Security News

주요 제품 취약점 (2,105건)

"Windows" 관련 CVE만 표시 중 · 필터 해제 ×

기술CVE심각도유형KEV등재일
Windows
Out-of-bounds read in Windows IKE Extension allows an authorized attacker to disclose information over a network.
CVE-2026-83521 6.5 CWE-125 —
Windows
Integer underflow (wrap or wraparound) in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information over a net…
CVE-2026-78453 6.5 CWE-191 —
Windows
Out-of-bounds read in Windows OLE DB allows an unauthorized attacker to disclose information over a network.
CVE-2026-78441 6.5 CWE-125 —
Windows
Out-of-bounds read in Windows Spaceport.sys allows an unauthorized attacker to disclose information over a network.
CVE-2026-72942 6.5 CWE-125 —
Windows
Null pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to deny service over a network.
CVE-2026-72939 6.5 CWE-476 —
Windows
Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally.
CVE-2026-70248 6.5 CWE-476 —
Windows
Untrusted pointer dereference in Windows Kernel allows an authorized attacker to deny service over a network.
CVE-2026-70170 6.5 CWE-822 —
Windows
Out-of-bounds read in Windows DNS allows an authorized attacker to deny service over a network.
CVE-2026-70166 6.5 CWE-125 —
Windows
Improper authorization in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally.
CVE-2026-70148 6.5 CWE-441 —
Windows
Time-of-check time-of-use (toctou) race condition in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
CVE-2026-70122 6.5 CWE-367 —
Windows
Out-of-bounds read in Windows DNS allows an authorized attacker to execute code over a network.
CVE-2026-70119 6.5 CWE-125 —
Windows
Allocation of resources without limits or throttling in Windows Netlogon allows an authorized attacker to deny service over a network.
CVE-2026-70072 6.5 CWE-770 —
Windows
Windows hard link in Windows Compressed Folder allows an unauthorized attacker to disclose information over a network.
CVE-2026-70019 6.5 CWE-65 —
Windows
Improper limitation of a pathname to a restricted directory ('path traversal') in Windows Libarchive allows an unauthorized attacker to perform tampe…
CVE-2026-69973 6.5 CWE-22 —
Windows
Relative path traversal in Windows Libarchive allows an unauthorized attacker to perform tampering over a network.
CVE-2026-69968 6.5 CWE-23 —
Windows
Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network.
CVE-2026-69955 6.5 CWE-125 —
Windows
Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network.
CVE-2026-69940 6.5 CWE-125 —
Windows
Uncaught exception in Windows iSCSI Target Service allows an authorized attacker to deny service over a network.
CVE-2026-69839 6.5 CWE-248 —
Windows
Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over an adjacent network.
CVE-2026-69781 6.5 CWE-401 —
Windows
Missing release of memory after effective lifetime in Windows DHCP Server allows an authorized attacker to deny service over a network.
CVE-2026-69497 6.5 CWE-401 —
Windows
Allocation of resources without limits or throttling in Windows SMB Server allows an authorized attacker to deny service over a network.
CVE-2026-69374 6.5 CWE-770 —
Windows
Storing passwords in a recoverable format in Windows DHCP Server allows an authorized attacker to disclose information over a network.
CVE-2026-69297 6.5 CWE-257 —
Windows
Insufficient granularity of access control in Windows Connected User Experiences and Telemetry allows an authorized attacker to disclose information …
CVE-2026-69267 6.5 CWE-1220 —
Windows
Out-of-bounds read in Windows iSCSI allows an unauthorized attacker to deny service over a network.
CVE-2026-68898 6.5 CWE-125 —
Windows
Buffer over-read in Windows SMB Client allows an unauthorized attacker to disclose information over a network.
CVE-2026-65794 6.5 CWE-126 —
Windows
Uncontrolled resource consumption in Windows DHCP Client allows an unauthorized attacker to deny service over an adjacent network.
CVE-2026-65785 6.5 CWE-400 —
Windows
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
CVE-2026-62814 6.5 CWE-125 —
Windows
Improper limitation of a pathname to a restricted directory ('path traversal') in Windows PowerShell allows an unauthorized attacker to bypass a secu…
CVE-2026-62801 6.5 CWE-22 —
Windows
Out-of-bounds read in Windows SMB Client allows an unauthorized attacker to disclose information over a network.
CVE-2026-62782 6.5 CWE-125 —
Windows
Partial string comparison in Windows HTTP Protocol Stack allows an unauthorized attacker to perform tampering over an adjacent network.
CVE-2026-62750 6.5 CWE-187 —
Windows
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
CVE-2026-62745 6.5 CWE-125 —
Windows
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
CVE-2026-62742 6.5 CWE-125 —
Windows
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
CVE-2026-62720 6.5 CWE-125 —
Windows
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
CVE-2026-62718 6.5 CWE-125 —
Windows
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
CVE-2026-62716 6.5 CWE-125 —
Windows
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
CVE-2026-62715 6.5 CWE-125 —
Windows
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
CVE-2026-62714 6.5 CWE-125 —
Windows
Stack-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to deny service over a network.
CVE-2026-102199 6.5 CWE-121 —
Windows
Out-of-bounds read in Windows DHCP Server allows an authorized attacker to execute code locally.
CVE-2026-77891 6.4 CWE-125 —
Windows
Out-of-bounds read in Windows DHCP Server allows an authorized attacker to execute code locally.
CVE-2026-77887 6.4 CWE-125 —
Windows
Integer underflow (wrap or wraparound) in Windows File History Service allows an authorized attacker to elevate privileges locally.
CVE-2026-72947 6.4 CWE-191 —
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Security Center allows an authorized attacker …
CVE-2026-71347 6.4 CWE-362 —
Windows
Double free in Windows Failover Cluster allows an authorized attacker to elevate privileges locally.
CVE-2026-71338 6.4 CWE-415 —
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Instrumentation allows an authorize…
CVE-2026-70582 6.4 CWE-362 —
Windows
Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code locally.
CVE-2026-69878 6.4 CWE-122 —
Windows
Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack.
CVE-2026-62708 6.4 CWE-416 —
Windows
File and Print Sharing service in Windows 95, Windows 98, and Windows Me does not properly check the password for a file share, which allows remote a…
CVE-2000-0979 6.4 — —
Windows
Uncaught Exception (CWE-248) in Elastic Endpoint can lead to denial of service via a specially crafted file name. When Elastic Defend's Elastic Endpo…
CVE-2026-102413 6.2 CWE-248 —
Windows
Url redirection to untrusted site ('open redirect') in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical…
CVE-2026-83500 6.1 CWE-601 —
Windows
Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny service over a network.
CVE-2026-88099 5.9 CWE-248 —
Windows
Use after free in Windows DNS allows an unauthorized attacker to deny service over a network.
CVE-2026-78523 5.9 CWE-416 —
Windows
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network.
CVE-2026-70124 5.9 CWE-125 —
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an unauthorized attacker to deny se…
CVE-2026-70091 5.9 CWE-362 —
Windows
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network.
CVE-2026-69930 5.9 CWE-125 —
Windows
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network.
CVE-2026-69929 5.9 CWE-125 —
Windows
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network.
CVE-2026-69803 5.9 CWE-125 —
Windows
Buffer over-read in Windows Network File System allows an unauthorized attacker to deny service over a network.
CVE-2026-68819 5.9 CWE-126 —
Windows
Out-of-bounds read in Windows Wi-Fi Driver allows an authorized attacker to disclose information over an adjacent network.
CVE-2026-85816 5.7 CWE-125 —
Windows
Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information ov…
CVE-2026-69723 5.7 CWE-497 —
Windows
Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network.
CVE-2026-69679 5.7 CWE-125 —