주요 제품 취약점 (3,434건)
Windows
infra
2105건
KEV 293 · 최근 2026-10-13
Linux 커널
infra
908건
KEV 31 · 최근 2026-10-28
Cisco IOS
infra
58건
KEV 44 · 최근 2026-07-13
Ivanti
infra
45건
KEV 36 · 최근 2026-10-13
Microsoft Exchange
infra
43건
KEV 20 · 최근 2026-05-15
Fortinet
infra
41건
KEV 22 · 최근 2026-10-16
Apache HTTP
infra
33건
KEV 11 · 최근 2026-08-24
Citrix NetScaler
infra
31건
KEV 16 · 최근 2026-10-04
Apache Tomcat
infra
30건
KEV 8 · 최근 2026-08-04
OpenSSH
infra
30건
KEV 3 · 최근 2025-10-02
Node.js
infra
24건
KEV 2 · 최근 2025-01-14
nginx
infra
16건
KEV 0
Palo Alto PAN-OS
infra
15건
KEV 14 · 최근 2026-10-14
VMware vCenter
infra
13건
KEV 12 · 최근 2026-08-18
Atlassian Confluence
infra
10건
KEV 10 · 최근 2026-10-15
Redis
infra
9건
KEV 3 · 최근 2026-05-26
curl
infra
8건
KEV 1 · 최근 2023-05-12
OpenSSL
infra
8건
KEV 1 · 최근 2022-05-04
VMware ESXi
infra
7건
KEV 7 · 최근 2025-03-04
| 기술 | CVE | 심각도 | 유형 | KEV | 등재일 |
|---|---|---|---|---|---|
|
Windows
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
|
CVE-2026-62700 | 7.8 | CWE-122 | — | |
|
Windows
Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
|
CVE-2026-62697 | 7.8 | CWE-416 | — | |
|
Windows
Integer underflow (wrap or wraparound) in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
|
CVE-2026-62696 | 7.8 | CWE-191 | — | |
|
Windows
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
|
CVE-2026-62695 | 7.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.
|
CVE-2026-62692 | 7.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
|
CVE-2026-62688 | 7.8 | CWE-122 | — | |
|
Windows
Integer overflow or wraparound in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
|
CVE-2026-61937 | 7.8 | CWE-122 | — | |
|
Windows
Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
|
CVE-2026-61934 | 7.8 | CWE-416 | — | |
|
Windows
Access of resource using incompatible type ('type confusion') in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
|
CVE-2026-61932 | 7.8 | CWE-122 | — | |
|
Windows
Use after free in Windows Perception Simulation Service allows an authorized attacker to elevate privileges locally.
|
CVE-2026-61931 | 7.8 | CWE-416 | — | |
|
Windows
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
|
CVE-2026-61930 | 7.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.
|
CVE-2026-61926 | 7.8 | CWE-122 | — | |
|
Windows
Incorrect authorization in Windows Installer allows an authorized attacker to elevate privileges locally.
|
CVE-2026-61925 | 7.8 | CWE-863 | — | |
|
Windows
Heap-based buffer overflow in Windows Display Enhancement Service allows an authorized attacker to elevate privileges locally.
|
CVE-2026-61923 | 7.8 | CWE-122 | — | |
|
Windows
Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.
|
CVE-2026-61367 | 7.8 | CWE-306 | — | |
|
Windows
Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.
|
CVE-2026-61365 | 7.8 | CWE-306 | — | |
|
Windows
Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.
|
CVE-2026-61364 | 7.8 | CWE-306 | — | |
|
Windows
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
|
CVE-2026-61359 | 7.8 | CWE-122 | — | |
|
Windows
Improper link resolution before file access ('link following') in Windows Accessibility Infrastructure (ATBroker.exe) allows an authorized attacker t…
|
CVE-2026-61358 | 7.8 | CWE-59 | — | |
|
Windows
Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.
|
CVE-2026-61356 | 7.8 | CWE-306 | — | |
|
Windows
Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.
|
CVE-2026-61355 | 7.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
|
CVE-2026-61353 | 7.8 | CWE-122 | — | |
|
Windows
Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges locally.
|
CVE-2026-61349 | 7.8 | CWE-362 | — | |
|
Windows
Integer overflow or wraparound in Windows Installer allows an authorized attacker to elevate privileges locally.
|
CVE-2026-59127 | 7.8 | CWE-190 | — | |
|
Windows
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
|
CVE-2026-58613 | 7.8 | CWE-416 | — | |
|
Windows
Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to elevate privileges locally.
|
CVE-2026-58600 | 7.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally.
|
CVE-2026-58599 | 7.8 | CWE-122 | — | |
|
Windows
Use after free in Windows Server allows an authorized attacker to elevate privileges locally.
|
CVE-2026-56177 | 7.8 | CWE-416 | — | |
|
Windows
Untrusted search path in Windows Narrator Braille allows an authorized attacker to elevate privileges locally.
|
CVE-2026-56174 | 7.8 | CWE-426 | — | |
|
Windows
Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally.
|
CVE-2026-56172 | 7.8 | CWE-416 | — | |
|
Windows
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code locally.
|
CVE-2026-54984 | 7.8 | CWE-122 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
i2c: core: fix adapter registration race
Adapters can be looked up based on the…
|
CVE-2026-53400 | 7.8 | CWE-362 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
drm/i915/gem: Fix phys BO pread/pwrite with offset
sg_page() returns struct pag…
|
CVE-2026-53356 | 7.8 | CWE-1164 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
dm cache policy smq: check allocation under invalidate lock
commit 2d1f7b65f5de…
|
CVE-2026-53265 | 7.8 | CWE-362 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
net/sched: act_api: use RCU with deferred freeing for action lifecycle
When NEW…
|
CVE-2026-53264 | 7.8 | CWE-416 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
ALSA: PCM: Fix wait queue list corruption in snd_pcm_drain() on linked streams
…
|
CVE-2026-53242 | 7.8 | CWE-476 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx()
Fix …
|
CVE-2026-53239 | 7.8 | CWE-416 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nft_tunnel: fix use-after-free on object destroy
nft_tunnel_obj_dest…
|
CVE-2026-53212 | 7.8 | CWE-416 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
ALSA: timer: Fix UAF at snd_timer_user_params()
At releasing a timer object, e.…
|
CVE-2026-53192 | 7.8 | CWE-416 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
thunderbolt: Clamp XDomain response data copy to allocation size
tb_xdp_propert…
|
CVE-2026-53148 | 7.8 | CWE-787 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
quota: Fix race of dquot_scan_active() with quota deactivation
dquot_scan_activ…
|
CVE-2026-53050 | 7.8 | CWE-362 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove
In qrt…
|
CVE-2026-52947 | 7.8 | CWE-416 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
net: skbuff: fix missing zerocopy reference in pskb_carve helpers
pskb_carve_in…
|
CVE-2026-52943 | 7.8 | CWE-416 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
io_uring/poll: fix signed comparison in io_poll_get_ownership()
io_poll_get_own…
|
CVE-2026-52933 | 7.8 | CWE-835 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
ipc: limit next_id allocation to the valid ID range
The checkpoint/restore sysc…
|
CVE-2026-52923 | 7.8 | CWE-401 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_queue: hold bridge skb->dev while queued
br_pass_frame_up() rewri…
|
CVE-2026-52912 | 7.8 | CWE-416 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
bpf: Free reuseport cBPF prog after RCU grace period.
Eulgyu Kim reported the s…
|
CVE-2026-52910 | 7.8 | CWE-125 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
ip6_vti: set netns_immutable on the fallback device.
john1988 and Noam Rathaus …
|
CVE-2026-52909 | 7.8 | CWE-863 | — | |
|
Windows
Improper resource shutdown or release in Windows UEFI allows an authorized attacker to bypass a security feature locally.
|
CVE-2026-49785 | 7.8 | CWE-404 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
net/sched: fix pedit partial COW leading to page cache corruption
tcf_pedit_act…
|
CVE-2026-46331 | 7.8 | CWE-190 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
net: gro: don't merge zcopy skbs
skb_gro_receive() can currently copy frags bet…
|
CVE-2026-46323 | 7.8 | CWE-416 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
dm: fix a buffer overflow in ioctl processing
Tony Asleson (using Claude) found…
|
CVE-2026-46294 | 7.8 | CWE-787 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths
Vulne…
|
CVE-2026-46275 | 7.8 | CWE-362 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
vsock: fix buffer size clamping order
In vsock_update_buffer_size(), the buffer…
|
CVE-2026-46234 | 7.8 | CWE-787 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL
The S…
|
CVE-2026-46227 | 7.8 | CWE-416 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_fu…
|
CVE-2026-46209 | 7.8 | CWE-787 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task
…
|
CVE-2026-46180 | 7.8 | CWE-416 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
exit: prevent preemption of oopsing TASK_DEAD task
When an already-exiting task…
|
CVE-2026-46173 | 7.8 | CWE-787 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
wifi: b43legacy: enforce bounds check on firmware key index in RX path
Same fix…
|
CVE-2026-46163 | 7.8 | CWE-129 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: mt7921: fix a potential clc buffer length underflow
The buf_len is …
|
CVE-2026-46136 | 7.8 | CWE-787 | — |