Security News

주요 제품 취약점 (2,105건)

"Windows" 관련 CVE만 표시 중 · 필터 해제 ×

기술CVE심각도유형KEV등재일
Windows
Integer underflow (wrap or wraparound) in Windows Kernel Mode Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-69421 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows VOLSNAP.SYS allows an authorized attacker to elevate privileges locally.
CVE-2026-69420 7.8 CWE-122 —
Windows
Use after free in Windows Shell allows an authorized attacker to elevate privileges locally.
CVE-2026-69392 7.8 CWE-416 —
Windows
Stack-based buffer overflow in Windows Broker Infrastructure Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69391 7.8 CWE-121 —
Windows
Heap-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally.
CVE-2026-69389 7.8 CWE-122 —
Windows
Missing authorization in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
CVE-2026-69377 7.8 CWE-862 —
Windows
Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
CVE-2026-69368 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVE-2026-69354 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69352 7.8 CWE-20 —
Windows
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-69348 7.8 CWE-122 —
Windows
Untrusted search path in Windows Storage allows an authorized attacker to elevate privileges locally.
CVE-2026-69328 7.8 CWE-426 —
Windows
Access of resource using incompatible type ('type confusion') in Windows Performance Monitor allows an authorized attacker to elevate privileges loca…
CVE-2026-69324 7.8 CWE-125 —
Windows
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69323 7.8 CWE-122 —
Windows
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-69312 7.8 CWE-125 —
Windows
Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
CVE-2026-69307 7.8 CWE-122 —
Windows
Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69298 7.8 CWE-190 —
Windows
Out-of-bounds read in Windows USB Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-69295 7.8 CWE-20 —
Windows
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69293 7.8 CWE-20 —
Windows
Stack-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.
CVE-2026-69290 7.8 CWE-121 —
Windows
Improper link resolution before file access ('link following') in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges loc…
CVE-2026-69289 7.8 CWE-59 —
Windows
Heap-based buffer overflow in Windows DCOM Server allows an authorized attacker to elevate privileges locally.
CVE-2026-69284 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-69283 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
CVE-2026-69270 7.8 CWE-20 —
Windows
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-69265 7.8 CWE-125 —
Windows
Absolute path traversal in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVE-2026-68896 7.8 CWE-36 —
Windows
Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to execute code locally.
CVE-2026-68877 7.8 CWE-122 —
Windows
Buffer over-read in Windows NTFS allows an authorized attacker to execute code locally.
CVE-2026-68875 7.8 CWE-126 —
Windows
Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
CVE-2026-68848 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
CVE-2026-68845 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to execute code locally.
CVE-2026-68844 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-68841 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows kernel32.dll allows an authorized attacker to elevate privileges locally.
CVE-2026-68836 7.8 CWE-122 —
Windows
Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-68832 7.8 CWE-190 —
Windows
Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally.
CVE-2026-66804 7.8 CWE-284 —
Windows
Heap-based buffer overflow in Windows Key Guard allows an authorized attacker to elevate privileges locally.
CVE-2026-66799 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Storage Port Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-65814 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally.
CVE-2026-65790 7.8 CWE-122 —
Windows
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-65775 7.8 CWE-416 —
Windows
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-65774 7.8 CWE-122 —
Windows
Improper access control in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-65773 7.8 CWE-284 —
Windows
Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate privileges locally.
CVE-2026-65672 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate privileges locally.
CVE-2026-65671 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
CVE-2026-62894 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows GDI+ allows an authorized attacker to execute code locally.
CVE-2026-62890 7.8 CWE-122 —
Windows
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
CVE-2026-62888 7.8 CWE-416 —
Windows
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-62885 7.8 CWE-122 —
Windows
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-62880 7.8 CWE-125 —
Windows
Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-62877 7.8 CWE-121 —
Windows
Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-62876 7.8 CWE-125 —
Windows
Improper link resolution before file access ('link following') in Windows User Profile Service allows an authorized attacker to elevate privileges lo…
CVE-2026-62832 7.8 CWE-59 —
Windows
Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.
CVE-2026-62812 7.8 CWE-59 —
Windows
Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
CVE-2026-62811 7.8 CWE-122 —
Windows
Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.
CVE-2026-62807 7.8 CWE-59 —
Windows
Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.
CVE-2026-62803 7.8 CWE-59 —
Windows
Heap-based buffer overflow in Windows SMB Client allows an authorized attacker to elevate privileges locally.
CVE-2026-62799 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-62797 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-62783 7.8 CWE-122 —
Windows
Use after free in Windows Schannel allows an authorized attacker to elevate privileges locally.
CVE-2026-62779 7.8 CWE-416 —
Windows
Missing authentication for critical function in Windows License Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-62777 7.8 CWE-306 —
Windows
Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.
CVE-2026-62776 7.8 CWE-59 —