주요 제품 취약점 (3,435건)
Windows
infra
2105건
KEV 293 · 최근 2026-10-13
Linux 커널
infra
908건
KEV 31 · 최근 2026-10-28
Cisco IOS
infra
58건
KEV 44 · 최근 2026-07-13
Ivanti
infra
46건
KEV 36 · 최근 2026-10-13
Microsoft Exchange
infra
43건
KEV 20 · 최근 2026-05-15
Fortinet
infra
41건
KEV 22 · 최근 2026-10-16
Apache HTTP
infra
33건
KEV 11 · 최근 2026-08-24
Citrix NetScaler
infra
31건
KEV 16 · 최근 2026-10-04
Apache Tomcat
infra
30건
KEV 8 · 최근 2026-08-04
OpenSSH
infra
30건
KEV 3 · 최근 2025-10-02
Node.js
infra
24건
KEV 2 · 최근 2025-01-14
nginx
infra
16건
KEV 0
Palo Alto PAN-OS
infra
15건
KEV 14 · 최근 2026-10-14
VMware vCenter
infra
13건
KEV 12 · 최근 2026-08-18
Atlassian Confluence
infra
10건
KEV 10 · 최근 2026-10-15
Redis
infra
9건
KEV 3 · 최근 2026-05-26
curl
infra
8건
KEV 1 · 최근 2023-05-12
OpenSSL
infra
8건
KEV 1 · 최근 2022-05-04
VMware ESXi
infra
7건
KEV 7 · 최근 2025-03-04
| 기술 | CVE | 심각도 | 유형 | KEV | 등재일 |
|---|---|---|---|---|---|
|
Windows
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
|
CVE-2026-85364 | 7.0 | CWE-416 | — | |
|
Windows
Release of invalid pointer or reference in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
|
CVE-2026-85362 | 7.0 | CWE-763 | — | |
|
Windows
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
|
CVE-2026-85361 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
|
CVE-2026-85360 | 7.0 | CWE-416 | — | |
|
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Phone Service allows an authorized attacker to…
|
CVE-2026-85357 | 7.0 | CWE-362 | — | |
|
Windows
Inclusion of functionality from untrusted control sphere in Windows Common Log File System Driver allows an authorized attacker to elevate privileges…
|
CVE-2026-85355 | 7.0 | CWE-829 | — | |
|
Windows
Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
|
CVE-2026-85354 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
|
CVE-2026-85352 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
|
CVE-2026-85342 | 7.0 | CWE-416 | — | |
|
Windows
Weak authentication in Windows Projected File System allows an authorized attacker to elevate privileges locally.
|
CVE-2026-85328 | 7.0 | CWE-1390 | — | |
|
Windows
In the WibuKey driver for Windows below Version 6.72, insufficient validation of user input when calculating the size of a kernel buffer could cause …
|
CVE-2026-84854 | 7.0 | CWE-787 | — | |
|
Windows
Use after free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.
|
CVE-2026-84020 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
|
CVE-2026-84019 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
|
CVE-2026-84018 | 7.0 | CWE-367 | — | |
|
Windows
Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
|
CVE-2026-84014 | 7.0 | CWE-122 | — | |
|
Windows
Improper link resolution before file access ('link following') in Windows Resilient File System (ReFS) Deduplication Service allows an authorized att…
|
CVE-2026-83999 | 7.0 | CWE-59 | — | |
|
Windows
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
|
CVE-2026-83940 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.
|
CVE-2026-83930 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
|
CVE-2026-83924 | 7.0 | CWE-416 | — | |
|
Windows
Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
|
CVE-2026-83921 | 7.0 | CWE-122 | — | |
|
Windows
Use after free in Windows ALPC allows an authorized attacker to elevate privileges locally.
|
CVE-2026-83917 | 7.0 | CWE-416 | — | |
|
Windows
Double free in Windows Error Reporting allows an authorized attacker to execute code locally.
|
CVE-2026-83916 | 7.0 | CWE-415 | — | |
|
Windows
Use after free in Windows Diagnostic Policy Service allows an authorized attacker to elevate privileges locally.
|
CVE-2026-83915 | 7.0 | CWE-416 | — | |
|
Windows
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
|
CVE-2026-83911 | 7.0 | CWE-122 | — | |
|
Windows
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
|
CVE-2026-83901 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
|
CVE-2026-83900 | 7.0 | CWE-416 | — | |
|
Windows
Improper privilege management in Windows Installer allows an authorized attacker to elevate privileges locally.
|
CVE-2026-83899 | 7.0 | CWE-362 | — | |
|
Windows
Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.
|
CVE-2026-83886 | 7.0 | CWE-416 | — | |
|
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Overlay Filter allows an authorized attacker t…
|
CVE-2026-83879 | 7.0 | CWE-362 | — | |
|
OpenSSH
Heap-based buffer overflow in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.
|
CVE-2026-83871 | 7.0 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.
|
CVE-2026-83871 | 7.0 | CWE-122 | — | |
|
Windows
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
|
CVE-2026-83866 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.
|
CVE-2026-83853 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
|
CVE-2026-83852 | 7.0 | CWE-416 | — | |
|
Windows
Double free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
|
CVE-2026-83842 | 7.0 | CWE-415 | — | |
|
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K allows an authorized attacker to elevat…
|
CVE-2026-83841 | 7.0 | CWE-362 | — | |
|
Windows
Time-of-check time-of-use (toctou) race condition in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
|
CVE-2026-83839 | 7.0 | CWE-367 | — | |
|
Windows
Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
|
CVE-2026-83834 | 7.0 | CWE-367 | — | |
|
Windows
Heap-based buffer overflow in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges locally.
|
CVE-2026-83827 | 7.0 | CWE-122 | — | |
|
Windows
Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to elevate privil…
|
CVE-2026-83793 | 7.0 | CWE-59 | — | |
|
Windows
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.
|
CVE-2026-83790 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.
|
CVE-2026-83785 | 7.0 | CWE-416 | — | |
|
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to ele…
|
CVE-2026-83775 | 7.0 | CWE-122 | — | |
|
Windows
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
|
CVE-2026-83752 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
|
CVE-2026-83751 | 7.0 | CWE-416 | — | |
|
Windows
Time-of-check time-of-use (toctou) race condition in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
|
CVE-2026-83750 | 7.0 | CWE-122 | — | |
|
Windows
Use after free in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
|
CVE-2026-83749 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.
|
CVE-2026-83740 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
|
CVE-2026-83738 | 7.0 | CWE-362 | — | |
|
Windows
Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
|
CVE-2026-83724 | 7.0 | CWE-122 | — | |
|
Windows
Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally.
|
CVE-2026-83720 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
|
CVE-2026-83718 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
|
CVE-2026-83717 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
|
CVE-2026-83710 | 7.0 | CWE-416 | — | |
|
Windows
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
|
CVE-2026-83708 | 7.0 | CWE-121 | — | |
|
Windows
Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally.
|
CVE-2026-83707 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
|
CVE-2026-83702 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Now Playing Session Manager allows an authorized attacker to elevate privileges locally.
|
CVE-2026-83701 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
|
CVE-2026-83696 | 7.0 | CWE-416 | — | |
|
Windows
Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.
|
CVE-2026-83694 | 7.0 | CWE-125 | — |