Security News

주요 제품 취약점 (2,105건)

"Windows" 관련 CVE만 표시 중 · 필터 해제 ×

기술CVE심각도유형KEV등재일
Windows
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-62780 7.0 CWE-362 —
Windows
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-62774 7.0 CWE-416 —
Windows
Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally.
CVE-2026-62773 7.0 CWE-416 —
Windows
Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally.
CVE-2026-62766 7.0 CWE-415 —
Windows
Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
CVE-2026-62753 7.0 CWE-122 —
Windows
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-62749 7.0 CWE-416 —
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacke…
CVE-2026-62748 7.0 CWE-362 —
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacke…
CVE-2026-62734 7.0 CWE-362 —
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacke…
CVE-2026-62729 7.0 CWE-362 —
Windows
Time-of-check time-of-use (toctou) race condition in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locall…
CVE-2026-62728 7.0 CWE-125 —
Windows
Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
CVE-2026-62726 7.0 CWE-416 —
Windows
Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
CVE-2026-62725 7.0 CWE-416 —
Windows
Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
CVE-2026-62724 7.0 CWE-416 —
Windows
Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
CVE-2026-62723 7.0 CWE-416 —
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bind Filter Driver allows an authorized attack…
CVE-2026-62705 7.0 CWE-362 —
Windows
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-62694 7.0 CWE-416 —
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows MIDI Service Module allows an authorized attac…
CVE-2026-62693 7.0 CWE-362 —
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attack…
CVE-2026-62690 7.0 CWE-362 —
Windows
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-61938 7.0 CWE-416 —
Windows
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-61929 7.0 CWE-416 —
Windows
Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-61927 7.0 CWE-362 —
Windows
Double free in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally.
CVE-2026-61366 7.0 CWE-415 —
Windows
Use after free in Windows DHCP Client allows an authorized attacker to execute code locally.
CVE-2026-61361 7.0 CWE-416 —
Windows
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2026-61348 7.0 CWE-416 —
Windows
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-61346 7.0 CWE-416 —
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Event Logging Service allows an authorized att…
CVE-2026-59126 7.0 CWE-362 —
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacke…
CVE-2026-59122 7.0 CWE-362 —
Windows
Heap-based buffer overflow in Windows LUAFV allows an authorized attacker to elevate privileges locally.
CVE-2026-50472 7.0 CWE-122 —
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows a…
CVE-2026-50349 7.0 CWE-362 —
Windows
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-108468 7.0 CWE-416 —
Windows
Use after free in Windows Update Delivery Optimization allows an authorized attacker to elevate privileges locally.
CVE-2026-108465 7.0 CWE-416 —
Windows
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
CVE-2026-108461 7.0 CWE-416 —
Windows
Time-of-check time-of-use (toctou) race condition in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges local…
CVE-2026-108396 7.0 CWE-367 —
Windows
Improper link resolution before file access ('link following') in Windows Backup Engine allows an authorized attacker to elevate privileges locally.
CVE-2026-108135 7.0 CWE-59 —
Windows
Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
CVE-2026-108134 7.0 CWE-416 —
Windows
Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally.
CVE-2026-108132 7.0 CWE-415 —
Windows
Use after free in Windows Security App allows an authorized attacker to elevate privileges locally.
CVE-2026-105725 7.0 CWE-416 —
Windows
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
CVE-2026-105722 7.0 CWE-416 —
Windows
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
CVE-2026-103565 7.0 CWE-416 —
Windows
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
CVE-2026-103554 7.0 CWE-416 —
Windows
Use after free in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
CVE-2026-102211 7.0 CWE-362 —
Windows
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
CVE-2026-102208 7.0 CWE-416 —
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevat…
CVE-2026-102207 7.0 CWE-362 —
Windows
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
CVE-2026-102197 7.0 CWE-416 —
Windows
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
CVE-2026-102195 7.0 CWE-416 —
Windows
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-102194 7.0 CWE-416 —
Windows
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
CVE-2026-102193 7.0 CWE-416 —
Windows
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
CVE-2026-102191 7.0 CWE-122 —
Windows
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
CVE-2026-102189 7.0 CWE-122 —
Windows
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
CVE-2026-100225 7.0 CWE-122 —
Windows
Stack-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
CVE-2026-100216 7.0 CWE-121 —
Windows
Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privileges locally.
CVE-2026-100203 7.0 CWE-122 —
Windows
Heap-based buffer overflow in Windows Client License Service allows an authorized attacker to elevate privileges locally.
CVE-2026-100201 7.0 CWE-122 —
Windows
Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally.
CVE-2026-100200 7.0 CWE-416 —
Windows
Heap-based buffer overflow in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack.
CVE-2026-96863 6.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an unauthorized attacker to elevate privileges with a physical attack.
CVE-2026-83895 6.8 CWE-122 —
Windows
Integer overflow or wraparound in Windows Kernel Mode Driver allows an unauthorized attacker to elevate privileges with a physical attack.
CVE-2026-83573 6.8 CWE-190 —
Windows
Untrusted pointer dereference in Microsoft Windows SCSI Class System File allows an unauthorized attacker to elevate privileges with a physical attac…
CVE-2026-78451 6.8 CWE-822 —
Windows
No cwe for this issue in Windows Boot Manager allows an unauthorized attacker to elevate privileges with a physical attack.
CVE-2026-77892 6.8 CWE-693 —
Windows
Out-of-bounds read in Windows USB Hub Driver allows an unauthorized attacker to elevate privileges with a physical attack.
CVE-2026-72999 6.8 CWE-125 —