Güvenlik açıkları (CVE)
NVD (National Vulnerability Database) verisiyle CVE kayıtlarını arayın. Aktif olarak istismar edilen açıklar için CISA KEV kataloğunu inceleyin.
Yerel veritabanında 24.296 CVE, 0 KEV kaydı · son NVD senkronu 31.10.2026 22:17. Belirli bir CVE kimliği yerelde yoksa NVD'den anlık getirilir.
| CVE | Açıklama | CVSS | Yayın |
|---|---|---|---|
| CVE-2026-109453 | Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
| CVE-2026-108468 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
| CVE-2026-108471 | Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally. | 8.8 | 13.10.2026 |
| CVE-2026-108462 | Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally. | 5.5 | 13.10.2026 |
| CVE-2026-108463 | Improper resolution of path equivalence in Windows SmartScreen allows an unauthorized attacker to bypass a security feature over a network. | 8.8 | 13.10.2026 |
| CVE-2026-108464 | Use after free in Software Protection Platform (SPP) allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
| CVE-2026-108465 | Use after free in Windows Update Delivery Optimization allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
| CVE-2026-108466 | Out-of-bounds read in Windows Kernel allows an unauthorized attacker to deny service over a network. | 5.3 | 13.10.2026 |
| CVE-2026-108467 | Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an authorized attacker to execute code over a network. | 8.8 | 13.10.2026 |
| CVE-2026-108399 | Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally. | 7.2 | 13.10.2026 |
| CVE-2026-108457 | Out-of-bounds write in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network. | 8.1 | 13.10.2026 |
| CVE-2026-108458 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | 8.8 | 13.10.2026 |
| CVE-2026-108460 | Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network. | 8.1 | 13.10.2026 |
| CVE-2026-108461 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
| CVE-2026-108136 | Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-108396 | Time-of-check time-of-use (toctou) race condition in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
| CVE-2026-108130 | Heap-based buffer overflow in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-108132 | Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
| CVE-2026-108133 | Release of invalid pointer or reference in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-108134 | Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
| CVE-2026-108135 | Improper link resolution before file access ('link following') in Windows Backup Engine allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
| CVE-2026-105733 | Improper access control in Windows Hyper-V allows an authorized attacker to execute code locally. | 8.8 | 13.10.2026 |
| CVE-2026-105722 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
| CVE-2026-105723 | Untrusted pointer dereference in Windows Distributed File System (DFS) allows an unauthorized attacker to elevate privileges over a network. | 9.8 | 13.10.2026 |
| CVE-2026-105008 | No cwe for this issue in Windows Schannel allows an unauthorized attacker to perform spoofing over a network. | 9.0 | 13.10.2026 |
Kaynak: NIST NVD CVE API 2.0. CVE açıklamaları kaynağındaki İngilizce metinle gösterilir. Bu ürün NVD API'sini kullanır ancak NVD tarafından onaylanmamış veya sertifikalandırılmamıştır.