Güvenlik açıkları (CVE)
NVD (National Vulnerability Database) verisiyle CVE kayıtlarını arayın. Aktif olarak istismar edilen açıklar için CISA KEV kataloğunu inceleyin.
Yerel veritabanında 33.935 CVE, 0 KEV kaydı · son NVD senkronu 09.11.2026 05:26. Belirli bir CVE kimliği yerelde yoksa NVD'den anlık getirilir.
| CVE | Açıklama | CVSS | Yayın |
|---|---|---|---|
| CVE-2026-19190 | A weakness has been identified in StableBit Scanner 2.6.13.4088. This affects an unknown part of the file C:\Program Files (x86)\StableBit\Scanner\Service\Scanner.Service.exe of the component ScannerService. This manipulation causes permission issues. The atta | 7.1 | 07.08.2026 |
| CVE-2026-49746 | Software installed and run as a non-privileged user may conduct improper GPU system calls to cause OOB read kernel memory access and in certain cases cause GPU UAF of arbitrary pages. Incorrect validation of array index can lead to OOB read and potentially | 7.1 | 07.08.2026 |
| CVE-2026-45198 | Kernel software from a non-secure operating system on a platform with Trusted Execution Environment support, may cause GPU Firmware to boot up using data from non-secure memory. The GPU thread of control (Firmware) uses a pointer from non-secure memory belo | 7.8 | 07.08.2026 |
| CVE-2026-45204 | Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger OOB access and kernel null pointer dereference in an error path. Null pointer dereference occurs in an error path of a function running in kernel thread of | 5.5 | 07.08.2026 |
| CVE-2026-19189 | A security flaw has been discovered in Power Sofware PowerISO 9.3.0.0. Affected by this issue is some unknown functionality in the library C:\Windows\System32\drivers\scdemu.sys of the component Kernel Driver. The manipulation results in improper privilege man | 7.1 | 07.08.2026 |
| CVE-2026-70332 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network. | 9.6 | 07.08.2026 |
| CVE-2026-68823 | Exposed dangerous method or function in Azure Confidential Ledger allows an authorized attacker to execute code over a network. | 9.1 | 07.08.2026 |
| CVE-2026-65667 | Missing authorization in Microsoft Teams allows an unauthorized attacker to elevate privileges over a network. | 10.0 | 07.08.2026 |
| CVE-2026-65668 | Improper access control in Microsoft Purview eDiscovery allows an authorized attacker to elevate privileges over a network. | 8.8 | 07.08.2026 |
| CVE-2026-62873 | Improper verification of cryptographic signature in Microsoft 365 Admin Center allows an unauthorized attacker to elevate privileges over a network. | 9.8 | 07.08.2026 |
| CVE-2026-62896 | Improper authentication in Microsoft Teams allows an authorized attacker to elevate privileges over a network. | 9.6 | 07.08.2026 |
| CVE-2026-62918 | Improper verification of cryptographic signature in Microsoft Teams allows an unauthorized attacker to perform spoofing over a network. | 7.5 | 07.08.2026 |
| CVE-2026-63508 | Missing authentication for critical function in Microsoft Planetary Computer Pro allows an unauthorized attacker to elevate privileges over a network. | 10.0 | 07.08.2026 |
| CVE-2026-62830 | Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network. | 9.9 | 07.08.2026 |
| CVE-2026-62836 | Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauthorized attacker to elevate privileges over a network. | 10.0 | 07.08.2026 |
| CVE-2026-59115 | '.../...//' in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate privileges over a network. | 9.9 | 07.08.2026 |
| CVE-2026-59118 | Improper authorization in Copilot Cowork allows an unauthorized attacker to elevate privileges over a network. | 9.3 | 07.08.2026 |
| CVE-2026-50515 | Deserialization of untrusted data in Azure Service Bus allows an authorized attacker to execute code over a network. | 9.9 | 07.08.2026 |
| CVE-2026-56161 | Improper access control in Azure Logic Apps allows an authorized attacker to disclose information over a network. | 9.6 | 07.08.2026 |
| CVE-2026-56162 | Improper authentication in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network. | 10.0 | 07.08.2026 |
| CVE-2026-17264 | Opening a crafted DICOM file containing malicious JPEG-compressed pixel data triggers an attacker-controlled heap out-of-bounds write, which may allow an attacker to remotely execute arbitrary code. | 5.3 | 07.08.2026 |
| CVE-2026-49163 | Improper limitation of a pathname to a restricted directory ('path traversal') in Application Insights Profiler allows an authorized attacker to elevate privileges over a network. | 8.8 | 07.08.2026 |
| CVE-2026-50481 | Modification of assumed-immutable data (maid) in Azure Active Directory allows an authorized attacker to elevate privileges over a network. | 9.9 | 07.08.2026 |
| CVE-2026-7867 | A flaw was found in udisks2. A local attacker with an active console session can exploit insufficient authorization checking on the 'as-user' option in the org.freedesktop.UDisks2.Filesystem.Mount() D-Bus method. This allows the attacker to spoof the 'as-user' | 7.8 | 07.08.2026 |
| CVE-2026-8325 | A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the curre | 7.8 | 07.08.2026 |
Kaynak: NIST NVD CVE API 2.0. CVE açıklamaları kaynağındaki İngilizce metinle gösterilir. Bu ürün NVD API'sini kullanır ancak NVD tarafından onaylanmamış veya sertifikalandırılmamıştır.