Security News

주요 제품 취약점 (3,434건)

기술CVE심각도유형KEV등재일
Windows
Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally.
CVE-2026-66804 7.8 CWE-284 —
Windows
Heap-based buffer overflow in Windows Key Guard allows an authorized attacker to elevate privileges locally.
CVE-2026-66799 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Storage Port Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-65814 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally.
CVE-2026-65790 7.8 CWE-122 —
Windows
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-65775 7.8 CWE-416 —
Windows
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-65774 7.8 CWE-122 —
Windows
Improper access control in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-65773 7.8 CWE-284 —
Windows
Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate privileges locally.
CVE-2026-65672 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate privileges locally.
CVE-2026-65671 7.8 CWE-122 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Prevent UAF caused by non-leader exec() race Wongi and Jungwo…
CVE-2026-64560 7.8 CWE-362 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate lcns_follow in log_replay conversion log_replay() converts D…
CVE-2026-64533 7.8 — —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: bound NTFS_DE view.data_off in UpdateRecordData{Root,Allocation} In d…
CVE-2026-64532 7.8 — —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: ipv4: igmp: remove multicast group from hash table on device destruction When a…
CVE-2026-64423 7.8 CWE-416 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: proc: protect ptrace_may_access() with exec_update_lock (FD links) proc_pid_get…
CVE-2026-64375 7.8 CWE-362 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: i2c: core: fix adapter deregistration race Adapters can be looked up by their i…
CVE-2026-64279 7.8 CWE-362 —
Windows
Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
CVE-2026-62894 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows GDI+ allows an authorized attacker to execute code locally.
CVE-2026-62890 7.8 CWE-122 —
Windows
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
CVE-2026-62888 7.8 CWE-416 —
Windows
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-62885 7.8 CWE-122 —
Windows
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-62880 7.8 CWE-125 —
Windows
Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-62877 7.8 CWE-121 —
Windows
Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-62876 7.8 CWE-125 —
Windows
Improper link resolution before file access ('link following') in Windows User Profile Service allows an authorized attacker to elevate privileges lo…
CVE-2026-62832 7.8 CWE-59 —
Windows
Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.
CVE-2026-62812 7.8 CWE-59 —
Windows
Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
CVE-2026-62811 7.8 CWE-122 —
Windows
Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.
CVE-2026-62807 7.8 CWE-59 —
Windows
Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.
CVE-2026-62803 7.8 CWE-59 —
Windows
Heap-based buffer overflow in Windows SMB Client allows an authorized attacker to elevate privileges locally.
CVE-2026-62799 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-62797 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-62783 7.8 CWE-122 —
Windows
Use after free in Windows Schannel allows an authorized attacker to elevate privileges locally.
CVE-2026-62779 7.8 CWE-416 —
Windows
Missing authentication for critical function in Windows License Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-62777 7.8 CWE-306 —
Windows
Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.
CVE-2026-62776 7.8 CWE-59 —
Windows
Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.
CVE-2026-62772 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-62771 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Shell allows an authorized attacker to elevate privileges locally.
CVE-2026-62770 7.8 CWE-122 —
Windows
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-62768 7.8 CWE-121 —
Windows
Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.
CVE-2026-62761 7.8 CWE-59 —
Windows
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-62758 7.8 CWE-122 —
Windows
Stack-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges locally.
CVE-2026-62755 7.8 CWE-121 —
Windows
Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally.
CVE-2026-62754 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally.
CVE-2026-62752 7.8 CWE-122 —
Windows
Integer overflow or wraparound in Windows Projected File System allows an authorized attacker to elevate privileges locally.
CVE-2026-62751 7.8 CWE-190 —
Windows
Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
CVE-2026-62747 7.8 CWE-122 —
Windows
Integer underflow (wrap or wraparound) in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
CVE-2026-62741 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
CVE-2026-62739 7.8 CWE-122 —
Windows
Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-62737 7.8 CWE-822 —
Windows
Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges locally.
CVE-2026-62736 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
CVE-2026-62735 7.8 CWE-122 —
Windows
Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-62733 7.8 CWE-125 —
Windows
Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
CVE-2026-62732 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Brokering File System allows an authorized attacker to elevate privileges locally.
CVE-2026-62722 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally.
CVE-2026-62719 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally.
CVE-2026-62717 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-62713 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-62712 7.8 CWE-122 —
Windows
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-62711 7.8 CWE-416 —
Windows
Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
CVE-2026-62710 7.8 CWE-122 —
Windows
Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
CVE-2026-62707 7.8 CWE-416 —
Windows
Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
CVE-2026-62701 7.8 CWE-416 —