Güvenlik açıkları (CVE)
NVD (National Vulnerability Database) verisiyle CVE kayıtlarını arayın. Aktif olarak istismar edilen açıklar için CISA KEV kataloğunu inceleyin.
Yerel veritabanında 40.045 CVE, 0 KEV kaydı · son NVD senkronu 12.11.2026 11:28. Belirli bir CVE kimliği yerelde yoksa NVD'den anlık getirilir.
| CVE | Açıklama | CVSS | Yayın |
|---|---|---|---|
| CVE-2026-45198 | Kernel software from a non-secure operating system on a platform with Trusted Execution Environment support, may cause GPU Firmware to boot up using data from non-secure memory. The GPU thread of control (Firmware) uses a pointer from non-secure memory belo | 7.8 | 07.08.2026 |
| CVE-2026-45204 | Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger OOB access and kernel null pointer dereference in an error path. Null pointer dereference occurs in an error path of a function running in kernel thread of | 5.5 | 07.08.2026 |
| CVE-2026-19189 | A security flaw has been discovered in Power Sofware PowerISO 9.3.0.0. Affected by this issue is some unknown functionality in the library C:\Windows\System32\drivers\scdemu.sys of the component Kernel Driver. The manipulation results in improper privilege man | 7.1 | 07.08.2026 |
| CVE-2026-70332 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network. | 9.6 | 07.08.2026 |
| CVE-2026-68823 | Exposed dangerous method or function in Azure Confidential Ledger allows an authorized attacker to execute code over a network. | 9.1 | 07.08.2026 |
| CVE-2026-65667 | Missing authorization in Microsoft Teams allows an unauthorized attacker to elevate privileges over a network. | 10.0 | 07.08.2026 |
| CVE-2026-65668 | Improper access control in Microsoft Purview eDiscovery allows an authorized attacker to elevate privileges over a network. | 8.8 | 07.08.2026 |
| CVE-2026-62873 | Improper verification of cryptographic signature in Microsoft 365 Admin Center allows an unauthorized attacker to elevate privileges over a network. | 9.8 | 07.08.2026 |
| CVE-2026-62896 | Improper authentication in Microsoft Teams allows an authorized attacker to elevate privileges over a network. | 9.6 | 07.08.2026 |
| CVE-2026-62918 | Improper verification of cryptographic signature in Microsoft Teams allows an unauthorized attacker to perform spoofing over a network. | 7.5 | 07.08.2026 |
| CVE-2026-63508 | Missing authentication for critical function in Microsoft Planetary Computer Pro allows an unauthorized attacker to elevate privileges over a network. | 10.0 | 07.08.2026 |
| CVE-2026-62830 | Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network. | 9.9 | 07.08.2026 |
| CVE-2026-62836 | Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauthorized attacker to elevate privileges over a network. | 10.0 | 07.08.2026 |
| CVE-2026-59115 | '.../...//' in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate privileges over a network. | 9.9 | 07.08.2026 |
| CVE-2026-59118 | Improper authorization in Copilot Cowork allows an unauthorized attacker to elevate privileges over a network. | 9.3 | 07.08.2026 |
| CVE-2026-50515 | Deserialization of untrusted data in Azure Service Bus allows an authorized attacker to execute code over a network. | 9.9 | 07.08.2026 |
| CVE-2026-56161 | Improper access control in Azure Logic Apps allows an authorized attacker to disclose information over a network. | 9.6 | 07.08.2026 |
| CVE-2026-56162 | Improper authentication in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network. | 10.0 | 07.08.2026 |
| CVE-2026-17264 | Opening a crafted DICOM file containing malicious JPEG-compressed pixel data triggers an attacker-controlled heap out-of-bounds write, which may allow an attacker to remotely execute arbitrary code. | 5.3 | 07.08.2026 |
| CVE-2026-49163 | Improper limitation of a pathname to a restricted directory ('path traversal') in Application Insights Profiler allows an authorized attacker to elevate privileges over a network. | 8.8 | 07.08.2026 |
| CVE-2026-50481 | Modification of assumed-immutable data (maid) in Azure Active Directory allows an authorized attacker to elevate privileges over a network. | 9.9 | 07.08.2026 |
| CVE-2026-7867 | A flaw was found in udisks2. A local attacker with an active console session can exploit insufficient authorization checking on the 'as-user' option in the org.freedesktop.UDisks2.Filesystem.Mount() D-Bus method. This allows the attacker to spoof the 'as-user' | 7.8 | 07.08.2026 |
| CVE-2026-8325 | A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the curre | 7.8 | 07.08.2026 |
| CVE-2026-7405 | A maliciously crafted TIF file, when parsed through certain Autodesk products during image import, can cause an Out-of-Bounds Read in the image handling library. A malicious actor can leverage this vulnerability to cause a denial of service | 5.5 | 07.08.2026 |
| CVE-2026-7406 | A maliciously crafted BMP file, when parsed through certain Autodesk products, can force a Untrusted Pointer Dereference vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process. | 7.8 | 07.08.2026 |
Kaynak: NIST NVD CVE API 2.0. CVE açıklamaları kaynağındaki İngilizce metinle gösterilir. Bu ürün NVD API'sini kullanır ancak NVD tarafından onaylanmamış veya sertifikalandırılmamıştır.