Security News

주요 제품 취약점 (3,477건)

기술CVE심각도유형KEV등재일
Windows
Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to elevate privileges locally.
CVE-2026-69424 7.8 CWE-122 —
Windows
Integer underflow (wrap or wraparound) in Windows Kernel Mode Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-69421 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows VOLSNAP.SYS allows an authorized attacker to elevate privileges locally.
CVE-2026-69420 7.8 CWE-122 —
Windows
Use after free in Windows Shell allows an authorized attacker to elevate privileges locally.
CVE-2026-69392 7.8 CWE-416 —
Windows
Stack-based buffer overflow in Windows Broker Infrastructure Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69391 7.8 CWE-121 —
Windows
Heap-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally.
CVE-2026-69389 7.8 CWE-122 —
Windows
Missing authorization in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
CVE-2026-69377 7.8 CWE-862 —
Windows
Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
CVE-2026-69368 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVE-2026-69354 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69352 7.8 CWE-20 —
Windows
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-69348 7.8 CWE-122 —
Windows
Untrusted search path in Windows Storage allows an authorized attacker to elevate privileges locally.
CVE-2026-69328 7.8 CWE-426 —
Windows
Access of resource using incompatible type ('type confusion') in Windows Performance Monitor allows an authorized attacker to elevate privileges loca…
CVE-2026-69324 7.8 CWE-125 —
Windows
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69323 7.8 CWE-122 —
Windows
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-69312 7.8 CWE-125 —
Windows
Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
CVE-2026-69307 7.8 CWE-122 —
Windows
Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69298 7.8 CWE-190 —
Windows
Out-of-bounds read in Windows USB Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-69295 7.8 CWE-20 —
Windows
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69293 7.8 CWE-20 —
Windows
Stack-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.
CVE-2026-69290 7.8 CWE-121 —
Windows
Improper link resolution before file access ('link following') in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges loc…
CVE-2026-69289 7.8 CWE-59 —
Windows
Heap-based buffer overflow in Windows DCOM Server allows an authorized attacker to elevate privileges locally.
CVE-2026-69284 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-69283 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
CVE-2026-69270 7.8 CWE-20 —
Windows
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-69265 7.8 CWE-125 —
Windows
Absolute path traversal in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVE-2026-68896 7.8 CWE-36 —
Windows
Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to execute code locally.
CVE-2026-68877 7.8 CWE-122 —
Windows
Buffer over-read in Windows NTFS allows an authorized attacker to execute code locally.
CVE-2026-68875 7.8 CWE-126 —
Windows
Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
CVE-2026-68848 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
CVE-2026-68845 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to execute code locally.
CVE-2026-68844 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-68841 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows kernel32.dll allows an authorized attacker to elevate privileges locally.
CVE-2026-68836 7.8 CWE-122 —
Windows
Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-68832 7.8 CWE-190 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: pppoe: reload header pointer after dev_hard_header() pppoe_sendmsg() saves a po…
CVE-2026-68121 7.8 — —
Windows
Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally.
CVE-2026-66804 7.8 CWE-284 —
Windows
Heap-based buffer overflow in Windows Key Guard allows an authorized attacker to elevate privileges locally.
CVE-2026-66799 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Storage Port Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-65814 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally.
CVE-2026-65790 7.8 CWE-122 —
Windows
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-65775 7.8 CWE-416 —
Windows
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-65774 7.8 CWE-122 —
Windows
Improper access control in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-65773 7.8 CWE-284 —
Windows
Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate privileges locally.
CVE-2026-65672 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate privileges locally.
CVE-2026-65671 7.8 CWE-122 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Prevent UAF caused by non-leader exec() race Wongi and Jungwo…
CVE-2026-64560 7.8 CWE-362 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate lcns_follow in log_replay conversion log_replay() converts D…
CVE-2026-64533 7.8 — —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: bound NTFS_DE view.data_off in UpdateRecordData{Root,Allocation} In d…
CVE-2026-64532 7.8 — —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: ipv4: igmp: remove multicast group from hash table on device destruction When a…
CVE-2026-64423 7.8 CWE-416 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: proc: protect ptrace_may_access() with exec_update_lock (FD links) proc_pid_get…
CVE-2026-64375 7.8 CWE-362 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: i2c: core: fix adapter deregistration race Adapters can be looked up by their i…
CVE-2026-64279 7.8 CWE-362 —
Windows
Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
CVE-2026-62894 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows GDI+ allows an authorized attacker to execute code locally.
CVE-2026-62890 7.8 CWE-122 —
Windows
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
CVE-2026-62888 7.8 CWE-416 —
Windows
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-62885 7.8 CWE-122 —
Windows
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-62880 7.8 CWE-125 —
Windows
Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-62877 7.8 CWE-121 —
Windows
Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-62876 7.8 CWE-125 —
Windows
Improper link resolution before file access ('link following') in Windows User Profile Service allows an authorized attacker to elevate privileges lo…
CVE-2026-62832 7.8 CWE-59 —
Windows
Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.
CVE-2026-62812 7.8 CWE-59 —
Windows
Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
CVE-2026-62811 7.8 CWE-122 —