주요 제품 취약점 (3,481건)
Windows
infra
2105건
KEV 293 · 최근 2026-10-13
Linux 커널
infra
908건
KEV 31 · 최근 2026-10-28
Cisco IOS
infra
58건
KEV 44 · 최근 2026-07-13
Ivanti
infra
47건
KEV 38 · 최근 2026-10-30
Microsoft Exchange
infra
43건
KEV 20 · 최근 2026-05-15
Fortinet
infra
41건
KEV 22 · 최근 2026-10-16
Apache HTTP
infra
33건
KEV 11 · 최근 2026-08-24
Citrix NetScaler
infra
31건
KEV 16 · 최근 2026-10-04
Apache Tomcat
infra
30건
KEV 8 · 최근 2026-08-04
OpenSSH
infra
30건
KEV 3 · 최근 2025-10-02
PostgreSQL
finance
28건
KEV 2 · 최근 2026-09-02
Node.js
infra
24건
KEV 2 · 최근 2025-01-14
nginx
infra
16건
KEV 0
Palo Alto PAN-OS
infra
15건
KEV 14 · 최근 2026-10-14
VMware vCenter
infra
13건
KEV 12 · 최근 2026-08-18
Redis
infra
11건
KEV 3 · 최근 2026-05-26
Atlassian Confluence
infra
10건
KEV 10 · 최근 2026-10-15
MySQL/MariaDB
finance
10건
KEV 2 · 최근 2024-11-07
curl
infra
8건
KEV 1 · 최근 2023-05-12
OpenSSL
infra
8건
KEV 1 · 최근 2022-05-04
VMware ESXi
infra
7건
KEV 7 · 최근 2025-03-04
wolfSSL
finance
3건
KEV 0
Apache Spark
finance
1건
KEV 1 · 최근 2023-03-07
Spring Framework
finance
1건
KEV 1 · 최근 2022-04-04
| 기술 | CVE | 심각도 | 유형 | KEV | 등재일 |
|---|---|---|---|---|---|
|
Windows
Missing authorization in Windows Defender Firewall Service allows an authorized attacker to bypass a security feature locally.
|
CVE-2026-61936 | 5.5 | CWE-862 | — | |
|
Windows
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.
|
CVE-2026-61933 | 5.5 | CWE-125 | — | |
|
Windows
Cleartext storage of sensitive information in Windows Hello allows an authorized attacker to perform tampering locally.
|
CVE-2026-61928 | 5.5 | CWE-312 | — | |
|
Windows
Untrusted pointer dereference in Windows GDI allows an authorized attacker to disclose information locally.
|
CVE-2026-61360 | 5.5 | CWE-822 | — | |
|
Windows
Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally.
|
CVE-2026-61347 | 5.5 | CWE-126 | — | |
|
Fortinet
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.4.0…
|
CVE-2026-59839 | 5.5 | CWE-22 | — | |
|
Windows
Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally.
|
CVE-2026-59137 | 5.5 | CWE-908 | — | |
|
Windows
Use of uninitialized resource in Microsoft COM for Windows allows an authorized attacker to disclose information locally.
|
CVE-2026-59136 | 5.5 | CWE-908 | — | |
|
Windows
Weak authentication in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.
|
CVE-2026-59135 | 5.5 | CWE-1390 | — | |
|
Windows
Out-of-bounds read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally.
|
CVE-2026-59128 | 5.5 | CWE-125 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
ASoC: wm_adsp: Fix NULL dereference when removing firmware controls
In wm_adsp_…
|
CVE-2026-53350 | 5.5 | CWE-476 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_conntrack: destroy stale expectfn expectations on unregister
NAT …
|
CVE-2026-53349 | 5.5 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
net: bonding: fix NULL pointer dereference in bond_do_ioctl()
In bond_do_ioctl(…
|
CVE-2026-53337 | 5.5 | CWE-476 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
agp/amd64: Fix broken error propagation in agp_amd64_probe()
A NULL pointer der…
|
CVE-2026-53325 | 5.5 | CWE-476 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
mailbox: add sanity check for channel array
Fail gracefully if there is no chan…
|
CVE-2026-53295 | 5.5 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
netfilter: synproxy: add mutex to guard hook reference counting
As the synproxy…
|
CVE-2026-53269 | 5.5 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
6lowpan: fix off-by-one in multicast context address compression
The second mem…
|
CVE-2026-53263 | 5.5 | CWE-193 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
ipv4: restrict IPOPT_SSRR and IPOPT_LSRR options
This patch restricts setting L…
|
CVE-2026-53249 | 5.5 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
net/802/mrp: fix vector attribute parsing in mrp_pdu_parse_vecattr
In mrp_pdu_p…
|
CVE-2026-53245 | 5.5 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
tcp: restrict SO_ATTACH_FILTER to priv users
This patch restricts the use of SO…
|
CVE-2026-53236 | 5.5 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
net: openvswitch: fix possible kfree_skb of ERR_PTR
After the patch in the "Fix…
|
CVE-2026-53227 | 5.5 | CWE-401 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
netfilter: x_tables: avoid leaking percpu counter pointers
The native and compa…
|
CVE-2026-53219 | 5.5 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nft_exthdr: fix register tracking for F_PRESENT flag
nft_exthdr_init…
|
CVE-2026-53218 | 5.5 | CWE-908 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: L2CAP: reject BR/EDR signaling packets over MTUsig
net/bluetooth/l2c…
|
CVE-2026-53208 | 5.5 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
vsock/vmci: fix sk_ack_backlog leak on failed handshake
When vmci_transport_rec…
|
CVE-2026-53181 | 5.5 | CWE-401 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
bnxt_en: Fix NULL pointer dereference
PCIe errors detected by a Root Port or Do…
|
CVE-2026-53177 | 5.5 | CWE-476 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
fuse: reject fuse_notify() pagecache ops on directories
The operations FUSE_NOT…
|
CVE-2026-53168 | 5.5 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
fuse: limit FUSE_NOTIFY_RETRIEVE to uptodate folios
FUSE_NOTIFY_RETRIEVE must b…
|
CVE-2026-53167 | 5.5 | CWE-908 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
thunderbolt: Reject zero-length property entries in validator
tb_property_entry…
|
CVE-2026-53150 | 5.5 | CWE-191 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nft_fib: fix stale stack leak via the OIFNAME register
For NFT_FIB_R…
|
CVE-2026-53134 | 5.5 | CWE-401 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
net/sched: cls_fw: fix NULL dereference of "old" filters before change()
Like p…
|
CVE-2026-53080 | 5.5 | CWE-476 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
nexthop: fix IPv6 route referencing IPv4 nexthop
syzbot reported a panic [1] [2…
|
CVE-2026-53012 | 5.5 | CWE-476 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
netfilter: xtables: restrict several matches to inet family
This is a partial r…
|
CVE-2026-53001 | 5.5 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nft_ct: fix missing expect put in obj eval
nft_ct_expect_obj_eval() …
|
CVE-2026-52970 | 5.5 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
i2c: dev: prevent integer overflow in I2C_TIMEOUT ioctl
While fuzzing with Syzk…
|
CVE-2026-52948 | 5.5 | CWE-190 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
ipc/shm: serialize orphan cleanup with shm_nattch updates
shm_destroy_orphaned(…
|
CVE-2026-52930 | 5.5 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
af_unix: Reject SIOCATMARK on non-stream sockets
SIOCATMARK reports whether the…
|
CVE-2026-52928 | 5.5 | — | — | |
|
Windows
Buffer over-read in Windows Kernel allows an authorized attacker to disclose information locally.
|
CVE-2026-50475 | 5.5 | CWE-126 | — | |
|
Windows
Out-of-bounds read in Windows TCP/IP allows an authorized attacker to disclose information locally.
|
CVE-2026-49177 | 5.5 | CWE-125 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
vsock/virtio: fix accept queue count leak on transport mismatch
virtio_transpor…
|
CVE-2026-46214 | 5.5 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func()
Wh…
|
CVE-2026-46196 | 5.5 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
xfrm: ah: account for ESN high bits in async callbacks
AH allocates its tempora…
|
CVE-2026-46193 | 5.5 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
ipv6: xfrm6: release dst on error in xfrm6_rcv_encap()
xfrm6_rcv_encap() perfor…
|
CVE-2026-46172 | 5.5 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
mptcp: fix scheduling with atomic in timestamp sockopt
Using lock_sock_fast() (…
|
CVE-2026-46168 | 5.5 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
usb: usblp: fix uninitialized heap leak via LPGETSTATUS ioctl
Just like in a pr…
|
CVE-2026-46167 | 5.5 | CWE-908 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
openvswitch: vport: fix self-deadlock on release of tunnel ports
vports are use…
|
CVE-2026-46165 | 5.5 | CWE-667 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
md/raid10: fix divide-by-zero in setup_geo() with zero far_copies
setup_geo() e…
|
CVE-2026-46161 | 5.5 | CWE-369 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
usb: usblp: fix heap leak in IEEE 1284 device ID via short response
usblp_ctrl_…
|
CVE-2026-46151 | 5.5 | CWE-401 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
ALSA: usb-audio: Avoid potential endless loop in convert_chmap_v3()
The convert…
|
CVE-2026-46146 | 5.5 | CWE-835 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfin…
|
CVE-2026-46132 | 5.5 | CWE-908 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
ipmi: Check event message buffer response for bad data
The event message buffer…
|
CVE-2026-46128 | 5.5 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
netfilter: reject zero shift in nft_bitwise
Reject zero shift operands for nft_…
|
CVE-2026-46101 | 5.5 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
wifi: rtw88: check for PCI upstream bridge existence
pci_upstream_bridge() retu…
|
CVE-2026-46092 | 5.5 | CWE-476 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
ALSA: control: Validate buf_len before strnlen() in snd_ctl_elem_init_enum_names…
|
CVE-2026-46088 | 5.5 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
net: bridge: use a stable FDB dst snapshot in RCU readers
Local FDB entries can…
|
CVE-2026-46086 | 5.5 | CWE-476 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
spi: fix resource leaks on device setup failure
Make sure to call controller cl…
|
CVE-2026-46083 | 5.5 | CWE-401 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
md/raid5: fix soft lockup in retry_aligned_read()
When retry_aligned_read() enc…
|
CVE-2026-46051 | 5.5 | CWE-667 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
md/raid10: fix deadlock with check operation and nowait requests
When an array …
|
CVE-2026-46050 | 5.5 | CWE-667 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all()
The commit c8e008b…
|
CVE-2026-46046 | 5.5 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
ipmi:ssif: Clean up kthread on errors
If an error occurs after the ssif kthread…
|
CVE-2026-46044 | 5.5 | — | — |