주요 제품 취약점 (2,105건)

"Windows" 관련 CVE만 표시 중 · 필터 해제 ×

기술	CVE	심각도	유형	KEV	등재일
Windows Microsoft Windows Windows Print Spooler Elevation of Privilege Vulnerability	CVE-2022-21999	7.8	CWE-22	KEV	2022-03-25
Windows Microsoft Windows An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly allows COM object creation, aka 'Wi…	CVE-2019-1405	7.8	CWE-269	KEV	2022-03-15
Windows Microsoft Windows An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka 'Microsoft Windows Elevation of Privilege…	CVE-2019-1322	7.8	—	KEV	2022-03-15
Windows Microsoft Windows An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles hard links, aka 'Windows Error Reporting Manag…	CVE-2019-1315	7.8	CWE-59	KEV	2022-03-15
Windows Microsoft Windows An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.To exploit this vulnerability, an…	CVE-2019-1253	7.8	CWE-59	KEV	2022-03-15
Windows Microsoft Win32k An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation…	CVE-2019-1132	7.8	—	KEV	2022-03-15
Windows Microsoft Windows An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation o…	CVE-2019-1129	7.8	CWE-59	KEV	2022-03-15
Windows Microsoft Windows An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links. An attacker who successf…	CVE-2019-1064	7.8	CWE-59	KEV	2022-03-15
Windows Microsoft Windows An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation o…	CVE-2019-0841	7.8	CWE-59	KEV	2022-03-15
Windows Microsoft Windows An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka "Microsoft Windows Elevation of Privilege…	CVE-2019-0543	7.8	CWE-287	KEV	2022-03-15
Windows Microsoft Windows The kernel-mode drivers in Transaction Manager in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1, Windows Se…	CVE-2017-0101	7.8	CWE-119	KEV	2022-03-15
Windows Microsoft Windows The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and …	CVE-2016-3309	7.8	—	KEV	2022-03-15
Windows Microsoft Malware Protection Engine The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Window…	CVE-2017-8540	7.8	CWE-787	KEV	2022-03-03
Windows Microsoft Graphics Device Interface (GDI) The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 20…	CVE-2017-0001	7.8	—	KEV	2022-03-03
Windows Microsoft Windows The Secondary Logon Service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold …	CVE-2016-0099	7.8	CWE-120	KEV	2022-03-03
Windows Adobe Flash Player Adobe Flash Player 18.x through 18.0.0.252 and 19.x through 19.0.0.207 on Windows and OS X and 11.x through 11.2.202.535 on Linux allows remote attac…	CVE-2015-7645	7.8	—	KEV	2022-03-03
Windows Microsoft ATM Font Driver ATMFD.DLL in the Adobe Type Manager Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows …	CVE-2015-2387	7.8	CWE-787	KEV	2022-03-03
Windows Microsoft Win32k Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local users to gain privileges via …	CVE-2015-1701	7.8	—	KEV	2022-03-03
Windows Microsoft Windows Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows …	CVE-2014-4114	7.8	CWE-20	KEV	2022-03-03
Windows Microsoft Windows NDProxy.sys in the kernel in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a crafted application, as…	CVE-2013-5065	7.8	CWE-20	KEV	2022-03-03
Windows Adobe Flash Player Unspecified vulnerability in Adobe Flash Player before 11.3.300.271 on Windows and Mac OS X and before 11.2.202.238 on Linux allows remote attackers …	CVE-2012-1535	7.8	CWE-20	KEV	2022-03-03
Windows Microsoft Windows The kernel in Microsoft Windows NT 3.1 through Windows 7, including Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista …	CVE-2010-0232	7.8	—	KEV	2022-03-03
Windows Microsoft Windows The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 does not properly validate c…	CVE-2009-1123	7.8	CWE-20	KEV	2022-03-03
Windows Microsoft Windows The POSIX component of Microsoft Windows NT and Windows 2000 allows local users to execute arbitrary code via certain parameters, possibly by modifyi…	CVE-2004-0210	7.8	CWE-120	KEV	2022-03-03
Windows Microsoft Windows smss.exe debugging subsystem in Windows NT and Windows 2000 does not properly authenticate programs that connect to other programs, which allows loca…	CVE-2002-0367	7.8	CWE-269	KEV	2022-03-03
Windows Microsoft Windows Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows …	CVE-2014-6352	7.8	—	KEV	2022-02-25
Windows Microsoft Graphics Component GDI+ in Microsoft Windows Vista SP2 and Server 2008 SP2; Office 2003 SP3, 2007 SP3, and 2010 SP1 and SP2; Office Compatibility Pack SP3; and Lync 201…	CVE-2013-3906	7.8	CWE-94	KEV	2022-02-15
Windows Microsoft Windows An elevation of privilege vulnerability exists because of overly permissive Access Control Lists (ACLs) on multiple system files, including the Secur…	CVE-2021-36934	7.8	—	KEV	2022-02-10
Windows Microsoft Win32k The kernel-mode drivers in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1,…	CVE-2017-0263	7.8	CWE-416	KEV	2022-02-10
Windows Microsoft Windows An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperly handles symbolic links, aka…	CVE-2020-0787	7.8	CWE-59	KEV	2022-01-28
Windows Microsoft Win32k An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation…	CVE-2018-8453	7.8	—	KEV	2022-01-21
Windows Microsoft Win32k An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation…	CVE-2019-1458	7.8	—	KEV	2022-01-10
Windows Microsoft Windows Win32k Elevation of Privilege Vulnerability	CVE-2021-40449	7.8	CWE-416	KEV	2021-11-17
Windows Microsoft Windows Windows Common Log File System Driver Elevation of Privilege Vulnerability	CVE-2021-36955	7.8	—	KEV	2021-11-03
Windows Microsoft Windows Windows Update Medic Service Elevation of Privilege Vulnerability	CVE-2021-36948	7.8	CWE-269	KEV	2021-11-03
Windows Microsoft Windows Windows Kernel Elevation of Privilege Vulnerability	CVE-2021-33771	7.8	CWE-119	KEV	2021-11-03
Windows Microsoft Windows Windows Kernel Elevation of Privilege Vulnerability	CVE-2021-31979	7.8	CWE-119	KEV	2021-11-03
Windows Microsoft Windows Windows NTFS Elevation of Privilege Vulnerability	CVE-2021-31956	7.8	CWE-191	KEV	2021-11-03
Windows Microsoft Win32k Windows Win32k Elevation of Privilege Vulnerability	CVE-2021-1732	7.8	CWE-787	KEV	2021-11-03
Windows Microsoft Windows Windows Print Spooler Remote Code Execution Vulnerability	CVE-2021-1675	7.8	CWE-269	KEV	2021-11-03
Windows Trend Micro Apex One, OfficeScan, and Worry-Free Business Security A vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 on Microsoft Windows may allow an attacker to manipulate a particul…	CVE-2020-24557	7.8	—	KEV	2021-11-03
Windows Microsoft Windows Windows Kernel Local Elevation of Privilege Vulnerability	CVE-2020-17087	7.8	CWE-131	KEV	2021-11-03
Windows Microsoft Windows A spoofing vulnerability exists when Windows incorrectly validates file signatures. An attacker who successfully exploited this vulnerability could b…	CVE-2020-1464	7.8	CWE-347	KEV	2021-11-03
Windows Microsoft Windows An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of P…	CVE-2020-0986	7.8	CWE-787	KEV	2021-11-03
Windows Microsoft Windows A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted …	CVE-2020-0938	7.8	CWE-787	KEV	2021-11-03
Windows Microsoft Windows An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'Windows Installer Elevation of…	CVE-2020-0683	7.8	CWE-59	KEV	2021-11-03
Windows Microsoft Windows An elevation of privilege vulnerability exists in the way that ws2ifsl.sys (Winsock) handles objects in memory, aka 'Windows Elevation of Privilege V…	CVE-2019-1215	7.8	CWE-269	KEV	2021-11-03
Windows Microsoft Windows An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory, aka 'Windo…	CVE-2019-1214	7.8	CWE-119	KEV	2021-11-03
Windows Microsoft Windows An elevation of privilege vulnerability exists in the way Windows Error Reporting (WER) handles files, aka 'Windows Error Reporting Elevation of Priv…	CVE-2019-0863	7.8	—	KEV	2021-11-03
Windows Microsoft Win32k An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation…	CVE-2019-0859	7.8	—	KEV	2021-11-03
Windows Microsoft Win32k An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation…	CVE-2019-0808	7.8	—	KEV	2021-11-03
Windows Microsoft Win32k An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation…	CVE-2019-0803	7.8	—	KEV	2021-11-03
Windows Microsoft Win32k An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation…	CVE-2019-0797	7.8	—	KEV	2021-11-03
Windows Microsoft Office and WordPad Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Windows Vista SP2, Windows Server 2…	CVE-2017-0199	7.8	—	KEV	2021-11-03
Windows Microsoft Win32k The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and …	CVE-2016-7255	7.8	—	KEV	2021-11-03
Windows Microsoft Windows Media Center in Microsoft Windows Vista SP2, Windows 7 SP1, and Windows 8.1 allows remote attackers to execute arbitrary code via a crafted Media Cen…	CVE-2016-0185	7.8	—	KEV	2021-11-03
Windows Microsoft Win32k The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R…	CVE-2016-0167	7.8	—	KEV	2021-11-03
Windows Microsoft Windows Windows SmartScreen Security Feature Bypass Vulnerability	CVE-2024-21351	7.6	CWE-94	KEV	2024-02-13
Windows Prettier eslint-config-prettier eslint-config-prettier 8.10.1, 9.1.1, 10.1.6, and 10.1.7 has embedded malicious code for a supply chain compromise. Installing an affected package ex…	CVE-2025-54313	7.5	CWE-506	KEV	2026-01-22
Windows Microsoft Windows Access of resource using incompatible type ('type confusion') in Microsoft Scripting Engine allows an unauthorized attacker to execute code over a ne…	CVE-2025-30397	7.5	CWE-843	KEV	2025-05-13