Güvenlik açıkları (CVE)
NVD (National Vulnerability Database) verisiyle CVE kayıtlarını arayın. Aktif olarak istismar edilen açıklar için CISA KEV kataloğunu inceleyin.
Yerel veritabanında 33.618 CVE, 0 KEV kaydı · son NVD senkronu 08.11.2026 05:25. Belirli bir CVE kimliği yerelde yoksa NVD'den anlık getirilir.
| CVE | Açıklama | CVSS | Yayın |
|---|---|---|---|
| CVE-2026-65815 | Deserialization of untrusted data in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to execute code over a network. | 8.8 | 11.08.2026 |
| CVE-2026-66301 | Exposure of sensitive information to an unauthorized actor in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to disclose information over a network. | 6.5 | 11.08.2026 |
| CVE-2026-65806 | Missing authorization in Azure CycleCloud allows an authorized attacker to disclose information over a network. | 6.5 | 11.08.2026 |
| CVE-2026-65811 | Improper input validation in Power BI allows an authorized attacker to execute code over a network. | 8.8 | 11.08.2026 |
| CVE-2026-65768 | Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Teams for Android allows an unauthorized attacker to execute code over a network. | 9.8 | 11.08.2026 |
| CVE-2026-65769 | Exposure of sensitive information to an unauthorized actor in Microsoft Teams Mobile allows an unauthorized attacker to disclose information over a network. | 7.5 | 11.08.2026 |
| CVE-2026-65673 | Incorrect authorization in Microsoft Entra Connect Sync allows an authorized attacker to elevate privileges over a network. | 7.8 | 11.08.2026 |
| CVE-2026-65675 | No cwe for this issue in Visual Studio Code CoPilot Chat Extension allows an unauthorized attacker to bypass a security feature over a network. | 6.5 | 11.08.2026 |
| CVE-2026-65767 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Teams for Android allows an authorized attacker to perform spoofing over a network. | 7.6 | 11.08.2026 |
| CVE-2026-63522 | Incorrect permission assignment for critical resource in Azure SQL Database allows an authorized attacker to elevate privileges locally. | 7.8 | 11.08.2026 |
| CVE-2026-62899 | Inconsistent interpretation of http requests ('http request/response smuggling') in .NET allows an unauthorized attacker to bypass a security feature over a network. | 5.9 | 11.08.2026 |
| CVE-2026-62900 | Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network. | 5.9 | 11.08.2026 |
| CVE-2026-62901 | Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network. | 7.5 | 11.08.2026 |
| CVE-2026-62902 | Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to disclose information over a network. | 6.5 | 11.08.2026 |
| CVE-2026-62909 | Uncaught exception in .NET allows an authorized attacker to elevate privileges locally. | 7.8 | 11.08.2026 |
| CVE-2026-62897 | Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to execute code locally. | 7.0 | 11.08.2026 |
| CVE-2026-62898 | Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network. | 7.5 | 11.08.2026 |
| CVE-2026-62886 | Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally. | 7.8 | 11.08.2026 |
| CVE-2026-62877 | Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally. | 7.8 | 11.08.2026 |
| CVE-2026-62869 | Insufficient verification of data authenticity in Azure Entra ID allows an authorized attacker to perform spoofing over a network. | 8.8 | 11.08.2026 |
| CVE-2026-62871 | Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally. | 7.8 | 11.08.2026 |
| CVE-2026-62799 | Heap-based buffer overflow in Windows SMB Client allows an authorized attacker to elevate privileges locally. | 7.8 | 11.08.2026 |
| CVE-2026-62795 | Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network. | 8.8 | 11.08.2026 |
| CVE-2026-62785 | Heap-based buffer overflow in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network. | 8.8 | 11.08.2026 |
| CVE-2026-62775 | Incorrect authorization in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to disclose information locally. | 5.5 | 11.08.2026 |
Kaynak: NIST NVD CVE API 2.0. CVE açıklamaları kaynağındaki İngilizce metinle gösterilir. Bu ürün NVD API'sini kullanır ancak NVD tarafından onaylanmamış veya sertifikalandırılmamıştır.