주요 제품 취약점 (3,477건)
Windows
infra
2105건
KEV 293 · 최근 2026-10-13
Linux 커널
infra
908건
KEV 31 · 최근 2026-10-28
Cisco IOS
infra
58건
KEV 44 · 최근 2026-07-13
Ivanti
infra
45건
KEV 36 · 최근 2026-10-13
Microsoft Exchange
infra
43건
KEV 20 · 최근 2026-05-15
Fortinet
infra
41건
KEV 22 · 최근 2026-10-16
Apache HTTP
infra
33건
KEV 11 · 최근 2026-08-24
Citrix NetScaler
infra
31건
KEV 16 · 최근 2026-10-04
Apache Tomcat
infra
30건
KEV 8 · 최근 2026-08-04
OpenSSH
infra
30건
KEV 3 · 최근 2025-10-02
PostgreSQL
finance
28건
KEV 2 · 최근 2026-09-02
Node.js
infra
24건
KEV 2 · 최근 2025-01-14
nginx
infra
16건
KEV 0
Palo Alto PAN-OS
infra
15건
KEV 14 · 최근 2026-10-14
VMware vCenter
infra
13건
KEV 12 · 최근 2026-08-18
Atlassian Confluence
infra
10건
KEV 10 · 최근 2026-10-15
MySQL/MariaDB
finance
10건
KEV 2 · 최근 2024-11-07
Redis
infra
9건
KEV 3 · 최근 2026-05-26
curl
infra
8건
KEV 1 · 최근 2023-05-12
OpenSSL
infra
8건
KEV 1 · 최근 2022-05-04
VMware ESXi
infra
7건
KEV 7 · 최근 2025-03-04
wolfSSL
finance
3건
KEV 0
Apache Spark
finance
1건
KEV 1 · 최근 2023-03-07
Spring Framework
finance
1건
KEV 1 · 최근 2022-04-04
| 기술 | CVE | 심각도 | 유형 | KEV | 등재일 |
|---|---|---|---|---|---|
|
Windows
Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network.
|
CVE-2026-69829 | 9.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows HTTP Print Provider allows an unauthorized attacker to execute code over a network.
|
CVE-2026-69769 | 9.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows RNDIS allows an unauthorized attacker to execute code over a network.
|
CVE-2026-69768 | 9.8 | CWE-122 | — | |
|
Windows
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
|
CVE-2026-69730 | 9.8 | CWE-416 | — | |
|
Windows
Out-of-bounds read in Windows Direct Show allows an unauthorized attacker to execute code over a network.
|
CVE-2026-69715 | 9.8 | CWE-122 | — | |
|
Windows
Out-of-bounds write in Windows iSCSI allows an unauthorized attacker to execute code over a network.
|
CVE-2026-69705 | 9.8 | CWE-787 | — | |
|
Windows
Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network.
|
CVE-2026-69639 | 9.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network.
|
CVE-2026-69634 | 9.8 | CWE-122 | — | |
|
Windows
Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network.
|
CVE-2026-69595 | 9.8 | CWE-416 | — | |
|
Windows
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
|
CVE-2026-69590 | 9.8 | CWE-122 | — | |
|
Windows
Integer overflow or wraparound in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network.
|
CVE-2026-69586 | 9.8 | CWE-122 | — | |
|
Windows
Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.
|
CVE-2026-69579 | 9.8 | CWE-416 | — | |
|
Windows
Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.
|
CVE-2026-69525 | 9.8 | CWE-416 | — | |
|
Windows
Heap-based buffer overflow in Windows Compressed Folder allows an unauthorized attacker to execute code over a network.
|
CVE-2026-69496 | 9.8 | CWE-122 | — | |
|
Windows
Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network.
|
CVE-2026-69493 | 9.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a network.
|
CVE-2026-69491 | 9.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code over a network.
|
CVE-2026-69463 | 9.8 | CWE-122 | — | |
|
Windows
Integer overflow or wraparound in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
|
CVE-2026-69408 | 9.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network.
|
CVE-2026-68839 | 9.8 | CWE-20 | — | |
|
Apache Tomcat
Authentication Bypass by Capture-replay vulnerability in Apache Tomcat's DIGEST authenticator. If, before windowSize requests have been made, a clien…
|
CVE-2026-65905 | 9.8 | CWE-294 | — | |
|
Windows
Authentication Bypass by Capture-replay vulnerability in Apache Tomcat's DIGEST authenticator. If, before windowSize requests have been made, a clien…
|
CVE-2026-65905 | 9.8 | CWE-294 | — | |
|
Windows
Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network.
|
CVE-2026-65791 | 9.8 | CWE-122 | — | |
|
Apache Tomcat
Improper Input Validation vulnerability in Apache Tomcat due to incomplete fix for CVE-2026-32990.
This issue affects Apache Tomcat: from 11.0.20 …
|
CVE-2026-65637 | 9.8 | CWE-20 | — | |
|
Windows
Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network.
|
CVE-2026-62893 | 9.8 | CWE-416 | — | |
|
Windows
Stack-based buffer overflow in Windows DNS allows an unauthorized attacker to execute code over a network.
|
CVE-2026-62878 | 9.8 | CWE-121 | — | |
|
Apache HTTP
Improper Privilege Management vulnerability in Apache HTTP Server's mod_ssl via SSLRequire and file-related expressions.
This issue affects Apache…
|
CVE-2026-59797 | 9.8 | CWE-269 | — | |
|
VMware vCenter
VMware vCenter contains an authentication bypass vulnerability in the VMware Directory Service. A malicious actor with network access to vCenter may …
|
CVE-2026-59309 | 9.8 | CWE-303 | — | |
|
Apache HTTP
Use After Free vulnerability in Apache HTTP Server's mod_http2 via shared session->bbtmp re-entrancy
This issue affects Apache HTTP Server: from 2…
|
CVE-2026-57941 | 9.8 | CWE-416 | — | |
|
Windows
On Windows, when the target of Root.Mkdir or Root.MkdirAll is a junction pointing to an empty location, the operation can create a directory at the j…
|
CVE-2026-56857 | 9.8 | CWE-1386 | — | |
|
Apache HTTP
Use After Free vulnerability in Apache HTTP Server's mod_rewrite when using lookahead (%{LA-U:HTTP:...})
This issue affects Apache HTTP Server: fr…
|
CVE-2026-56154 | 9.8 | CWE-416 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
ipv6: sit: reload inner IPv6 header after GSO offloads
ipip6_tunnel_xmit() cach…
|
CVE-2026-53228 | 9.8 | CWE-416 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
ip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup()
In vti6_tnl_lookup(…
|
CVE-2026-53221 | 9.8 | CWE-20 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
ipv6: fix possible UAF in icmpv6_rcv()
Caching saddr and daddr before pskb_pull…
|
CVE-2026-53006 | 9.8 | CWE-416 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
netfilter: conntrack: remove sprintf usage
Replace it with scnprintf, the buffe…
|
CVE-2026-53002 | 9.8 | CWE-787 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_conntrack_sip: don't use simple_strtoul
Replace unsafe port parsi…
|
CVE-2026-52986 | 9.8 | CWE-476 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
smb: client: validate dacloffset before building DACL pointers
parse_sec_desc()…
|
CVE-2026-46195 | 9.8 | CWE-476 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
mptcp: pm: ADD_ADDR rtx: fix potential data-race
This mptcp_pm_add_timer() help…
|
CVE-2026-46137 | 9.8 | CWE-362 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
ipv6: rpl: reserve mac_len headroom when recompressed SRH grows
ipv6_rpl_srh_rc…
|
CVE-2026-43501 | 9.8 | CWE-787 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
crypto: pcrypt - Fix handling of MAY_BACKLOG requests
MAY_BACKLOG requests can …
|
CVE-2026-43493 | 9.8 | CWE-390 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach()
Sashiko AI-review …
|
CVE-2026-43038 | 9.8 | CWE-787 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
net/x25: Fix potential double free of skb
When alloc_skb fails in x25_queue_rx_…
|
CVE-2026-43011 | 9.8 | CWE-415 | — | |
|
Windows
Ollama for Windows contains a Remote Code Execution vulnerability in its update mechanism due to improper handling of attacker‑controlled HTTP respon…
|
CVE-2026-42249 | 9.8 | CWE-22 | — | |
|
nginx
Nginx UI is a web user interface for the Nginx web server. In versions 2.3.5 and prior, the nginx-ui MCP (Model Context Protocol) integration exposes…
|
CVE-2026-33032 | 9.8 | CWE-306 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix out-of-bounds write in smb2_get_ea() EA alignment
smb2_get_ea() appl…
|
CVE-2026-31705 | 9.8 | CWE-787 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
mptcp: fix slab-use-after-free in __inet_lookup_established
The ehash table loo…
|
CVE-2026-31669 | 9.8 | CWE-416 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
net: stmmac: fix integer underflow in chain mode
The jumbo_frm() chain-mode imp…
|
CVE-2026-31649 | 9.8 | CWE-190 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
rxrpc: reject undecryptable rxkad response tickets
rxkad_decrypt_ticket() decry…
|
CVE-2026-31637 | 9.8 | CWE-754 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption
The -EBUS…
|
CVE-2026-31533 | 9.8 | CWE-416 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_conntrack_expect: use expect->helper
Use expect->helper in ctnetl…
|
CVE-2026-31414 | 9.8 | CWE-476 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
nfsd: fix heap overflow in NFSv4.0 LOCK replay cache
The NFSv4.0 replay cache u…
|
CVE-2026-31402 | 9.8 | CWE-787 | — | |
|
Windows
An issue in Time4 Popcorn for Windows <= 6.2.1.18 and Time4Popcorn for MacOS <= 6.2.1.17 and Time4Popcorn for Android <= 3.5.0.173 allows a remote at…
|
CVE-2026-30612 | 9.8 | CWE-494 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock()
Syzkaller repo…
|
CVE-2026-23450 | 9.8 | CWE-416 | — | |
|
Cisco IOS
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehen…
|
CVE-2026-20279 | 9.8 | CWE-284 | — | |
|
Cisco IOS
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehen…
|
CVE-2026-20274 | 9.8 | CWE-664 | — | |
|
Cisco IOS
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehen…
|
CVE-2026-20272 | 9.8 | CWE-74 | — | |
|
OpenSSL
The SAML Single Sign On – SSO Login plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 5.4.4. This is …
|
CVE-2026-15981 | 9.8 | CWE-287 | — | |
|
Ivanti
A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote unauthenticated attacker to execute arbitr…
|
CVE-2026-12745 | 9.8 | CWE-502 | — | |
|
Ivanti
A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote unauthenticated attacker to execute arbitr…
|
CVE-2026-12744 | 9.8 | CWE-502 | — | |
|
curl
Successfully using libcurl to do a transfer to a specific HTTP origin
(`hostA`) with **Digest** authentication and then changing the origin to a
diff…
|
CVE-2026-11856 | 9.8 | CWE-294 | — | |
|
Windows
Use after free in Microsoft Windows Search Component allows an unauthorized attacker to elevate privileges over a network.
|
CVE-2026-105010 | 9.8 | CWE-416 | — |