Security News

주요 제품 취약점 (3,477건)

기술CVE심각도유형KEV등재일
Windows
Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to eleva…
CVE-2026-70245 7.8 CWE-843 —
Windows
Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.
CVE-2026-70238 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-70233 7.8 CWE-122 —
Windows
Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to eleva…
CVE-2026-70225 7.8 CWE-843 —
Windows
Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally.
CVE-2026-70222 7.8 CWE-23 —
Windows
Insufficient granularity of access control in Windows StateRepository API allows an authorized attacker to elevate privileges locally.
CVE-2026-70218 7.8 CWE-285 —
Windows
Improper resolution of path equivalence in Windows Backup Engine allows an authorized attacker to elevate privileges locally.
CVE-2026-70184 7.8 CWE-41 —
Windows
Numeric truncation error in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVE-2026-70177 7.8 CWE-20 —
Windows
Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-70172 7.8 CWE-822 —
Windows
Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
CVE-2026-70151 7.8 CWE-416 —
Windows
Heap-based buffer overflow in Windows Network File System allows an authorized attacker to execute code locally.
CVE-2026-70143 7.8 CWE-122 —
Windows
Untrusted search path in Windows Update Service allows an authorized attacker to elevate privileges locally.
CVE-2026-70142 7.8 CWE-426 —
Windows
Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privileges locally.
CVE-2026-70139 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally.
CVE-2026-70138 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Portable Device File System Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-70132 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to elevate privileges locally.
CVE-2026-70131 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-70121 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
CVE-2026-70117 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-70114 7.8 CWE-122 —
Windows
Integer overflow or wraparound in Windows Client for NFS allows an authorized attacker to elevate privileges locally.
CVE-2026-70113 7.8 CWE-190 —
Windows
Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to execute code locally.
CVE-2026-70112 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
CVE-2026-70108 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-70106 7.8 CWE-122 —
Windows
Untrusted pointer dereference in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
CVE-2026-70104 7.8 CWE-822 —
Windows
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVE-2026-70103 7.8 CWE-122 —
Windows
Use after free in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
CVE-2026-70102 7.8 CWE-416 —
Windows
Heap-based buffer overflow in Windows Rich Text Edit Control allows an authorized attacker to elevate privileges locally.
CVE-2026-70093 7.8 CWE-122 —
Windows
Integer underflow (wrap or wraparound) in Windows Kerberos allows an authorized attacker to elevate privileges locally.
CVE-2026-70064 7.8 CWE-191 —
Windows
Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
CVE-2026-70060 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally.
CVE-2026-70059 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows NetBIOS allows an authorized attacker to elevate privileges locally.
CVE-2026-70054 7.8 CWE-122 —
Windows
Integer overflow or wraparound in Windows PowerShell allows an authorized attacker to execute code locally.
CVE-2026-70052 7.8 CWE-122 —
Windows
Access of resource using incompatible type ('type confusion') in Windows SmartScreen allows an authorized attacker to elevate privileges locally.
CVE-2026-70051 7.8 CWE-843 —
Windows
Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.
CVE-2026-70048 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.
CVE-2026-70027 7.8 CWE-122 —
Windows
Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
CVE-2026-70023 7.8 CWE-416 —
Windows
Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.
CVE-2026-70015 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-70010 7.8 CWE-122 —
Windows
Integer overflow or wraparound in Windows IP Over USB Service allows an authorized attacker to elevate privileges locally.
CVE-2026-70008 7.8 CWE-190 —
Windows
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to execute code locally.
CVE-2026-69959 7.8 CWE-125 —
Windows
Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
CVE-2026-69957 7.8 CWE-126 —
Windows
Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
CVE-2026-69953 7.8 CWE-126 —
Windows
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
CVE-2026-69952 7.8 CWE-125 —
Windows
Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
CVE-2026-69950 7.8 CWE-126 —
Windows
Heap-based buffer overflow in Windows Client for NFS allows an authorized attacker to elevate privileges locally.
CVE-2026-69949 7.8 CWE-122 —
Windows
Buffer over-read in Windows Overlay Filter allows an authorized attacker to execute code locally.
CVE-2026-69942 7.8 CWE-126 —
Windows
Integer overflow or wraparound in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
CVE-2026-69934 7.8 CWE-20 —
Windows
Uncontrolled search path element in Windows AI allows an authorized attacker to elevate privileges locally.
CVE-2026-69923 7.8 CWE-427 —
Windows
Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
CVE-2026-69921 7.8 CWE-122 —
Windows
Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-69916 7.8 CWE-190 —
Windows
Heap-based buffer overflow in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally.
CVE-2026-69909 7.8 CWE-122 —
Windows
Improper handling of insufficient permissions or privileges in Windows Enterprise App Management allows an authorized attacker to elevate privileges …
CVE-2026-69907 7.8 CWE-280 —
Windows
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-69898 7.8 CWE-122 —
Windows
Buffer over-read in Windows GDI allows an authorized attacker to elevate privileges locally.
CVE-2026-69884 7.8 CWE-126 —
Windows
Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally.
CVE-2026-69882 7.8 CWE-426 —
Windows
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.
CVE-2026-69864 7.8 CWE-416 —
Windows
Untrusted pointer dereference in Windows Certificates allows an authorized attacker to elevate privileges locally.
CVE-2026-69850 7.8 CWE-822 —
Windows
Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-69844 7.8 CWE-125 —
Windows
Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally.
CVE-2026-69841 7.8 CWE-122 —
Windows
Numeric truncation error in Windows Kerberos allows an authorized attacker to elevate privileges locally.
CVE-2026-69822 7.8 CWE-122 —