주요 제품 취약점 (3,434건)
Windows
infra
2105건
KEV 293 · 최근 2026-10-13
Linux 커널
infra
908건
KEV 31 · 최근 2026-10-28
Cisco IOS
infra
58건
KEV 44 · 최근 2026-07-13
Ivanti
infra
45건
KEV 36 · 최근 2026-10-13
Microsoft Exchange
infra
43건
KEV 20 · 최근 2026-05-15
Fortinet
infra
41건
KEV 22 · 최근 2026-10-16
Apache HTTP
infra
33건
KEV 11 · 최근 2026-08-24
Citrix NetScaler
infra
31건
KEV 16 · 최근 2026-10-04
Apache Tomcat
infra
30건
KEV 8 · 최근 2026-08-04
OpenSSH
infra
30건
KEV 3 · 최근 2025-10-02
Node.js
infra
24건
KEV 2 · 최근 2025-01-14
nginx
infra
16건
KEV 0
Palo Alto PAN-OS
infra
15건
KEV 14 · 최근 2026-10-14
VMware vCenter
infra
13건
KEV 12 · 최근 2026-08-18
Atlassian Confluence
infra
10건
KEV 10 · 최근 2026-10-15
Redis
infra
9건
KEV 3 · 최근 2026-05-26
curl
infra
8건
KEV 1 · 최근 2023-05-12
OpenSSL
infra
8건
KEV 1 · 최근 2022-05-04
VMware ESXi
infra
7건
KEV 7 · 최근 2025-03-04
| 기술 | CVE | 심각도 | 유형 | KEV | 등재일 |
|---|---|---|---|---|---|
|
nginx
NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This vulnerability exists when the rewrite directive is …
|
CVE-2026-42945 | 8.1 | CWE-122 | — | |
|
nginx
A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and a string expression references the map's rege…
|
CVE-2026-42533 | 8.1 | CWE-122 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path
smb2_ioctl_q…
|
CVE-2026-31708 | 8.1 | CWE-125 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
smb: client: fix OOB reads parsing symlink error response
When a CREATE returns…
|
CVE-2026-31613 | 8.1 | CWE-125 | — | |
|
Redis
Redis is an in-memory data structure store. In all versions of redis-server with Lua scripting, an authenticated attacker can exploit the master-repl…
|
CVE-2026-23631 | 8.1 | CWE-416 | — | |
|
Fortinet
An Authentication Bypass by Primary Weakness vulnerability [CWE-305] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4 may allow an unauthenticat…
|
CVE-2026-22153 | 8.1 | CWE-305 | — | |
|
nginx
A vulnerability exists in NGINX Plus and NGINX Open Source when a location is configured that uses the alias directive together with rewrite and a se…
|
CVE-2026-15176 | 8.1 | CWE-122 | — | |
|
Windows
Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.
|
CVE-2026-108460 | 8.1 | CWE-416 | — | |
|
Windows
Out-of-bounds write in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network.
|
CVE-2026-108457 | 8.1 | CWE-787 | — | |
|
nginx
Malcolm's nginx based reverse proxy contains a URL path normalization inconsistency between its Lua based role-based access control (RBAC) authorizat…
|
CVE-2026-107333 | 8.1 | CWE-863 | — | |
|
Windows
Out-of-bounds write in Windows Schannel allows an unauthorized attacker to execute code over a network.
|
CVE-2026-105005 | 8.1 | CWE-787 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
ipv6: use RCU in ip6_xmit()
Use RCU in ip6_xmit() in order to use dst_dev_rcu()…
|
CVE-2025-40135 | 8.1 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
ipv4: use RCU protection in __ip_rt_update_pmtu()
__ip_rt_update_pmtu() must us…
|
CVE-2025-21766 | 8.1 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
ipv6: use RCU protection in ip6_default_advmss()
ip6_default_advmss() needs rcu…
|
CVE-2025-21765 | 8.1 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
arp: use RCU protection in arp_xmit()
arp_xmit() can be called without RTNL or …
|
CVE-2025-21762 | 8.1 | CWE-416 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
ndisc: extend RCU protection in ndisc_send_skb()
ndisc_send_skb() can be called…
|
CVE-2025-21760 | 8.1 | CWE-416 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
rdma/cxgb4: Prevent potential integer overflow on 32bit
The "gl->tot_len" varia…
|
CVE-2024-57973 | 8.1 | CWE-190 | — | |
|
Fortinet
An authentication bypass using an alternate path or channel [CWE-288] vulnerability in Fortinet FortiOS 6.4.0 through 6.4.15, FortiOS 6.2.0 through 6…
|
CVE-2024-26009 | 8.1 | CWE-288 | — | |
|
Windows
Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.
|
CVE-2026-88121 | 8.0 | CWE-416 | — | |
|
Windows
Integer underflow (wrap or wraparound) in Windows Bluetooth A2DP driver allows an authorized attacker to elevate privileges over an adjacent network.
|
CVE-2026-83838 | 8.0 | CWE-191 | — | |
|
Windows
Use after free in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network.
|
CVE-2026-69876 | 8.0 | CWE-415 | — | |
|
Windows
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-69875 | 8.0 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network.
|
CVE-2026-69847 | 8.0 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-69826 | 8.0 | CWE-122 | — | |
|
Windows
Improper limitation of a pathname to a restricted directory ('path traversal') in Windows PowerShell allows an authorized attacker to elevate privile…
|
CVE-2026-69807 | 8.0 | CWE-22 | — | |
|
Windows
Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges over an adjacent network.
|
CVE-2026-69777 | 8.0 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-69773 | 8.0 | CWE-122 | — | |
|
Windows
Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-69762 | 8.0 | CWE-121 | — | |
|
Windows
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-69727 | 8.0 | CWE-122 | — | |
|
Windows
Untrusted pointer dereference in Windows Group Policy allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-69717 | 8.0 | CWE-125 | — | |
|
Windows
Stack-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-69714 | 8.0 | CWE-121 | — | |
|
Windows
Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-69689 | 8.0 | CWE-121 | — | |
|
Windows
Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-69643 | 8.0 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-69625 | 8.0 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows HTTP Print Provider allows an authorized attacker to execute code over a network.
|
CVE-2026-69623 | 8.0 | CWE-122 | — | |
|
Windows
Out-of-bounds read in Windows exFAT File System allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-69619 | 8.0 | CWE-125 | — | |
|
Windows
Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-69512 | 8.0 | CWE-122 | — | |
|
Windows
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-69505 | 8.0 | CWE-125 | — | |
|
Windows
Stack-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-69503 | 8.0 | CWE-121 | — | |
|
Windows
Heap-based buffer overflow in Windows Enterprise App Management allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-69481 | 8.0 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-69462 | 8.0 | CWE-122 | — | |
|
Windows
Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-69458 | 8.0 | CWE-125 | — | |
|
Windows
Out-of-bounds read in Windows VOLSNAP.SYS allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-69427 | 8.0 | CWE-125 | — | |
|
Windows
Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-69423 | 8.0 | CWE-122 | — | |
|
Windows
Stack-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network.
|
CVE-2026-69412 | 8.0 | CWE-121 | — | |
|
Windows
Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-69371 | 8.0 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-69363 | 8.0 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-69346 | 8.0 | CWE-122 | — | |
|
Windows
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-69332 | 8.0 | CWE-125 | — | |
|
Windows
Double free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-69322 | 8.0 | CWE-415 | — | |
|
Windows
Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-69301 | 8.0 | CWE-121 | — | |
|
Windows
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-68894 | 8.0 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-68880 | 8.0 | CWE-122 | — | |
|
Windows
Stack-based buffer overflow in Windows Fast FAT Driver allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-68878 | 8.0 | CWE-121 | — | |
|
Windows
Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-68876 | 8.0 | CWE-122 | — | |
|
Windows
Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-68838 | 8.0 | CWE-121 | — | |
|
Windows
Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-68834 | 8.0 | CWE-121 | — | |
|
Windows
Integer underflow (wrap or wraparound) in Windows GDI+ allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-68827 | 8.0 | CWE-122 | — | |
|
Microsoft Exchange
Authentication bypass by capture-replay in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-62911 | 8.0 | CWE-294 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind()
rfcomm_get_sock…
|
CVE-2026-53256 | 8.0 | CWE-416 | — |