주요 제품 취약점 (3,478건)
Windows
infra
2105건
KEV 293 · 최근 2026-10-13
Linux 커널
infra
908건
KEV 31 · 최근 2026-10-28
Cisco IOS
infra
58건
KEV 44 · 최근 2026-07-13
Ivanti
infra
46건
KEV 36 · 최근 2026-10-13
Microsoft Exchange
infra
43건
KEV 20 · 최근 2026-05-15
Fortinet
infra
41건
KEV 22 · 최근 2026-10-16
Apache HTTP
infra
33건
KEV 11 · 최근 2026-08-24
Citrix NetScaler
infra
31건
KEV 16 · 최근 2026-10-04
Apache Tomcat
infra
30건
KEV 8 · 최근 2026-08-04
OpenSSH
infra
30건
KEV 3 · 최근 2025-10-02
PostgreSQL
finance
28건
KEV 2 · 최근 2026-09-02
Node.js
infra
24건
KEV 2 · 최근 2025-01-14
nginx
infra
16건
KEV 0
Palo Alto PAN-OS
infra
15건
KEV 14 · 최근 2026-10-14
VMware vCenter
infra
13건
KEV 12 · 최근 2026-08-18
Atlassian Confluence
infra
10건
KEV 10 · 최근 2026-10-15
MySQL/MariaDB
finance
10건
KEV 2 · 최근 2024-11-07
Redis
infra
9건
KEV 3 · 최근 2026-05-26
curl
infra
8건
KEV 1 · 최근 2023-05-12
OpenSSL
infra
8건
KEV 1 · 최근 2022-05-04
VMware ESXi
infra
7건
KEV 7 · 최근 2025-03-04
wolfSSL
finance
3건
KEV 0
Apache Spark
finance
1건
KEV 1 · 최근 2023-03-07
Spring Framework
finance
1건
KEV 1 · 최근 2022-04-04
| 기술 | CVE | 심각도 | 유형 | KEV | 등재일 |
|---|---|---|---|---|---|
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
ovs_vport_cmd_fill…
|
CVE-2025-21761 | 7.8 | CWE-416 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
ipv6: mcast: add RCU protection to mld_newpack()
mld_newpack() can be called wi…
|
CVE-2025-21758 | 7.8 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
vsock: Keep the binding until socket destruction
Preserve sockets bindings; thi…
|
CVE-2025-21756 | 7.8 | CWE-416 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
btrfs: fix use-after-free when attempting to join an aborted transaction
When w…
|
CVE-2025-21753 | 7.8 | CWE-416 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
ata: libata-sff: Ensure that we cannot write outside the allocated buffer
revel…
|
CVE-2025-21738 | 7.8 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
nbd: don't allow reconnect after disconnect
Following process can cause nbd_con…
|
CVE-2025-21731 | 7.8 | CWE-416 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
padata: fix UAF in padata_reorder
A bug was found when run ltp test:
BUG: KASA…
|
CVE-2025-21727 | 7.8 | CWE-416 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
padata: avoid UAF for reorder_work
Although the previous patch can avoid ps and…
|
CVE-2025-21726 | 7.8 | CWE-416 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
iommufd/iova_bitmap: Fix shift-out-of-bounds in iova_bitmap_offset_to_index()
R…
|
CVE-2025-21724 | 7.8 | CWE-787 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
net: rose: fix timer races against user threads
Rose timers only acquire the so…
|
CVE-2025-21718 | 7.8 | CWE-362 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
usb: cdc-acm: Check control transfer buffer size before access
If the first fra…
|
CVE-2025-21704 | 7.8 | CWE-787 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
netem: Update sch->q.qlen before qdisc_tree_reduce_backlog()
qdisc_tree_reduce_…
|
CVE-2025-21703 | 7.8 | CWE-416 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
pfifo_tail_enqueue: Drop new packet when sch->limit == 0
Expected behaviour:
In…
|
CVE-2025-21702 | 7.8 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
net: sched: Disallow replacing of child qdisc from one parent to another
Lion A…
|
CVE-2025-21700 | 7.8 | CWE-416 | — | |
|
Redis
In the Linux kernel, the following vulnerability has been resolved:
net: sched: Disallow replacing of child qdisc from one parent to another
Lion A…
|
CVE-2025-21700 | 7.8 | CWE-416 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period
io_event…
|
CVE-2025-21655 | 7.8 | CWE-416 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
drm/v3d: Stop active perfmon if it is being destroyed
If the active performance…
|
CVE-2024-58086 | 7.8 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
Explicitly verif…
|
CVE-2024-58083 | 7.8 | CWE-416 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
media: uvcvideo: Fix crash during unbind if gpio unit is in use
We used the wro…
|
CVE-2024-58079 | 7.8 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
wifi: rtlwifi: remove unused check_buddy_priv
Commit 2461c7d60f9f ("rtlwifi: Up…
|
CVE-2024-58072 | 7.8 | CWE-416 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync
T…
|
CVE-2024-58013 | 7.8 | CWE-416 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
media: uvcvideo: Remove dangling pointers
When an async control is written, we …
|
CVE-2024-58002 | 7.8 | CWE-416 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
net_sched: sch_sfq: don't allow 1 packet limit
The current implementation does …
|
CVE-2024-57996 | 7.8 | CWE-129 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
media: uvcvideo: Fix double free in error path
If the uvc_status_init() functio…
|
CVE-2024-57980 | 7.8 | CWE-415 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
pps: Fix a use-after-free
On a board running ntpd and gpsd, I'm seeing a consis…
|
CVE-2024-57979 | 7.8 | CWE-416 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
topology: Keep the cpumask unchanged when printing cpumap
During fuzz testing, …
|
CVE-2024-57917 | 7.8 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
scsi: sg: Fix slab-use-after-free read in sg_release()
Fix a use-after-free bug…
|
CVE-2024-56631 | 7.8 | CWE-416 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
scsi: ufs: bsg: Set bsg_queue to NULL after removal
Currently, this does not ca…
|
CVE-2024-54458 | 7.8 | CWE-416 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
block: fix uaf for flush rq while iterating tags
blk_mq_clear_flush_rq_mapping(…
|
CVE-2024-53170 | 7.8 | CWE-416 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
block, bfq: fix bfqq uaf in bfq_limit_depth()
Set new allocated bfqq to bic or …
|
CVE-2024-53166 | 7.8 | CWE-416 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix overloading of MEM_UNINIT's meaning
Lonial reported an issue in the BP…
|
CVE-2024-50164 | 7.8 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
bpf: Prevent tail call between progs attached to different hooks
bpf progs can …
|
CVE-2024-50063 | 7.8 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
fscache: delete fscache_cookie_lru_timer when fscache exits to avoid UAF
The fs…
|
CVE-2024-46786 | 7.8 | CWE-416 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
wifi: iwlwifi: mvm: ensure offloading TID queue exists
The resume code path ass…
|
CVE-2024-27056 | 7.8 | — | — | |
|
OpenSSL
Rapid7 Minerva Armor versions below 4.5.5 suffer from a privilege escalation vulnerability whereby an authenticated attacker can elevate privileges a…
|
CVE-2024-0394 | 7.8 | CWE-862 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
netfilter: allow exp not to be removed in nf_ct_find_expectation
Currently nf_c…
|
CVE-2023-52927 | 7.8 | CWE-416 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
smb: client: require a full NFS mode SID before reading mode bits
parse_dacl() …
|
CVE-2026-43350 | 7.6 | CWE-125 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup
rfcomm_sock_…
|
CVE-2026-98290 | 7.5 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
rds: ib: use rds_conn_drop() on protocol version mismatch
rds_ib_cm_connect_com…
|
CVE-2026-98257 | 7.5 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
smb: client: cancel reconnect work in clean_demultiplex_info()
clean_demultiple…
|
CVE-2026-98175 | 7.5 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
smb: client: fix rlist race and missing initialization
TCP_Server_Info.rlist is…
|
CVE-2026-98174 | 7.5 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
smb: client: fix use-after-free of iface in cifs_try_adding_channels()
cifs_try…
|
CVE-2026-98173 | 7.5 | — | — | |
|
Windows
Double free in Windows Internet Information Services allows an unauthorized attacker to deny service over a network.
|
CVE-2026-97830 | 7.5 | CWE-415 | — | |
|
Windows
Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny service over a network.
|
CVE-2026-96945 | 7.5 | CWE-248 | — | |
|
Windows
Missing reference to active allocated resource in Windows SMB Server allows an unauthorized attacker to deny service over a network.
|
CVE-2026-96325 | 7.5 | CWE-771 | — | |
|
Windows
Stack-based buffer overflow in Windows Host Guardian Service allows an unauthorized attacker to deny service over a network.
|
CVE-2026-96248 | 7.5 | CWE-121 | — | |
|
Windows
Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
|
CVE-2026-96245 | 7.5 | CWE-125 | — | |
|
Windows
Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.
|
CVE-2026-96071 | 7.5 | CWE-122 | — | |
|
curl
libcurl would reuse a previously created connection even when some mTLS config
related option had been changed that should have prohibited reuse.
li…
|
CVE-2026-8932 | 7.5 | CWE-305 | — | |
|
Windows
Heap-based buffer overflow in Windows Storage Spaces Controller allows an unauthorized attacker to deny service over a network.
|
CVE-2026-87716 | 7.5 | CWE-122 | — | |
|
Windows
Use after free in Windows Bluetooth Port Driver allows an unauthorized attacker to elevate privileges over an adjacent network.
|
CVE-2026-87713 | 7.5 | CWE-416 | — | |
|
Microsoft Exchange
Improper verification of cryptographic signature in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-87696 | 7.5 | CWE-347 | — | |
|
Apache Tomcat
Improper handling of length parameter inconsistency vulnerability in Apache Tomcat allows WebSocket message smuggling when per-message-deflate is use…
|
CVE-2026-87022 | 7.5 | CWE-130 | — | |
|
Windows
Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.
|
CVE-2026-85808 | 7.5 | CWE-125 | — | |
|
Windows
Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose information over a network.
|
CVE-2026-85353 | 7.5 | CWE-125 | — | |
|
Windows
Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network.
|
CVE-2026-85334 | 7.5 | CWE-125 | — | |
|
Windows
Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a netw…
|
CVE-2026-85322 | 7.5 | CWE-908 | — | |
|
OpenSSL
Issue summary: The first concurrent use of the same X.509 certificate by
several threads may cause its cached extension data to be freed while
anothe…
|
CVE-2026-84783 | 7.5 | CWE-416 | — | |
|
Citrix NetScaler
Insufficient input validation in NetScaler ADC and NetScaler Gateway leading to memory overread if NetScaler ADC or NetScaler Gateway is configured a…
|
CVE-2026-8451 | 7.5 | CWE-125 | — | |
|
Windows
Null pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.
|
CVE-2026-84017 | 7.5 | CWE-476 | — |