주요 제품 취약점 (3,434건)
Windows
infra
2105건
KEV 293 · 최근 2026-10-13
Linux 커널
infra
908건
KEV 31 · 최근 2026-10-28
Cisco IOS
infra
58건
KEV 44 · 최근 2026-07-13
Ivanti
infra
45건
KEV 36 · 최근 2026-10-13
Microsoft Exchange
infra
43건
KEV 20 · 최근 2026-05-15
Fortinet
infra
41건
KEV 22 · 최근 2026-10-16
Apache HTTP
infra
33건
KEV 11 · 최근 2026-08-24
Citrix NetScaler
infra
31건
KEV 16 · 최근 2026-10-04
Apache Tomcat
infra
30건
KEV 8 · 최근 2026-08-04
OpenSSH
infra
30건
KEV 3 · 최근 2025-10-02
Node.js
infra
24건
KEV 2 · 최근 2025-01-14
nginx
infra
16건
KEV 0
Palo Alto PAN-OS
infra
15건
KEV 14 · 최근 2026-10-14
VMware vCenter
infra
13건
KEV 12 · 최근 2026-08-18
Atlassian Confluence
infra
10건
KEV 10 · 최근 2026-10-15
Redis
infra
9건
KEV 3 · 최근 2026-05-26
curl
infra
8건
KEV 1 · 최근 2023-05-12
OpenSSL
infra
8건
KEV 1 · 최근 2022-05-04
VMware ESXi
infra
7건
KEV 7 · 최근 2025-03-04
| 기술 | CVE | 심각도 | 유형 | KEV | 등재일 |
|---|---|---|---|---|---|
|
Windows
Heap-based buffer overflow in Windows UI Immersive Server allows an authorized attacker to elevate privileges locally.
|
CVE-2026-85905 | 8.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows Print Spooler Components allows an unauthorized attacker to execute code over a network.
|
CVE-2026-85877 | 8.8 | CWE-122 | — | |
|
Windows
Reliance on untrusted inputs in a security decision in Windows PowerShell allows an unauthorized attacker to execute code over a network.
|
CVE-2026-85817 | 8.8 | CWE-807 | — | |
|
Windows
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
|
CVE-2026-85339 | 8.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
|
CVE-2026-83996 | 8.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
|
CVE-2026-83992 | 8.8 | CWE-122 | — | |
|
Windows
Stack-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network.
|
CVE-2026-83934 | 8.8 | CWE-121 | — | |
|
Windows
Out-of-bounds write in Windows GDI allows an unauthorized attacker to execute code over a network.
|
CVE-2026-83929 | 8.8 | CWE-787 | — | |
|
Windows
Out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to execute code over a network.
|
CVE-2026-83928 | 8.8 | CWE-306 | — | |
|
OpenSSH
Relative path traversal in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
|
CVE-2026-83923 | 8.8 | CWE-23 | — | |
|
Windows
Relative path traversal in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
|
CVE-2026-83923 | 8.8 | CWE-23 | — | |
|
Windows
Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code over a network.
|
CVE-2026-83874 | 8.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows Partition Management Driver allows an unauthorized attacker to elevate privileges over a network.
|
CVE-2026-83851 | 8.8 | CWE-122 | — | |
|
Windows
Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network.
|
CVE-2026-83797 | 8.8 | CWE-125 | — | |
|
Windows
Heap-based buffer overflow in Windows SMB Client allows an unauthorized attacker to elevate privileges over a network.
|
CVE-2026-83789 | 8.8 | CWE-122 | — | |
|
Windows
Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-83784 | 8.8 | CWE-36 | — | |
|
Windows
Heap-based buffer overflow in Windows Bluetooth Service allows an unauthorized attacker to elevate privileges over an adjacent network.
|
CVE-2026-83777 | 8.8 | CWE-122 | — | |
|
Windows
Use after free in Windows Camera Frame Server Monitor allows an unauthorized attacker to elevate privileges over an adjacent network.
|
CVE-2026-83771 | 8.8 | CWE-416 | — | |
|
Windows
Improper control of generation of code ('code injection') in Windows Encrypting File System (EFS) allows an authorized attacker to execute code over …
|
CVE-2026-83759 | 8.8 | CWE-94 | — | |
|
Windows
Improper validation of syntactic correctness of input in Windows Hyper-V allows an authorized attacker to perform spoofing locally.
|
CVE-2026-83728 | 8.8 | CWE-1286 | — | |
|
Windows
Heap-based buffer overflow in Microsoft Windows Search Component allows an unauthorized attacker to execute code over a network.
|
CVE-2026-83725 | 8.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.
|
CVE-2026-83716 | 8.8 | CWE-122 | — | |
|
Windows
Stack-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
|
CVE-2026-83643 | 8.8 | CWE-121 | — | |
|
Windows
When password or public key authentication is used with the Windows port of wolfSSHd, the Windows logon token acquired for one authenticated connecti…
|
CVE-2026-83540 | 8.8 | CWE-287 | — | |
|
Windows
Heap-based buffer overflow in Windows Image Acquisition allows an unauthorized attacker to execute code over a network.
|
CVE-2026-83523 | 8.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network.
|
CVE-2026-81352 | 8.8 | CWE-122 | — | |
|
Windows
Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-80096 | 8.8 | CWE-125 | — | |
|
Windows
Untrusted pointer dereference in Windows Hyper-V allows an authorized attacker to execute code locally.
|
CVE-2026-80083 | 8.8 | CWE-822 | — | |
|
Windows
Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to execute code over a network.
|
CVE-2026-78442 | 8.8 | CWE-122 | — | |
|
Redis
Coze Studio before 0.5.0 contains an insecure default configuration that allows any registered user to execute commands by running workflow code node…
|
CVE-2026-77934 | 8.8 | CWE-1188 | — | |
|
Microsoft Exchange
Incorrect authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-77910 | 8.8 | CWE-863 | — | |
|
Windows
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
|
CVE-2026-77496 | 8.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
|
CVE-2026-77495 | 8.8 | CWE-122 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
vhost: reset the vring metadata cache on vring reconfiguration
vq->meta_iotlb[]…
|
CVE-2026-74580 | 8.8 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
sctp: prevent peer transport count overflow
sctp_assoc_add_peer() increments th…
|
CVE-2026-74469 | 8.8 | — | — | |
|
Windows
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
|
CVE-2026-73023 | 8.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
|
CVE-2026-73013 | 8.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows Management Services allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-73012 | 8.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.
|
CVE-2026-72960 | 8.8 | CWE-122 | — | |
|
Windows
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
|
CVE-2026-72959 | 8.8 | CWE-122 | — | |
|
Windows
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
|
CVE-2026-72950 | 8.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows Schannel allows an unauthorized attacker to execute code over a network.
|
CVE-2026-72940 | 8.8 | CWE-122 | — | |
|
Windows
Integer underflow (wrap or wraparound) in Windows Remote Access Connection Manager allows an authorized attacker to execute code over a network.
|
CVE-2026-71352 | 8.8 | CWE-191 | — | |
|
Windows
Integer overflow or wraparound in Windows Work Folder Service allows an authorized attacker to execute code over a network.
|
CVE-2026-71336 | 8.8 | CWE-190 | — | |
|
Windows
Heap-based buffer overflow in Windows Paint allows an unauthorized attacker to execute code over a network.
|
CVE-2026-70586 | 8.8 | CWE-122 | — | |
|
Windows
Missing authentication for critical function in Windows Credential Guard allows an authorized attacker to perform spoofing locally.
|
CVE-2026-70580 | 8.8 | CWE-306 | — | |
|
Windows
Improper access control in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
|
CVE-2026-70299 | 8.8 | CWE-863 | — | |
|
Windows
Untrusted pointer dereference in Windows CD-ROM Driver allows an unauthorized attacker to execute code over a network.
|
CVE-2026-70275 | 8.8 | CWE-822 | — | |
|
Windows
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
|
CVE-2026-70258 | 8.8 | CWE-122 | — | |
|
Windows
Use after free in Windows DHCP Client allows an unauthorized attacker to execute code over an adjacent network.
|
CVE-2026-70250 | 8.8 | CWE-362 | — | |
|
Windows
Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to elevate privileges over a network.
|
CVE-2026-70210 | 8.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.
|
CVE-2026-70203 | 8.8 | CWE-122 | — | |
|
Windows
Protection mechanism failure in Windows PowerShell allows an authorized attacker to bypass a security feature locally.
|
CVE-2026-70185 | 8.8 | CWE-639 | — | |
|
Windows
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
|
CVE-2026-70158 | 8.8 | CWE-415 | — | |
|
Windows
Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose …
|
CVE-2026-70149 | 8.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows GDI allows an unauthorized attacker to execute code over a network.
|
CVE-2026-70089 | 8.8 | CWE-122 | — | |
|
Windows
Stack-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network.
|
CVE-2026-70069 | 8.8 | CWE-121 | — | |
|
Windows
Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an unauthorized attacker to elevate privileges over a network.
|
CVE-2026-70068 | 8.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network.
|
CVE-2026-69985 | 8.8 | CWE-122 | — | |
|
Windows
Missing authorization in Windows AppX Deployment Extensions allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69945 | 8.8 | CWE-862 | — |