Security News

주요 제품 취약점 (3,434건)

기술CVE심각도유형KEV등재일
Ivanti
An External Control of File Name or Path vulnerability in Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to redirect a…
CVE-2026-106042 9.9 CWE-73 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt and ireq_opt after an RCU grace period tcp_v4_syn_recv_sock…
CVE-2026-98432 9.8 — —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access mr_che…
CVE-2026-98365 9.8 — —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Bound fragmented header copies by the remaining length siw_get_hdr() …
CVE-2026-98323 9.8 — —
OpenSSH
Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
CVE-2026-97816 9.8 CWE-416 —
Windows
Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
CVE-2026-97816 9.8 CWE-416 —
Windows
Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
CVE-2026-97815 9.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
CVE-2026-97814 9.8 CWE-122 —
Windows
Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network.
CVE-2026-97805 9.8 CWE-20 —
Windows
Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
CVE-2026-96934 9.8 CWE-416 —
Windows
Untrusted pointer dereference in Windows OLE allows an unauthorized attacker to execute code over a network.
CVE-2026-96924 9.8 CWE-822 —
Windows
Heap-based buffer overflow in Windows BitLocker allows an unauthorized attacker to execute code over a network.
CVE-2026-96909 9.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
CVE-2026-96320 9.8 CWE-122 —
Windows
Out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to execute code over a network.
CVE-2026-96219 9.8 CWE-787 —
Windows
Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.
CVE-2026-96096 9.8 CWE-122 —
curl
libcurl had a flaw that when instructed to clear proxy authentication credentials which made it not do so, leaving the old credentials around to get …
CVE-2026-9079 9.8 CWE-522 —
Citrix NetScaler
Memory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before …
CVE-2026-88777 9.8 CWE-119 —
Citrix NetScaler
Memory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 1…
CVE-2026-88776 9.8 CWE-119 —
Citrix NetScaler
Memory overflow vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, be…
CVE-2026-88775 9.8 CWE-120 —
Windows
Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.
CVE-2026-88102 9.8 CWE-416 —
Citrix NetScaler
Multiple Memory overflow vulnerabilities in NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Denial of Service …
CVE-2026-8655 9.8 CWE-119 —
Apache Tomcat
CLIENT_CERT authentication does not fail as expected for some scenarios when soft fail is disabled vulnerability in Apache Tomcat. This issue affe…
CVE-2026-86248 9.8 CWE-287 —
Windows
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network.
CVE-2026-85928 9.8 CWE-122 —
Windows
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
CVE-2026-85814 9.8 CWE-122 —
Windows
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
CVE-2026-85809 9.8 CWE-122 —
Windows
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
CVE-2026-85792 9.8 CWE-416 —
Windows
Use after free in Windows Network Load Balancing allows an unauthorized attacker to execute code over a network.
CVE-2026-83862 9.8 CWE-416 —
Windows
Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network.
CVE-2026-83782 9.8 CWE-122 —
Windows
Use after free in Windows CCFFilter Driver allows an unauthorized attacker to execute code over a network.
CVE-2026-83780 9.8 CWE-416 —
Windows
Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
CVE-2026-83770 9.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
CVE-2026-83748 9.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
CVE-2026-83693 9.8 CWE-122 —
Windows
Integer underflow (wrap or wraparound) in Windows PowerShell allows an unauthorized attacker to execute code over a network.
CVE-2026-83578 9.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
CVE-2026-83519 9.8 CWE-122 —
Windows
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
CVE-2026-83517 9.8 CWE-122 —
Windows
Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network.
CVE-2026-78445 9.8 CWE-416 —
Apache Tomcat
Authentication Bypass by Alternate Name vulnerability in Apache Tomcat allowed the security constraints for any WebSocket endpoint to be bypassed. …
CVE-2026-76183 9.8 CWE-289 —
Windows
Weak authentication in Windows iSCSI allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-73025 9.8 CWE-1390 —
Windows
Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.
CVE-2026-73010 9.8 CWE-416 —
Windows
Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.
CVE-2026-73009 9.8 CWE-416 —
Windows
Use after free in Windows Internet Connection Sharing (ICS) allows an unauthorized attacker to execute code over a network.
CVE-2026-72983 9.8 CWE-416 —
Windows
Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network.
CVE-2026-72982 9.8 CWE-121 —
Windows
Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
CVE-2026-72979 9.8 CWE-416 —
Windows
Out-of-bounds write in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
CVE-2026-70296 9.8 CWE-787 —
Windows
Heap-based buffer overflow in Windows System Information Console allows an unauthorized attacker to execute code over a network.
CVE-2026-70157 9.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Rich Text Edit Control allows an unauthorized attacker to execute code over a network.
CVE-2026-70096 9.8 CWE-122 —
Windows
Stack-based buffer overflow in Windows Internet Information Services allows an unauthorized attacker to execute code over a network.
CVE-2026-70024 9.8 CWE-20 —
Windows
Stack-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code over a network.
CVE-2026-69910 9.8 CWE-121 —
Windows
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
CVE-2026-69886 9.8 CWE-122 —
Windows
Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.
CVE-2026-69883 9.8 CWE-416 —
Windows
Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
CVE-2026-69845 9.8 CWE-20 —
Windows
Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network.
CVE-2026-69829 9.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows HTTP Print Provider allows an unauthorized attacker to execute code over a network.
CVE-2026-69769 9.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows RNDIS allows an unauthorized attacker to execute code over a network.
CVE-2026-69768 9.8 CWE-122 —
Windows
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
CVE-2026-69730 9.8 CWE-416 —
Windows
Out-of-bounds read in Windows Direct Show allows an unauthorized attacker to execute code over a network.
CVE-2026-69715 9.8 CWE-122 —
Windows
Out-of-bounds write in Windows iSCSI allows an unauthorized attacker to execute code over a network.
CVE-2026-69705 9.8 CWE-787 —
Windows
Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network.
CVE-2026-69639 9.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network.
CVE-2026-69634 9.8 CWE-122 —
Windows
Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network.
CVE-2026-69595 9.8 CWE-416 —