주요 제품 취약점 (3,478건)
Windows
infra
2105건
KEV 293 · 최근 2026-10-13
Linux 커널
infra
908건
KEV 31 · 최근 2026-10-28
Cisco IOS
infra
58건
KEV 44 · 최근 2026-07-13
Ivanti
infra
46건
KEV 36 · 최근 2026-10-13
Microsoft Exchange
infra
43건
KEV 20 · 최근 2026-05-15
Fortinet
infra
41건
KEV 22 · 최근 2026-10-16
Apache HTTP
infra
33건
KEV 11 · 최근 2026-08-24
Citrix NetScaler
infra
31건
KEV 16 · 최근 2026-10-04
Apache Tomcat
infra
30건
KEV 8 · 최근 2026-08-04
OpenSSH
infra
30건
KEV 3 · 최근 2025-10-02
PostgreSQL
finance
28건
KEV 2 · 최근 2026-09-02
Node.js
infra
24건
KEV 2 · 최근 2025-01-14
nginx
infra
16건
KEV 0
Palo Alto PAN-OS
infra
15건
KEV 14 · 최근 2026-10-14
VMware vCenter
infra
13건
KEV 12 · 최근 2026-08-18
Atlassian Confluence
infra
10건
KEV 10 · 최근 2026-10-15
MySQL/MariaDB
finance
10건
KEV 2 · 최근 2024-11-07
Redis
infra
9건
KEV 3 · 최근 2026-05-26
curl
infra
8건
KEV 1 · 최근 2023-05-12
OpenSSL
infra
8건
KEV 1 · 최근 2022-05-04
VMware ESXi
infra
7건
KEV 7 · 최근 2025-03-04
wolfSSL
finance
3건
KEV 0
Apache Spark
finance
1건
KEV 1 · 최근 2023-03-07
Spring Framework
finance
1건
KEV 1 · 최근 2022-04-04
| 기술 | CVE | 심각도 | 유형 | KEV | 등재일 |
|---|---|---|---|---|---|
|
Windows
Buffer over-read in Windows IKE Extension allows an authorized attacker to deny service over a network.
|
CVE-2026-83685 | 6.5 | CWE-126 | — | |
|
Windows
Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information over a network.
|
CVE-2026-83683 | 6.5 | CWE-36 | — | |
|
Windows
Out-of-bounds read in Windows Hyper-V allows an authorized attacker to disclose information locally.
|
CVE-2026-83671 | 6.5 | CWE-125 | — | |
|
Windows
Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network.
|
CVE-2026-83651 | 6.5 | CWE-125 | — | |
|
Windows
Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to deny service over a network.
|
CVE-2026-83649 | 6.5 | CWE-125 | — | |
|
Windows
Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally.
|
CVE-2026-83636 | 6.5 | CWE-476 | — | |
|
Windows
Out-of-bounds read in Windows IKE Extension allows an authorized attacker to disclose information over a network.
|
CVE-2026-83521 | 6.5 | CWE-125 | — | |
|
Windows
Integer underflow (wrap or wraparound) in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information over a net…
|
CVE-2026-78453 | 6.5 | CWE-191 | — | |
|
Windows
Out-of-bounds read in Windows OLE DB allows an unauthorized attacker to disclose information over a network.
|
CVE-2026-78441 | 6.5 | CWE-125 | — | |
|
OpenSSL
Improper Check for Certificate Revocation vulnerability in Apache Tomcat. Both the OpenSSL and OpenSSL-FFM TLS implementations ignore CRLs when certi…
|
CVE-2026-73581 | 6.5 | CWE-299 | — | |
|
Apache Tomcat
Improper Check for Certificate Revocation vulnerability in Apache Tomcat. Both the OpenSSL and OpenSSL-FFM TLS implementations ignore CRLs when certi…
|
CVE-2026-73581 | 6.5 | CWE-299 | — | |
|
Windows
Out-of-bounds read in Windows Spaceport.sys allows an unauthorized attacker to disclose information over a network.
|
CVE-2026-72942 | 6.5 | CWE-125 | — | |
|
Windows
Null pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to deny service over a network.
|
CVE-2026-72939 | 6.5 | CWE-476 | — | |
|
Windows
Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally.
|
CVE-2026-70248 | 6.5 | CWE-476 | — | |
|
Windows
Untrusted pointer dereference in Windows Kernel allows an authorized attacker to deny service over a network.
|
CVE-2026-70170 | 6.5 | CWE-822 | — | |
|
Windows
Out-of-bounds read in Windows DNS allows an authorized attacker to deny service over a network.
|
CVE-2026-70166 | 6.5 | CWE-125 | — | |
|
Windows
Improper authorization in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally.
|
CVE-2026-70148 | 6.5 | CWE-441 | — | |
|
Windows
Time-of-check time-of-use (toctou) race condition in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
|
CVE-2026-70122 | 6.5 | CWE-367 | — | |
|
Windows
Out-of-bounds read in Windows DNS allows an authorized attacker to execute code over a network.
|
CVE-2026-70119 | 6.5 | CWE-125 | — | |
|
Windows
Allocation of resources without limits or throttling in Windows Netlogon allows an authorized attacker to deny service over a network.
|
CVE-2026-70072 | 6.5 | CWE-770 | — | |
|
Windows
Windows hard link in Windows Compressed Folder allows an unauthorized attacker to disclose information over a network.
|
CVE-2026-70019 | 6.5 | CWE-65 | — | |
|
Windows
Improper limitation of a pathname to a restricted directory ('path traversal') in Windows Libarchive allows an unauthorized attacker to perform tampe…
|
CVE-2026-69973 | 6.5 | CWE-22 | — | |
|
Windows
Relative path traversal in Windows Libarchive allows an unauthorized attacker to perform tampering over a network.
|
CVE-2026-69968 | 6.5 | CWE-23 | — | |
|
Windows
Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network.
|
CVE-2026-69955 | 6.5 | CWE-125 | — | |
|
Windows
Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network.
|
CVE-2026-69940 | 6.5 | CWE-125 | — | |
|
Windows
Uncaught exception in Windows iSCSI Target Service allows an authorized attacker to deny service over a network.
|
CVE-2026-69839 | 6.5 | CWE-248 | — | |
|
Windows
Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over an adjacent network.
|
CVE-2026-69781 | 6.5 | CWE-401 | — | |
|
Windows
Missing release of memory after effective lifetime in Windows DHCP Server allows an authorized attacker to deny service over a network.
|
CVE-2026-69497 | 6.5 | CWE-401 | — | |
|
Microsoft Exchange
Authorization bypass through user-controlled key in Microsoft Exchange Server allows an authorized attacker to perform tampering over a network.
|
CVE-2026-69375 | 6.5 | CWE-639 | — | |
|
Windows
Allocation of resources without limits or throttling in Windows SMB Server allows an authorized attacker to deny service over a network.
|
CVE-2026-69374 | 6.5 | CWE-770 | — | |
|
Microsoft Exchange
Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network.
|
CVE-2026-69361 | 6.5 | CWE-918 | — | |
|
Windows
Storing passwords in a recoverable format in Windows DHCP Server allows an authorized attacker to disclose information over a network.
|
CVE-2026-69297 | 6.5 | CWE-257 | — | |
|
Windows
Insufficient granularity of access control in Windows Connected User Experiences and Telemetry allows an authorized attacker to disclose information …
|
CVE-2026-69267 | 6.5 | CWE-1220 | — | |
|
Windows
Out-of-bounds read in Windows iSCSI allows an unauthorized attacker to deny service over a network.
|
CVE-2026-68898 | 6.5 | CWE-125 | — | |
|
Microsoft Exchange
Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-65813 | 6.5 | CWE-918 | — | |
|
Windows
Buffer over-read in Windows SMB Client allows an unauthorized attacker to disclose information over a network.
|
CVE-2026-65794 | 6.5 | CWE-126 | — | |
|
Windows
Uncontrolled resource consumption in Windows DHCP Client allows an unauthorized attacker to deny service over an adjacent network.
|
CVE-2026-65785 | 6.5 | CWE-400 | — | |
|
Microsoft Exchange
Missing authorization in Microsoft Exchange Server allows an authorized attacker to bypass a security feature over a network.
|
CVE-2026-62915 | 6.5 | CWE-862 | — | |
|
Microsoft Exchange
Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to deny service over a network.
|
CVE-2026-62912 | 6.5 | CWE-502 | — | |
|
Windows
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
|
CVE-2026-62814 | 6.5 | CWE-125 | — | |
|
Windows
Improper limitation of a pathname to a restricted directory ('path traversal') in Windows PowerShell allows an unauthorized attacker to bypass a secu…
|
CVE-2026-62801 | 6.5 | CWE-22 | — | |
|
Windows
Out-of-bounds read in Windows SMB Client allows an unauthorized attacker to disclose information over a network.
|
CVE-2026-62782 | 6.5 | CWE-125 | — | |
|
Windows
Partial string comparison in Windows HTTP Protocol Stack allows an unauthorized attacker to perform tampering over an adjacent network.
|
CVE-2026-62750 | 6.5 | CWE-187 | — | |
|
Windows
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
|
CVE-2026-62745 | 6.5 | CWE-125 | — | |
|
Windows
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
|
CVE-2026-62742 | 6.5 | CWE-125 | — | |
|
Windows
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
|
CVE-2026-62720 | 6.5 | CWE-125 | — | |
|
Windows
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
|
CVE-2026-62718 | 6.5 | CWE-125 | — | |
|
Windows
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
|
CVE-2026-62716 | 6.5 | CWE-125 | — | |
|
Windows
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
|
CVE-2026-62715 | 6.5 | CWE-125 | — | |
|
Windows
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
|
CVE-2026-62714 | 6.5 | CWE-125 | — | |
|
nginx
Malcolm's front nginx reverse proxy defines a "Dashboards → Arkime shortcut" location using a case-insensitive regex matcher but a case-sensitive rew…
|
CVE-2026-107336 | 6.5 | CWE-290 | — | |
|
Node.js
msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, constructing msgpack5 with an empty or partial options object di…
|
CVE-2026-107301 | 6.5 | CWE-1321 | — | |
|
OpenSSH
In sshd and ssh in OpenSSH before 10.6, there is no check for whether the maximum packet length is exceeded during decompression of highly compressed…
|
CVE-2026-106585 | 6.5 | CWE-409 | — | |
|
Windows
Stack-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to deny service over a network.
|
CVE-2026-102199 | 6.5 | CWE-121 | — | |
|
nginx
Description
NGINX JavaScript (njs) has a vulnerability where the njs XML module exposes entity-backed XML attributes inconsistently with libxml2 cano…
|
CVE-2026-101019 | 6.5 | CWE-436 | — | |
|
Windows
Out-of-bounds read in Windows DHCP Server allows an authorized attacker to execute code locally.
|
CVE-2026-77891 | 6.4 | CWE-125 | — | |
|
Windows
Out-of-bounds read in Windows DHCP Server allows an authorized attacker to execute code locally.
|
CVE-2026-77887 | 6.4 | CWE-125 | — | |
|
Windows
Integer underflow (wrap or wraparound) in Windows File History Service allows an authorized attacker to elevate privileges locally.
|
CVE-2026-72947 | 6.4 | CWE-191 | — | |
|
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Security Center allows an authorized attacker …
|
CVE-2026-71347 | 6.4 | CWE-362 | — | |
|
Windows
Double free in Windows Failover Cluster allows an authorized attacker to elevate privileges locally.
|
CVE-2026-71338 | 6.4 | CWE-415 | — |