주요 제품 취약점 (539건)
Windows
infra
293건
KEV 293 · 최근 2026-10-13
Cisco IOS
infra
44건
KEV 44 · 최근 2026-07-13
Ivanti
infra
36건
KEV 36 · 최근 2026-10-13
Linux 커널
infra
31건
KEV 31 · 최근 2026-10-28
Fortinet
infra
21건
KEV 22 · 최근 2026-10-16
Microsoft Exchange
infra
20건
KEV 20 · 최근 2026-05-15
Citrix NetScaler
infra
16건
KEV 16 · 최근 2026-10-04
Palo Alto PAN-OS
infra
14건
KEV 14 · 최근 2026-10-14
VMware vCenter
infra
12건
KEV 12 · 최근 2026-08-18
Apache HTTP
infra
11건
KEV 11 · 최근 2026-08-24
Atlassian Confluence
infra
10건
KEV 10 · 최근 2026-10-15
Apache Tomcat
infra
8건
KEV 8 · 최근 2026-08-04
VMware ESXi
infra
7건
KEV 7 · 최근 2025-03-04
OpenSSH
infra
3건
KEV 3 · 최근 2025-10-02
Redis
infra
3건
KEV 3 · 최근 2026-05-26
MySQL/MariaDB
finance
2건
KEV 2 · 최근 2024-11-07
Node.js
infra
2건
KEV 2 · 최근 2025-01-14
PostgreSQL
finance
2건
KEV 2 · 최근 2026-09-02
Apache Spark
finance
1건
KEV 1 · 최근 2023-03-07
curl
infra
1건
KEV 1 · 최근 2023-05-12
OpenSSL
infra
1건
KEV 1 · 최근 2022-05-04
Spring Framework
finance
1건
KEV 1 · 최근 2022-04-04
| 기술 | CVE | 심각도 | 유형 | KEV | 등재일 |
|---|---|---|---|---|---|
|
Windows
Microsoft Windows COM+ Event System Service
Windows COM+ Event System Service Elevation of Privilege Vulnerability
|
CVE-2022-41033 | 7.8 | CWE-843 | KEV | 2022-10-11 |
|
Linux 커널
Linux Kernel
Integer overflow in the fb_mmap function in drivers/video/fbmem.c in the Linux kernel before 3.8.9, as used in a certain Motorola build of Android 4.…
|
CVE-2013-2596 | 7.8 | CWE-190 | KEV | 2022-09-15 |
|
Windows
Microsoft Windows
Windows Shell in Microsoft Windows XP SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 SP2 and R2, and Windows 7 allows local users or remote att…
|
CVE-2010-2568 | 7.8 | CWE-20 | KEV | 2022-09-15 |
|
Windows
Microsoft Windows
Windows Common Log File System Driver Elevation of Privilege Vulnerability
|
CVE-2022-37969 | 7.8 | CWE-787 | KEV | 2022-09-14 |
|
Windows
Microsoft Windows
Windows Runtime Remote Code Execution Vulnerability
|
CVE-2022-21971 | 7.8 | CWE-824 | KEV | 2022-08-18 |
|
Windows
Microsoft Windows
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
|
CVE-2022-34713 | 7.8 | — | KEV | 2022-08-09 |
|
Windows
Microsoft Windows
Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
|
CVE-2022-22047 | 7.8 | CWE-426 | KEV | 2022-07-12 |
|
Windows
Microsoft Windows
A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who succ…
|
CVE-2022-30190 | 7.8 | — | KEV | 2022-06-14 |
|
Windows
Microsoft Windows
The Authenticode Signature Verification function in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008…
|
CVE-2012-0151 | 7.8 | CWE-20 | KEV | 2022-06-08 |
|
Windows
Adobe Flash Player
Unspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windows, Mac OS X, Linux, and Solaris; 10.1.106.16 and earlier on Android;…
|
CVE-2011-0609 | 7.8 | — | KEV | 2022-06-08 |
|
Windows
Adobe Flash Player
Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before 2.0.2.12610; and Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x …
|
CVE-2010-1297 | 7.8 | CWE-787 | KEV | 2022-06-08 |
|
Windows
Adobe Acrobat and Reader
Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Wi…
|
CVE-2009-4324 | 7.8 | CWE-416 | KEV | 2022-06-08 |
|
Windows
Microsoft Windows
Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows S…
|
CVE-2016-3393 | 7.8 | — | KEV | 2022-05-25 |
|
Windows
Microsoft Windows
The kernel in Microsoft Windows 10 Gold allows local users to gain privileges via a crafted application, aka "Windows Kernel Memory Elevation of Priv…
|
CVE-2015-6175 | 7.8 | — | KEV | 2022-05-25 |
|
Windows
Microsoft Windows
The Windows DirectWrite library, as used in Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2; Office 2007 SP3 and 2010 SP2; Liv…
|
CVE-2015-1671 | 7.8 | — | KEV | 2022-05-25 |
|
Windows
Adobe Flash Player
Adobe Flash Player before 13.0.0.262 and 14.x through 16.x before 16.0.0.287 on Windows and OS X and before 11.2.202.438 on Linux does not properly r…
|
CVE-2015-0310 | 7.8 | CWE-200 | KEV | 2022-05-25 |
|
Windows
Microsoft Windows
Directory traversal vulnerability in the TS WebProxy (aka TSWbPrxy) component in Microsoft Windows Vista SP2, Windows 7 SP1, Windows Server 2008 R2 S…
|
CVE-2015-0016 | 7.8 | CWE-22 | KEV | 2022-05-25 |
|
Windows
Microsoft Input Method Editor (IME) Japanese
Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, and Office 2007 SP3, when IMJPDCT.EXE (aka I…
|
CVE-2014-4077 | 7.8 | — | KEV | 2022-05-25 |
|
Linux 커널
Linux Kernel
The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two different futex addresses, which …
|
CVE-2014-3153 | 7.8 | — | KEV | 2022-05-25 |
|
Windows
Microsoft Windows
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka "Windows Kernel Elevation of P…
|
CVE-2018-8611 | 7.8 | CWE-404 | KEV | 2022-05-24 |
|
Windows
Microsoft Windows
The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 20…
|
CVE-2017-0005 | 7.8 | CWE-119 | KEV | 2022-05-24 |
|
Windows
Microsoft Windows
An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation of Privile…
|
CVE-2020-1027 | 7.8 | CWE-787 | KEV | 2022-05-23 |
|
Windows
Microsoft Windows
An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in acc…
|
CVE-2019-1385 | 7.8 | CWE-59 | KEV | 2022-05-23 |
|
Windows
Microsoft Windows
An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation o…
|
CVE-2019-1130 | 7.8 | CWE-59 | KEV | 2022-05-23 |
|
Windows
Microsoft Windows
A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls, aka 'Microsoft splwow64 Elevation of Privilege Vulnera…
|
CVE-2019-0880 | 7.8 | — | KEV | 2022-05-23 |
|
Windows
Microsoft Win32k
An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys, aka "Windows Win32k Elevation of Privilege Vulner…
|
CVE-2018-8589 | 7.8 | — | KEV | 2022-05-23 |
|
Windows
Microsoft Win32k
win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Win…
|
CVE-2014-4113 | 7.8 | — | KEV | 2022-05-04 |
|
Linux 커널
Linux Kernel
A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_…
|
CVE-2022-0847 | 7.8 | CWE-665 | KEV | 2022-04-25 |
|
Windows
Microsoft Windows
Windows Print Spooler Elevation of Privilege Vulnerability
|
CVE-2022-22718 | 7.8 | CWE-269 | KEV | 2022-04-19 |
|
Windows
Microsoft Windows
Windows Common Log File System Driver Elevation of Privilege Vulnerability
|
CVE-2022-24521 | 7.8 | CWE-787 | KEV | 2022-04-13 |
|
Windows
Adobe Flash Player
Stack-based buffer overflow in Adobe Flash Player before 13.0.0.259 and 14.x and 15.x before 15.0.0.246 on Windows and OS X and before 11.2.202.425 o…
|
CVE-2014-9163 | 7.8 | CWE-121 | KEV | 2022-04-13 |
|
Windows
Microsoft Windows
Windows User Profile Service Elevation of Privilege Vulnerability
|
CVE-2021-34484 | 7.8 | CWE-269 | KEV | 2022-03-31 |
|
Windows
Microsoft Windows
Windows Event Tracing Elevation of Privilege Vulnerability
|
CVE-2021-34486 | 7.8 | CWE-416 | KEV | 2022-03-28 |
|
Windows
Microsoft Windows
An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC), aka "Windows ALPC Eleva…
|
CVE-2018-8440 | 7.8 | — | KEV | 2022-03-28 |
|
Windows
Microsoft DirectX Graphics Kernel (DXGKRNL)
An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX G…
|
CVE-2018-8406 | 7.8 | CWE-404 | KEV | 2022-03-28 |
|
Windows
Microsoft DirectX Graphics Kernel (DXGKRNL)
An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX G…
|
CVE-2018-8405 | 7.8 | CWE-404 | KEV | 2022-03-28 |
|
Windows
Microsoft Client-Server Run-time Subsystem (CSRSS)
The Client-Server Run-time Subsystem (CSRSS) in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 …
|
CVE-2016-0151 | 7.8 | CWE-269 | KEV | 2022-03-28 |
|
Windows
Microsoft Windows
The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows local users to gain privileges via a crafted …
|
CVE-2016-0040 | 7.8 | — | KEV | 2022-03-28 |
|
Windows
Microsoft Win32k
The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows V…
|
CVE-2013-3660 | 7.8 | CWE-119 | KEV | 2022-03-28 |
|
Windows
Microsoft Ancillary Function Driver (afd.sys)
afd.sys in the Ancillary Function Driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly validate user-mode input passed to…
|
CVE-2011-2005 | 7.8 | — | KEV | 2022-03-28 |
|
Windows
Microsoft Windows
Stack-based buffer overflow in the RtlQueryRegistryValues function in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Window…
|
CVE-2010-4398 | 7.8 | CWE-787 | KEV | 2022-03-28 |
|
Windows
Microsoft Windows
Windows Print Spooler Elevation of Privilege Vulnerability
|
CVE-2022-21999 | 7.8 | CWE-22 | KEV | 2022-03-25 |
|
Windows
Microsoft Windows
An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly allows COM object creation, aka 'Wi…
|
CVE-2019-1405 | 7.8 | CWE-269 | KEV | 2022-03-15 |
|
Windows
Microsoft Windows
An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka 'Microsoft Windows Elevation of Privilege…
|
CVE-2019-1322 | 7.8 | — | KEV | 2022-03-15 |
|
Windows
Microsoft Windows
An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles hard links, aka 'Windows Error Reporting Manag…
|
CVE-2019-1315 | 7.8 | CWE-59 | KEV | 2022-03-15 |
|
Windows
Microsoft Windows
An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.To exploit this vulnerability, an…
|
CVE-2019-1253 | 7.8 | CWE-59 | KEV | 2022-03-15 |
|
Windows
Microsoft Win32k
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation…
|
CVE-2019-1132 | 7.8 | — | KEV | 2022-03-15 |
|
Windows
Microsoft Windows
An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation o…
|
CVE-2019-1129 | 7.8 | CWE-59 | KEV | 2022-03-15 |
|
Windows
Microsoft Windows
An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links. An attacker who successf…
|
CVE-2019-1064 | 7.8 | CWE-59 | KEV | 2022-03-15 |
|
Windows
Microsoft Windows
An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation o…
|
CVE-2019-0841 | 7.8 | CWE-59 | KEV | 2022-03-15 |
|
Windows
Microsoft Windows
An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka "Microsoft Windows Elevation of Privilege…
|
CVE-2019-0543 | 7.8 | CWE-287 | KEV | 2022-03-15 |
|
Windows
Microsoft Windows
The kernel-mode drivers in Transaction Manager in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1, Windows Se…
|
CVE-2017-0101 | 7.8 | CWE-119 | KEV | 2022-03-15 |
|
Windows
Microsoft Windows
The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and …
|
CVE-2016-3309 | 7.8 | — | KEV | 2022-03-15 |
|
Microsoft Exchange
Microsoft Malware Protection Engine
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Window…
|
CVE-2017-8540 | 7.8 | CWE-787 | KEV | 2022-03-03 |
|
Windows
Microsoft Malware Protection Engine
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Window…
|
CVE-2017-8540 | 7.8 | CWE-787 | KEV | 2022-03-03 |
|
Windows
Microsoft Graphics Device Interface (GDI)
The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 20…
|
CVE-2017-0001 | 7.8 | — | KEV | 2022-03-03 |
|
Windows
Microsoft Windows
The Secondary Logon Service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold …
|
CVE-2016-0099 | 7.8 | CWE-120 | KEV | 2022-03-03 |
|
Windows
Adobe Flash Player
Adobe Flash Player 18.x through 18.0.0.252 and 19.x through 19.0.0.207 on Windows and OS X and 11.x through 11.2.202.535 on Linux allows remote attac…
|
CVE-2015-7645 | 7.8 | — | KEV | 2022-03-03 |
|
Windows
Microsoft ATM Font Driver
ATMFD.DLL in the Adobe Type Manager Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows …
|
CVE-2015-2387 | 7.8 | CWE-787 | KEV | 2022-03-03 |
|
Windows
Microsoft Win32k
Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local users to gain privileges via …
|
CVE-2015-1701 | 7.8 | — | KEV | 2022-03-03 |