주요 제품 취약점 (3,477건)
Windows
infra
2105건
KEV 293 · 최근 2026-10-13
Linux 커널
infra
908건
KEV 31 · 최근 2026-10-28
Cisco IOS
infra
58건
KEV 44 · 최근 2026-07-13
Ivanti
infra
45건
KEV 36 · 최근 2026-10-13
Microsoft Exchange
infra
43건
KEV 20 · 최근 2026-05-15
Fortinet
infra
41건
KEV 22 · 최근 2026-10-16
Apache HTTP
infra
33건
KEV 11 · 최근 2026-08-24
Citrix NetScaler
infra
31건
KEV 16 · 최근 2026-10-04
Apache Tomcat
infra
30건
KEV 8 · 최근 2026-08-04
OpenSSH
infra
30건
KEV 3 · 최근 2025-10-02
PostgreSQL
finance
28건
KEV 2 · 최근 2026-09-02
Node.js
infra
24건
KEV 2 · 최근 2025-01-14
nginx
infra
16건
KEV 0
Palo Alto PAN-OS
infra
15건
KEV 14 · 최근 2026-10-14
VMware vCenter
infra
13건
KEV 12 · 최근 2026-08-18
Atlassian Confluence
infra
10건
KEV 10 · 최근 2026-10-15
MySQL/MariaDB
finance
10건
KEV 2 · 최근 2024-11-07
Redis
infra
9건
KEV 3 · 최근 2026-05-26
curl
infra
8건
KEV 1 · 최근 2023-05-12
OpenSSL
infra
8건
KEV 1 · 최근 2022-05-04
VMware ESXi
infra
7건
KEV 7 · 최근 2025-03-04
wolfSSL
finance
3건
KEV 0
Apache Spark
finance
1건
KEV 1 · 최근 2023-03-07
Spring Framework
finance
1건
KEV 1 · 최근 2022-04-04
| 기술 | CVE | 심각도 | 유형 | KEV | 등재일 |
|---|---|---|---|---|---|
|
Windows
An improper access control vulnerability in TeamViewer Full Client, Host, and related affected modules on Windows, Linux, and macOS allows an authent…
|
CVE-2026-92370 | 8.8 | CWE-284 | — | |
|
Windows
Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.
|
CVE-2026-88159 | 8.8 | CWE-125 | — | |
|
OpenSSH
Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
|
CVE-2026-88157 | 8.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
|
CVE-2026-88157 | 8.8 | CWE-122 | — | |
|
Windows
Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.
|
CVE-2026-88142 | 8.8 | CWE-122 | — | |
|
Windows
Out-of-bounds read in Windows Server for NFS allows an unauthorized attacker to execute code over a network.
|
CVE-2026-88115 | 8.8 | CWE-125 | — | |
|
Windows
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
|
CVE-2026-88073 | 8.8 | CWE-416 | — | |
|
Windows
Double free in Windows Shell allows an unauthorized attacker to execute code over a network.
|
CVE-2026-85936 | 8.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.
|
CVE-2026-85931 | 8.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows UI Immersive Server allows an authorized attacker to elevate privileges locally.
|
CVE-2026-85905 | 8.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows Print Spooler Components allows an unauthorized attacker to execute code over a network.
|
CVE-2026-85877 | 8.8 | CWE-122 | — | |
|
Windows
Reliance on untrusted inputs in a security decision in Windows PowerShell allows an unauthorized attacker to execute code over a network.
|
CVE-2026-85817 | 8.8 | CWE-807 | — | |
|
Windows
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
|
CVE-2026-85339 | 8.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
|
CVE-2026-83996 | 8.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
|
CVE-2026-83992 | 8.8 | CWE-122 | — | |
|
Windows
Stack-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network.
|
CVE-2026-83934 | 8.8 | CWE-121 | — | |
|
Windows
Out-of-bounds write in Windows GDI allows an unauthorized attacker to execute code over a network.
|
CVE-2026-83929 | 8.8 | CWE-787 | — | |
|
Windows
Out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to execute code over a network.
|
CVE-2026-83928 | 8.8 | CWE-306 | — | |
|
OpenSSH
Relative path traversal in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
|
CVE-2026-83923 | 8.8 | CWE-23 | — | |
|
Windows
Relative path traversal in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
|
CVE-2026-83923 | 8.8 | CWE-23 | — | |
|
Windows
Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code over a network.
|
CVE-2026-83874 | 8.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows Partition Management Driver allows an unauthorized attacker to elevate privileges over a network.
|
CVE-2026-83851 | 8.8 | CWE-122 | — | |
|
Windows
Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network.
|
CVE-2026-83797 | 8.8 | CWE-125 | — | |
|
Windows
Heap-based buffer overflow in Windows SMB Client allows an unauthorized attacker to elevate privileges over a network.
|
CVE-2026-83789 | 8.8 | CWE-122 | — | |
|
Windows
Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-83784 | 8.8 | CWE-36 | — | |
|
Windows
Heap-based buffer overflow in Windows Bluetooth Service allows an unauthorized attacker to elevate privileges over an adjacent network.
|
CVE-2026-83777 | 8.8 | CWE-122 | — | |
|
Windows
Use after free in Windows Camera Frame Server Monitor allows an unauthorized attacker to elevate privileges over an adjacent network.
|
CVE-2026-83771 | 8.8 | CWE-416 | — | |
|
Windows
Improper control of generation of code ('code injection') in Windows Encrypting File System (EFS) allows an authorized attacker to execute code over …
|
CVE-2026-83759 | 8.8 | CWE-94 | — | |
|
Windows
Improper validation of syntactic correctness of input in Windows Hyper-V allows an authorized attacker to perform spoofing locally.
|
CVE-2026-83728 | 8.8 | CWE-1286 | — | |
|
Windows
Heap-based buffer overflow in Microsoft Windows Search Component allows an unauthorized attacker to execute code over a network.
|
CVE-2026-83725 | 8.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.
|
CVE-2026-83716 | 8.8 | CWE-122 | — | |
|
Windows
Stack-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
|
CVE-2026-83643 | 8.8 | CWE-121 | — | |
|
Windows
When password or public key authentication is used with the Windows port of wolfSSHd, the Windows logon token acquired for one authenticated connecti…
|
CVE-2026-83540 | 8.8 | CWE-287 | — | |
|
Windows
Heap-based buffer overflow in Windows Image Acquisition allows an unauthorized attacker to execute code over a network.
|
CVE-2026-83523 | 8.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network.
|
CVE-2026-81352 | 8.8 | CWE-122 | — | |
|
Windows
Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-80096 | 8.8 | CWE-125 | — | |
|
Windows
Untrusted pointer dereference in Windows Hyper-V allows an authorized attacker to execute code locally.
|
CVE-2026-80083 | 8.8 | CWE-822 | — | |
|
Windows
Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to execute code over a network.
|
CVE-2026-78442 | 8.8 | CWE-122 | — | |
|
MySQL/MariaDB
Coze Studio before 0.5.0 contains an insecure default configuration that allows any registered user to execute commands by running workflow code node…
|
CVE-2026-77934 | 8.8 | CWE-1188 | — | |
|
Redis
Coze Studio before 0.5.0 contains an insecure default configuration that allows any registered user to execute commands by running workflow code node…
|
CVE-2026-77934 | 8.8 | CWE-1188 | — | |
|
Microsoft Exchange
Incorrect authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-77910 | 8.8 | CWE-863 | — | |
|
Windows
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
|
CVE-2026-77496 | 8.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
|
CVE-2026-77495 | 8.8 | CWE-122 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
vhost: reset the vring metadata cache on vring reconfiguration
vq->meta_iotlb[]…
|
CVE-2026-74580 | 8.8 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
sctp: prevent peer transport count overflow
sctp_assoc_add_peer() increments th…
|
CVE-2026-74469 | 8.8 | — | — | |
|
Windows
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
|
CVE-2026-73023 | 8.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
|
CVE-2026-73013 | 8.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows Management Services allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-73012 | 8.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.
|
CVE-2026-72960 | 8.8 | CWE-122 | — | |
|
Windows
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
|
CVE-2026-72959 | 8.8 | CWE-122 | — | |
|
Windows
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
|
CVE-2026-72950 | 8.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows Schannel allows an unauthorized attacker to execute code over a network.
|
CVE-2026-72940 | 8.8 | CWE-122 | — | |
|
Windows
Integer underflow (wrap or wraparound) in Windows Remote Access Connection Manager allows an authorized attacker to execute code over a network.
|
CVE-2026-71352 | 8.8 | CWE-191 | — | |
|
Windows
Integer overflow or wraparound in Windows Work Folder Service allows an authorized attacker to execute code over a network.
|
CVE-2026-71336 | 8.8 | CWE-190 | — | |
|
Windows
Heap-based buffer overflow in Windows Paint allows an unauthorized attacker to execute code over a network.
|
CVE-2026-70586 | 8.8 | CWE-122 | — | |
|
Windows
Missing authentication for critical function in Windows Credential Guard allows an authorized attacker to perform spoofing locally.
|
CVE-2026-70580 | 8.8 | CWE-306 | — | |
|
Windows
Improper access control in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
|
CVE-2026-70299 | 8.8 | CWE-863 | — | |
|
Windows
Untrusted pointer dereference in Windows CD-ROM Driver allows an unauthorized attacker to execute code over a network.
|
CVE-2026-70275 | 8.8 | CWE-822 | — | |
|
Windows
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
|
CVE-2026-70258 | 8.8 | CWE-122 | — | |
|
Windows
Use after free in Windows DHCP Client allows an unauthorized attacker to execute code over an adjacent network.
|
CVE-2026-70250 | 8.8 | CWE-362 | — |