주요 제품 취약점 (539건)
Windows
infra
293건
KEV 293 · 최근 2026-10-13
Cisco IOS
infra
44건
KEV 44 · 최근 2026-07-13
Ivanti
infra
36건
KEV 36 · 최근 2026-10-13
Linux 커널
infra
31건
KEV 31 · 최근 2026-10-28
Fortinet
infra
21건
KEV 22 · 최근 2026-10-16
Microsoft Exchange
infra
20건
KEV 20 · 최근 2026-05-15
Citrix NetScaler
infra
16건
KEV 16 · 최근 2026-10-04
Palo Alto PAN-OS
infra
14건
KEV 14 · 최근 2026-10-14
VMware vCenter
infra
12건
KEV 12 · 최근 2026-08-18
Apache HTTP
infra
11건
KEV 11 · 최근 2026-08-24
Atlassian Confluence
infra
10건
KEV 10 · 최근 2026-10-15
Apache Tomcat
infra
8건
KEV 8 · 최근 2026-08-04
VMware ESXi
infra
7건
KEV 7 · 최근 2025-03-04
OpenSSH
infra
3건
KEV 3 · 최근 2025-10-02
Redis
infra
3건
KEV 3 · 최근 2026-05-26
MySQL/MariaDB
finance
2건
KEV 2 · 최근 2024-11-07
Node.js
infra
2건
KEV 2 · 최근 2025-01-14
PostgreSQL
finance
2건
KEV 2 · 최근 2026-09-02
Apache Spark
finance
1건
KEV 1 · 최근 2023-03-07
curl
infra
1건
KEV 1 · 최근 2023-05-12
OpenSSL
infra
1건
KEV 1 · 최근 2022-05-04
Spring Framework
finance
1건
KEV 1 · 최근 2022-04-04
| 기술 | CVE | 심각도 | 유형 | KEV | 등재일 |
|---|---|---|---|---|---|
|
Windows
Microsoft Windows
Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.
|
CVE-2026-85880 | 7.8 | CWE-122 | KEV | 2026-09-08 |
|
Windows
Microsoft Windows
Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally.
|
CVE-2026-81963 | 7.8 | CWE-59 | KEV | 2026-09-08 |
|
Linux 커널
Linux Kernel
In the Linux kernel, the following vulnerability has been resolved:
ipv6: account for fraggap on the paged allocation path
In __ip6_append_data(), …
|
CVE-2026-53362 | 7.8 | CWE-787 | KEV | 2026-08-27 |
|
Linux 커널
Linux Kernel
An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This flaw can overwrite parts of t…
|
CVE-2022-0995 | 7.8 | CWE-787 | KEV | 2026-08-26 |
|
Linux 커널
Linux Kernel
A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. This flaw, under certain circum…
|
CVE-2022-0492 | 7.8 | CWE-287 | KEV | 2026-06-02 |
|
Linux 커널
Linux Kernel
In the Linux kernel, the following vulnerability has been resolved:
crypto: algif_aead - Revert to operating out-of-place
This mostly reverts commi…
|
CVE-2026-31431 | 7.8 | CWE-669 | KEV | 2026-05-01 |
|
Windows
Microsoft Windows
Improper link resolution before file access ('link following') in Host Process for Windows Tasks allows an authorized attacker to elevate privileges …
|
CVE-2025-60710 | 7.8 | CWE-59 | KEV | 2026-04-13 |
|
Windows
Microsoft Windows
Windows Common Log File System Driver Elevation of Privilege Vulnerability
|
CVE-2023-36424 | 7.8 | CWE-125 | KEV | 2026-04-13 |
|
Windows
Microsoft Windows
Improper privilege management in Windows Remote Desktop allows an authorized attacker to elevate privileges locally.
|
CVE-2026-21533 | 7.8 | CWE-269 | KEV | 2026-02-10 |
|
Windows
Microsoft Windows
Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
|
CVE-2026-21519 | 7.8 | CWE-843 | KEV | 2026-02-10 |
|
Linux 커널
Linux Kernel
An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise p…
|
CVE-2018-14634 | 7.8 | CWE-190 | KEV | 2026-01-26 |
|
Windows
Microsoft Windows
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
|
CVE-2025-62221 | 7.8 | CWE-416 | KEV | 2025-12-09 |
|
Windows
Microsoft Windows
Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
|
CVE-2025-59230 | 7.8 | CWE-284 | KEV | 2025-10-14 |
|
Windows
Microsoft Windows
Microsoft is aware of vulnerabilities in the third party Agere Modem driver that ships natively with supported Windows operating systems. This is an…
|
CVE-2025-24990 | 7.8 | CWE-822 | KEV | 2025-10-14 |
|
Windows
Microsoft Windows
Windows Common Log File System Driver Elevation of Privilege Vulnerability
|
CVE-2021-43226 | 7.8 | — | KEV | 2025-10-06 |
|
Linux 커널
Linux Kernel
In the Linux kernel, the following vulnerability has been resolved:
posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer…
|
CVE-2025-38352 | 7.8 | CWE-367 | KEV | 2025-09-04 |
|
Linux 커널
Linux Kernel
A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s…
|
CVE-2023-0386 | 7.8 | CWE-282 | KEV | 2025-06-17 |
|
Windows
Microsoft Windows
Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
|
CVE-2025-32709 | 7.8 | CWE-416 | KEV | 2025-05-13 |
|
Windows
Microsoft Windows
Improper input validation in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
|
CVE-2025-32706 | 7.8 | CWE-20 | KEV | 2025-05-13 |
|
Windows
Microsoft Windows
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
|
CVE-2025-32701 | 7.8 | CWE-416 | KEV | 2025-05-13 |
|
Windows
Microsoft Windows
Use after free in Windows DWM allows an authorized attacker to elevate privileges locally.
|
CVE-2025-30400 | 7.8 | CWE-416 | KEV | 2025-05-13 |
|
Linux 커널
Linux Kernel
In the Linux kernel, the following vulnerability has been resolved:
ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices…
|
CVE-2024-53197 | 7.8 | CWE-787 | KEV | 2025-04-09 |
|
Windows
Microsoft Windows
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
|
CVE-2025-29824 | 7.8 | CWE-416 | KEV | 2025-04-08 |
|
Windows
Microsoft Windows
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
|
CVE-2025-24993 | 7.8 | CWE-122 | KEV | 2025-03-11 |
|
Windows
Microsoft Windows
Integer overflow or wraparound in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally.
|
CVE-2025-24985 | 7.8 | CWE-122 | KEV | 2025-03-11 |
|
Windows
Microsoft Windows
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation…
|
CVE-2018-8639 | 7.8 | CWE-404 | KEV | 2025-03-03 |
|
Windows
Microsoft Windows
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
|
CVE-2025-21418 | 7.8 | CWE-122 | KEV | 2025-02-11 |
|
Linux 커널
Linux Kernel
In the Linux kernel, the following vulnerability has been resolved:
media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_forma…
|
CVE-2024-53104 | 7.8 | CWE-787 | KEV | 2025-02-05 |
|
Windows
Microsoft Windows
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
|
CVE-2025-21335 | 7.8 | CWE-416 | KEV | 2025-01-14 |
|
Windows
Microsoft Windows
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
|
CVE-2025-21334 | 7.8 | CWE-416 | KEV | 2025-01-14 |
|
Windows
Microsoft Windows
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
|
CVE-2025-21333 | 7.8 | CWE-122 | KEV | 2025-01-14 |
|
Windows
Microsoft Windows
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
|
CVE-2024-35250 | 7.8 | CWE-822 | KEV | 2024-12-16 |
|
Windows
Microsoft Windows
Windows Common Log File System Driver Elevation of Privilege Vulnerability
|
CVE-2024-49138 | 7.8 | CWE-122 | KEV | 2024-12-10 |
|
Windows
Microsoft Windows
Microsoft Management Console Remote Code Execution Vulnerability
|
CVE-2024-43572 | 7.8 | CWE-707 | KEV | 2024-10-08 |
|
Windows
Microsoft Windows
Windows Installer Elevation of Privilege Vulnerability
|
CVE-2024-38014 | 7.8 | CWE-269 | KEV | 2024-09-10 |
|
Windows
Kingsoft WPS Office
Improper path validation in promecefpluginhost.exe in Kingsoft WPS Office version ranging from 12.2.0.13110 to 12.2.0.16412 (exclusive) on Windows al…
|
CVE-2024-7262 | 7.8 | CWE-22 | KEV | 2024-09-03 |
|
Windows
Microsoft Windows
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
|
CVE-2024-38193 | 7.8 | CWE-416 | KEV | 2024-08-13 |
|
Windows
Microsoft Windows
Windows Power Dependency Coordinator Elevation of Privilege Vulnerability
|
CVE-2024-38107 | 7.8 | CWE-416 | KEV | 2024-08-13 |
|
Linux 커널
Android Kernel
In the Linux kernel, the following vulnerability has been resolved:
net: fix __dst_negative_advice() race
__dst_negative_advice() does not enforce …
|
CVE-2024-36971 | 7.8 | CWE-416 | KEV | 2024-08-07 |
|
Windows
Microsoft Windows
Windows Hyper-V Elevation of Privilege Vulnerability
|
CVE-2024-38080 | 7.8 | CWE-190 | KEV | 2024-07-09 |
|
Windows
Microsoft Windows
Windows Error Reporting Service Elevation of Privilege Vulnerability
|
CVE-2024-26169 | 7.8 | CWE-269 | KEV | 2024-06-13 |
|
Linux 커널
Linux Kernel
A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.
The nf…
|
CVE-2024-1086 | 7.8 | CWE-416 | KEV | 2024-05-30 |
|
Windows
Microsoft DWM Core Library
Windows DWM Core Library Elevation of Privilege Vulnerability
|
CVE-2024-30051 | 7.8 | CWE-122 | KEV | 2024-05-14 |
|
Windows
Microsoft Windows
Windows Print Spooler Elevation of Privilege Vulnerability
|
CVE-2022-38028 | 7.8 | — | KEV | 2024-04-23 |
|
Windows
Microsoft Windows
Windows Kernel Elevation of Privilege Vulnerability
|
CVE-2024-21338 | 7.8 | CWE-822 | KEV | 2024-03-04 |
|
Windows
Microsoft Windows
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
|
CVE-2023-36036 | 7.8 | CWE-122 | KEV | 2023-11-14 |
|
Windows
Microsoft Windows
Windows DWM Core Library Elevation of Privilege Vulnerability
|
CVE-2023-36033 | 7.8 | CWE-822 | KEV | 2023-11-14 |
|
Windows
Android Framework
In onCreate of WindowState.java, there is a possible way to launch a background activity due to a logic error in the code. This could lead to local e…
|
CVE-2023-35674 | 7.8 | CWE-269 | KEV | 2023-09-13 |
|
Windows
Microsoft Windows
Windows Error Reporting Service Elevation of Privilege Vulnerability
|
CVE-2023-36874 | 7.8 | CWE-59 | KEV | 2023-07-11 |
|
Windows
Microsoft Windows
Windows MSHTML Platform Elevation of Privilege Vulnerability
|
CVE-2023-32046 | 7.8 | — | KEV | 2023-07-11 |
|
Windows
Microsoft Win32k
The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R…
|
CVE-2016-0165 | 7.8 | — | KEV | 2023-06-22 |
|
Linux 커널
Linux Kernel
The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel before 2.6.36 do…
|
CVE-2010-3904 | 7.8 | CWE-1284 | KEV | 2023-05-12 |
|
Windows
Microsoft Windows
Windows Common Log File System Driver Elevation of Privilege Vulnerability
|
CVE-2023-28252 | 7.8 | CWE-122 | KEV | 2023-04-11 |
|
Windows
Microsoft Windows
An elevation of privilege vulnerability exists in the Windows Certificate Dialog when it does not properly enforce user privileges, aka 'Windows Cert…
|
CVE-2019-1388 | 7.8 | CWE-269 | KEV | 2023-04-07 |
|
Windows
Microsoft Windows
Windows Common Log File System Driver Elevation of Privilege Vulnerability
|
CVE-2023-23376 | 7.8 | CWE-122 | KEV | 2023-02-14 |
|
Windows
Microsoft Windows
Windows Graphics Component Remote Code Execution Vulnerability
|
CVE-2023-21823 | 7.8 | CWE-190 | KEV | 2023-02-14 |
|
Windows
Intel Ethernet Diagnostics Driver for Windows
(1) IQVW32.sys before 1.3.1.0 and (2) IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows allows local users to cause a de…
|
CVE-2015-2291 | 7.8 | CWE-20 | KEV | 2023-02-10 |
|
Windows
Microsoft Windows
Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
|
CVE-2022-41125 | 7.8 | CWE-787 | KEV | 2022-11-08 |
|
Windows
Microsoft Windows
Windows Print Spooler Elevation of Privilege Vulnerability
|
CVE-2022-41073 | 7.8 | CWE-787 | KEV | 2022-11-08 |
|
Windows
Cisco AnyConnect Secure
A vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, …
|
CVE-2020-3433 | 7.8 | CWE-427 | KEV | 2022-10-24 |