주요 제품 취약점 (2,105건)
"Windows" 관련 CVE만 표시 중 · 필터 해제 ×
| 기술 | CVE | 심각도 | 유형 | KEV | 등재일 |
|---|---|---|---|---|---|
|
Windows
Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose i…
|
CVE-2026-69339 | 5.5 | CWE-497 | — | |
|
Windows
Missing authentication for critical function in Windows Power Dependency Coordinator allows an authorized attacker to perform tampering locally.
|
CVE-2026-69321 | 5.5 | CWE-306 | — | |
|
Windows
Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally.
|
CVE-2026-69318 | 5.5 | CWE-125 | — | |
|
Windows
Exposure of sensitive system information to an unauthorized control sphere in Windows License Manager allows an authorized attacker to disclose infor…
|
CVE-2026-69315 | 5.5 | CWE-497 | — | |
|
Windows
Generation of error message containing sensitive information in Microsoft COM for Windows allows an authorized attacker to disclose information local…
|
CVE-2026-69294 | 5.5 | CWE-209 | — | |
|
Windows
Use of uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally.
|
CVE-2026-69288 | 5.5 | CWE-908 | — | |
|
Windows
Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to disclose information locally.
|
CVE-2026-69286 | 5.5 | CWE-20 | — | |
|
Windows
Use after free in Windows Network Connection Broker allows an authorized attacker to disclose information locally.
|
CVE-2026-68886 | 5.5 | CWE-209 | — | |
|
Windows
Insertion of sensitive information into log file in Windows Program Compatibility Assistant Service allows an authorized attacker to disclose informa…
|
CVE-2026-68873 | 5.5 | CWE-532 | — | |
|
Windows
Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally.
|
CVE-2026-68851 | 5.5 | CWE-126 | — | |
|
Windows
Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose i…
|
CVE-2026-68842 | 5.5 | CWE-497 | — | |
|
Windows
Files or directories accessible to external parties in Windows Defender Firewall Service allows an authorized attacker to disclose information locall…
|
CVE-2026-68831 | 5.5 | CWE-552 | — | |
|
Windows
Improper link resolution before file access ('link following') in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to…
|
CVE-2026-68830 | 5.5 | CWE-59 | — | |
|
Windows
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
|
CVE-2026-65784 | 5.5 | CWE-125 | — | |
|
Windows
Out-of-bounds read in Windows GDI allows an authorized attacker to disclose information locally.
|
CVE-2026-65662 | 5.5 | CWE-125 | — | |
|
Windows
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
|
CVE-2026-62887 | 5.5 | CWE-125 | — | |
|
Windows
Missing authentication for critical function in Windows SmartScreen allows an authorized attacker to perform tampering locally.
|
CVE-2026-62879 | 5.5 | CWE-306 | — | |
|
Windows
Untrusted pointer dereference in Windows Win32K allows an authorized attacker to disclose information locally.
|
CVE-2026-62798 | 5.5 | CWE-822 | — | |
|
Windows
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
|
CVE-2026-62796 | 5.5 | CWE-125 | — | |
|
Windows
Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally.
|
CVE-2026-62793 | 5.5 | CWE-126 | — | |
|
Windows
Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally.
|
CVE-2026-62786 | 5.5 | CWE-125 | — | |
|
Windows
Incorrect authorization in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to disclose information locally.
|
CVE-2026-62775 | 5.5 | CWE-863 | — | |
|
Windows
Buffer over-read in Windows Win32K allows an authorized attacker to disclose information locally.
|
CVE-2026-62746 | 5.5 | CWE-126 | — | |
|
Windows
Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally.
|
CVE-2026-62743 | 5.5 | CWE-125 | — | |
|
Windows
Use of uninitialized resource in Windows Imaging Component allows an authorized attacker to disclose information locally.
|
CVE-2026-62740 | 5.5 | CWE-908 | — | |
|
Windows
Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.
|
CVE-2026-62738 | 5.5 | CWE-125 | — | |
|
Windows
Buffer over-read in Windows Wired AutoConfig Service allows an authorized attacker to disclose information locally.
|
CVE-2026-62730 | 5.5 | CWE-126 | — | |
|
Windows
Use of uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally.
|
CVE-2026-62709 | 5.5 | CWE-908 | — | |
|
Windows
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.
|
CVE-2026-62703 | 5.5 | CWE-125 | — | |
|
Windows
Improper link resolution before file access ('link following') in Windows Backup Engine allows an authorized attacker to disclose information locally.
|
CVE-2026-62687 | 5.5 | CWE-59 | — | |
|
Windows
Missing authorization in Windows Defender Firewall Service allows an authorized attacker to bypass a security feature locally.
|
CVE-2026-61936 | 5.5 | CWE-862 | — | |
|
Windows
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.
|
CVE-2026-61933 | 5.5 | CWE-125 | — | |
|
Windows
Cleartext storage of sensitive information in Windows Hello allows an authorized attacker to perform tampering locally.
|
CVE-2026-61928 | 5.5 | CWE-312 | — | |
|
Windows
Untrusted pointer dereference in Windows GDI allows an authorized attacker to disclose information locally.
|
CVE-2026-61360 | 5.5 | CWE-822 | — | |
|
Windows
Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally.
|
CVE-2026-61347 | 5.5 | CWE-126 | — | |
|
Windows
Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally.
|
CVE-2026-59137 | 5.5 | CWE-908 | — | |
|
Windows
Use of uninitialized resource in Microsoft COM for Windows allows an authorized attacker to disclose information locally.
|
CVE-2026-59136 | 5.5 | CWE-908 | — | |
|
Windows
Weak authentication in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.
|
CVE-2026-59135 | 5.5 | CWE-1390 | — | |
|
Windows
Out-of-bounds read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally.
|
CVE-2026-59128 | 5.5 | CWE-125 | — | |
|
Windows
Buffer over-read in Windows Kernel allows an authorized attacker to disclose information locally.
|
CVE-2026-50475 | 5.5 | CWE-126 | — | |
|
Windows
Out-of-bounds read in Windows TCP/IP allows an authorized attacker to disclose information locally.
|
CVE-2026-49177 | 5.5 | CWE-125 | — | |
|
Windows
Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information lo…
|
CVE-2026-108462 | 5.5 | CWE-497 | — | |
|
Windows
Buffer over-read in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally.
|
CVE-2026-103567 | 5.5 | CWE-126 | — | |
|
Windows
Use of uninitialized resource in Windows Kernel allows an authorized attacker to disclose information locally.
|
CVE-2026-102187 | 5.5 | CWE-908 | — | |
|
Windows
In the Linux kernel, the following vulnerability has been resolved:
KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer
…
|
CVE-2025-71104 | 5.5 | CWE-667 | — | |
|
Windows
In the Linux kernel, the following vulnerability has been resolved:
net: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod.
When I ra…
|
CVE-2025-23143 | 5.5 | CWE-476 | — | |
|
Windows
Windows Mobile Device Management Information Disclosure Vulnerability
|
CVE-2021-24084 | 5.5 | CWE-59 | — | |
|
Windows
Weak authentication in Windows Kernel allows an authorized attacker to bypass a security feature over a network.
|
CVE-2026-85939 | 5.3 | CWE-1390 | — | |
|
Windows
Confused deputy in CredentialProvider in Google Chrome on on Windows prior to 152.0.7977.75 allowed a remote attacker who had compromised the rendere…
|
CVE-2026-84329 | 5.3 | CWE-441 | — | |
|
Windows
Use after free in Windows Distributed File System (DFS) allows an authorized attacker to deny service over a network.
|
CVE-2026-78446 | 5.3 | CWE-416 | — | |
|
Windows
Null pointer dereference in Windows Schannel allows an authorized attacker to deny service over a network.
|
CVE-2026-70575 | 5.3 | CWE-476 | — | |
|
Windows
Use after free in Windows Netlogon allows an authorized attacker to deny service over a network.
|
CVE-2026-70025 | 5.3 | CWE-416 | — | |
|
Windows
Incorrect authorization in Windows Key Distribution Center allows an authorized attacker to bypass a security feature over a network.
|
CVE-2026-69640 | 5.3 | CWE-863 | — | |
|
Windows
Inadequate encryption strength in Windows Active Directory allows an authorized attacker to bypass a security feature over a network.
|
CVE-2026-65777 | 5.3 | CWE-326 | — | |
|
Windows
Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker to bypass a security feature over a network.
|
CVE-2026-62757 | 5.3 | CWE-347 | — | |
|
Windows
Out-of-bounds read in Windows Kernel allows an unauthorized attacker to deny service over a network.
|
CVE-2026-108466 | 5.3 | CWE-125 | — | |
|
Windows
Out-of-bounds read in Windows Remote Desktop Protocol allows an authorized attacker to disclose information over a network.
|
CVE-2026-102198 | 5.3 | CWE-125 | — | |
|
Windows
A unverified ownership vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.7, FortiClientWindows 7.2 all versions may allow attacker to im…
|
CVE-2026-84386 | 5.1 | CWE-283 | — | |
|
Windows
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information locally.
|
CVE-2026-61368 | 5.0 | CWE-122 | — | |
|
Windows
Use after free in Windows Overlay Filter allows an authorized attacker to disclose information over a network.
|
CVE-2026-69474 | 4.8 | CWE-126 | — |