주요 제품 취약점 (2,105건)
"Windows" 관련 CVE만 표시 중 · 필터 해제 ×
| 기술 | CVE | 심각도 | 유형 | KEV | 등재일 |
|---|---|---|---|---|---|
|
Windows
Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69563 | 7.0 | CWE-122 | — | |
|
Windows
Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69560 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69540 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Wireless Networking allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69517 | 7.0 | CWE-416 | — | |
|
Windows
Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69501 | 7.0 | CWE-822 | — | |
|
Windows
Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69500 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69498 | 7.0 | CWE-416 | — | |
|
Windows
Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69492 | 7.0 | CWE-122 | — | |
|
Windows
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69488 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69473 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Devices Human Interface allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69472 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69470 | 7.0 | CWE-416 | — | |
|
Windows
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69468 | 7.0 | CWE-122 | — | |
|
Windows
Time-of-check time-of-use (toctou) race condition in Windows Kernel allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69466 | 7.0 | CWE-367 | — | |
|
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetooth Service allows an authorized attacke…
|
CVE-2026-69448 | 7.0 | CWE-362 | — | |
|
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to ele…
|
CVE-2026-69441 | 7.0 | CWE-362 | — | |
|
Windows
Time-of-check time-of-use (toctou) race condition in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69440 | 7.0 | CWE-367 | — | |
|
Windows
Use after free in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69430 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69422 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69413 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69410 | 7.0 | CWE-416 | — | |
|
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevat…
|
CVE-2026-69404 | 7.0 | CWE-362 | — | |
|
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetooth Service allows an authorized attacke…
|
CVE-2026-69398 | 7.0 | CWE-362 | — | |
|
Windows
Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69394 | 7.0 | CWE-122 | — | |
|
Windows
Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69388 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69387 | 7.0 | CWE-416 | — | |
|
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevat…
|
CVE-2026-69385 | 7.0 | CWE-362 | — | |
|
Windows
External control of file name or path in Windows Shell allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69383 | 7.0 | CWE-73 | — | |
|
Windows
Improper link resolution before file access ('link following') in Windows NTFS allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69379 | 7.0 | CWE-59 | — | |
|
Windows
Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69362 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69341 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69335 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69333 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69331 | 7.0 | CWE-416 | — | |
|
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Video Driver allows an authorized attacker…
|
CVE-2026-69319 | 7.0 | CWE-362 | — | |
|
Windows
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69311 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows DNS allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69310 | 7.0 | CWE-416 | — | |
|
Windows
Double free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69309 | 7.0 | CWE-415 | — | |
|
Windows
Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69300 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69299 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69287 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows License Manager allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69281 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69280 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69279 | 7.0 | CWE-416 | — | |
|
Windows
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
|
CVE-2026-68884 | 7.0 | CWE-122 | — | |
|
Windows
Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.
|
CVE-2026-68847 | 7.0 | CWE-416 | — | |
|
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Driver allows an authorized attacker to el…
|
CVE-2026-68840 | 7.0 | CWE-362 | — | |
|
Windows
Use after free in Windows File History Service allows an authorized attacker to elevate privileges locally.
|
CVE-2026-68837 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
|
CVE-2026-68825 | 7.0 | CWE-416 | — | |
|
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected User Experiences and Telemetry allow…
|
CVE-2026-68824 | 7.0 | CWE-362 | — | |
|
Windows
Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
|
CVE-2026-65783 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
|
CVE-2026-65782 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
|
CVE-2026-65781 | 7.0 | CWE-416 | — | |
|
Windows
Double free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
|
CVE-2026-65780 | 7.0 | CWE-415 | — | |
|
Windows
Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
|
CVE-2026-65779 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
|
CVE-2026-65778 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
|
CVE-2026-65776 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
|
CVE-2026-65678 | 7.0 | CWE-416 | — | |
|
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Backup Engine allows an authorized attacker to…
|
CVE-2026-62908 | 7.0 | CWE-362 | — | |
|
Windows
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
|
CVE-2026-62788 | 7.0 | CWE-416 | — |