주요 제품 취약점 (533건)
Windows
infra
293건
KEV 293 · 최근 2026-10-13
Cisco IOS
infra
44건
KEV 44 · 최근 2026-07-13
Ivanti
infra
36건
KEV 36 · 최근 2026-10-13
Linux 커널
infra
31건
KEV 31 · 최근 2026-10-28
Fortinet
infra
21건
KEV 22 · 최근 2026-10-16
Microsoft Exchange
infra
20건
KEV 20 · 최근 2026-05-15
Citrix NetScaler
infra
16건
KEV 16 · 최근 2026-10-04
Palo Alto PAN-OS
infra
14건
KEV 14 · 최근 2026-10-14
VMware vCenter
infra
12건
KEV 12 · 최근 2026-08-18
Apache HTTP
infra
11건
KEV 11 · 최근 2026-08-24
Atlassian Confluence
infra
10건
KEV 10 · 최근 2026-10-15
Apache Tomcat
infra
8건
KEV 8 · 최근 2026-08-04
VMware ESXi
infra
7건
KEV 7 · 최근 2025-03-04
OpenSSH
infra
3건
KEV 3 · 최근 2025-10-02
Redis
infra
3건
KEV 3 · 최근 2026-05-26
Node.js
infra
2건
KEV 2 · 최근 2025-01-14
curl
infra
1건
KEV 1 · 최근 2023-05-12
OpenSSL
infra
1건
KEV 1 · 최근 2022-05-04
| 기술 | CVE | 심각도 | 유형 | KEV | 등재일 |
|---|---|---|---|---|---|
|
Windows
Microsoft Windows
The POSIX component of Microsoft Windows NT and Windows 2000 allows local users to execute arbitrary code via certain parameters, possibly by modifyi…
|
CVE-2004-0210 | 7.8 | CWE-120 | KEV | 2022-03-03 |
|
Windows
Microsoft Windows
smss.exe debugging subsystem in Windows NT and Windows 2000 does not properly authenticate programs that connect to other programs, which allows loca…
|
CVE-2002-0367 | 7.8 | CWE-269 | KEV | 2022-03-03 |
|
Windows
Microsoft Windows
Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows …
|
CVE-2014-6352 | 7.8 | — | KEV | 2022-02-25 |
|
Windows
Microsoft Graphics Component
GDI+ in Microsoft Windows Vista SP2 and Server 2008 SP2; Office 2003 SP3, 2007 SP3, and 2010 SP1 and SP2; Office Compatibility Pack SP3; and Lync 201…
|
CVE-2013-3906 | 7.8 | CWE-94 | KEV | 2022-02-15 |
|
Windows
Microsoft Windows
An elevation of privilege vulnerability exists because of overly permissive Access Control Lists (ACLs) on multiple system files, including the Secur…
|
CVE-2021-36934 | 7.8 | — | KEV | 2022-02-10 |
|
Windows
Microsoft Win32k
The kernel-mode drivers in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1,…
|
CVE-2017-0263 | 7.8 | CWE-416 | KEV | 2022-02-10 |
|
Windows
Microsoft Windows
An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperly handles symbolic links, aka…
|
CVE-2020-0787 | 7.8 | CWE-59 | KEV | 2022-01-28 |
|
Windows
Microsoft Win32k
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation…
|
CVE-2018-8453 | 7.8 | — | KEV | 2022-01-21 |
|
Windows
Microsoft Win32k
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation…
|
CVE-2019-1458 | 7.8 | — | KEV | 2022-01-10 |
|
Linux 커널
Linux Kernel
In the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recording of the credentials of a process that wants to create a ptr…
|
CVE-2019-13272 | 7.8 | — | KEV | 2021-12-10 |
|
Windows
Microsoft Windows
Win32k Elevation of Privilege Vulnerability
|
CVE-2021-40449 | 7.8 | CWE-416 | KEV | 2021-11-17 |
|
Windows
Microsoft Windows
Windows Common Log File System Driver Elevation of Privilege Vulnerability
|
CVE-2021-36955 | 7.8 | — | KEV | 2021-11-03 |
|
Windows
Microsoft Windows
Windows Update Medic Service Elevation of Privilege Vulnerability
|
CVE-2021-36948 | 7.8 | CWE-269 | KEV | 2021-11-03 |
|
Windows
Microsoft Windows
Windows Kernel Elevation of Privilege Vulnerability
|
CVE-2021-33771 | 7.8 | CWE-119 | KEV | 2021-11-03 |
|
Windows
Microsoft Windows
Windows Kernel Elevation of Privilege Vulnerability
|
CVE-2021-31979 | 7.8 | CWE-119 | KEV | 2021-11-03 |
|
Windows
Microsoft Windows
Windows NTFS Elevation of Privilege Vulnerability
|
CVE-2021-31956 | 7.8 | CWE-191 | KEV | 2021-11-03 |
|
Microsoft Exchange
Microsoft Exchange Server
Microsoft Exchange Server Remote Code Execution Vulnerability
|
CVE-2021-27065 | 7.8 | CWE-22 | KEV | 2021-11-03 |
|
Microsoft Exchange
Microsoft Exchange Server
Microsoft Exchange Server Remote Code Execution Vulnerability
|
CVE-2021-26858 | 7.8 | — | KEV | 2021-11-03 |
|
Microsoft Exchange
Microsoft Exchange Server
Microsoft Exchange Server Remote Code Execution Vulnerability
|
CVE-2021-26857 | 7.8 | CWE-502 | KEV | 2021-11-03 |
|
Windows
Microsoft Win32k
Windows Win32k Elevation of Privilege Vulnerability
|
CVE-2021-1732 | 7.8 | CWE-787 | KEV | 2021-11-03 |
|
Windows
Microsoft Windows
Windows Print Spooler Remote Code Execution Vulnerability
|
CVE-2021-1675 | 7.8 | CWE-269 | KEV | 2021-11-03 |
|
Windows
Trend Micro Apex One, OfficeScan, and Worry-Free Business Security
A vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 on Microsoft Windows may allow an attacker to manipulate a particul…
|
CVE-2020-24557 | 7.8 | — | KEV | 2021-11-03 |
|
Windows
Microsoft Windows
Windows Kernel Local Elevation of Privilege Vulnerability
|
CVE-2020-17087 | 7.8 | CWE-131 | KEV | 2021-11-03 |
|
Windows
Microsoft Windows
A spoofing vulnerability exists when Windows incorrectly validates file signatures. An attacker who successfully exploited this vulnerability could b…
|
CVE-2020-1464 | 7.8 | CWE-347 | KEV | 2021-11-03 |
|
Windows
Microsoft Windows
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of P…
|
CVE-2020-0986 | 7.8 | CWE-787 | KEV | 2021-11-03 |
|
Windows
Microsoft Windows
A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted …
|
CVE-2020-0938 | 7.8 | CWE-787 | KEV | 2021-11-03 |
|
Windows
Microsoft Windows
An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'Windows Installer Elevation of…
|
CVE-2020-0683 | 7.8 | CWE-59 | KEV | 2021-11-03 |
|
Linux 커널
Android Android Kernel
A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit thi…
|
CVE-2019-2215 | 7.8 | CWE-416 | KEV | 2021-11-03 |
|
Windows
Microsoft Windows
An elevation of privilege vulnerability exists in the way that ws2ifsl.sys (Winsock) handles objects in memory, aka 'Windows Elevation of Privilege V…
|
CVE-2019-1215 | 7.8 | CWE-269 | KEV | 2021-11-03 |
|
Windows
Microsoft Windows
An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory, aka 'Windo…
|
CVE-2019-1214 | 7.8 | CWE-119 | KEV | 2021-11-03 |
|
Windows
Microsoft Windows
An elevation of privilege vulnerability exists in the way Windows Error Reporting (WER) handles files, aka 'Windows Error Reporting Elevation of Priv…
|
CVE-2019-0863 | 7.8 | — | KEV | 2021-11-03 |
|
Windows
Microsoft Win32k
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation…
|
CVE-2019-0859 | 7.8 | — | KEV | 2021-11-03 |
|
Windows
Microsoft Win32k
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation…
|
CVE-2019-0808 | 7.8 | — | KEV | 2021-11-03 |
|
Windows
Microsoft Win32k
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation…
|
CVE-2019-0803 | 7.8 | — | KEV | 2021-11-03 |
|
Windows
Microsoft Win32k
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation…
|
CVE-2019-0797 | 7.8 | — | KEV | 2021-11-03 |
|
Apache HTTP
Apache HTTP Server
In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileged child processes or threads …
|
CVE-2019-0211 | 7.8 | CWE-416 | KEV | 2021-11-03 |
|
Windows
Microsoft Office and WordPad
Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Windows Vista SP2, Windows Server 2…
|
CVE-2017-0199 | 7.8 | — | KEV | 2021-11-03 |
|
Windows
Microsoft Win32k
The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and …
|
CVE-2016-7255 | 7.8 | — | KEV | 2021-11-03 |
|
Windows
Microsoft Windows
Media Center in Microsoft Windows Vista SP2, Windows 7 SP1, and Windows 8.1 allows remote attackers to execute arbitrary code via a crafted Media Cen…
|
CVE-2016-0185 | 7.8 | — | KEV | 2021-11-03 |
|
Windows
Microsoft Win32k
The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R…
|
CVE-2016-0167 | 7.8 | — | KEV | 2021-11-03 |
|
Cisco IOS
Cisco IOS and IOS XE
A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow the following:…
|
CVE-2025-20352 | 7.7 | CWE-121 | KEV | 2025-09-29 |
|
Windows
Microsoft Windows
Windows SmartScreen Security Feature Bypass Vulnerability
|
CVE-2024-21351 | 7.6 | CWE-94 | KEV | 2024-02-13 |
|
Apache Tomcat
Missing Encryption of Sensitive Data vulnerability in Apache Tomcat due to the fix for CVE-2026-29146 allowing the bypass of the EncryptInterceptor.
…
|
CVE-2026-34486 | 7.5 | CWE-311 | KEV | 2026-08-04 |
|
Windows
Prettier eslint-config-prettier
eslint-config-prettier 8.10.1, 9.1.1, 10.1.6, and 10.1.7 has embedded malicious code for a supply chain compromise. Installing an affected package ex…
|
CVE-2025-54313 | 7.5 | CWE-506 | KEV | 2026-01-22 |
|
Citrix NetScaler
Citrix NetScaler ADC and Gateway
Insufficient input validation leading to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Prox…
|
CVE-2025-5777 | 7.5 | CWE-125 | KEV | 2025-07-10 |
|
Windows
Microsoft Windows
Access of resource using incompatible type ('type confusion') in Microsoft Scripting Engine allows an unauthorized attacker to execute code over a ne…
|
CVE-2025-30397 | 7.5 | CWE-843 | KEV | 2025-05-13 |
|
Palo Alto PAN-OS
Palo Alto Networks PAN-OS
A Denial of Service vulnerability in the DNS Security feature of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to send a mali…
|
CVE-2024-3393 | 7.5 | CWE-754 | KEV | 2024-12-30 |
|
VMware vCenter
VMware vCenter Server
The vCenter Server contains a privilege escalation vulnerability. A malicious actor with network access to vCenter Server may trigger this vulnerabil…
|
CVE-2024-38813 | 7.5 | CWE-250 | KEV | 2024-11-20 |
|
Palo Alto PAN-OS
Palo Alto Networks Expedition
An OS command injection vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to run arbitrary OS commands as root in Exp…
|
CVE-2024-9463 | 7.5 | CWE-78 | KEV | 2024-11-14 |
|
Windows
Microsoft Windows
Scripting Engine Memory Corruption Vulnerability
|
CVE-2024-38178 | 7.5 | CWE-843 | KEV | 2024-08-13 |
|
Windows
Microsoft Windows
Windows MSHTML Platform Spoofing Vulnerability
|
CVE-2024-38112 | 7.5 | CWE-451 | KEV | 2024-07-09 |
|
Windows
Microsoft Windows
Windows Search Remote Code Execution Vulnerability
|
CVE-2023-36884 | 7.5 | CWE-362 | KEV | 2023-07-17 |
|
Windows
Mozilla Firefox, Firefox ESR, and Thunderbird
A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this vulnerability has been discovered in the wild targeting…
|
CVE-2016-9079 | 7.5 | CWE-416 | KEV | 2023-06-22 |
|
Cisco IOS
Cisco IOS, IOS XR, and IOS XE
The server IKEv1 implementation in Cisco IOS 12.2 through 12.4 and 15.0 through 15.6, IOS XE through 3.18S, IOS XR 4.3.x and 5.0.x through 5.2.x, and…
|
CVE-2016-6415 | 7.5 | CWE-200 | KEV | 2023-05-19 |
|
Windows
Microsoft SMBv1 server
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Win…
|
CVE-2017-0147 | 7.5 | — | KEV | 2022-05-24 |
|
OpenSSL
OpenSSL OpenSSL
The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attac…
|
CVE-2014-0160 | 7.5 | CWE-125 | KEV | 2022-05-04 |
|
Windows
Adobe Flash Player
Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux;…
|
CVE-2012-2034 | 7.5 | CWE-119 | KEV | 2022-03-28 |
|
Cisco IOS
Cisco IOS XR
Cisco IOS XR 3.4.0 through 3.9.1, when BGP is enabled, does not properly handle unrecognized transitive attributes, which allows remote attackers to …
|
CVE-2010-3035 | 7.5 | CWE-20 | KEV | 2022-03-25 |
|
Cisco IOS
Cisco IOS Software and Cisco IOS XE Software
A vulnerability in the implementation of Internet Key Exchange Version 1 (IKEv1) functionality in Cisco IOS Software and Cisco IOS XE Software could …
|
CVE-2018-0159 | 7.5 | CWE-20 | KEV | 2022-03-03 |
|
Cisco IOS
Cisco IOS Software and Cisco IOS XE Software
A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigg…
|
CVE-2018-0156 | 7.5 | CWE-399 | KEV | 2022-03-03 |