주요 제품 취약점 (3,435건)
Windows
infra
2105건
KEV 293 · 최근 2026-10-13
Linux 커널
infra
908건
KEV 31 · 최근 2026-10-28
Cisco IOS
infra
58건
KEV 44 · 최근 2026-07-13
Ivanti
infra
46건
KEV 36 · 최근 2026-10-13
Microsoft Exchange
infra
43건
KEV 20 · 최근 2026-05-15
Fortinet
infra
41건
KEV 22 · 최근 2026-10-16
Apache HTTP
infra
33건
KEV 11 · 최근 2026-08-24
Citrix NetScaler
infra
31건
KEV 16 · 최근 2026-10-04
Apache Tomcat
infra
30건
KEV 8 · 최근 2026-08-04
OpenSSH
infra
30건
KEV 3 · 최근 2025-10-02
Node.js
infra
24건
KEV 2 · 최근 2025-01-14
nginx
infra
16건
KEV 0
Palo Alto PAN-OS
infra
15건
KEV 14 · 최근 2026-10-14
VMware vCenter
infra
13건
KEV 12 · 최근 2026-08-18
Atlassian Confluence
infra
10건
KEV 10 · 최근 2026-10-15
Redis
infra
9건
KEV 3 · 최근 2026-05-26
curl
infra
8건
KEV 1 · 최근 2023-05-12
OpenSSL
infra
8건
KEV 1 · 최근 2022-05-04
VMware ESXi
infra
7건
KEV 7 · 최근 2025-03-04
| 기술 | CVE | 심각도 | 유형 | KEV | 등재일 |
|---|---|---|---|---|---|
|
Windows
Heap-based buffer overflow in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally.
|
CVE-2026-69347 | 7.4 | CWE-122 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
tap: free page on error paths in tap_get_user_xdp()
tap_get_user_xdp() rejects …
|
CVE-2026-46320 | 7.4 | CWE-401 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: Compare MACs in constant time
To prevent timing attacks, MAC comparisons…
|
CVE-2026-23364 | 7.4 | — | — | |
|
Windows
Improper certificate validation in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an information disclosure via networ…
|
CVE-2026-108184 | 7.4 | CWE-295 | — | |
|
Windows
TeamViewer Full Client and Host prior to version 15.82 on Windows contain a TOCTOU race condition in the installer rollback mechanism. A local low-pr…
|
CVE-2026-92369 | 7.3 | CWE-367 | — | |
|
Apache Tomcat
Incomplete cleanup vulnerability in Apache Tomcat allows a malformed request to potentially (depends on timing) cause one request from another user t…
|
CVE-2026-78437 | 7.3 | CWE-459 | — | |
|
Apache Tomcat
Improper Authentication vulnerability in Apache Tomcat. When Jakarta Authentication was configured with SimpleAuthConfigProvider as the default provi…
|
CVE-2026-75973 | 7.3 | CWE-287 | — | |
|
Apache HTTP
Use after free in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenticated remote cl…
|
CVE-2026-73637 | 7.3 | CWE-416 | — | |
|
Windows
Improper privilege management in Windows Package Manager allows an authorized attacker to elevate privileges locally.
|
CVE-2026-68821 | 7.3 | CWE-269 | — | |
|
Microsoft Exchange
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an authorized attacker to pe…
|
CVE-2026-62914 | 7.3 | CWE-79 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
netfilter: ctnetlink: ignore explicit helper on new expectations
Use the existi…
|
CVE-2026-43025 | 7.3 | CWE-125 | — | |
|
Windows
Claude Code is an agentic coding tool. In versions prior to 2.1.75 on Windows, Claude Code loaded the system-wide default configuration from C:\Progr…
|
CVE-2026-35603 | 7.3 | CWE-426 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
x86/mm/pat: Fix VM_PAT handling when fork() fails in copy_page_range()
If track…
|
CVE-2025-22090 | 7.3 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tr…
|
CVE-2025-21959 | 7.3 | CWE-908 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
landlock: Handle weird files
A corrupted filesystem (e.g. bcachefs) might retur…
|
CVE-2025-21830 | 7.3 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
eth: bnxt: always recalculate features after XDP clearing, fix null-deref
Recal…
|
CVE-2025-21682 | 7.3 | CWE-476 | — | |
|
Citrix NetScaler
Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.
This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 …
|
CVE-2026-88774 | 7.2 | — | — | |
|
Windows
Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.
|
CVE-2026-85798 | 7.2 | CWE-122 | — | |
|
Microsoft Exchange
Improper control of resource identifiers ('resource injection') in Microsoft Exchange Server allows an authorized attacker to elevate privileges over…
|
CVE-2026-62910 | 7.2 | CWE-99 | — | |
|
Windows
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
|
CVE-2026-108399 | 7.2 | CWE-122 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
wifi: libipw: reject too-short beacon and probe responses
libipw_process_probe_…
|
CVE-2026-98349 | 7.1 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
wifi: libipw: reject too-short association responses
libipw_handle_assoc_resp()…
|
CVE-2026-98348 | 7.1 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
IB/hfi1: Fix the PIO_CRED credit-return mmap
hfi1_file_mmap()'s PIO_CRED case m…
|
CVE-2026-98216 | 7.1 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
drm/msm: RCU-free the scheduler-containing ring and VM objects
Both struct msm_…
|
CVE-2026-98180 | 7.1 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
smb: client: fix potential OOB read in smb3_enum_snapshots()
If snapshot_array_…
|
CVE-2026-98169 | 7.1 | — | — | |
|
Windows
Heap-based buffer overflow in Windows Internet Connection Sharing (ICS) allows an authorized attacker to execute code over an adjacent network.
|
CVE-2026-85856 | 7.1 | CWE-122 | — | |
|
Windows
Missing authentication for critical function in Windows Error Reporting allows an authorized attacker to perform tampering locally.
|
CVE-2026-83715 | 7.1 | CWE-306 | — | |
|
Windows
Out-of-bounds read in Windows Bluetooth Port Driver allows an unauthorized attacker to execute code over an adjacent network.
|
CVE-2026-70126 | 7.1 | CWE-20 | — | |
|
Windows
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-69775 | 7.1 | CWE-416 | — | |
|
Windows
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-69761 | 7.1 | CWE-416 | — | |
|
Windows
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-69757 | 7.1 | CWE-416 | — | |
|
Windows
Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-69706 | 7.1 | CWE-416 | — | |
|
Windows
Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-69688 | 7.1 | CWE-122 | — | |
|
Windows
Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-69602 | 7.1 | CWE-416 | — | |
|
Windows
Use after free in Windows HTTP.sys allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-69597 | 7.1 | CWE-416 | — | |
|
Windows
Missing authorization in Windows Hyper-V allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-69553 | 7.1 | CWE-862 | — | |
|
Windows
Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.
|
CVE-2026-69536 | 7.1 | CWE-416 | — | |
|
Windows
Creation of temporary file in directory with insecure permissions in Windows Error Reporting allows an authorized attacker to perform tampering local…
|
CVE-2026-69482 | 7.1 | CWE-379 | — | |
|
Windows
Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-69460 | 7.1 | CWE-416 | — | |
|
Windows
Use after free in Windows Enterprise App Management allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-69452 | 7.1 | CWE-416 | — | |
|
Windows
Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-69451 | 7.1 | CWE-416 | — | |
|
Windows
Use after free in Windows NDIS allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-69396 | 7.1 | CWE-416 | — | |
|
Windows
Use after free in Windows Kernel allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-69366 | 7.1 | CWE-416 | — | |
|
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Print Spooler Components allows an authorized …
|
CVE-2026-69364 | 7.1 | CWE-362 | — | |
|
Windows
Use after free in Windows NDIS allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-69357 | 7.1 | CWE-416 | — | |
|
Windows
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-69340 | 7.1 | CWE-122 | — | |
|
Windows
Double free in Windows Registry allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-69337 | 7.1 | CWE-415 | — | |
|
Windows
Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-69314 | 7.1 | CWE-416 | — | |
|
Windows
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-69305 | 7.1 | CWE-416 | — | |
|
Windows
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-69296 | 7.1 | CWE-416 | — | |
|
Windows
Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-69274 | 7.1 | CWE-416 | — | |
|
Windows
Use after free in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-68893 | 7.1 | CWE-416 | — | |
|
Windows
Use after free in Windows Kernel allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-68846 | 7.1 | CWE-416 | — | |
|
Windows
Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-68835 | 7.1 | CWE-416 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes
Reject invali…
|
CVE-2026-64422 | 7.1 | CWE-190 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
netfilter: ebtables: module names must be null-terminated
We need to explicitly…
|
CVE-2026-64412 | 7.1 | CWE-125 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
netfilter: ebtables: terminate table name before find_table_lock()
update_count…
|
CVE-2026-64411 | 7.1 | CWE-125 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
isofs: bound Rock Ridge symlink components to the SL record
get_symlink_chunk()…
|
CVE-2026-64317 | 7.1 | CWE-125 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: MGMT: validate advertising TLV before type checks
tlv_data_is_valid(…
|
CVE-2026-53255 | 7.1 | CWE-125 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: bnep: reject short frames before parsing
A BNEP peer can send a shor…
|
CVE-2026-53253 | 7.1 | CWE-125 | — |