주요 제품 취약점 (3,435건)
Windows
infra
2105건
KEV 293 · 최근 2026-10-13
Linux 커널
infra
908건
KEV 31 · 최근 2026-10-28
Cisco IOS
infra
58건
KEV 44 · 최근 2026-07-13
Ivanti
infra
46건
KEV 36 · 최근 2026-10-13
Microsoft Exchange
infra
43건
KEV 20 · 최근 2026-05-15
Fortinet
infra
41건
KEV 22 · 최근 2026-10-16
Apache HTTP
infra
33건
KEV 11 · 최근 2026-08-24
Citrix NetScaler
infra
31건
KEV 16 · 최근 2026-10-04
Apache Tomcat
infra
30건
KEV 8 · 최근 2026-08-04
OpenSSH
infra
30건
KEV 3 · 최근 2025-10-02
Node.js
infra
24건
KEV 2 · 최근 2025-01-14
nginx
infra
16건
KEV 0
Palo Alto PAN-OS
infra
15건
KEV 14 · 최근 2026-10-14
VMware vCenter
infra
13건
KEV 12 · 최근 2026-08-18
Atlassian Confluence
infra
10건
KEV 10 · 최근 2026-10-15
Redis
infra
9건
KEV 3 · 최근 2026-05-26
curl
infra
8건
KEV 1 · 최근 2023-05-12
OpenSSL
infra
8건
KEV 1 · 최근 2022-05-04
VMware ESXi
infra
7건
KEV 7 · 최근 2025-03-04
| 기술 | CVE | 심각도 | 유형 | KEV | 등재일 |
|---|---|---|---|---|---|
|
Windows
Use after free in Windows Notification allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69648 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Message Queuing allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69645 | 7.0 | CWE-416 | — | |
|
Windows
Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69630 | 7.0 | CWE-125 | — | |
|
Windows
Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69621 | 7.0 | CWE-122 | — | |
|
Windows
Out-of-bounds read in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69617 | 7.0 | CWE-125 | — | |
|
Windows
Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69613 | 7.0 | CWE-416 | — | |
|
Windows
Buffer over-read in Windows Win32K allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69610 | 7.0 | CWE-126 | — | |
|
Windows
Use after free in Windows Shell allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69606 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69600 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69596 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69581 | 7.0 | CWE-362 | — | |
|
Windows
Numeric truncation error in Windows Kernel allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69578 | 7.0 | CWE-122 | — | |
|
Windows
Use after free in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69575 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69574 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69573 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69567 | 7.0 | CWE-416 | — | |
|
Windows
Heap-based buffer overflow in Windows Online Certificate Status Protocol (OCSP) allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69564 | 7.0 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69563 | 7.0 | CWE-122 | — | |
|
Windows
Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69560 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69540 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Wireless Networking allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69517 | 7.0 | CWE-416 | — | |
|
Windows
Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69501 | 7.0 | CWE-822 | — | |
|
Windows
Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69500 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69498 | 7.0 | CWE-416 | — | |
|
Windows
Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69492 | 7.0 | CWE-122 | — | |
|
Windows
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69488 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69473 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Devices Human Interface allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69472 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69470 | 7.0 | CWE-416 | — | |
|
Windows
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69468 | 7.0 | CWE-122 | — | |
|
Windows
Time-of-check time-of-use (toctou) race condition in Windows Kernel allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69466 | 7.0 | CWE-367 | — | |
|
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetooth Service allows an authorized attacke…
|
CVE-2026-69448 | 7.0 | CWE-362 | — | |
|
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to ele…
|
CVE-2026-69441 | 7.0 | CWE-362 | — | |
|
Windows
Time-of-check time-of-use (toctou) race condition in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69440 | 7.0 | CWE-367 | — | |
|
Windows
Use after free in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69430 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69422 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69413 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69410 | 7.0 | CWE-416 | — | |
|
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevat…
|
CVE-2026-69404 | 7.0 | CWE-362 | — | |
|
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetooth Service allows an authorized attacke…
|
CVE-2026-69398 | 7.0 | CWE-362 | — | |
|
Windows
Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69394 | 7.0 | CWE-122 | — | |
|
Windows
Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69388 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69387 | 7.0 | CWE-416 | — | |
|
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevat…
|
CVE-2026-69385 | 7.0 | CWE-362 | — | |
|
Windows
External control of file name or path in Windows Shell allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69383 | 7.0 | CWE-73 | — | |
|
Windows
Improper link resolution before file access ('link following') in Windows NTFS allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69379 | 7.0 | CWE-59 | — | |
|
Windows
Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69362 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69341 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69335 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69333 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69331 | 7.0 | CWE-416 | — | |
|
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Video Driver allows an authorized attacker…
|
CVE-2026-69319 | 7.0 | CWE-362 | — | |
|
Windows
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69311 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows DNS allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69310 | 7.0 | CWE-416 | — | |
|
Windows
Double free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69309 | 7.0 | CWE-415 | — | |
|
Windows
Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69300 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69299 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69287 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows License Manager allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69281 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69280 | 7.0 | CWE-416 | — |