Security News

주요 제품 취약점 (2,105건)

"Windows" 관련 CVE만 표시 중 · 필터 해제 ×

기술CVE심각도유형KEV등재일
Windows
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83940 7.0 CWE-416 —
Windows
Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83930 7.0 CWE-416 —
Windows
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-83924 7.0 CWE-416 —
Windows
Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVE-2026-83921 7.0 CWE-122 —
Windows
Use after free in Windows ALPC allows an authorized attacker to elevate privileges locally.
CVE-2026-83917 7.0 CWE-416 —
Windows
Double free in Windows Error Reporting allows an authorized attacker to execute code locally.
CVE-2026-83916 7.0 CWE-415 —
Windows
Use after free in Windows Diagnostic Policy Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83915 7.0 CWE-416 —
Windows
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
CVE-2026-83911 7.0 CWE-122 —
Windows
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
CVE-2026-83901 7.0 CWE-416 —
Windows
Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-83900 7.0 CWE-416 —
Windows
Improper privilege management in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-83899 7.0 CWE-362 —
Windows
Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83886 7.0 CWE-416 —
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Overlay Filter allows an authorized attacker t…
CVE-2026-83879 7.0 CWE-362 —
Windows
Heap-based buffer overflow in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.
CVE-2026-83871 7.0 CWE-122 —
Windows
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-83866 7.0 CWE-416 —
Windows
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.
CVE-2026-83853 7.0 CWE-416 —
Windows
Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-83852 7.0 CWE-416 —
Windows
Double free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
CVE-2026-83842 7.0 CWE-415 —
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K allows an authorized attacker to elevat…
CVE-2026-83841 7.0 CWE-362 —
Windows
Time-of-check time-of-use (toctou) race condition in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
CVE-2026-83839 7.0 CWE-367 —
Windows
Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
CVE-2026-83834 7.0 CWE-367 —
Windows
Heap-based buffer overflow in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-83827 7.0 CWE-122 —
Windows
Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to elevate privil…
CVE-2026-83793 7.0 CWE-59 —
Windows
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.
CVE-2026-83790 7.0 CWE-416 —
Windows
Use after free in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83785 7.0 CWE-416 —
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to ele…
CVE-2026-83775 7.0 CWE-122 —
Windows
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-83752 7.0 CWE-416 —
Windows
Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
CVE-2026-83751 7.0 CWE-416 —
Windows
Time-of-check time-of-use (toctou) race condition in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVE-2026-83750 7.0 CWE-122 —
Windows
Use after free in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
CVE-2026-83749 7.0 CWE-416 —
Windows
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.
CVE-2026-83740 7.0 CWE-416 —
Windows
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2026-83738 7.0 CWE-362 —
Windows
Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
CVE-2026-83724 7.0 CWE-122 —
Windows
Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally.
CVE-2026-83720 7.0 CWE-416 —
Windows
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-83718 7.0 CWE-416 —
Windows
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-83717 7.0 CWE-416 —
Windows
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83710 7.0 CWE-416 —
Windows
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-83708 7.0 CWE-121 —
Windows
Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally.
CVE-2026-83707 7.0 CWE-416 —
Windows
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-83702 7.0 CWE-416 —
Windows
Use after free in Windows Now Playing Session Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-83701 7.0 CWE-416 —
Windows
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-83696 7.0 CWE-416 —
Windows
Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-83694 7.0 CWE-125 —
Windows
Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVE-2026-83689 7.0 CWE-416 —
Windows
Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.
CVE-2026-83687 7.0 CWE-416 —
Windows
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
CVE-2026-83682 7.0 CWE-416 —
Windows
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-83680 7.0 CWE-122 —
Windows
Integer underflow (wrap or wraparound) in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-83676 7.0 CWE-122 —
Windows
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-83675 7.0 CWE-416 —
Windows
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83644 7.0 CWE-416 —
Windows
Use after free in Windows Smart Card allows an authorized attacker to elevate privileges locally.
CVE-2026-83584 7.0 CWE-416 —
Windows
Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83580 7.0 CWE-122 —
Windows
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVE-2026-83575 7.0 CWE-416 —
Windows
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVE-2026-83574 7.0 CWE-416 —
Windows
Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.
CVE-2026-83566 7.0 CWE-416 —
Windows
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVE-2026-83564 7.0 CWE-416 —
Windows
Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.
CVE-2026-83510 7.0 CWE-367 —
Windows
Untrusted search path in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.
CVE-2026-83509 7.0 CWE-426 —
Windows
Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.
CVE-2026-83505 7.0 CWE-367 —
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows NTFS allows an authorized attacker to elevate …
CVE-2026-81971 7.0 CWE-362 —