Security News

주요 제품 취약점 (3,434건)

기술CVE심각도유형KEV등재일
Windows
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-72941 7.8 CWE-122 —
Windows
Improper validation of integrity check value in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-72929 7.8 CWE-354 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: dibs: loopback: validate offset and size in move_data() The loopback move_data(…
CVE-2026-72018 7.8 — —
Windows
Out-of-bounds write in Windows Spaceport.sys allows an authorized attacker to execute code locally.
CVE-2026-71345 7.8 CWE-787 —
Windows
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to execute code locally.
CVE-2026-71343 7.8 CWE-122 —
Windows
Stack-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally.
CVE-2026-71337 7.8 CWE-121 —
Windows
Heap-based buffer overflow in Windows NFS Portmapper allows an authorized attacker to elevate privileges locally.
CVE-2026-71334 7.8 CWE-122 —
Windows
Access of resource using incompatible type ('type confusion') in Windows Core Messaging allows an authorized attacker to elevate privileges locally.
CVE-2026-70584 7.8 CWE-843 —
Windows
Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally.
CVE-2026-70583 7.8 CWE-122 —
Windows
Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-70581 7.8 CWE-20 —
Windows
Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-70572 7.8 CWE-190 —
Windows
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
CVE-2026-70569 7.8 CWE-125 —
Windows
Null pointer dereference in Windows Schannel allows an authorized attacker to elevate privileges locally.
CVE-2026-70566 7.8 CWE-476 —
Windows
Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
CVE-2026-70564 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-70347 7.8 CWE-122 —
Windows
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-70346 7.8 CWE-121 —
Windows
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-70345 7.8 CWE-122 —
Windows
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-70344 7.8 CWE-121 —
Windows
Out-of-bounds write in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-70303 7.8 CWE-787 —
Windows
Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
CVE-2026-70289 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
CVE-2026-70286 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
CVE-2026-70285 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.
CVE-2026-70278 7.8 CWE-122 —
Windows
Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-70274 7.8 CWE-416 —
Windows
Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to execute code locally.
CVE-2026-70247 7.8 CWE-125 —
Windows
Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to eleva…
CVE-2026-70245 7.8 CWE-843 —
Windows
Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.
CVE-2026-70238 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-70233 7.8 CWE-122 —
Windows
Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to eleva…
CVE-2026-70225 7.8 CWE-843 —
Windows
Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally.
CVE-2026-70222 7.8 CWE-23 —
Windows
Insufficient granularity of access control in Windows StateRepository API allows an authorized attacker to elevate privileges locally.
CVE-2026-70218 7.8 CWE-285 —
Windows
Improper resolution of path equivalence in Windows Backup Engine allows an authorized attacker to elevate privileges locally.
CVE-2026-70184 7.8 CWE-41 —
Windows
Numeric truncation error in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVE-2026-70177 7.8 CWE-20 —
Windows
Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-70172 7.8 CWE-822 —
Windows
Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
CVE-2026-70151 7.8 CWE-416 —
Windows
Heap-based buffer overflow in Windows Network File System allows an authorized attacker to execute code locally.
CVE-2026-70143 7.8 CWE-122 —
Windows
Untrusted search path in Windows Update Service allows an authorized attacker to elevate privileges locally.
CVE-2026-70142 7.8 CWE-426 —
Windows
Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privileges locally.
CVE-2026-70139 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally.
CVE-2026-70138 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Portable Device File System Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-70132 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to elevate privileges locally.
CVE-2026-70131 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-70121 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
CVE-2026-70117 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-70114 7.8 CWE-122 —
Windows
Integer overflow or wraparound in Windows Client for NFS allows an authorized attacker to elevate privileges locally.
CVE-2026-70113 7.8 CWE-190 —
Windows
Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to execute code locally.
CVE-2026-70112 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
CVE-2026-70108 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-70106 7.8 CWE-122 —
Windows
Untrusted pointer dereference in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
CVE-2026-70104 7.8 CWE-822 —
Windows
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVE-2026-70103 7.8 CWE-122 —
Windows
Use after free in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
CVE-2026-70102 7.8 CWE-416 —
Windows
Heap-based buffer overflow in Windows Rich Text Edit Control allows an authorized attacker to elevate privileges locally.
CVE-2026-70093 7.8 CWE-122 —
Windows
Integer underflow (wrap or wraparound) in Windows Kerberos allows an authorized attacker to elevate privileges locally.
CVE-2026-70064 7.8 CWE-191 —
Windows
Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
CVE-2026-70060 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally.
CVE-2026-70059 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows NetBIOS allows an authorized attacker to elevate privileges locally.
CVE-2026-70054 7.8 CWE-122 —
Windows
Integer overflow or wraparound in Windows PowerShell allows an authorized attacker to execute code locally.
CVE-2026-70052 7.8 CWE-122 —
Windows
Access of resource using incompatible type ('type confusion') in Windows SmartScreen allows an authorized attacker to elevate privileges locally.
CVE-2026-70051 7.8 CWE-843 —
Windows
Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.
CVE-2026-70048 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.
CVE-2026-70027 7.8 CWE-122 —