주요 제품 취약점 (3,434건)
Windows
infra
2105건
KEV 293 · 최근 2026-10-13
Linux 커널
infra
908건
KEV 31 · 최근 2026-10-28
Cisco IOS
infra
58건
KEV 44 · 최근 2026-07-13
Ivanti
infra
45건
KEV 36 · 최근 2026-10-13
Microsoft Exchange
infra
43건
KEV 20 · 최근 2026-05-15
Fortinet
infra
41건
KEV 22 · 최근 2026-10-16
Apache HTTP
infra
33건
KEV 11 · 최근 2026-08-24
Citrix NetScaler
infra
31건
KEV 16 · 최근 2026-10-04
Apache Tomcat
infra
30건
KEV 8 · 최근 2026-08-04
OpenSSH
infra
30건
KEV 3 · 최근 2025-10-02
Node.js
infra
24건
KEV 2 · 최근 2025-01-14
nginx
infra
16건
KEV 0
Palo Alto PAN-OS
infra
15건
KEV 14 · 최근 2026-10-14
VMware vCenter
infra
13건
KEV 12 · 최근 2026-08-18
Atlassian Confluence
infra
10건
KEV 10 · 최근 2026-10-15
Redis
infra
9건
KEV 3 · 최근 2026-05-26
curl
infra
8건
KEV 1 · 최근 2023-05-12
OpenSSL
infra
8건
KEV 1 · 최근 2022-05-04
VMware ESXi
infra
7건
KEV 7 · 최근 2025-03-04
| 기술 | CVE | 심각도 | 유형 | KEV | 등재일 |
|---|---|---|---|---|---|
|
Windows
Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
|
CVE-2026-96118 | 7.8 | CWE-125 | — | |
|
Windows
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
|
CVE-2026-88194 | 7.8 | CWE-125 | — | |
|
Windows
Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privile…
|
CVE-2026-88191 | 7.8 | CWE-59 | — | |
|
Windows
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
|
CVE-2026-88189 | 7.8 | CWE-125 | — | |
|
Windows
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
|
CVE-2026-88188 | 7.8 | CWE-125 | — | |
|
Windows
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
|
CVE-2026-88182 | 7.8 | CWE-416 | — | |
|
Windows
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
|
CVE-2026-88181 | 7.8 | CWE-125 | — | |
|
Windows
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
|
CVE-2026-88180 | 7.8 | CWE-125 | — | |
|
Windows
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
|
CVE-2026-88179 | 7.8 | CWE-125 | — | |
|
Windows
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
|
CVE-2026-88177 | 7.8 | CWE-125 | — | |
|
Windows
Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
|
CVE-2026-88168 | 7.8 | CWE-122 | — | |
|
Windows
Use after free in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.
|
CVE-2026-88152 | 7.8 | CWE-416 | — | |
|
Windows
Heap-based buffer overflow in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges locally.
|
CVE-2026-88147 | 7.8 | CWE-122 | — | |
|
Windows
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
|
CVE-2026-88134 | 7.8 | CWE-416 | — | |
|
Windows
Improper authorization in Windows Portable Device Enumerator Service allows an authorized attacker to elevate privileges locally.
|
CVE-2026-88133 | 7.8 | CWE-59 | — | |
|
Windows
Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
|
CVE-2026-88128 | 7.8 | CWE-122 | — | |
|
Windows
Integer overflow or wraparound in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.
|
CVE-2026-88118 | 7.8 | CWE-122 | — | |
|
Windows
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
|
CVE-2026-88105 | 7.8 | CWE-416 | — | |
|
Windows
Use after free in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.
|
CVE-2026-88100 | 7.8 | CWE-416 | — | |
|
Windows
Deserialization of untrusted data in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
|
CVE-2026-88091 | 7.8 | CWE-502 | — | |
|
Windows
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
|
CVE-2026-88080 | 7.8 | CWE-416 | — | |
|
Windows
Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
|
CVE-2026-88074 | 7.8 | CWE-190 | — | |
|
Windows
Improper access control in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally.
|
CVE-2026-88072 | 7.8 | CWE-59 | — | |
|
Windows
Double free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
|
CVE-2026-88071 | 7.8 | CWE-415 | — | |
|
Windows
Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges locally.
|
CVE-2026-88070 | 7.8 | CWE-125 | — | |
|
Windows
Use after free in Windows Quality of Service (QoS) Packet Scheduler allows an authorized attacker to elevate privileges locally.
|
CVE-2026-87712 | 7.8 | CWE-416 | — | |
|
Windows
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
|
CVE-2026-87711 | 7.8 | CWE-121 | — | |
|
Windows
Heap-based buffer overflow in Windows Fax and Scan Service allows an authorized attacker to elevate privileges locally.
|
CVE-2026-87707 | 7.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.
|
CVE-2026-87706 | 7.8 | CWE-122 | — | |
|
Windows
Integer overflow or wraparound in Windows Resource Management (MRM) allows an authorized attacker to elevate privileges locally.
|
CVE-2026-87702 | 7.8 | CWE-190 | — | |
|
Windows
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
|
CVE-2026-87700 | 7.8 | CWE-416 | — | |
|
Microsoft Exchange
Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.
|
CVE-2026-87695 | 7.8 | CWE-829 | — | |
|
Windows
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
|
CVE-2026-87694 | 7.8 | CWE-416 | — | |
|
Microsoft Exchange
Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.
|
CVE-2026-87692 | 7.8 | CWE-502 | — | |
|
Windows
Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally.
|
CVE-2026-87691 | 7.8 | CWE-416 | — | |
|
Windows
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
|
CVE-2026-85945 | 7.8 | CWE-416 | — | |
|
Windows
Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
|
CVE-2026-85933 | 7.8 | CWE-416 | — | |
|
Windows
Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.
|
CVE-2026-85927 | 7.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges locally.
|
CVE-2026-85915 | 7.8 | CWE-122 | — | |
|
Windows
Use after free in Windows StateRepository API allows an authorized attacker to elevate privileges locally.
|
CVE-2026-85911 | 7.8 | CWE-416 | — | |
|
Windows
Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
|
CVE-2026-85908 | 7.8 | CWE-122 | — | |
|
Windows
Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
|
CVE-2026-85906 | 7.8 | CWE-416 | — | |
|
Windows
Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
|
CVE-2026-85902 | 7.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
|
CVE-2026-85901 | 7.8 | CWE-122 | — | |
|
Windows
Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to elevate privileges …
|
CVE-2026-85884 | 7.8 | CWE-306 | — | |
|
Windows
Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to execute code locally.
|
CVE-2026-85874 | 7.8 | CWE-416 | — | |
|
Windows
Use after free in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally.
|
CVE-2026-85872 | 7.8 | CWE-416 | — | |
|
Windows
Heap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
|
CVE-2026-85871 | 7.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
|
CVE-2026-85869 | 7.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
|
CVE-2026-85867 | 7.8 | CWE-122 | — | |
|
Windows
Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.
|
CVE-2026-85863 | 7.8 | CWE-416 | — | |
|
Windows
Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.
|
CVE-2026-85861 | 7.8 | CWE-416 | — | |
|
Windows
Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to elevate privileges locally.
|
CVE-2026-85860 | 7.8 | CWE-416 | — | |
|
Windows
Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
|
CVE-2026-85858 | 7.8 | CWE-125 | — | |
|
Windows
Use after free in Windows SmartScreen allows an authorized attacker to elevate privileges locally.
|
CVE-2026-85851 | 7.8 | CWE-416 | — | |
|
Windows
Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges locally.
|
CVE-2026-85850 | 7.8 | CWE-763 | — | |
|
Windows
Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to elevate privileges…
|
CVE-2026-85849 | 7.8 | CWE-59 | — | |
|
Windows
Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.
|
CVE-2026-85848 | 7.8 | CWE-122 | — | |
|
Windows
Use of uninitialized resource in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.
|
CVE-2026-85843 | 7.8 | CWE-908 | — | |
|
Windows
Use of externally-controlled format string in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.
|
CVE-2026-85842 | 7.8 | CWE-134 | — |