Güvenlik açıkları (CVE)
NVD (National Vulnerability Database) verisiyle CVE kayıtlarını arayın. Aktif olarak istismar edilen açıklar için CISA KEV kataloğunu inceleyin.
Yerel veritabanında 41.269 CVE, 0 KEV kaydı · son NVD senkronu 15.11.2026 05:30. Belirli bir CVE kimliği yerelde yoksa NVD'den anlık getirilir.
| CVE | Açıklama | CVSS | Yayın |
|---|---|---|---|
| CVE-2026-55944 | Deserialization of untrusted data in Microsoft Dynamics NAV allows an unauthorized attacker to execute code over a network. | 9.8 | 14.07.2026 |
| CVE-2026-55126 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | 5.4 | 14.07.2026 |
| CVE-2026-55010 | Heap-based buffer overflow in Minecraft Bedrock Dedicated Server allows an unauthorized attacker to execute code over a network. | 9.8 | 14.07.2026 |
| CVE-2026-50657 | Exposure of private personal information to an unauthorized actor in Microsoft Defender allows an authorized attacker to disclose information locally. | 5.5 | 14.07.2026 |
| CVE-2026-50658 | Time-of-check time-of-use (toctou) race condition in Microsoft Defender allows an authorized attacker to elevate privileges locally. | 7.0 | 14.07.2026 |
| CVE-2026-50510 | Improper restriction of names for files and other resources in Github Copilot allows an unauthorized attacker to execute code locally. | 7.8 | 14.07.2026 |
| CVE-2026-50498 | Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an unauthorized attacker to elevate privileges locally. | 7.8 | 14.07.2026 |
| CVE-2026-50447 | Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over a network. | 9.8 | 14.07.2026 |
| CVE-2026-50438 | Improper link resolution before file access ('link following') in Microsoft PC Manager allows an authorized attacker to elevate privileges locally. | 8.8 | 14.07.2026 |
| CVE-2026-50428 | Out-of-bounds read in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to disclose information locally. | 5.5 | 14.07.2026 |
| CVE-2026-50431 | Exposure of sensitive information to an unauthorized actor in Windows Quality of Service (QoS) Packet Scheduler allows an authorized attacker to disclose information locally. | 5.5 | 14.07.2026 |
| CVE-2026-50423 | Improper access control in Windows Kernel allows an authorized attacker to elevate privileges locally. | 7.8 | 14.07.2026 |
| CVE-2026-50377 | Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally. | 7.8 | 14.07.2026 |
| CVE-2026-50301 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. | 8.4 | 14.07.2026 |
| CVE-2026-48309 | Audition is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | 7.8 | 14.07.2026 |
| CVE-2026-48365 | Audition is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | 7.8 | 14.07.2026 |
| CVE-2026-48368 | Audition is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | 7.8 | 14.07.2026 |
| CVE-2026-47967 | Audition is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | 7.8 | 14.07.2026 |
| CVE-2026-47968 | Audition is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | 7.8 | 14.07.2026 |
| CVE-2026-47969 | Audition is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victi | 5.5 | 14.07.2026 |
| CVE-2026-15715 | A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is an unknown functionality of the file /exam.php. Such manipulation of the argument day leads to cross site scripting. It is possible to lau | 2.1 | 14.07.2026 |
| CVE-2026-15747 | Mojolicious versions from 4.59 before 9.48 for Perl expose a stable representation of the session CSRF token to a BREACH compression oracle. _csrf_token generates and caches one token per session and returns the same value on every call, and _csrf_field place | 9.1 | 14.07.2026 |
| CVE-2026-15757 | A security flaw was discovered in the NETGEAR DGND3700v1 that could allow someone on the same local WiFi network to send unauthorized commands to the device. This issue was identified through testing in a controlled research environment using a simulated ve | 6.3 | 14.07.2026 |
| CVE-2026-59888 | jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.15.0 until 2.18.8, 2.21.4, and 3.1.4, Java Records using a PropertyNamingStrategy can bypass @JsonIgnore because POJOPropertiesCollector. | 6.5 | 14.07.2026 |
| CVE-2026-59891 | sigstore-js provides JavaScript libraries for interacting with Sigstore services. Prior to 0.7.1, getRegistryCredentials() reads credentials from the Docker config file and selects an entry by checking whether any configured auth key contains the target regist | 9.6 | 14.07.2026 |
Kaynak: NIST NVD CVE API 2.0. CVE açıklamaları kaynağındaki İngilizce metinle gösterilir. Bu ürün NVD API'sini kullanır ancak NVD tarafından onaylanmamış veya sertifikalandırılmamıştır.