주요 제품 취약점 (3,475건)
Windows
infra
2105건
KEV 293 · 최근 2026-10-13
Linux 커널
infra
908건
KEV 31 · 최근 2026-10-28
Cisco IOS
infra
58건
KEV 44 · 최근 2026-07-13
Ivanti
infra
45건
KEV 36 · 최근 2026-10-13
Microsoft Exchange
infra
43건
KEV 20 · 최근 2026-05-15
Fortinet
infra
41건
KEV 22 · 최근 2026-10-16
Apache HTTP
infra
33건
KEV 11 · 최근 2026-08-24
Citrix NetScaler
infra
31건
KEV 16 · 최근 2026-10-04
Apache Tomcat
infra
30건
KEV 8 · 최근 2026-08-04
OpenSSH
infra
30건
KEV 3 · 최근 2025-10-02
PostgreSQL
finance
28건
KEV 2 · 최근 2026-09-02
Node.js
infra
24건
KEV 2 · 최근 2025-01-14
nginx
infra
16건
KEV 0
Palo Alto PAN-OS
infra
15건
KEV 14 · 최근 2026-10-14
VMware vCenter
infra
13건
KEV 12 · 최근 2026-08-18
Atlassian Confluence
infra
10건
KEV 10 · 최근 2026-10-15
MySQL/MariaDB
finance
10건
KEV 2 · 최근 2024-11-07
curl
infra
8건
KEV 1 · 최근 2023-05-12
OpenSSL
infra
8건
KEV 1 · 최근 2022-05-04
Redis
infra
7건
KEV 3 · 최근 2026-05-26
VMware ESXi
infra
7건
KEV 7 · 최근 2025-03-04
wolfSSL
finance
3건
KEV 0
Apache Spark
finance
1건
KEV 1 · 최근 2023-03-07
Spring Framework
finance
1건
KEV 1 · 최근 2022-04-04
| 기술 | CVE | 심각도 | 유형 | KEV | 등재일 |
|---|---|---|---|---|---|
|
Windows
Microsoft Windows
Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows …
|
CVE-2014-4114 | 7.8 | CWE-20 | KEV | 2022-03-03 |
|
Windows
Microsoft Windows
NDProxy.sys in the kernel in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a crafted application, as…
|
CVE-2013-5065 | 7.8 | CWE-20 | KEV | 2022-03-03 |
|
Windows
Adobe Flash Player
Unspecified vulnerability in Adobe Flash Player before 11.3.300.271 on Windows and Mac OS X and before 11.2.202.238 on Linux allows remote attackers …
|
CVE-2012-1535 | 7.8 | CWE-20 | KEV | 2022-03-03 |
|
Windows
Microsoft Windows
The kernel in Microsoft Windows NT 3.1 through Windows 7, including Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista …
|
CVE-2010-0232 | 7.8 | — | KEV | 2022-03-03 |
|
Windows
Microsoft Windows
The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 does not properly validate c…
|
CVE-2009-1123 | 7.8 | CWE-20 | KEV | 2022-03-03 |
|
Windows
Microsoft Windows
The POSIX component of Microsoft Windows NT and Windows 2000 allows local users to execute arbitrary code via certain parameters, possibly by modifyi…
|
CVE-2004-0210 | 7.8 | CWE-120 | KEV | 2022-03-03 |
|
Windows
Microsoft Windows
smss.exe debugging subsystem in Windows NT and Windows 2000 does not properly authenticate programs that connect to other programs, which allows loca…
|
CVE-2002-0367 | 7.8 | CWE-269 | KEV | 2022-03-03 |
|
Windows
Microsoft Windows
Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows …
|
CVE-2014-6352 | 7.8 | — | KEV | 2022-02-25 |
|
Windows
Microsoft Graphics Component
GDI+ in Microsoft Windows Vista SP2 and Server 2008 SP2; Office 2003 SP3, 2007 SP3, and 2010 SP1 and SP2; Office Compatibility Pack SP3; and Lync 201…
|
CVE-2013-3906 | 7.8 | CWE-94 | KEV | 2022-02-15 |
|
Windows
Microsoft Windows
An elevation of privilege vulnerability exists because of overly permissive Access Control Lists (ACLs) on multiple system files, including the Secur…
|
CVE-2021-36934 | 7.8 | — | KEV | 2022-02-10 |
|
Windows
Microsoft Win32k
The kernel-mode drivers in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1,…
|
CVE-2017-0263 | 7.8 | CWE-416 | KEV | 2022-02-10 |
|
Windows
Microsoft Windows
An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperly handles symbolic links, aka…
|
CVE-2020-0787 | 7.8 | CWE-59 | KEV | 2022-01-28 |
|
Windows
Microsoft Win32k
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation…
|
CVE-2018-8453 | 7.8 | — | KEV | 2022-01-21 |
|
Windows
Microsoft Win32k
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation…
|
CVE-2019-1458 | 7.8 | — | KEV | 2022-01-10 |
|
Linux 커널
Linux Kernel
In the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recording of the credentials of a process that wants to create a ptr…
|
CVE-2019-13272 | 7.8 | — | KEV | 2021-12-10 |
|
Windows
Microsoft Windows
Win32k Elevation of Privilege Vulnerability
|
CVE-2021-40449 | 7.8 | CWE-416 | KEV | 2021-11-17 |
|
Windows
Microsoft Windows
Windows Common Log File System Driver Elevation of Privilege Vulnerability
|
CVE-2021-36955 | 7.8 | — | KEV | 2021-11-03 |
|
Windows
Microsoft Windows
Windows Update Medic Service Elevation of Privilege Vulnerability
|
CVE-2021-36948 | 7.8 | CWE-269 | KEV | 2021-11-03 |
|
Windows
Microsoft Windows
Windows Kernel Elevation of Privilege Vulnerability
|
CVE-2021-33771 | 7.8 | CWE-119 | KEV | 2021-11-03 |
|
Windows
Microsoft Windows
Windows Kernel Elevation of Privilege Vulnerability
|
CVE-2021-31979 | 7.8 | CWE-119 | KEV | 2021-11-03 |
|
Windows
Microsoft Windows
Windows NTFS Elevation of Privilege Vulnerability
|
CVE-2021-31956 | 7.8 | CWE-191 | KEV | 2021-11-03 |
|
Microsoft Exchange
Microsoft Exchange Server
Microsoft Exchange Server Remote Code Execution Vulnerability
|
CVE-2021-27065 | 7.8 | CWE-22 | KEV | 2021-11-03 |
|
Microsoft Exchange
Microsoft Exchange Server
Microsoft Exchange Server Remote Code Execution Vulnerability
|
CVE-2021-26858 | 7.8 | — | KEV | 2021-11-03 |
|
Microsoft Exchange
Microsoft Exchange Server
Microsoft Exchange Server Remote Code Execution Vulnerability
|
CVE-2021-26857 | 7.8 | CWE-502 | KEV | 2021-11-03 |
|
Windows
Microsoft Win32k
Windows Win32k Elevation of Privilege Vulnerability
|
CVE-2021-1732 | 7.8 | CWE-787 | KEV | 2021-11-03 |
|
Windows
Microsoft Windows
Windows Print Spooler Remote Code Execution Vulnerability
|
CVE-2021-1675 | 7.8 | CWE-269 | KEV | 2021-11-03 |
|
Windows
Trend Micro Apex One, OfficeScan, and Worry-Free Business Security
A vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 on Microsoft Windows may allow an attacker to manipulate a particul…
|
CVE-2020-24557 | 7.8 | — | KEV | 2021-11-03 |
|
Windows
Microsoft Windows
Windows Kernel Local Elevation of Privilege Vulnerability
|
CVE-2020-17087 | 7.8 | CWE-131 | KEV | 2021-11-03 |
|
Windows
Microsoft Windows
A spoofing vulnerability exists when Windows incorrectly validates file signatures. An attacker who successfully exploited this vulnerability could b…
|
CVE-2020-1464 | 7.8 | CWE-347 | KEV | 2021-11-03 |
|
Windows
Microsoft Windows
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of P…
|
CVE-2020-0986 | 7.8 | CWE-787 | KEV | 2021-11-03 |
|
Windows
Microsoft Windows
A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted …
|
CVE-2020-0938 | 7.8 | CWE-787 | KEV | 2021-11-03 |
|
Windows
Microsoft Windows
An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'Windows Installer Elevation of…
|
CVE-2020-0683 | 7.8 | CWE-59 | KEV | 2021-11-03 |
|
Linux 커널
Android Android Kernel
A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit thi…
|
CVE-2019-2215 | 7.8 | CWE-416 | KEV | 2021-11-03 |
|
Windows
Microsoft Windows
An elevation of privilege vulnerability exists in the way that ws2ifsl.sys (Winsock) handles objects in memory, aka 'Windows Elevation of Privilege V…
|
CVE-2019-1215 | 7.8 | CWE-269 | KEV | 2021-11-03 |
|
Windows
Microsoft Windows
An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory, aka 'Windo…
|
CVE-2019-1214 | 7.8 | CWE-119 | KEV | 2021-11-03 |
|
Windows
Microsoft Windows
An elevation of privilege vulnerability exists in the way Windows Error Reporting (WER) handles files, aka 'Windows Error Reporting Elevation of Priv…
|
CVE-2019-0863 | 7.8 | — | KEV | 2021-11-03 |
|
Windows
Microsoft Win32k
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation…
|
CVE-2019-0859 | 7.8 | — | KEV | 2021-11-03 |
|
Windows
Microsoft Win32k
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation…
|
CVE-2019-0808 | 7.8 | — | KEV | 2021-11-03 |
|
Windows
Microsoft Win32k
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation…
|
CVE-2019-0803 | 7.8 | — | KEV | 2021-11-03 |
|
Windows
Microsoft Win32k
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation…
|
CVE-2019-0797 | 7.8 | — | KEV | 2021-11-03 |
|
Apache HTTP
Apache HTTP Server
In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileged child processes or threads …
|
CVE-2019-0211 | 7.8 | CWE-416 | KEV | 2021-11-03 |
|
Windows
Microsoft Office and WordPad
Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Windows Vista SP2, Windows Server 2…
|
CVE-2017-0199 | 7.8 | — | KEV | 2021-11-03 |
|
Windows
Microsoft Win32k
The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and …
|
CVE-2016-7255 | 7.8 | — | KEV | 2021-11-03 |
|
Windows
Microsoft Windows
Media Center in Microsoft Windows Vista SP2, Windows 7 SP1, and Windows 8.1 allows remote attackers to execute arbitrary code via a crafted Media Cen…
|
CVE-2016-0185 | 7.8 | — | KEV | 2021-11-03 |
|
Windows
Microsoft Win32k
The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R…
|
CVE-2016-0167 | 7.8 | — | KEV | 2021-11-03 |
|
Cisco IOS
Cisco IOS and IOS XE
A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow the following:…
|
CVE-2025-20352 | 7.7 | CWE-121 | KEV | 2025-09-29 |
|
Windows
Microsoft Windows
Windows SmartScreen Security Feature Bypass Vulnerability
|
CVE-2024-21351 | 7.6 | CWE-94 | KEV | 2024-02-13 |
|
Apache Tomcat
Missing Encryption of Sensitive Data vulnerability in Apache Tomcat due to the fix for CVE-2026-29146 allowing the bypass of the EncryptInterceptor.
…
|
CVE-2026-34486 | 7.5 | CWE-311 | KEV | 2026-08-04 |
|
Windows
Prettier eslint-config-prettier
eslint-config-prettier 8.10.1, 9.1.1, 10.1.6, and 10.1.7 has embedded malicious code for a supply chain compromise. Installing an affected package ex…
|
CVE-2025-54313 | 7.5 | CWE-506 | KEV | 2026-01-22 |
|
Citrix NetScaler
Citrix NetScaler ADC and Gateway
Insufficient input validation leading to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Prox…
|
CVE-2025-5777 | 7.5 | CWE-125 | KEV | 2025-07-10 |
|
Windows
Microsoft Windows
Access of resource using incompatible type ('type confusion') in Microsoft Scripting Engine allows an unauthorized attacker to execute code over a ne…
|
CVE-2025-30397 | 7.5 | CWE-843 | KEV | 2025-05-13 |
|
Palo Alto PAN-OS
Palo Alto Networks PAN-OS
A Denial of Service vulnerability in the DNS Security feature of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to send a mali…
|
CVE-2024-3393 | 7.5 | CWE-754 | KEV | 2024-12-30 |
|
VMware vCenter
VMware vCenter Server
The vCenter Server contains a privilege escalation vulnerability. A malicious actor with network access to vCenter Server may trigger this vulnerabil…
|
CVE-2024-38813 | 7.5 | CWE-250 | KEV | 2024-11-20 |
|
Palo Alto PAN-OS
Palo Alto Networks Expedition
An OS command injection vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to run arbitrary OS commands as root in Exp…
|
CVE-2024-9463 | 7.5 | CWE-78 | KEV | 2024-11-14 |
|
Windows
Microsoft Windows
Scripting Engine Memory Corruption Vulnerability
|
CVE-2024-38178 | 7.5 | CWE-843 | KEV | 2024-08-13 |
|
Windows
Microsoft Windows
Windows MSHTML Platform Spoofing Vulnerability
|
CVE-2024-38112 | 7.5 | CWE-451 | KEV | 2024-07-09 |
|
Windows
Microsoft Windows
Windows Search Remote Code Execution Vulnerability
|
CVE-2023-36884 | 7.5 | CWE-362 | KEV | 2023-07-17 |
|
Windows
Mozilla Firefox, Firefox ESR, and Thunderbird
A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this vulnerability has been discovered in the wild targeting…
|
CVE-2016-9079 | 7.5 | CWE-416 | KEV | 2023-06-22 |
|
Cisco IOS
Cisco IOS, IOS XR, and IOS XE
The server IKEv1 implementation in Cisco IOS 12.2 through 12.4 and 15.0 through 15.6, IOS XE through 3.18S, IOS XR 4.3.x and 5.0.x through 5.2.x, and…
|
CVE-2016-6415 | 7.5 | CWE-200 | KEV | 2023-05-19 |
|
Windows
Microsoft SMBv1 server
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Win…
|
CVE-2017-0147 | 7.5 | — | KEV | 2022-05-24 |