Security News

주요 제품 취약점 (3,434건)

기술CVE심각도유형KEV등재일
Windows
Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
CVE-2026-70023 7.8 CWE-416 —
Windows
Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.
CVE-2026-70015 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-70010 7.8 CWE-122 —
Windows
Integer overflow or wraparound in Windows IP Over USB Service allows an authorized attacker to elevate privileges locally.
CVE-2026-70008 7.8 CWE-190 —
Windows
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to execute code locally.
CVE-2026-69959 7.8 CWE-125 —
Windows
Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
CVE-2026-69957 7.8 CWE-126 —
Windows
Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
CVE-2026-69953 7.8 CWE-126 —
Windows
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
CVE-2026-69952 7.8 CWE-125 —
Windows
Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
CVE-2026-69950 7.8 CWE-126 —
Windows
Heap-based buffer overflow in Windows Client for NFS allows an authorized attacker to elevate privileges locally.
CVE-2026-69949 7.8 CWE-122 —
Windows
Buffer over-read in Windows Overlay Filter allows an authorized attacker to execute code locally.
CVE-2026-69942 7.8 CWE-126 —
Windows
Integer overflow or wraparound in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
CVE-2026-69934 7.8 CWE-20 —
Windows
Uncontrolled search path element in Windows AI allows an authorized attacker to elevate privileges locally.
CVE-2026-69923 7.8 CWE-427 —
Windows
Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
CVE-2026-69921 7.8 CWE-122 —
Windows
Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-69916 7.8 CWE-190 —
Windows
Heap-based buffer overflow in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally.
CVE-2026-69909 7.8 CWE-122 —
Windows
Improper handling of insufficient permissions or privileges in Windows Enterprise App Management allows an authorized attacker to elevate privileges …
CVE-2026-69907 7.8 CWE-280 —
Windows
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-69898 7.8 CWE-122 —
Windows
Buffer over-read in Windows GDI allows an authorized attacker to elevate privileges locally.
CVE-2026-69884 7.8 CWE-126 —
Windows
Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally.
CVE-2026-69882 7.8 CWE-426 —
Windows
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.
CVE-2026-69864 7.8 CWE-416 —
Windows
Untrusted pointer dereference in Windows Certificates allows an authorized attacker to elevate privileges locally.
CVE-2026-69850 7.8 CWE-822 —
Windows
Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-69844 7.8 CWE-125 —
Windows
Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally.
CVE-2026-69841 7.8 CWE-122 —
Windows
Numeric truncation error in Windows Kerberos allows an authorized attacker to elevate privileges locally.
CVE-2026-69822 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69801 7.8 CWE-122 —
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hello allows an authorized attacker to elevate…
CVE-2026-69799 7.8 CWE-362 —
Windows
Use after free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69798 7.8 CWE-416 —
Windows
Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to elevate privileges locally.
CVE-2026-69790 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69787 7.8 CWE-122 —
Windows
Untrusted search path in Windows Smart Card allows an authorized attacker to elevate privileges locally.
CVE-2026-69785 7.8 CWE-426 —
Windows
External control of file name or path in Windows Update allows an authorized attacker to elevate privileges locally.
CVE-2026-69783 7.8 CWE-73 —
Windows
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
CVE-2026-69758 7.8 CWE-122 —
Windows
Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69738 7.8 CWE-122 —
Windows
Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally.
CVE-2026-69733 7.8 CWE-426 —
Windows
Double free in Windows Hello allows an authorized attacker to elevate privileges locally.
CVE-2026-69725 7.8 CWE-415 —
Windows
Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
CVE-2026-69720 7.8 CWE-122 —
Windows
Improper neutralization of special elements used in a command ('command injection') in Windows Update allows an authorized attacker to elevate privil…
CVE-2026-69718 7.8 CWE-77 —
Windows
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
CVE-2026-69709 7.8 CWE-122 —
Windows
Integer overflow or wraparound in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
CVE-2026-69707 7.8 CWE-190 —
Windows
Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
CVE-2026-69691 7.8 CWE-122 —
Windows
Integer underflow (wrap or wraparound) in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
CVE-2026-69687 7.8 CWE-191 —
Windows
Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally.
CVE-2026-69685 7.8 CWE-122 —
Windows
Improper link resolution before file access ('link following') in Windows Update allows an authorized attacker to elevate privileges locally.
CVE-2026-69673 7.8 CWE-59 —
Windows
Improper verification of cryptographic signature in Windows Key Distribution Center allows an authorized attacker to elevate privileges locally.
CVE-2026-69650 7.8 CWE-347 —
Windows
Heap-based buffer overflow in Windows Update allows an authorized attacker to elevate privileges locally.
CVE-2026-69633 7.8 CWE-122 —
Windows
Absolute path traversal in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVE-2026-69612 7.8 CWE-36 —
Windows
Integer overflow or wraparound in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVE-2026-69608 7.8 CWE-190 —
Windows
Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69604 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69593 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
CVE-2026-69592 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69589 7.8 CWE-122 —
Windows
Incorrect type conversion or cast in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVE-2026-69585 7.8 CWE-704 —
Windows
Integer overflow or wraparound in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-69584 7.8 CWE-190 —
Windows
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69583 7.8 CWE-122 —
Windows
Buffer over-read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-69582 7.8 CWE-126 —
Windows
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69580 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
CVE-2026-69571 7.8 CWE-122 —
Windows
Out-of-bounds read in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-69561 7.8 CWE-125 —
Windows
Heap-based buffer overflow in Windows SMB Client allows an authorized attacker to elevate privileges locally.
CVE-2026-69544 7.8 CWE-122 —