주요 제품 취약점 (3,477건)
Windows
infra
2105건
KEV 293 · 최근 2026-10-13
Linux 커널
infra
908건
KEV 31 · 최근 2026-10-28
Cisco IOS
infra
58건
KEV 44 · 최근 2026-07-13
Ivanti
infra
45건
KEV 36 · 최근 2026-10-13
Microsoft Exchange
infra
43건
KEV 20 · 최근 2026-05-15
Fortinet
infra
41건
KEV 22 · 최근 2026-10-16
Apache HTTP
infra
33건
KEV 11 · 최근 2026-08-24
Citrix NetScaler
infra
31건
KEV 16 · 최근 2026-10-04
Apache Tomcat
infra
30건
KEV 8 · 최근 2026-08-04
OpenSSH
infra
30건
KEV 3 · 최근 2025-10-02
PostgreSQL
finance
28건
KEV 2 · 최근 2026-09-02
Node.js
infra
24건
KEV 2 · 최근 2025-01-14
nginx
infra
16건
KEV 0
Palo Alto PAN-OS
infra
15건
KEV 14 · 최근 2026-10-14
VMware vCenter
infra
13건
KEV 12 · 최근 2026-08-18
Atlassian Confluence
infra
10건
KEV 10 · 최근 2026-10-15
MySQL/MariaDB
finance
10건
KEV 2 · 최근 2024-11-07
Redis
infra
9건
KEV 3 · 최근 2026-05-26
curl
infra
8건
KEV 1 · 최근 2023-05-12
OpenSSL
infra
8건
KEV 1 · 최근 2022-05-04
VMware ESXi
infra
7건
KEV 7 · 최근 2025-03-04
wolfSSL
finance
3건
KEV 0
Apache Spark
finance
1건
KEV 1 · 최근 2023-03-07
Spring Framework
finance
1건
KEV 1 · 최근 2022-04-04
| 기술 | CVE | 심각도 | 유형 | KEV | 등재일 |
|---|---|---|---|---|---|
|
Windows
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-69773 | 8.0 | CWE-122 | — | |
|
Windows
Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-69762 | 8.0 | CWE-121 | — | |
|
Windows
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-69727 | 8.0 | CWE-122 | — | |
|
Windows
Untrusted pointer dereference in Windows Group Policy allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-69717 | 8.0 | CWE-125 | — | |
|
Windows
Stack-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-69714 | 8.0 | CWE-121 | — | |
|
Windows
Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-69689 | 8.0 | CWE-121 | — | |
|
Windows
Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-69643 | 8.0 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-69625 | 8.0 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows HTTP Print Provider allows an authorized attacker to execute code over a network.
|
CVE-2026-69623 | 8.0 | CWE-122 | — | |
|
Windows
Out-of-bounds read in Windows exFAT File System allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-69619 | 8.0 | CWE-125 | — | |
|
Windows
Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-69512 | 8.0 | CWE-122 | — | |
|
Windows
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-69505 | 8.0 | CWE-125 | — | |
|
Windows
Stack-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-69503 | 8.0 | CWE-121 | — | |
|
Windows
Heap-based buffer overflow in Windows Enterprise App Management allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-69481 | 8.0 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-69462 | 8.0 | CWE-122 | — | |
|
Windows
Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-69458 | 8.0 | CWE-125 | — | |
|
Windows
Out-of-bounds read in Windows VOLSNAP.SYS allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-69427 | 8.0 | CWE-125 | — | |
|
Windows
Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-69423 | 8.0 | CWE-122 | — | |
|
Windows
Stack-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network.
|
CVE-2026-69412 | 8.0 | CWE-121 | — | |
|
Windows
Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-69371 | 8.0 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-69363 | 8.0 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-69346 | 8.0 | CWE-122 | — | |
|
Windows
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-69332 | 8.0 | CWE-125 | — | |
|
Windows
Double free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-69322 | 8.0 | CWE-415 | — | |
|
Windows
Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-69301 | 8.0 | CWE-121 | — | |
|
Windows
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-68894 | 8.0 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-68880 | 8.0 | CWE-122 | — | |
|
Windows
Stack-based buffer overflow in Windows Fast FAT Driver allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-68878 | 8.0 | CWE-121 | — | |
|
Windows
Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-68876 | 8.0 | CWE-122 | — | |
|
Windows
Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-68838 | 8.0 | CWE-121 | — | |
|
Windows
Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-68834 | 8.0 | CWE-121 | — | |
|
Windows
Integer underflow (wrap or wraparound) in Windows GDI+ allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-68827 | 8.0 | CWE-122 | — | |
|
Microsoft Exchange
Authentication bypass by capture-replay in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-62911 | 8.0 | CWE-294 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind()
rfcomm_get_sock…
|
CVE-2026-53256 | 8.0 | CWE-416 | — | |
|
MySQL/MariaDB
MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB insuf…
|
CVE-2026-107821 | 8.0 | CWE-1285 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
NFSD: NFSv4 file creation neglects setting ACL
An NFSv4 client that sets an ACL…
|
CVE-2025-68803 | 8.0 | CWE-863 | — | |
|
Windows
A vulnerability exists in SYS600 RBAC mechanism where users having access to the engineering tools could elevate their privileges to administrator le…
|
CVE-2026-9854 | 7.8 | CWE-303 | — | |
|
Windows
A CSV injection vulnerability exists in SYS600. Injected malicious formulas can add or modify data to the spreadsheet, insert links, exfiltrate data,…
|
CVE-2026-9852 | 7.8 | CWE-1236 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
xfrm: add missing rcu_read_lock(), skb_dst_force() and dev_hold() for xfrm_trans…
|
CVE-2026-98369 | 7.8 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
esp: downgrade zerocopy managed frags before mutating skb frags
On the out-of-p…
|
CVE-2026-98368 | 7.8 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept
We …
|
CVE-2026-98367 | 7.8 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
RDMA/rxe: validate access flags before swapping the MR's PD
rxe_rereg_user_mr()…
|
CVE-2026-98366 | 7.8 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
xfrm: hold net_device reference under RCU in bundle creation
xfrm_bundle_create…
|
CVE-2026-98364 | 7.8 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
wifi: cfg80211: don't free driver-owned scan requests
When an interface goes do…
|
CVE-2026-98341 | 7.8 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
netfilter: flowtable: hold reference on ct until flow is released
nf_ct_put() r…
|
CVE-2026-98320 | 7.8 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
wifi: virt_wifi: don't transfer operstate before register
virt_wifi_newlink() c…
|
CVE-2026-98311 | 7.8 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
net: lock the socket in sock_gettstamp()
sk->sk_flags must only be changed whil…
|
CVE-2026-98276 | 7.8 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
exec: Cleanup POSIX timers right after de_thread()
A per-thread CPU timer holds…
|
CVE-2026-98260 | 7.8 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
swiotlb: use the adjusted address for the highmem page lookup
swiotlb_bounce() …
|
CVE-2026-98254 | 7.8 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
RDMA/ucma: Serialize join and leave on copy_to_user failure
rdma_join_multicast…
|
CVE-2026-98253 | 7.8 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
openvswitch: avoid reallocating confirmed conntrack labels
ovs_ct_get_conn_labe…
|
CVE-2026-98251 | 7.8 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
ipv6: xfrm: use full sockets in local error paths
xfrm6_local_rxpmtu() and xfrm…
|
CVE-2026-98241 | 7.8 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
xfrm: save input state data before secpath resets
xfrm_input() stores the curre…
|
CVE-2026-98229 | 7.8 | — | — | |
|
OpenSSH
Double free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.
|
CVE-2026-97811 | 7.8 | CWE-400 | — | |
|
Windows
Double free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.
|
CVE-2026-97811 | 7.8 | CWE-400 | — | |
|
Windows
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
|
CVE-2026-97809 | 7.8 | CWE-416 | — | |
|
Windows
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
|
CVE-2026-97807 | 7.8 | CWE-416 | — | |
|
Windows
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
|
CVE-2026-97806 | 7.8 | CWE-416 | — | |
|
Windows
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
|
CVE-2026-97803 | 7.8 | CWE-122 | — | |
|
Windows
Incorrect permission assignment for critical resource in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally.
|
CVE-2026-97800 | 7.8 | CWE-732 | — |