Security News

주요 제품 취약점 (2,105건)

"Windows" 관련 CVE만 표시 중 · 필터 해제 ×

기술CVE심각도유형KEV등재일
Windows
Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose i…
CVE-2026-69339 5.5 CWE-497 —
Windows
Missing authentication for critical function in Windows Power Dependency Coordinator allows an authorized attacker to perform tampering locally.
CVE-2026-69321 5.5 CWE-306 —
Windows
Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally.
CVE-2026-69318 5.5 CWE-125 —
Windows
Exposure of sensitive system information to an unauthorized control sphere in Windows License Manager allows an authorized attacker to disclose infor…
CVE-2026-69315 5.5 CWE-497 —
Windows
Generation of error message containing sensitive information in Microsoft COM for Windows allows an authorized attacker to disclose information local…
CVE-2026-69294 5.5 CWE-209 —
Windows
Use of uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally.
CVE-2026-69288 5.5 CWE-908 —
Windows
Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to disclose information locally.
CVE-2026-69286 5.5 CWE-20 —
Windows
Use after free in Windows Network Connection Broker allows an authorized attacker to disclose information locally.
CVE-2026-68886 5.5 CWE-209 —
Windows
Insertion of sensitive information into log file in Windows Program Compatibility Assistant Service allows an authorized attacker to disclose informa…
CVE-2026-68873 5.5 CWE-532 —
Windows
Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally.
CVE-2026-68851 5.5 CWE-126 —
Windows
Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose i…
CVE-2026-68842 5.5 CWE-497 —
Windows
Files or directories accessible to external parties in Windows Defender Firewall Service allows an authorized attacker to disclose information locall…
CVE-2026-68831 5.5 CWE-552 —
Windows
Improper link resolution before file access ('link following') in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to…
CVE-2026-68830 5.5 CWE-59 —
Windows
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
CVE-2026-65784 5.5 CWE-125 —
Windows
Out-of-bounds read in Windows GDI allows an authorized attacker to disclose information locally.
CVE-2026-65662 5.5 CWE-125 —
Windows
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
CVE-2026-62887 5.5 CWE-125 —
Windows
Missing authentication for critical function in Windows SmartScreen allows an authorized attacker to perform tampering locally.
CVE-2026-62879 5.5 CWE-306 —
Windows
Untrusted pointer dereference in Windows Win32K allows an authorized attacker to disclose information locally.
CVE-2026-62798 5.5 CWE-822 —
Windows
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
CVE-2026-62796 5.5 CWE-125 —
Windows
Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally.
CVE-2026-62793 5.5 CWE-126 —
Windows
Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally.
CVE-2026-62786 5.5 CWE-125 —
Windows
Incorrect authorization in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to disclose information locally.
CVE-2026-62775 5.5 CWE-863 —
Windows
Buffer over-read in Windows Win32K allows an authorized attacker to disclose information locally.
CVE-2026-62746 5.5 CWE-126 —
Windows
Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally.
CVE-2026-62743 5.5 CWE-125 —
Windows
Use of uninitialized resource in Windows Imaging Component allows an authorized attacker to disclose information locally.
CVE-2026-62740 5.5 CWE-908 —
Windows
Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.
CVE-2026-62738 5.5 CWE-125 —
Windows
Buffer over-read in Windows Wired AutoConfig Service allows an authorized attacker to disclose information locally.
CVE-2026-62730 5.5 CWE-126 —
Windows
Use of uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally.
CVE-2026-62709 5.5 CWE-908 —
Windows
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.
CVE-2026-62703 5.5 CWE-125 —
Windows
Improper link resolution before file access ('link following') in Windows Backup Engine allows an authorized attacker to disclose information locally.
CVE-2026-62687 5.5 CWE-59 —
Windows
Missing authorization in Windows Defender Firewall Service allows an authorized attacker to bypass a security feature locally.
CVE-2026-61936 5.5 CWE-862 —
Windows
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.
CVE-2026-61933 5.5 CWE-125 —
Windows
Cleartext storage of sensitive information in Windows Hello allows an authorized attacker to perform tampering locally.
CVE-2026-61928 5.5 CWE-312 —
Windows
Untrusted pointer dereference in Windows GDI allows an authorized attacker to disclose information locally.
CVE-2026-61360 5.5 CWE-822 —
Windows
Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally.
CVE-2026-61347 5.5 CWE-126 —
Windows
Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally.
CVE-2026-59137 5.5 CWE-908 —
Windows
Use of uninitialized resource in Microsoft COM for Windows allows an authorized attacker to disclose information locally.
CVE-2026-59136 5.5 CWE-908 —
Windows
Weak authentication in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.
CVE-2026-59135 5.5 CWE-1390 —
Windows
Out-of-bounds read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally.
CVE-2026-59128 5.5 CWE-125 —
Windows
Buffer over-read in Windows Kernel allows an authorized attacker to disclose information locally.
CVE-2026-50475 5.5 CWE-126 —
Windows
Out-of-bounds read in Windows TCP/IP allows an authorized attacker to disclose information locally.
CVE-2026-49177 5.5 CWE-125 —
Windows
Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information lo…
CVE-2026-108462 5.5 CWE-497 —
Windows
Buffer over-read in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally.
CVE-2026-103567 5.5 CWE-126 —
Windows
Use of uninitialized resource in Windows Kernel allows an authorized attacker to disclose information locally.
CVE-2026-102187 5.5 CWE-908 —
Windows
In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer …
CVE-2025-71104 5.5 CWE-667 —
Windows
In the Linux kernel, the following vulnerability has been resolved: net: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod. When I ra…
CVE-2025-23143 5.5 CWE-476 —
Windows
Windows Mobile Device Management Information Disclosure Vulnerability
CVE-2021-24084 5.5 CWE-59 —
Windows
Weak authentication in Windows Kernel allows an authorized attacker to bypass a security feature over a network.
CVE-2026-85939 5.3 CWE-1390 —
Windows
Confused deputy in CredentialProvider in Google Chrome on on Windows prior to 152.0.7977.75 allowed a remote attacker who had compromised the rendere…
CVE-2026-84329 5.3 CWE-441 —
Windows
Use after free in Windows Distributed File System (DFS) allows an authorized attacker to deny service over a network.
CVE-2026-78446 5.3 CWE-416 —
Windows
Null pointer dereference in Windows Schannel allows an authorized attacker to deny service over a network.
CVE-2026-70575 5.3 CWE-476 —
Windows
Use after free in Windows Netlogon allows an authorized attacker to deny service over a network.
CVE-2026-70025 5.3 CWE-416 —
Windows
Incorrect authorization in Windows Key Distribution Center allows an authorized attacker to bypass a security feature over a network.
CVE-2026-69640 5.3 CWE-863 —
Windows
Inadequate encryption strength in Windows Active Directory allows an authorized attacker to bypass a security feature over a network.
CVE-2026-65777 5.3 CWE-326 —
Windows
Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-62757 5.3 CWE-347 —
Windows
Out-of-bounds read in Windows Kernel allows an unauthorized attacker to deny service over a network.
CVE-2026-108466 5.3 CWE-125 —
Windows
Out-of-bounds read in Windows Remote Desktop Protocol allows an authorized attacker to disclose information over a network.
CVE-2026-102198 5.3 CWE-125 —
Windows
A unverified ownership vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.7, FortiClientWindows 7.2 all versions may allow attacker to im…
CVE-2026-84386 5.1 CWE-283 —
Windows
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information locally.
CVE-2026-61368 5.0 CWE-122 —
Windows
Use after free in Windows Overlay Filter allows an authorized attacker to disclose information over a network.
CVE-2026-69474 4.8 CWE-126 —