주요 제품 취약점 (3,477건)
Windows
infra
2105건
KEV 293 · 최근 2026-10-13
Linux 커널
infra
908건
KEV 31 · 최근 2026-10-28
Cisco IOS
infra
58건
KEV 44 · 최근 2026-07-13
Ivanti
infra
45건
KEV 36 · 최근 2026-10-13
Microsoft Exchange
infra
43건
KEV 20 · 최근 2026-05-15
Fortinet
infra
41건
KEV 22 · 최근 2026-10-16
Apache HTTP
infra
33건
KEV 11 · 최근 2026-08-24
Citrix NetScaler
infra
31건
KEV 16 · 최근 2026-10-04
Apache Tomcat
infra
30건
KEV 8 · 최근 2026-08-04
OpenSSH
infra
30건
KEV 3 · 최근 2025-10-02
PostgreSQL
finance
28건
KEV 2 · 최근 2026-09-02
Node.js
infra
24건
KEV 2 · 최근 2025-01-14
nginx
infra
16건
KEV 0
Palo Alto PAN-OS
infra
15건
KEV 14 · 최근 2026-10-14
VMware vCenter
infra
13건
KEV 12 · 최근 2026-08-18
Atlassian Confluence
infra
10건
KEV 10 · 최근 2026-10-15
MySQL/MariaDB
finance
10건
KEV 2 · 최근 2024-11-07
Redis
infra
9건
KEV 3 · 최근 2026-05-26
curl
infra
8건
KEV 1 · 최근 2023-05-12
OpenSSL
infra
8건
KEV 1 · 최근 2022-05-04
VMware ESXi
infra
7건
KEV 7 · 최근 2025-03-04
wolfSSL
finance
3건
KEV 0
Apache Spark
finance
1건
KEV 1 · 최근 2023-03-07
Spring Framework
finance
1건
KEV 1 · 최근 2022-04-04
| 기술 | CVE | 심각도 | 유형 | KEV | 등재일 |
|---|---|---|---|---|---|
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: serialize accept_q access
bt_sock_poll() walks the accept queue with…
|
CVE-2026-52918 | 8.8 | CWE-362 | — | |
|
Windows
Improper neutralization of special elements used in a command ('command injection') in Windows Active Directory allows an unauthorized attacker to ex…
|
CVE-2026-49179 | 8.8 | CWE-77 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache
…
|
CVE-2026-46174 | 8.8 | CWE-862 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
wifi: mac80211: remove station if connection prep fails
If connection preparati…
|
CVE-2026-46125 | 8.8 | CWE-416 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
KVM: x86: Fix shadow paging use-after-free due to unexpected GFN
The shadow MMU…
|
CVE-2026-46113 | 8.8 | CWE-416 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: hci_event: fix potential UAF in SSP passkey handlers
hci_conn lookup…
|
CVE-2026-46056 | 8.8 | CWE-416 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
net: skbuff: propagate shared-frag marker through frag-transfer helpers
Two fra…
|
CVE-2026-43503 | 8.8 | CWE-664 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
xfrm: esp: avoid in-place decrypt on shared skb frags
MSG_SPLICE_PAGES can atta…
|
CVE-2026-43284 | 8.8 | CWE-123 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath
When cifs_saniti…
|
CVE-2026-43112 | 8.8 | CWE-125 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
wifi: brcmfmac: validate bsscfg indices in IF events
brcmf_fweh_handle_if_event…
|
CVE-2026-43110 | 8.8 | CWE-129 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
smb: client: validate the whole DACL before rewriting it in cifsacl
build_sec_d…
|
CVE-2026-31709 | 8.8 | CWE-125 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
nfc: llcp: add missing return after LLCP_CLOSED checks
In nfc_llcp_recv_hdlc() …
|
CVE-2026-31629 | 8.8 | CWE-667 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
NFC: digital: Bounds check NFC-A cascade depth in SDD response handler
The NFC-…
|
CVE-2026-31622 | 8.8 | CWE-120 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
ext4: publish jinode after initialization
ext4_inode_attach_jinode() publishes …
|
CVE-2026-31450 | 8.8 | CWE-476 | — | |
|
Redis
RedisTimeSeries is a time-series module for Redis. In all versions before 1.12.14 of RedisTimeSeries, the module does not properly validate serialize…
|
CVE-2026-25588 | 8.8 | CWE-122 | — | |
|
Redis
Redis is an in-memory data structure store. In versions of redis-server up to 8.6.3, the RESTORE command does not properly validate serialized values…
|
CVE-2026-25243 | 8.8 | CWE-122 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ
Currently the cod…
|
CVE-2026-23395 | 8.8 | CWE-20 | — | |
|
Cisco IOS
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comp…
|
CVE-2026-20280 | 8.8 | CWE-703 | — | |
|
Cisco IOS
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehen…
|
CVE-2026-20278 | 8.8 | CWE-707 | — | |
|
Cisco IOS
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehen…
|
CVE-2026-20275 | 8.8 | CWE-682 | — | |
|
PostgreSQL
Heap buffer overflow in PostgreSQL pg_dump of long function transform lists allows an object creator to execute arbitrary code as the operating syste…
|
CVE-2026-19385 | 8.8 | CWE-122 | — | |
|
Ivanti
Missing authorization in Ivanti Endpoint Manager Mobile before version 12.10.0.0, 12.9.0.2, and 12.8.0.4 allows a remote authenticated attacker to es…
|
CVE-2026-18851 | 8.8 | CWE-862 | — | |
|
PostgreSQL
Untrusted data inclusion in pg_dump in PostgreSQL allows a malicious superuser of the origin server to inject arbitrary code for restore-time executi…
|
CVE-2026-18408 | 8.8 | CWE-829 | — | |
|
PostgreSQL
Type confusion in PostgreSQL "portal"/cursor lifecycle allows a user to execute arbitrary code as the operating system user running the database, via…
|
CVE-2026-16239 | 8.8 | CWE-843 | — | |
|
PostgreSQL
Type confusion in PostgreSQL pg_restore_attribute_stats() allows an object creator to execute arbitrary code as the operating system user running the…
|
CVE-2026-16238 | 8.8 | CWE-843 | — | |
|
PostgreSQL
Integer wraparound in PostgreSQL fuzzystrmatch allows a user to direct writes to a huge range of addresses, executing arbitrary code as the operating…
|
CVE-2026-15742 | 8.8 | CWE-190 | — | |
|
PostgreSQL
SQL injection in PostgreSQL EXTRACT() deparse allows an object owner to execute arbitrary SQL as a superuser via a hostile object definition. Attack…
|
CVE-2026-15741 | 8.8 | CWE-89 | — | |
|
PostgreSQL
Type confusion with PostgreSQL "internal" data type arguments allows any user to execute arbitrary code as the operating system user running the data…
|
CVE-2026-14680 | 8.8 | CWE-843 | — | |
|
PostgreSQL
Integer wraparound in PostgreSQL 32-bit builds of pltcl and plperl allows an object creator to cause the server to undersize an allocation and write …
|
CVE-2026-14677 | 8.8 | CWE-190 | — | |
|
PostgreSQL
Heap buffer overflow in PostgreSQL pg_stat_statements allows the query author to execute arbitrary code as the operating system user running the data…
|
CVE-2026-14676 | 8.8 | CWE-122 | — | |
|
PostgreSQL
Type confusion in PostgreSQL module "refint" allows an object creator to execute arbitrary code as the operating system user running the database. T…
|
CVE-2026-14671 | 8.8 | CWE-843 | — | |
|
PostgreSQL
Heap buffer overflow in PostgreSQL plperl return of a tied hash allows the function owner to execute arbitrary code as the operating system user runn…
|
CVE-2026-14670 | 8.8 | CWE-122 | — | |
|
PostgreSQL
Heap buffer overflow in PostgreSQL to_char(timestamptz) allows the party choosing the timezone to execute arbitrary code as the operating system user…
|
CVE-2026-14669 | 8.8 | CWE-122 | — | |
|
PostgreSQL
Heap buffer overflow in PostgreSQL regexp allows the query author to execute arbitrary code as the operating system user running the database, via te…
|
CVE-2026-14664 | 8.8 | CWE-122 | — | |
|
PostgreSQL
Integer wraparound in PostgreSQL tsvector and tsquery data type functions allows an unprivileged database user to cause the server to undersize an al…
|
CVE-2026-14662 | 8.8 | CWE-190 | — | |
|
Windows
Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
|
CVE-2026-108471 | 8.8 | CWE-822 | — | |
|
Windows
Improper resolution of path equivalence in Windows SmartScreen allows an unauthorized attacker to bypass a security feature over a network.
|
CVE-2026-108463 | 8.8 | CWE-41 | — | |
|
Windows
Integer overflow or wraparound in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network.
|
CVE-2026-108400 | 8.8 | CWE-190 | — | |
|
Windows
Improper access control in Windows Hyper-V allows an authorized attacker to execute code locally.
|
CVE-2026-105733 | 8.8 | — | — | |
|
Windows
Out-of-bounds read in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
|
CVE-2026-102225 | 8.8 | CWE-125 | — | |
|
Windows
Use after free in Windows Hyper-V allows an authorized attacker to execute code locally.
|
CVE-2026-102214 | 8.8 | CWE-416 | — | |
|
Windows
Heap-based buffer overflow in Windows Media Video Decoder allows an unauthorized attacker to execute code over a network.
|
CVE-2026-100220 | 8.8 | CWE-122 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
net: hns3: add VLAN id validation before using
Currently, the VLAN id may be us…
|
CVE-2025-71112 | 8.8 | CWE-125 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path"
…
|
CVE-2025-68818 | 8.8 | CWE-476 | — | |
|
Fortinet
A out-of-bounds write vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11 allows attacke…
|
CVE-2025-53844 | 8.8 | CWE-787 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
net: rose: include node references in rose_neigh refcount
Current implementatio…
|
CVE-2025-39827 | 8.8 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
net: rose: convert 'use' field to refcount_t
The 'use' field in struct rose_nei…
|
CVE-2025-39826 | 8.8 | CWE-416 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
NFC: nci: Add bounds checking in nci_hci_create_pipe()
The "pipe" variable is a…
|
CVE-2025-21735 | 8.8 | CWE-787 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
wifi: iwlwifi: read txq->read_ptr under lock
If we read txq->read_ptr without l…
|
CVE-2024-36922 | 8.8 | — | — | |
|
Citrix NetScaler
Authenticated privilege escalation in NetScaler Console and NetScaler Agent allows.
|
CVE-2024-12284 | 8.8 | CWE-269 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: require 3 sub-authorities before reading sub_auth[2]
parse_dacl() compar…
|
CVE-2026-31611 | 8.6 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp()…
|
CVE-2026-23457 | 8.6 | CWE-190 | — | |
|
Cisco IOS
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehen…
|
CVE-2026-20276 | 8.6 | CWE-691 | — | |
|
Cisco IOS
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehen…
|
CVE-2026-20273 | 8.6 | CWE-20 | — | |
|
Cisco IOS
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehen…
|
CVE-2026-20271 | 8.6 | CWE-691 | — | |
|
Cisco IOS
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehen…
|
CVE-2026-20270 | 8.6 | CWE-682 | — | |
|
Cisco IOS
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehen…
|
CVE-2026-20269 | 8.6 | CWE-664 | — | |
|
Cisco IOS
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehen…
|
CVE-2026-20268 | 8.6 | CWE-119 | — | |
|
MySQL/MariaDB
MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the CONNECT e…
|
CVE-2026-107815 | 8.5 | CWE-787 | — | |
|
Windows
Improper privilege management in Windows Internet (wininet.dll) allows an authorized attacker to perform spoofing locally.
|
CVE-2026-83845 | 8.4 | CWE-290 | — |