Güvenlik açıkları (CVE)
NVD (National Vulnerability Database) verisiyle CVE kayıtlarını arayın. Aktif olarak istismar edilen açıklar için CISA KEV kataloğunu inceleyin.
Yerel veritabanında 37.516 CVE, 0 KEV kaydı · son NVD senkronu 10.11.2026 23:27. Belirli bir CVE kimliği yerelde yoksa NVD'den anlık getirilir.
| CVE | Açıklama | CVSS | Yayın |
|---|---|---|---|
| CVE-2026-62877 | Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally. | 7.8 | 11.08.2026 |
| CVE-2026-62869 | Insufficient verification of data authenticity in Azure Entra ID allows an authorized attacker to perform spoofing over a network. | 8.8 | 11.08.2026 |
| CVE-2026-62871 | Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally. | 7.8 | 11.08.2026 |
| CVE-2026-62799 | Heap-based buffer overflow in Windows SMB Client allows an authorized attacker to elevate privileges locally. | 7.8 | 11.08.2026 |
| CVE-2026-62795 | Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network. | 8.8 | 11.08.2026 |
| CVE-2026-62785 | Heap-based buffer overflow in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network. | 8.8 | 11.08.2026 |
| CVE-2026-62775 | Incorrect authorization in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to disclose information locally. | 5.5 | 11.08.2026 |
| CVE-2026-62772 | Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally. | 7.8 | 11.08.2026 |
| CVE-2026-62752 | Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally. | 7.8 | 11.08.2026 |
| CVE-2026-62740 | Use of uninitialized resource in Windows Imaging Component allows an authorized attacker to disclose information locally. | 5.5 | 11.08.2026 |
| CVE-2026-59133 | Execution with unnecessary privileges in Microsoft High Performance Computing (HPC) Pack allows an authorized attacker to elevate privileges over a network. | 8.8 | 11.08.2026 |
| CVE-2026-59124 | Deserialization of untrusted data in Microsoft High Performance Computing (HPC) Pack allows an unauthorized attacker to execute code over a network. | 9.8 | 11.08.2026 |
| CVE-2026-58650 | Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. | 7.8 | 11.08.2026 |
| CVE-2026-59113 | Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network. | 8.8 | 11.08.2026 |
| CVE-2026-57104 | Improper neutralization of input during web page generation ('cross-site scripting') in Azure Storage Explorer allows an unauthorized attacker to elevate privileges over a network. | 9.6 | 11.08.2026 |
| CVE-2026-57105 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | 5.4 | 11.08.2026 |
| CVE-2026-54123 | Exposure of sensitive information to an unauthorized actor in Microsoft Defender for Endpoint allows an authorized attacker to disclose information locally. | 5.5 | 11.08.2026 |
| CVE-2026-54981 | Inclusion of functionality from untrusted control sphere in Visual Studio Code - Python extension allows an unauthorized attacker to bypass a security feature locally. | 7.8 | 11.08.2026 |
| CVE-2026-48483 | TypeBot is a chatbot builder tool. Prior to version 3.17.0, Typebot's WhatsApp status forwarding feature stores a workspace-configured webhook forwarding URL and later POSTs WhatsApp marketing/error status events to it from the server. The stored URL is only v | 5.4 | 11.08.2026 |
| CVE-2026-49179 | Improper neutralization of special elements used in a command ('command injection') in Windows Active Directory allows an unauthorized attacker to execute code over a network. | 8.8 | 11.08.2026 |
| CVE-2026-50516 | Incorrect authorization in Microsoft Azure Kubernetes Service allows an authorized attacker to elevate privileges over a network. | 9.4 | 11.08.2026 |
| CVE-2026-47299 | Improper neutralization of special elements used in a command ('command injection') in Azure Monitor Agent allows an authorized attacker to elevate privileges over a network. | 7.2 | 11.08.2026 |
| CVE-2026-47704 | TypeBot is a chatbot builder tool. Prior to version 3.17.0, an authenticated user who has read access to any typebot can resume a waiting webhook session that belongs to a different typebot by mixing an authorized `typebotId` and `blockId` and a foreign live ` | 7.1 | 11.08.2026 |
| CVE-2026-40375 | Missing authorization in Dynamics Business Central allows an authorized attacker to disclose information over a network. | 6.5 | 11.08.2026 |
| CVE-2026-47285 | Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to disclose information over a network. | 6.5 | 11.08.2026 |
Kaynak: NIST NVD CVE API 2.0. CVE açıklamaları kaynağındaki İngilizce metinle gösterilir. Bu ürün NVD API'sini kullanır ancak NVD tarafından onaylanmamış veya sertifikalandırılmamıştır.