주요 제품 취약점 (3,478건)
Windows
infra
2105건
KEV 293 · 최근 2026-10-13
Linux 커널
infra
908건
KEV 31 · 최근 2026-10-28
Cisco IOS
infra
58건
KEV 44 · 최근 2026-07-13
Ivanti
infra
46건
KEV 36 · 최근 2026-10-13
Microsoft Exchange
infra
43건
KEV 20 · 최근 2026-05-15
Fortinet
infra
41건
KEV 22 · 최근 2026-10-16
Apache HTTP
infra
33건
KEV 11 · 최근 2026-08-24
Citrix NetScaler
infra
31건
KEV 16 · 최근 2026-10-04
Apache Tomcat
infra
30건
KEV 8 · 최근 2026-08-04
OpenSSH
infra
30건
KEV 3 · 최근 2025-10-02
PostgreSQL
finance
28건
KEV 2 · 최근 2026-09-02
Node.js
infra
24건
KEV 2 · 최근 2025-01-14
nginx
infra
16건
KEV 0
Palo Alto PAN-OS
infra
15건
KEV 14 · 최근 2026-10-14
VMware vCenter
infra
13건
KEV 12 · 최근 2026-08-18
Atlassian Confluence
infra
10건
KEV 10 · 최근 2026-10-15
MySQL/MariaDB
finance
10건
KEV 2 · 최근 2024-11-07
Redis
infra
9건
KEV 3 · 최근 2026-05-26
curl
infra
8건
KEV 1 · 최근 2023-05-12
OpenSSL
infra
8건
KEV 1 · 최근 2022-05-04
VMware ESXi
infra
7건
KEV 7 · 최근 2025-03-04
wolfSSL
finance
3건
KEV 0
Apache Spark
finance
1건
KEV 1 · 최근 2023-03-07
Spring Framework
finance
1건
KEV 1 · 최근 2022-04-04
| 기술 | CVE | 심각도 | 유형 | KEV | 등재일 |
|---|---|---|---|---|---|
|
Windows
Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69500 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69498 | 7.0 | CWE-416 | — | |
|
Windows
Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69492 | 7.0 | CWE-122 | — | |
|
Windows
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69488 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69473 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Devices Human Interface allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69472 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69470 | 7.0 | CWE-416 | — | |
|
Windows
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69468 | 7.0 | CWE-122 | — | |
|
Windows
Time-of-check time-of-use (toctou) race condition in Windows Kernel allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69466 | 7.0 | CWE-367 | — | |
|
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetooth Service allows an authorized attacke…
|
CVE-2026-69448 | 7.0 | CWE-362 | — | |
|
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to ele…
|
CVE-2026-69441 | 7.0 | CWE-362 | — | |
|
Windows
Time-of-check time-of-use (toctou) race condition in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69440 | 7.0 | CWE-367 | — | |
|
Windows
Use after free in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69430 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69422 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69413 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69410 | 7.0 | CWE-416 | — | |
|
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevat…
|
CVE-2026-69404 | 7.0 | CWE-362 | — | |
|
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetooth Service allows an authorized attacke…
|
CVE-2026-69398 | 7.0 | CWE-362 | — | |
|
Windows
Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69394 | 7.0 | CWE-122 | — | |
|
Windows
Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69388 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69387 | 7.0 | CWE-416 | — | |
|
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevat…
|
CVE-2026-69385 | 7.0 | CWE-362 | — | |
|
Windows
External control of file name or path in Windows Shell allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69383 | 7.0 | CWE-73 | — | |
|
Windows
Improper link resolution before file access ('link following') in Windows NTFS allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69379 | 7.0 | CWE-59 | — | |
|
Windows
Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69362 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69341 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69335 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69333 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69331 | 7.0 | CWE-416 | — | |
|
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Video Driver allows an authorized attacker…
|
CVE-2026-69319 | 7.0 | CWE-362 | — | |
|
Windows
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69311 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows DNS allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69310 | 7.0 | CWE-416 | — | |
|
Windows
Double free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69309 | 7.0 | CWE-415 | — | |
|
Windows
Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69300 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69299 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69287 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows License Manager allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69281 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69280 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69279 | 7.0 | CWE-416 | — | |
|
Windows
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
|
CVE-2026-68884 | 7.0 | CWE-122 | — | |
|
Windows
Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.
|
CVE-2026-68847 | 7.0 | CWE-416 | — | |
|
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Driver allows an authorized attacker to el…
|
CVE-2026-68840 | 7.0 | CWE-362 | — | |
|
Windows
Use after free in Windows File History Service allows an authorized attacker to elevate privileges locally.
|
CVE-2026-68837 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
|
CVE-2026-68825 | 7.0 | CWE-416 | — | |
|
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected User Experiences and Telemetry allow…
|
CVE-2026-68824 | 7.0 | CWE-362 | — | |
|
Windows
Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
|
CVE-2026-65783 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
|
CVE-2026-65782 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
|
CVE-2026-65781 | 7.0 | CWE-416 | — | |
|
Windows
Double free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
|
CVE-2026-65780 | 7.0 | CWE-415 | — | |
|
Windows
Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
|
CVE-2026-65779 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
|
CVE-2026-65778 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
|
CVE-2026-65776 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
|
CVE-2026-65678 | 7.0 | CWE-416 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
netfilter: ebtables: zero chainstack array
sashiko reports:
looking at ebtable…
|
CVE-2026-64413 | 7.0 | CWE-908 | — | |
|
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Backup Engine allows an authorized attacker to…
|
CVE-2026-62908 | 7.0 | CWE-362 | — | |
|
Linux 커널
Time-of-check time-of-use (toctou) race condition in Linux Kernel allows an authorized attacker to elevate privileges locally.
|
CVE-2026-62840 | 7.0 | CWE-367 | — | |
|
Windows
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
|
CVE-2026-62788 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
|
CVE-2026-62780 | 7.0 | CWE-362 | — | |
|
Windows
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
|
CVE-2026-62774 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally.
|
CVE-2026-62773 | 7.0 | CWE-416 | — |