Security News

주요 제품 취약점 (3,477건)

기술CVE심각도유형KEV등재일
Windows
Improper verification of cryptographic signature in Windows Audio Service allows an authorized attacker to elevate privileges locally.
CVE-2026-97799 7.8 CWE-347 —
Windows
Improper neutralization of argument delimiters in a command ('argument injection') in Windows Error Reporting allows an authorized attacker to elevat…
CVE-2026-97798 7.8 CWE-88 —
Windows
Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.
CVE-2026-97794 7.8 CWE-122 —
Windows
Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.
CVE-2026-97792 7.8 CWE-732 —
Windows
Null pointer dereference in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to execute code locally.
CVE-2026-96953 7.8 CWE-476 —
Windows
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
CVE-2026-96950 7.8 CWE-416 —
Windows
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
CVE-2026-96947 7.8 CWE-416 —
Windows
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
CVE-2026-96946 7.8 CWE-416 —
Windows
Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.
CVE-2026-96933 7.8 CWE-822 —
Windows
Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-96931 7.8 CWE-822 —
Windows
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-96929 7.8 CWE-122 —
Windows
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-96928 7.8 CWE-125 —
Windows
Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
CVE-2026-96920 7.8 CWE-122 —
Windows
Improper access control in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-96918 7.8 CWE-863 —
Windows
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-96916 7.8 CWE-122 —
Windows
Integer overflow or wraparound in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
CVE-2026-96915 7.8 CWE-190 —
Windows
Use after free in Windows Client License Service allows an authorized attacker to elevate privileges locally.
CVE-2026-96912 7.8 CWE-416 —
Windows
Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privile…
CVE-2026-96911 7.8 CWE-59 —
Windows
Out-of-bounds read in Windows NTFS allows an authorized attacker to execute code locally.
CVE-2026-96867 7.8 CWE-125 —
Windows
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
CVE-2026-96862 7.8 CWE-125 —
Windows
Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
CVE-2026-96856 7.8 CWE-122 —
Windows
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVE-2026-96324 7.8 CWE-416 —
Windows
Heap-based buffer overflow in Windows Resume allows an authorized attacker to elevate privileges locally.
CVE-2026-96318 7.8 CWE-122 —
Windows
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-96317 7.8 CWE-416 —
Windows
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-96312 7.8 CWE-122 —
Windows
Use after free in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.
CVE-2026-96309 7.8 CWE-416 —
Windows
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-96308 7.8 CWE-416 —
Windows
Out-of-bounds read in Windows Sysmain Service allows an authorized attacker to elevate privileges locally.
CVE-2026-96306 7.8 CWE-125 —
Windows
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
CVE-2026-96249 7.8 CWE-416 —
Windows
Use after free in Windows Internal System User Profile allows an authorized attacker to elevate privileges locally.
CVE-2026-96244 7.8 CWE-416 —
Windows
Improper link resolution before file access ('link following') in Windows WalletService allows an authorized attacker to elevate privileges locally.
CVE-2026-96243 7.8 CWE-59 —
Windows
Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
CVE-2026-96223 7.8 CWE-416 —
Windows
Improper control of generation of code ('code injection') in Windows Assigned Access allows an authorized attacker to elevate privileges locally.
CVE-2026-96220 7.8 CWE-94 —
Windows
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-96217 7.8 CWE-122 —
Windows
Deserialization of untrusted data in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.
CVE-2026-96186 7.8 CWE-502 —
Windows
Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-96118 7.8 CWE-125 —
Windows
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
CVE-2026-88194 7.8 CWE-125 —
Windows
Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privile…
CVE-2026-88191 7.8 CWE-59 —
Windows
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
CVE-2026-88189 7.8 CWE-125 —
Windows
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
CVE-2026-88188 7.8 CWE-125 —
Windows
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVE-2026-88182 7.8 CWE-416 —
Windows
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
CVE-2026-88181 7.8 CWE-125 —
Windows
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
CVE-2026-88180 7.8 CWE-125 —
Windows
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
CVE-2026-88179 7.8 CWE-125 —
Windows
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
CVE-2026-88177 7.8 CWE-125 —
Windows
Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-88168 7.8 CWE-122 —
Windows
Use after free in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.
CVE-2026-88152 7.8 CWE-416 —
Windows
Heap-based buffer overflow in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges locally.
CVE-2026-88147 7.8 CWE-122 —
Windows
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-88134 7.8 CWE-416 —
Windows
Improper authorization in Windows Portable Device Enumerator Service allows an authorized attacker to elevate privileges locally.
CVE-2026-88133 7.8 CWE-59 —
Windows
Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
CVE-2026-88128 7.8 CWE-122 —
Windows
Integer overflow or wraparound in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.
CVE-2026-88118 7.8 CWE-122 —
Windows
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
CVE-2026-88105 7.8 CWE-416 —
Windows
Use after free in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.
CVE-2026-88100 7.8 CWE-416 —
Windows
Deserialization of untrusted data in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
CVE-2026-88091 7.8 CWE-502 —
Windows
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-88080 7.8 CWE-416 —
Windows
Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
CVE-2026-88074 7.8 CWE-190 —
Windows
Improper access control in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally.
CVE-2026-88072 7.8 CWE-59 —
Windows
Double free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
CVE-2026-88071 7.8 CWE-415 —
Windows
Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges locally.
CVE-2026-88070 7.8 CWE-125 —