주요 제품 취약점 (3,481건)
Windows
infra
2105건
KEV 293 · 최근 2026-10-13
Linux 커널
infra
908건
KEV 31 · 최근 2026-10-28
Cisco IOS
infra
58건
KEV 44 · 최근 2026-07-13
Ivanti
infra
47건
KEV 38 · 최근 2026-10-30
Microsoft Exchange
infra
43건
KEV 20 · 최근 2026-05-15
Fortinet
infra
41건
KEV 22 · 최근 2026-10-16
Apache HTTP
infra
33건
KEV 11 · 최근 2026-08-24
Citrix NetScaler
infra
31건
KEV 16 · 최근 2026-10-04
Apache Tomcat
infra
30건
KEV 8 · 최근 2026-08-04
OpenSSH
infra
30건
KEV 3 · 최근 2025-10-02
PostgreSQL
finance
28건
KEV 2 · 최근 2026-09-02
Node.js
infra
24건
KEV 2 · 최근 2025-01-14
nginx
infra
16건
KEV 0
Palo Alto PAN-OS
infra
15건
KEV 14 · 최근 2026-10-14
VMware vCenter
infra
13건
KEV 12 · 최근 2026-08-18
Redis
infra
11건
KEV 3 · 최근 2026-05-26
Atlassian Confluence
infra
10건
KEV 10 · 최근 2026-10-15
MySQL/MariaDB
finance
10건
KEV 2 · 최근 2024-11-07
curl
infra
8건
KEV 1 · 최근 2023-05-12
OpenSSL
infra
8건
KEV 1 · 최근 2022-05-04
VMware ESXi
infra
7건
KEV 7 · 최근 2025-03-04
wolfSSL
finance
3건
KEV 0
Apache Spark
finance
1건
KEV 1 · 최근 2023-03-07
Spring Framework
finance
1건
KEV 1 · 최근 2022-04-04
| 기술 | CVE | 심각도 | 유형 | KEV | 등재일 |
|---|---|---|---|---|---|
|
Windows
Use of uninitialized resource in Windows Spaceport.sys allows an authorized attacker to disclose information locally.
|
CVE-2026-69770 | 5.5 | CWE-908 | — | |
|
Windows
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally.
|
CVE-2026-69741 | 5.5 | CWE-125 | — | |
|
Windows
Out-of-bounds read in Windows iSCSI allows an authorized attacker to disclose information locally.
|
CVE-2026-69721 | 5.5 | CWE-125 | — | |
|
Windows
Generation of error message containing sensitive information in Windows Error Reporting allows an authorized attacker to disclose information locally.
|
CVE-2026-69684 | 5.5 | CWE-209 | — | |
|
Windows
Out-of-bounds read in Windows Network File System allows an authorized attacker to disclose information locally.
|
CVE-2026-69675 | 5.5 | CWE-125 | — | |
|
Windows
Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to bypass a security feature loc…
|
CVE-2026-69674 | 5.5 | CWE-306 | — | |
|
Windows
Use of uninitialized resource in Windows DNS allows an authorized attacker to disclose information locally.
|
CVE-2026-69672 | 5.5 | CWE-908 | — | |
|
Windows
Exposure of sensitive system information to an unauthorized control sphere in Windows iSCSI allows an authorized attacker to disclose information loc…
|
CVE-2026-69644 | 5.5 | CWE-497 | — | |
|
Windows
Out-of-bounds read in Windows Remote Desktop Licensing Service allows an authorized attacker to disclose information locally.
|
CVE-2026-69627 | 5.5 | CWE-125 | — | |
|
Windows
Out-of-bounds read in Windows SMB Client allows an authorized attacker to disclose information locally.
|
CVE-2026-69618 | 5.5 | CWE-125 | — | |
|
Windows
Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to disclose information locally.
|
CVE-2026-69616 | 5.5 | CWE-125 | — | |
|
Windows
Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally.
|
CVE-2026-69609 | 5.5 | CWE-125 | — | |
|
Windows
Out-of-bounds read in Windows Storage Spaces Controller allows an authorized attacker to disclose information locally.
|
CVE-2026-69568 | 5.5 | CWE-125 | — | |
|
Windows
Missing authentication for critical function in Microsoft Windows Search Component allows an authorized attacker to perform tampering locally.
|
CVE-2026-69554 | 5.5 | CWE-306 | — | |
|
Windows
Unintended proxy or intermediary ('confused deputy') in Microsoft Windows Speech allows an authorized attacker to perform tampering locally.
|
CVE-2026-69531 | 5.5 | CWE-441 | — | |
|
Windows
Out-of-bounds read in Windows USB Mass Storage Class Driver allows an authorized attacker to disclose information locally.
|
CVE-2026-69527 | 5.5 | CWE-125 | — | |
|
Windows
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
|
CVE-2026-69504 | 5.5 | CWE-125 | — | |
|
Windows
Out-of-bounds read in Windows USB Driver allows an authorized attacker to disclose information locally.
|
CVE-2026-69457 | 5.5 | CWE-125 | — | |
|
Windows
Missing authorization in Microsoft Windows Search Component allows an authorized attacker to perform tampering locally.
|
CVE-2026-69453 | 5.5 | CWE-862 | — | |
|
Windows
Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information lo…
|
CVE-2026-69406 | 5.5 | CWE-497 | — | |
|
Windows
Missing authorization in Windows SMB Server allows an authorized attacker to disclose information locally.
|
CVE-2026-69403 | 5.5 | CWE-862 | — | |
|
Windows
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally.
|
CVE-2026-69390 | 5.5 | CWE-125 | — | |
|
Windows
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information locally.
|
CVE-2026-69369 | 5.5 | CWE-125 | — | |
|
Windows
Out-of-bounds read in Windows Text Shaping allows an authorized attacker to disclose information locally.
|
CVE-2026-69353 | 5.5 | CWE-125 | — | |
|
Windows
Exposure of private personal information to an unauthorized actor in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker…
|
CVE-2026-69351 | 5.5 | CWE-359 | — | |
|
Windows
Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose information locally.
|
CVE-2026-69344 | 5.5 | CWE-125 | — | |
|
Windows
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to disclose information locally.
|
CVE-2026-69343 | 5.5 | CWE-125 | — | |
|
Windows
Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose i…
|
CVE-2026-69339 | 5.5 | CWE-497 | — | |
|
Windows
Missing authentication for critical function in Windows Power Dependency Coordinator allows an authorized attacker to perform tampering locally.
|
CVE-2026-69321 | 5.5 | CWE-306 | — | |
|
Windows
Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally.
|
CVE-2026-69318 | 5.5 | CWE-125 | — | |
|
Windows
Exposure of sensitive system information to an unauthorized control sphere in Windows License Manager allows an authorized attacker to disclose infor…
|
CVE-2026-69315 | 5.5 | CWE-497 | — | |
|
Windows
Generation of error message containing sensitive information in Microsoft COM for Windows allows an authorized attacker to disclose information local…
|
CVE-2026-69294 | 5.5 | CWE-209 | — | |
|
Windows
Use of uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally.
|
CVE-2026-69288 | 5.5 | CWE-908 | — | |
|
Windows
Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to disclose information locally.
|
CVE-2026-69286 | 5.5 | CWE-20 | — | |
|
Windows
Use after free in Windows Network Connection Broker allows an authorized attacker to disclose information locally.
|
CVE-2026-68886 | 5.5 | CWE-209 | — | |
|
Windows
Insertion of sensitive information into log file in Windows Program Compatibility Assistant Service allows an authorized attacker to disclose informa…
|
CVE-2026-68873 | 5.5 | CWE-532 | — | |
|
Windows
Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally.
|
CVE-2026-68851 | 5.5 | CWE-126 | — | |
|
Windows
Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose i…
|
CVE-2026-68842 | 5.5 | CWE-497 | — | |
|
Windows
Files or directories accessible to external parties in Windows Defender Firewall Service allows an authorized attacker to disclose information locall…
|
CVE-2026-68831 | 5.5 | CWE-552 | — | |
|
Windows
Improper link resolution before file access ('link following') in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to…
|
CVE-2026-68830 | 5.5 | CWE-59 | — | |
|
Windows
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
|
CVE-2026-65784 | 5.5 | CWE-125 | — | |
|
Windows
Out-of-bounds read in Windows GDI allows an authorized attacker to disclose information locally.
|
CVE-2026-65662 | 5.5 | CWE-125 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item
commit 10dc95…
|
CVE-2026-64425 | 5.5 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
proc: protect ptrace_may_access() with exec_update_lock (part 1)
Fix the easy c…
|
CVE-2026-64371 | 5.5 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path
In do_…
|
CVE-2026-64370 | 5.5 | — | — | |
|
Windows
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
|
CVE-2026-62887 | 5.5 | CWE-125 | — | |
|
Windows
Missing authentication for critical function in Windows SmartScreen allows an authorized attacker to perform tampering locally.
|
CVE-2026-62879 | 5.5 | CWE-306 | — | |
|
Windows
Untrusted pointer dereference in Windows Win32K allows an authorized attacker to disclose information locally.
|
CVE-2026-62798 | 5.5 | CWE-822 | — | |
|
Windows
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
|
CVE-2026-62796 | 5.5 | CWE-125 | — | |
|
Windows
Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally.
|
CVE-2026-62793 | 5.5 | CWE-126 | — | |
|
Windows
Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally.
|
CVE-2026-62786 | 5.5 | CWE-125 | — | |
|
Windows
Incorrect authorization in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to disclose information locally.
|
CVE-2026-62775 | 5.5 | CWE-863 | — | |
|
Windows
Buffer over-read in Windows Win32K allows an authorized attacker to disclose information locally.
|
CVE-2026-62746 | 5.5 | CWE-126 | — | |
|
Windows
Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally.
|
CVE-2026-62743 | 5.5 | CWE-125 | — | |
|
Windows
Use of uninitialized resource in Windows Imaging Component allows an authorized attacker to disclose information locally.
|
CVE-2026-62740 | 5.5 | CWE-908 | — | |
|
Windows
Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.
|
CVE-2026-62738 | 5.5 | CWE-125 | — | |
|
Windows
Buffer over-read in Windows Wired AutoConfig Service allows an authorized attacker to disclose information locally.
|
CVE-2026-62730 | 5.5 | CWE-126 | — | |
|
Windows
Use of uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally.
|
CVE-2026-62709 | 5.5 | CWE-908 | — | |
|
Windows
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.
|
CVE-2026-62703 | 5.5 | CWE-125 | — | |
|
Windows
Improper link resolution before file access ('link following') in Windows Backup Engine allows an authorized attacker to disclose information locally.
|
CVE-2026-62687 | 5.5 | CWE-59 | — |