주요 제품 취약점 (3,481건)

기술	CVE	심각도	유형	등재일
Windows Out-of-bounds read in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information with a physical attack.	CVE-2026-78452	4.6	CWE-125	—
Windows Heap-based buffer overflow in Windows RNDIS allows an unauthorized attacker to disclose information with a physical attack.	CVE-2026-69548	4.6	CWE-122	—
Windows Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack.	CVE-2026-69381	4.6	CWE-125	—
Windows Buffer over-read in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack.	CVE-2026-61350	4.6	CWE-126	—
Windows Improper certificate validation in Windows Hello allows an authorized attacker to bypass a security feature locally.	CVE-2026-83926	4.4	CWE-295	—
Windows Uncontrolled search path element in Windows Hello allows an authorized attacker to bypass a security feature locally.	CVE-2026-72980	4.4	CWE-427	—
Windows Incorrect authorization in Windows Hello allows an authorized attacker to bypass a security feature locally.	CVE-2026-70280	4.4	CWE-863	—
Windows Time-of-check time-of-use (toctou) race condition in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to bypass a se…	CVE-2026-70075	4.4	CWE-367	—
Windows Dependency on vulnerable third-party component in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.	CVE-2026-69713	4.4	—	—
Windows No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.	CVE-2026-102221	4.4	CWE-299	—
Windows Buffer over-read in Windows Storage allows an unauthorized attacker to disclose information with a physical attack.	CVE-2026-78516	4.3	CWE-126	—
Windows Improper resolution of path equivalence in Windows URL Moniker allows an unauthorized attacker to bypass a security feature over a network.	CVE-2026-73019	4.3	CWE-41	—
Fortinet A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all vers…	CVE-2026-59840	4.3	CWE-126	—
Apache HTTP A memory calculation bug in mod_dav in Apache httpd 2.4.67 and earlier allows an attacker with permission to create WebDAV locks to crash server chil…	CVE-2026-42528	4.3	CWE-789	—
Fortinet A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all vers…	CVE-2025-43892	4.3	CWE-126	—
Fortinet An Exposure of Sensitive Information to an Unauthorized Actor vulnerability [CWE-200] vulnerability in Fortinet FortiOS 7.6.0, FortiOS 7.4.0 through …	CVE-2025-25250	4.3	CWE-200	—
nginx When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate…	CVE-2025-23419	4.3	CWE-863	—
Windows Incorrect authorization in Windows Hyper-V allows an authorized attacker to bypass a security feature over an adjacent network.	CVE-2026-83766	4.2	CWE-863	—
Windows Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to bypass a security feature with a physical atta…	CVE-2026-70116	4.2	CWE-121	—
nginx The Arkime live capture service (arkime-live) in Malcolm runs with network_mode: host, exposing port 8005 on all network interfaces (viewHost=0.0.0.0…	CVE-2026-107361	4.2	CWE-288	—
OpenSSH In sftp in OpenSSH before 10.6, a server can trigger directory traversal (causing files to be written to unintended locations) during a recursive cop…	CVE-2026-106552	4.2	CWE-23	—
Apache HTTP Deployment of wrong handler vulnerability in Apache HTTP Server allows the target of some internal redirects from CGI programs to also be treated as …	CVE-2026-42356	3.7	CWE-430	—
Node.js msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, decoding a negative signed 64-bit integer modifies the correspon…	CVE-2026-107296	3.7	CWE-471	—
OpenSSH In sshd and ssh in OpenSSH before 10.6, an LZ77 dictionary coder can be used even though this is contraindicated by the arXiv 2609.07709 "Crossing th…	CVE-2026-106582	3.7	CWE-514	—
OpenSSH In sshd in OpenSSH before 10.6, the value "none" for a configuration option is sometimes interpreted as a filename but was intended to mean that a fe…	CVE-2026-106587	3.6	CWE-843	—
OpenSSH ssh in OpenSSH before 10.1 allows the '\0' character in an ssh:// URI, potentially leading to code execution when a ProxyCommand is used.	CVE-2025-61985	3.6	CWE-158	—
OpenSSH ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources, potentially leading to code…	CVE-2025-61984	3.6	CWE-159	—
Fortinet An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability [CWE-113] vulnerability in Fortinet FortiOS 7.…	CVE-2025-62675	3.4	CWE-113	—
Fortinet An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability [CWE-113] vulnerability in Fortinet FortiOS 7.…	CVE-2025-62826	3.1	CWE-113	—
OpenSSH In sshd in OpenSSH through 10.6, in certain environments such as QNX 6 and SCO OpenServer 5, sshd-session can unexpectedly have root privileges. This…	CVE-2026-106589	2.9	CWE-272	—
Fortinet A NULL Pointer Dereference vulnerability [CWE-476] vulnerability in Fortinet FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiPAM 1.9.0, Fort…	CVE-2026-84392	2.7	CWE-476	—
Fortinet A insertion of sensitive information into log file vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4 all versions, FortiOS 7.2 all v…	CVE-2025-31514	2.7	CWE-532	—
OpenSSH In sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not.	CVE-2026-73283	2.5	CWE-670	—
OpenSSH In sshd in OpenSSH before 10.6, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not, a different…	CVE-2026-106586	2.5	CWE-670	—
OpenSSH In ssh-keygen in OpenSSH before 10.6, certificates could have incorrect expiration times because of Daylight Saving mishandling. There can be a sligh…	CVE-2026-106584	2.5	CWE-193	—
OpenSSH In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to injection.	CVE-2026-106583	2.5	CWE-99	—
Windows A use of hard-coded cryptographic key vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.2, FortiClientWindows 7.2 all versions may allow…	CVE-2026-44278	2.3	CWE-321	—
Fortinet A Double Free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.7, FortiOS 7.4 all versions, FortiOS 7.2 all versions, Fort…	CVE-2026-106175	2.3	CWE-415	—
OpenSSH In sshd in OpenSSH before 10.6, GSSAPIAuthentication authentication state can incorrectly be persisted across authentication attempts.	CVE-2026-106555	2.2	CWE-669	—
OpenSSH In sshd in OpenSSH before 10.6, credentials can incorrectly persist after failure of a GSSAPIAuthentication authentication attempt.	CVE-2026-106553	2.2	CWE-669	—
Fortinet An Improper Privilege Management vulnerability [CWE-269] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.11, FortiOS…	CVE-2025-54821	1.9	CWE-269	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: bpf: Fix out-of-bounds read of sk_protocol in bpf_sock_destroy() sk_protocol li…	CVE-2026-98384	—	—	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: bpf: Disallow bpf_skb_pull_data() for LWT_SEG6LOCAL An LWT_SEG6LOCAL program ca…	CVE-2026-98383	—	—	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: bpf: Reject dev-bound-only programs on other devices __bpf_offload_dev_match() …	CVE-2026-98382	—	—	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: veth: manage XDP program pointers during channel resize veth_set_channels() tea…	CVE-2026-98381	—	—	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: net/sched: reject IDR error pointers when deleting actions tcf_action_delete() …	CVE-2026-98380	—	—	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: netfilter: ip6t_rpfilter: reject routes without inet6_dev ip6_route_lookup() ca…	CVE-2026-98379	—	—	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: bpf: Skip unsettled links in link iterator bpf_link_prime() inserts a link into…	CVE-2026-98378	—	—	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: vlan: require the MAC header to be present in __vlan_insert_inner_tag() __vlan_…	CVE-2026-98377	—	—	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: tcp: fix use-after-free of retransmit_skb_hint in tcp_send_synack() When tcp_se…	CVE-2026-98374	—	—	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: xfrm: fix compat ALLOCSPI request use-after-free xfrm_state_netlink() builds th…	CVE-2026-98370	—	—	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS scpi_dvfs_get_inf…	CVE-2026-98363	—	—	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: clk: scpi: bound-check DVFS index in scpi_dvfs_recalc_rate dvfs_get_idx() may r…	CVE-2026-98362	—	—	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: IB/iser: reject a remote invalidation of an unregistered direction A write comm…	CVE-2026-98358	—	—	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs: guard against null kobj name In the client, if `init_path()` errors,…	CVE-2026-98355	—	—	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: RDMA/mad: Fix receive buffer leak when PKey enforcement fails ib_mad_complete_r…	CVE-2026-98354	—	—	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables Locked QP and CQ l…	CVE-2026-98353	—	—	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-clt: Fix CQ pool leak when connect is interrupted The client borrows …	CVE-2026-98352	—	—	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: wifi: virt_wifi: free skb when disconnected When the simulated link is disconne…	CVE-2026-98351	—	—	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: IB/IPoIB: Avoid restoring OPER_UP after multicast flush ipoib_ib_dev_flush_ligh…	CVE-2026-98347	—	—	—