주요 제품 취약점 (3,481건)
Windows
infra
2105건
KEV 293 · 최근 2026-10-13
Linux 커널
infra
908건
KEV 31 · 최근 2026-10-28
Cisco IOS
infra
58건
KEV 44 · 최근 2026-07-13
Ivanti
infra
47건
KEV 38 · 최근 2026-10-30
Microsoft Exchange
infra
43건
KEV 20 · 최근 2026-05-15
Fortinet
infra
41건
KEV 22 · 최근 2026-10-16
Apache HTTP
infra
33건
KEV 11 · 최근 2026-08-24
Citrix NetScaler
infra
31건
KEV 16 · 최근 2026-10-04
Apache Tomcat
infra
30건
KEV 8 · 최근 2026-08-04
OpenSSH
infra
30건
KEV 3 · 최근 2025-10-02
PostgreSQL
finance
28건
KEV 2 · 최근 2026-09-02
Node.js
infra
24건
KEV 2 · 최근 2025-01-14
nginx
infra
16건
KEV 0
Palo Alto PAN-OS
infra
15건
KEV 14 · 최근 2026-10-14
VMware vCenter
infra
13건
KEV 12 · 최근 2026-08-18
Redis
infra
11건
KEV 3 · 최근 2026-05-26
Atlassian Confluence
infra
10건
KEV 10 · 최근 2026-10-15
MySQL/MariaDB
finance
10건
KEV 2 · 최근 2024-11-07
curl
infra
8건
KEV 1 · 최근 2023-05-12
OpenSSL
infra
8건
KEV 1 · 최근 2022-05-04
VMware ESXi
infra
7건
KEV 7 · 최근 2025-03-04
wolfSSL
finance
3건
KEV 0
Apache Spark
finance
1건
KEV 1 · 최근 2023-03-07
Spring Framework
finance
1건
KEV 1 · 최근 2022-04-04
| 기술 | CVE | 심각도 | 유형 | KEV | 등재일 |
|---|---|---|---|---|---|
|
Windows
Use of uninitialized resource in Windows Modern Device Management (MDM) allows an authorized attacker to disclose information locally.
|
CVE-2026-96850 | 5.5 | CWE-170 | — | |
|
Windows
Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.
|
CVE-2026-96849 | 5.5 | CWE-908 | — | |
|
Windows
Buffer over-read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
|
CVE-2026-96848 | 5.5 | CWE-126 | — | |
|
Windows
Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to perform tampering locally.
|
CVE-2026-96316 | 5.5 | CWE-862 | — | |
|
Windows
Missing authorization in Windows Overlay Filter allows an authorized attacker to perform tampering locally.
|
CVE-2026-96315 | 5.5 | CWE-862 | — | |
|
Windows
Out-of-bounds read in Windows Audio Service allows an authorized attacker to disclose information locally.
|
CVE-2026-96314 | 5.5 | CWE-125 | — | |
|
Windows
Improper authorization in Windows Network List Service allows an authorized attacker to perform tampering locally.
|
CVE-2026-96311 | 5.5 | CWE-862 | — | |
|
Windows
Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.
|
CVE-2026-96247 | 5.5 | CWE-908 | — | |
|
Windows
Improper access control in Windows Update Stack allows an authorized attacker to perform tampering locally.
|
CVE-2026-96218 | 5.5 | CWE-15 | — | |
|
Windows
Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to disclose informatio…
|
CVE-2026-96183 | 5.5 | CWE-306 | — | |
|
Windows
Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally.
|
CVE-2026-95904 | 5.5 | CWE-126 | — | |
|
Windows
Improper authorization in Windows Encrypting File System (EFS) allows an authorized attacker to perform tampering locally.
|
CVE-2026-88162 | 5.5 | CWE-863 | — | |
|
Windows
Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally.
|
CVE-2026-88140 | 5.5 | CWE-125 | — | |
|
Windows
Improper access control in Windows Host Guardian Service allows an authorized attacker to perform tampering locally.
|
CVE-2026-87709 | 5.5 | CWE-250 | — | |
|
Windows
Out-of-bounds read in Windows Remote Access Service Infrastructure allows an authorized attacker to disclose information locally.
|
CVE-2026-87698 | 5.5 | CWE-125 | — | |
|
Windows
Improper access control in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally.
|
CVE-2026-85938 | 5.5 | CWE-862 | — | |
|
Windows
Buffer over-read in Windows USB Driver allows an authorized attacker to disclose information locally.
|
CVE-2026-85935 | 5.5 | CWE-126 | — | |
|
Windows
Buffer over-read in Windows StateRepository API allows an authorized attacker to disclose information locally.
|
CVE-2026-85910 | 5.5 | CWE-126 | — | |
|
Windows
Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.
|
CVE-2026-85909 | 5.5 | CWE-822 | — | |
|
Windows
Improper authentication in Windows DHCP Server allows an authorized attacker to bypass a security feature locally.
|
CVE-2026-85865 | 5.5 | CWE-288 | — | |
|
Windows
Insertion of sensitive information into log file in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.
|
CVE-2026-85857 | 5.5 | CWE-532 | — | |
|
Windows
Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.
|
CVE-2026-85852 | 5.5 | CWE-125 | — | |
|
Windows
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to disclose information locally.
|
CVE-2026-85831 | 5.5 | CWE-122 | — | |
|
Windows
Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally.
|
CVE-2026-85830 | 5.5 | CWE-125 | — | |
|
Windows
Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally.
|
CVE-2026-85815 | 5.5 | CWE-125 | — | |
|
Windows
Files or directories accessible to external parties in Windows Bind Filter Driver allows an authorized attacker to disclose information locally.
|
CVE-2026-85812 | 5.5 | CWE-552 | — | |
|
Windows
Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to disclose information locally.
|
CVE-2026-85794 | 5.5 | CWE-125 | — | |
|
Windows
Exposure of sensitive system information to an unauthorized control sphere in Windows Sysmain Service allows an authorized attacker to disclose infor…
|
CVE-2026-85793 | 5.5 | CWE-497 | — | |
|
Windows
Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally.
|
CVE-2026-85374 | 5.5 | CWE-125 | — | |
|
Windows
Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally.
|
CVE-2026-85336 | 5.5 | CWE-125 | — | |
|
Windows
Use of uninitialized resource in Windows Print Spooler Components allows an authorized attacker to disclose information locally.
|
CVE-2026-85320 | 5.5 | CWE-908 | — | |
|
Windows
Incorrect authorization in Windows SMB Client allows an authorized attacker to bypass a security feature locally.
|
CVE-2026-84011 | 5.5 | CWE-863 | — | |
|
Windows
Missing authentication for critical function in Windows Cloud Files Mini Filter Driver allows an authorized attacker to perform tampering locally.
|
CVE-2026-83991 | 5.5 | CWE-306 | — | |
|
Windows
Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to disclose infor…
|
CVE-2026-83933 | 5.5 | CWE-59 | — | |
|
Windows
Exposure of sensitive system information to an unauthorized control sphere in Windows Hello allows an authorized attacker to disclose information loc…
|
CVE-2026-83907 | 5.5 | CWE-497 | — | |
|
Windows
Exposure of sensitive system information to an unauthorized control sphere in Windows Clipboard User Service allows an authorized attacker to disclos…
|
CVE-2026-83893 | 5.5 | CWE-497 | — | |
|
Windows
Out-of-bounds read in Windows Aggregated Data Platform Service allows an authorized attacker to disclose information locally.
|
CVE-2026-83870 | 5.5 | CWE-125 | — | |
|
Windows
Improper access control in Windows NTFS allows an authorized attacker to disclose information locally.
|
CVE-2026-83864 | 5.5 | CWE-290 | — | |
|
Windows
Improper access control in Windows Notification allows an authorized attacker to disclose information locally.
|
CVE-2026-83854 | 5.5 | CWE-306 | — | |
|
Windows
Out-of-bounds read in Windows Hello allows an authorized attacker to disclose information locally.
|
CVE-2026-83849 | 5.5 | CWE-125 | — | |
|
Windows
Buffer over-read in Windows Common Log File System Driver allows an authorized attacker to disclose information locally.
|
CVE-2026-83835 | 5.5 | CWE-126 | — | |
|
Windows
Improper verification of cryptographic signature in Windows Update Stack allows an authorized attacker to perform spoofing locally.
|
CVE-2026-83798 | 5.5 | CWE-20 | — | |
|
Windows
Out-of-bounds read in Windows Portable Device MTP Driver allows an authorized attacker to disclose information locally.
|
CVE-2026-83794 | 5.5 | CWE-125 | — | |
|
Windows
Insufficient verification of data authenticity in Windows DHCP Server allows an authorized attacker to bypass a security feature locally.
|
CVE-2026-83787 | 5.5 | CWE-288 | — | |
|
Windows
Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose i…
|
CVE-2026-83773 | 5.5 | CWE-497 | — | |
|
Windows
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.
|
CVE-2026-83765 | 5.5 | CWE-125 | — | |
|
Windows
Incorrect authorization in Windows Clipboard User Service allows an authorized attacker to disclose information locally.
|
CVE-2026-83764 | 5.5 | CWE-863 | — | |
|
Windows
Use of uninitialized resource in Windows Win32K allows an authorized attacker to disclose information locally.
|
CVE-2026-83755 | 5.5 | CWE-908 | — | |
|
Windows
Out-of-bounds read in Windows Error Reporting allows an authorized attacker to disclose information locally.
|
CVE-2026-83747 | 5.5 | CWE-125 | — | |
|
Windows
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
|
CVE-2026-83737 | 5.5 | CWE-125 | — | |
|
Windows
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
|
CVE-2026-83736 | 5.5 | CWE-122 | — | |
|
Windows
Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose information locally.
|
CVE-2026-83733 | 5.5 | CWE-125 | — | |
|
Windows
Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally.
|
CVE-2026-83723 | 5.5 | CWE-908 | — | |
|
Windows
Use of uninitialized resource in Windows HTTP.sys allows an authorized attacker to disclose information locally.
|
CVE-2026-83714 | 5.5 | CWE-908 | — | |
|
Windows
Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.
|
CVE-2026-83713 | 5.5 | CWE-497 | — | |
|
Windows
Exposure of sensitive system information to an unauthorized control sphere in Windows HTTP.sys allows an authorized attacker to disclose information …
|
CVE-2026-83705 | 5.5 | CWE-497 | — | |
|
Windows
Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally.
|
CVE-2026-83695 | 5.5 | CWE-908 | — | |
|
Windows
Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.
|
CVE-2026-83686 | 5.5 | CWE-125 | — | |
|
Windows
Out-of-bounds read in Windows WLAN Service allows an authorized attacker to disclose information locally.
|
CVE-2026-83668 | 5.5 | CWE-125 | — | |
|
Windows
Access of resource using incompatible type ('type confusion') in Windows Portable Device File System Driver allows an authorized attacker to disclose…
|
CVE-2026-83664 | 5.5 | CWE-843 | — |