주요 제품 취약점 (3,435건)
Windows
infra
2105건
KEV 293 · 최근 2026-10-13
Linux 커널
infra
908건
KEV 31 · 최근 2026-10-28
Cisco IOS
infra
58건
KEV 44 · 최근 2026-07-13
Ivanti
infra
46건
KEV 36 · 최근 2026-10-13
Microsoft Exchange
infra
43건
KEV 20 · 최근 2026-05-15
Fortinet
infra
41건
KEV 22 · 최근 2026-10-16
Apache HTTP
infra
33건
KEV 11 · 최근 2026-08-24
Citrix NetScaler
infra
31건
KEV 16 · 최근 2026-10-04
Apache Tomcat
infra
30건
KEV 8 · 최근 2026-08-04
OpenSSH
infra
30건
KEV 3 · 최근 2025-10-02
Node.js
infra
24건
KEV 2 · 최근 2025-01-14
nginx
infra
16건
KEV 0
Palo Alto PAN-OS
infra
15건
KEV 14 · 최근 2026-10-14
VMware vCenter
infra
13건
KEV 12 · 최근 2026-08-18
Atlassian Confluence
infra
10건
KEV 10 · 최근 2026-10-15
Redis
infra
9건
KEV 3 · 최근 2026-05-26
curl
infra
8건
KEV 1 · 최근 2023-05-12
OpenSSL
infra
8건
KEV 1 · 최근 2022-05-04
VMware ESXi
infra
7건
KEV 7 · 최근 2025-03-04
| 기술 | CVE | 심각도 | 유형 | KEV | 등재일 |
|---|---|---|---|---|---|
|
Windows
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
|
CVE-2026-103554 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
|
CVE-2026-102211 | 7.0 | CWE-362 | — | |
|
Windows
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
|
CVE-2026-102208 | 7.0 | CWE-416 | — | |
|
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevat…
|
CVE-2026-102207 | 7.0 | CWE-362 | — | |
|
Windows
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
|
CVE-2026-102197 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
|
CVE-2026-102195 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
|
CVE-2026-102194 | 7.0 | CWE-416 | — | |
|
Windows
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
|
CVE-2026-102193 | 7.0 | CWE-416 | — | |
|
Windows
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
|
CVE-2026-102191 | 7.0 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
|
CVE-2026-102189 | 7.0 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
|
CVE-2026-100225 | 7.0 | CWE-122 | — | |
|
Windows
Stack-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
|
CVE-2026-100216 | 7.0 | CWE-121 | — | |
|
Windows
Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privileges locally.
|
CVE-2026-100203 | 7.0 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows Client License Service allows an authorized attacker to elevate privileges locally.
|
CVE-2026-100201 | 7.0 | CWE-122 | — | |
|
Windows
Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally.
|
CVE-2026-100200 | 7.0 | CWE-416 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
padata: Fix pd UAF once and for all
There is a race condition/UAF in padata_reo…
|
CVE-2025-38584 | 7.0 | CWE-416 | — | |
|
OpenSSH
sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalation because supplemental groups…
|
CVE-2021-41617 | 7.0 | CWE-269 | — | |
|
Windows
Heap-based buffer overflow in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack.
|
CVE-2026-96863 | 6.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an unauthorized attacker to elevate privileges with a physical attack.
|
CVE-2026-83895 | 6.8 | CWE-122 | — | |
|
Windows
Integer overflow or wraparound in Windows Kernel Mode Driver allows an unauthorized attacker to elevate privileges with a physical attack.
|
CVE-2026-83573 | 6.8 | CWE-190 | — | |
|
Windows
Untrusted pointer dereference in Microsoft Windows SCSI Class System File allows an unauthorized attacker to elevate privileges with a physical attac…
|
CVE-2026-78451 | 6.8 | CWE-822 | — | |
|
Windows
No cwe for this issue in Windows Boot Manager allows an unauthorized attacker to elevate privileges with a physical attack.
|
CVE-2026-77892 | 6.8 | CWE-693 | — | |
|
Windows
Out-of-bounds read in Windows USB Hub Driver allows an unauthorized attacker to elevate privileges with a physical attack.
|
CVE-2026-72999 | 6.8 | CWE-125 | — | |
|
Windows
Heap-based buffer overflow in Windows Volume Shadow Copy allows an unauthorized attacker to elevate privileges with a physical attack.
|
CVE-2026-72985 | 6.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack.
|
CVE-2026-71350 | 6.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack.
|
CVE-2026-71349 | 6.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack.
|
CVE-2026-71348 | 6.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack.
|
CVE-2026-71329 | 6.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack.
|
CVE-2026-69958 | 6.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack.
|
CVE-2026-69947 | 6.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack.
|
CVE-2026-69566 | 6.8 | CWE-122 | — | |
|
Windows
Out-of-bounds read in Windows USB Mass Storage Class Driver allows an unauthorized attacker to elevate privileges with a physical attack.
|
CVE-2026-69490 | 6.8 | CWE-125 | — | |
|
Windows
Missing authentication for critical function in Windows DHCP Server allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-69415 | 6.8 | CWE-306 | — | |
|
Windows
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack.
|
CVE-2026-68833 | 6.8 | CWE-122 | — | |
|
Windows
Null pointer dereference in Windows Graphics Kernel allows an unauthorized attacker to deny service over a network.
|
CVE-2026-62702 | 6.8 | CWE-476 | — | |
|
Windows
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an unauthorized attacker to execute code with a physical…
|
CVE-2026-62699 | 6.8 | CWE-122 | — | |
|
Windows
Use of a broken or risky cryptographic algorithm in Windows Remote Desktop allows an unauthorized attacker to bypass a security feature over a networ…
|
CVE-2026-59116 | 6.8 | CWE-327 | — | |
|
Node.js
Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, he fix for no_proxy hostname normalization bypass is in…
|
CVE-2026-42038 | 6.8 | CWE-918 | — | |
|
Windows
Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack.
|
CVE-2026-103578 | 6.8 | CWE-822 | — | |
|
Windows
Heap-based buffer overflow in Windows Portable Device MTP Driver allows an unauthorized attacker to elevate privileges with a physical attack.
|
CVE-2026-102206 | 6.8 | CWE-122 | — | |
|
Windows
Untrusted pointer dereference in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack.
|
CVE-2026-102188 | 6.8 | CWE-822 | — | |
|
Windows
A vulnerability in Trend Micro Endpoint Encryption Full Disk Encryption version 6.0.0.3204 and below could allow an attacker with physical access to …
|
CVE-2023-28005 | 6.8 | — | — | |
|
Windows
Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to elevate privileges locally.
|
CVE-2026-96938 | 6.7 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.
|
CVE-2026-88143 | 6.7 | CWE-122 | — | |
|
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Performance Monitor allows an authorized attac…
|
CVE-2026-85333 | 6.7 | CWE-362 | — | |
|
Windows
Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.
|
CVE-2026-83706 | 6.7 | CWE-416 | — | |
|
Windows
Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally.
|
CVE-2026-72948 | 6.7 | CWE-23 | — | |
|
Windows
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
|
CVE-2026-72935 | 6.7 | CWE-125 | — | |
|
Windows
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
|
CVE-2026-71339 | 6.7 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally.
|
CVE-2026-70330 | 6.7 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally.
|
CVE-2026-70304 | 6.7 | CWE-122 | — | |
|
Windows
Untrusted pointer dereference in Windows NTFS allows an authorized attacker to execute code locally.
|
CVE-2026-69902 | 6.7 | CWE-822 | — | |
|
Windows
Heap-based buffer overflow in Windows BitLocker allows an authorized attacker to execute code locally.
|
CVE-2026-69449 | 6.7 | CWE-122 | — | |
|
Windows
Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69373 | 6.7 | CWE-125 | — | |
|
Windows
Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69350 | 6.7 | CWE-122 | — | |
|
Windows
Integer overflow or wraparound in Windows DNS allows an authorized attacker to elevate privileges locally.
|
CVE-2026-65799 | 6.7 | CWE-122 | — | |
|
Windows
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
|
CVE-2026-65798 | 6.7 | CWE-197 | — | |
|
Windows
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
|
CVE-2026-65797 | 6.7 | CWE-122 | — | |
|
Windows
Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally.
|
CVE-2026-65795 | 6.7 | CWE-197 | — | |
|
Windows
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
|
CVE-2026-62883 | 6.7 | CWE-122 | — |