주요 제품 취약점 (2,105건)
"Windows" 관련 CVE만 표시 중 · 필터 해제 ×
| 기술 | CVE | 심각도 | 유형 | KEV | 등재일 |
|---|---|---|---|---|---|
|
Windows
Heap-based buffer overflow in Windows Volume Shadow Copy allows an unauthorized attacker to elevate privileges with a physical attack.
|
CVE-2026-72985 | 6.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack.
|
CVE-2026-71350 | 6.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack.
|
CVE-2026-71349 | 6.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack.
|
CVE-2026-71348 | 6.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack.
|
CVE-2026-71329 | 6.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack.
|
CVE-2026-69958 | 6.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack.
|
CVE-2026-69947 | 6.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack.
|
CVE-2026-69566 | 6.8 | CWE-122 | — | |
|
Windows
Out-of-bounds read in Windows USB Mass Storage Class Driver allows an unauthorized attacker to elevate privileges with a physical attack.
|
CVE-2026-69490 | 6.8 | CWE-125 | — | |
|
Windows
Missing authentication for critical function in Windows DHCP Server allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-69415 | 6.8 | CWE-306 | — | |
|
Windows
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack.
|
CVE-2026-68833 | 6.8 | CWE-122 | — | |
|
Windows
Null pointer dereference in Windows Graphics Kernel allows an unauthorized attacker to deny service over a network.
|
CVE-2026-62702 | 6.8 | CWE-476 | — | |
|
Windows
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an unauthorized attacker to execute code with a physical…
|
CVE-2026-62699 | 6.8 | CWE-122 | — | |
|
Windows
Use of a broken or risky cryptographic algorithm in Windows Remote Desktop allows an unauthorized attacker to bypass a security feature over a networ…
|
CVE-2026-59116 | 6.8 | CWE-327 | — | |
|
Windows
Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack.
|
CVE-2026-103578 | 6.8 | CWE-822 | — | |
|
Windows
Heap-based buffer overflow in Windows Portable Device MTP Driver allows an unauthorized attacker to elevate privileges with a physical attack.
|
CVE-2026-102206 | 6.8 | CWE-122 | — | |
|
Windows
Untrusted pointer dereference in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack.
|
CVE-2026-102188 | 6.8 | CWE-822 | — | |
|
Windows
A vulnerability in Trend Micro Endpoint Encryption Full Disk Encryption version 6.0.0.3204 and below could allow an attacker with physical access to …
|
CVE-2023-28005 | 6.8 | — | — | |
|
Windows
Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to elevate privileges locally.
|
CVE-2026-96938 | 6.7 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.
|
CVE-2026-88143 | 6.7 | CWE-122 | — | |
|
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Performance Monitor allows an authorized attac…
|
CVE-2026-85333 | 6.7 | CWE-362 | — | |
|
Windows
Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.
|
CVE-2026-83706 | 6.7 | CWE-416 | — | |
|
Windows
Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally.
|
CVE-2026-72948 | 6.7 | CWE-23 | — | |
|
Windows
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
|
CVE-2026-72935 | 6.7 | CWE-125 | — | |
|
Windows
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
|
CVE-2026-71339 | 6.7 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally.
|
CVE-2026-70330 | 6.7 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally.
|
CVE-2026-70304 | 6.7 | CWE-122 | — | |
|
Windows
Untrusted pointer dereference in Windows NTFS allows an authorized attacker to execute code locally.
|
CVE-2026-69902 | 6.7 | CWE-822 | — | |
|
Windows
Heap-based buffer overflow in Windows BitLocker allows an authorized attacker to execute code locally.
|
CVE-2026-69449 | 6.7 | CWE-122 | — | |
|
Windows
Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69373 | 6.7 | CWE-125 | — | |
|
Windows
Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69350 | 6.7 | CWE-122 | — | |
|
Windows
Integer overflow or wraparound in Windows DNS allows an authorized attacker to elevate privileges locally.
|
CVE-2026-65799 | 6.7 | CWE-122 | — | |
|
Windows
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
|
CVE-2026-65798 | 6.7 | CWE-197 | — | |
|
Windows
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
|
CVE-2026-65797 | 6.7 | CWE-122 | — | |
|
Windows
Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally.
|
CVE-2026-65795 | 6.7 | CWE-197 | — | |
|
Windows
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
|
CVE-2026-62883 | 6.7 | CWE-122 | — | |
|
Windows
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
|
CVE-2026-62881 | 6.7 | CWE-122 | — | |
|
Windows
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
|
CVE-2026-62769 | 6.7 | CWE-122 | — | |
|
Windows
Use after free in Windows DHCP Server allows an authorized attacker to execute code over a network.
|
CVE-2026-85841 | 6.6 | CWE-416 | — | |
|
Windows
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges with a physical attack.
|
CVE-2026-69635 | 6.6 | CWE-122 | — | |
|
Windows
Integer overflow or wraparound in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to elevate privileges with a physical…
|
CVE-2026-69469 | 6.6 | CWE-122 | — | |
|
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an authorized attacker to execute c…
|
CVE-2026-61920 | 6.6 | CWE-362 | — | |
|
Windows
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information over a network.
|
CVE-2026-97813 | 6.5 | CWE-122 | — | |
|
Windows
Use of uninitialized resource in Windows Subsystem for Linux allows an authorized attacker to disclose information locally.
|
CVE-2026-96206 | 6.5 | CWE-908 | — | |
|
Windows
Null pointer dereference in Windows Message Queuing Queue Manager allows an authorized attacker to deny service over a network.
|
CVE-2026-85859 | 6.5 | CWE-476 | — | |
|
Windows
Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose information over a network.
|
CVE-2026-85847 | 6.5 | CWE-125 | — | |
|
Windows
Files or directories accessible to external parties in Windows Event Viewer allows an authorized attacker to disclose information over a network.
|
CVE-2026-85840 | 6.5 | CWE-552 | — | |
|
Windows
Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.
|
CVE-2026-85821 | 6.5 | CWE-125 | — | |
|
Windows
Improperly implemented security check for standard in Windows PowerShell allows an unauthorized attacker to bypass a security feature over a network.
|
CVE-2026-85805 | 6.5 | CWE-358 | — | |
|
Windows
Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network.
|
CVE-2026-85797 | 6.5 | CWE-20 | — | |
|
Windows
Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information over a network.
|
CVE-2026-85331 | 6.5 | CWE-125 | — | |
|
Windows
Incorrect implementation of authentication algorithm in Windows Shell allows an unauthorized attacker to perform spoofing over a network.
|
CVE-2026-83906 | 6.5 | CWE-303 | — | |
|
Windows
Buffer over-read in Windows CD-ROM Driver allows an unauthorized attacker to elevate privileges over a network.
|
CVE-2026-83888 | 6.5 | CWE-126 | — | |
|
Windows
Out-of-bounds read in Windows Wi-Fi Driver allows an unauthorized attacker to deny service over an adjacent network.
|
CVE-2026-83703 | 6.5 | CWE-125 | — | |
|
Windows
Buffer over-read in Windows IKE Extension allows an authorized attacker to deny service over a network.
|
CVE-2026-83685 | 6.5 | CWE-126 | — | |
|
Windows
Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information over a network.
|
CVE-2026-83683 | 6.5 | CWE-36 | — | |
|
Windows
Out-of-bounds read in Windows Hyper-V allows an authorized attacker to disclose information locally.
|
CVE-2026-83671 | 6.5 | CWE-125 | — | |
|
Windows
Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network.
|
CVE-2026-83651 | 6.5 | CWE-125 | — | |
|
Windows
Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to deny service over a network.
|
CVE-2026-83649 | 6.5 | CWE-125 | — | |
|
Windows
Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally.
|
CVE-2026-83636 | 6.5 | CWE-476 | — |