Security News

주요 제품 취약점 (2,105건)

"Windows" 관련 CVE만 표시 중 · 필터 해제 ×

기술CVE심각도유형KEV등재일
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Background Intelligent Transfer Service (BITS)…
CVE-2026-88146 7.0 CWE-362 —
Windows
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-88141 7.0 CWE-416 —
Windows
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-88139 7.0 CWE-416 —
Windows
Use after free in Windows SMB Server allows an authorized attacker to elevate privileges locally.
CVE-2026-88127 7.0 CWE-416 —
Windows
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-88124 7.0 CWE-416 —
Windows
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
CVE-2026-88113 7.0 CWE-416 —
Windows
Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-88110 7.0 CWE-122 —
Windows
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-88107 7.0 CWE-362 —
Windows
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-88106 7.0 CWE-416 —
Windows
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
CVE-2026-88103 7.0 CWE-416 —
Windows
Untrusted pointer dereference in Windows Security Support Provider Interface allows an authorized attacker to elevate privileges locally.
CVE-2026-88098 7.0 CWE-822 —
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DCOM Server allows an authorized attacker to e…
CVE-2026-88096 7.0 CWE-362 —
Windows
Null pointer dereference in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
CVE-2026-88079 7.0 CWE-476 —
Windows
Null pointer dereference in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-88076 7.0 CWE-476 —
Windows
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-87715 7.0 CWE-416 —
Windows
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-87708 7.0 CWE-416 —
Windows
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-87704 7.0 CWE-416 —
Windows
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-87693 7.0 CWE-416 —
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to ele…
CVE-2026-85941 7.0 CWE-362 —
Windows
Use after free in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.
CVE-2026-85934 7.0 CWE-416 —
Windows
Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.
CVE-2026-85930 7.0 CWE-416 —
Windows
Time-of-check time-of-use (toctou) race condition in Windows BitLocker allows an authorized attacker to elevate privileges locally.
CVE-2026-85920 7.0 CWE-367 —
Windows
Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.
CVE-2026-85918 7.0 CWE-416 —
Windows
Use after free in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally.
CVE-2026-85914 7.0 CWE-416 —
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Clipboard User Service allows an authorized at…
CVE-2026-85912 7.0 CWE-362 —
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Device Association Service allows an authorize…
CVE-2026-85904 7.0 CWE-362 —
Windows
Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.
CVE-2026-85879 7.0 CWE-367 —
Windows
Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-85870 7.0 CWE-122 —
Windows
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-85868 7.0 CWE-416 —
Windows
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
CVE-2026-85855 7.0 CWE-416 —
Windows
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
CVE-2026-85854 7.0 CWE-416 —
Windows
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
CVE-2026-85853 7.0 CWE-125 —
Windows
Use after free in Windows Web Account Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-85846 7.0 CWE-416 —
Windows
Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
CVE-2026-85834 7.0 CWE-122 —
Windows
Out-of-bounds write in Windows Fast FAT Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-85826 7.0 CWE-787 —
Windows
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
CVE-2026-85825 7.0 CWE-362 —
Windows
Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally.
CVE-2026-85824 7.0 CWE-362 —
Windows
Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally.
CVE-2026-85823 7.0 CWE-416 —
Windows
Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally.
CVE-2026-85810 7.0 CWE-416 —
Windows
Use after free in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally.
CVE-2026-85803 7.0 CWE-416 —
Windows
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
CVE-2026-85802 7.0 CWE-416 —
Windows
Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally.
CVE-2026-85791 7.0 CWE-122 —
Windows
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-85372 7.0 CWE-416 —
Windows
Use after free in Windows Cash Drawer Protocol Provider allows an authorized attacker to elevate privileges locally.
CVE-2026-85367 7.0 CWE-416 —
Windows
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-85364 7.0 CWE-416 —
Windows
Release of invalid pointer or reference in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
CVE-2026-85362 7.0 CWE-763 —
Windows
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-85361 7.0 CWE-416 —
Windows
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-85360 7.0 CWE-416 —
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Phone Service allows an authorized attacker to…
CVE-2026-85357 7.0 CWE-362 —
Windows
Inclusion of functionality from untrusted control sphere in Windows Common Log File System Driver allows an authorized attacker to elevate privileges…
CVE-2026-85355 7.0 CWE-829 —
Windows
Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVE-2026-85354 7.0 CWE-416 —
Windows
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
CVE-2026-85352 7.0 CWE-416 —
Windows
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
CVE-2026-85342 7.0 CWE-416 —
Windows
Weak authentication in Windows Projected File System allows an authorized attacker to elevate privileges locally.
CVE-2026-85328 7.0 CWE-1390 —
Windows
In the WibuKey driver for Windows below Version 6.72, insufficient validation of user input when calculating the size of a kernel buffer could cause …
CVE-2026-84854 7.0 CWE-787 —
Windows
Use after free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.
CVE-2026-84020 7.0 CWE-416 —
Windows
Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
CVE-2026-84019 7.0 CWE-416 —
Windows
Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
CVE-2026-84018 7.0 CWE-367 —
Windows
Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
CVE-2026-84014 7.0 CWE-122 —
Windows
Improper link resolution before file access ('link following') in Windows Resilient File System (ReFS) Deduplication Service allows an authorized att…
CVE-2026-83999 7.0 CWE-59 —