주요 제품 취약점 (2,105건)

Use after free in Windows DNS allows an authorized attacker to execute code over a network.

Exposure of sensitive system information to an unauthorized control sphere in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attac…

Improper null termination in Windows Remote Desktop Protocol allows an unauthorized attacker to disclose information over a network.

Out-of-bounds read in Windows Mobile Broadband allows an unauthorized attacker to disclose information over a network.

Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine

Allocation of resources without limits or throttling in OpenSSH for Windows allows an unauthorized attacker to deny service over a network.

Missing release of memory after effective lifetime in Windows DNS allows an unauthorized attacker to deny service over a network.

Allocation of resources without limits or throttling in Windows SMB Server allows an unauthorized attacker to deny service over a network.

Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network.

Uncaught exception in Windows DNS allows an unauthorized attacker to deny service over a network.

Improper enforcement of behavioral workflow in Windows DNS allows an unauthorized attacker to deny service over a network.

Missing release of memory after effective lifetime in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

Out-of-bounds write in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to deny service over a network.

Use after free in Windows Cryptographic Services allows an authorized attacker to execute code over a network.

Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.

Use after free in Windows Virtual Trusted Platform Module allows an authorized attacker to elevate privileges locally.

Null pointer dereference in Windows IKE Extension allows an unauthorized attacker to deny service over a network.

Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine

Improper validation of consistency within input in Windows TCP/IP allows an unauthorized attacker to bypass a security feature over a network.

Out-of-bounds read in Windows Kerberos allows an unauthorized attacker to deny service over a network.

Null pointer dereference in Windows Kerberos allows an unauthorized attacker to deny service over a network.

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hello allows an authorized attacker to elevate…

Integer overflow or wraparound in Windows DNS allows an unauthorized attacker to deny service over a network.

Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network.

Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.

Missing release of memory after effective lifetime in Windows TCP/IP allows an unauthorized attacker to deny service over a network.

Null pointer dereference in Windows IKE Extension allows an unauthorized attacker to deny service over a network.

Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.

Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.

Out-of-bounds read in Windows Device Health Attestation (DHA) allows an unauthorized attacker to disclose information over a network.

Heap-based buffer overflow in Windows IKE Extension allows an authorized attacker to execute code over a network.

Out-of-bounds read in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to deny service over a network.

Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.

Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to deny service over a network.

Null pointer dereference in Windows iSCSI Target Service allows an unauthorized attacker to deny service over a network.

Use after free in Windows DNS allows an authorized attacker to execute code over a network.

Authentication bypass by spoofing in Windows Netlogon allows an unauthorized attacker to perform spoofing over an adjacent network.

A improper restriction of communication channel to intended endpoints vulnerability in Fortinet FortiSIEMWindowsAgent 7.4.0 through 7.4.1 may allow a…

Out-of-bounds Write vulnerability in Apache HTTP Server on Windows while processing paths with 8.3 names that may grow when expanded. This issue a…

Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over a network.

Improper verification of cryptographic signature in Windows RDP Client allows an unauthorized attacker to disclose information over a network.

Allocation of resources without limits or throttling in Windows Kernel allows an unauthorized attacker to deny service over a network.

Out-of-bounds read in Windows HTTP.sys allows an unauthorized attacker to deny service over a network.

Improper access control in Windows HTTP.sys allows an authorized attacker to elevate privileges over a network.

Untrusted pointer dereference in Windows Distributed File System (DFS) allows an unauthorized attacker to elevate privileges over a network.

Incorrect default permissions in Windows Server Update Service allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Windows IKE Extension allows an unauthorized attacker to disclose information over a network.

Deadlock in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.

Integer underflow (wrap or wraparound) in Windows Failover Cluster allows an unauthorized attacker to deny service over a network.

Improper access control in Windows Deployment Services allows an unauthorized attacker to execute code over an adjacent network.

Improper verification of source of a communication channel in Windows Hyper-V allows an unauthorized attacker to bypass a security feature over an ad…

Heap-based buffer overflow in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally.

Improper certificate validation in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an information disclosure via networ…

TeamViewer Full Client and Host prior to version 15.82 on Windows contain a TOCTOU race condition in the installer rollback mechanism. A local low-pr…

Improper privilege management in Windows Package Manager allows an authorized attacker to elevate privileges locally.

Claude Code is an agentic coding tool. In versions prior to 2.1.75 on Windows, Claude Code loaded the system-wide default configuration from C:\Progr…

Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally.