주요 제품 취약점 (3,434건)
Windows
infra
2105건
KEV 293 · 최근 2026-10-13
Linux 커널
infra
908건
KEV 31 · 최근 2026-10-28
Cisco IOS
infra
58건
KEV 44 · 최근 2026-07-13
Ivanti
infra
45건
KEV 36 · 최근 2026-10-13
Microsoft Exchange
infra
43건
KEV 20 · 최근 2026-05-15
Fortinet
infra
41건
KEV 22 · 최근 2026-10-16
Apache HTTP
infra
33건
KEV 11 · 최근 2026-08-24
Citrix NetScaler
infra
31건
KEV 16 · 최근 2026-10-04
Apache Tomcat
infra
30건
KEV 8 · 최근 2026-08-04
OpenSSH
infra
30건
KEV 3 · 최근 2025-10-02
Node.js
infra
24건
KEV 2 · 최근 2025-01-14
nginx
infra
16건
KEV 0
Palo Alto PAN-OS
infra
15건
KEV 14 · 최근 2026-10-14
VMware vCenter
infra
13건
KEV 12 · 최근 2026-08-18
Atlassian Confluence
infra
10건
KEV 10 · 최근 2026-10-15
Redis
infra
9건
KEV 3 · 최근 2026-05-26
curl
infra
8건
KEV 1 · 최근 2023-05-12
OpenSSL
infra
8건
KEV 1 · 최근 2022-05-04
VMware ESXi
infra
7건
KEV 7 · 최근 2025-03-04
| 기술 | CVE | 심각도 | 유형 | KEV | 등재일 |
|---|---|---|---|---|---|
|
Redis
RedisTimeSeries is a time-series module for Redis. In all versions before 1.12.14 of RedisTimeSeries, the module does not properly validate serialize…
|
CVE-2026-25588 | 8.8 | CWE-122 | — | |
|
Redis
Redis is an in-memory data structure store. In versions of redis-server up to 8.6.3, the RESTORE command does not properly validate serialized values…
|
CVE-2026-25243 | 8.8 | CWE-122 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ
Currently the cod…
|
CVE-2026-23395 | 8.8 | CWE-20 | — | |
|
Cisco IOS
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comp…
|
CVE-2026-20280 | 8.8 | CWE-703 | — | |
|
Cisco IOS
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehen…
|
CVE-2026-20278 | 8.8 | CWE-707 | — | |
|
Cisco IOS
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehen…
|
CVE-2026-20275 | 8.8 | CWE-682 | — | |
|
Ivanti
Missing authorization in Ivanti Endpoint Manager Mobile before version 12.10.0.0, 12.9.0.2, and 12.8.0.4 allows a remote authenticated attacker to es…
|
CVE-2026-18851 | 8.8 | CWE-862 | — | |
|
Windows
Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
|
CVE-2026-108471 | 8.8 | CWE-822 | — | |
|
Windows
Improper resolution of path equivalence in Windows SmartScreen allows an unauthorized attacker to bypass a security feature over a network.
|
CVE-2026-108463 | 8.8 | CWE-41 | — | |
|
Windows
Integer overflow or wraparound in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network.
|
CVE-2026-108400 | 8.8 | CWE-190 | — | |
|
Windows
Improper access control in Windows Hyper-V allows an authorized attacker to execute code locally.
|
CVE-2026-105733 | 8.8 | — | — | |
|
Windows
Out-of-bounds read in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
|
CVE-2026-102225 | 8.8 | CWE-125 | — | |
|
Windows
Use after free in Windows Hyper-V allows an authorized attacker to execute code locally.
|
CVE-2026-102214 | 8.8 | CWE-416 | — | |
|
Windows
Heap-based buffer overflow in Windows Media Video Decoder allows an unauthorized attacker to execute code over a network.
|
CVE-2026-100220 | 8.8 | CWE-122 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
net: hns3: add VLAN id validation before using
Currently, the VLAN id may be us…
|
CVE-2025-71112 | 8.8 | CWE-125 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path"
…
|
CVE-2025-68818 | 8.8 | CWE-476 | — | |
|
Fortinet
A out-of-bounds write vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11 allows attacke…
|
CVE-2025-53844 | 8.8 | CWE-787 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
net: rose: include node references in rose_neigh refcount
Current implementatio…
|
CVE-2025-39827 | 8.8 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
net: rose: convert 'use' field to refcount_t
The 'use' field in struct rose_nei…
|
CVE-2025-39826 | 8.8 | CWE-416 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
NFC: nci: Add bounds checking in nci_hci_create_pipe()
The "pipe" variable is a…
|
CVE-2025-21735 | 8.8 | CWE-787 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
wifi: iwlwifi: read txq->read_ptr under lock
If we read txq->read_ptr without l…
|
CVE-2024-36922 | 8.8 | — | — | |
|
Citrix NetScaler
Authenticated privilege escalation in NetScaler Console and NetScaler Agent allows.
|
CVE-2024-12284 | 8.8 | CWE-269 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: require 3 sub-authorities before reading sub_auth[2]
parse_dacl() compar…
|
CVE-2026-31611 | 8.6 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp()…
|
CVE-2026-23457 | 8.6 | CWE-190 | — | |
|
Cisco IOS
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehen…
|
CVE-2026-20276 | 8.6 | CWE-691 | — | |
|
Cisco IOS
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehen…
|
CVE-2026-20273 | 8.6 | CWE-20 | — | |
|
Cisco IOS
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehen…
|
CVE-2026-20271 | 8.6 | CWE-691 | — | |
|
Cisco IOS
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehen…
|
CVE-2026-20270 | 8.6 | CWE-682 | — | |
|
Cisco IOS
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehen…
|
CVE-2026-20269 | 8.6 | CWE-664 | — | |
|
Cisco IOS
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehen…
|
CVE-2026-20268 | 8.6 | CWE-119 | — | |
|
Windows
Improper privilege management in Windows Internet (wininet.dll) allows an authorized attacker to perform spoofing locally.
|
CVE-2026-83845 | 8.4 | CWE-290 | — | |
|
Windows
Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally.
|
CVE-2026-77503 | 8.4 | CWE-125 | — | |
|
Windows
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
|
CVE-2026-69638 | 8.4 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
|
CVE-2026-69479 | 8.4 | CWE-122 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
virtio-net: fix len check in receive_big()
receive_big() bounds the device-anno…
|
CVE-2026-64552 | 8.4 | CWE-787 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all()
There's issue as …
|
CVE-2025-22121 | 8.4 | CWE-125 | — | |
|
Windows
Buffer overflow in GPU in Google Chrome on on Windows prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to ex…
|
CVE-2026-84351 | 8.3 | CWE-121 | — | |
|
Windows
Out of bounds write in Crashpad in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer proc…
|
CVE-2026-78952 | 8.3 | CWE-787 | — | |
|
Node.js
A vulnerability has been identified in Industrial Edge App Publisher (All versions < V1.27.9). The application fails to properly sanitize or escape d…
|
CVE-2026-78557 | 8.3 | CWE-79 | — | |
|
Windows
Origin validation error in Windows Network Address Translation (NAT) allows an unauthorized attacker to perform spoofing over an adjacent network.
|
CVE-2026-56179 | 8.3 | CWE-346 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
wifi: ath5k: do not access array OOB
Vincent reports:
> The ath5k driver seems …
|
CVE-2026-46307 | 8.3 | CWE-125 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: require minimum ACE size in smb_check_perm_dacl()
Both ACE-walk loops in…
|
CVE-2026-31712 | 8.3 | CWE-787 | — | |
|
OpenSSL
MatchTrustedPeer ignores the public key used, leading to forged CA clones passing verification. Affected builds are any that enable the macro WOLFSSL…
|
CVE-2026-93302 | 8.2 | CWE-295 | — | |
|
Apache HTTP
MatchTrustedPeer ignores the public key used, leading to forged CA clones passing verification. Affected builds are any that enable the macro WOLFSSL…
|
CVE-2026-93302 | 8.2 | CWE-295 | — | |
|
nginx
MatchTrustedPeer ignores the public key used, leading to forged CA clones passing verification. Affected builds are any that enable the macro WOLFSSL…
|
CVE-2026-93302 | 8.2 | CWE-295 | — | |
|
Windows
Double free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
|
CVE-2026-85921 | 8.2 | CWE-415 | — | |
|
Windows
Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
|
CVE-2026-85369 | 8.2 | CWE-125 | — | |
|
Windows
Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
|
CVE-2026-83939 | 8.2 | CWE-822 | — | |
|
Windows
Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally.
|
CVE-2026-81354 | 8.2 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.
|
CVE-2026-72962 | 8.2 | CWE-122 | — | |
|
Windows
Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
|
CVE-2026-72961 | 8.2 | CWE-122 | — | |
|
Windows
Double free in Windows Credential Guard allows an authorized attacker to elevate privileges locally.
|
CVE-2026-72958 | 8.2 | CWE-415 | — | |
|
Windows
Heap-based buffer overflow in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69906 | 8.2 | CWE-122 | — | |
|
Windows
Untrusted pointer dereference in Windows ALPC allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69874 | 8.2 | CWE-822 | — | |
|
Windows
Integer overflow or wraparound in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69846 | 8.2 | CWE-190 | — | |
|
Windows
Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69820 | 8.2 | CWE-122 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
netfilter: conntrack_irc: fix possible out-of-bounds read
When parsing fails af…
|
CVE-2026-53268 | 8.2 | CWE-125 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
isofs: validate Rock Ridge CE continuation extent against volume size
rock_cont…
|
CVE-2026-46303 | 8.2 | CWE-401 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
ipv4: icmp: validate reply type before using icmp_pointers
Extended echo replie…
|
CVE-2026-46037 | 8.2 | CWE-125 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
slip: bound decode() reads against the compressed packet length
slhc_uncompress…
|
CVE-2026-45843 | 8.2 | CWE-126 | — |