주요 제품 취약점 (3,437건)
Windows
infra
2105건
KEV 293 · 최근 2026-10-13
Linux 커널
infra
908건
KEV 31 · 최근 2026-10-28
Cisco IOS
infra
58건
KEV 44 · 최근 2026-07-13
Ivanti
infra
46건
KEV 36 · 최근 2026-10-13
Microsoft Exchange
infra
43건
KEV 20 · 최근 2026-05-15
Fortinet
infra
41건
KEV 22 · 최근 2026-10-16
Apache HTTP
infra
33건
KEV 11 · 최근 2026-08-24
Citrix NetScaler
infra
31건
KEV 16 · 최근 2026-10-04
Apache Tomcat
infra
30건
KEV 8 · 최근 2026-08-04
OpenSSH
infra
30건
KEV 3 · 최근 2025-10-02
Node.js
infra
24건
KEV 2 · 최근 2025-01-14
nginx
infra
16건
KEV 0
Palo Alto PAN-OS
infra
15건
KEV 14 · 최근 2026-10-14
VMware vCenter
infra
13건
KEV 12 · 최근 2026-08-18
Redis
infra
11건
KEV 3 · 최근 2026-05-26
Atlassian Confluence
infra
10건
KEV 10 · 최근 2026-10-15
curl
infra
8건
KEV 1 · 최근 2023-05-12
OpenSSL
infra
8건
KEV 1 · 최근 2022-05-04
VMware ESXi
infra
7건
KEV 7 · 최근 2025-03-04
| 기술 | CVE | 심각도 | 유형 | KEV | 등재일 |
|---|---|---|---|---|---|
|
Windows
Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally.
|
CVE-2026-69316 | 4.7 | CWE-126 | — | |
|
Windows
Out-of-bounds read in Windows Bluetooth Port Driver allows an authorized attacker to disclose information locally.
|
CVE-2026-68849 | 4.7 | CWE-125 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
signal: clear JOBCTL_PENDING_MASK for caller in zap_other_threads()
When a mult…
|
CVE-2026-53352 | 4.7 | CWE-362 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
wifi: rsi: fix kthread lifetime race between self-exit and external-stop
RSI dr…
|
CVE-2026-46187 | 4.7 | CWE-362 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
btrfs: fix btrfs_ioctl_space_info() slot_count TOCTOU which can lead to info-lea…
|
CVE-2026-46159 | 4.7 | CWE-367 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
mm/huge_memory: fix folio isn't locked in softleaf_to_folio()
On arm64 server, …
|
CVE-2026-31466 | 4.7 | CWE-362 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
soc: fsl: qbman: fix race condition in qman_destroy_fq
When QMAN_FQ_FLAG_DYNAMI…
|
CVE-2026-23463 | 4.7 | CWE-362 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
PM: runtime: Fix a race condition related to device removal
The following code …
|
CVE-2026-23452 | 4.7 | CWE-362 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
net: annotate data-races around sk->sk_{data_ready,write_space}
skmsg (and prob…
|
CVE-2026-23302 | 4.7 | CWE-362 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
scsi: core: Wake up the error handler when final completions race against each o…
|
CVE-2026-23110 | 4.7 | CWE-362 | — | |
|
Windows
Untrusted pointer dereference in Windows Network File System allows an authorized attacker to disclose information locally.
|
CVE-2026-102186 | 4.7 | CWE-822 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd()
Memory hot rem…
|
CVE-2025-38681 | 4.7 | CWE-362 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
net: mvpp2: Prevent parser TCAM memory corruption
Protect the parser TCAM/SRAM …
|
CVE-2025-22060 | 4.7 | CWE-367 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
net: dsa: improve shutdown sequence
Alexander Sverdlin presents 2 problems duri…
|
CVE-2024-49998 | 4.7 | CWE-367 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
ipv4: Fix uninit-value access in __ip_make_skb()
KMSAN reported uninit-value ac…
|
CVE-2024-36927 | 4.7 | CWE-362 | — | |
|
Windows
Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack.
|
CVE-2026-88226 | 4.6 | CWE-125 | — | |
|
Windows
Buffer over-read in Windows RNDIS allows an unauthorized attacker to disclose information with a physical attack.
|
CVE-2026-83788 | 4.6 | CWE-126 | — | |
|
Windows
Out-of-bounds read in Windows CD-ROM Driver allows an unauthorized attacker to disclose information with a physical attack.
|
CVE-2026-78508 | 4.6 | CWE-125 | — | |
|
Windows
Out-of-bounds read in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information with a physical attack.
|
CVE-2026-78452 | 4.6 | CWE-125 | — | |
|
Windows
Heap-based buffer overflow in Windows RNDIS allows an unauthorized attacker to disclose information with a physical attack.
|
CVE-2026-69548 | 4.6 | CWE-122 | — | |
|
Windows
Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack.
|
CVE-2026-69381 | 4.6 | CWE-125 | — | |
|
Windows
Buffer over-read in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack.
|
CVE-2026-61350 | 4.6 | CWE-126 | — | |
|
Windows
Improper certificate validation in Windows Hello allows an authorized attacker to bypass a security feature locally.
|
CVE-2026-83926 | 4.4 | CWE-295 | — | |
|
Windows
Uncontrolled search path element in Windows Hello allows an authorized attacker to bypass a security feature locally.
|
CVE-2026-72980 | 4.4 | CWE-427 | — | |
|
Windows
Incorrect authorization in Windows Hello allows an authorized attacker to bypass a security feature locally.
|
CVE-2026-70280 | 4.4 | CWE-863 | — | |
|
Windows
Time-of-check time-of-use (toctou) race condition in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to bypass a se…
|
CVE-2026-70075 | 4.4 | CWE-367 | — | |
|
Windows
Dependency on vulnerable third-party component in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.
|
CVE-2026-69713 | 4.4 | — | — | |
|
Windows
No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.
|
CVE-2026-102221 | 4.4 | CWE-299 | — | |
|
Windows
Buffer over-read in Windows Storage allows an unauthorized attacker to disclose information with a physical attack.
|
CVE-2026-78516 | 4.3 | CWE-126 | — | |
|
Windows
Improper resolution of path equivalence in Windows URL Moniker allows an unauthorized attacker to bypass a security feature over a network.
|
CVE-2026-73019 | 4.3 | CWE-41 | — | |
|
Fortinet
A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all vers…
|
CVE-2026-59840 | 4.3 | CWE-126 | — | |
|
Apache HTTP
A memory calculation bug in mod_dav in Apache httpd 2.4.67 and earlier allows an attacker with permission to create WebDAV locks to crash server chil…
|
CVE-2026-42528 | 4.3 | CWE-789 | — | |
|
Fortinet
A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all vers…
|
CVE-2025-43892 | 4.3 | CWE-126 | — | |
|
Fortinet
An Exposure of Sensitive Information to an Unauthorized Actor vulnerability [CWE-200] vulnerability in Fortinet FortiOS 7.6.0, FortiOS 7.4.0 through …
|
CVE-2025-25250 | 4.3 | CWE-200 | — | |
|
nginx
When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate…
|
CVE-2025-23419 | 4.3 | CWE-863 | — | |
|
Windows
Incorrect authorization in Windows Hyper-V allows an authorized attacker to bypass a security feature over an adjacent network.
|
CVE-2026-83766 | 4.2 | CWE-863 | — | |
|
Windows
Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to bypass a security feature with a physical atta…
|
CVE-2026-70116 | 4.2 | CWE-121 | — | |
|
nginx
The Arkime live capture service (arkime-live) in Malcolm runs with network_mode: host, exposing port 8005 on all network interfaces (viewHost=0.0.0.0…
|
CVE-2026-107361 | 4.2 | CWE-288 | — | |
|
OpenSSH
In sftp in OpenSSH before 10.6, a server can trigger directory traversal (causing files to be written to unintended locations) during a recursive cop…
|
CVE-2026-106552 | 4.2 | CWE-23 | — | |
|
Apache HTTP
Deployment of wrong handler vulnerability in Apache HTTP Server allows the target of some internal redirects from CGI programs to also be treated as …
|
CVE-2026-42356 | 3.7 | CWE-430 | — | |
|
Node.js
msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, decoding a negative signed 64-bit integer modifies the correspon…
|
CVE-2026-107296 | 3.7 | CWE-471 | — | |
|
OpenSSH
In sshd and ssh in OpenSSH before 10.6, an LZ77 dictionary coder can be used even though this is contraindicated by the arXiv 2609.07709 "Crossing th…
|
CVE-2026-106582 | 3.7 | CWE-514 | — | |
|
OpenSSH
In sshd in OpenSSH before 10.6, the value "none" for a configuration option is sometimes interpreted as a filename but was intended to mean that a fe…
|
CVE-2026-106587 | 3.6 | CWE-843 | — | |
|
OpenSSH
ssh in OpenSSH before 10.1 allows the '\0' character in an ssh:// URI, potentially leading to code execution when a ProxyCommand is used.
|
CVE-2025-61985 | 3.6 | CWE-158 | — | |
|
OpenSSH
ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources, potentially leading to code…
|
CVE-2025-61984 | 3.6 | CWE-159 | — | |
|
Fortinet
An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability [CWE-113] vulnerability in Fortinet FortiOS 7.…
|
CVE-2025-62675 | 3.4 | CWE-113 | — | |
|
Fortinet
An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability [CWE-113] vulnerability in Fortinet FortiOS 7.…
|
CVE-2025-62826 | 3.1 | CWE-113 | — | |
|
OpenSSH
In sshd in OpenSSH through 10.6, in certain environments such as QNX 6 and SCO OpenServer 5, sshd-session can unexpectedly have root privileges. This…
|
CVE-2026-106589 | 2.9 | CWE-272 | — | |
|
Fortinet
A NULL Pointer Dereference vulnerability [CWE-476] vulnerability in Fortinet FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiPAM 1.9.0, Fort…
|
CVE-2026-84392 | 2.7 | CWE-476 | — | |
|
Fortinet
A insertion of sensitive information into log file vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4 all versions, FortiOS 7.2 all v…
|
CVE-2025-31514 | 2.7 | CWE-532 | — | |
|
OpenSSH
In sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not.
|
CVE-2026-73283 | 2.5 | CWE-670 | — | |
|
OpenSSH
In sshd in OpenSSH before 10.6, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not, a different…
|
CVE-2026-106586 | 2.5 | CWE-670 | — | |
|
OpenSSH
In ssh-keygen in OpenSSH before 10.6, certificates could have incorrect expiration times because of Daylight Saving mishandling. There can be a sligh…
|
CVE-2026-106584 | 2.5 | CWE-193 | — | |
|
OpenSSH
In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to injection.
|
CVE-2026-106583 | 2.5 | CWE-99 | — | |
|
Windows
A use of hard-coded cryptographic key vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.2, FortiClientWindows 7.2 all versions may allow…
|
CVE-2026-44278 | 2.3 | CWE-321 | — | |
|
Fortinet
A Double Free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.7, FortiOS 7.4 all versions, FortiOS 7.2 all versions, Fort…
|
CVE-2026-106175 | 2.3 | CWE-415 | — | |
|
OpenSSH
In sshd in OpenSSH before 10.6, GSSAPIAuthentication authentication state can incorrectly be persisted across authentication attempts.
|
CVE-2026-106555 | 2.2 | CWE-669 | — | |
|
OpenSSH
In sshd in OpenSSH before 10.6, credentials can incorrectly persist after failure of a GSSAPIAuthentication authentication attempt.
|
CVE-2026-106553 | 2.2 | CWE-669 | — | |
|
Fortinet
An Improper Privilege Management vulnerability [CWE-269] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.11, FortiOS…
|
CVE-2025-54821 | 1.9 | CWE-269 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix out-of-bounds read of sk_protocol in bpf_sock_destroy()
sk_protocol li…
|
CVE-2026-98384 | — | — | — |