주요 제품 취약점 (3,434건)
Windows
infra
2105건
KEV 293 · 최근 2026-10-13
Linux 커널
infra
908건
KEV 31 · 최근 2026-10-28
Cisco IOS
infra
58건
KEV 44 · 최근 2026-07-13
Ivanti
infra
45건
KEV 36 · 최근 2026-10-13
Microsoft Exchange
infra
43건
KEV 20 · 최근 2026-05-15
Fortinet
infra
41건
KEV 22 · 최근 2026-10-16
Apache HTTP
infra
33건
KEV 11 · 최근 2026-08-24
Citrix NetScaler
infra
31건
KEV 16 · 최근 2026-10-04
Apache Tomcat
infra
30건
KEV 8 · 최근 2026-08-04
OpenSSH
infra
30건
KEV 3 · 최근 2025-10-02
Node.js
infra
24건
KEV 2 · 최근 2025-01-14
nginx
infra
16건
KEV 0
Palo Alto PAN-OS
infra
15건
KEV 14 · 최근 2026-10-14
VMware vCenter
infra
13건
KEV 12 · 최근 2026-08-18
Atlassian Confluence
infra
10건
KEV 10 · 최근 2026-10-15
Redis
infra
9건
KEV 3 · 최근 2026-05-26
curl
infra
8건
KEV 1 · 최근 2023-05-12
OpenSSL
infra
8건
KEV 1 · 최근 2022-05-04
VMware ESXi
infra
7건
KEV 7 · 최근 2025-03-04
| 기술 | CVE | 심각도 | 유형 | KEV | 등재일 |
|---|---|---|---|---|---|
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
NFSD: NFSv4 file creation neglects setting ACL
An NFSv4 client that sets an ACL…
|
CVE-2025-68803 | 8.0 | CWE-863 | — | |
|
Windows
A vulnerability exists in SYS600 RBAC mechanism where users having access to the engineering tools could elevate their privileges to administrator le…
|
CVE-2026-9854 | 7.8 | CWE-303 | — | |
|
Windows
A CSV injection vulnerability exists in SYS600. Injected malicious formulas can add or modify data to the spreadsheet, insert links, exfiltrate data,…
|
CVE-2026-9852 | 7.8 | CWE-1236 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
xfrm: add missing rcu_read_lock(), skb_dst_force() and dev_hold() for xfrm_trans…
|
CVE-2026-98369 | 7.8 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
esp: downgrade zerocopy managed frags before mutating skb frags
On the out-of-p…
|
CVE-2026-98368 | 7.8 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept
We …
|
CVE-2026-98367 | 7.8 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
RDMA/rxe: validate access flags before swapping the MR's PD
rxe_rereg_user_mr()…
|
CVE-2026-98366 | 7.8 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
xfrm: hold net_device reference under RCU in bundle creation
xfrm_bundle_create…
|
CVE-2026-98364 | 7.8 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
wifi: cfg80211: don't free driver-owned scan requests
When an interface goes do…
|
CVE-2026-98341 | 7.8 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
netfilter: flowtable: hold reference on ct until flow is released
nf_ct_put() r…
|
CVE-2026-98320 | 7.8 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
wifi: virt_wifi: don't transfer operstate before register
virt_wifi_newlink() c…
|
CVE-2026-98311 | 7.8 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
net: lock the socket in sock_gettstamp()
sk->sk_flags must only be changed whil…
|
CVE-2026-98276 | 7.8 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
exec: Cleanup POSIX timers right after de_thread()
A per-thread CPU timer holds…
|
CVE-2026-98260 | 7.8 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
swiotlb: use the adjusted address for the highmem page lookup
swiotlb_bounce() …
|
CVE-2026-98254 | 7.8 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
RDMA/ucma: Serialize join and leave on copy_to_user failure
rdma_join_multicast…
|
CVE-2026-98253 | 7.8 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
openvswitch: avoid reallocating confirmed conntrack labels
ovs_ct_get_conn_labe…
|
CVE-2026-98251 | 7.8 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
ipv6: xfrm: use full sockets in local error paths
xfrm6_local_rxpmtu() and xfrm…
|
CVE-2026-98241 | 7.8 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
xfrm: save input state data before secpath resets
xfrm_input() stores the curre…
|
CVE-2026-98229 | 7.8 | — | — | |
|
OpenSSH
Double free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.
|
CVE-2026-97811 | 7.8 | CWE-400 | — | |
|
Windows
Double free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.
|
CVE-2026-97811 | 7.8 | CWE-400 | — | |
|
Windows
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
|
CVE-2026-97809 | 7.8 | CWE-416 | — | |
|
Windows
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
|
CVE-2026-97807 | 7.8 | CWE-416 | — | |
|
Windows
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
|
CVE-2026-97806 | 7.8 | CWE-416 | — | |
|
Windows
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
|
CVE-2026-97803 | 7.8 | CWE-122 | — | |
|
Windows
Incorrect permission assignment for critical resource in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally.
|
CVE-2026-97800 | 7.8 | CWE-732 | — | |
|
Windows
Improper verification of cryptographic signature in Windows Audio Service allows an authorized attacker to elevate privileges locally.
|
CVE-2026-97799 | 7.8 | CWE-347 | — | |
|
Windows
Improper neutralization of argument delimiters in a command ('argument injection') in Windows Error Reporting allows an authorized attacker to elevat…
|
CVE-2026-97798 | 7.8 | CWE-88 | — | |
|
Windows
Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.
|
CVE-2026-97794 | 7.8 | CWE-122 | — | |
|
Windows
Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.
|
CVE-2026-97792 | 7.8 | CWE-732 | — | |
|
Windows
Null pointer dereference in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to execute code locally.
|
CVE-2026-96953 | 7.8 | CWE-476 | — | |
|
Windows
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
|
CVE-2026-96950 | 7.8 | CWE-416 | — | |
|
Windows
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
|
CVE-2026-96947 | 7.8 | CWE-416 | — | |
|
Windows
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
|
CVE-2026-96946 | 7.8 | CWE-416 | — | |
|
Windows
Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.
|
CVE-2026-96933 | 7.8 | CWE-822 | — | |
|
Windows
Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally.
|
CVE-2026-96931 | 7.8 | CWE-822 | — | |
|
Windows
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
|
CVE-2026-96929 | 7.8 | CWE-122 | — | |
|
Windows
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
|
CVE-2026-96928 | 7.8 | CWE-125 | — | |
|
Windows
Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
|
CVE-2026-96920 | 7.8 | CWE-122 | — | |
|
Windows
Improper access control in Windows NTFS allows an authorized attacker to elevate privileges locally.
|
CVE-2026-96918 | 7.8 | CWE-863 | — | |
|
Windows
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
|
CVE-2026-96916 | 7.8 | CWE-122 | — | |
|
Windows
Integer overflow or wraparound in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
|
CVE-2026-96915 | 7.8 | CWE-190 | — | |
|
Windows
Use after free in Windows Client License Service allows an authorized attacker to elevate privileges locally.
|
CVE-2026-96912 | 7.8 | CWE-416 | — | |
|
Windows
Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privile…
|
CVE-2026-96911 | 7.8 | CWE-59 | — | |
|
Windows
Out-of-bounds read in Windows NTFS allows an authorized attacker to execute code locally.
|
CVE-2026-96867 | 7.8 | CWE-125 | — | |
|
Windows
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
|
CVE-2026-96862 | 7.8 | CWE-125 | — | |
|
Windows
Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
|
CVE-2026-96856 | 7.8 | CWE-122 | — | |
|
Windows
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
|
CVE-2026-96324 | 7.8 | CWE-416 | — | |
|
Windows
Heap-based buffer overflow in Windows Resume allows an authorized attacker to elevate privileges locally.
|
CVE-2026-96318 | 7.8 | CWE-122 | — | |
|
Windows
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
|
CVE-2026-96317 | 7.8 | CWE-416 | — | |
|
Windows
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
|
CVE-2026-96312 | 7.8 | CWE-122 | — | |
|
Windows
Use after free in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.
|
CVE-2026-96309 | 7.8 | CWE-416 | — | |
|
Windows
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
|
CVE-2026-96308 | 7.8 | CWE-416 | — | |
|
Windows
Out-of-bounds read in Windows Sysmain Service allows an authorized attacker to elevate privileges locally.
|
CVE-2026-96306 | 7.8 | CWE-125 | — | |
|
Windows
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
|
CVE-2026-96249 | 7.8 | CWE-416 | — | |
|
Windows
Use after free in Windows Internal System User Profile allows an authorized attacker to elevate privileges locally.
|
CVE-2026-96244 | 7.8 | CWE-416 | — | |
|
Windows
Improper link resolution before file access ('link following') in Windows WalletService allows an authorized attacker to elevate privileges locally.
|
CVE-2026-96243 | 7.8 | CWE-59 | — | |
|
Windows
Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
|
CVE-2026-96223 | 7.8 | CWE-416 | — | |
|
Windows
Improper control of generation of code ('code injection') in Windows Assigned Access allows an authorized attacker to elevate privileges locally.
|
CVE-2026-96220 | 7.8 | CWE-94 | — | |
|
Windows
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
|
CVE-2026-96217 | 7.8 | CWE-122 | — | |
|
Windows
Deserialization of untrusted data in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.
|
CVE-2026-96186 | 7.8 | CWE-502 | — |