주요 제품 취약점 (3,477건)
Windows
infra
2105건
KEV 293 · 최근 2026-10-13
Linux 커널
infra
908건
KEV 31 · 최근 2026-10-28
Cisco IOS
infra
58건
KEV 44 · 최근 2026-07-13
Ivanti
infra
45건
KEV 36 · 최근 2026-10-13
Microsoft Exchange
infra
43건
KEV 20 · 최근 2026-05-15
Fortinet
infra
41건
KEV 22 · 최근 2026-10-16
Apache HTTP
infra
33건
KEV 11 · 최근 2026-08-24
Citrix NetScaler
infra
31건
KEV 16 · 최근 2026-10-04
Apache Tomcat
infra
30건
KEV 8 · 최근 2026-08-04
OpenSSH
infra
30건
KEV 3 · 최근 2025-10-02
PostgreSQL
finance
28건
KEV 2 · 최근 2026-09-02
Node.js
infra
24건
KEV 2 · 최근 2025-01-14
nginx
infra
16건
KEV 0
Palo Alto PAN-OS
infra
15건
KEV 14 · 최근 2026-10-14
VMware vCenter
infra
13건
KEV 12 · 최근 2026-08-18
Atlassian Confluence
infra
10건
KEV 10 · 최근 2026-10-15
MySQL/MariaDB
finance
10건
KEV 2 · 최근 2024-11-07
Redis
infra
9건
KEV 3 · 최근 2026-05-26
curl
infra
8건
KEV 1 · 최근 2023-05-12
OpenSSL
infra
8건
KEV 1 · 최근 2022-05-04
VMware ESXi
infra
7건
KEV 7 · 최근 2025-03-04
wolfSSL
finance
3건
KEV 0
Apache Spark
finance
1건
KEV 1 · 최근 2023-03-07
Spring Framework
finance
1건
KEV 1 · 최근 2022-04-04
| 기술 | CVE | 심각도 | 유형 | KEV | 등재일 |
|---|---|---|---|---|---|
|
Windows
Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally.
|
CVE-2026-77503 | 8.4 | CWE-125 | — | |
|
Windows
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
|
CVE-2026-69638 | 8.4 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
|
CVE-2026-69479 | 8.4 | CWE-122 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
virtio-net: fix len check in receive_big()
receive_big() bounds the device-anno…
|
CVE-2026-64552 | 8.4 | CWE-787 | — | |
|
MySQL/MariaDB
MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB RPM p…
|
CVE-2026-107814 | 8.4 | CWE-732 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all()
There's issue as …
|
CVE-2025-22121 | 8.4 | CWE-125 | — | |
|
Windows
Buffer overflow in GPU in Google Chrome on on Windows prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to ex…
|
CVE-2026-84351 | 8.3 | CWE-121 | — | |
|
Windows
Out of bounds write in Crashpad in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer proc…
|
CVE-2026-78952 | 8.3 | CWE-787 | — | |
|
Node.js
A vulnerability has been identified in Industrial Edge App Publisher (All versions < V1.27.9). The application fails to properly sanitize or escape d…
|
CVE-2026-78557 | 8.3 | CWE-79 | — | |
|
Windows
Origin validation error in Windows Network Address Translation (NAT) allows an unauthorized attacker to perform spoofing over an adjacent network.
|
CVE-2026-56179 | 8.3 | CWE-346 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
wifi: ath5k: do not access array OOB
Vincent reports:
> The ath5k driver seems …
|
CVE-2026-46307 | 8.3 | CWE-125 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: require minimum ACE size in smb_check_perm_dacl()
Both ACE-walk loops in…
|
CVE-2026-31712 | 8.3 | CWE-787 | — | |
|
OpenSSL
MatchTrustedPeer ignores the public key used, leading to forged CA clones passing verification. Affected builds are any that enable the macro WOLFSSL…
|
CVE-2026-93302 | 8.2 | CWE-295 | — | |
|
wolfSSL
MatchTrustedPeer ignores the public key used, leading to forged CA clones passing verification. Affected builds are any that enable the macro WOLFSSL…
|
CVE-2026-93302 | 8.2 | CWE-295 | — | |
|
Apache HTTP
MatchTrustedPeer ignores the public key used, leading to forged CA clones passing verification. Affected builds are any that enable the macro WOLFSSL…
|
CVE-2026-93302 | 8.2 | CWE-295 | — | |
|
nginx
MatchTrustedPeer ignores the public key used, leading to forged CA clones passing verification. Affected builds are any that enable the macro WOLFSSL…
|
CVE-2026-93302 | 8.2 | CWE-295 | — | |
|
Windows
Double free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
|
CVE-2026-85921 | 8.2 | CWE-415 | — | |
|
Windows
Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
|
CVE-2026-85369 | 8.2 | CWE-125 | — | |
|
Windows
Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
|
CVE-2026-83939 | 8.2 | CWE-822 | — | |
|
Windows
Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally.
|
CVE-2026-81354 | 8.2 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.
|
CVE-2026-72962 | 8.2 | CWE-122 | — | |
|
Windows
Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
|
CVE-2026-72961 | 8.2 | CWE-122 | — | |
|
Windows
Double free in Windows Credential Guard allows an authorized attacker to elevate privileges locally.
|
CVE-2026-72958 | 8.2 | CWE-415 | — | |
|
Windows
Heap-based buffer overflow in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69906 | 8.2 | CWE-122 | — | |
|
Windows
Untrusted pointer dereference in Windows ALPC allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69874 | 8.2 | CWE-822 | — | |
|
Windows
Integer overflow or wraparound in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69846 | 8.2 | CWE-190 | — | |
|
Windows
Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69820 | 8.2 | CWE-122 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
netfilter: conntrack_irc: fix possible out-of-bounds read
When parsing fails af…
|
CVE-2026-53268 | 8.2 | CWE-125 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
isofs: validate Rock Ridge CE continuation extent against volume size
rock_cont…
|
CVE-2026-46303 | 8.2 | CWE-401 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
ipv4: icmp: validate reply type before using icmp_pointers
Extended echo replie…
|
CVE-2026-46037 | 8.2 | CWE-125 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
slip: bound decode() reads against the compressed packet length
slhc_uncompress…
|
CVE-2026-45843 | 8.2 | CWE-126 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case
In decode_…
|
CVE-2026-23456 | 8.2 | CWE-125 | — | |
|
Cisco IOS
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehen…
|
CVE-2026-20277 | 8.2 | CWE-693 | — | |
|
PostgreSQL
Stack buffer overflow in PostgreSQL argument name matching allows an object creator to achieve unknown impacts via OUT parameter count. The attack c…
|
CVE-2026-14679 | 8.2 | CWE-121 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
IB/isert: wait for deferred control PDU completions before releasing the connect…
|
CVE-2026-98357 | 8.1 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
cifs: Fix server use-after-free in cifs_chan_skip_or_disable()
When a secondary…
|
CVE-2026-98261 | 8.1 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
net: lan743x: fix RX checksum use-after-free
lan743x_rx_process_buffer() adds e…
|
CVE-2026-98239 | 8.1 | — | — | |
|
nginx
NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_core_module module. When asynchronous file I/O (AIO) is enabled in certain conf…
|
CVE-2026-97205 | 8.1 | CWE-416 | — | |
|
nginx
A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and the root directive or access log format refer…
|
CVE-2026-93479 | 8.1 | CWE-122 | — | |
|
curl
During an upload, curl mishandles HTTP/2 `RST_STREAM` received from the server
(with reason `HTTP_1_1_REQUIRED` or `REFUSED_STREAM`) leading to a use…
|
CVE-2026-92392 | 8.1 | CWE-416 | — | |
|
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Deployment Services allows an unauthorized att…
|
CVE-2026-88174 | 8.1 | CWE-362 | — | |
|
Windows
Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.
|
CVE-2026-88173 | 8.1 | CWE-367 | — | |
|
Windows
Double free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
|
CVE-2026-88171 | 8.1 | CWE-415 | — | |
|
Windows
Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
|
CVE-2026-88120 | 8.1 | CWE-416 | — | |
|
Windows
Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
|
CVE-2026-88119 | 8.1 | CWE-416 | — | |
|
Windows
Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
|
CVE-2026-88117 | 8.1 | CWE-416 | — | |
|
Windows
Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.
|
CVE-2026-85926 | 8.1 | CWE-416 | — | |
|
Fortinet
A improper validation of certificate with host mismatch vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6, FortiProxy 7.6.2 through 7.6.6 may all…
|
CVE-2026-84393 | 8.1 | CWE-297 | — | |
|
Windows
Incorrect authorization in Chromoting in Google Chrome on on Windows prior to 152.0.7977.75 allowed a local attacker to execute arbitrary code outsid…
|
CVE-2026-84334 | 8.1 | CWE-863 | — | |
|
Windows
Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.
|
CVE-2026-83997 | 8.1 | CWE-416 | — | |
|
Windows
Out-of-bounds read in Windows Paint allows an unauthorized attacker to execute code over a network.
|
CVE-2026-83844 | 8.1 | CWE-125 | — | |
|
Windows
Reliance on untrusted inputs in a security decision in Windows IKE Extension allows an unauthorized attacker to perform spoofing over a network.
|
CVE-2026-83522 | 8.1 | CWE-807 | — | |
|
Windows
Untrusted pointer dereference in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.
|
CVE-2026-78444 | 8.1 | CWE-822 | — | |
|
Apache Tomcat
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Apache Tomcat allows an attacker to inje…
|
CVE-2026-77762 | 8.1 | CWE-362 | — | |
|
Apache HTTP
Authentication bypass by capture-replay in mod_auth_digest in Apache Software Foundation Apache HTTP Server 2.4.x on all platforms allows a man-in-th…
|
CVE-2026-73636 | 8.1 | CWE-294 | — | |
|
Windows
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
|
CVE-2026-72987 | 8.1 | CWE-416 | — | |
|
Windows
Use after free in Windows SMB Client allows an unauthorized attacker to execute code over a network.
|
CVE-2026-72936 | 8.1 | CWE-416 | — | |
|
Windows
Integer overflow or wraparound in Windows Device Health Attestation (DHA) allows an unauthorized attacker to execute code over a network.
|
CVE-2026-71331 | 8.1 | CWE-122 | — | |
|
Microsoft Exchange
Stack-based buffer overflow in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network.
|
CVE-2026-70571 | 8.1 | CWE-121 | — | |
|
Windows
Improper link resolution before file access ('link following') in Windows Shell allows an unauthorized attacker to perform spoofing over a network.
|
CVE-2026-70563 | 8.1 | CWE-59 | — |