Security News

주요 제품 취약점 (2,105건)

"Windows" 관련 CVE만 표시 중 · 필터 해제 ×

기술CVE심각도유형KEV등재일
Windows
Improper path validation in the local IPC service of TeamViewer Full Client and Host on Windows, Linux, and macOS prior to version 15.82 allows a loc…
CVE-2026-19743 7.8 CWE-22 —
Windows
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVE-2026-108136 7.8 CWE-416 —
Windows
Release of invalid pointer or reference in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
CVE-2026-108133 7.8 CWE-763 —
Windows
Heap-based buffer overflow in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
CVE-2026-108130 7.8 CWE-122 —
Windows
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
CVE-2026-105004 7.8 CWE-125 —
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Credential Providers allows an authorized atta…
CVE-2026-103568 7.8 CWE-122 —
Windows
Out-of-bounds read in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-103553 7.8 CWE-125 —
Windows
Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally.
CVE-2026-102227 7.8 CWE-122 —
Windows
Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally.
CVE-2026-102220 7.8 CWE-416 —
Windows
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
CVE-2026-102218 7.8 CWE-122 —
Windows
Access of resource using incompatible type ('type confusion') in Windows StateRepository API allows an authorized attacker to elevate privileges loca…
CVE-2026-102216 7.8 CWE-843 —
Windows
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
CVE-2026-102215 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
CVE-2026-102205 7.8 CWE-122 —
Windows
Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.
CVE-2026-102202 7.8 CWE-59 —
Windows
Use after free in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.
CVE-2026-102201 7.8 CWE-416 —
Windows
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
CVE-2026-102196 7.8 CWE-416 —
Windows
Improper privilege management in Windows Group Policy allows an authorized attacker to elevate privileges locally.
CVE-2026-100217 7.8 CWE-862 —
Windows
Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app allow a local user to escalate their privileges to N…
CVE-2026-0251 7.8 CWE-426 —
Windows
Double free in Windows Internet Information Services allows an unauthorized attacker to deny service over a network.
CVE-2026-97830 7.5 CWE-415 —
Windows
Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny service over a network.
CVE-2026-96945 7.5 CWE-248 —
Windows
Missing reference to active allocated resource in Windows SMB Server allows an unauthorized attacker to deny service over a network.
CVE-2026-96325 7.5 CWE-771 —
Windows
Stack-based buffer overflow in Windows Host Guardian Service allows an unauthorized attacker to deny service over a network.
CVE-2026-96248 7.5 CWE-121 —
Windows
Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
CVE-2026-96245 7.5 CWE-125 —
Windows
Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.
CVE-2026-96071 7.5 CWE-122 —
Windows
Heap-based buffer overflow in Windows Storage Spaces Controller allows an unauthorized attacker to deny service over a network.
CVE-2026-87716 7.5 CWE-122 —
Windows
Use after free in Windows Bluetooth Port Driver allows an unauthorized attacker to elevate privileges over an adjacent network.
CVE-2026-87713 7.5 CWE-416 —
Windows
Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.
CVE-2026-85808 7.5 CWE-125 —
Windows
Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose information over a network.
CVE-2026-85353 7.5 CWE-125 —
Windows
Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network.
CVE-2026-85334 7.5 CWE-125 —
Windows
Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a netw…
CVE-2026-85322 7.5 CWE-908 —
Windows
Null pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.
CVE-2026-84017 7.5 CWE-476 —
Windows
Out-of-bounds read in Windows Key Distribution Center allows an unauthorized attacker to deny service over a network.
CVE-2026-84001 7.5 CWE-125 —
Windows
Out-of-bounds read in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to deny service over a network.
CVE-2026-83989 7.5 CWE-125 —
Windows
Stack-based buffer overflow in Windows GDI allows an unauthorized attacker to deny service over a network.
CVE-2026-83860 7.5 CWE-121 —
Windows
Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network.
CVE-2026-83856 7.5 CWE-125 —
Windows
Integer underflow (wrap or wraparound) in Windows WLAN Service allows an unauthorized attacker to deny service over a network.
CVE-2026-83855 7.5 CWE-191 —
Windows
Out-of-bounds read in Windows Internet Key Exchange (IKE) Protocol allows an unauthorized attacker to deny service over a network.
CVE-2026-83843 7.5 CWE-125 —
Windows
Heap-based buffer overflow in Windows IKE Extension allows an unauthorized attacker to deny service over a network.
CVE-2026-83795 7.5 CWE-122 —
Windows
Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
CVE-2026-83754 7.5 CWE-122 —
Windows
Use after free in Windows Bluetooth Service allows an unauthorized attacker to execute code over an adjacent network.
CVE-2026-83739 7.5 CWE-416 —
Windows
Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over a network.
CVE-2026-83677 7.5 CWE-401 —
Windows
Null pointer dereference in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
CVE-2026-83665 7.5 CWE-476 —
Windows
Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over a network.
CVE-2026-83516 7.5 CWE-125 —
Windows
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
CVE-2026-77895 7.5 CWE-125 —
Windows
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
CVE-2026-77893 7.5 CWE-125 —
Windows
Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
CVE-2026-77890 7.5 CWE-843 —
Windows
Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
CVE-2026-77889 7.5 CWE-843 —
Windows
Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
CVE-2026-77888 7.5 CWE-843 —
Windows
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
CVE-2026-77886 7.5 CWE-125 —
Windows
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
CVE-2026-77502 7.5 CWE-125 —
Windows
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
CVE-2026-77501 7.5 CWE-125 —
Windows
Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
CVE-2026-77499 7.5 CWE-843 —
Windows
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
CVE-2026-77498 7.5 CWE-125 —
Windows
Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
CVE-2026-77494 7.5 CWE-843 —
Windows
Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to execute code locally.
CVE-2026-73017 7.5 CWE-122 —
Windows
Use of uninitialized resource in Windows Failover Cluster allows an unauthorized attacker to disclose information over a network.
CVE-2026-72989 7.5 CWE-908 —
Windows
Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network.
CVE-2026-72954 7.5 CWE-416 —
Windows
Null pointer dereference in Windows SMB Server Network Transport Driver (srvnet.sys) allows an unauthorized attacker to deny service over a network.
CVE-2026-72949 7.5 CWE-476 —
Windows
Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network.
CVE-2026-72943 7.5 CWE-416 —
Windows
Buffer over-read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network.
CVE-2026-72932 7.5 CWE-126 —