Security News

주요 제품 취약점 (2,105건)

"Windows" 관련 CVE만 표시 중 · 필터 해제 ×

기술CVE심각도유형KEV등재일
Windows
Improper authentication in Windows Event Tracing allows an authorized attacker to perform spoofing locally.
CVE-2026-70235 5.5 CWE-862 —
Windows
Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information lo…
CVE-2026-70232 5.5 CWE-497 —
Windows
Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally.
CVE-2026-70227 5.5 CWE-125 —
Windows
Insufficient granularity of access control in Windows Mobile Device Management allows an authorized attacker to perform tampering locally.
CVE-2026-70216 5.5 CWE-1220 —
Windows
Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
CVE-2026-70211 5.5 CWE-125 —
Windows
Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to disclose information locally.
CVE-2026-70208 5.5 CWE-125 —
Windows
Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service locally.
CVE-2026-70201 5.5 CWE-125 —
Windows
Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information lo…
CVE-2026-70199 5.5 CWE-497 —
Windows
Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.
CVE-2026-70173 5.5 CWE-125 —
Windows
Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.
CVE-2026-70145 5.5 CWE-125 —
Windows
Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.
CVE-2026-70141 5.5 CWE-125 —
Windows
Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to disclose information locally.
CVE-2026-70137 5.5 CWE-306 —
Windows
Out-of-bounds read in Windows Remote POS Driver allows an authorized attacker to disclose information locally.
CVE-2026-70135 5.5 CWE-125 —
Windows
Use of uninitialized resource in Windows Netlogon allows an authorized attacker to disclose information locally.
CVE-2026-70090 5.5 CWE-908 —
Windows
Improper access control in Windows Projected File System allows an authorized attacker to disclose information locally.
CVE-2026-70084 5.5 CWE-22 —
Windows
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information locally.
CVE-2026-70074 5.5 CWE-125 —
Windows
Incorrect authorization in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to bypass a security feature locally.
CVE-2026-70057 5.5 CWE-863 —
Windows
Exposure of sensitive system information to an unauthorized control sphere in Windows Cryptographic Services allows an authorized attacker to disclos…
CVE-2026-70055 5.5 CWE-497 —
Windows
Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to disclose information locally.
CVE-2026-70044 5.5 CWE-125 —
Windows
Buffer over-read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally.
CVE-2026-70041 5.5 CWE-126 —
Windows
Access of resource using incompatible type ('type confusion') in Windows Secure Kernel Mode allows an authorized attacker to disclose information loc…
CVE-2026-70017 5.5 CWE-843 —
Windows
Out-of-bounds read in Windows IP Over USB Service allows an authorized attacker to disclose information locally.
CVE-2026-70011 5.5 CWE-125 —
Windows
Out-of-bounds read in Windows Update allows an authorized attacker to disclose information locally.
CVE-2026-69999 5.5 CWE-125 —
Windows
Improper protection of alternate path in Windows AppX Deployment Service allows an authorized attacker to bypass a security feature locally.
CVE-2026-69979 5.5 CWE-424 —
Windows
Incorrect authorization in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.
CVE-2026-69971 5.5 CWE-863 —
Windows
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to disclose information locally.
CVE-2026-69967 5.5 CWE-125 —
Windows
Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally.
CVE-2026-69954 5.5 CWE-126 —
Windows
Out-of-bounds read in Windows Cryptographic Services allows an authorized attacker to disclose information locally.
CVE-2026-69919 5.5 CWE-125 —
Windows
Out-of-bounds read in Windows AppX Deployment Service allows an authorized attacker to disclose information locally.
CVE-2026-69914 5.5 CWE-125 —
Windows
Missing authorization in Windows AppX Deployment Service allows an authorized attacker to perform tampering locally.
CVE-2026-69905 5.5 CWE-862 —
Windows
Out-of-bounds read in Windows Wireless Wide Area Network Service allows an authorized attacker to disclose information locally.
CVE-2026-69862 5.5 CWE-125 —
Windows
Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally.
CVE-2026-69808 5.5 CWE-125 —
Windows
Buffer over-read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally.
CVE-2026-69794 5.5 CWE-126 —
Windows
Use of uninitialized resource in Windows Spaceport.sys allows an authorized attacker to disclose information locally.
CVE-2026-69770 5.5 CWE-908 —
Windows
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally.
CVE-2026-69741 5.5 CWE-125 —
Windows
Out-of-bounds read in Windows iSCSI allows an authorized attacker to disclose information locally.
CVE-2026-69721 5.5 CWE-125 —
Windows
Generation of error message containing sensitive information in Windows Error Reporting allows an authorized attacker to disclose information locally.
CVE-2026-69684 5.5 CWE-209 —
Windows
Out-of-bounds read in Windows Network File System allows an authorized attacker to disclose information locally.
CVE-2026-69675 5.5 CWE-125 —
Windows
Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to bypass a security feature loc…
CVE-2026-69674 5.5 CWE-306 —
Windows
Use of uninitialized resource in Windows DNS allows an authorized attacker to disclose information locally.
CVE-2026-69672 5.5 CWE-908 —
Windows
Exposure of sensitive system information to an unauthorized control sphere in Windows iSCSI allows an authorized attacker to disclose information loc…
CVE-2026-69644 5.5 CWE-497 —
Windows
Out-of-bounds read in Windows Remote Desktop Licensing Service allows an authorized attacker to disclose information locally.
CVE-2026-69627 5.5 CWE-125 —
Windows
Out-of-bounds read in Windows SMB Client allows an authorized attacker to disclose information locally.
CVE-2026-69618 5.5 CWE-125 —
Windows
Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to disclose information locally.
CVE-2026-69616 5.5 CWE-125 —
Windows
Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally.
CVE-2026-69609 5.5 CWE-125 —
Windows
Out-of-bounds read in Windows Storage Spaces Controller allows an authorized attacker to disclose information locally.
CVE-2026-69568 5.5 CWE-125 —
Windows
Missing authentication for critical function in Microsoft Windows Search Component allows an authorized attacker to perform tampering locally.
CVE-2026-69554 5.5 CWE-306 —
Windows
Unintended proxy or intermediary ('confused deputy') in Microsoft Windows Speech allows an authorized attacker to perform tampering locally.
CVE-2026-69531 5.5 CWE-441 —
Windows
Out-of-bounds read in Windows USB Mass Storage Class Driver allows an authorized attacker to disclose information locally.
CVE-2026-69527 5.5 CWE-125 —
Windows
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
CVE-2026-69504 5.5 CWE-125 —
Windows
Out-of-bounds read in Windows USB Driver allows an authorized attacker to disclose information locally.
CVE-2026-69457 5.5 CWE-125 —
Windows
Missing authorization in Microsoft Windows Search Component allows an authorized attacker to perform tampering locally.
CVE-2026-69453 5.5 CWE-862 —
Windows
Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information lo…
CVE-2026-69406 5.5 CWE-497 —
Windows
Missing authorization in Windows SMB Server allows an authorized attacker to disclose information locally.
CVE-2026-69403 5.5 CWE-862 —
Windows
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally.
CVE-2026-69390 5.5 CWE-125 —
Windows
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information locally.
CVE-2026-69369 5.5 CWE-125 —
Windows
Out-of-bounds read in Windows Text Shaping allows an authorized attacker to disclose information locally.
CVE-2026-69353 5.5 CWE-125 —
Windows
Exposure of private personal information to an unauthorized actor in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker…
CVE-2026-69351 5.5 CWE-359 —
Windows
Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose information locally.
CVE-2026-69344 5.5 CWE-125 —
Windows
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to disclose information locally.
CVE-2026-69343 5.5 CWE-125 —