주요 제품 취약점 (3,480건)
Windows
infra
2105건
KEV 293 · 최근 2026-10-13
Linux 커널
infra
908건
KEV 31 · 최근 2026-10-28
Cisco IOS
infra
58건
KEV 44 · 최근 2026-07-13
Ivanti
infra
46건
KEV 36 · 최근 2026-10-13
Microsoft Exchange
infra
43건
KEV 20 · 최근 2026-05-15
Fortinet
infra
41건
KEV 22 · 최근 2026-10-16
Apache HTTP
infra
33건
KEV 11 · 최근 2026-08-24
Citrix NetScaler
infra
31건
KEV 16 · 최근 2026-10-04
Apache Tomcat
infra
30건
KEV 8 · 최근 2026-08-04
OpenSSH
infra
30건
KEV 3 · 최근 2025-10-02
PostgreSQL
finance
28건
KEV 2 · 최근 2026-09-02
Node.js
infra
24건
KEV 2 · 최근 2025-01-14
nginx
infra
16건
KEV 0
Palo Alto PAN-OS
infra
15건
KEV 14 · 최근 2026-10-14
VMware vCenter
infra
13건
KEV 12 · 최근 2026-08-18
Redis
infra
11건
KEV 3 · 최근 2026-05-26
Atlassian Confluence
infra
10건
KEV 10 · 최근 2026-10-15
MySQL/MariaDB
finance
10건
KEV 2 · 최근 2024-11-07
curl
infra
8건
KEV 1 · 최근 2023-05-12
OpenSSL
infra
8건
KEV 1 · 최근 2022-05-04
VMware ESXi
infra
7건
KEV 7 · 최근 2025-03-04
wolfSSL
finance
3건
KEV 0
Apache Spark
finance
1건
KEV 1 · 최근 2023-03-07
Spring Framework
finance
1건
KEV 1 · 최근 2022-04-04
| 기술 | CVE | 심각도 | 유형 | KEV | 등재일 |
|---|---|---|---|---|---|
|
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Security Center allows an authorized attacker …
|
CVE-2026-71347 | 6.4 | CWE-362 | — | |
|
Windows
Double free in Windows Failover Cluster allows an authorized attacker to elevate privileges locally.
|
CVE-2026-71338 | 6.4 | CWE-415 | — | |
|
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Instrumentation allows an authorize…
|
CVE-2026-70582 | 6.4 | CWE-362 | — | |
|
Windows
Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code locally.
|
CVE-2026-69878 | 6.4 | CWE-122 | — | |
|
Windows
Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack.
|
CVE-2026-62708 | 6.4 | CWE-416 | — | |
|
Windows
File and Print Sharing service in Windows 95, Windows 98, and Windows Me does not properly check the password for a file share, which allows remote a…
|
CVE-2000-0979 | 6.4 | — | — | |
|
Windows
Uncaught Exception (CWE-248) in Elastic Endpoint can lead to denial of service via a specially crafted file name. When Elastic Defend's Elastic Endpo…
|
CVE-2026-102413 | 6.2 | CWE-248 | — | |
|
Windows
Url redirection to untrusted site ('open redirect') in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical…
|
CVE-2026-83500 | 6.1 | CWE-601 | — | |
|
Fortinet
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79] vulnerability in Fortinet FortiOS 7.6.…
|
CVE-2026-23573 | 6.1 | CWE-79 | — | |
|
Windows
Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny service over a network.
|
CVE-2026-88099 | 5.9 | CWE-248 | — | |
|
Windows
Use after free in Windows DNS allows an unauthorized attacker to deny service over a network.
|
CVE-2026-78523 | 5.9 | CWE-416 | — | |
|
Windows
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network.
|
CVE-2026-70124 | 5.9 | CWE-125 | — | |
|
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an unauthorized attacker to deny se…
|
CVE-2026-70091 | 5.9 | CWE-362 | — | |
|
Windows
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network.
|
CVE-2026-69930 | 5.9 | CWE-125 | — | |
|
Windows
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network.
|
CVE-2026-69929 | 5.9 | CWE-125 | — | |
|
Windows
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network.
|
CVE-2026-69803 | 5.9 | CWE-125 | — | |
|
Microsoft Exchange
Use of a broken or risky cryptographic algorithm in Microsoft Exchange Server allows an unauthorized attacker to disclose information over a network.
|
CVE-2026-69382 | 5.9 | CWE-327 | — | |
|
Windows
Buffer over-read in Windows Network File System allows an unauthorized attacker to deny service over a network.
|
CVE-2026-68819 | 5.9 | CWE-126 | — | |
|
MySQL/MariaDB
MariaDB Connector/C is a C and C++ client library for connecting applications to MariaDB and MySQL databases. From 3.4.1 until 3.4.10, the MariaDB Co…
|
CVE-2026-107819 | 5.9 | CWE-297 | — | |
|
Node.js
msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, the streaming decoder treats the reserved MessagePack byte 0xc1 …
|
CVE-2026-107299 | 5.9 | CWE-228 | — | |
|
Node.js
msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, the streaming decoder reparses an incomplete array or map from t…
|
CVE-2026-107297 | 5.9 | CWE-407 | — | |
|
OpenSSH
A flaw was found in the OpenSSH package. For each ping packet the SSH server receives, a pong packet is allocated in a memory buffer and stored in a …
|
CVE-2025-26466 | 5.9 | CWE-770 | — | |
|
Windows
Out-of-bounds read in Windows Wi-Fi Driver allows an authorized attacker to disclose information over an adjacent network.
|
CVE-2026-85816 | 5.7 | CWE-125 | — | |
|
Windows
Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information ov…
|
CVE-2026-69723 | 5.7 | CWE-497 | — | |
|
Windows
Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network.
|
CVE-2026-69679 | 5.7 | CWE-125 | — | |
|
Windows
Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network.
|
CVE-2026-69637 | 5.7 | CWE-125 | — | |
|
Windows
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information over a network.
|
CVE-2026-69591 | 5.7 | CWE-125 | — | |
|
Windows
Out-of-bounds read in Windows SMB Client allows an authorized attacker to disclose information over a network.
|
CVE-2026-69572 | 5.7 | CWE-125 | — | |
|
Windows
Untrusted pointer dereference in Windows Print Spooler Components allows an authorized attacker to deny service over a network.
|
CVE-2026-69569 | 5.7 | CWE-822 | — | |
|
Windows
Generation of error message containing sensitive information in Windows Print Spooler Components allows an authorized attacker to disclose informatio…
|
CVE-2026-69552 | 5.7 | CWE-209 | — | |
|
Windows
Insertion of sensitive information into externally-accessible file or directory in Microsoft Windows Search Component allows an authorized attacker t…
|
CVE-2026-69507 | 5.7 | CWE-538 | — | |
|
Windows
Buffer over-read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network.
|
CVE-2026-69416 | 5.7 | CWE-126 | — | |
|
Windows
Missing release of memory after effective lifetime in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network.
|
CVE-2026-69405 | 5.7 | CWE-401 | — | |
|
Windows
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information over a network.
|
CVE-2026-69393 | 5.7 | CWE-125 | — | |
|
Windows
Out-of-bounds read in Windows Network File System allows an authorized attacker to deny service over a network.
|
CVE-2026-69372 | 5.7 | CWE-125 | — | |
|
Windows
Use of uninitialized resource in Windows Management Instrumentation allows an authorized attacker to disclose information over a network.
|
CVE-2026-69349 | 5.7 | CWE-908 | — | |
|
Windows
Out-of-bounds read in Windows Program Compatibility Assistant Service allows an authorized attacker to disclose information over a network.
|
CVE-2026-68874 | 5.7 | CWE-125 | — | |
|
Windows
Exposure of sensitive system information to an unauthorized control sphere in Windows Secure Kernel Mode allows an authorized attacker to disclose in…
|
CVE-2026-96865 | 5.6 | CWE-497 | — | |
|
Windows
Inadequate encryption strength in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to perform spoofing locally.
|
CVE-2026-83885 | 5.6 | CWE-326 | — | |
|
Fortinet
A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6 may allow an unauthenticated attacker who…
|
CVE-2026-71407 | 5.6 | CWE-121 | — | |
|
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Virtualization-Based Security (VBS) Enclave al…
|
CVE-2026-70097 | 5.6 | CWE-362 | — | |
|
Windows
Null pointer dereference in Windows VMSwitch allows an authorized attacker to deny service locally.
|
CVE-2026-69978 | 5.6 | CWE-476 | — | |
|
Windows
Exposure of sensitive system information to an unauthorized control sphere in Windows Win32K allows an authorized attacker to disclose information lo…
|
CVE-2026-69832 | 5.6 | CWE-497 | — | |
|
Windows
Improper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized att…
|
CVE-2026-97790 | 5.5 | CWE-59 | — | |
|
Windows
Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose …
|
CVE-2026-96948 | 5.5 | CWE-497 | — | |
|
Windows
Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose informat…
|
CVE-2026-96944 | 5.5 | CWE-538 | — | |
|
Windows
Exposure of sensitive system information to an unauthorized control sphere in Windows NTFS allows an authorized attacker to disclose information loca…
|
CVE-2026-96935 | 5.5 | CWE-497 | — | |
|
Windows
Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.
|
CVE-2026-96930 | 5.5 | CWE-125 | — | |
|
Windows
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
|
CVE-2026-96927 | 5.5 | CWE-125 | — | |
|
Windows
Integer underflow (wrap or wraparound) in Windows NTFS allows an authorized attacker to disclose information locally.
|
CVE-2026-96925 | 5.5 | CWE-191 | — | |
|
Windows
Access of resource using incompatible type ('type confusion') in Windows Message Queuing Queue Manager allows an authorized attacker to disclose info…
|
CVE-2026-96921 | 5.5 | CWE-843 | — | |
|
Windows
Untrusted pointer dereference in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.
|
CVE-2026-96910 | 5.5 | CWE-822 | — | |
|
Windows
Out-of-bounds read in Windows USB Print Driver allows an authorized attacker to disclose information locally.
|
CVE-2026-96860 | 5.5 | CWE-125 | — | |
|
Windows
Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally.
|
CVE-2026-96859 | 5.5 | CWE-125 | — | |
|
Windows
Missing authentication for critical function in Windows Security Account Manager allows an authorized attacker to perform tampering locally.
|
CVE-2026-96858 | 5.5 | CWE-306 | — | |
|
Windows
Files or directories accessible to external parties in Windows Projected File System allows an authorized attacker to disclose information locally.
|
CVE-2026-96857 | 5.5 | CWE-552 | — | |
|
Windows
Improper access control in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.
|
CVE-2026-96855 | 5.5 | CWE-862 | — | |
|
Windows
Access of resource using incompatible type ('type confusion') in Windows Device Association Service allows an authorized attacker to disclose informa…
|
CVE-2026-96854 | 5.5 | CWE-843 | — | |
|
Windows
Buffer over-read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.
|
CVE-2026-96851 | 5.5 | CWE-126 | — | |
|
Windows
Use of uninitialized resource in Windows Modern Device Management (MDM) allows an authorized attacker to disclose information locally.
|
CVE-2026-96850 | 5.5 | CWE-170 | — |