주요 제품 취약점 (3,477건)
Windows
infra
2105건
KEV 293 · 최근 2026-10-13
Linux 커널
infra
908건
KEV 31 · 최근 2026-10-28
Cisco IOS
infra
58건
KEV 44 · 최근 2026-07-13
Ivanti
infra
45건
KEV 36 · 최근 2026-10-13
Microsoft Exchange
infra
43건
KEV 20 · 최근 2026-05-15
Fortinet
infra
41건
KEV 22 · 최근 2026-10-16
Apache HTTP
infra
33건
KEV 11 · 최근 2026-08-24
Citrix NetScaler
infra
31건
KEV 16 · 최근 2026-10-04
Apache Tomcat
infra
30건
KEV 8 · 최근 2026-08-04
OpenSSH
infra
30건
KEV 3 · 최근 2025-10-02
PostgreSQL
finance
28건
KEV 2 · 최근 2026-09-02
Node.js
infra
24건
KEV 2 · 최근 2025-01-14
nginx
infra
16건
KEV 0
Palo Alto PAN-OS
infra
15건
KEV 14 · 최근 2026-10-14
VMware vCenter
infra
13건
KEV 12 · 최근 2026-08-18
Atlassian Confluence
infra
10건
KEV 10 · 최근 2026-10-15
MySQL/MariaDB
finance
10건
KEV 2 · 최근 2024-11-07
Redis
infra
9건
KEV 3 · 최근 2026-05-26
curl
infra
8건
KEV 1 · 최근 2023-05-12
OpenSSL
infra
8건
KEV 1 · 최근 2022-05-04
VMware ESXi
infra
7건
KEV 7 · 최근 2025-03-04
wolfSSL
finance
3건
KEV 0
Apache Spark
finance
1건
KEV 1 · 최근 2023-03-07
Spring Framework
finance
1건
KEV 1 · 최근 2022-04-04
| 기술 | CVE | 심각도 | 유형 | KEV | 등재일 |
|---|---|---|---|---|---|
|
Windows
Release of invalid pointer or reference in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
|
CVE-2026-108133 | 7.8 | CWE-763 | — | |
|
Windows
Heap-based buffer overflow in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
|
CVE-2026-108130 | 7.8 | CWE-122 | — | |
|
Windows
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
|
CVE-2026-105004 | 7.8 | CWE-125 | — | |
|
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Credential Providers allows an authorized atta…
|
CVE-2026-103568 | 7.8 | CWE-122 | — | |
|
Windows
Out-of-bounds read in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally.
|
CVE-2026-103553 | 7.8 | CWE-125 | — | |
|
Windows
Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally.
|
CVE-2026-102227 | 7.8 | CWE-122 | — | |
|
Windows
Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally.
|
CVE-2026-102220 | 7.8 | CWE-416 | — | |
|
Windows
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
|
CVE-2026-102218 | 7.8 | CWE-122 | — | |
|
Windows
Access of resource using incompatible type ('type confusion') in Windows StateRepository API allows an authorized attacker to elevate privileges loca…
|
CVE-2026-102216 | 7.8 | CWE-843 | — | |
|
Windows
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
|
CVE-2026-102215 | 7.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
|
CVE-2026-102205 | 7.8 | CWE-122 | — | |
|
Windows
Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.
|
CVE-2026-102202 | 7.8 | CWE-59 | — | |
|
Windows
Use after free in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.
|
CVE-2026-102201 | 7.8 | CWE-416 | — | |
|
Windows
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
|
CVE-2026-102196 | 7.8 | CWE-416 | — | |
|
Windows
Improper privilege management in Windows Group Policy allows an authorized attacker to elevate privileges locally.
|
CVE-2026-100217 | 7.8 | CWE-862 | — | |
|
Windows
Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app allow a local user to escalate their privileges to N…
|
CVE-2026-0251 | 7.8 | CWE-426 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue()
Add proper lockin…
|
CVE-2025-71221 | 7.8 | CWE-362 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
dmaengine: tegra-adma: Fix use-after-free
A use-after-free bug exists in the Te…
|
CVE-2025-71162 | 7.8 | CWE-416 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
ext4: fix string copying in parse_apply_sb_mount_options()
strscpy_pad() can't …
|
CVE-2025-71123 | 7.8 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
net: rose: fix invalid array index in rose_kill_by_device()
rose_kill_by_device…
|
CVE-2025-71086 | 7.8 | CWE-129 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
scsi: aic94xx: fix use-after-free in device removal path
The asd_pci_remove() f…
|
CVE-2025-71075 | 7.8 | CWE-416 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags
When a f…
|
CVE-2025-68764 | 7.8 | CWE-862 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id
Use ch…
|
CVE-2025-68724 | 7.8 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
nvme: fix admin request_queue lifetime
The namespaces can access the controller…
|
CVE-2025-68265 | 7.8 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock().
get_netdev_…
|
CVE-2025-40149 | 7.8 | CWE-416 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
vfs: Don't leak disconnected dentries on umount
When user calls open_by_handle_…
|
CVE-2025-40105 | 7.8 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
octeontx2-pf: Fix potential use after free in otx2_tc_add_flow()
This code call…
|
CVE-2025-39978 | 7.8 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
futex: Prevent use-after-free during requeue-PI
syzbot managed to trigger the f…
|
CVE-2025-39977 | 7.8 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect().
syzbot reported the sp…
|
CVE-2025-39955 | 7.8 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
crypto: af_alg - Set merge to zero early in af_alg_sendmsg
If an error causes a…
|
CVE-2025-39931 | 7.8 | CWE-908 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
dmaengine: idxd: Remove improper idxd_free
The call to idxd_free() introduces a…
|
CVE-2025-39871 | 7.8 | CWE-416 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
fs: writeback: fix use-after-free in __mark_inode_dirty()
An use-after-free iss…
|
CVE-2025-39866 | 7.8 | CWE-416 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
wifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info work
The…
|
CVE-2025-39863 | 7.8 | CWE-416 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
fs/buffer: fix use-after-free when call bh_read() helper
There's issue as follo…
|
CVE-2025-39691 | 7.8 | CWE-416 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer access
In the pre…
|
CVE-2025-38704 | 7.8 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
eventpoll: Fix semi-unbounded recursion
Ensure that epoll instances can never f…
|
CVE-2025-38614 | 7.8 | CWE-674 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: hci_core: Fix use-after-free in vhci_flush()
syzbot reported use-aft…
|
CVE-2025-38250 | 7.8 | CWE-416 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
NFSD: fix race between nfsd registration and exports_proc
As of now nfsd calls …
|
CVE-2025-38232 | 7.8 | CWE-362 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX
Otherwise, …
|
CVE-2025-38201 | 7.8 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
net: clear the dst when changing skb protocol
A not-so-careful NAT46 BPF progra…
|
CVE-2025-38192 | 7.8 | CWE-476 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nft_set_pipapo: prevent overflow in lookup table allocation
When cal…
|
CVE-2025-38162 | 7.8 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
x86/mm: Eliminate window where TLB flushes may be inadvertently skipped
tl;dr: …
|
CVE-2025-37964 | 7.8 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
ext4: fix OOB read when checking dotdot dir
Mounting a corrupted filesystem wit…
|
CVE-2025-37785 | 7.8 | CWE-125 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint
If vhost_…
|
CVE-2025-22083 | 7.8 | CWE-416 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nft_tunnel: fix geneve_opt type confusion addition
When handling mul…
|
CVE-2025-22056 | 7.8 | CWE-787 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
mm/migrate: fix shmem xarray update during migration
A shmem folio can be eithe…
|
CVE-2025-22015 | 7.8 | CWE-476 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
proc: fix UAF in proc_get_inode()
Fix race between rmmod and /proc/XXX's inode …
|
CVE-2025-21999 | 7.8 | CWE-416 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
net: gso: fix ownership in __udp_gso_segment
In __udp_gso_segment the skb destr…
|
CVE-2025-21926 | 7.8 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
sched/fair: Fix potential memory corruption in child_cfs_rq_on_list
child_cfs_r…
|
CVE-2025-21919 | 7.8 | CWE-787 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
The iss…
|
CVE-2025-21887 | 7.8 | CWE-416 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
mptcp: always handle address removal under msk socket lock
Syzkaller reported a…
|
CVE-2025-21875 | 7.8 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type()
KMSAN reported a …
|
CVE-2025-21867 | 7.8 | CWE-416 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
tcp: drop secpath at the same time as we currently drop dst
Xiumei reported hit…
|
CVE-2025-21864 | 7.8 | CWE-476 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
io_uring: prevent opcode speculation
sqe->opcode is used for different tables, …
|
CVE-2025-21863 | 7.8 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
geneve: Fix use-after-free in geneve_find_dev().
syzkaller reported a use-after…
|
CVE-2025-21858 | 7.8 | CWE-416 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
block: don't revert iter for -EIOCBQUEUED
blkdev_read_iter() has a few odd chec…
|
CVE-2025-21832 | 7.8 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
vrf: use RCU protection in l3mdev_l3_out()
l3mdev_l3_out() can be called withou…
|
CVE-2025-21791 | 7.8 | CWE-416 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
It malicious…
|
CVE-2025-21780 | 7.8 | CWE-120 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
ndisc: use RCU protection in ndisc_alloc_skb()
ndisc_alloc_skb() can be called …
|
CVE-2025-21764 | 7.8 | CWE-416 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
neighbour: use RCU protection in __neigh_notify()
__neigh_notify() can be calle…
|
CVE-2025-21763 | 7.8 | CWE-416 | — |