Security News

주요 제품 취약점 (3,434건)

기술CVE심각도유형KEV등재일
Windows
Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
CVE-2026-83654 7.8 CWE-306 —
Windows
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-83652 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally.
CVE-2026-83650 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally.
CVE-2026-83641 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
CVE-2026-83640 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83639 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-83638 7.8 CWE-122 —
Windows
Out-of-bounds read in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
CVE-2026-83637 7.8 CWE-125 —
Windows
Double free in Windows BitLocker allows an authorized attacker to elevate privileges locally.
CVE-2026-83634 7.8 CWE-415 —
Windows
Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-83588 7.8 CWE-122 —
Windows
Untrusted pointer dereference in Windows Core Messaging allows an authorized attacker to elevate privileges locally.
CVE-2026-83587 7.8 CWE-822 —
Windows
Weak authentication in Windows Resilient File System (ReFS) Deduplication Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83586 7.8 CWE-1390 —
Windows
Use of externally-controlled format string in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-83585 7.8 CWE-134 —
Windows
Improper access control in Windows Geotag Broker allows an authorized attacker to elevate privileges locally.
CVE-2026-83583 7.8 CWE-862 —
Windows
Heap-based buffer overflow in Windows Smart Card allows an authorized attacker to elevate privileges locally.
CVE-2026-83579 7.8 CWE-122 —
Windows
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVE-2026-83570 7.8 CWE-416 —
Windows
Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
CVE-2026-83568 7.8 CWE-862 —
Windows
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-83567 7.8 CWE-125 —
Windows
Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-83514 7.8 CWE-122 —
Windows
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
CVE-2026-83513 7.8 CWE-122 —
Windows
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-83508 7.8 CWE-125 —
Windows
Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83499 7.8 CWE-1220 —
Windows
Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
CVE-2026-83498 7.8 CWE-822 —
Windows
Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally.
CVE-2026-81969 7.8 CWE-1220 —
Windows
Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally.
CVE-2026-81353 7.8 CWE-122 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: net: tun: bound receive headroom tun_get_user() uses tun->align both as skb hea…
CVE-2026-81000 7.8 — —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: af_unix: Unlink scc_entry in unix_del_edge(). Kyle Zeng reported that GC could …
CVE-2026-80521 7.8 — —
Windows
Heap-based buffer overflow in Windows Work Folders allows an authorized attacker to elevate privileges locally.
CVE-2026-80075 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Internet Information Services allows an authorized attacker to elevate privileges locally.
CVE-2026-78459 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-78448 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-78447 7.8 CWE-122 —
Windows
Improper privilege management in the log rotation mechanism of the Skylight Workspace Config Service in Amazon WorkSpaces for Windows before 2.6.2034…
CVE-2026-7791 7.8 CWE-367 —
Windows
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-77904 7.8 CWE-122 —
Windows
Release of invalid pointer or reference in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
CVE-2026-77500 7.8 CWE-763 —
Windows
Null pointer dereference in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-77489 7.8 CWE-476 —
Windows
External control of system or configuration setting in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.
CVE-2026-73027 7.8 CWE-15 —
Windows
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-73026 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Services for NFS ONCRPC XDR Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-73024 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-73021 7.8 CWE-20 —
Windows
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-73020 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-73015 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-73011 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-73007 7.8 CWE-122 —
Windows
Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-73002 7.8 CWE-190 —
Windows
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-73001 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-73000 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-72997 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-72996 7.8 CWE-20 —
Windows
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-72995 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-72994 7.8 CWE-20 —
Windows
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-72993 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-72992 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-72991 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-72990 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-72988 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally.
CVE-2026-72967 7.8 CWE-122 —
Windows
Use after free in Windows WebClient Service allows an authorized attacker to elevate privileges locally.
CVE-2026-72965 7.8 CWE-416 —
Windows
Heap-based buffer overflow in Windows Deployment Services allows an authorized attacker to execute code locally.
CVE-2026-72957 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-72953 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally.
CVE-2026-72944 7.8 CWE-122 —