주요 제품 취약점 (3,434건)
Windows
infra
2105건
KEV 293 · 최근 2026-10-13
Linux 커널
infra
908건
KEV 31 · 최근 2026-10-28
Cisco IOS
infra
58건
KEV 44 · 최근 2026-07-13
Ivanti
infra
45건
KEV 36 · 최근 2026-10-13
Microsoft Exchange
infra
43건
KEV 20 · 최근 2026-05-15
Fortinet
infra
41건
KEV 22 · 최근 2026-10-16
Apache HTTP
infra
33건
KEV 11 · 최근 2026-08-24
Citrix NetScaler
infra
31건
KEV 16 · 최근 2026-10-04
Apache Tomcat
infra
30건
KEV 8 · 최근 2026-08-04
OpenSSH
infra
30건
KEV 3 · 최근 2025-10-02
Node.js
infra
24건
KEV 2 · 최근 2025-01-14
nginx
infra
16건
KEV 0
Palo Alto PAN-OS
infra
15건
KEV 14 · 최근 2026-10-14
VMware vCenter
infra
13건
KEV 12 · 최근 2026-08-18
Atlassian Confluence
infra
10건
KEV 10 · 최근 2026-10-15
Redis
infra
9건
KEV 3 · 최근 2026-05-26
curl
infra
8건
KEV 1 · 최근 2023-05-12
OpenSSL
infra
8건
KEV 1 · 최근 2022-05-04
VMware ESXi
infra
7건
KEV 7 · 최근 2025-03-04
| 기술 | CVE | 심각도 | 유형 | KEV | 등재일 |
|---|---|---|---|---|---|
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case
In decode_…
|
CVE-2026-23456 | 8.2 | CWE-125 | — | |
|
Cisco IOS
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehen…
|
CVE-2026-20277 | 8.2 | CWE-693 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
IB/isert: wait for deferred control PDU completions before releasing the connect…
|
CVE-2026-98357 | 8.1 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
cifs: Fix server use-after-free in cifs_chan_skip_or_disable()
When a secondary…
|
CVE-2026-98261 | 8.1 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
net: lan743x: fix RX checksum use-after-free
lan743x_rx_process_buffer() adds e…
|
CVE-2026-98239 | 8.1 | — | — | |
|
nginx
NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_core_module module. When asynchronous file I/O (AIO) is enabled in certain conf…
|
CVE-2026-97205 | 8.1 | CWE-416 | — | |
|
nginx
A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and the root directive or access log format refer…
|
CVE-2026-93479 | 8.1 | CWE-122 | — | |
|
curl
During an upload, curl mishandles HTTP/2 `RST_STREAM` received from the server
(with reason `HTTP_1_1_REQUIRED` or `REFUSED_STREAM`) leading to a use…
|
CVE-2026-92392 | 8.1 | CWE-416 | — | |
|
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Deployment Services allows an unauthorized att…
|
CVE-2026-88174 | 8.1 | CWE-362 | — | |
|
Windows
Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.
|
CVE-2026-88173 | 8.1 | CWE-367 | — | |
|
Windows
Double free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
|
CVE-2026-88171 | 8.1 | CWE-415 | — | |
|
Windows
Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
|
CVE-2026-88120 | 8.1 | CWE-416 | — | |
|
Windows
Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
|
CVE-2026-88119 | 8.1 | CWE-416 | — | |
|
Windows
Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
|
CVE-2026-88117 | 8.1 | CWE-416 | — | |
|
Windows
Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.
|
CVE-2026-85926 | 8.1 | CWE-416 | — | |
|
Fortinet
A improper validation of certificate with host mismatch vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6, FortiProxy 7.6.2 through 7.6.6 may all…
|
CVE-2026-84393 | 8.1 | CWE-297 | — | |
|
Windows
Incorrect authorization in Chromoting in Google Chrome on on Windows prior to 152.0.7977.75 allowed a local attacker to execute arbitrary code outsid…
|
CVE-2026-84334 | 8.1 | CWE-863 | — | |
|
Windows
Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.
|
CVE-2026-83997 | 8.1 | CWE-416 | — | |
|
Windows
Out-of-bounds read in Windows Paint allows an unauthorized attacker to execute code over a network.
|
CVE-2026-83844 | 8.1 | CWE-125 | — | |
|
Windows
Reliance on untrusted inputs in a security decision in Windows IKE Extension allows an unauthorized attacker to perform spoofing over a network.
|
CVE-2026-83522 | 8.1 | CWE-807 | — | |
|
Windows
Untrusted pointer dereference in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.
|
CVE-2026-78444 | 8.1 | CWE-822 | — | |
|
Apache Tomcat
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Apache Tomcat allows an attacker to inje…
|
CVE-2026-77762 | 8.1 | CWE-362 | — | |
|
Apache HTTP
Authentication bypass by capture-replay in mod_auth_digest in Apache Software Foundation Apache HTTP Server 2.4.x on all platforms allows a man-in-th…
|
CVE-2026-73636 | 8.1 | CWE-294 | — | |
|
Windows
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
|
CVE-2026-72987 | 8.1 | CWE-416 | — | |
|
Windows
Use after free in Windows SMB Client allows an unauthorized attacker to execute code over a network.
|
CVE-2026-72936 | 8.1 | CWE-416 | — | |
|
Windows
Integer overflow or wraparound in Windows Device Health Attestation (DHA) allows an unauthorized attacker to execute code over a network.
|
CVE-2026-71331 | 8.1 | CWE-122 | — | |
|
Microsoft Exchange
Stack-based buffer overflow in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network.
|
CVE-2026-70571 | 8.1 | CWE-121 | — | |
|
Windows
Improper link resolution before file access ('link following') in Windows Shell allows an unauthorized attacker to perform spoofing over a network.
|
CVE-2026-70563 | 8.1 | CWE-59 | — | |
|
Windows
A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClien…
|
CVE-2026-70465 | 8.1 | CWE-120 | — | |
|
Windows
Use after free in Windows Ancillary Function Driver for WinSock allows an unauthorized attacker to elevate privileges over a network.
|
CVE-2026-70342 | 8.1 | CWE-416 | — | |
|
Windows
Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges over a network.
|
CVE-2026-70111 | 8.1 | CWE-822 | — | |
|
Windows
Double free in Windows Libarchive allows an unauthorized attacker to execute code over a network.
|
CVE-2026-70062 | 8.1 | CWE-415 | — | |
|
Windows
Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.
|
CVE-2026-70038 | 8.1 | CWE-122 | — | |
|
Windows
Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.
|
CVE-2026-70013 | 8.1 | CWE-416 | — | |
|
Windows
Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network.
|
CVE-2026-69913 | 8.1 | CWE-416 | — | |
|
Windows
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
|
CVE-2026-69858 | 8.1 | CWE-416 | — | |
|
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DHCP Server allows an unauthorized attacker to…
|
CVE-2026-69830 | 8.1 | CWE-362 | — | |
|
Windows
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
|
CVE-2026-69813 | 8.1 | CWE-416 | — | |
|
Windows
Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
|
CVE-2026-69786 | 8.1 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows Link Layer Topology Discovery Protocol allows an unauthorized attacker to execute code over a network.
|
CVE-2026-69732 | 8.1 | CWE-122 | — | |
|
Windows
Origin validation error in Windows DNS allows an unauthorized attacker to perform spoofing over a network.
|
CVE-2026-69680 | 8.1 | CWE-346 | — | |
|
Windows
Stack-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
|
CVE-2026-69620 | 8.1 | CWE-121 | — | |
|
Windows
Stack-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
|
CVE-2026-69510 | 8.1 | CWE-121 | — | |
|
Microsoft Exchange
Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-69380 | 8.1 | CWE-862 | — | |
|
Apache Tomcat
Improper Authentication vulnerability in Apache Tomcat meant that in some circumstances (e.g. CLIENT-CERT, SPNEGO) that a user would be authenticated…
|
CVE-2026-68569 | 8.1 | CWE-287 | — | |
|
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Device Health Attestation (DHA) allows an unau…
|
CVE-2026-66802 | 8.1 | CWE-362 | — | |
|
Apache Tomcat
Improper Authorization vulnerability in Apache Tomcat cause by security-role-ref definitions being incorrectly used as role aliases within the Realm …
|
CVE-2026-66422 | 8.1 | CWE-285 | — | |
|
Windows
Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network.
|
CVE-2026-65796 | 8.1 | CWE-122 | — | |
|
Windows
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
|
CVE-2026-65789 | 8.1 | CWE-416 | — | |
|
Windows
Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network.
|
CVE-2026-65679 | 8.1 | CWE-122 | — | |
|
Apache Tomcat
Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Apache Tomcat when creating unix domain sockets allows an unauthorised local user …
|
CVE-2026-65183 | 8.1 | CWE-367 | — | |
|
Windows
Double free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.
|
CVE-2026-62889 | 8.1 | CWE-415 | — | |
|
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an unauthorized attacker to execute…
|
CVE-2026-62820 | 8.1 | CWE-362 | — | |
|
Windows
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
|
CVE-2026-62819 | 8.1 | CWE-416 | — | |
|
Windows
Stack-based buffer overflow in Windows TCP/IP allows an unauthorized attacker to execute code over a network.
|
CVE-2026-62792 | 8.1 | CWE-121 | — | |
|
Windows
Use after free in Windows DNS allows an unauthorized attacker to elevate privileges over a network.
|
CVE-2026-62778 | 8.1 | CWE-362 | — | |
|
Microsoft Exchange
Double free in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network.
|
CVE-2026-55007 | 8.1 | CWE-415 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: RFCOMM: validate skb length in MCC handlers
The RFCOMM MCC handlers …
|
CVE-2026-53254 | 8.1 | CWE-125 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
thunderbolt: Validate XDomain request packet size before type cast
tb_xdp_handl…
|
CVE-2026-53147 | 8.1 | CWE-125 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels
seg6_input_core() and rp…
|
CVE-2026-46099 | 8.1 | CWE-416 | — |