주요 제품 취약점 (3,434건)
Windows
infra
2105건
KEV 293 · 최근 2026-10-13
Linux 커널
infra
908건
KEV 31 · 최근 2026-10-28
Cisco IOS
infra
58건
KEV 44 · 최근 2026-07-13
Ivanti
infra
45건
KEV 36 · 최근 2026-10-13
Microsoft Exchange
infra
43건
KEV 20 · 최근 2026-05-15
Fortinet
infra
41건
KEV 22 · 최근 2026-10-16
Apache HTTP
infra
33건
KEV 11 · 최근 2026-08-24
Citrix NetScaler
infra
31건
KEV 16 · 최근 2026-10-04
Apache Tomcat
infra
30건
KEV 8 · 최근 2026-08-04
OpenSSH
infra
30건
KEV 3 · 최근 2025-10-02
Node.js
infra
24건
KEV 2 · 최근 2025-01-14
nginx
infra
16건
KEV 0
Palo Alto PAN-OS
infra
15건
KEV 14 · 최근 2026-10-14
VMware vCenter
infra
13건
KEV 12 · 최근 2026-08-18
Atlassian Confluence
infra
10건
KEV 10 · 최근 2026-10-15
Redis
infra
9건
KEV 3 · 최근 2026-05-26
curl
infra
8건
KEV 1 · 최근 2023-05-12
OpenSSL
infra
8건
KEV 1 · 최근 2022-05-04
VMware ESXi
infra
7건
KEV 7 · 최근 2025-03-04
| 기술 | CVE | 심각도 | 유형 | KEV | 등재일 |
|---|---|---|---|---|---|
|
Windows
Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69918 | 8.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
|
CVE-2026-69860 | 8.8 | CWE-122 | — | |
|
Windows
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69784 | 8.8 | CWE-416 | — | |
|
Windows
Heap-based buffer overflow in Windows Network File System allows an unauthorized attacker to execute code over a network.
|
CVE-2026-69772 | 8.8 | CWE-122 | — | |
|
Windows
Use after free in Windows Storport Miniport Driver allows an unauthorized attacker to execute code over a network.
|
CVE-2026-69765 | 8.8 | CWE-416 | — | |
|
Windows
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69740 | 8.8 | CWE-416 | — | |
|
Windows
Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to execute code over a network.
|
CVE-2026-69729 | 8.8 | CWE-122 | — | |
|
Windows
Use after free in Windows Key Distribution Center allows an authorized attacker to execute code over a network.
|
CVE-2026-69712 | 8.8 | CWE-416 | — | |
|
Windows
Authentication bypass by capture-replay in Windows Kerberos allows an authorized attacker to execute code over a network.
|
CVE-2026-69676 | 8.8 | CWE-294 | — | |
|
Windows
Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to execute code over a network.
|
CVE-2026-69669 | 8.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network.
|
CVE-2026-69649 | 8.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows iSCSI allows an authorized attacker to execute code over a network.
|
CVE-2026-69628 | 8.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.
|
CVE-2026-69603 | 8.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
|
CVE-2026-69601 | 8.8 | CWE-122 | — | |
|
Windows
Incorrect calculation of buffer size in Windows iSCSI allows an unauthorized attacker to execute code over a network.
|
CVE-2026-69598 | 8.8 | CWE-131 | — | |
|
Windows
Use after free in Windows DNS allows an authorized attacker to execute code over a network.
|
CVE-2026-69551 | 8.8 | CWE-416 | — | |
|
Windows
Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network.
|
CVE-2026-69547 | 8.8 | CWE-122 | — | |
|
Windows
Integer overflow or wraparound in Windows iSCSI allows an unauthorized attacker to execute code over a network.
|
CVE-2026-69521 | 8.8 | CWE-190 | — | |
|
Windows
Heap-based buffer overflow in Windows Remote Desktop allows an unauthorized attacker to execute code over a network.
|
CVE-2026-69518 | 8.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
|
CVE-2026-69511 | 8.8 | CWE-122 | — | |
|
Windows
Integer overflow or wraparound in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
|
CVE-2026-69499 | 8.8 | CWE-190 | — | |
|
Windows
Heap-based buffer overflow in Windows Event Logging Service allows an unauthorized attacker to execute code over a network.
|
CVE-2026-69495 | 8.8 | CWE-122 | — | |
|
Windows
Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network.
|
CVE-2026-69494 | 8.8 | CWE-122 | — | |
|
Windows
Stack-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code over a network.
|
CVE-2026-69461 | 8.8 | CWE-121 | — | |
|
Windows
Heap-based buffer overflow in Windows URL Moniker allows an unauthorized attacker to execute code over a network.
|
CVE-2026-69434 | 8.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
|
CVE-2026-69386 | 8.8 | CWE-122 | — | |
|
Microsoft Exchange
External control of file name or path in Microsoft Exchange Server allows an authorized attacker to execute code over a network.
|
CVE-2026-69355 | 8.8 | CWE-73 | — | |
|
Windows
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network.
|
CVE-2026-69334 | 8.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network.
|
CVE-2026-69291 | 8.8 | CWE-122 | — | |
|
Windows
Integer overflow or wraparound in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
|
CVE-2026-69266 | 8.8 | CWE-190 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
KVM: x86: Check for invalid/obsolete root *after* making MMU pages available
Ch…
|
CVE-2026-64561 | 8.8 | — | — | |
|
Windows
Cursor for Windows version 3.2.16 contains a binary planting vulnerability that allows remote attackers to achieve arbitrary code execution by placin…
|
CVE-2026-63093 | 8.8 | CWE-426 | — | |
|
Microsoft Exchange
Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute code over a network.
|
CVE-2026-62913 | 8.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over an adjacent network.
|
CVE-2026-62823 | 8.8 | CWE-122 | — | |
|
Windows
Integer overflow or wraparound in Windows GDI+ allows an unauthorized attacker to execute code over a network.
|
CVE-2026-62822 | 8.8 | CWE-122 | — | |
|
Windows
Out-of-bounds write in Windows DNS allows an unauthorized attacker to execute code over an adjacent network.
|
CVE-2026-62817 | 8.8 | CWE-787 | — | |
|
Windows
Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network.
|
CVE-2026-62800 | 8.8 | CWE-122 | — | |
|
Windows
Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.
|
CVE-2026-62795 | 8.8 | CWE-416 | — | |
|
Windows
Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network.
|
CVE-2026-62790 | 8.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.
|
CVE-2026-62785 | 8.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
|
CVE-2026-62744 | 8.8 | CWE-122 | — | |
|
Windows
Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
|
CVE-2026-62706 | 8.8 | CWE-121 | — | |
|
Windows
A remotely exploitable buffer overflow bug can cause a local and kernel denial-of-service attack on affected versions of Zscaler Client Connector on …
|
CVE-2026-59565 | 8.8 | CWE-229 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen()
l2cap_ch…
|
CVE-2026-53358 | 8.8 | CWE-667 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
ipv6: mcast: Fix use-after-free when processing MLD queries
When processing an …
|
CVE-2026-53275 | 8.8 | CWE-416 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix use-after-free of a deferred file_lock on double SMB2_CANCEL
A defer…
|
CVE-2026-53198 | 8.8 | CWE-416 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: serialize accept_q access
bt_sock_poll() walks the accept queue with…
|
CVE-2026-52918 | 8.8 | CWE-362 | — | |
|
Windows
Improper neutralization of special elements used in a command ('command injection') in Windows Active Directory allows an unauthorized attacker to ex…
|
CVE-2026-49179 | 8.8 | CWE-77 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache
…
|
CVE-2026-46174 | 8.8 | CWE-862 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
wifi: mac80211: remove station if connection prep fails
If connection preparati…
|
CVE-2026-46125 | 8.8 | CWE-416 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
KVM: x86: Fix shadow paging use-after-free due to unexpected GFN
The shadow MMU…
|
CVE-2026-46113 | 8.8 | CWE-416 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: hci_event: fix potential UAF in SSP passkey handlers
hci_conn lookup…
|
CVE-2026-46056 | 8.8 | CWE-416 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
net: skbuff: propagate shared-frag marker through frag-transfer helpers
Two fra…
|
CVE-2026-43503 | 8.8 | CWE-664 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
xfrm: esp: avoid in-place decrypt on shared skb frags
MSG_SPLICE_PAGES can atta…
|
CVE-2026-43284 | 8.8 | CWE-123 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath
When cifs_saniti…
|
CVE-2026-43112 | 8.8 | CWE-125 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
wifi: brcmfmac: validate bsscfg indices in IF events
brcmf_fweh_handle_if_event…
|
CVE-2026-43110 | 8.8 | CWE-129 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
smb: client: validate the whole DACL before rewriting it in cifsacl
build_sec_d…
|
CVE-2026-31709 | 8.8 | CWE-125 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
nfc: llcp: add missing return after LLCP_CLOSED checks
In nfc_llcp_recv_hdlc() …
|
CVE-2026-31629 | 8.8 | CWE-667 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
NFC: digital: Bounds check NFC-A cascade depth in SDD response handler
The NFC-…
|
CVE-2026-31622 | 8.8 | CWE-120 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
ext4: publish jinode after initialization
ext4_inode_attach_jinode() publishes …
|
CVE-2026-31450 | 8.8 | CWE-476 | — |