주요 제품 취약점 (3,435건)
Windows
infra
2105건
KEV 293 · 최근 2026-10-13
Linux 커널
infra
908건
KEV 31 · 최근 2026-10-28
Cisco IOS
infra
58건
KEV 44 · 최근 2026-07-13
Ivanti
infra
46건
KEV 36 · 최근 2026-10-13
Microsoft Exchange
infra
43건
KEV 20 · 최근 2026-05-15
Fortinet
infra
41건
KEV 22 · 최근 2026-10-16
Apache HTTP
infra
33건
KEV 11 · 최근 2026-08-24
Citrix NetScaler
infra
31건
KEV 16 · 최근 2026-10-04
Apache Tomcat
infra
30건
KEV 8 · 최근 2026-08-04
OpenSSH
infra
30건
KEV 3 · 최근 2025-10-02
Node.js
infra
24건
KEV 2 · 최근 2025-01-14
nginx
infra
16건
KEV 0
Palo Alto PAN-OS
infra
15건
KEV 14 · 최근 2026-10-14
VMware vCenter
infra
13건
KEV 12 · 최근 2026-08-18
Atlassian Confluence
infra
10건
KEV 10 · 최근 2026-10-15
Redis
infra
9건
KEV 3 · 최근 2026-05-26
curl
infra
8건
KEV 1 · 최근 2023-05-12
OpenSSL
infra
8건
KEV 1 · 최근 2022-05-04
VMware ESXi
infra
7건
KEV 7 · 최근 2025-03-04
| 기술 | CVE | 심각도 | 유형 | KEV | 등재일 |
|---|---|---|---|---|---|
|
Windows
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69279 | 7.0 | CWE-416 | — | |
|
Windows
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
|
CVE-2026-68884 | 7.0 | CWE-122 | — | |
|
Windows
Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.
|
CVE-2026-68847 | 7.0 | CWE-416 | — | |
|
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Driver allows an authorized attacker to el…
|
CVE-2026-68840 | 7.0 | CWE-362 | — | |
|
Windows
Use after free in Windows File History Service allows an authorized attacker to elevate privileges locally.
|
CVE-2026-68837 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
|
CVE-2026-68825 | 7.0 | CWE-416 | — | |
|
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected User Experiences and Telemetry allow…
|
CVE-2026-68824 | 7.0 | CWE-362 | — | |
|
Windows
Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
|
CVE-2026-65783 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
|
CVE-2026-65782 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
|
CVE-2026-65781 | 7.0 | CWE-416 | — | |
|
Windows
Double free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
|
CVE-2026-65780 | 7.0 | CWE-415 | — | |
|
Windows
Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
|
CVE-2026-65779 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
|
CVE-2026-65778 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
|
CVE-2026-65776 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
|
CVE-2026-65678 | 7.0 | CWE-416 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
netfilter: ebtables: zero chainstack array
sashiko reports:
looking at ebtable…
|
CVE-2026-64413 | 7.0 | CWE-908 | — | |
|
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Backup Engine allows an authorized attacker to…
|
CVE-2026-62908 | 7.0 | CWE-362 | — | |
|
Linux 커널
Time-of-check time-of-use (toctou) race condition in Linux Kernel allows an authorized attacker to elevate privileges locally.
|
CVE-2026-62840 | 7.0 | CWE-367 | — | |
|
Windows
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
|
CVE-2026-62788 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
|
CVE-2026-62780 | 7.0 | CWE-362 | — | |
|
Windows
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
|
CVE-2026-62774 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally.
|
CVE-2026-62773 | 7.0 | CWE-416 | — | |
|
Windows
Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally.
|
CVE-2026-62766 | 7.0 | CWE-415 | — | |
|
Windows
Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
|
CVE-2026-62753 | 7.0 | CWE-122 | — | |
|
Windows
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
|
CVE-2026-62749 | 7.0 | CWE-416 | — | |
|
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacke…
|
CVE-2026-62748 | 7.0 | CWE-362 | — | |
|
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacke…
|
CVE-2026-62734 | 7.0 | CWE-362 | — | |
|
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacke…
|
CVE-2026-62729 | 7.0 | CWE-362 | — | |
|
Windows
Time-of-check time-of-use (toctou) race condition in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locall…
|
CVE-2026-62728 | 7.0 | CWE-125 | — | |
|
Windows
Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
|
CVE-2026-62726 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
|
CVE-2026-62725 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
|
CVE-2026-62724 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
|
CVE-2026-62723 | 7.0 | CWE-416 | — | |
|
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bind Filter Driver allows an authorized attack…
|
CVE-2026-62705 | 7.0 | CWE-362 | — | |
|
Windows
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
|
CVE-2026-62694 | 7.0 | CWE-416 | — | |
|
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows MIDI Service Module allows an authorized attac…
|
CVE-2026-62693 | 7.0 | CWE-362 | — | |
|
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attack…
|
CVE-2026-62690 | 7.0 | CWE-362 | — | |
|
Windows
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
|
CVE-2026-61938 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
|
CVE-2026-61929 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
|
CVE-2026-61927 | 7.0 | CWE-362 | — | |
|
Windows
Double free in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally.
|
CVE-2026-61366 | 7.0 | CWE-415 | — | |
|
Windows
Use after free in Windows DHCP Client allows an authorized attacker to execute code locally.
|
CVE-2026-61361 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
|
CVE-2026-61348 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
|
CVE-2026-61346 | 7.0 | CWE-416 | — | |
|
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Event Logging Service allows an authorized att…
|
CVE-2026-59126 | 7.0 | CWE-362 | — | |
|
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacke…
|
CVE-2026-59122 | 7.0 | CWE-362 | — | |
|
Windows
Heap-based buffer overflow in Windows LUAFV allows an authorized attacker to elevate privileges locally.
|
CVE-2026-50472 | 7.0 | CWE-122 | — | |
|
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows a…
|
CVE-2026-50349 | 7.0 | CWE-362 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
net: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering teardo…
|
CVE-2026-23454 | 7.0 | CWE-416 | — | |
|
Ivanti
Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to privilege escalation…
|
CVE-2026-111357 | 7.0 | CWE-829 | — | |
|
Windows
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
|
CVE-2026-108468 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Update Delivery Optimization allows an authorized attacker to elevate privileges locally.
|
CVE-2026-108465 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
|
CVE-2026-108461 | 7.0 | CWE-416 | — | |
|
Windows
Time-of-check time-of-use (toctou) race condition in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges local…
|
CVE-2026-108396 | 7.0 | CWE-367 | — | |
|
Windows
Improper link resolution before file access ('link following') in Windows Backup Engine allows an authorized attacker to elevate privileges locally.
|
CVE-2026-108135 | 7.0 | CWE-59 | — | |
|
Windows
Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
|
CVE-2026-108134 | 7.0 | CWE-416 | — | |
|
Windows
Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally.
|
CVE-2026-108132 | 7.0 | CWE-415 | — | |
|
Windows
Use after free in Windows Security App allows an authorized attacker to elevate privileges locally.
|
CVE-2026-105725 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
|
CVE-2026-105722 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
|
CVE-2026-103565 | 7.0 | CWE-416 | — |