주요 제품 취약점 (3,435건)
Windows
infra
2105건
KEV 293 · 최근 2026-10-13
Linux 커널
infra
908건
KEV 31 · 최근 2026-10-28
Cisco IOS
infra
58건
KEV 44 · 최근 2026-07-13
Ivanti
infra
46건
KEV 36 · 최근 2026-10-13
Microsoft Exchange
infra
43건
KEV 20 · 최근 2026-05-15
Fortinet
infra
41건
KEV 22 · 최근 2026-10-16
Apache HTTP
infra
33건
KEV 11 · 최근 2026-08-24
Citrix NetScaler
infra
31건
KEV 16 · 최근 2026-10-04
Apache Tomcat
infra
30건
KEV 8 · 최근 2026-08-04
OpenSSH
infra
30건
KEV 3 · 최근 2025-10-02
Node.js
infra
24건
KEV 2 · 최근 2025-01-14
nginx
infra
16건
KEV 0
Palo Alto PAN-OS
infra
15건
KEV 14 · 최근 2026-10-14
VMware vCenter
infra
13건
KEV 12 · 최근 2026-08-18
Atlassian Confluence
infra
10건
KEV 10 · 최근 2026-10-15
Redis
infra
9건
KEV 3 · 최근 2026-05-26
curl
infra
8건
KEV 1 · 최근 2023-05-12
OpenSSL
infra
8건
KEV 1 · 최근 2022-05-04
VMware ESXi
infra
7건
KEV 7 · 최근 2025-03-04
| 기술 | CVE | 심각도 | 유형 | KEV | 등재일 |
|---|---|---|---|---|---|
|
Windows
Improper null termination in Windows Remote Desktop Protocol allows an unauthorized attacker to disclose information over a network.
|
CVE-2026-70587 | 7.5 | CWE-170 | — | |
|
Windows
Out-of-bounds read in Windows Mobile Broadband allows an unauthorized attacker to disclose information over a network.
|
CVE-2026-70579 | 7.5 | CWE-125 | — | |
|
Windows
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
|
CVE-2026-70570 | 7.5 | CWE-416 | — | |
|
OpenSSH
Allocation of resources without limits or throttling in OpenSSH for Windows allows an unauthorized attacker to deny service over a network.
|
CVE-2026-70163 | 7.5 | CWE-770 | — | |
|
Windows
Allocation of resources without limits or throttling in OpenSSH for Windows allows an unauthorized attacker to deny service over a network.
|
CVE-2026-70163 | 7.5 | CWE-770 | — | |
|
Windows
Missing release of memory after effective lifetime in Windows DNS allows an unauthorized attacker to deny service over a network.
|
CVE-2026-70155 | 7.5 | CWE-401 | — | |
|
Windows
Allocation of resources without limits or throttling in Windows SMB Server allows an unauthorized attacker to deny service over a network.
|
CVE-2026-70133 | 7.5 | CWE-770 | — | |
|
Windows
Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network.
|
CVE-2026-70095 | 7.5 | CWE-122 | — | |
|
Windows
Uncaught exception in Windows DNS allows an unauthorized attacker to deny service over a network.
|
CVE-2026-70082 | 7.5 | CWE-248 | — | |
|
Windows
Improper enforcement of behavioral workflow in Windows DNS allows an unauthorized attacker to deny service over a network.
|
CVE-2026-70079 | 7.5 | CWE-841 | — | |
|
Windows
Missing release of memory after effective lifetime in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
|
CVE-2026-70065 | 7.5 | CWE-401 | — | |
|
Windows
Out-of-bounds write in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
|
CVE-2026-70058 | 7.5 | CWE-787 | — | |
|
Windows
Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to deny service over a network.
|
CVE-2026-70031 | 7.5 | CWE-122 | — | |
|
Windows
Use after free in Windows Cryptographic Services allows an authorized attacker to execute code over a network.
|
CVE-2026-70014 | 7.5 | CWE-416 | — | |
|
Windows
Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.
|
CVE-2026-69992 | 7.5 | CWE-416 | — | |
|
Windows
Use after free in Windows Virtual Trusted Platform Module allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69890 | 7.5 | CWE-416 | — | |
|
Windows
Null pointer dereference in Windows IKE Extension allows an unauthorized attacker to deny service over a network.
|
CVE-2026-69881 | 7.5 | CWE-476 | — | |
|
Windows
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
|
CVE-2026-69852 | 7.5 | CWE-122 | — | |
|
Windows
Improper validation of consistency within input in Windows TCP/IP allows an unauthorized attacker to bypass a security feature over a network.
|
CVE-2026-69793 | 7.5 | CWE-1288 | — | |
|
Windows
Out-of-bounds read in Windows Kerberos allows an unauthorized attacker to deny service over a network.
|
CVE-2026-69760 | 7.5 | CWE-125 | — | |
|
Windows
Null pointer dereference in Windows Kerberos allows an unauthorized attacker to deny service over a network.
|
CVE-2026-69744 | 7.5 | CWE-476 | — | |
|
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hello allows an authorized attacker to elevate…
|
CVE-2026-69710 | 7.5 | CWE-362 | — | |
|
Windows
Integer overflow or wraparound in Windows DNS allows an unauthorized attacker to deny service over a network.
|
CVE-2026-69631 | 7.5 | CWE-190 | — | |
|
Windows
Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network.
|
CVE-2026-69607 | 7.5 | CWE-416 | — | |
|
Windows
Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.
|
CVE-2026-69599 | 7.5 | CWE-416 | — | |
|
Windows
Missing release of memory after effective lifetime in Windows TCP/IP allows an unauthorized attacker to deny service over a network.
|
CVE-2026-69588 | 7.5 | CWE-401 | — | |
|
Windows
Null pointer dereference in Windows IKE Extension allows an unauthorized attacker to deny service over a network.
|
CVE-2026-69587 | 7.5 | CWE-476 | — | |
|
Windows
Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.
|
CVE-2026-69539 | 7.5 | CWE-416 | — | |
|
Windows
Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.
|
CVE-2026-69514 | 7.5 | CWE-122 | — | |
|
Windows
Out-of-bounds read in Windows Device Health Attestation (DHA) allows an unauthorized attacker to disclose information over a network.
|
CVE-2026-69443 | 7.5 | CWE-125 | — | |
|
Windows
Heap-based buffer overflow in Windows IKE Extension allows an authorized attacker to execute code over a network.
|
CVE-2026-69429 | 7.5 | CWE-122 | — | |
|
Windows
Out-of-bounds read in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to deny service over a network.
|
CVE-2026-69428 | 7.5 | CWE-125 | — | |
|
OpenSSH
Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
|
CVE-2026-69397 | 7.5 | CWE-416 | — | |
|
Windows
Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
|
CVE-2026-69397 | 7.5 | CWE-416 | — | |
|
Microsoft Exchange
Uncontrolled recursion in Microsoft Exchange Server allows an unauthorized attacker to deny service over a network.
|
CVE-2026-69378 | 7.5 | CWE-674 | — | |
|
Windows
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
|
CVE-2026-69342 | 7.5 | CWE-125 | — | |
|
Windows
Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to deny service over a network.
|
CVE-2026-68887 | 7.5 | CWE-125 | — | |
|
Apache Tomcat
Uncontrolled Resource Consumption vulnerability in Apache Tomcat via an allocation leak in the HTTP/2 backlog tracking when a stream is reset
This…
|
CVE-2026-68763 | 7.5 | CWE-400 | — | |
|
Apache Tomcat
Off-by-one Error vulnerability in Apache Tomcat impacting the [N] flag on the rewrite valves causes rewrite processing to restart at the second rule …
|
CVE-2026-65927 | 7.5 | CWE-193 | — | |
|
Windows
Null pointer dereference in Windows iSCSI Target Service allows an unauthorized attacker to deny service over a network.
|
CVE-2026-65681 | 7.5 | CWE-476 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
net, bpf: check master for NULL in xdp_master_redirect()
xdp_master_redirect() …
|
CVE-2026-64545 | 7.5 | CWE-476 | — | |
|
Apache HTTP
Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') response smuggling vulnerability in Apache HTTP Server via mod_proxy…
|
CVE-2026-63718 | 7.5 | CWE-444 | — | |
|
Apache HTTP
A NULL pointer dereference in mod_xml2enc in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an untrusted backend…
|
CVE-2026-63686 | 7.5 | CWE-476 | — | |
|
Apache HTTP
Stack-based buffer overflow in mod_vhost_alias in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allows a remote clien…
|
CVE-2026-63292 | 7.5 | CWE-121 | — | |
|
Apache HTTP
Improper validation of FTP PASV reply address in mod_proxy_ftp in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allow…
|
CVE-2026-63045 | 7.5 | CWE-284 | — | |
|
Windows
Use after free in Windows DNS allows an authorized attacker to execute code over a network.
|
CVE-2026-62787 | 7.5 | CWE-416 | — | |
|
curl
Using libcurl, when a custom `Host:` header is first set for an HTTP request
and a second request is subsequently done using the same *easy handle* b…
|
CVE-2026-6276 | 7.5 | CWE-346 | — | |
|
Windows
Authentication bypass by spoofing in Windows Netlogon allows an unauthorized attacker to perform spoofing over an adjacent network.
|
CVE-2026-62759 | 7.5 | CWE-290 | — | |
|
Windows
A improper restriction of communication channel to intended endpoints vulnerability in Fortinet FortiSIEMWindowsAgent 7.4.0 through 7.4.1 may allow a…
|
CVE-2026-59841 | 7.5 | CWE-923 | — | |
|
Apache HTTP
Out-of-bounds Write vulnerability in Apache HTTP Server on Windows while processing paths with 8.3 names that may grow when expanded.
This issue a…
|
CVE-2026-59685 | 7.5 | CWE-787 | — | |
|
Windows
Out-of-bounds Write vulnerability in Apache HTTP Server on Windows while processing paths with 8.3 names that may grow when expanded.
This issue a…
|
CVE-2026-59685 | 7.5 | CWE-787 | — | |
|
Windows
Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over a network.
|
CVE-2026-59132 | 7.5 | CWE-476 | — | |
|
Windows
Improper verification of cryptographic signature in Windows RDP Client allows an unauthorized attacker to disclose information over a network.
|
CVE-2026-57098 | 7.5 | CWE-347 | — | |
|
Apache HTTP
Out-of-bounds Write vulnerability in Apache HTTP Server's mod_proxy_html with crafted HTTP response bodies.
This issue affects Apache HTTP Server:…
|
CVE-2026-56449 | 7.5 | CWE-787 | — | |
|
Apache HTTP
Out-of-bounds Write vulnerability in Apache HTTP Server's mod_charset_lite.
This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.
|
CVE-2026-56153 | 7.5 | CWE-787 | — | |
|
Windows
Allocation of resources without limits or throttling in Windows Kernel allows an unauthorized attacker to deny service over a network.
|
CVE-2026-54113 | 7.5 | CWE-770 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
udp: clear skb->dev before running a sockmap verdict
On the UDP receive path sk…
|
CVE-2026-53184 | 7.5 | CWE-476 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
mptcp: allow subflow rcv wnd to shrink
In MPTCP connection, the `window` field …
|
CVE-2026-53183 | 7.5 | CWE-400 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check
The nf_os…
|
CVE-2026-52998 | 7.5 | CWE-476 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
A SOFTIRQ-safe to S…
|
CVE-2026-52946 | 7.5 | CWE-667 | — |