주요 제품 취약점 (3,477건)
Windows
infra
2105건
KEV 293 · 최근 2026-10-13
Linux 커널
infra
908건
KEV 31 · 최근 2026-10-28
Cisco IOS
infra
58건
KEV 44 · 최근 2026-07-13
Ivanti
infra
45건
KEV 36 · 최근 2026-10-13
Microsoft Exchange
infra
43건
KEV 20 · 최근 2026-05-15
Fortinet
infra
41건
KEV 22 · 최근 2026-10-16
Apache HTTP
infra
33건
KEV 11 · 최근 2026-08-24
Citrix NetScaler
infra
31건
KEV 16 · 최근 2026-10-04
Apache Tomcat
infra
30건
KEV 8 · 최근 2026-08-04
OpenSSH
infra
30건
KEV 3 · 최근 2025-10-02
PostgreSQL
finance
28건
KEV 2 · 최근 2026-09-02
Node.js
infra
24건
KEV 2 · 최근 2025-01-14
nginx
infra
16건
KEV 0
Palo Alto PAN-OS
infra
15건
KEV 14 · 최근 2026-10-14
VMware vCenter
infra
13건
KEV 12 · 최근 2026-08-18
Atlassian Confluence
infra
10건
KEV 10 · 최근 2026-10-15
MySQL/MariaDB
finance
10건
KEV 2 · 최근 2024-11-07
Redis
infra
9건
KEV 3 · 최근 2026-05-26
curl
infra
8건
KEV 1 · 최근 2023-05-12
OpenSSL
infra
8건
KEV 1 · 최근 2022-05-04
VMware ESXi
infra
7건
KEV 7 · 최근 2025-03-04
wolfSSL
finance
3건
KEV 0
Apache Spark
finance
1건
KEV 1 · 최근 2023-03-07
Spring Framework
finance
1건
KEV 1 · 최근 2022-04-04
| 기술 | CVE | 심각도 | 유형 | KEV | 등재일 |
|---|---|---|---|---|---|
|
Windows
A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClien…
|
CVE-2026-70465 | 8.1 | CWE-120 | — | |
|
Windows
Use after free in Windows Ancillary Function Driver for WinSock allows an unauthorized attacker to elevate privileges over a network.
|
CVE-2026-70342 | 8.1 | CWE-416 | — | |
|
Windows
Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges over a network.
|
CVE-2026-70111 | 8.1 | CWE-822 | — | |
|
Windows
Double free in Windows Libarchive allows an unauthorized attacker to execute code over a network.
|
CVE-2026-70062 | 8.1 | CWE-415 | — | |
|
Windows
Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.
|
CVE-2026-70038 | 8.1 | CWE-122 | — | |
|
Windows
Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.
|
CVE-2026-70013 | 8.1 | CWE-416 | — | |
|
Windows
Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network.
|
CVE-2026-69913 | 8.1 | CWE-416 | — | |
|
Windows
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
|
CVE-2026-69858 | 8.1 | CWE-416 | — | |
|
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DHCP Server allows an unauthorized attacker to…
|
CVE-2026-69830 | 8.1 | CWE-362 | — | |
|
Windows
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
|
CVE-2026-69813 | 8.1 | CWE-416 | — | |
|
Windows
Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
|
CVE-2026-69786 | 8.1 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows Link Layer Topology Discovery Protocol allows an unauthorized attacker to execute code over a network.
|
CVE-2026-69732 | 8.1 | CWE-122 | — | |
|
Windows
Origin validation error in Windows DNS allows an unauthorized attacker to perform spoofing over a network.
|
CVE-2026-69680 | 8.1 | CWE-346 | — | |
|
Windows
Stack-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
|
CVE-2026-69620 | 8.1 | CWE-121 | — | |
|
Windows
Stack-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
|
CVE-2026-69510 | 8.1 | CWE-121 | — | |
|
Microsoft Exchange
Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-69380 | 8.1 | CWE-862 | — | |
|
Apache Tomcat
Improper Authentication vulnerability in Apache Tomcat meant that in some circumstances (e.g. CLIENT-CERT, SPNEGO) that a user would be authenticated…
|
CVE-2026-68569 | 8.1 | CWE-287 | — | |
|
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Device Health Attestation (DHA) allows an unau…
|
CVE-2026-66802 | 8.1 | CWE-362 | — | |
|
Apache Tomcat
Improper Authorization vulnerability in Apache Tomcat cause by security-role-ref definitions being incorrectly used as role aliases within the Realm …
|
CVE-2026-66422 | 8.1 | CWE-285 | — | |
|
Windows
Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network.
|
CVE-2026-65796 | 8.1 | CWE-122 | — | |
|
Windows
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
|
CVE-2026-65789 | 8.1 | CWE-416 | — | |
|
Windows
Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network.
|
CVE-2026-65679 | 8.1 | CWE-122 | — | |
|
Apache Tomcat
Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Apache Tomcat when creating unix domain sockets allows an unauthorised local user …
|
CVE-2026-65183 | 8.1 | CWE-367 | — | |
|
PostgreSQL
Untrusted data inclusion in PostgreSQL psql COPY may allow a server administrator to elicit execution of data lines as psql commands, via error injec…
|
CVE-2026-6464 | 8.1 | CWE-829 | — | |
|
Windows
Double free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.
|
CVE-2026-62889 | 8.1 | CWE-415 | — | |
|
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an unauthorized attacker to execute…
|
CVE-2026-62820 | 8.1 | CWE-362 | — | |
|
Windows
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
|
CVE-2026-62819 | 8.1 | CWE-416 | — | |
|
Windows
Stack-based buffer overflow in Windows TCP/IP allows an unauthorized attacker to execute code over a network.
|
CVE-2026-62792 | 8.1 | CWE-121 | — | |
|
Windows
Use after free in Windows DNS allows an unauthorized attacker to elevate privileges over a network.
|
CVE-2026-62778 | 8.1 | CWE-362 | — | |
|
Microsoft Exchange
Double free in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network.
|
CVE-2026-55007 | 8.1 | CWE-415 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: RFCOMM: validate skb length in MCC handlers
The RFCOMM MCC handlers …
|
CVE-2026-53254 | 8.1 | CWE-125 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
thunderbolt: Validate XDomain request packet size before type cast
tb_xdp_handl…
|
CVE-2026-53147 | 8.1 | CWE-125 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels
seg6_input_core() and rp…
|
CVE-2026-46099 | 8.1 | CWE-416 | — | |
|
nginx
NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This vulnerability exists when the rewrite directive is …
|
CVE-2026-42945 | 8.1 | CWE-122 | — | |
|
nginx
A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and a string expression references the map's rege…
|
CVE-2026-42533 | 8.1 | CWE-122 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path
smb2_ioctl_q…
|
CVE-2026-31708 | 8.1 | CWE-125 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
smb: client: fix OOB reads parsing symlink error response
When a CREATE returns…
|
CVE-2026-31613 | 8.1 | CWE-125 | — | |
|
Redis
Redis is an in-memory data structure store. In all versions of redis-server with Lua scripting, an authenticated attacker can exploit the master-repl…
|
CVE-2026-23631 | 8.1 | CWE-416 | — | |
|
Fortinet
An Authentication Bypass by Primary Weakness vulnerability [CWE-305] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4 may allow an unauthenticat…
|
CVE-2026-22153 | 8.1 | CWE-305 | — | |
|
nginx
A vulnerability exists in NGINX Plus and NGINX Open Source when a location is configured that uses the alias directive together with rewrite and a se…
|
CVE-2026-15176 | 8.1 | CWE-122 | — | |
|
PostgreSQL
Type confusion regarding input of PostgreSQL ctid data type selectivity estimator allows an object creator to view a calculation derived from the val…
|
CVE-2026-14668 | 8.1 | CWE-843 | — | |
|
Windows
Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.
|
CVE-2026-108460 | 8.1 | CWE-416 | — | |
|
Windows
Out-of-bounds write in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network.
|
CVE-2026-108457 | 8.1 | CWE-787 | — | |
|
nginx
Malcolm's nginx based reverse proxy contains a URL path normalization inconsistency between its Lua based role-based access control (RBAC) authorizat…
|
CVE-2026-107333 | 8.1 | CWE-863 | — | |
|
Windows
Out-of-bounds write in Windows Schannel allows an unauthorized attacker to execute code over a network.
|
CVE-2026-105005 | 8.1 | CWE-787 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
ipv6: use RCU in ip6_xmit()
Use RCU in ip6_xmit() in order to use dst_dev_rcu()…
|
CVE-2025-40135 | 8.1 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
ipv4: use RCU protection in __ip_rt_update_pmtu()
__ip_rt_update_pmtu() must us…
|
CVE-2025-21766 | 8.1 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
ipv6: use RCU protection in ip6_default_advmss()
ip6_default_advmss() needs rcu…
|
CVE-2025-21765 | 8.1 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
arp: use RCU protection in arp_xmit()
arp_xmit() can be called without RTNL or …
|
CVE-2025-21762 | 8.1 | CWE-416 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
ndisc: extend RCU protection in ndisc_send_skb()
ndisc_send_skb() can be called…
|
CVE-2025-21760 | 8.1 | CWE-416 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
rdma/cxgb4: Prevent potential integer overflow on 32bit
The "gl->tot_len" varia…
|
CVE-2024-57973 | 8.1 | CWE-190 | — | |
|
Fortinet
An authentication bypass using an alternate path or channel [CWE-288] vulnerability in Fortinet FortiOS 6.4.0 through 6.4.15, FortiOS 6.2.0 through 6…
|
CVE-2024-26009 | 8.1 | CWE-288 | — | |
|
Windows
Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.
|
CVE-2026-88121 | 8.0 | CWE-416 | — | |
|
Windows
Integer underflow (wrap or wraparound) in Windows Bluetooth A2DP driver allows an authorized attacker to elevate privileges over an adjacent network.
|
CVE-2026-83838 | 8.0 | CWE-191 | — | |
|
Windows
Use after free in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network.
|
CVE-2026-69876 | 8.0 | CWE-415 | — | |
|
Windows
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-69875 | 8.0 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network.
|
CVE-2026-69847 | 8.0 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-69826 | 8.0 | CWE-122 | — | |
|
Windows
Improper limitation of a pathname to a restricted directory ('path traversal') in Windows PowerShell allows an authorized attacker to elevate privile…
|
CVE-2026-69807 | 8.0 | CWE-22 | — | |
|
Windows
Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges over an adjacent network.
|
CVE-2026-69777 | 8.0 | CWE-122 | — |