주요 제품 취약점 (2,105건)
"Windows" 관련 CVE만 표시 중 · 필터 해제 ×
| 기술 | CVE | 심각도 | 유형 | KEV | 등재일 |
|---|---|---|---|---|---|
|
Windows
Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network.
|
CVE-2026-100202 | 9.8 | CWE-416 | — | |
|
Windows
SQLite 'sqldiff.exe' does not securely handle the way the Microsoft Windows C runtime converts Unicode characters to ANSI codepages. An attacker cou…
|
CVE-2025-71316 | 9.8 | CWE-176 | — | |
|
Windows
An issue was discovered in AnyDesk for Windows before 9.0.5, AnyDesk for macOS before 9.0.1, AnyDesk for Linux before 7.0.0, AnyDesk for iOS before 7…
|
CVE-2025-27918 | 9.8 | CWE-190 | — | |
|
Windows
SolarWinds Serv-U is affected by a broken access control vulnerability that could allow arbitrary file read and write, which can then be used to esca…
|
CVE-2026-28321 | 9.1 | CWE-284 | — | |
|
Windows
SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to privilege escalation. This issue requires …
|
CVE-2026-28317 | 9.1 | CWE-639 | — | |
|
Windows
SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to privilege escalation to a system administr…
|
CVE-2026-28316 | 9.1 | CWE-639 | — | |
|
Windows
SolarWinds Serv-U is affected by an insecure direct object reference vulnerability that leads to an account takeover. User authentication is required…
|
CVE-2026-28314 | 9.1 | CWE-639 | — | |
|
Windows
SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to SMTP hijacking leading to arbitrary accoun…
|
CVE-2026-28313 | 9.1 | CWE-639 | — | |
|
Windows
SolarWinds Serv-U is affected by a privilege escalation vulnerability. This would elevate a group’s access to system administrator and allow code exe…
|
CVE-2026-28312 | 9.1 | CWE-285 | — | |
|
Windows
SolarWinds Serv-U is affected by a privilege escalation vulnerability that allows a domain administrator to escalate their user type to that of a sys…
|
CVE-2026-28310 | 9.1 | CWE-862 | — | |
|
Windows
SolarWinds Serv-U is affected by a broken access control vulnerability that allows a domain administrator to create system administrator accounts. Th…
|
CVE-2026-28309 | 9.1 | CWE-862 | — | |
|
Windows
SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to remote code execution. Domain administrato…
|
CVE-2026-28308 | 9.1 | CWE-639 | — | |
|
Windows
SolarWinds Serv-U is affected by a privilege escalation vulnerability that allows a domain user group to be elevated into an administrator group. The…
|
CVE-2026-28307 | 9.1 | CWE-284 | — | |
|
Windows
SolarWinds Serv-U is affected by a privilege escalation vulnerability that allows a domain administrator to elevate their privileges to a system admi…
|
CVE-2026-28306 | 9.1 | CWE-284 | — | |
|
Windows
SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to remote code execution as root. A domain ac…
|
CVE-2026-28305 | 9.1 | CWE-639 | — | |
|
Windows
SolarWinds Serv-U is affected by a remote code execution vulnerability that, when exploited, can allow the arbitrary execution of code remotely as ro…
|
CVE-2026-28304 | 9.1 | CWE-284 | — | |
|
Windows
SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to privilege escalation and remote code execu…
|
CVE-2026-28302 | 9.1 | CWE-639 | — | |
|
Windows
Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker to perform spoofing over a network.
|
CVE-2026-85818 | 9.0 | CWE-347 | — | |
|
Windows
No cwe for this issue in Windows Schannel allows an unauthorized attacker to perform spoofing over a network.
|
CVE-2026-105008 | 9.0 | CWE-290 | — | |
|
Windows
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
|
CVE-2026-96952 | 8.8 | CWE-122 | — | |
|
Windows
Integer overflow or wraparound in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network.
|
CVE-2026-96943 | 8.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges locally.
|
CVE-2026-96917 | 8.8 | CWE-122 | — | |
|
Windows
Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
|
CVE-2026-96914 | 8.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
|
CVE-2026-96913 | 8.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network.
|
CVE-2026-96202 | 8.8 | CWE-122 | — | |
|
Windows
An improper access control vulnerability in TeamViewer Full Client, Host, and related affected modules on Windows, Linux, and macOS allows an authent…
|
CVE-2026-92370 | 8.8 | CWE-284 | — | |
|
Windows
Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.
|
CVE-2026-88159 | 8.8 | CWE-125 | — | |
|
Windows
Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
|
CVE-2026-88157 | 8.8 | CWE-122 | — | |
|
Windows
Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.
|
CVE-2026-88142 | 8.8 | CWE-122 | — | |
|
Windows
Out-of-bounds read in Windows Server for NFS allows an unauthorized attacker to execute code over a network.
|
CVE-2026-88115 | 8.8 | CWE-125 | — | |
|
Windows
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
|
CVE-2026-88073 | 8.8 | CWE-416 | — | |
|
Windows
Double free in Windows Shell allows an unauthorized attacker to execute code over a network.
|
CVE-2026-85936 | 8.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.
|
CVE-2026-85931 | 8.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows UI Immersive Server allows an authorized attacker to elevate privileges locally.
|
CVE-2026-85905 | 8.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows Print Spooler Components allows an unauthorized attacker to execute code over a network.
|
CVE-2026-85877 | 8.8 | CWE-122 | — | |
|
Windows
Reliance on untrusted inputs in a security decision in Windows PowerShell allows an unauthorized attacker to execute code over a network.
|
CVE-2026-85817 | 8.8 | CWE-807 | — | |
|
Windows
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
|
CVE-2026-85339 | 8.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
|
CVE-2026-83996 | 8.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
|
CVE-2026-83992 | 8.8 | CWE-122 | — | |
|
Windows
Stack-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network.
|
CVE-2026-83934 | 8.8 | CWE-121 | — | |
|
Windows
Out-of-bounds write in Windows GDI allows an unauthorized attacker to execute code over a network.
|
CVE-2026-83929 | 8.8 | CWE-787 | — | |
|
Windows
Out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to execute code over a network.
|
CVE-2026-83928 | 8.8 | CWE-306 | — | |
|
Windows
Relative path traversal in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
|
CVE-2026-83923 | 8.8 | CWE-23 | — | |
|
Windows
Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code over a network.
|
CVE-2026-83874 | 8.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows Partition Management Driver allows an unauthorized attacker to elevate privileges over a network.
|
CVE-2026-83851 | 8.8 | CWE-122 | — | |
|
Windows
Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network.
|
CVE-2026-83797 | 8.8 | CWE-125 | — | |
|
Windows
Heap-based buffer overflow in Windows SMB Client allows an unauthorized attacker to elevate privileges over a network.
|
CVE-2026-83789 | 8.8 | CWE-122 | — | |
|
Windows
Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-83784 | 8.8 | CWE-36 | — | |
|
Windows
Heap-based buffer overflow in Windows Bluetooth Service allows an unauthorized attacker to elevate privileges over an adjacent network.
|
CVE-2026-83777 | 8.8 | CWE-122 | — | |
|
Windows
Use after free in Windows Camera Frame Server Monitor allows an unauthorized attacker to elevate privileges over an adjacent network.
|
CVE-2026-83771 | 8.8 | CWE-416 | — | |
|
Windows
Improper control of generation of code ('code injection') in Windows Encrypting File System (EFS) allows an authorized attacker to execute code over …
|
CVE-2026-83759 | 8.8 | CWE-94 | — | |
|
Windows
Improper validation of syntactic correctness of input in Windows Hyper-V allows an authorized attacker to perform spoofing locally.
|
CVE-2026-83728 | 8.8 | CWE-1286 | — | |
|
Windows
Heap-based buffer overflow in Microsoft Windows Search Component allows an unauthorized attacker to execute code over a network.
|
CVE-2026-83725 | 8.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.
|
CVE-2026-83716 | 8.8 | CWE-122 | — | |
|
Windows
Stack-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
|
CVE-2026-83643 | 8.8 | CWE-121 | — | |
|
Windows
When password or public key authentication is used with the Windows port of wolfSSHd, the Windows logon token acquired for one authenticated connecti…
|
CVE-2026-83540 | 8.8 | CWE-287 | — | |
|
Windows
Heap-based buffer overflow in Windows Image Acquisition allows an unauthorized attacker to execute code over a network.
|
CVE-2026-83523 | 8.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network.
|
CVE-2026-81352 | 8.8 | CWE-122 | — | |
|
Windows
Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-80096 | 8.8 | CWE-125 | — | |
|
Windows
Untrusted pointer dereference in Windows Hyper-V allows an authorized attacker to execute code locally.
|
CVE-2026-80083 | 8.8 | CWE-822 | — |