Security News

주요 제품 취약점 (3,481건)

기술CVE심각도유형KEV등재일
Windows
Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information lo…
CVE-2026-108462 5.5 CWE-497 —
Windows
Buffer over-read in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally.
CVE-2026-103567 5.5 CWE-126 —
Windows
Use of uninitialized resource in Windows Kernel allows an authorized attacker to disclose information locally.
CVE-2026-102187 5.5 CWE-908 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: fs: ntfs3: fix infinite loop triggered by zero-sized ATTR_LIST We found an infi…
CVE-2025-71267 5.5 CWE-835 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: fs: ntfs3: check return value of indx_find to avoid infinite loop We found an i…
CVE-2025-71266 5.5 CWE-835 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: fs: ntfs3: fix infinite loop in attr_load_runs_range on inconsistent metadata W…
CVE-2025-71265 5.5 CWE-835 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: dmaengine: at_hdmac: fix device leak on of_dma_xlate() Make sure to drop the re…
CVE-2025-71191 5.5 — —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: dmaengine: bcm-sba-raid: fix device leak on probe Make sure to drop the referen…
CVE-2025-71190 5.5 CWE-401 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw: dmamux: fix OF node leak on route allocation failure Make sure t…
CVE-2025-71189 5.5 CWE-401 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: dmaengine: stm32: dmamux: fix device leak on route allocation Make sure to drop…
CVE-2025-71186 5.5 CWE-401 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation Make su…
CVE-2025-71185 5.5 CWE-401 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: fix device leaks on compat bind and unbind Make sure to drop t…
CVE-2025-71163 5.5 CWE-401 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: via_wdt: fix critical boot hang due to unnamed resource allocation The VIA watc…
CVE-2025-71114 5.5 CWE-401 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - zero initialize memory allocated via sock_kmalloc Several cryp…
CVE-2025-71113 5.5 CWE-908 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer …
CVE-2025-71104 5.5 CWE-667 —
Windows
In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer …
CVE-2025-71104 5.5 CWE-667 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: ip6_gre: make ip6gre_header() robust Over the years, syzbot found many ways to …
CVE-2025-71098 5.5 CWE-476 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: ipv4: Fix reference count leak when using error routes with nexthop objects Whe…
CVE-2025-71097 5.5 CWE-401 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: mptcp: fallback earlier on simult connection Syzkaller reports a simult-connect…
CVE-2025-71088 5.5 — —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: net: nfc: fix deadlock between nfc_unregister_device and rfkill_fop_write A dea…
CVE-2025-71079 5.5 CWE-667 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: bpf: Do not let BPF test infra emit invalid GSO types to stack Yinhao et al. re…
CVE-2025-68725 5.5 — —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: x86/vmscape: Add conditional IBPB mitigation VMSCAPE is a vulnerability that ex…
CVE-2025-40300 5.5 — —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: cgroup: split cgroup_destroy_wq into 3 workqueues A hung task can occur during …
CVE-2025-39953 5.5 — —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() Def…
CVE-2025-39845 5.5 CWE-401 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: block: avoid possible overflow for chunk_sectors check in blk_stack_limits() In…
CVE-2025-39795 5.5 CWE-674 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: jbd2: prevent softlockup in jbd2_log_do_checkpoint() Both jbd2_log_do_checkpoin…
CVE-2025-39782 5.5 CWE-667 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: net: bridge: fix soft lockup in br_multicast_query_expired() When set multicast…
CVE-2025-39773 5.5 CWE-667 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: remove refcounting in expectation dumpers Same pattern as…
CVE-2025-39764 5.5 — —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: fs: Prevent file descriptor table allocations exceeding INT_MAX When sysctl_nr_…
CVE-2025-39756 5.5 CWE-401 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: bpf: Forget ranges when refining tnum after JSET Syzbot reported a kernel warni…
CVE-2025-39748 5.5 — —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: crypto: qat - flush misc workqueue during device shutdown Repeated loading and …
CVE-2025-39721 5.5 CWE-416 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper Since 923…
CVE-2025-39681 5.5 — —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_reject: don't leak dst refcount for loopback packets recent patch…
CVE-2025-38732 5.5 — —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: netlink: avoid infinite retry looping in netlink_unicast() netlink_attachskb() …
CVE-2025-38727 5.5 CWE-835 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: net: usb: asix_devices: add phy_mask for ax88772 mdio bus Without setting phy_m…
CVE-2025-38725 5.5 CWE-476 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: fix refcount leak on table dump There is a reference coun…
CVE-2025-38721 5.5 — —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: bpf: Reject narrower access to pointer ctx fields The following BPF program, si…
CVE-2025-38591 5.5 — —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Fix crash in icl_update_topdown_event() The perf_fuzzer found a…
CVE-2025-38322 5.5 — —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: net: stmmac: make sure that ptp_rate is not 0 before configuring EST If the ptp…
CVE-2025-38125 5.5 — —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Kill timer properly at removal The USB-audio MIDI code initial…
CVE-2025-38105 5.5 — —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: block: fix resource leak in blk_register_queue() error path When registering a …
CVE-2025-37980 5.5 CWE-401 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: Input: mtk-pmic-keys - fix possible null pointer dereference In mtk_pmic_keys_p…
CVE-2025-37972 5.5 CWE-476 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controll…
CVE-2025-37945 5.5 CWE-476 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: net: lan743x: Fix memleak issue when GSO enabled Always map the `skb` to the LS…
CVE-2025-37909 5.5 CWE-401 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: net: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod. When I ra…
CVE-2025-23143 5.5 CWE-476 —
Windows
In the Linux kernel, the following vulnerability has been resolved: net: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod. When I ra…
CVE-2025-23143 5.5 CWE-476 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: thermal: int340x: Add NULL check for adev Not all devices have an ACPI companio…
CVE-2025-23136 5.5 CWE-476 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: dlm: prevent NPD when writing a positive value to event_done do_uevent returns …
CVE-2025-23131 5.5 CWE-476 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF. SIOCBRDELIF is passed t…
CVE-2025-22111 5.5 — —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: bonding: check xdp prog when set bond mode Following operations can trigger a w…
CVE-2025-22105 5.5 — —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: PCI: brcmstb: Fix error path after a call to regulator_bulk_get() If the regula…
CVE-2025-22095 5.5 — —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw(). fib_check_nh_…
CVE-2025-22005 5.5 CWE-401 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: llc: do not use skb_get() before dev_queue_xmit() syzbot is able to crash hosts…
CVE-2025-21925 5.5 — —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: x86/amd_nb: Use rdmsr_safe() in amd_get_mmconfig_range() Xen doesn't offer MSR_…
CVE-2025-21913 5.5 — —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: gtp: Suppress list corruption splat in gtp_net_exit_batch_rtnl(). Brad Spengler…
CVE-2025-21865 5.5 CWE-787 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: drop_monitor: fix incorrect initialization order Syzkaller reports the followin…
CVE-2025-21862 5.5 CWE-908 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize…
CVE-2025-21861 5.5 CWE-416 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: USB: gadget: f_midi: f_midi_complete to call queue_work When using USB MIDI, a …
CVE-2025-21859 5.5 CWE-667 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: bpf: avoid holding freeze_mutex during mmap operation We use map->freeze_mutex …
CVE-2025-21853 5.5 — —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: acct: perform last write from workqueue In [1] it was reported that the acct(2)…
CVE-2025-21846 5.5 CWE-476 —