Security News

주요 제품 취약점 (3,435건)

기술CVE심각도유형KEV등재일
Windows
Missing authentication for critical function in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
CVE-2026-96313 7.0 CWE-306 —
Windows
Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-96310 7.0 CWE-416 —
Windows
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-96307 7.0 CWE-416 —
Windows
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-96305 7.0 CWE-416 —
Windows
Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-96304 7.0 CWE-416 —
Windows
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-96302 7.0 CWE-416 —
Windows
Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-96301 7.0 CWE-416 —
Windows
Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-96254 7.0 CWE-416 —
Windows
Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-96253 7.0 CWE-416 —
Windows
Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-96250 7.0 CWE-416 —
Windows
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-96216 7.0 CWE-416 —
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Autopilot allows an authorized attacker to ele…
CVE-2026-96215 7.0 CWE-362 —
Windows
Out-of-bounds read in Windows Network File System allows an authorized attacker to elevate privileges locally.
CVE-2026-96209 7.0 CWE-125 —
Windows
Use after free in Windows Local Security Authority (LSA) allows an authorized attacker to elevate privileges locally.
CVE-2026-88161 7.0 CWE-416 —
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Windows Search Component allows an authorize…
CVE-2026-88160 7.0 CWE-362 —
Windows
Double free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2026-88149 7.0 CWE-415 —
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Background Intelligent Transfer Service (BITS)…
CVE-2026-88146 7.0 CWE-362 —
Windows
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-88141 7.0 CWE-416 —
Windows
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-88139 7.0 CWE-416 —
Windows
Use after free in Windows SMB Server allows an authorized attacker to elevate privileges locally.
CVE-2026-88127 7.0 CWE-416 —
Windows
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-88124 7.0 CWE-416 —
Windows
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
CVE-2026-88113 7.0 CWE-416 —
Windows
Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-88110 7.0 CWE-122 —
Windows
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-88107 7.0 CWE-362 —
Windows
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-88106 7.0 CWE-416 —
Windows
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
CVE-2026-88103 7.0 CWE-416 —
Windows
Untrusted pointer dereference in Windows Security Support Provider Interface allows an authorized attacker to elevate privileges locally.
CVE-2026-88098 7.0 CWE-822 —
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DCOM Server allows an authorized attacker to e…
CVE-2026-88096 7.0 CWE-362 —
Windows
Null pointer dereference in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
CVE-2026-88079 7.0 CWE-476 —
Windows
Null pointer dereference in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-88076 7.0 CWE-476 —
Windows
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-87715 7.0 CWE-416 —
Windows
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-87708 7.0 CWE-416 —
Windows
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-87704 7.0 CWE-416 —
Windows
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-87693 7.0 CWE-416 —
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to ele…
CVE-2026-85941 7.0 CWE-362 —
Windows
Use after free in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.
CVE-2026-85934 7.0 CWE-416 —
Windows
Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.
CVE-2026-85930 7.0 CWE-416 —
Windows
Time-of-check time-of-use (toctou) race condition in Windows BitLocker allows an authorized attacker to elevate privileges locally.
CVE-2026-85920 7.0 CWE-367 —
Windows
Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.
CVE-2026-85918 7.0 CWE-416 —
Windows
Use after free in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally.
CVE-2026-85914 7.0 CWE-416 —
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Clipboard User Service allows an authorized at…
CVE-2026-85912 7.0 CWE-362 —
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Device Association Service allows an authorize…
CVE-2026-85904 7.0 CWE-362 —
Windows
Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.
CVE-2026-85879 7.0 CWE-367 —
Windows
Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-85870 7.0 CWE-122 —
Windows
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-85868 7.0 CWE-416 —
Windows
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
CVE-2026-85855 7.0 CWE-416 —
Windows
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
CVE-2026-85854 7.0 CWE-416 —
Windows
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
CVE-2026-85853 7.0 CWE-125 —
Windows
Use after free in Windows Web Account Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-85846 7.0 CWE-416 —
Windows
Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
CVE-2026-85834 7.0 CWE-122 —
Windows
Out-of-bounds write in Windows Fast FAT Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-85826 7.0 CWE-787 —
Windows
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
CVE-2026-85825 7.0 CWE-362 —
Windows
Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally.
CVE-2026-85824 7.0 CWE-362 —
Windows
Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally.
CVE-2026-85823 7.0 CWE-416 —
Windows
Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally.
CVE-2026-85810 7.0 CWE-416 —
Windows
Use after free in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally.
CVE-2026-85803 7.0 CWE-416 —
Windows
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
CVE-2026-85802 7.0 CWE-416 —
Windows
Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally.
CVE-2026-85791 7.0 CWE-122 —
Windows
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-85372 7.0 CWE-416 —
Windows
Use after free in Windows Cash Drawer Protocol Provider allows an authorized attacker to elevate privileges locally.
CVE-2026-85367 7.0 CWE-416 —