주요 제품 취약점 (3,478건)
Windows
infra
2105건
KEV 293 · 최근 2026-10-13
Linux 커널
infra
908건
KEV 31 · 최근 2026-10-28
Cisco IOS
infra
58건
KEV 44 · 최근 2026-07-13
Ivanti
infra
46건
KEV 36 · 최근 2026-10-13
Microsoft Exchange
infra
43건
KEV 20 · 최근 2026-05-15
Fortinet
infra
41건
KEV 22 · 최근 2026-10-16
Apache HTTP
infra
33건
KEV 11 · 최근 2026-08-24
Citrix NetScaler
infra
31건
KEV 16 · 최근 2026-10-04
Apache Tomcat
infra
30건
KEV 8 · 최근 2026-08-04
OpenSSH
infra
30건
KEV 3 · 최근 2025-10-02
PostgreSQL
finance
28건
KEV 2 · 최근 2026-09-02
Node.js
infra
24건
KEV 2 · 최근 2025-01-14
nginx
infra
16건
KEV 0
Palo Alto PAN-OS
infra
15건
KEV 14 · 최근 2026-10-14
VMware vCenter
infra
13건
KEV 12 · 최근 2026-08-18
Atlassian Confluence
infra
10건
KEV 10 · 최근 2026-10-15
MySQL/MariaDB
finance
10건
KEV 2 · 최근 2024-11-07
Redis
infra
9건
KEV 3 · 최근 2026-05-26
curl
infra
8건
KEV 1 · 최근 2023-05-12
OpenSSL
infra
8건
KEV 1 · 최근 2022-05-04
VMware ESXi
infra
7건
KEV 7 · 최근 2025-03-04
wolfSSL
finance
3건
KEV 0
Apache Spark
finance
1건
KEV 1 · 최근 2023-03-07
Spring Framework
finance
1건
KEV 1 · 최근 2022-04-04
| 기술 | CVE | 심각도 | 유형 | KEV | 등재일 |
|---|---|---|---|---|---|
|
Windows
Out-of-bounds read in Windows Key Distribution Center allows an unauthorized attacker to deny service over a network.
|
CVE-2026-84001 | 7.5 | CWE-125 | — | |
|
Windows
Out-of-bounds read in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to deny service over a network.
|
CVE-2026-83989 | 7.5 | CWE-125 | — | |
|
Windows
Stack-based buffer overflow in Windows GDI allows an unauthorized attacker to deny service over a network.
|
CVE-2026-83860 | 7.5 | CWE-121 | — | |
|
Windows
Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network.
|
CVE-2026-83856 | 7.5 | CWE-125 | — | |
|
Windows
Integer underflow (wrap or wraparound) in Windows WLAN Service allows an unauthorized attacker to deny service over a network.
|
CVE-2026-83855 | 7.5 | CWE-191 | — | |
|
Windows
Out-of-bounds read in Windows Internet Key Exchange (IKE) Protocol allows an unauthorized attacker to deny service over a network.
|
CVE-2026-83843 | 7.5 | CWE-125 | — | |
|
Windows
Heap-based buffer overflow in Windows IKE Extension allows an unauthorized attacker to deny service over a network.
|
CVE-2026-83795 | 7.5 | CWE-122 | — | |
|
OpenSSH
Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
|
CVE-2026-83754 | 7.5 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
|
CVE-2026-83754 | 7.5 | CWE-122 | — | |
|
Windows
Use after free in Windows Bluetooth Service allows an unauthorized attacker to execute code over an adjacent network.
|
CVE-2026-83739 | 7.5 | CWE-416 | — | |
|
Windows
Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over a network.
|
CVE-2026-83677 | 7.5 | CWE-401 | — | |
|
Windows
Null pointer dereference in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
|
CVE-2026-83665 | 7.5 | CWE-476 | — | |
|
Windows
Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over a network.
|
CVE-2026-83516 | 7.5 | CWE-125 | — | |
|
Apache Tomcat
Missing release of resource after effective lifetime, Comparison using wrong factors vulnerability in Apache Tomcat allows a denial of service as a r…
|
CVE-2026-79677 | 7.5 | CWE-772 | — | |
|
Apache Tomcat
Allocation of resources without limits or throttling vulnerability in Apache Tomcat allows an unauthenticated AJP request to pin an AJP processing th…
|
CVE-2026-78383 | 7.5 | CWE-770 | — | |
|
Windows
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
|
CVE-2026-77895 | 7.5 | CWE-125 | — | |
|
Windows
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
|
CVE-2026-77893 | 7.5 | CWE-125 | — | |
|
Windows
Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
|
CVE-2026-77890 | 7.5 | CWE-843 | — | |
|
Windows
Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
|
CVE-2026-77889 | 7.5 | CWE-843 | — | |
|
Windows
Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
|
CVE-2026-77888 | 7.5 | CWE-843 | — | |
|
Windows
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
|
CVE-2026-77886 | 7.5 | CWE-125 | — | |
|
Apache Tomcat
Uncontrolled Resource Consumption vulnerability in Apache Tomcat during sending of WebSocket close message enabled a DoS attack.
This issue affect…
|
CVE-2026-77791 | 7.5 | CWE-400 | — | |
|
Windows
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
|
CVE-2026-77502 | 7.5 | CWE-125 | — | |
|
Windows
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
|
CVE-2026-77501 | 7.5 | CWE-125 | — | |
|
Windows
Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
|
CVE-2026-77499 | 7.5 | CWE-843 | — | |
|
Windows
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
|
CVE-2026-77498 | 7.5 | CWE-125 | — | |
|
Windows
Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
|
CVE-2026-77494 | 7.5 | CWE-843 | — | |
|
Windows
Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to execute code locally.
|
CVE-2026-73017 | 7.5 | CWE-122 | — | |
|
Windows
Use of uninitialized resource in Windows Failover Cluster allows an unauthorized attacker to disclose information over a network.
|
CVE-2026-72989 | 7.5 | CWE-908 | — | |
|
Windows
Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network.
|
CVE-2026-72954 | 7.5 | CWE-416 | — | |
|
Windows
Null pointer dereference in Windows SMB Server Network Transport Driver (srvnet.sys) allows an unauthorized attacker to deny service over a network.
|
CVE-2026-72949 | 7.5 | CWE-476 | — | |
|
Windows
Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network.
|
CVE-2026-72943 | 7.5 | CWE-416 | — | |
|
Windows
Buffer over-read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network.
|
CVE-2026-72932 | 7.5 | CWE-126 | — | |
|
Windows
Use after free in Windows DNS allows an authorized attacker to execute code over a network.
|
CVE-2026-72928 | 7.5 | CWE-416 | — | |
|
Windows
Exposure of sensitive system information to an unauthorized control sphere in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attac…
|
CVE-2026-71330 | 7.5 | CWE-497 | — | |
|
Windows
Improper null termination in Windows Remote Desktop Protocol allows an unauthorized attacker to disclose information over a network.
|
CVE-2026-70587 | 7.5 | CWE-170 | — | |
|
Windows
Out-of-bounds read in Windows Mobile Broadband allows an unauthorized attacker to disclose information over a network.
|
CVE-2026-70579 | 7.5 | CWE-125 | — | |
|
Windows
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
|
CVE-2026-70570 | 7.5 | CWE-416 | — | |
|
OpenSSH
Allocation of resources without limits or throttling in OpenSSH for Windows allows an unauthorized attacker to deny service over a network.
|
CVE-2026-70163 | 7.5 | CWE-770 | — | |
|
Windows
Allocation of resources without limits or throttling in OpenSSH for Windows allows an unauthorized attacker to deny service over a network.
|
CVE-2026-70163 | 7.5 | CWE-770 | — | |
|
Windows
Missing release of memory after effective lifetime in Windows DNS allows an unauthorized attacker to deny service over a network.
|
CVE-2026-70155 | 7.5 | CWE-401 | — | |
|
Windows
Allocation of resources without limits or throttling in Windows SMB Server allows an unauthorized attacker to deny service over a network.
|
CVE-2026-70133 | 7.5 | CWE-770 | — | |
|
Windows
Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network.
|
CVE-2026-70095 | 7.5 | CWE-122 | — | |
|
Windows
Uncaught exception in Windows DNS allows an unauthorized attacker to deny service over a network.
|
CVE-2026-70082 | 7.5 | CWE-248 | — | |
|
Windows
Improper enforcement of behavioral workflow in Windows DNS allows an unauthorized attacker to deny service over a network.
|
CVE-2026-70079 | 7.5 | CWE-841 | — | |
|
Windows
Missing release of memory after effective lifetime in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
|
CVE-2026-70065 | 7.5 | CWE-401 | — | |
|
Windows
Out-of-bounds write in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
|
CVE-2026-70058 | 7.5 | CWE-787 | — | |
|
Windows
Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to deny service over a network.
|
CVE-2026-70031 | 7.5 | CWE-122 | — | |
|
Windows
Use after free in Windows Cryptographic Services allows an authorized attacker to execute code over a network.
|
CVE-2026-70014 | 7.5 | CWE-416 | — | |
|
Windows
Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.
|
CVE-2026-69992 | 7.5 | CWE-416 | — | |
|
Windows
Use after free in Windows Virtual Trusted Platform Module allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69890 | 7.5 | CWE-416 | — | |
|
Windows
Null pointer dereference in Windows IKE Extension allows an unauthorized attacker to deny service over a network.
|
CVE-2026-69881 | 7.5 | CWE-476 | — | |
|
Windows
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
|
CVE-2026-69852 | 7.5 | CWE-122 | — | |
|
Windows
Improper validation of consistency within input in Windows TCP/IP allows an unauthorized attacker to bypass a security feature over a network.
|
CVE-2026-69793 | 7.5 | CWE-1288 | — | |
|
Windows
Out-of-bounds read in Windows Kerberos allows an unauthorized attacker to deny service over a network.
|
CVE-2026-69760 | 7.5 | CWE-125 | — | |
|
Windows
Null pointer dereference in Windows Kerberos allows an unauthorized attacker to deny service over a network.
|
CVE-2026-69744 | 7.5 | CWE-476 | — | |
|
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hello allows an authorized attacker to elevate…
|
CVE-2026-69710 | 7.5 | CWE-362 | — | |
|
Windows
Integer overflow or wraparound in Windows DNS allows an unauthorized attacker to deny service over a network.
|
CVE-2026-69631 | 7.5 | CWE-190 | — | |
|
Windows
Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network.
|
CVE-2026-69607 | 7.5 | CWE-416 | — | |
|
Windows
Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.
|
CVE-2026-69599 | 7.5 | CWE-416 | — |