Security News

주요 제품 취약점 (3,477건)

기술CVE심각도유형KEV등재일
Windows
Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to elevate privileges locally.
CVE-2026-58600 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally.
CVE-2026-58599 7.8 CWE-122 —
Windows
Use after free in Windows Server allows an authorized attacker to elevate privileges locally.
CVE-2026-56177 7.8 CWE-416 —
Windows
Untrusted search path in Windows Narrator Braille allows an authorized attacker to elevate privileges locally.
CVE-2026-56174 7.8 CWE-426 —
Windows
Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally.
CVE-2026-56172 7.8 CWE-416 —
Windows
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code locally.
CVE-2026-54984 7.8 CWE-122 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: i2c: core: fix adapter registration race Adapters can be looked up based on the…
CVE-2026-53400 7.8 CWE-362 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Fix phys BO pread/pwrite with offset sg_page() returns struct pag…
CVE-2026-53356 7.8 CWE-1164 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: dm cache policy smq: check allocation under invalidate lock commit 2d1f7b65f5de…
CVE-2026-53265 7.8 CWE-362 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: net/sched: act_api: use RCU with deferred freeing for action lifecycle When NEW…
CVE-2026-53264 7.8 CWE-416 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: ALSA: PCM: Fix wait queue list corruption in snd_pcm_drain() on linked streams …
CVE-2026-53242 7.8 CWE-476 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() Fix …
CVE-2026-53239 7.8 CWE-416 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_tunnel: fix use-after-free on object destroy nft_tunnel_obj_dest…
CVE-2026-53212 7.8 CWE-416 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: Fix UAF at snd_timer_user_params() At releasing a timer object, e.…
CVE-2026-53192 7.8 CWE-416 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Clamp XDomain response data copy to allocation size tb_xdp_propert…
CVE-2026-53148 7.8 CWE-787 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: quota: Fix race of dquot_scan_active() with quota deactivation dquot_scan_activ…
CVE-2026-53050 7.8 CWE-362 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove In qrt…
CVE-2026-52947 7.8 CWE-416 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: net: skbuff: fix missing zerocopy reference in pskb_carve helpers pskb_carve_in…
CVE-2026-52943 7.8 CWE-416 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: io_uring/poll: fix signed comparison in io_poll_get_ownership() io_poll_get_own…
CVE-2026-52933 7.8 CWE-835 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: ipc: limit next_id allocation to the valid ID range The checkpoint/restore sysc…
CVE-2026-52923 7.8 CWE-401 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_queue: hold bridge skb->dev while queued br_pass_frame_up() rewri…
CVE-2026-52912 7.8 CWE-416 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: bpf: Free reuseport cBPF prog after RCU grace period. Eulgyu Kim reported the s…
CVE-2026-52910 7.8 CWE-125 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: ip6_vti: set netns_immutable on the fallback device. john1988 and Noam Rathaus …
CVE-2026-52909 7.8 CWE-863 —
Windows
Improper resource shutdown or release in Windows UEFI allows an authorized attacker to bypass a security feature locally.
CVE-2026-49785 7.8 CWE-404 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: net/sched: fix pedit partial COW leading to page cache corruption tcf_pedit_act…
CVE-2026-46331 7.8 CWE-190 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: net: gro: don't merge zcopy skbs skb_gro_receive() can currently copy frags bet…
CVE-2026-46323 7.8 CWE-416 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: dm: fix a buffer overflow in ioctl processing Tony Asleson (using Claude) found…
CVE-2026-46294 7.8 CWE-787 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths Vulne…
CVE-2026-46275 7.8 CWE-362 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: vsock: fix buffer size clamping order In vsock_update_buffer_size(), the buffer…
CVE-2026-46234 7.8 CWE-787 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL The S…
CVE-2026-46227 7.8 CWE-416 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_fu…
CVE-2026-46209 7.8 CWE-787 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task …
CVE-2026-46180 7.8 CWE-416 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: exit: prevent preemption of oopsing TASK_DEAD task When an already-exiting task…
CVE-2026-46173 7.8 CWE-787 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: wifi: b43legacy: enforce bounds check on firmware key index in RX path Same fix…
CVE-2026-46163 7.8 CWE-129 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: fix a potential clc buffer length underflow The buf_len is …
CVE-2026-46136 7.8 CWE-787 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: wifi: b43: enforce bounds check on firmware key index in b43_rx() The firmware-…
CVE-2026-46122 7.8 CWE-129 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: ip6_gre: Use cached t->net in ip6erspan_changelink(). After commit 5e72ce3e3980…
CVE-2026-46120 7.8 CWE-416 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete KASAN reproduc…
CVE-2026-46116 7.8 CWE-416 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: dm-thin: fix metadata refcount underflow There's a bug in dm-thin in the functi…
CVE-2026-46107 7.8 CWE-191 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup() The mwifiex_adap…
CVE-2026-46069 7.8 CWE-416 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: fbdev: defio: Disconnect deferred I/O from the lifetime of struct fb_info Hold …
CVE-2026-46065 7.8 CWE-401 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: net: qrtr: ns: Fix use-after-free in driver remove() In the remove callback, if…
CVE-2026-46047 7.8 CWE-416 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: tcp: call sk_data_ready() after listener migration When inet_csk_listen_stop() …
CVE-2026-46015 7.8 CWE-408 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: udf: fix partition descriptor append bookkeeping Mounting a crafted UDF image w…
CVE-2026-45991 7.8 CWE-787 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() CO-RE acce…
CVE-2026-45839 7.8 CWE-129 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: net/rds: handle zerocopy send cleanup before the message is queued A zerocopy s…
CVE-2026-43502 7.8 CWE-401 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present The DATA…
CVE-2026-43500 7.8 CWE-787 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: rtmutex: Use waiter::task instead of current in remove_waiter() remove_waiter()…
CVE-2026-43499 7.8 CWE-416 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: mm/page_alloc: clear page->private in free_pages_prepare() Several subsystems (…
CVE-2026-43303 7.8 CWE-416 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: ensure safe access to master conntrack Holding reference …
CVE-2026-43116 7.8 CWE-362 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: HID: roccat: fix use-after-free in roccat_report_event roccat_report_event() it…
CVE-2026-43111 7.8 CWE-416 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: xsk: tighten UMEM headroom validation to account for tailroom and min frame The…
CVE-2026-43093 7.8 CWE-787 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: eventpoll: defer struct eventpoll free to RCU grace period In certain situation…
CVE-2026-43074 7.8 CWE-401 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryptio…
CVE-2026-43033 7.8 CWE-682 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix regsafe() for pointers to packet In case rold->reg->range == BEYOND_PK…
CVE-2026-43030 7.8 CWE-682 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_helper: pass helper to expect cleanup nf_conntrack_help…
CVE-2026-43027 7.8 CWE-416 —
Windows
Missing authentication for critical function in Windows RPC API allows an authorized attacker to elevate privileges locally.
CVE-2026-42976 7.8 CWE-306 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: iio: adc: ti-adc161s626: use DMA-safe memory for spi_read() Add a DMA-safe buff…
CVE-2026-31768 7.8 — —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: iio: gyro: mpu3050: Move iio_device_register() to correct location iio_device_r…
CVE-2026-31761 7.8 CWE-362 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd() In tpacket_snd(…
CVE-2026-31700 7.8 CWE-362 —