Güvenlik açıkları (CVE)
NVD (National Vulnerability Database) verisiyle CVE kayıtlarını arayın. Aktif olarak istismar edilen açıklar için CISA KEV kataloğunu inceleyin.
Yerel veritabanında 24.370 CVE, 0 KEV kaydı · son NVD senkronu 01.11.2026 16:17. Belirli bir CVE kimliği yerelde yoksa NVD'den anlık getirilir.
| CVE | Açıklama | CVSS | Yayın |
|---|---|---|---|
| CVE-2026-89092 | The nscd service in the GNU C Library 2.3.4 onwards may crash due to a stack overflow when a malicious DNS server returns too large a response for a DNS query, resulting in degraded DNS resolution for the system. Exploitation of this bug needs a system th | 4.2 | 11.09.2026 |
| CVE-2025-57231 | Path Traversal in avatar attachments in Docmost v0.21.0 allows an unauthenticated malicious actor to disclose local files via a POST Request in a public url. | 7.5 | 11.09.2026 |
| CVE-2026-87853 | A flaw was found in SSSD's IdP authentication provider. The eval_access_token_buf() function compares the OIDC subject identifier using strncmp() with the authenticated user's identifier length, performing a prefix comparison instead of an exact match. An atta | 7.5 | 09.09.2026 |
| CVE-2026-80925 | In the Linux kernel, the following vulnerability has been resolved: vlan: fix skb_under_panic and races when toggling HW VLAN offload Toggling hardware VLAN TX offload (NETIF_F_HW_VLAN_CTAG_TX or NETIF_F_HW_VLAN_STAG_TX) on a lower device invokes vlan_transf | — | 09.09.2026 |
| CVE-2026-18147 | A flaw was found in FreeIPA. An unauthenticated remote attacker could exploit a DOM Cross-Site Scripting (XSS) vulnerability in the FreeIPA/IdM Web UI password reset page. By enticing a victim to click a specially crafted link and complete a password reset, th | 8.1 | 09.09.2026 |
| CVE-2024-58380 | PocketMine-MP versions before 5.11.2 contain a denial of service vulnerability in BookEditPacket handling that crashes the server when an invalid inventory slot value is provided. Attackers can send a crafted BookEditPacket with an inventory slot greater than | 7.1 | 09.09.2026 |
| CVE-2024-58381 | PocketMine-MP before 5.11.1 contains a denial of service vulnerability in LoginPacket JSON processing that allows remote attackers to crash the server by sending malformed JSON data. Attackers can exploit improper object initialization from scalar JSON types t | 8.7 | 09.09.2026 |
| CVE-2024-58382 | league/commonmark versions before 2.6.0 contain polynomial time complexity vulnerabilities in Markdown parsing that allow attackers to cause denial of service. Attackers can submit carefully crafted Markdown inputs designed to trigger worst-case performance, a | 8.7 | 09.09.2026 |
| CVE-2026-81396 | Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 7.8 | 08.09.2026 |
| CVE-2026-78524 | Out-of-bounds write in Microsoft Office allows an unauthorized attacker to execute code over a network. | 8.8 | 08.09.2026 |
| CVE-2026-77911 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. | 6.5 | 08.09.2026 |
| CVE-2026-77491 | Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally. | 5.5 | 08.09.2026 |
| CVE-2026-73013 | Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network. | 8.8 | 08.09.2026 |
| CVE-2026-71328 | Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network. | 8.8 | 08.09.2026 |
| CVE-2026-69806 | Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally. | 7.0 | 08.09.2026 |
| CVE-2026-69767 | Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. | 8.8 | 08.09.2026 |
| CVE-2026-69609 | Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally. | 5.5 | 08.09.2026 |
| CVE-2026-69610 | Buffer over-read in Windows Win32K allows an authorized attacker to elevate privileges locally. | 7.0 | 08.09.2026 |
| CVE-2026-69576 | Use after free in Graphic Fonts allows an authorized attacker to elevate privileges locally. | 7.8 | 08.09.2026 |
| CVE-2026-69556 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | 8.8 | 08.09.2026 |
| CVE-2026-69522 | Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network. | 8.8 | 08.09.2026 |
| CVE-2026-69499 | Integer overflow or wraparound in Windows Imaging Component allows an unauthorized attacker to execute code over a network. | 8.8 | 08.09.2026 |
| CVE-2026-69439 | Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network. | 8.8 | 08.09.2026 |
| CVE-2026-69304 | Improper handling of highly compressed data (data amplification) in ASP.NET Core allows an unauthorized attacker to deny service over a network. | 5.9 | 08.09.2026 |
| CVE-2026-68880 | Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network. | 8.0 | 08.09.2026 |
Kaynak: NIST NVD CVE API 2.0. CVE açıklamaları kaynağındaki İngilizce metinle gösterilir. Bu ürün NVD API'sini kullanır ancak NVD tarafından onaylanmamış veya sertifikalandırılmamıştır.