주요 제품 취약점 (3,432건)
Windows
infra
2105건
KEV 293 · 최근 2026-10-13
Linux 커널
infra
908건
KEV 31 · 최근 2026-10-28
Cisco IOS
infra
58건
KEV 44 · 최근 2026-07-13
Ivanti
infra
45건
KEV 36 · 최근 2026-10-13
Microsoft Exchange
infra
43건
KEV 20 · 최근 2026-05-15
Fortinet
infra
41건
KEV 22 · 최근 2026-10-16
Apache HTTP
infra
33건
KEV 11 · 최근 2026-08-24
Citrix NetScaler
infra
31건
KEV 16 · 최근 2026-10-04
Apache Tomcat
infra
30건
KEV 8 · 최근 2026-08-04
OpenSSH
infra
30건
KEV 3 · 최근 2025-10-02
Node.js
infra
24건
KEV 2 · 최근 2025-01-14
nginx
infra
16건
KEV 0
Palo Alto PAN-OS
infra
15건
KEV 14 · 최근 2026-10-14
VMware vCenter
infra
13건
KEV 12 · 최근 2026-08-18
Atlassian Confluence
infra
10건
KEV 10 · 최근 2026-10-15
curl
infra
8건
KEV 1 · 최근 2023-05-12
OpenSSL
infra
8건
KEV 1 · 최근 2022-05-04
Redis
infra
7건
KEV 3 · 최근 2026-05-26
VMware ESXi
infra
7건
KEV 7 · 최근 2025-03-04
| 기술 | CVE | 심각도 | 유형 | KEV | 등재일 |
|---|---|---|---|---|---|
|
Windows
Microsoft Windows
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
|
CVE-2022-34713 | 7.8 | — | KEV | 2022-08-09 |
|
Windows
Microsoft Windows
Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
|
CVE-2022-22047 | 7.8 | CWE-426 | KEV | 2022-07-12 |
|
Windows
Microsoft Windows
A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who succ…
|
CVE-2022-30190 | 7.8 | — | KEV | 2022-06-14 |
|
Windows
Microsoft Windows
The Authenticode Signature Verification function in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008…
|
CVE-2012-0151 | 7.8 | CWE-20 | KEV | 2022-06-08 |
|
Windows
Adobe Flash Player
Unspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windows, Mac OS X, Linux, and Solaris; 10.1.106.16 and earlier on Android;…
|
CVE-2011-0609 | 7.8 | — | KEV | 2022-06-08 |
|
Windows
Adobe Flash Player
Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before 2.0.2.12610; and Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x …
|
CVE-2010-1297 | 7.8 | CWE-787 | KEV | 2022-06-08 |
|
Windows
Adobe Acrobat and Reader
Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Wi…
|
CVE-2009-4324 | 7.8 | CWE-416 | KEV | 2022-06-08 |
|
Windows
Microsoft Windows
Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows S…
|
CVE-2016-3393 | 7.8 | — | KEV | 2022-05-25 |
|
Windows
Microsoft Windows
The kernel in Microsoft Windows 10 Gold allows local users to gain privileges via a crafted application, aka "Windows Kernel Memory Elevation of Priv…
|
CVE-2015-6175 | 7.8 | — | KEV | 2022-05-25 |
|
Windows
Microsoft Windows
The Windows DirectWrite library, as used in Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2; Office 2007 SP3 and 2010 SP2; Liv…
|
CVE-2015-1671 | 7.8 | — | KEV | 2022-05-25 |
|
Windows
Adobe Flash Player
Adobe Flash Player before 13.0.0.262 and 14.x through 16.x before 16.0.0.287 on Windows and OS X and before 11.2.202.438 on Linux does not properly r…
|
CVE-2015-0310 | 7.8 | CWE-200 | KEV | 2022-05-25 |
|
Windows
Microsoft Windows
Directory traversal vulnerability in the TS WebProxy (aka TSWbPrxy) component in Microsoft Windows Vista SP2, Windows 7 SP1, Windows Server 2008 R2 S…
|
CVE-2015-0016 | 7.8 | CWE-22 | KEV | 2022-05-25 |
|
Windows
Microsoft Input Method Editor (IME) Japanese
Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, and Office 2007 SP3, when IMJPDCT.EXE (aka I…
|
CVE-2014-4077 | 7.8 | — | KEV | 2022-05-25 |
|
Linux 커널
Linux Kernel
The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two different futex addresses, which …
|
CVE-2014-3153 | 7.8 | — | KEV | 2022-05-25 |
|
Windows
Microsoft Windows
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka "Windows Kernel Elevation of P…
|
CVE-2018-8611 | 7.8 | CWE-404 | KEV | 2022-05-24 |
|
Windows
Microsoft Windows
The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 20…
|
CVE-2017-0005 | 7.8 | CWE-119 | KEV | 2022-05-24 |
|
Windows
Microsoft Windows
An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation of Privile…
|
CVE-2020-1027 | 7.8 | CWE-787 | KEV | 2022-05-23 |
|
Windows
Microsoft Windows
An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in acc…
|
CVE-2019-1385 | 7.8 | CWE-59 | KEV | 2022-05-23 |
|
Windows
Microsoft Windows
An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation o…
|
CVE-2019-1130 | 7.8 | CWE-59 | KEV | 2022-05-23 |
|
Windows
Microsoft Windows
A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls, aka 'Microsoft splwow64 Elevation of Privilege Vulnera…
|
CVE-2019-0880 | 7.8 | — | KEV | 2022-05-23 |
|
Windows
Microsoft Win32k
An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys, aka "Windows Win32k Elevation of Privilege Vulner…
|
CVE-2018-8589 | 7.8 | — | KEV | 2022-05-23 |
|
Windows
Microsoft Win32k
win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Win…
|
CVE-2014-4113 | 7.8 | — | KEV | 2022-05-04 |
|
Linux 커널
Linux Kernel
A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_…
|
CVE-2022-0847 | 7.8 | CWE-665 | KEV | 2022-04-25 |
|
Windows
Microsoft Windows
Windows Print Spooler Elevation of Privilege Vulnerability
|
CVE-2022-22718 | 7.8 | CWE-269 | KEV | 2022-04-19 |
|
Windows
Microsoft Windows
Windows Common Log File System Driver Elevation of Privilege Vulnerability
|
CVE-2022-24521 | 7.8 | CWE-787 | KEV | 2022-04-13 |
|
Windows
Adobe Flash Player
Stack-based buffer overflow in Adobe Flash Player before 13.0.0.259 and 14.x and 15.x before 15.0.0.246 on Windows and OS X and before 11.2.202.425 o…
|
CVE-2014-9163 | 7.8 | CWE-121 | KEV | 2022-04-13 |
|
Windows
Microsoft Windows
Windows User Profile Service Elevation of Privilege Vulnerability
|
CVE-2021-34484 | 7.8 | CWE-269 | KEV | 2022-03-31 |
|
Windows
Microsoft Windows
Windows Event Tracing Elevation of Privilege Vulnerability
|
CVE-2021-34486 | 7.8 | CWE-416 | KEV | 2022-03-28 |
|
Windows
Microsoft Windows
An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC), aka "Windows ALPC Eleva…
|
CVE-2018-8440 | 7.8 | — | KEV | 2022-03-28 |
|
Windows
Microsoft DirectX Graphics Kernel (DXGKRNL)
An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX G…
|
CVE-2018-8406 | 7.8 | CWE-404 | KEV | 2022-03-28 |
|
Windows
Microsoft DirectX Graphics Kernel (DXGKRNL)
An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX G…
|
CVE-2018-8405 | 7.8 | CWE-404 | KEV | 2022-03-28 |
|
Windows
Microsoft Client-Server Run-time Subsystem (CSRSS)
The Client-Server Run-time Subsystem (CSRSS) in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 …
|
CVE-2016-0151 | 7.8 | CWE-269 | KEV | 2022-03-28 |
|
Windows
Microsoft Windows
The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows local users to gain privileges via a crafted …
|
CVE-2016-0040 | 7.8 | — | KEV | 2022-03-28 |
|
Windows
Microsoft Win32k
The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows V…
|
CVE-2013-3660 | 7.8 | CWE-119 | KEV | 2022-03-28 |
|
Windows
Microsoft Ancillary Function Driver (afd.sys)
afd.sys in the Ancillary Function Driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly validate user-mode input passed to…
|
CVE-2011-2005 | 7.8 | — | KEV | 2022-03-28 |
|
Windows
Microsoft Windows
Stack-based buffer overflow in the RtlQueryRegistryValues function in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Window…
|
CVE-2010-4398 | 7.8 | CWE-787 | KEV | 2022-03-28 |
|
Windows
Microsoft Windows
Windows Print Spooler Elevation of Privilege Vulnerability
|
CVE-2022-21999 | 7.8 | CWE-22 | KEV | 2022-03-25 |
|
Windows
Microsoft Windows
An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly allows COM object creation, aka 'Wi…
|
CVE-2019-1405 | 7.8 | CWE-269 | KEV | 2022-03-15 |
|
Windows
Microsoft Windows
An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka 'Microsoft Windows Elevation of Privilege…
|
CVE-2019-1322 | 7.8 | — | KEV | 2022-03-15 |
|
Windows
Microsoft Windows
An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles hard links, aka 'Windows Error Reporting Manag…
|
CVE-2019-1315 | 7.8 | CWE-59 | KEV | 2022-03-15 |
|
Windows
Microsoft Windows
An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.To exploit this vulnerability, an…
|
CVE-2019-1253 | 7.8 | CWE-59 | KEV | 2022-03-15 |
|
Windows
Microsoft Win32k
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation…
|
CVE-2019-1132 | 7.8 | — | KEV | 2022-03-15 |
|
Windows
Microsoft Windows
An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation o…
|
CVE-2019-1129 | 7.8 | CWE-59 | KEV | 2022-03-15 |
|
Windows
Microsoft Windows
An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links. An attacker who successf…
|
CVE-2019-1064 | 7.8 | CWE-59 | KEV | 2022-03-15 |
|
Windows
Microsoft Windows
An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation o…
|
CVE-2019-0841 | 7.8 | CWE-59 | KEV | 2022-03-15 |
|
Windows
Microsoft Windows
An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka "Microsoft Windows Elevation of Privilege…
|
CVE-2019-0543 | 7.8 | CWE-287 | KEV | 2022-03-15 |
|
Windows
Microsoft Windows
The kernel-mode drivers in Transaction Manager in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1, Windows Se…
|
CVE-2017-0101 | 7.8 | CWE-119 | KEV | 2022-03-15 |
|
Windows
Microsoft Windows
The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and …
|
CVE-2016-3309 | 7.8 | — | KEV | 2022-03-15 |
|
Microsoft Exchange
Microsoft Malware Protection Engine
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Window…
|
CVE-2017-8540 | 7.8 | CWE-787 | KEV | 2022-03-03 |
|
Windows
Microsoft Malware Protection Engine
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Window…
|
CVE-2017-8540 | 7.8 | CWE-787 | KEV | 2022-03-03 |
|
Windows
Microsoft Graphics Device Interface (GDI)
The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 20…
|
CVE-2017-0001 | 7.8 | — | KEV | 2022-03-03 |
|
Windows
Microsoft Windows
The Secondary Logon Service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold …
|
CVE-2016-0099 | 7.8 | CWE-120 | KEV | 2022-03-03 |
|
Windows
Adobe Flash Player
Adobe Flash Player 18.x through 18.0.0.252 and 19.x through 19.0.0.207 on Windows and OS X and 11.x through 11.2.202.535 on Linux allows remote attac…
|
CVE-2015-7645 | 7.8 | — | KEV | 2022-03-03 |
|
Windows
Microsoft ATM Font Driver
ATMFD.DLL in the Adobe Type Manager Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows …
|
CVE-2015-2387 | 7.8 | CWE-787 | KEV | 2022-03-03 |
|
Windows
Microsoft Win32k
Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local users to gain privileges via …
|
CVE-2015-1701 | 7.8 | — | KEV | 2022-03-03 |
|
Windows
Microsoft Windows
Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows …
|
CVE-2014-4114 | 7.8 | CWE-20 | KEV | 2022-03-03 |
|
Windows
Microsoft Windows
NDProxy.sys in the kernel in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a crafted application, as…
|
CVE-2013-5065 | 7.8 | CWE-20 | KEV | 2022-03-03 |
|
Windows
Adobe Flash Player
Unspecified vulnerability in Adobe Flash Player before 11.3.300.271 on Windows and Mac OS X and before 11.2.202.238 on Linux allows remote attackers …
|
CVE-2012-1535 | 7.8 | CWE-20 | KEV | 2022-03-03 |
|
Windows
Microsoft Windows
The kernel in Microsoft Windows NT 3.1 through Windows 7, including Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista …
|
CVE-2010-0232 | 7.8 | — | KEV | 2022-03-03 |
|
Windows
Microsoft Windows
The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 does not properly validate c…
|
CVE-2009-1123 | 7.8 | CWE-20 | KEV | 2022-03-03 |