주요 제품 취약점 (3,437건)
Windows
infra
2105건
KEV 293 · 최근 2026-10-13
Linux 커널
infra
908건
KEV 31 · 최근 2026-10-28
Cisco IOS
infra
58건
KEV 44 · 최근 2026-07-13
Ivanti
infra
46건
KEV 36 · 최근 2026-10-13
Microsoft Exchange
infra
43건
KEV 20 · 최근 2026-05-15
Fortinet
infra
41건
KEV 22 · 최근 2026-10-16
Apache HTTP
infra
33건
KEV 11 · 최근 2026-08-24
Citrix NetScaler
infra
31건
KEV 16 · 최근 2026-10-04
Apache Tomcat
infra
30건
KEV 8 · 최근 2026-08-04
OpenSSH
infra
30건
KEV 3 · 최근 2025-10-02
Node.js
infra
24건
KEV 2 · 최근 2025-01-14
nginx
infra
16건
KEV 0
Palo Alto PAN-OS
infra
15건
KEV 14 · 최근 2026-10-14
VMware vCenter
infra
13건
KEV 12 · 최근 2026-08-18
Redis
infra
11건
KEV 3 · 최근 2026-05-26
Atlassian Confluence
infra
10건
KEV 10 · 최근 2026-10-15
curl
infra
8건
KEV 1 · 최근 2023-05-12
OpenSSL
infra
8건
KEV 1 · 최근 2022-05-04
VMware ESXi
infra
7건
KEV 7 · 최근 2025-03-04
| 기술 | CVE | 심각도 | 유형 | KEV | 등재일 |
|---|---|---|---|---|---|
|
Redis
In the Linux kernel, the following vulnerability has been resolved:
block: fix integer overflow in BLKSECDISCARD
I independently rediscovered
com…
|
CVE-2024-49994 | 5.5 | CWE-190 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
ext4: filesystems without casefold feature cannot be mounted with siphash
When …
|
CVE-2024-49968 | 5.5 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
dlm: fix possible lkb_resource null dereference
This patch fixes a possible nul…
|
CVE-2024-47809 | 5.5 | CWE-476 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
erofs: handle overlapped pclusters out of crafted images properly
syzbot report…
|
CVE-2024-47736 | 5.5 | CWE-667 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
gfs2: Fix NULL pointer dereference in gfs2_log_flush
In gfs2_jindex_free(), set…
|
CVE-2024-42079 | 5.5 | CWE-476 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
iommu: Return right value in iommu_sva_bind_device()
iommu_sva_bind_device() sh…
|
CVE-2024-40945 | 5.5 | CWE-476 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
ipv6: Fix potential uninit-value access in __ip6_make_skb()
As it was done in c…
|
CVE-2024-36903 | 5.5 | CWE-908 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
mm/vmscan: fix a bug calling wakeup_kswapd() with a wrong zone index
With numa …
|
CVE-2024-26783 | 5.5 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
blk-mq: fix NULL dereference on q->elevator in blk_mq_elv_switch_none
After gra…
|
CVE-2023-53292 | 5.5 | CWE-476 | — | |
|
OpenSSH
In ssh-agent in OpenSSH before 9.6, certain destination constraints can be incompletely applied. When destination constraints are specified during ad…
|
CVE-2023-51384 | 5.5 | CWE-284 | — | |
|
Windows
Windows Mobile Device Management Information Disclosure Vulnerability
|
CVE-2021-24084 | 5.5 | CWE-59 | — | |
|
nginx
Malcolm's nginx Lua role-based access control (RBAC) layer decides whether an authenticated user may reach a role-restricted path (e.g. /htadmin, /au…
|
CVE-2026-107334 | 5.4 | CWE-863 | — | |
|
nginx
Description
NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_v3_module module. When using HTTP/3 with
proxy_request_buffering …
|
CVE-2026-95101 | 5.3 | CWE-172 | — | |
|
Windows
Weak authentication in Windows Kernel allows an authorized attacker to bypass a security feature over a network.
|
CVE-2026-85939 | 5.3 | CWE-1390 | — | |
|
Windows
Confused deputy in CredentialProvider in Google Chrome on on Windows prior to 152.0.7977.75 allowed a remote attacker who had compromised the rendere…
|
CVE-2026-84329 | 5.3 | CWE-441 | — | |
|
Apache HTTP
Path equivalence: '/./' (single dot directory) vulnerability in Apache HTTP Server's mod_userdir module when configured with absolute non-wildcard Us…
|
CVE-2026-79768 | 5.3 | CWE-55 | — | |
|
Windows
Use after free in Windows Distributed File System (DFS) allows an authorized attacker to deny service over a network.
|
CVE-2026-78446 | 5.3 | CWE-416 | — | |
|
Fortinet
A allocation of resources without limits or throttling vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.4 all versions, FortiOS 7.2 a…
|
CVE-2026-71408 | 5.3 | CWE-770 | — | |
|
Windows
Null pointer dereference in Windows Schannel allows an authorized attacker to deny service over a network.
|
CVE-2026-70575 | 5.3 | CWE-476 | — | |
|
Windows
Use after free in Windows Netlogon allows an authorized attacker to deny service over a network.
|
CVE-2026-70025 | 5.3 | CWE-416 | — | |
|
Windows
Incorrect authorization in Windows Key Distribution Center allows an authorized attacker to bypass a security feature over a network.
|
CVE-2026-69640 | 5.3 | CWE-863 | — | |
|
Apache Tomcat
Uncontrolled Resource Consumption vulnerability in Apache Tomcat's WebSocket chat example.
This issue affects Apache Tomcat: from 11.0.0-M20 through…
|
CVE-2026-66299 | 5.3 | CWE-400 | — | |
|
Windows
Inadequate encryption strength in Windows Active Directory allows an authorized attacker to bypass a security feature over a network.
|
CVE-2026-65777 | 5.3 | CWE-326 | — | |
|
Windows
Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker to bypass a security feature over a network.
|
CVE-2026-62757 | 5.3 | CWE-347 | — | |
|
Apache HTTP
Internal state files accessible to external parties in mod_dav_fs in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms all…
|
CVE-2026-58415 | 5.3 | CWE-552 | — | |
|
Windows
Out-of-bounds read in Windows Kernel allows an unauthorized attacker to deny service over a network.
|
CVE-2026-108466 | 5.3 | CWE-125 | — | |
|
Node.js
msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, the array and map decoding paths have no nesting-depth limit, al…
|
CVE-2026-107298 | 5.3 | CWE-674 | — | |
|
Windows
Out-of-bounds read in Windows Remote Desktop Protocol allows an authorized attacker to disclose information over a network.
|
CVE-2026-102198 | 5.3 | CWE-125 | — | |
|
nginx
Description
NGINX JavaScript (njs) has a vulnerability where the built-in njs engine leaks a libxml2 parser context when xml.parse() fails. The fai…
|
CVE-2026-101025 | 5.3 | CWE-401 | — | |
|
Fortinet
An improper check or handling of exceptional conditions vulnerability [CWE-703] in FortiOS version 7.4.0 through 7.4.3 and before 7.2.7, FortiProxy v…
|
CVE-2024-26008 | 5.3 | CWE-754 | — | |
|
Windows
A unverified ownership vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.7, FortiClientWindows 7.2 all versions may allow attacker to im…
|
CVE-2026-84386 | 5.1 | CWE-283 | — | |
|
Windows
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information locally.
|
CVE-2026-61368 | 5.0 | CWE-122 | — | |
|
Windows
Use after free in Windows Overlay Filter allows an authorized attacker to disclose information over a network.
|
CVE-2026-69474 | 4.8 | CWE-126 | — | |
|
Windows
Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
|
CVE-2026-96853 | 4.7 | CWE-367 | — | |
|
Windows
Exposure of sensitive system information to an unauthorized control sphere in Windows ALPC allows an authorized attacker to disclose information loca…
|
CVE-2026-85866 | 4.7 | CWE-497 | — | |
|
Windows
Time-of-check time-of-use (toctou) race condition in Windows Projected File System allows an authorized attacker to perform tampering locally.
|
CVE-2026-84009 | 4.7 | CWE-367 | — | |
|
Windows
Use of uninitialized resource in Windows Kernel allows an authorized attacker to disclose information locally.
|
CVE-2026-83925 | 4.7 | CWE-497 | — | |
|
Windows
Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclos…
|
CVE-2026-83909 | 4.7 | CWE-497 | — | |
|
Windows
Exposure of sensitive system information to an unauthorized control sphere in Windows Shell allows an authorized attacker to disclose information loc…
|
CVE-2026-83905 | 4.7 | CWE-497 | — | |
|
Windows
Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclos…
|
CVE-2026-83897 | 4.7 | CWE-497 | — | |
|
Windows
Relative path traversal in Windows Internet (wininet.dll) allows an authorized attacker to perform tampering locally.
|
CVE-2026-83865 | 4.7 | CWE-23 | — | |
|
Windows
Generation of error message containing sensitive information in Windows NTFS allows an authorized attacker to disclose information locally.
|
CVE-2026-83786 | 4.7 | CWE-209 | — | |
|
Windows
Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclos…
|
CVE-2026-83774 | 4.7 | CWE-497 | — | |
|
Windows
Time-of-check time-of-use (toctou) race condition in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locall…
|
CVE-2026-83697 | 4.7 | CWE-367 | — | |
|
Windows
Exposure of sensitive system information to an unauthorized control sphere in Windows Installer allows an authorized attacker to disclose information…
|
CVE-2026-83672 | 4.7 | CWE-497 | — | |
|
Windows
Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.
|
CVE-2026-83656 | 4.7 | CWE-306 | — | |
|
Windows
Use after free in Windows Graphics Kernel allows an authorized attacker to disclose information locally.
|
CVE-2026-83582 | 4.7 | CWE-416 | — | |
|
Windows
Time-of-check time-of-use (toctou) race condition in Windows SmartScreen allows an authorized attacker to disclose information locally.
|
CVE-2026-83504 | 4.7 | CWE-367 | — | |
|
Windows
Missing release of resource after effective lifetime in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to deny service…
|
CVE-2026-72931 | 4.7 | CWE-772 | — | |
|
Windows
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to disclose information locally.
|
CVE-2026-70195 | 4.7 | CWE-362 | — | |
|
Windows
Use after free in Windows Kernel allows an authorized attacker to disclose information locally.
|
CVE-2026-70077 | 4.7 | CWE-416 | — | |
|
Windows
Out-of-bounds read in Windows Kernel allows an authorized attacker to disclose information locally.
|
CVE-2026-70063 | 4.7 | CWE-125 | — | |
|
Windows
Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to disclose informati…
|
CVE-2026-69969 | 4.7 | CWE-59 | — | |
|
Windows
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally.
|
CVE-2026-69895 | 4.7 | CWE-125 | — | |
|
Windows
Use of uninitialized resource in Windows Win32K allows an authorized attacker to disclose information locally.
|
CVE-2026-69853 | 4.7 | CWE-908 | — | |
|
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K allows an authorized attacker to bypass…
|
CVE-2026-69792 | 4.7 | CWE-362 | — | |
|
Windows
Improper link resolution before file access ('link following') in Windows Container Manager Service allows an authorized attacker to bypass a securit…
|
CVE-2026-69771 | 4.7 | CWE-59 | — | |
|
Windows
Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally.
|
CVE-2026-69506 | 4.7 | CWE-125 | — | |
|
Windows
Out-of-bounds read in Windows Image Acquisition allows an authorized attacker to disclose information locally.
|
CVE-2026-69483 | 4.7 | CWE-125 | — | |
|
Windows
Improper link resolution before file access ('link following') in Windows NTFS allows an authorized attacker to perform tampering locally.
|
CVE-2026-69425 | 4.7 | CWE-59 | — |