주요 제품 취약점 (3,481건)
Windows
infra
2105건
KEV 293 · 최근 2026-10-13
Linux 커널
infra
908건
KEV 31 · 최근 2026-10-28
Cisco IOS
infra
58건
KEV 44 · 최근 2026-07-13
Ivanti
infra
47건
KEV 38 · 최근 2026-10-30
Microsoft Exchange
infra
43건
KEV 20 · 최근 2026-05-15
Fortinet
infra
41건
KEV 22 · 최근 2026-10-16
Apache HTTP
infra
33건
KEV 11 · 최근 2026-08-24
Citrix NetScaler
infra
31건
KEV 16 · 최근 2026-10-04
Apache Tomcat
infra
30건
KEV 8 · 최근 2026-08-04
OpenSSH
infra
30건
KEV 3 · 최근 2025-10-02
PostgreSQL
finance
28건
KEV 2 · 최근 2026-09-02
Node.js
infra
24건
KEV 2 · 최근 2025-01-14
nginx
infra
16건
KEV 0
Palo Alto PAN-OS
infra
15건
KEV 14 · 최근 2026-10-14
VMware vCenter
infra
13건
KEV 12 · 최근 2026-08-18
Redis
infra
11건
KEV 3 · 최근 2026-05-26
Atlassian Confluence
infra
10건
KEV 10 · 최근 2026-10-15
MySQL/MariaDB
finance
10건
KEV 2 · 최근 2024-11-07
curl
infra
8건
KEV 1 · 최근 2023-05-12
OpenSSL
infra
8건
KEV 1 · 최근 2022-05-04
VMware ESXi
infra
7건
KEV 7 · 최근 2025-03-04
wolfSSL
finance
3건
KEV 0
Apache Spark
finance
1건
KEV 1 · 최근 2023-03-07
Spring Framework
finance
1건
KEV 1 · 최근 2022-04-04
| 기술 | CVE | 심각도 | 유형 | KEV | 등재일 |
|---|---|---|---|---|---|
|
Windows
Null pointer dereference in Windows Schannel allows an authorized attacker to deny service over a network.
|
CVE-2026-70575 | 5.3 | CWE-476 | — | |
|
Windows
Use after free in Windows Netlogon allows an authorized attacker to deny service over a network.
|
CVE-2026-70025 | 5.3 | CWE-416 | — | |
|
Windows
Incorrect authorization in Windows Key Distribution Center allows an authorized attacker to bypass a security feature over a network.
|
CVE-2026-69640 | 5.3 | CWE-863 | — | |
|
Apache Tomcat
Uncontrolled Resource Consumption vulnerability in Apache Tomcat's WebSocket chat example.
This issue affects Apache Tomcat: from 11.0.0-M20 through…
|
CVE-2026-66299 | 5.3 | CWE-400 | — | |
|
Windows
Inadequate encryption strength in Windows Active Directory allows an authorized attacker to bypass a security feature over a network.
|
CVE-2026-65777 | 5.3 | CWE-326 | — | |
|
Windows
Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker to bypass a security feature over a network.
|
CVE-2026-62757 | 5.3 | CWE-347 | — | |
|
Apache HTTP
Internal state files accessible to external parties in mod_dav_fs in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms all…
|
CVE-2026-58415 | 5.3 | CWE-552 | — | |
|
Windows
Out-of-bounds read in Windows Kernel allows an unauthorized attacker to deny service over a network.
|
CVE-2026-108466 | 5.3 | CWE-125 | — | |
|
Node.js
msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, the array and map decoding paths have no nesting-depth limit, al…
|
CVE-2026-107298 | 5.3 | CWE-674 | — | |
|
Windows
Out-of-bounds read in Windows Remote Desktop Protocol allows an authorized attacker to disclose information over a network.
|
CVE-2026-102198 | 5.3 | CWE-125 | — | |
|
nginx
Description
NGINX JavaScript (njs) has a vulnerability where the built-in njs engine leaks a libxml2 parser context when xml.parse() fails. The fai…
|
CVE-2026-101025 | 5.3 | CWE-401 | — | |
|
Fortinet
An improper check or handling of exceptional conditions vulnerability [CWE-703] in FortiOS version 7.4.0 through 7.4.3 and before 7.2.7, FortiProxy v…
|
CVE-2024-26008 | 5.3 | CWE-754 | — | |
|
Windows
A unverified ownership vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.7, FortiClientWindows 7.2 all versions may allow attacker to im…
|
CVE-2026-84386 | 5.1 | CWE-283 | — | |
|
Windows
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information locally.
|
CVE-2026-61368 | 5.0 | CWE-122 | — | |
|
Windows
Use after free in Windows Overlay Filter allows an authorized attacker to disclose information over a network.
|
CVE-2026-69474 | 4.8 | CWE-126 | — | |
|
Windows
Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
|
CVE-2026-96853 | 4.7 | CWE-367 | — | |
|
Windows
Exposure of sensitive system information to an unauthorized control sphere in Windows ALPC allows an authorized attacker to disclose information loca…
|
CVE-2026-85866 | 4.7 | CWE-497 | — | |
|
Windows
Time-of-check time-of-use (toctou) race condition in Windows Projected File System allows an authorized attacker to perform tampering locally.
|
CVE-2026-84009 | 4.7 | CWE-367 | — | |
|
Windows
Use of uninitialized resource in Windows Kernel allows an authorized attacker to disclose information locally.
|
CVE-2026-83925 | 4.7 | CWE-497 | — | |
|
Windows
Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclos…
|
CVE-2026-83909 | 4.7 | CWE-497 | — | |
|
Windows
Exposure of sensitive system information to an unauthorized control sphere in Windows Shell allows an authorized attacker to disclose information loc…
|
CVE-2026-83905 | 4.7 | CWE-497 | — | |
|
Windows
Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclos…
|
CVE-2026-83897 | 4.7 | CWE-497 | — | |
|
Windows
Relative path traversal in Windows Internet (wininet.dll) allows an authorized attacker to perform tampering locally.
|
CVE-2026-83865 | 4.7 | CWE-23 | — | |
|
Windows
Generation of error message containing sensitive information in Windows NTFS allows an authorized attacker to disclose information locally.
|
CVE-2026-83786 | 4.7 | CWE-209 | — | |
|
Windows
Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclos…
|
CVE-2026-83774 | 4.7 | CWE-497 | — | |
|
Windows
Time-of-check time-of-use (toctou) race condition in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locall…
|
CVE-2026-83697 | 4.7 | CWE-367 | — | |
|
Windows
Exposure of sensitive system information to an unauthorized control sphere in Windows Installer allows an authorized attacker to disclose information…
|
CVE-2026-83672 | 4.7 | CWE-497 | — | |
|
Windows
Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.
|
CVE-2026-83656 | 4.7 | CWE-306 | — | |
|
Windows
Use after free in Windows Graphics Kernel allows an authorized attacker to disclose information locally.
|
CVE-2026-83582 | 4.7 | CWE-416 | — | |
|
Windows
Time-of-check time-of-use (toctou) race condition in Windows SmartScreen allows an authorized attacker to disclose information locally.
|
CVE-2026-83504 | 4.7 | CWE-367 | — | |
|
Windows
Missing release of resource after effective lifetime in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to deny service…
|
CVE-2026-72931 | 4.7 | CWE-772 | — | |
|
Windows
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to disclose information locally.
|
CVE-2026-70195 | 4.7 | CWE-362 | — | |
|
Windows
Use after free in Windows Kernel allows an authorized attacker to disclose information locally.
|
CVE-2026-70077 | 4.7 | CWE-416 | — | |
|
Windows
Out-of-bounds read in Windows Kernel allows an authorized attacker to disclose information locally.
|
CVE-2026-70063 | 4.7 | CWE-125 | — | |
|
Windows
Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to disclose informati…
|
CVE-2026-69969 | 4.7 | CWE-59 | — | |
|
Windows
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally.
|
CVE-2026-69895 | 4.7 | CWE-125 | — | |
|
Windows
Use of uninitialized resource in Windows Win32K allows an authorized attacker to disclose information locally.
|
CVE-2026-69853 | 4.7 | CWE-908 | — | |
|
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K allows an authorized attacker to bypass…
|
CVE-2026-69792 | 4.7 | CWE-362 | — | |
|
Windows
Improper link resolution before file access ('link following') in Windows Container Manager Service allows an authorized attacker to bypass a securit…
|
CVE-2026-69771 | 4.7 | CWE-59 | — | |
|
Windows
Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally.
|
CVE-2026-69506 | 4.7 | CWE-125 | — | |
|
Windows
Out-of-bounds read in Windows Image Acquisition allows an authorized attacker to disclose information locally.
|
CVE-2026-69483 | 4.7 | CWE-125 | — | |
|
Windows
Improper link resolution before file access ('link following') in Windows NTFS allows an authorized attacker to perform tampering locally.
|
CVE-2026-69425 | 4.7 | CWE-59 | — | |
|
Windows
Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally.
|
CVE-2026-69316 | 4.7 | CWE-126 | — | |
|
Windows
Out-of-bounds read in Windows Bluetooth Port Driver allows an authorized attacker to disclose information locally.
|
CVE-2026-68849 | 4.7 | CWE-125 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
signal: clear JOBCTL_PENDING_MASK for caller in zap_other_threads()
When a mult…
|
CVE-2026-53352 | 4.7 | CWE-362 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
wifi: rsi: fix kthread lifetime race between self-exit and external-stop
RSI dr…
|
CVE-2026-46187 | 4.7 | CWE-362 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
btrfs: fix btrfs_ioctl_space_info() slot_count TOCTOU which can lead to info-lea…
|
CVE-2026-46159 | 4.7 | CWE-367 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
mm/huge_memory: fix folio isn't locked in softleaf_to_folio()
On arm64 server, …
|
CVE-2026-31466 | 4.7 | CWE-362 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
soc: fsl: qbman: fix race condition in qman_destroy_fq
When QMAN_FQ_FLAG_DYNAMI…
|
CVE-2026-23463 | 4.7 | CWE-362 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
PM: runtime: Fix a race condition related to device removal
The following code …
|
CVE-2026-23452 | 4.7 | CWE-362 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
net: annotate data-races around sk->sk_{data_ready,write_space}
skmsg (and prob…
|
CVE-2026-23302 | 4.7 | CWE-362 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
scsi: core: Wake up the error handler when final completions race against each o…
|
CVE-2026-23110 | 4.7 | CWE-362 | — | |
|
Windows
Untrusted pointer dereference in Windows Network File System allows an authorized attacker to disclose information locally.
|
CVE-2026-102186 | 4.7 | CWE-822 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd()
Memory hot rem…
|
CVE-2025-38681 | 4.7 | CWE-362 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
net: mvpp2: Prevent parser TCAM memory corruption
Protect the parser TCAM/SRAM …
|
CVE-2025-22060 | 4.7 | CWE-367 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
net: dsa: improve shutdown sequence
Alexander Sverdlin presents 2 problems duri…
|
CVE-2024-49998 | 4.7 | CWE-367 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
ipv4: Fix uninit-value access in __ip_make_skb()
KMSAN reported uninit-value ac…
|
CVE-2024-36927 | 4.7 | CWE-362 | — | |
|
Windows
Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack.
|
CVE-2026-88226 | 4.6 | CWE-125 | — | |
|
Windows
Buffer over-read in Windows RNDIS allows an unauthorized attacker to disclose information with a physical attack.
|
CVE-2026-83788 | 4.6 | CWE-126 | — | |
|
Windows
Out-of-bounds read in Windows CD-ROM Driver allows an unauthorized attacker to disclose information with a physical attack.
|
CVE-2026-78508 | 4.6 | CWE-125 | — |