Security News

주요 제품 취약점 (2,105건)

"Windows" 관련 CVE만 표시 중 · 필터 해제 ×

기술CVE심각도유형KEV등재일
Windows
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVE-2026-70115 7.0 CWE-416 —
Windows
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVE-2026-70086 7.0 CWE-416 —
Windows
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
CVE-2026-70076 7.0 CWE-416 —
Windows
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
CVE-2026-70067 7.0 CWE-416 —
Windows
Use after free in Windows DHCP Server allows an authorized attacker to elevate privileges locally.
CVE-2026-70066 7.0 CWE-416 —
Windows
Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally.
CVE-2026-70056 7.0 CWE-416 —
Windows
Use after free in Windows Work Folders allows an authorized attacker to elevate privileges locally.
CVE-2026-70045 7.0 CWE-416 —
Windows
Use after free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
CVE-2026-70026 7.0 CWE-416 —
Windows
Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
CVE-2026-70021 7.0 CWE-416 —
Windows
Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privileges locally.
CVE-2026-69977 7.0 CWE-416 —
Windows
Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.
CVE-2026-69935 7.0 CWE-362 —
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Storage allows an authorized attacker to eleva…
CVE-2026-69931 7.0 CWE-362 —
Windows
Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-69915 7.0 CWE-416 —
Windows
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVE-2026-69911 7.0 CWE-416 —
Windows
Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVE-2026-69896 7.0 CWE-416 —
Windows
Use after free in Windows Media allows an authorized attacker to elevate privileges locally.
CVE-2026-69891 7.0 CWE-416 —
Windows
Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69889 7.0 CWE-416 —
Windows
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69866 7.0 CWE-416 —
Windows
Time-of-check time-of-use (toctou) race condition in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privilege…
CVE-2026-69859 7.0 CWE-191 —
Windows
Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.
CVE-2026-69856 7.0 CWE-362 —
Windows
Use after free in Windows Certificates allows an authorized attacker to elevate privileges locally.
CVE-2026-69840 7.0 CWE-416 —
Windows
Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
CVE-2026-69838 7.0 CWE-416 —
Windows
Use after free in Windows ALPC allows an authorized attacker to elevate privileges locally.
CVE-2026-69834 7.0 CWE-416 —
Windows
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-69818 7.0 CWE-416 —
Windows
Use after free in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-69817 7.0 CWE-416 —
Windows
Use after free in Windows Accounts Control allows an authorized attacker to elevate privileges locally.
CVE-2026-69816 7.0 CWE-416 —
Windows
Use after free in Windows Credential Providers allows an authorized attacker to elevate privileges locally.
CVE-2026-69814 7.0 CWE-416 —
Windows
Null pointer dereference in Windows Clipboard Server allows an authorized attacker to elevate privileges locally.
CVE-2026-69795 7.0 CWE-476 —
Windows
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69791 7.0 CWE-416 —
Windows
Time-of-check time-of-use (toctou) race condition in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-69779 7.0 CWE-367 —
Windows
Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.
CVE-2026-69766 7.0 CWE-362 —
Windows
Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.
CVE-2026-69763 7.0 CWE-362 —
Windows
Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69743 7.0 CWE-416 —
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Credential Manager allows an authorized attack…
CVE-2026-69736 7.0 CWE-362 —
Windows
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69735 7.0 CWE-416 —
Windows
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69711 7.0 CWE-416 —
Windows
Use after free in Windows Web Platform Storage allows an authorized attacker to elevate privileges locally.
CVE-2026-69708 7.0 CWE-416 —
Windows
Deserialization of untrusted data in Windows IP Address Management (IPAM) Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69694 7.0 CWE-502 —
Windows
Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges locally.
CVE-2026-69693 7.0 CWE-416 —
Windows
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69692 7.0 CWE-416 —
Windows
Use after free in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69682 7.0 CWE-362 —
Windows
Use after free in Windows Accounts Control allows an authorized attacker to elevate privileges locally.
CVE-2026-69654 7.0 CWE-416 —
Windows
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-69652 7.0 CWE-416 —
Windows
Use after free in Windows Notification allows an authorized attacker to elevate privileges locally.
CVE-2026-69648 7.0 CWE-416 —
Windows
Use after free in Windows Message Queuing allows an authorized attacker to elevate privileges locally.
CVE-2026-69645 7.0 CWE-416 —
Windows
Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-69630 7.0 CWE-125 —
Windows
Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69621 7.0 CWE-122 —
Windows
Out-of-bounds read in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.
CVE-2026-69617 7.0 CWE-125 —
Windows
Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.
CVE-2026-69613 7.0 CWE-416 —
Windows
Buffer over-read in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-69610 7.0 CWE-126 —
Windows
Use after free in Windows Shell allows an authorized attacker to elevate privileges locally.
CVE-2026-69606 7.0 CWE-416 —
Windows
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVE-2026-69600 7.0 CWE-416 —
Windows
Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69596 7.0 CWE-416 —
Windows
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69581 7.0 CWE-362 —
Windows
Numeric truncation error in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-69578 7.0 CWE-122 —
Windows
Use after free in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.
CVE-2026-69575 7.0 CWE-416 —
Windows
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69574 7.0 CWE-416 —
Windows
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
CVE-2026-69573 7.0 CWE-416 —
Windows
Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-69567 7.0 CWE-416 —
Windows
Heap-based buffer overflow in Windows Online Certificate Status Protocol (OCSP) allows an authorized attacker to elevate privileges locally.
CVE-2026-69564 7.0 CWE-122 —