주요 제품 취약점 (3,478건)
Windows
infra
2105건
KEV 293 · 최근 2026-10-13
Linux 커널
infra
908건
KEV 31 · 최근 2026-10-28
Cisco IOS
infra
58건
KEV 44 · 최근 2026-07-13
Ivanti
infra
46건
KEV 36 · 최근 2026-10-13
Microsoft Exchange
infra
43건
KEV 20 · 최근 2026-05-15
Fortinet
infra
41건
KEV 22 · 최근 2026-10-16
Apache HTTP
infra
33건
KEV 11 · 최근 2026-08-24
Citrix NetScaler
infra
31건
KEV 16 · 최근 2026-10-04
Apache Tomcat
infra
30건
KEV 8 · 최근 2026-08-04
OpenSSH
infra
30건
KEV 3 · 최근 2025-10-02
PostgreSQL
finance
28건
KEV 2 · 최근 2026-09-02
Node.js
infra
24건
KEV 2 · 최근 2025-01-14
nginx
infra
16건
KEV 0
Palo Alto PAN-OS
infra
15건
KEV 14 · 최근 2026-10-14
VMware vCenter
infra
13건
KEV 12 · 최근 2026-08-18
Atlassian Confluence
infra
10건
KEV 10 · 최근 2026-10-15
MySQL/MariaDB
finance
10건
KEV 2 · 최근 2024-11-07
Redis
infra
9건
KEV 3 · 최근 2026-05-26
curl
infra
8건
KEV 1 · 최근 2023-05-12
OpenSSL
infra
8건
KEV 1 · 최근 2022-05-04
VMware ESXi
infra
7건
KEV 7 · 최근 2025-03-04
wolfSSL
finance
3건
KEV 0
Apache Spark
finance
1건
KEV 1 · 최근 2023-03-07
Spring Framework
finance
1건
KEV 1 · 최근 2022-04-04
| 기술 | CVE | 심각도 | 유형 | KEV | 등재일 |
|---|---|---|---|---|---|
|
Windows
Missing release of memory after effective lifetime in Windows TCP/IP allows an unauthorized attacker to deny service over a network.
|
CVE-2026-69588 | 7.5 | CWE-401 | — | |
|
Windows
Null pointer dereference in Windows IKE Extension allows an unauthorized attacker to deny service over a network.
|
CVE-2026-69587 | 7.5 | CWE-476 | — | |
|
Windows
Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.
|
CVE-2026-69539 | 7.5 | CWE-416 | — | |
|
Windows
Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.
|
CVE-2026-69514 | 7.5 | CWE-122 | — | |
|
Windows
Out-of-bounds read in Windows Device Health Attestation (DHA) allows an unauthorized attacker to disclose information over a network.
|
CVE-2026-69443 | 7.5 | CWE-125 | — | |
|
Windows
Heap-based buffer overflow in Windows IKE Extension allows an authorized attacker to execute code over a network.
|
CVE-2026-69429 | 7.5 | CWE-122 | — | |
|
Windows
Out-of-bounds read in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to deny service over a network.
|
CVE-2026-69428 | 7.5 | CWE-125 | — | |
|
OpenSSH
Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
|
CVE-2026-69397 | 7.5 | CWE-416 | — | |
|
Windows
Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
|
CVE-2026-69397 | 7.5 | CWE-416 | — | |
|
Microsoft Exchange
Uncontrolled recursion in Microsoft Exchange Server allows an unauthorized attacker to deny service over a network.
|
CVE-2026-69378 | 7.5 | CWE-674 | — | |
|
Windows
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
|
CVE-2026-69342 | 7.5 | CWE-125 | — | |
|
Windows
Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to deny service over a network.
|
CVE-2026-68887 | 7.5 | CWE-125 | — | |
|
Apache Tomcat
Uncontrolled Resource Consumption vulnerability in Apache Tomcat via an allocation leak in the HTTP/2 backlog tracking when a stream is reset
This…
|
CVE-2026-68763 | 7.5 | CWE-400 | — | |
|
Apache Tomcat
Off-by-one Error vulnerability in Apache Tomcat impacting the [N] flag on the rewrite valves causes rewrite processing to restart at the second rule …
|
CVE-2026-65927 | 7.5 | CWE-193 | — | |
|
Windows
Null pointer dereference in Windows iSCSI Target Service allows an unauthorized attacker to deny service over a network.
|
CVE-2026-65681 | 7.5 | CWE-476 | — | |
|
PostgreSQL
Uncontrolled recursion in PostgreSQL SSL and GSS negotiation allows an attacker able to connect to a PostgreSQL AF_UNIX socket to achieve sustained d…
|
CVE-2026-6479 | 7.5 | CWE-674 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
net, bpf: check master for NULL in xdp_master_redirect()
xdp_master_redirect() …
|
CVE-2026-64545 | 7.5 | CWE-476 | — | |
|
Apache HTTP
Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') response smuggling vulnerability in Apache HTTP Server via mod_proxy…
|
CVE-2026-63718 | 7.5 | CWE-444 | — | |
|
Apache HTTP
A NULL pointer dereference in mod_xml2enc in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an untrusted backend…
|
CVE-2026-63686 | 7.5 | CWE-476 | — | |
|
Apache HTTP
Stack-based buffer overflow in mod_vhost_alias in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allows a remote clien…
|
CVE-2026-63292 | 7.5 | CWE-121 | — | |
|
Apache HTTP
Improper validation of FTP PASV reply address in mod_proxy_ftp in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allow…
|
CVE-2026-63045 | 7.5 | CWE-284 | — | |
|
Windows
Use after free in Windows DNS allows an authorized attacker to execute code over a network.
|
CVE-2026-62787 | 7.5 | CWE-416 | — | |
|
curl
Using libcurl, when a custom `Host:` header is first set for an HTTP request
and a second request is subsequently done using the same *easy handle* b…
|
CVE-2026-6276 | 7.5 | CWE-346 | — | |
|
Windows
Authentication bypass by spoofing in Windows Netlogon allows an unauthorized attacker to perform spoofing over an adjacent network.
|
CVE-2026-62759 | 7.5 | CWE-290 | — | |
|
Windows
A improper restriction of communication channel to intended endpoints vulnerability in Fortinet FortiSIEMWindowsAgent 7.4.0 through 7.4.1 may allow a…
|
CVE-2026-59841 | 7.5 | CWE-923 | — | |
|
Apache HTTP
Out-of-bounds Write vulnerability in Apache HTTP Server on Windows while processing paths with 8.3 names that may grow when expanded.
This issue a…
|
CVE-2026-59685 | 7.5 | CWE-787 | — | |
|
Windows
Out-of-bounds Write vulnerability in Apache HTTP Server on Windows while processing paths with 8.3 names that may grow when expanded.
This issue a…
|
CVE-2026-59685 | 7.5 | CWE-787 | — | |
|
Windows
Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over a network.
|
CVE-2026-59132 | 7.5 | CWE-476 | — | |
|
Windows
Improper verification of cryptographic signature in Windows RDP Client allows an unauthorized attacker to disclose information over a network.
|
CVE-2026-57098 | 7.5 | CWE-347 | — | |
|
Apache HTTP
Out-of-bounds Write vulnerability in Apache HTTP Server's mod_proxy_html with crafted HTTP response bodies.
This issue affects Apache HTTP Server:…
|
CVE-2026-56449 | 7.5 | CWE-787 | — | |
|
Apache HTTP
Out-of-bounds Write vulnerability in Apache HTTP Server's mod_charset_lite.
This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.
|
CVE-2026-56153 | 7.5 | CWE-787 | — | |
|
Windows
Allocation of resources without limits or throttling in Windows Kernel allows an unauthorized attacker to deny service over a network.
|
CVE-2026-54113 | 7.5 | CWE-770 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
udp: clear skb->dev before running a sockmap verdict
On the UDP receive path sk…
|
CVE-2026-53184 | 7.5 | CWE-476 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
mptcp: allow subflow rcv wnd to shrink
In MPTCP connection, the `window` field …
|
CVE-2026-53183 | 7.5 | CWE-400 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check
The nf_os…
|
CVE-2026-52998 | 7.5 | CWE-476 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
A SOFTIRQ-safe to S…
|
CVE-2026-52946 | 7.5 | CWE-667 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
sctp: stream: fully roll back denied add-stream state
When ADD_OUT_STREAMS is d…
|
CVE-2026-52929 | 7.5 | CWE-476 | — | |
|
Apache HTTP
Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's mod_http leads to denial of service via malicious HTTP requests.
T…
|
CVE-2026-49975 | 7.5 | CWE-789 | — | |
|
Apache HTTP
Missing authentication checks in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenti…
|
CVE-2026-48005 | 7.5 | CWE-306 | — | |
|
Apache HTTP
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache HTTP Server's mod_session_cookie module.
When SessionCookie…
|
CVE-2026-47360 | 7.5 | CWE-200 | — | |
|
Apache HTTP
NULL Pointer Dereference vulnerability in Apache HTTP Servers mod_heartmonitor over unicast listener.
This issue affects Apache HTTP Server: from …
|
CVE-2026-46729 | 7.5 | CWE-476 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
flow_dissector: do not dissect PPPoE PFC frames
RFC 2516 Section 7 states that …
|
CVE-2026-46306 | 7.5 | CWE-198 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free
nvmet_tcp_release_queu…
|
CVE-2026-46304 | 7.5 | CWE-667 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
ipmi: Add limits to event and receive message requests
The driver would just fe…
|
CVE-2026-46177 | 7.5 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
isofs: validate block number from NFS file handle in isofs_export_iget
isofs_fh…
|
CVE-2026-46124 | 7.5 | CWE-125 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
net: stmmac: Prevent NULL deref when RX memory exhausted
The CPU receives frame…
|
CVE-2026-46110 | 7.5 | CWE-476 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
net: strparser: fix skb_head leak in strp_abort_strp()
When the stream parser i…
|
CVE-2026-46102 | 7.5 | CWE-401 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
ipv4: icmp: fix null-ptr-deref in icmp_build_probe()
ipv6_stub->ipv6_dev_find()…
|
CVE-2026-43099 | 7.5 | CWE-476 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback
NETIF_F_IPV6_C…
|
CVE-2026-43057 | 7.5 | — | — | |
|
OpenSSH
Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions. This vulnerability affects the GSSAPI patches added by various Lin…
|
CVE-2026-3497 | 7.5 | CWE-908 | — | |
|
Windows
Out-of-bounds read in Windows HTTP.sys allows an unauthorized attacker to deny service over a network.
|
CVE-2026-33096 | 7.5 | CWE-125 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
smb: server: fix active_num_conn leak on transport allocation failure
Commit 77…
|
CVE-2026-31711 | 7.5 | CWE-401 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
rxrpc: only handle RESPONSE during service challenge
Only process RESPONSE pack…
|
CVE-2026-31676 | 7.5 | CWE-362 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: validate EaNameLength in smb2_get_ea()
smb2_get_ea() reads ea_req->EaNam…
|
CVE-2026-31612 | 7.5 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
net: macb: Use dev_consume_skb_any() to free TX SKBs
The napi_consume_skb() fun…
|
CVE-2026-31563 | 7.5 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
net/x25: Fix overflow when accumulating packets
Add a check to ensure that `x25…
|
CVE-2026-31417 | 7.5 | CWE-191 | — | |
|
Apache Tomcat
Padding Oracle vulnerability in Apache Tomcat's EncryptInterceptor with default configuration.
This issue affects Apache Tomcat: from 11.0.0-M1 thro…
|
CVE-2026-29146 | 7.5 | CWE-209 | — | |
|
OpenSSL
Issue summary: When a delta CRL that contains a Delta CRL Indicator extension
is processed a NULL pointer dereference might happen if the required CR…
|
CVE-2026-28388 | 7.5 | CWE-476 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
tls: Purge async_hold in tls_decrypt_async_wait()
The async_hold queue pins enc…
|
CVE-2026-23414 | 7.5 | CWE-401 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
RDMA/siw: Fix potential NULL pointer dereference in header processing
If siw_ge…
|
CVE-2026-23242 | 7.5 | CWE-476 | — |