Security News

주요 제품 취약점 (3,434건)

기술CVE심각도유형KEV등재일
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_pipapo: split gc into unlink and reclaim phase Yiming Qian r…
CVE-2026-23351 7.8 CWE-416 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: xdp: produce a warning when calculated tailroom is negative Many ethernet drive…
CVE-2026-23343 7.8 CWE-787 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs W…
CVE-2026-23340 7.8 CWE-416 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: cancel rfkill_block work in wiphy_unregister() There is a use-a…
CVE-2026-23336 7.8 CWE-416 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a UAF issue in bpf_trampoline_link_cgroup_shim The root cause of this …
CVE-2026-23319 7.8 CWE-416 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Return the correct value in vmw_translate_ptr functions Before the …
CVE-2026-23317 7.8 CWE-908 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: wifi: libertas: fix use-after-free in lbs_free_adapter() The lbs_free_adapter()…
CVE-2026-23281 7.8 CWE-416 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: always walk all pending catchall elements During transact…
CVE-2026-23278 7.8 CWE-416 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels IDLETIMER revi…
CVE-2026-23274 7.8 CWE-758 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: macvlan: observe an RCU grace period in macvlan_common_newlink() error path val…
CVE-2026-23273 7.8 CWE-416 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: unconditionally bump set->nelems before insertion In case…
CVE-2026-23272 7.8 CWE-416 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: perf: Fix __perf_event_overflow() vs perf_remove_from_context() race Make sure …
CVE-2026-23271 7.8 CWE-362 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks …
CVE-2026-23270 7.8 CWE-416 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: media: dvb-core: fix wrong reinitialization of ringbuffer on reopen dvb_dvr_ope…
CVE-2026-23253 7.8 CWE-665 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: net/sched: act_gate: snapshot parameters with RCU on replace The gate action ca…
CVE-2026-23245 7.8 — —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: RDMA/umad: Reject negative data_len in ib_umad_write ib_umad_write computes dat…
CVE-2026-23243 7.8 CWE-787 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix use-after-free in nf_tables_addchain() nf_tables_addc…
CVE-2026-23231 7.8 CWE-416 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() …
CVE-2026-23111 7.8 CWE-416 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: ipvlan: Make the addrs_lock be per port Make the addrs_lock be per port, not pe…
CVE-2026-23103 7.8 CWE-667 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: fou: Don't allow 0 for FOU_ATTR_IPPROTO. fou_udp_recv() has the same problem me…
CVE-2026-23083 7.8 CWE-20 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix recvmsg() unconditional requeue If rxrpc_recvmsg() fails because MSG…
CVE-2026-23066 7.8 CWE-674 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix use-after-free in inet6_addr_del(). syzbot reported use-after-free of…
CVE-2026-23010 7.8 CWE-416 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: nfsd: provide locking for v4_end_grace Writing to v4_end_grace can race with se…
CVE-2026-22980 7.8 CWE-416 —
Windows
Improper path validation in the local IPC service of TeamViewer Full Client and Host on Windows, Linux, and macOS prior to version 15.82 allows a loc…
CVE-2026-19743 7.8 CWE-22 —
Windows
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVE-2026-108136 7.8 CWE-416 —
Windows
Release of invalid pointer or reference in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
CVE-2026-108133 7.8 CWE-763 —
Windows
Heap-based buffer overflow in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
CVE-2026-108130 7.8 CWE-122 —
Windows
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
CVE-2026-105004 7.8 CWE-125 —
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Credential Providers allows an authorized atta…
CVE-2026-103568 7.8 CWE-122 —
Windows
Out-of-bounds read in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-103553 7.8 CWE-125 —
Windows
Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally.
CVE-2026-102227 7.8 CWE-122 —
Windows
Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally.
CVE-2026-102220 7.8 CWE-416 —
Windows
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
CVE-2026-102218 7.8 CWE-122 —
Windows
Access of resource using incompatible type ('type confusion') in Windows StateRepository API allows an authorized attacker to elevate privileges loca…
CVE-2026-102216 7.8 CWE-843 —
Windows
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
CVE-2026-102215 7.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
CVE-2026-102205 7.8 CWE-122 —
Windows
Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.
CVE-2026-102202 7.8 CWE-59 —
Windows
Use after free in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.
CVE-2026-102201 7.8 CWE-416 —
Windows
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
CVE-2026-102196 7.8 CWE-416 —
Windows
Improper privilege management in Windows Group Policy allows an authorized attacker to elevate privileges locally.
CVE-2026-100217 7.8 CWE-862 —
Windows
Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app allow a local user to escalate their privileges to N…
CVE-2026-0251 7.8 CWE-426 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue() Add proper lockin…
CVE-2025-71221 7.8 CWE-362 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: dmaengine: tegra-adma: Fix use-after-free A use-after-free bug exists in the Te…
CVE-2025-71162 7.8 CWE-416 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: ext4: fix string copying in parse_apply_sb_mount_options() strscpy_pad() can't …
CVE-2025-71123 7.8 — —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: net: rose: fix invalid array index in rose_kill_by_device() rose_kill_by_device…
CVE-2025-71086 7.8 CWE-129 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: scsi: aic94xx: fix use-after-free in device removal path The asd_pci_remove() f…
CVE-2025-71075 7.8 CWE-416 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags When a f…
CVE-2025-68764 7.8 CWE-862 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id Use ch…
CVE-2025-68724 7.8 — —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: nvme: fix admin request_queue lifetime The namespaces can access the controller…
CVE-2025-68265 7.8 — —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). get_netdev_…
CVE-2025-40149 7.8 CWE-416 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: vfs: Don't leak disconnected dentries on umount When user calls open_by_handle_…
CVE-2025-40105 7.8 — —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() This code call…
CVE-2025-39978 7.8 — —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: futex: Prevent use-after-free during requeue-PI syzbot managed to trigger the f…
CVE-2025-39977 7.8 — —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). syzbot reported the sp…
CVE-2025-39955 7.8 — —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Set merge to zero early in af_alg_sendmsg If an error causes a…
CVE-2025-39931 7.8 CWE-908 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Remove improper idxd_free The call to idxd_free() introduces a…
CVE-2025-39871 7.8 CWE-416 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: fs: writeback: fix use-after-free in __mark_inode_dirty() An use-after-free iss…
CVE-2025-39866 7.8 CWE-416 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info work The…
CVE-2025-39863 7.8 CWE-416 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: fs/buffer: fix use-after-free when call bh_read() helper There's issue as follo…
CVE-2025-39691 7.8 CWE-416 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer access In the pre…
CVE-2025-38704 7.8 — —