Security News

주요 제품 취약점 (2,105건)

"Windows" 관련 CVE만 표시 중 · 필터 해제 ×

기술CVE심각도유형KEV등재일
Windows
Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network.
CVE-2026-69637 5.7 CWE-125 —
Windows
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information over a network.
CVE-2026-69591 5.7 CWE-125 —
Windows
Out-of-bounds read in Windows SMB Client allows an authorized attacker to disclose information over a network.
CVE-2026-69572 5.7 CWE-125 —
Windows
Untrusted pointer dereference in Windows Print Spooler Components allows an authorized attacker to deny service over a network.
CVE-2026-69569 5.7 CWE-822 —
Windows
Generation of error message containing sensitive information in Windows Print Spooler Components allows an authorized attacker to disclose informatio…
CVE-2026-69552 5.7 CWE-209 —
Windows
Insertion of sensitive information into externally-accessible file or directory in Microsoft Windows Search Component allows an authorized attacker t…
CVE-2026-69507 5.7 CWE-538 —
Windows
Buffer over-read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network.
CVE-2026-69416 5.7 CWE-126 —
Windows
Missing release of memory after effective lifetime in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network.
CVE-2026-69405 5.7 CWE-401 —
Windows
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information over a network.
CVE-2026-69393 5.7 CWE-125 —
Windows
Out-of-bounds read in Windows Network File System allows an authorized attacker to deny service over a network.
CVE-2026-69372 5.7 CWE-125 —
Windows
Use of uninitialized resource in Windows Management Instrumentation allows an authorized attacker to disclose information over a network.
CVE-2026-69349 5.7 CWE-908 —
Windows
Out-of-bounds read in Windows Program Compatibility Assistant Service allows an authorized attacker to disclose information over a network.
CVE-2026-68874 5.7 CWE-125 —
Windows
Exposure of sensitive system information to an unauthorized control sphere in Windows Secure Kernel Mode allows an authorized attacker to disclose in…
CVE-2026-96865 5.6 CWE-497 —
Windows
Inadequate encryption strength in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to perform spoofing locally.
CVE-2026-83885 5.6 CWE-326 —
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Virtualization-Based Security (VBS) Enclave al…
CVE-2026-70097 5.6 CWE-362 —
Windows
Null pointer dereference in Windows VMSwitch allows an authorized attacker to deny service locally.
CVE-2026-69978 5.6 CWE-476 —
Windows
Exposure of sensitive system information to an unauthorized control sphere in Windows Win32K allows an authorized attacker to disclose information lo…
CVE-2026-69832 5.6 CWE-497 —
Windows
Improper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized att…
CVE-2026-97790 5.5 CWE-59 —
Windows
Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose …
CVE-2026-96948 5.5 CWE-497 —
Windows
Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose informat…
CVE-2026-96944 5.5 CWE-538 —
Windows
Exposure of sensitive system information to an unauthorized control sphere in Windows NTFS allows an authorized attacker to disclose information loca…
CVE-2026-96935 5.5 CWE-497 —
Windows
Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.
CVE-2026-96930 5.5 CWE-125 —
Windows
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
CVE-2026-96927 5.5 CWE-125 —
Windows
Integer underflow (wrap or wraparound) in Windows NTFS allows an authorized attacker to disclose information locally.
CVE-2026-96925 5.5 CWE-191 —
Windows
Access of resource using incompatible type ('type confusion') in Windows Message Queuing Queue Manager allows an authorized attacker to disclose info…
CVE-2026-96921 5.5 CWE-843 —
Windows
Untrusted pointer dereference in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.
CVE-2026-96910 5.5 CWE-822 —
Windows
Out-of-bounds read in Windows USB Print Driver allows an authorized attacker to disclose information locally.
CVE-2026-96860 5.5 CWE-125 —
Windows
Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally.
CVE-2026-96859 5.5 CWE-125 —
Windows
Missing authentication for critical function in Windows Security Account Manager allows an authorized attacker to perform tampering locally.
CVE-2026-96858 5.5 CWE-306 —
Windows
Files or directories accessible to external parties in Windows Projected File System allows an authorized attacker to disclose information locally.
CVE-2026-96857 5.5 CWE-552 —
Windows
Improper access control in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.
CVE-2026-96855 5.5 CWE-862 —
Windows
Access of resource using incompatible type ('type confusion') in Windows Device Association Service allows an authorized attacker to disclose informa…
CVE-2026-96854 5.5 CWE-843 —
Windows
Buffer over-read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.
CVE-2026-96851 5.5 CWE-126 —
Windows
Use of uninitialized resource in Windows Modern Device Management (MDM) allows an authorized attacker to disclose information locally.
CVE-2026-96850 5.5 CWE-170 —
Windows
Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.
CVE-2026-96849 5.5 CWE-908 —
Windows
Buffer over-read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
CVE-2026-96848 5.5 CWE-126 —
Windows
Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to perform tampering locally.
CVE-2026-96316 5.5 CWE-862 —
Windows
Missing authorization in Windows Overlay Filter allows an authorized attacker to perform tampering locally.
CVE-2026-96315 5.5 CWE-862 —
Windows
Out-of-bounds read in Windows Audio Service allows an authorized attacker to disclose information locally.
CVE-2026-96314 5.5 CWE-125 —
Windows
Improper authorization in Windows Network List Service allows an authorized attacker to perform tampering locally.
CVE-2026-96311 5.5 CWE-862 —
Windows
Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.
CVE-2026-96247 5.5 CWE-908 —
Windows
Improper access control in Windows Update Stack allows an authorized attacker to perform tampering locally.
CVE-2026-96218 5.5 CWE-15 —
Windows
Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to disclose informatio…
CVE-2026-96183 5.5 CWE-306 —
Windows
Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally.
CVE-2026-95904 5.5 CWE-126 —
Windows
Improper authorization in Windows Encrypting File System (EFS) allows an authorized attacker to perform tampering locally.
CVE-2026-88162 5.5 CWE-863 —
Windows
Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally.
CVE-2026-88140 5.5 CWE-125 —
Windows
Improper access control in Windows Host Guardian Service allows an authorized attacker to perform tampering locally.
CVE-2026-87709 5.5 CWE-250 —
Windows
Out-of-bounds read in Windows Remote Access Service Infrastructure allows an authorized attacker to disclose information locally.
CVE-2026-87698 5.5 CWE-125 —
Windows
Improper access control in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally.
CVE-2026-85938 5.5 CWE-862 —
Windows
Buffer over-read in Windows USB Driver allows an authorized attacker to disclose information locally.
CVE-2026-85935 5.5 CWE-126 —
Windows
Buffer over-read in Windows StateRepository API allows an authorized attacker to disclose information locally.
CVE-2026-85910 5.5 CWE-126 —
Windows
Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.
CVE-2026-85909 5.5 CWE-822 —
Windows
Improper authentication in Windows DHCP Server allows an authorized attacker to bypass a security feature locally.
CVE-2026-85865 5.5 CWE-288 —
Windows
Insertion of sensitive information into log file in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.
CVE-2026-85857 5.5 CWE-532 —
Windows
Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.
CVE-2026-85852 5.5 CWE-125 —
Windows
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to disclose information locally.
CVE-2026-85831 5.5 CWE-122 —
Windows
Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally.
CVE-2026-85830 5.5 CWE-125 —
Windows
Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally.
CVE-2026-85815 5.5 CWE-125 —
Windows
Files or directories accessible to external parties in Windows Bind Filter Driver allows an authorized attacker to disclose information locally.
CVE-2026-85812 5.5 CWE-552 —
Windows
Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to disclose information locally.
CVE-2026-85794 5.5 CWE-125 —