Güvenlik açıkları (CVE)
NVD (National Vulnerability Database) verisiyle CVE kayıtlarını arayın. Aktif olarak istismar edilen açıklar için CISA KEV kataloğunu inceleyin.
Yerel veritabanında 33.618 CVE, 0 KEV kaydı · son NVD senkronu 08.11.2026 05:25. Belirli bir CVE kimliği yerelde yoksa NVD'den anlık getirilir.
| CVE | Açıklama | CVSS | Yayın |
|---|---|---|---|
| CVE-2026-62772 | Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally. | 7.8 | 11.08.2026 |
| CVE-2026-62752 | Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally. | 7.8 | 11.08.2026 |
| CVE-2026-62740 | Use of uninitialized resource in Windows Imaging Component allows an authorized attacker to disclose information locally. | 5.5 | 11.08.2026 |
| CVE-2026-59133 | Execution with unnecessary privileges in Microsoft High Performance Computing (HPC) Pack allows an authorized attacker to elevate privileges over a network. | 8.8 | 11.08.2026 |
| CVE-2026-59124 | Deserialization of untrusted data in Microsoft High Performance Computing (HPC) Pack allows an unauthorized attacker to execute code over a network. | 9.8 | 11.08.2026 |
| CVE-2026-58650 | Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. | 7.8 | 11.08.2026 |
| CVE-2026-59113 | Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network. | 8.8 | 11.08.2026 |
| CVE-2026-57104 | Improper neutralization of input during web page generation ('cross-site scripting') in Azure Storage Explorer allows an unauthorized attacker to elevate privileges over a network. | 9.6 | 11.08.2026 |
| CVE-2026-57105 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | 5.4 | 11.08.2026 |
| CVE-2026-54123 | Exposure of sensitive information to an unauthorized actor in Microsoft Defender for Endpoint allows an authorized attacker to disclose information locally. | 5.5 | 11.08.2026 |
| CVE-2026-54981 | Inclusion of functionality from untrusted control sphere in Visual Studio Code - Python extension allows an unauthorized attacker to bypass a security feature locally. | 7.8 | 11.08.2026 |
| CVE-2026-48483 | TypeBot is a chatbot builder tool. Prior to version 3.17.0, Typebot's WhatsApp status forwarding feature stores a workspace-configured webhook forwarding URL and later POSTs WhatsApp marketing/error status events to it from the server. The stored URL is only v | 5.4 | 11.08.2026 |
| CVE-2026-49179 | Improper neutralization of special elements used in a command ('command injection') in Windows Active Directory allows an unauthorized attacker to execute code over a network. | 8.8 | 11.08.2026 |
| CVE-2026-50516 | Incorrect authorization in Microsoft Azure Kubernetes Service allows an authorized attacker to elevate privileges over a network. | 9.4 | 11.08.2026 |
| CVE-2026-47299 | Improper neutralization of special elements used in a command ('command injection') in Azure Monitor Agent allows an authorized attacker to elevate privileges over a network. | 7.2 | 11.08.2026 |
| CVE-2026-47704 | TypeBot is a chatbot builder tool. Prior to version 3.17.0, an authenticated user who has read access to any typebot can resume a waiting webhook session that belongs to a different typebot by mixing an authorized `typebotId` and `blockId` and a foreign live ` | 7.1 | 11.08.2026 |
| CVE-2026-40375 | Missing authorization in Dynamics Business Central allows an authorized attacker to disclose information over a network. | 6.5 | 11.08.2026 |
| CVE-2026-47285 | Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to disclose information over a network. | 6.5 | 11.08.2026 |
| CVE-2026-21387 | Protection mechanism failure for some Intel(R) LLM Library for PyTorch within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of | 5.4 | 11.08.2026 |
| CVE-2026-20903 | Protection mechanism failure for some Intel(R) AI Containers before version v0.4.0 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable escalati | 5.4 | 11.08.2026 |
| CVE-2026-20799 | Untrusted search path for some Battery Life Diagnostic Tool software before version 2.9.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack m | 5.4 | 11.08.2026 |
| CVE-2026-20770 | Protection mechanism failure for some Cluster Management Toolkit for Kubernetes software before version v0.8.5 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexit | 5.4 | 11.08.2026 |
| CVE-2026-20755 | Protection mechanism failure for some LLM Scaler software within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. Th | 5.4 | 11.08.2026 |
| CVE-2026-20728 | Protection mechanism failure for some Intel Extension for TensorFlow software before version 2.15.0.3 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack | 5.4 | 11.08.2026 |
| CVE-2026-20702 | Protection mechanism failure for some Intel(R) Data Center Attestation Primitives (Intel(R) DCAP) may allow information disclosure. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable data exposure. Thi | 8.9 | 11.08.2026 |
Kaynak: NIST NVD CVE API 2.0. CVE açıklamaları kaynağındaki İngilizce metinle gösterilir. Bu ürün NVD API'sini kullanır ancak NVD tarafından onaylanmamış veya sertifikalandırılmamıştır.