주요 제품 취약점 (3,435건)
Windows
infra
2105건
KEV 293 · 최근 2026-10-13
Linux 커널
infra
908건
KEV 31 · 최근 2026-10-28
Cisco IOS
infra
58건
KEV 44 · 최근 2026-07-13
Ivanti
infra
46건
KEV 36 · 최근 2026-10-13
Microsoft Exchange
infra
43건
KEV 20 · 최근 2026-05-15
Fortinet
infra
41건
KEV 22 · 최근 2026-10-16
Apache HTTP
infra
33건
KEV 11 · 최근 2026-08-24
Citrix NetScaler
infra
31건
KEV 16 · 최근 2026-10-04
Apache Tomcat
infra
30건
KEV 8 · 최근 2026-08-04
OpenSSH
infra
30건
KEV 3 · 최근 2025-10-02
Node.js
infra
24건
KEV 2 · 최근 2025-01-14
nginx
infra
16건
KEV 0
Palo Alto PAN-OS
infra
15건
KEV 14 · 최근 2026-10-14
VMware vCenter
infra
13건
KEV 12 · 최근 2026-08-18
Atlassian Confluence
infra
10건
KEV 10 · 최근 2026-10-15
Redis
infra
9건
KEV 3 · 최근 2026-05-26
curl
infra
8건
KEV 1 · 최근 2023-05-12
OpenSSL
infra
8건
KEV 1 · 최근 2022-05-04
VMware ESXi
infra
7건
KEV 7 · 최근 2025-03-04
| 기술 | CVE | 심각도 | 유형 | KEV | 등재일 |
|---|---|---|---|---|---|
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
netfilter: allow exp not to be removed in nf_ct_find_expectation
Currently nf_c…
|
CVE-2023-52927 | 7.8 | CWE-416 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
smb: client: require a full NFS mode SID before reading mode bits
parse_dacl() …
|
CVE-2026-43350 | 7.6 | CWE-125 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup
rfcomm_sock_…
|
CVE-2026-98290 | 7.5 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
rds: ib: use rds_conn_drop() on protocol version mismatch
rds_ib_cm_connect_com…
|
CVE-2026-98257 | 7.5 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
smb: client: cancel reconnect work in clean_demultiplex_info()
clean_demultiple…
|
CVE-2026-98175 | 7.5 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
smb: client: fix rlist race and missing initialization
TCP_Server_Info.rlist is…
|
CVE-2026-98174 | 7.5 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
smb: client: fix use-after-free of iface in cifs_try_adding_channels()
cifs_try…
|
CVE-2026-98173 | 7.5 | — | — | |
|
Windows
Double free in Windows Internet Information Services allows an unauthorized attacker to deny service over a network.
|
CVE-2026-97830 | 7.5 | CWE-415 | — | |
|
Windows
Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny service over a network.
|
CVE-2026-96945 | 7.5 | CWE-248 | — | |
|
Windows
Missing reference to active allocated resource in Windows SMB Server allows an unauthorized attacker to deny service over a network.
|
CVE-2026-96325 | 7.5 | CWE-771 | — | |
|
Windows
Stack-based buffer overflow in Windows Host Guardian Service allows an unauthorized attacker to deny service over a network.
|
CVE-2026-96248 | 7.5 | CWE-121 | — | |
|
Windows
Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
|
CVE-2026-96245 | 7.5 | CWE-125 | — | |
|
Windows
Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.
|
CVE-2026-96071 | 7.5 | CWE-122 | — | |
|
curl
libcurl would reuse a previously created connection even when some mTLS config
related option had been changed that should have prohibited reuse.
li…
|
CVE-2026-8932 | 7.5 | CWE-305 | — | |
|
Windows
Heap-based buffer overflow in Windows Storage Spaces Controller allows an unauthorized attacker to deny service over a network.
|
CVE-2026-87716 | 7.5 | CWE-122 | — | |
|
Windows
Use after free in Windows Bluetooth Port Driver allows an unauthorized attacker to elevate privileges over an adjacent network.
|
CVE-2026-87713 | 7.5 | CWE-416 | — | |
|
Microsoft Exchange
Improper verification of cryptographic signature in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-87696 | 7.5 | CWE-347 | — | |
|
Apache Tomcat
Improper handling of length parameter inconsistency vulnerability in Apache Tomcat allows WebSocket message smuggling when per-message-deflate is use…
|
CVE-2026-87022 | 7.5 | CWE-130 | — | |
|
Windows
Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.
|
CVE-2026-85808 | 7.5 | CWE-125 | — | |
|
Windows
Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose information over a network.
|
CVE-2026-85353 | 7.5 | CWE-125 | — | |
|
Windows
Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network.
|
CVE-2026-85334 | 7.5 | CWE-125 | — | |
|
Windows
Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a netw…
|
CVE-2026-85322 | 7.5 | CWE-908 | — | |
|
OpenSSL
Issue summary: The first concurrent use of the same X.509 certificate by
several threads may cause its cached extension data to be freed while
anothe…
|
CVE-2026-84783 | 7.5 | CWE-416 | — | |
|
Citrix NetScaler
Insufficient input validation in NetScaler ADC and NetScaler Gateway leading to memory overread if NetScaler ADC or NetScaler Gateway is configured a…
|
CVE-2026-8451 | 7.5 | CWE-125 | — | |
|
Windows
Null pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.
|
CVE-2026-84017 | 7.5 | CWE-476 | — | |
|
Windows
Out-of-bounds read in Windows Key Distribution Center allows an unauthorized attacker to deny service over a network.
|
CVE-2026-84001 | 7.5 | CWE-125 | — | |
|
Windows
Out-of-bounds read in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to deny service over a network.
|
CVE-2026-83989 | 7.5 | CWE-125 | — | |
|
Windows
Stack-based buffer overflow in Windows GDI allows an unauthorized attacker to deny service over a network.
|
CVE-2026-83860 | 7.5 | CWE-121 | — | |
|
Windows
Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network.
|
CVE-2026-83856 | 7.5 | CWE-125 | — | |
|
Windows
Integer underflow (wrap or wraparound) in Windows WLAN Service allows an unauthorized attacker to deny service over a network.
|
CVE-2026-83855 | 7.5 | CWE-191 | — | |
|
Windows
Out-of-bounds read in Windows Internet Key Exchange (IKE) Protocol allows an unauthorized attacker to deny service over a network.
|
CVE-2026-83843 | 7.5 | CWE-125 | — | |
|
Windows
Heap-based buffer overflow in Windows IKE Extension allows an unauthorized attacker to deny service over a network.
|
CVE-2026-83795 | 7.5 | CWE-122 | — | |
|
OpenSSH
Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
|
CVE-2026-83754 | 7.5 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
|
CVE-2026-83754 | 7.5 | CWE-122 | — | |
|
Windows
Use after free in Windows Bluetooth Service allows an unauthorized attacker to execute code over an adjacent network.
|
CVE-2026-83739 | 7.5 | CWE-416 | — | |
|
Windows
Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over a network.
|
CVE-2026-83677 | 7.5 | CWE-401 | — | |
|
Windows
Null pointer dereference in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
|
CVE-2026-83665 | 7.5 | CWE-476 | — | |
|
Windows
Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over a network.
|
CVE-2026-83516 | 7.5 | CWE-125 | — | |
|
Apache Tomcat
Missing release of resource after effective lifetime, Comparison using wrong factors vulnerability in Apache Tomcat allows a denial of service as a r…
|
CVE-2026-79677 | 7.5 | CWE-772 | — | |
|
Apache Tomcat
Allocation of resources without limits or throttling vulnerability in Apache Tomcat allows an unauthenticated AJP request to pin an AJP processing th…
|
CVE-2026-78383 | 7.5 | CWE-770 | — | |
|
Windows
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
|
CVE-2026-77895 | 7.5 | CWE-125 | — | |
|
Windows
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
|
CVE-2026-77893 | 7.5 | CWE-125 | — | |
|
Windows
Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
|
CVE-2026-77890 | 7.5 | CWE-843 | — | |
|
Windows
Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
|
CVE-2026-77889 | 7.5 | CWE-843 | — | |
|
Windows
Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
|
CVE-2026-77888 | 7.5 | CWE-843 | — | |
|
Windows
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
|
CVE-2026-77886 | 7.5 | CWE-125 | — | |
|
Apache Tomcat
Uncontrolled Resource Consumption vulnerability in Apache Tomcat during sending of WebSocket close message enabled a DoS attack.
This issue affect…
|
CVE-2026-77791 | 7.5 | CWE-400 | — | |
|
Windows
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
|
CVE-2026-77502 | 7.5 | CWE-125 | — | |
|
Windows
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
|
CVE-2026-77501 | 7.5 | CWE-125 | — | |
|
Windows
Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
|
CVE-2026-77499 | 7.5 | CWE-843 | — | |
|
Windows
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
|
CVE-2026-77498 | 7.5 | CWE-125 | — | |
|
Windows
Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
|
CVE-2026-77494 | 7.5 | CWE-843 | — | |
|
Windows
Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to execute code locally.
|
CVE-2026-73017 | 7.5 | CWE-122 | — | |
|
Windows
Use of uninitialized resource in Windows Failover Cluster allows an unauthorized attacker to disclose information over a network.
|
CVE-2026-72989 | 7.5 | CWE-908 | — | |
|
Windows
Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network.
|
CVE-2026-72954 | 7.5 | CWE-416 | — | |
|
Windows
Null pointer dereference in Windows SMB Server Network Transport Driver (srvnet.sys) allows an unauthorized attacker to deny service over a network.
|
CVE-2026-72949 | 7.5 | CWE-476 | — | |
|
Windows
Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network.
|
CVE-2026-72943 | 7.5 | CWE-416 | — | |
|
Windows
Buffer over-read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network.
|
CVE-2026-72932 | 7.5 | CWE-126 | — | |
|
Windows
Use after free in Windows DNS allows an authorized attacker to execute code over a network.
|
CVE-2026-72928 | 7.5 | CWE-416 | — | |
|
Windows
Exposure of sensitive system information to an unauthorized control sphere in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attac…
|
CVE-2026-71330 | 7.5 | CWE-497 | — |