Security News

주요 제품 취약점 (3,477건)

기술CVE심각도유형KEV등재일
Windows
Use after free in Windows Quality of Service (QoS) Packet Scheduler allows an authorized attacker to elevate privileges locally.
CVE-2026-87712 7.8 CWE-416 —
Windows
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-87711 7.8 CWE-121 —
Windows
Heap-based buffer overflow in Windows Fax and Scan Service allows an authorized attacker to elevate privileges locally.
CVE-2026-87707 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.
CVE-2026-87706 7.8 CWE-122 —
Windows
Integer overflow or wraparound in Windows Resource Management (MRM) allows an authorized attacker to elevate privileges locally.
CVE-2026-87702 7.8 CWE-190 —
Windows
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-87700 7.8 CWE-416 —
Microsoft Exchange
Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.
CVE-2026-87695 7.8 CWE-829 —
Windows
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-87694 7.8 CWE-416 —
Microsoft Exchange
Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.
CVE-2026-87692 7.8 CWE-502 —
Windows
Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally.
CVE-2026-87691 7.8 CWE-416 —
Windows
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-85945 7.8 CWE-416 —
Windows
Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
CVE-2026-85933 7.8 CWE-416 —
Windows
Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.
CVE-2026-85927 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-85915 7.8 CWE-122 —
Windows
Use after free in Windows StateRepository API allows an authorized attacker to elevate privileges locally.
CVE-2026-85911 7.8 CWE-416 —
Windows
Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
CVE-2026-85908 7.8 CWE-122 —
Windows
Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
CVE-2026-85906 7.8 CWE-416 —
Windows
Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
CVE-2026-85902 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
CVE-2026-85901 7.8 CWE-122 —
Windows
Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to elevate privileges …
CVE-2026-85884 7.8 CWE-306 —
Windows
Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to execute code locally.
CVE-2026-85874 7.8 CWE-416 —
Windows
Use after free in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-85872 7.8 CWE-416 —
Windows
Heap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
CVE-2026-85871 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVE-2026-85869 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-85867 7.8 CWE-122 —
Windows
Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.
CVE-2026-85863 7.8 CWE-416 —
Windows
Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.
CVE-2026-85861 7.8 CWE-416 —
Windows
Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-85860 7.8 CWE-416 —
Windows
Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
CVE-2026-85858 7.8 CWE-125 —
Windows
Use after free in Windows SmartScreen allows an authorized attacker to elevate privileges locally.
CVE-2026-85851 7.8 CWE-416 —
Windows
Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-85850 7.8 CWE-763 —
Windows
Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to elevate privileges…
CVE-2026-85849 7.8 CWE-59 —
Windows
Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.
CVE-2026-85848 7.8 CWE-122 —
Windows
Use of uninitialized resource in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.
CVE-2026-85843 7.8 CWE-908 —
Windows
Use of externally-controlled format string in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.
CVE-2026-85842 7.8 CWE-134 —
Windows
Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-85837 7.8 CWE-125 —
Windows
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-85836 7.8 CWE-416 —
Windows
Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
CVE-2026-85833 7.8 CWE-416 —
Windows
Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.
CVE-2026-85832 7.8 CWE-122 —
Windows
Double free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally.
CVE-2026-85829 7.8 CWE-415 —
Windows
Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally.
CVE-2026-85822 7.8 CWE-122 —
Windows
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
CVE-2026-85820 7.8 CWE-122 —
Windows
Integer overflow or wraparound in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-85807 7.8 CWE-190 —
Windows
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
CVE-2026-85804 7.8 CWE-416 —
Windows
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVE-2026-85800 7.8 CWE-122 —
Windows
Numeric truncation error in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-85796 7.8 CWE-121 —
Windows
Use after free in Windows Text Services Framework allows an authorized attacker to elevate privileges locally.
CVE-2026-85795 7.8 CWE-416 —
Windows
Access of resource using incompatible type ('type confusion') in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-85377 7.8 CWE-843 —
Windows
Weak authentication in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
CVE-2026-85376 7.8 CWE-1390 —
Windows
Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.
CVE-2026-85375 7.8 CWE-416 —
Windows
Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.
CVE-2026-85373 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
CVE-2026-85368 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-85366 7.8 CWE-122 —
Windows
Improper control of generation of code ('code injection') in Windows Performance Monitor allows an authorized attacker to elevate privileges locally.
CVE-2026-85359 7.8 CWE-94 —
Windows
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-85358 7.8 CWE-122 —
Windows
Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-85356 7.8 CWE-125 —
Windows
Improper link resolution before file access ('link following') in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
CVE-2026-85343 7.8 CWE-59 —
Windows
Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-85341 7.8 CWE-122 —
Windows
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
CVE-2026-85332 7.8 CWE-416 —
Windows
Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
CVE-2026-85327 7.8 CWE-122 —