Güvenlik açıkları (CVE)
NVD (National Vulnerability Database) verisiyle CVE kayıtlarını arayın. Aktif olarak istismar edilen açıklar için CISA KEV kataloğunu inceleyin.
Yerel veritabanında 24.933 CVE, 0 KEV kaydı. Belirli bir CVE kimliği yerelde yoksa NVD'den anlık getirilir.
| CVE | Açıklama | CVSS | Yayın |
|---|---|---|---|
| CVE-2026-73087 | Dozzle is a realtime log viewer for docker containers. From 10.5.2 until 10.6.15, the isBlockedIP SSRF guard in internal/notification/dispatcher/webhook.go, used by safeDialContext for webhook notification URLs, does not inspect IPv4 addresses embedded in 6to4 | 2.3 | 11.08.2026 |
| CVE-2026-72971 | Improper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to perform tampering locally. | 5.5 | 11.08.2026 |
| CVE-2026-70354 | Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally. | 7.8 | 11.08.2026 |
| CVE-2026-70335 | Improper neutralization of special elements used in an os command ('os command injection') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to elevate privileges locally. | 7.8 | 11.08.2026 |
| CVE-2026-70336 | Improper control of generation of code ('code injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network. | 8.8 | 11.08.2026 |
| CVE-2026-70340 | Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network. | 8.8 | 11.08.2026 |
| CVE-2026-70326 | Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | 8.8 | 11.08.2026 |
| CVE-2026-70321 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 8.8 | 11.08.2026 |
| CVE-2026-70310 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally. | 5.5 | 11.08.2026 |
| CVE-2026-69306 | Not failing securely ('failing open') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network. | 8.2 | 11.08.2026 |
| CVE-2026-69320 | Improper neutralization of special elements used in an os command ('os command injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network. | 8.8 | 11.08.2026 |
| CVE-2026-68821 | Improper privilege management in Windows Package Manager allows an authorized attacker to elevate privileges locally. | 7.8 | 11.08.2026 |
| CVE-2026-69223 | Apache Allura's webhooks are vulnerable to Server-Side Request Forgery (SSRF). This issue affects Apache Allura: before 1.19.1. Users are recommended to upgrade to version 1.19.1, which fixes the issue. | 9.1 | 11.08.2026 |
| CVE-2026-69278 | Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. | 7.8 | 11.08.2026 |
| CVE-2026-68813 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. | 5.5 | 11.08.2026 |
| CVE-2026-68807 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 7.8 | 11.08.2026 |
| CVE-2026-65815 | Deserialization of untrusted data in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to execute code over a network. | 8.8 | 11.08.2026 |
| CVE-2026-66301 | Exposure of sensitive information to an unauthorized actor in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to disclose information over a network. | 6.5 | 11.08.2026 |
| CVE-2026-65806 | Missing authorization in Azure CycleCloud allows an authorized attacker to disclose information over a network. | 6.5 | 11.08.2026 |
| CVE-2026-65811 | Improper input validation in Power BI allows an authorized attacker to execute code over a network. | 8.8 | 11.08.2026 |
| CVE-2026-65768 | Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Teams for Android allows an unauthorized attacker to execute code over a network. | 9.8 | 11.08.2026 |
| CVE-2026-65769 | Exposure of sensitive information to an unauthorized actor in Microsoft Teams Mobile allows an unauthorized attacker to disclose information over a network. | 7.5 | 11.08.2026 |
| CVE-2026-65673 | Incorrect authorization in Microsoft Entra Connect Sync allows an authorized attacker to elevate privileges over a network. | 7.8 | 11.08.2026 |
| CVE-2026-65675 | No cwe for this issue in Visual Studio Code CoPilot Chat Extension allows an unauthorized attacker to bypass a security feature over a network. | 6.5 | 11.08.2026 |
| CVE-2026-65767 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Teams for Android allows an authorized attacker to perform spoofing over a network. | 7.6 | 11.08.2026 |
Kaynak: NIST NVD CVE API 2.0. CVE açıklamaları kaynağındaki İngilizce metinle gösterilir. Bu ürün NVD API'sini kullanır ancak NVD tarafından onaylanmamış veya sertifikalandırılmamıştır.