주요 제품 취약점 (3,478건)
Windows
infra
2105건
KEV 293 · 최근 2026-10-13
Linux 커널
infra
908건
KEV 31 · 최근 2026-10-28
Cisco IOS
infra
58건
KEV 44 · 최근 2026-07-13
Ivanti
infra
46건
KEV 36 · 최근 2026-10-13
Microsoft Exchange
infra
43건
KEV 20 · 최근 2026-05-15
Fortinet
infra
41건
KEV 22 · 최근 2026-10-16
Apache HTTP
infra
33건
KEV 11 · 최근 2026-08-24
Citrix NetScaler
infra
31건
KEV 16 · 최근 2026-10-04
Apache Tomcat
infra
30건
KEV 8 · 최근 2026-08-04
OpenSSH
infra
30건
KEV 3 · 최근 2025-10-02
PostgreSQL
finance
28건
KEV 2 · 최근 2026-09-02
Node.js
infra
24건
KEV 2 · 최근 2025-01-14
nginx
infra
16건
KEV 0
Palo Alto PAN-OS
infra
15건
KEV 14 · 최근 2026-10-14
VMware vCenter
infra
13건
KEV 12 · 최근 2026-08-18
Atlassian Confluence
infra
10건
KEV 10 · 최근 2026-10-15
MySQL/MariaDB
finance
10건
KEV 2 · 최근 2024-11-07
Redis
infra
9건
KEV 3 · 최근 2026-05-26
curl
infra
8건
KEV 1 · 최근 2023-05-12
OpenSSL
infra
8건
KEV 1 · 최근 2022-05-04
VMware ESXi
infra
7건
KEV 7 · 최근 2025-03-04
wolfSSL
finance
3건
KEV 0
Apache Spark
finance
1건
KEV 1 · 최근 2023-03-07
Spring Framework
finance
1건
KEV 1 · 최근 2022-04-04
| 기술 | CVE | 심각도 | 유형 | KEV | 등재일 |
|---|---|---|---|---|---|
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed
When r…
|
CVE-2026-31697 | 7.1 | CWE-787 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check()
Reject rt match r…
|
CVE-2026-31674 | 7.1 | CWE-125 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
netfilter: conntrack: add missing netlink policy validations
Hyunwoo Kim report…
|
CVE-2026-31407 | 7.1 | CWE-787 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
mtd: rawnand: serialize lock/unlock against other NAND operations
nand_lock() a…
|
CVE-2026-23434 | 7.1 | CWE-362 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
nfnetlink_osf: validate individual option lengths in fingerprints
nfnl_osf_add_…
|
CVE-2026-23397 | 7.1 | CWE-125 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
Squashfs: check metadata block offset is within range
Syzkaller reports a "gene…
|
CVE-2026-23388 | 7.1 | CWE-125 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
ALSA: usb-audio: Use correct version for UAC3 header validation
The entry of th…
|
CVE-2026-23318 | 7.1 | CWE-125 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: Fix possible oob access in mt76_connac2_mac_write_txwi_80211()
Chec…
|
CVE-2026-23315 | 7.1 | CWE-125 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
net/sched: cls_u32: use skb_header_pointer_careful()
skb_header_pointer() does …
|
CVE-2026-23204 | 7.1 | CWE-125 | — | |
|
curl
Malcolm file-upload component ships the upstream FilePond PHP server (pqina/filepond-server-php) largely unmodified: Dockerfile copies all upstream *…
|
CVE-2026-107362 | 7.1 | CWE-918 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
net: usb: asix_devices: Fix PHY address mask in MDIO bus initialization
Syzbot …
|
CVE-2025-38736 | 7.1 | CWE-125 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
net: dsa: sja1105: fix kasan out-of-bounds warning in sja1105_table_delete_entry…
|
CVE-2025-22107 | 7.1 | CWE-125 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
net: fix geneve_opt length integer overflow
struct geneve_opt uses 5 bit length…
|
CVE-2025-22055 | 7.1 | CWE-190 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
ipmr: do not call mr_mfc_uses_dev() for unres entries
syzbot found that calling…
|
CVE-2025-21719 | 7.1 | CWE-125 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy()
In 'wlc…
|
CVE-2024-58014 | 7.1 | CWE-125 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
HID: core: Fix assumption that Resolution Multipliers must be in Logical Collect…
|
CVE-2024-57986 | 7.1 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
Squashfs: check the inode number is not the invalid value of zero
Syskiller has…
|
CVE-2024-26982 | 7.1 | CWE-125 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
RDMA/rxe: insert mcg into mcg_tree only after rxe_mcast_add() succeeds
rxe_get_…
|
CVE-2026-98360 | 7.0 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
RDMA/core: Reject unregistering netdevs in ib_get_eth_speed
ib_device_get_netde…
|
CVE-2026-98359 | 7.0 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
wifi: mac80211: unlist vifs when their netdev is unregistered
mac80211 only rem…
|
CVE-2026-98331 | 7.0 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
wifi: cfg80211: get the wiphy out of a dying network namespace
When a network n…
|
CVE-2026-98330 | 7.0 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
RDMA/core: fix refcount bug in iwpm_get_nlmsg_request()
iwpm_get_nlmsg_request(…
|
CVE-2026-98252 | 7.0 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove
When the fan/pwm 4-5 …
|
CVE-2026-98197 | 7.0 | — | — | |
|
Windows
Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.
|
CVE-2026-97812 | 7.0 | CWE-415 | — | |
|
Windows
Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.
|
CVE-2026-97810 | 7.0 | CWE-122 | — | |
|
Windows
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
|
CVE-2026-97808 | 7.0 | CWE-416 | — | |
|
Windows
Missing authentication for critical function in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally.
|
CVE-2026-97793 | 7.0 | CWE-306 | — | |
|
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Container Isolation FS Filter Driver (unionfs.…
|
CVE-2026-97787 | 7.0 | CWE-362 | — | |
|
Windows
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
|
CVE-2026-96949 | 7.0 | CWE-362 | — | |
|
Windows
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
|
CVE-2026-96937 | 7.0 | CWE-416 | — | |
|
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Embedded Mode Service allows an authorized att…
|
CVE-2026-96932 | 7.0 | CWE-362 | — | |
|
Windows
Use after free in Windows Workstation Service allows an authorized attacker to elevate privileges locally.
|
CVE-2026-96923 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
|
CVE-2026-96919 | 7.0 | CWE-362 | — | |
|
Windows
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
|
CVE-2026-96868 | 7.0 | CWE-122 | — | |
|
Windows
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
|
CVE-2026-96852 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Update allows an authorized attacker to elevate privileges locally.
|
CVE-2026-96323 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally.
|
CVE-2026-96322 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
|
CVE-2026-96319 | 7.0 | CWE-416 | — | |
|
Windows
Missing authentication for critical function in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
|
CVE-2026-96313 | 7.0 | CWE-306 | — | |
|
Windows
Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
|
CVE-2026-96310 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
|
CVE-2026-96307 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
|
CVE-2026-96305 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
|
CVE-2026-96304 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
|
CVE-2026-96302 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
|
CVE-2026-96301 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
|
CVE-2026-96254 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
|
CVE-2026-96253 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
|
CVE-2026-96250 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
|
CVE-2026-96216 | 7.0 | CWE-416 | — | |
|
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Autopilot allows an authorized attacker to ele…
|
CVE-2026-96215 | 7.0 | CWE-362 | — | |
|
Windows
Out-of-bounds read in Windows Network File System allows an authorized attacker to elevate privileges locally.
|
CVE-2026-96209 | 7.0 | CWE-125 | — | |
|
Windows
Use after free in Windows Local Security Authority (LSA) allows an authorized attacker to elevate privileges locally.
|
CVE-2026-88161 | 7.0 | CWE-416 | — | |
|
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Windows Search Component allows an authorize…
|
CVE-2026-88160 | 7.0 | CWE-362 | — | |
|
Windows
Double free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
|
CVE-2026-88149 | 7.0 | CWE-415 | — | |
|
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Background Intelligent Transfer Service (BITS)…
|
CVE-2026-88146 | 7.0 | CWE-362 | — | |
|
Windows
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
|
CVE-2026-88141 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
|
CVE-2026-88139 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows SMB Server allows an authorized attacker to elevate privileges locally.
|
CVE-2026-88127 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
|
CVE-2026-88124 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
|
CVE-2026-88113 | 7.0 | CWE-416 | — |