Security News

주요 제품 취약점 (2,105건)

"Windows" 관련 CVE만 표시 중 · 필터 해제 ×

기술CVE심각도유형KEV등재일
Windows
Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69563 7.0 CWE-122 —
Windows
Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69560 7.0 CWE-416 —
Windows
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69540 7.0 CWE-416 —
Windows
Use after free in Windows Wireless Networking allows an authorized attacker to elevate privileges locally.
CVE-2026-69517 7.0 CWE-416 —
Windows
Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
CVE-2026-69501 7.0 CWE-822 —
Windows
Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.
CVE-2026-69500 7.0 CWE-416 —
Windows
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-69498 7.0 CWE-416 —
Windows
Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-69492 7.0 CWE-122 —
Windows
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69488 7.0 CWE-416 —
Windows
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-69473 7.0 CWE-416 —
Windows
Use after free in Windows Devices Human Interface allows an authorized attacker to elevate privileges locally.
CVE-2026-69472 7.0 CWE-416 —
Windows
Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.
CVE-2026-69470 7.0 CWE-416 —
Windows
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-69468 7.0 CWE-122 —
Windows
Time-of-check time-of-use (toctou) race condition in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-69466 7.0 CWE-367 —
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetooth Service allows an authorized attacke…
CVE-2026-69448 7.0 CWE-362 —
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to ele…
CVE-2026-69441 7.0 CWE-362 —
Windows
Time-of-check time-of-use (toctou) race condition in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
CVE-2026-69440 7.0 CWE-367 —
Windows
Use after free in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69430 7.0 CWE-416 —
Windows
Use after free in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-69422 7.0 CWE-416 —
Windows
Use after free in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
CVE-2026-69413 7.0 CWE-416 —
Windows
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-69410 7.0 CWE-416 —
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevat…
CVE-2026-69404 7.0 CWE-362 —
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetooth Service allows an authorized attacke…
CVE-2026-69398 7.0 CWE-362 —
Windows
Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69394 7.0 CWE-122 —
Windows
Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69388 7.0 CWE-416 —
Windows
Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVE-2026-69387 7.0 CWE-416 —
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevat…
CVE-2026-69385 7.0 CWE-362 —
Windows
External control of file name or path in Windows Shell allows an authorized attacker to elevate privileges locally.
CVE-2026-69383 7.0 CWE-73 —
Windows
Improper link resolution before file access ('link following') in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-69379 7.0 CWE-59 —
Windows
Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVE-2026-69362 7.0 CWE-416 —
Windows
Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.
CVE-2026-69341 7.0 CWE-416 —
Windows
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-69335 7.0 CWE-416 —
Windows
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-69333 7.0 CWE-416 —
Windows
Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-69331 7.0 CWE-416 —
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Video Driver allows an authorized attacker…
CVE-2026-69319 7.0 CWE-362 —
Windows
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69311 7.0 CWE-416 —
Windows
Use after free in Windows DNS allows an authorized attacker to elevate privileges locally.
CVE-2026-69310 7.0 CWE-416 —
Windows
Double free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
CVE-2026-69309 7.0 CWE-415 —
Windows
Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
CVE-2026-69300 7.0 CWE-416 —
Windows
Use after free in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally.
CVE-2026-69299 7.0 CWE-416 —
Windows
Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.
CVE-2026-69287 7.0 CWE-416 —
Windows
Use after free in Windows License Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-69281 7.0 CWE-416 —
Windows
Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
CVE-2026-69280 7.0 CWE-416 —
Windows
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-69279 7.0 CWE-416 —
Windows
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-68884 7.0 CWE-122 —
Windows
Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.
CVE-2026-68847 7.0 CWE-416 —
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Driver allows an authorized attacker to el…
CVE-2026-68840 7.0 CWE-362 —
Windows
Use after free in Windows File History Service allows an authorized attacker to elevate privileges locally.
CVE-2026-68837 7.0 CWE-416 —
Windows
Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-68825 7.0 CWE-416 —
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected User Experiences and Telemetry allow…
CVE-2026-68824 7.0 CWE-362 —
Windows
Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
CVE-2026-65783 7.0 CWE-416 —
Windows
Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
CVE-2026-65782 7.0 CWE-416 —
Windows
Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
CVE-2026-65781 7.0 CWE-416 —
Windows
Double free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
CVE-2026-65780 7.0 CWE-415 —
Windows
Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
CVE-2026-65779 7.0 CWE-416 —
Windows
Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
CVE-2026-65778 7.0 CWE-416 —
Windows
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-65776 7.0 CWE-416 —
Windows
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-65678 7.0 CWE-416 —
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Backup Engine allows an authorized attacker to…
CVE-2026-62908 7.0 CWE-362 —
Windows
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-62788 7.0 CWE-416 —