Security News

주요 제품 취약점 (3,434건)

기술CVE심각도유형KEV등재일
Windows
Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
CVE-2026-83912 7.8 CWE-416 —
Windows
Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
CVE-2026-83903 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
CVE-2026-83902 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
CVE-2026-83896 7.8 CWE-122 —
Windows
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-83883 7.8 CWE-416 —
Windows
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-83882 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally.
CVE-2026-83881 7.8 CWE-122 —
Windows
Use after free in Windows Shell allows an authorized attacker to elevate privileges locally.
CVE-2026-83876 7.8 CWE-416 —
Windows
Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally.
CVE-2026-83873 7.8 CWE-23 —
Windows
Incorrect conversion between numeric types in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
CVE-2026-83872 7.8 CWE-681 —
Windows
Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
CVE-2026-83867 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally.
CVE-2026-83861 7.8 CWE-122 —
Windows
Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-83859 7.8 CWE-416 —
Windows
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
CVE-2026-83857 7.8 CWE-121 —
Windows
Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVE-2026-83850 7.8 CWE-122 —
Windows
Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83848 7.8 CWE-822 —
Windows
Weak authentication in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVE-2026-83840 7.8 CWE-1390 —
Windows
Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
CVE-2026-83837 7.8 CWE-441 —
Windows
Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code locally.
CVE-2026-83836 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-83833 7.8 CWE-122 —
Windows
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
CVE-2026-83832 7.8 CWE-125 —
Windows
Heap-based buffer overflow in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83830 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVE-2026-83829 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
CVE-2026-83828 7.8 CWE-122 —
Windows
Untrusted pointer dereference in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVE-2026-83826 7.8 CWE-822 —
Windows
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-83796 7.8 CWE-416 —
Windows
Incorrect authorization in Windows Device Install Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83792 7.8 CWE-863 —
Windows
Improper authorization in Windows Virtual Input allows an authorized attacker to elevate privileges locally.
CVE-2026-83791 7.8 CWE-283 —
Windows
Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
CVE-2026-83783 7.8 CWE-122 —
Windows
Improper null termination in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83781 7.8 CWE-170 —
Windows
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-83779 7.8 CWE-122 —
OpenSSH
Use after free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.
CVE-2026-83769 7.8 CWE-416 —
Windows
Use after free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.
CVE-2026-83769 7.8 CWE-416 —
Windows
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-83768 7.8 CWE-122 —
Windows
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-83767 7.8 CWE-121 —
Windows
Access of resource using incompatible type ('type confusion') in Windows Input System allows an authorized attacker to elevate privileges locally.
CVE-2026-83763 7.8 CWE-843 —
Windows
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-83762 7.8 CWE-416 —
Windows
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
CVE-2026-83761 7.8 CWE-416 —
Windows
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to execute code locally.
CVE-2026-83758 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-83757 7.8 CWE-122 —
Windows
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
CVE-2026-83756 7.8 CWE-416 —
Windows
Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally.
CVE-2026-83753 7.8 CWE-122 —
Windows
Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-83735 7.8 CWE-763 —
Windows
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-83732 7.8 CWE-416 —
Windows
Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
CVE-2026-83727 7.8 CWE-126 —
Windows
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
CVE-2026-83726 7.8 CWE-416 —
Windows
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-83721 7.8 CWE-416 —
Windows
Out-of-bounds write in Windows NTFS allows an authorized attacker to execute code locally.
CVE-2026-83712 7.8 CWE-787 —
Windows
Heap-based buffer overflow in Windows NTLM allows an authorized attacker to elevate privileges locally.
CVE-2026-83709 7.8 CWE-122 —
Windows
Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privile…
CVE-2026-83704 7.8 CWE-59 —
Windows
Use after free in Windows Now Playing Session Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-83700 7.8 CWE-416 —
Windows
Stack-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83699 7.8 CWE-121 —
Windows
Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83698 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-83692 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to elevate privileges locally.
CVE-2026-83691 7.8 CWE-122 —
Windows
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-83690 7.8 CWE-416 —
Windows
Use after free in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83679 7.8 CWE-416 —
Windows
Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
CVE-2026-83678 7.8 CWE-122 —
Windows
Use of uninitialized resource in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVE-2026-83669 7.8 CWE-908 —
Windows
Improper link resolution before file access ('link following') in Windows User Profile Service allows an authorized attacker to elevate privileges lo…
CVE-2026-83659 7.8 CWE-59 —