Güvenlik açıkları (CVE)
NVD (National Vulnerability Database) verisiyle CVE kayıtlarını arayın. Aktif olarak istismar edilen açıklar için CISA KEV kataloğunu inceleyin.
Yerel veritabanında 27.149 CVE, 0 KEV kaydı · son NVD senkronu 04.11.2026 17:22. Belirli bir CVE kimliği yerelde yoksa NVD'den anlık getirilir.
| CVE | Açıklama | CVSS | Yayın |
|---|---|---|---|
| CVE-2024-58380 | PocketMine-MP versions before 5.11.2 contain a denial of service vulnerability in BookEditPacket handling that crashes the server when an invalid inventory slot value is provided. Attackers can send a crafted BookEditPacket with an inventory slot greater than | 7.1 | 09.09.2026 |
| CVE-2024-58381 | PocketMine-MP before 5.11.1 contains a denial of service vulnerability in LoginPacket JSON processing that allows remote attackers to crash the server by sending malformed JSON data. Attackers can exploit improper object initialization from scalar JSON types t | 8.7 | 09.09.2026 |
| CVE-2024-58382 | league/commonmark versions before 2.6.0 contain polynomial time complexity vulnerabilities in Markdown parsing that allow attackers to cause denial of service. Attackers can submit carefully crafted Markdown inputs designed to trigger worst-case performance, a | 8.7 | 09.09.2026 |
| CVE-2026-81396 | Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 7.8 | 08.09.2026 |
| CVE-2026-78524 | Out-of-bounds write in Microsoft Office allows an unauthorized attacker to execute code over a network. | 8.8 | 08.09.2026 |
| CVE-2026-77911 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. | 6.5 | 08.09.2026 |
| CVE-2026-77491 | Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally. | 5.5 | 08.09.2026 |
| CVE-2026-73013 | Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network. | 8.8 | 08.09.2026 |
| CVE-2026-71328 | Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network. | 8.8 | 08.09.2026 |
| CVE-2026-69806 | Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally. | 7.0 | 08.09.2026 |
| CVE-2026-69767 | Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. | 8.8 | 08.09.2026 |
| CVE-2026-69609 | Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally. | 5.5 | 08.09.2026 |
| CVE-2026-69610 | Buffer over-read in Windows Win32K allows an authorized attacker to elevate privileges locally. | 7.0 | 08.09.2026 |
| CVE-2026-69576 | Use after free in Graphic Fonts allows an authorized attacker to elevate privileges locally. | 7.8 | 08.09.2026 |
| CVE-2026-69556 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | 8.8 | 08.09.2026 |
| CVE-2026-69522 | Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network. | 8.8 | 08.09.2026 |
| CVE-2026-69499 | Integer overflow or wraparound in Windows Imaging Component allows an unauthorized attacker to execute code over a network. | 8.8 | 08.09.2026 |
| CVE-2026-69439 | Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network. | 8.8 | 08.09.2026 |
| CVE-2026-69304 | Improper handling of highly compressed data (data amplification) in ASP.NET Core allows an unauthorized attacker to deny service over a network. | 5.9 | 08.09.2026 |
| CVE-2026-68880 | Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network. | 8.0 | 08.09.2026 |
| CVE-2026-64918 | Insufficiently protected credentials in Microsoft Office allows an unauthorized attacker to perform spoofing over a network. | 6.5 | 08.09.2026 |
| CVE-2026-62804 | External control of file name or path in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 7.8 | 08.09.2026 |
| CVE-2026-58649 | Origin validation error in .NET allows an unauthorized attacker to disclose information over a network. | 6.5 | 08.09.2026 |
| CVE-2026-84385 | A improper access control vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.6, FortiSOAR PaaS 7.5.0 through 7.5.3, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.0 through 7.6.6, FortiSOAR on-premise 7.5.0 t | 5.4 | 08.09.2026 |
| CVE-2026-84387 | An Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability [CWE-77] vulnerability in Fortinet FortiSandbox 5.2.0, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4.0 through 4.4.9, FortiSandbox 4.2 all versions may al | 7.2 | 08.09.2026 |
Kaynak: NIST NVD CVE API 2.0. CVE açıklamaları kaynağındaki İngilizce metinle gösterilir. Bu ürün NVD API'sini kullanır ancak NVD tarafından onaylanmamış veya sertifikalandırılmamıştır.