주요 제품 취약점 (3,478건)
Windows
infra
2105건
KEV 293 · 최근 2026-10-13
Linux 커널
infra
908건
KEV 31 · 최근 2026-10-28
Cisco IOS
infra
58건
KEV 44 · 최근 2026-07-13
Ivanti
infra
46건
KEV 36 · 최근 2026-10-13
Microsoft Exchange
infra
43건
KEV 20 · 최근 2026-05-15
Fortinet
infra
41건
KEV 22 · 최근 2026-10-16
Apache HTTP
infra
33건
KEV 11 · 최근 2026-08-24
Citrix NetScaler
infra
31건
KEV 16 · 최근 2026-10-04
Apache Tomcat
infra
30건
KEV 8 · 최근 2026-08-04
OpenSSH
infra
30건
KEV 3 · 최근 2025-10-02
PostgreSQL
finance
28건
KEV 2 · 최근 2026-09-02
Node.js
infra
24건
KEV 2 · 최근 2025-01-14
nginx
infra
16건
KEV 0
Palo Alto PAN-OS
infra
15건
KEV 14 · 최근 2026-10-14
VMware vCenter
infra
13건
KEV 12 · 최근 2026-08-18
Atlassian Confluence
infra
10건
KEV 10 · 최근 2026-10-15
MySQL/MariaDB
finance
10건
KEV 2 · 최근 2024-11-07
Redis
infra
9건
KEV 3 · 최근 2026-05-26
curl
infra
8건
KEV 1 · 최근 2023-05-12
OpenSSL
infra
8건
KEV 1 · 최근 2022-05-04
VMware ESXi
infra
7건
KEV 7 · 최근 2025-03-04
wolfSSL
finance
3건
KEV 0
Apache Spark
finance
1건
KEV 1 · 최근 2023-03-07
Spring Framework
finance
1건
KEV 1 · 최근 2022-04-04
| 기술 | CVE | 심각도 | 유형 | KEV | 등재일 |
|---|---|---|---|---|---|
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
gue: Fix skb memleak with inner IP protocol 0.
syzbot reported skb memleak belo…
|
CVE-2026-23095 | 7.5 | CWE-401 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv()
Blamed commit did no…
|
CVE-2026-23003 | 7.5 | CWE-908 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
libceph: return the handler error from mon_handle_auth_done()
Currently any err…
|
CVE-2026-22992 | 7.5 | CWE-476 | — | |
|
Windows
Improper access control in Windows HTTP.sys allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-20929 | 7.5 | CWE-284 | — | |
|
Citrix NetScaler
Denial of service via malformed HTTP/2 requests in NetScaler ADC and NetScaler Gateway if HTTP/2 is enabled in HTTP Profile and associated with the v…
|
CVE-2026-13474 | 7.5 | CWE-401 | — | |
|
Citrix NetScaler
Arbitrary File Read (Unauthenticated) in NetScaler ADC and NetScaler Gateway if the access to NSIP, Cluster Management IP or SNIP with management acc…
|
CVE-2026-10816 | 7.5 | CWE-73 | — | |
|
Node.js
msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, the decoder reads the four-byte length of a map32 value before v…
|
CVE-2026-107302 | 7.5 | CWE-125 | — | |
|
Node.js
msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, the streaming decoder recursively invokes itself for each comple…
|
CVE-2026-107300 | 7.5 | CWE-674 | — | |
|
Windows
Untrusted pointer dereference in Windows Distributed File System (DFS) allows an unauthorized attacker to elevate privileges over a network.
|
CVE-2026-105723 | 7.5 | CWE-822 | — | |
|
Windows
Incorrect default permissions in Windows Server Update Service allows an authorized attacker to elevate privileges locally.
|
CVE-2026-105009 | 7.5 | CWE-276 | — | |
|
Windows
Out-of-bounds read in Windows IKE Extension allows an unauthorized attacker to disclose information over a network.
|
CVE-2026-103569 | 7.5 | CWE-125 | — | |
|
Windows
Deadlock in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.
|
CVE-2026-103558 | 7.5 | CWE-833 | — | |
|
Windows
Integer underflow (wrap or wraparound) in Windows Failover Cluster allows an unauthorized attacker to deny service over a network.
|
CVE-2026-102192 | 7.5 | CWE-191 | — | |
|
Windows
Improper access control in Windows Deployment Services allows an unauthorized attacker to execute code over an adjacent network.
|
CVE-2026-0386 | 7.5 | CWE-284 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
dm-verity: disable recursive forward error correction
There are two problems wi…
|
CVE-2025-71161 | 7.5 | CWE-193 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
crypto: seqiv - Do not use req->iv after crypto_aead_encrypt
As soon as crypto_…
|
CVE-2025-71131 | 7.5 | CWE-416 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy…
|
CVE-2025-71120 | 7.5 | CWE-476 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr()
There exi…
|
CVE-2025-71085 | 7.5 | CWE-617 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
scsi: target: Reset t_task_cdb pointer in error case
If allocation of cmd->t_ta…
|
CVE-2025-68782 | 7.5 | CWE-476 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid
Fixe…
|
CVE-2025-68349 | 7.5 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
jbd2: avoid bug_on in jbd2_journal_get_create_access() when file system corrupte…
|
CVE-2025-68337 | 7.5 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock()
Fix a race…
|
CVE-2025-68261 | 7.5 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nft_ct: add seqadj extension for natted connections
Sequence adjustm…
|
CVE-2025-68206 | 7.5 | — | — | |
|
Citrix NetScaler
Arbitrary file read in NetScaler Console and NetScaler SDX (SVM)
|
CVE-2025-4365 | 7.5 | CWE-1284 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6_CSUM
When p…
|
CVE-2025-39770 | 7.5 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
net: ethernet: mtk-star-emac: fix spinlock recursion issues on rx/tx poll
Use s…
|
CVE-2025-37917 | 7.5 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr
If mu…
|
CVE-2025-21938 | 7.5 | CWE-362 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
smb: client: Add check for next_buffer in receive_encrypted_standard()
Add chec…
|
CVE-2025-21844 | 7.5 | CWE-476 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
NFSD: fix hang in nfsd4_shutdown_callback
If nfs4_client is in courtesy state t…
|
CVE-2025-21795 | 7.5 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
smb: client: fix oops due to unset link speed
It isn't guaranteed that NETWORK_…
|
CVE-2025-21725 | 7.5 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
net: fec: handle page_pool_dev_alloc_pages error
The fec_enet_update_cbd functi…
|
CVE-2025-21676 | 7.5 | CWE-476 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
ipv6: Fix soft lockups in fib6_select_path under high next hop churn
Soft locku…
|
CVE-2024-56703 | 7.5 | CWE-835 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
net: fix data-races around sk->sk_forward_alloc
Syzkaller reported this warning…
|
CVE-2024-53124 | 7.5 | CWE-362 | — | |
|
OpenSSL
The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally t…
|
CVE-2022-0778 | 7.5 | CWE-835 | — | |
|
Windows
Improper verification of source of a communication channel in Windows Hyper-V allows an unauthorized attacker to bypass a security feature over an ad…
|
CVE-2026-87705 | 7.4 | CWE-940 | — | |
|
Node.js
Authentication bypass by capture-replay in Microsoft Authentication Library (MSAL) for Node.js allows an unauthorized attacker to perform spoofing ov…
|
CVE-2026-84003 | 7.4 | CWE-294 | — | |
|
Windows
Heap-based buffer overflow in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally.
|
CVE-2026-69347 | 7.4 | CWE-122 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
tap: free page on error paths in tap_get_user_xdp()
tap_get_user_xdp() rejects …
|
CVE-2026-46320 | 7.4 | CWE-401 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: Compare MACs in constant time
To prevent timing attacks, MAC comparisons…
|
CVE-2026-23364 | 7.4 | — | — | |
|
Windows
Improper certificate validation in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an information disclosure via networ…
|
CVE-2026-108184 | 7.4 | CWE-295 | — | |
|
Windows
TeamViewer Full Client and Host prior to version 15.82 on Windows contain a TOCTOU race condition in the installer rollback mechanism. A local low-pr…
|
CVE-2026-92369 | 7.3 | CWE-367 | — | |
|
Apache Tomcat
Incomplete cleanup vulnerability in Apache Tomcat allows a malformed request to potentially (depends on timing) cause one request from another user t…
|
CVE-2026-78437 | 7.3 | CWE-459 | — | |
|
Apache Tomcat
Improper Authentication vulnerability in Apache Tomcat. When Jakarta Authentication was configured with SimpleAuthConfigProvider as the default provi…
|
CVE-2026-75973 | 7.3 | CWE-287 | — | |
|
Apache HTTP
Use after free in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenticated remote cl…
|
CVE-2026-73637 | 7.3 | CWE-416 | — | |
|
Windows
Improper privilege management in Windows Package Manager allows an authorized attacker to elevate privileges locally.
|
CVE-2026-68821 | 7.3 | CWE-269 | — | |
|
Microsoft Exchange
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an authorized attacker to pe…
|
CVE-2026-62914 | 7.3 | CWE-79 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
netfilter: ctnetlink: ignore explicit helper on new expectations
Use the existi…
|
CVE-2026-43025 | 7.3 | CWE-125 | — | |
|
Windows
Claude Code is an agentic coding tool. In versions prior to 2.1.75 on Windows, Claude Code loaded the system-wide default configuration from C:\Progr…
|
CVE-2026-35603 | 7.3 | CWE-426 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
x86/mm/pat: Fix VM_PAT handling when fork() fails in copy_page_range()
If track…
|
CVE-2025-22090 | 7.3 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tr…
|
CVE-2025-21959 | 7.3 | CWE-908 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
landlock: Handle weird files
A corrupted filesystem (e.g. bcachefs) might retur…
|
CVE-2025-21830 | 7.3 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
eth: bnxt: always recalculate features after XDP clearing, fix null-deref
Recal…
|
CVE-2025-21682 | 7.3 | CWE-476 | — | |
|
Citrix NetScaler
Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.
This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 …
|
CVE-2026-88774 | 7.2 | — | — | |
|
Windows
Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.
|
CVE-2026-85798 | 7.2 | CWE-122 | — | |
|
PostgreSQL
SQL injection in PostgreSQL pg_createsubscriber allows an attacker with pg_create_subscription rights to execute arbitrary SQL as a superuser. The a…
|
CVE-2026-6476 | 7.2 | CWE-89 | — | |
|
PostgreSQL
Missing authorization in PostgreSQL logical decoding allows a non-superuser holding REPLICATION privilege to dlopen any file visible to the operating…
|
CVE-2026-6471 | 7.2 | CWE-862 | — | |
|
Microsoft Exchange
Improper control of resource identifiers ('resource injection') in Microsoft Exchange Server allows an authorized attacker to elevate privileges over…
|
CVE-2026-62910 | 7.2 | CWE-99 | — | |
|
Windows
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
|
CVE-2026-108399 | 7.2 | CWE-122 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
wifi: libipw: reject too-short beacon and probe responses
libipw_process_probe_…
|
CVE-2026-98349 | 7.1 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
wifi: libipw: reject too-short association responses
libipw_handle_assoc_resp()…
|
CVE-2026-98348 | 7.1 | — | — |