Security News

주요 제품 취약점 (2,105건)

"Windows" 관련 CVE만 표시 중 · 필터 해제 ×

기술CVE심각도유형KEV등재일
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hello allows an authorized attacker to elevate…
CVE-2026-69799 7.8 CWE-362 —
Windows
Use after free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69798 7.8 CWE-416 —
Windows
Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to elevate privileges locally.
CVE-2026-69790 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69787 7.8 CWE-122 —
Windows
Untrusted search path in Windows Smart Card allows an authorized attacker to elevate privileges locally.
CVE-2026-69785 7.8 CWE-426 —
Windows
External control of file name or path in Windows Update allows an authorized attacker to elevate privileges locally.
CVE-2026-69783 7.8 CWE-73 —
Windows
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
CVE-2026-69758 7.8 CWE-122 —
Windows
Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69738 7.8 CWE-122 —
Windows
Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally.
CVE-2026-69733 7.8 CWE-426 —
Windows
Double free in Windows Hello allows an authorized attacker to elevate privileges locally.
CVE-2026-69725 7.8 CWE-415 —
Windows
Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
CVE-2026-69720 7.8 CWE-122 —
Windows
Improper neutralization of special elements used in a command ('command injection') in Windows Update allows an authorized attacker to elevate privil…
CVE-2026-69718 7.8 CWE-77 —
Windows
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
CVE-2026-69709 7.8 CWE-122 —
Windows
Integer overflow or wraparound in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
CVE-2026-69707 7.8 CWE-190 —
Windows
Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
CVE-2026-69691 7.8 CWE-122 —
Windows
Integer underflow (wrap or wraparound) in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
CVE-2026-69687 7.8 CWE-191 —
Windows
Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally.
CVE-2026-69685 7.8 CWE-122 —
Windows
Improper link resolution before file access ('link following') in Windows Update allows an authorized attacker to elevate privileges locally.
CVE-2026-69673 7.8 CWE-59 —
Windows
Improper verification of cryptographic signature in Windows Key Distribution Center allows an authorized attacker to elevate privileges locally.
CVE-2026-69650 7.8 CWE-347 —
Windows
Heap-based buffer overflow in Windows Update allows an authorized attacker to elevate privileges locally.
CVE-2026-69633 7.8 CWE-122 —
Windows
Absolute path traversal in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVE-2026-69612 7.8 CWE-36 —
Windows
Integer overflow or wraparound in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVE-2026-69608 7.8 CWE-190 —
Windows
Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69604 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69593 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
CVE-2026-69592 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69589 7.8 CWE-122 —
Windows
Incorrect type conversion or cast in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVE-2026-69585 7.8 CWE-704 —
Windows
Integer overflow or wraparound in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-69584 7.8 CWE-190 —
Windows
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69583 7.8 CWE-122 —
Windows
Buffer over-read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-69582 7.8 CWE-126 —
Windows
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69580 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
CVE-2026-69571 7.8 CWE-122 —
Windows
Out-of-bounds read in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-69561 7.8 CWE-125 —
Windows
Heap-based buffer overflow in Windows SMB Client allows an authorized attacker to elevate privileges locally.
CVE-2026-69544 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally.
CVE-2026-69542 7.8 CWE-122 —
Windows
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to execute code locally.
CVE-2026-69538 7.8 CWE-125 —
Windows
Numeric truncation error in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
CVE-2026-69535 7.8 CWE-122 —
Windows
Improper neutralization of special elements used in a command ('command injection') in Windows Program Compatibility Assistant Service allows an auth…
CVE-2026-69534 7.8 CWE-77 —
Windows
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-69532 7.8 CWE-125 —
Windows
Missing authentication for critical function in Windows Shell allows an authorized attacker to elevate privileges locally.
CVE-2026-69528 7.8 CWE-306 —
Windows
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVE-2026-69513 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69509 7.8 CWE-122 —
Windows
Stack-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
CVE-2026-69508 7.8 CWE-121 —
Windows
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69489 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-69480 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69478 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69476 7.8 CWE-122 —
Windows
Untrusted pointer dereference in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.
CVE-2026-69475 7.8 CWE-822 —
Windows
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-69471 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Power Dependency Coordinator allows an authorized attacker to elevate privileges locally.
CVE-2026-69459 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally.
CVE-2026-69456 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-69455 7.8 CWE-122 —
Windows
Out-of-bounds read in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVE-2026-69450 7.8 CWE-125 —
Windows
Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69447 7.8 CWE-122 —
Windows
Improper limitation of a pathname to a restricted directory ('path traversal') in Windows Compressed Folder allows an authorized attacker to elevate …
CVE-2026-69445 7.8 CWE-22 —
Windows
Heap-based buffer overflow in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally.
CVE-2026-69444 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVE-2026-69436 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVE-2026-69433 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows VOLSNAP.SYS allows an authorized attacker to execute code locally.
CVE-2026-69426 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to elevate privileges locally.
CVE-2026-69424 7.8 CWE-122 —