Güvenlik açıkları (CVE)
NVD (National Vulnerability Database) verisiyle CVE kayıtlarını arayın. Aktif olarak istismar edilen açıklar için CISA KEV kataloğunu inceleyin.
Yerel veritabanında 8.121 CVE, 0 KEV kaydı · son NVD senkronu 25.10.2026 16:11. Belirli bir CVE kimliği yerelde yoksa NVD'den anlık getirilir.
| CVE | Açıklama | CVSS | Yayın |
|---|---|---|---|
| CVE-2026-110829 | FreeRDP versions from 3.0.0 before 3.32.0 contain a null pointer dereference in the rdpsnd channel when a fragment sets CHANNEL_FLAG_LAST without CHANNEL_FLAG_FIRST. A malicious RDP server can send a malformed rdpsnd PDU on a fresh channel to crash the client | 7.1 | 15.10.2026 |
| CVE-2026-110734 | Godot Engine through 4.7.2 has a heap out-of-bounds write in the Radiance HDR (.hdr) image decoder (modules/hdr/image_loader_hdr.cpp). The run-length decoding loop expands RLE instructions read from the file into a buffer sized from the image dimensions, witho | 2.5 | 14.10.2026 |
| CVE-2025-71433 | Kaneo before 2.1.6 contains a missing authorization vulnerability that allows authenticated users to access other workspaces by supplying project, task, label or workspace identifiers to API routes lacking membership checks. Attackers who obtain identifiers, f | 7.7 | 14.10.2026 |
| CVE-2026-98419 | In the Linux kernel, the following vulnerability has been resolved: drop_monitor: fix out-of-bounds write in reset_per_cpu_data() In reset_per_cpu_data(), al is computed as: al = sizeof(struct net_dm_alert_msg); al += dm_hit_limit * sizeof(struct ne | 7.0 | 14.10.2026 |
| CVE-2026-98405 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix missing iov bounds check in parse_posix_sids() In parse_posix_sids(), sidsbuf_end is calculated using the server-supplied out_len without being validated against the actual | 8.1 | 14.10.2026 |
| CVE-2026-98401 | In the Linux kernel, the following vulnerability has been resolved: net: iptunnel: fix stale transport header during tunnel decapsulation Syzbot reported a crash in qdisc_pkt_len_segs_init() caused by a stale transport_header offset after tunnel decapsulatio | 7.5 | 14.10.2026 |
| CVE-2026-110447 | Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as exploited in the wild in September and October 2026, a different vulnerability than CVE-2025-66208. This is an OS command injection in | 9.2 | 14.10.2026 |
| CVE-2026-83862 | Use after free in Windows Network Load Balancing allows an unauthorized attacker to execute code over an adjacent network. | 8.8 | 13.10.2026 |
| CVE-2026-69733 | Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-69718 | Improper neutralization of special elements used in a command ('command injection') in Windows Update allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-69673 | Improper link resolution before file access ('link following') in Windows Update allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-69521 | Integer overflow or wraparound in Windows iSCSI allows an unauthorized attacker to execute code over a network. | 8.8 | 13.10.2026 |
| CVE-2026-69506 | Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally. | 4.7 | 13.10.2026 |
| CVE-2026-69471 | Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-69452 | Use after free in Windows Enterprise App Management allows an authorized attacker to elevate privileges over a network. | 7.1 | 13.10.2026 |
| CVE-2026-69387 | Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
| CVE-2026-69363 | Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network. | 8.0 | 13.10.2026 |
| CVE-2026-69354 | Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-69326 | Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network. | 8.8 | 13.10.2026 |
| CVE-2026-68836 | Heap-based buffer overflow in Windows kernel32.dll allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-108396 | Time-of-check time-of-use (toctou) race condition in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
| CVE-2026-108136 | Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | 7.8 | 13.10.2026 |
| CVE-2026-108135 | Improper link resolution before file access ('link following') in Windows Backup Engine allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
| CVE-2026-108132 | Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally. | 7.0 | 13.10.2026 |
| CVE-2025-57739 | An improper neutralization of special elements used in an SQL Command ("SQL Injection") vulnerability [CWE-89] vulnerability in Fortinet FortiMail 7.6.0 through 7.6.3, FortiMail 7.4.0 through 7.4.5, FortiMail 7.2.0 through 7.2.8 allows an authenticated attacke | 8.8 | 13.10.2026 |
Kaynak: NIST NVD CVE API 2.0. CVE açıklamaları kaynağındaki İngilizce metinle gösterilir. Bu ürün NVD API'sini kullanır ancak NVD tarafından onaylanmamış veya sertifikalandırılmamıştır.