주요 제품 취약점 (3,481건)
Windows
infra
2105건
KEV 293 · 최근 2026-10-13
Linux 커널
infra
908건
KEV 31 · 최근 2026-10-28
Cisco IOS
infra
58건
KEV 44 · 최근 2026-07-13
Ivanti
infra
47건
KEV 38 · 최근 2026-10-30
Microsoft Exchange
infra
43건
KEV 20 · 최근 2026-05-15
Fortinet
infra
41건
KEV 22 · 최근 2026-10-16
Apache HTTP
infra
33건
KEV 11 · 최근 2026-08-24
Citrix NetScaler
infra
31건
KEV 16 · 최근 2026-10-04
Apache Tomcat
infra
30건
KEV 8 · 최근 2026-08-04
OpenSSH
infra
30건
KEV 3 · 최근 2025-10-02
PostgreSQL
finance
28건
KEV 2 · 최근 2026-09-02
Node.js
infra
24건
KEV 2 · 최근 2025-01-14
nginx
infra
16건
KEV 0
Palo Alto PAN-OS
infra
15건
KEV 14 · 최근 2026-10-14
VMware vCenter
infra
13건
KEV 12 · 최근 2026-08-18
Redis
infra
11건
KEV 3 · 최근 2026-05-26
Atlassian Confluence
infra
10건
KEV 10 · 최근 2026-10-15
MySQL/MariaDB
finance
10건
KEV 2 · 최근 2024-11-07
curl
infra
8건
KEV 1 · 최근 2023-05-12
OpenSSL
infra
8건
KEV 1 · 최근 2022-05-04
VMware ESXi
infra
7건
KEV 7 · 최근 2025-03-04
wolfSSL
finance
3건
KEV 0
Apache Spark
finance
1건
KEV 1 · 최근 2023-03-07
Spring Framework
finance
1건
KEV 1 · 최근 2022-04-04
| 기술 | CVE | 심각도 | 유형 | KEV | 등재일 |
|---|---|---|---|---|---|
|
Windows
Improper access control in Windows Error Reporting allows an authorized attacker to disclose information locally.
|
CVE-2026-83658 | 5.5 | CWE-862 | — | |
|
Windows
Weak authentication in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.
|
CVE-2026-83657 | 5.5 | CWE-1390 | — | |
|
Windows
Null pointer dereference in Windows Audio Service allows an authorized attacker to disclose information locally.
|
CVE-2026-83571 | 5.5 | CWE-476 | — | |
|
Windows
Buffer over-read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally.
|
CVE-2026-83565 | 5.5 | CWE-126 | — | |
|
Windows
Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to disclose infor…
|
CVE-2026-83507 | 5.5 | CWE-59 | — | |
|
Windows
Out-of-bounds read in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to disclose information locally.
|
CVE-2026-83501 | 5.5 | CWE-125 | — | |
|
Windows
Use of hard-coded credentials in Windows Update Orchestrator Service allows an authorized attacker to bypass a security feature locally.
|
CVE-2026-81964 | 5.5 | CWE-798 | — | |
|
Windows
Out-of-bounds read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally.
|
CVE-2026-78454 | 5.5 | CWE-125 | — | |
|
Windows
Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally.
|
CVE-2026-77491 | 5.5 | CWE-125 | — | |
|
Windows
A vulnerability in the interprocess communication (IPC) channel of the Secure Firewall Posture module in Cisco Secure Client could allow an authentic…
|
CVE-2026-76462 | 5.5 | CWE-20 | — | |
|
Windows
Exposure of private personal information to an unauthorized actor in Windows Biometric Service allows an authorized attacker to disclose information …
|
CVE-2026-73008 | 5.5 | CWE-359 | — | |
|
Windows
Missing authentication for critical function in Windows Autopilot allows an authorized attacker to perform tampering locally.
|
CVE-2026-73004 | 5.5 | CWE-306 | — | |
|
Windows
Improper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized att…
|
CVE-2026-72971 | 5.5 | CWE-59 | — | |
|
Windows
Missing authorization in Windows Remote Access Connection Manager allows an authorized attacker to perform tampering locally.
|
CVE-2026-72966 | 5.5 | CWE-862 | — | |
|
Windows
Missing authentication for critical function in Windows Internet Connection Sharing (ICS) allows an authorized attacker to perform tampering locally.
|
CVE-2026-72964 | 5.5 | CWE-306 | — | |
|
Windows
Use of uninitialized resource in Windows Task Scheduler allows an authorized attacker to disclose information locally.
|
CVE-2026-72945 | 5.5 | CWE-908 | — | |
|
Windows
Out-of-bounds read in Windows Partition Management Driver allows an authorized attacker to disclose information locally.
|
CVE-2026-71341 | 5.5 | CWE-125 | — | |
|
Windows
Improper link resolution before file access ('link following') in Windows Management Services allows an authorized attacker to deny service locally.
|
CVE-2026-70348 | 5.5 | CWE-59 | — | |
|
Windows
Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
|
CVE-2026-70295 | 5.5 | CWE-125 | — | |
|
Windows
Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
|
CVE-2026-70294 | 5.5 | CWE-20 | — | |
|
Windows
Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
|
CVE-2026-70293 | 5.5 | CWE-908 | — | |
|
Windows
Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
|
CVE-2026-70292 | 5.5 | CWE-125 | — | |
|
Windows
Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
|
CVE-2026-70290 | 5.5 | CWE-908 | — | |
|
Windows
Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
|
CVE-2026-70288 | 5.5 | CWE-367 | — | |
|
Windows
Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
|
CVE-2026-70284 | 5.5 | CWE-908 | — | |
|
Windows
Out-of-bounds read in Windows Fast FAT Driver allows an unauthorized attacker to disclose information locally.
|
CVE-2026-70277 | 5.5 | CWE-125 | — | |
|
Windows
Untrusted pointer dereference in Windows Container Isolation FS Filter Driver allows an authorized attacker to elevate privileges locally.
|
CVE-2026-70270 | 5.5 | CWE-822 | — | |
|
Windows
Improper authentication in Windows Event Tracing allows an authorized attacker to perform spoofing locally.
|
CVE-2026-70235 | 5.5 | CWE-862 | — | |
|
Windows
Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information lo…
|
CVE-2026-70232 | 5.5 | CWE-497 | — | |
|
Windows
Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally.
|
CVE-2026-70227 | 5.5 | CWE-125 | — | |
|
Windows
Insufficient granularity of access control in Windows Mobile Device Management allows an authorized attacker to perform tampering locally.
|
CVE-2026-70216 | 5.5 | CWE-1220 | — | |
|
Windows
Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
|
CVE-2026-70211 | 5.5 | CWE-125 | — | |
|
Windows
Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to disclose information locally.
|
CVE-2026-70208 | 5.5 | CWE-125 | — | |
|
Windows
Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service locally.
|
CVE-2026-70201 | 5.5 | CWE-125 | — | |
|
Windows
Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information lo…
|
CVE-2026-70199 | 5.5 | CWE-497 | — | |
|
Windows
Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.
|
CVE-2026-70173 | 5.5 | CWE-125 | — | |
|
Windows
Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.
|
CVE-2026-70145 | 5.5 | CWE-125 | — | |
|
Windows
Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.
|
CVE-2026-70141 | 5.5 | CWE-125 | — | |
|
Windows
Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to disclose information locally.
|
CVE-2026-70137 | 5.5 | CWE-306 | — | |
|
Windows
Out-of-bounds read in Windows Remote POS Driver allows an authorized attacker to disclose information locally.
|
CVE-2026-70135 | 5.5 | CWE-125 | — | |
|
Windows
Use of uninitialized resource in Windows Netlogon allows an authorized attacker to disclose information locally.
|
CVE-2026-70090 | 5.5 | CWE-908 | — | |
|
Windows
Improper access control in Windows Projected File System allows an authorized attacker to disclose information locally.
|
CVE-2026-70084 | 5.5 | CWE-22 | — | |
|
Windows
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information locally.
|
CVE-2026-70074 | 5.5 | CWE-125 | — | |
|
Windows
Incorrect authorization in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to bypass a security feature locally.
|
CVE-2026-70057 | 5.5 | CWE-863 | — | |
|
Windows
Exposure of sensitive system information to an unauthorized control sphere in Windows Cryptographic Services allows an authorized attacker to disclos…
|
CVE-2026-70055 | 5.5 | CWE-497 | — | |
|
Windows
Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to disclose information locally.
|
CVE-2026-70044 | 5.5 | CWE-125 | — | |
|
Windows
Buffer over-read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally.
|
CVE-2026-70041 | 5.5 | CWE-126 | — | |
|
Windows
Access of resource using incompatible type ('type confusion') in Windows Secure Kernel Mode allows an authorized attacker to disclose information loc…
|
CVE-2026-70017 | 5.5 | CWE-843 | — | |
|
Windows
Out-of-bounds read in Windows IP Over USB Service allows an authorized attacker to disclose information locally.
|
CVE-2026-70011 | 5.5 | CWE-125 | — | |
|
Windows
Out-of-bounds read in Windows Update allows an authorized attacker to disclose information locally.
|
CVE-2026-69999 | 5.5 | CWE-125 | — | |
|
Windows
Improper protection of alternate path in Windows AppX Deployment Service allows an authorized attacker to bypass a security feature locally.
|
CVE-2026-69979 | 5.5 | CWE-424 | — | |
|
Windows
Incorrect authorization in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.
|
CVE-2026-69971 | 5.5 | CWE-863 | — | |
|
Windows
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to disclose information locally.
|
CVE-2026-69967 | 5.5 | CWE-125 | — | |
|
Windows
Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally.
|
CVE-2026-69954 | 5.5 | CWE-126 | — | |
|
Windows
Out-of-bounds read in Windows Cryptographic Services allows an authorized attacker to disclose information locally.
|
CVE-2026-69919 | 5.5 | CWE-125 | — | |
|
Windows
Out-of-bounds read in Windows AppX Deployment Service allows an authorized attacker to disclose information locally.
|
CVE-2026-69914 | 5.5 | CWE-125 | — | |
|
Windows
Missing authorization in Windows AppX Deployment Service allows an authorized attacker to perform tampering locally.
|
CVE-2026-69905 | 5.5 | CWE-862 | — | |
|
Windows
Out-of-bounds read in Windows Wireless Wide Area Network Service allows an authorized attacker to disclose information locally.
|
CVE-2026-69862 | 5.5 | CWE-125 | — | |
|
Windows
Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally.
|
CVE-2026-69808 | 5.5 | CWE-125 | — | |
|
Windows
Buffer over-read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally.
|
CVE-2026-69794 | 5.5 | CWE-126 | — |