak NVD tarafından onaylanmamış veya sertifikalandırılmamıştır.