주요 제품 취약점 (3,435건)

기술	CVE	심각도	유형	등재일
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: sctp: stream: fully roll back denied add-stream state When ADD_OUT_STREAMS is d…	CVE-2026-52929	7.5	CWE-476	—
Apache HTTP Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's mod_http leads to denial of service via malicious HTTP requests. T…	CVE-2026-49975	7.5	CWE-789	—
Apache HTTP Missing authentication checks in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenti…	CVE-2026-48005	7.5	CWE-306	—
Apache HTTP Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache HTTP Server's mod_session_cookie module. When SessionCookie…	CVE-2026-47360	7.5	CWE-200	—
Apache HTTP NULL Pointer Dereference vulnerability in Apache HTTP Servers mod_heartmonitor over unicast listener. This issue affects Apache HTTP Server: from …	CVE-2026-46729	7.5	CWE-476	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: flow_dissector: do not dissect PPPoE PFC frames RFC 2516 Section 7 states that …	CVE-2026-46306	7.5	CWE-198	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free nvmet_tcp_release_queu…	CVE-2026-46304	7.5	CWE-667	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: ipmi: Add limits to event and receive message requests The driver would just fe…	CVE-2026-46177	7.5	—	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: isofs: validate block number from NFS file handle in isofs_export_iget isofs_fh…	CVE-2026-46124	7.5	CWE-125	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: net: stmmac: Prevent NULL deref when RX memory exhausted The CPU receives frame…	CVE-2026-46110	7.5	CWE-476	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: net: strparser: fix skb_head leak in strp_abort_strp() When the stream parser i…	CVE-2026-46102	7.5	CWE-401	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: ipv4: icmp: fix null-ptr-deref in icmp_build_probe() ipv6_stub->ipv6_dev_find()…	CVE-2026-43099	7.5	CWE-476	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback NETIF_F_IPV6_C…	CVE-2026-43057	7.5	—	—
OpenSSH Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions. This vulnerability affects the GSSAPI patches added by various Lin…	CVE-2026-3497	7.5	CWE-908	—
Windows Out-of-bounds read in Windows HTTP.sys allows an unauthorized attacker to deny service over a network.	CVE-2026-33096	7.5	CWE-125	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: smb: server: fix active_num_conn leak on transport allocation failure Commit 77…	CVE-2026-31711	7.5	CWE-401	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: rxrpc: only handle RESPONSE during service challenge Only process RESPONSE pack…	CVE-2026-31676	7.5	CWE-362	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate EaNameLength in smb2_get_ea() smb2_get_ea() reads ea_req->EaNam…	CVE-2026-31612	7.5	—	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: net: macb: Use dev_consume_skb_any() to free TX SKBs The napi_consume_skb() fun…	CVE-2026-31563	7.5	—	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: net/x25: Fix overflow when accumulating packets Add a check to ensure that `x25…	CVE-2026-31417	7.5	CWE-191	—
Apache Tomcat Padding Oracle vulnerability in Apache Tomcat's EncryptInterceptor with default configuration. This issue affects Apache Tomcat: from 11.0.0-M1 thro…	CVE-2026-29146	7.5	CWE-209	—
OpenSSL Issue summary: When a delta CRL that contains a Delta CRL Indicator extension is processed a NULL pointer dereference might happen if the required CR…	CVE-2026-28388	7.5	CWE-476	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: tls: Purge async_hold in tls_decrypt_async_wait() The async_hold queue pins enc…	CVE-2026-23414	7.5	CWE-401	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fix potential NULL pointer dereference in header processing If siw_ge…	CVE-2026-23242	7.5	CWE-476	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: gue: Fix skb memleak with inner IP protocol 0. syzbot reported skb memleak belo…	CVE-2026-23095	7.5	CWE-401	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() Blamed commit did no…	CVE-2026-23003	7.5	CWE-908	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: libceph: return the handler error from mon_handle_auth_done() Currently any err…	CVE-2026-22992	7.5	CWE-476	—
Windows Improper access control in Windows HTTP.sys allows an authorized attacker to elevate privileges over a network.	CVE-2026-20929	7.5	CWE-284	—
Citrix NetScaler Denial of service via malformed HTTP/2 requests in NetScaler ADC and NetScaler Gateway if HTTP/2 is enabled in HTTP Profile and associated with the v…	CVE-2026-13474	7.5	CWE-401	—
Citrix NetScaler Arbitrary File Read (Unauthenticated) in NetScaler ADC and NetScaler Gateway if the access to NSIP, Cluster Management IP or SNIP with management acc…	CVE-2026-10816	7.5	CWE-73	—
Node.js msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, the decoder reads the four-byte length of a map32 value before v…	CVE-2026-107302	7.5	CWE-125	—
Node.js msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, the streaming decoder recursively invokes itself for each comple…	CVE-2026-107300	7.5	CWE-674	—
Windows Untrusted pointer dereference in Windows Distributed File System (DFS) allows an unauthorized attacker to elevate privileges over a network.	CVE-2026-105723	7.5	CWE-822	—
Windows Incorrect default permissions in Windows Server Update Service allows an authorized attacker to elevate privileges locally.	CVE-2026-105009	7.5	CWE-276	—
Windows Out-of-bounds read in Windows IKE Extension allows an unauthorized attacker to disclose information over a network.	CVE-2026-103569	7.5	CWE-125	—
Windows Deadlock in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.	CVE-2026-103558	7.5	CWE-833	—
Windows Integer underflow (wrap or wraparound) in Windows Failover Cluster allows an unauthorized attacker to deny service over a network.	CVE-2026-102192	7.5	CWE-191	—
Windows Improper access control in Windows Deployment Services allows an unauthorized attacker to execute code over an adjacent network.	CVE-2026-0386	7.5	CWE-284	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: dm-verity: disable recursive forward error correction There are two problems wi…	CVE-2025-71161	7.5	CWE-193	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: crypto: seqiv - Do not use req->iv after crypto_aead_encrypt As soon as crypto_…	CVE-2025-71131	7.5	CWE-416	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy…	CVE-2025-71120	7.5	CWE-476	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() There exi…	CVE-2025-71085	7.5	CWE-617	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: scsi: target: Reset t_task_cdb pointer in error case If allocation of cmd->t_ta…	CVE-2025-68782	7.5	CWE-476	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid Fixe…	CVE-2025-68349	7.5	—	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: jbd2: avoid bug_on in jbd2_journal_get_create_access() when file system corrupte…	CVE-2025-68337	7.5	—	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock() Fix a race…	CVE-2025-68261	7.5	—	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_ct: add seqadj extension for natted connections Sequence adjustm…	CVE-2025-68206	7.5	—	—
Citrix NetScaler Arbitrary file read in NetScaler Console and NetScaler SDX (SVM)	CVE-2025-4365	7.5	CWE-1284	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6_CSUM When p…	CVE-2025-39770	7.5	—	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk-star-emac: fix spinlock recursion issues on rx/tx poll Use s…	CVE-2025-37917	7.5	—	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr If mu…	CVE-2025-21938	7.5	CWE-362	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: smb: client: Add check for next_buffer in receive_encrypted_standard() Add chec…	CVE-2025-21844	7.5	CWE-476	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: NFSD: fix hang in nfsd4_shutdown_callback If nfs4_client is in courtesy state t…	CVE-2025-21795	7.5	—	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: smb: client: fix oops due to unset link speed It isn't guaranteed that NETWORK_…	CVE-2025-21725	7.5	—	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: net: fec: handle page_pool_dev_alloc_pages error The fec_enet_update_cbd functi…	CVE-2025-21676	7.5	CWE-476	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix soft lockups in fib6_select_path under high next hop churn Soft locku…	CVE-2024-56703	7.5	CWE-835	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: net: fix data-races around sk->sk_forward_alloc Syzkaller reported this warning…	CVE-2024-53124	7.5	CWE-362	—
OpenSSL The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally t…	CVE-2022-0778	7.5	CWE-835	—
Windows Improper verification of source of a communication channel in Windows Hyper-V allows an unauthorized attacker to bypass a security feature over an ad…	CVE-2026-87705	7.4	CWE-940	—
Node.js Authentication bypass by capture-replay in Microsoft Authentication Library (MSAL) for Node.js allows an unauthorized attacker to perform spoofing ov…	CVE-2026-84003	7.4	CWE-294	—