주요 제품 취약점 (2,105건)
"Windows" 관련 CVE만 표시 중 · 필터 해제 ×
| 기술 | CVE | 심각도 | 유형 | KEV | 등재일 |
|---|---|---|---|---|---|
|
Windows
Out-of-bounds write in Windows DNS allows an unauthorized attacker to execute code over an adjacent network.
|
CVE-2026-62817 | 8.8 | CWE-787 | — | |
|
Windows
Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network.
|
CVE-2026-62800 | 8.8 | CWE-122 | — | |
|
Windows
Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.
|
CVE-2026-62795 | 8.8 | CWE-416 | — | |
|
Windows
Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network.
|
CVE-2026-62790 | 8.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.
|
CVE-2026-62785 | 8.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
|
CVE-2026-62744 | 8.8 | CWE-122 | — | |
|
Windows
Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
|
CVE-2026-62706 | 8.8 | CWE-121 | — | |
|
Windows
A remotely exploitable buffer overflow bug can cause a local and kernel denial-of-service attack on affected versions of Zscaler Client Connector on …
|
CVE-2026-59565 | 8.8 | CWE-229 | — | |
|
Windows
Improper neutralization of special elements used in a command ('command injection') in Windows Active Directory allows an unauthorized attacker to ex…
|
CVE-2026-49179 | 8.8 | CWE-77 | — | |
|
Windows
Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
|
CVE-2026-108471 | 8.8 | CWE-822 | — | |
|
Windows
Improper resolution of path equivalence in Windows SmartScreen allows an unauthorized attacker to bypass a security feature over a network.
|
CVE-2026-108463 | 8.8 | CWE-41 | — | |
|
Windows
Integer overflow or wraparound in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network.
|
CVE-2026-108400 | 8.8 | CWE-190 | — | |
|
Windows
Improper access control in Windows Hyper-V allows an authorized attacker to execute code locally.
|
CVE-2026-105733 | 8.8 | — | — | |
|
Windows
Out-of-bounds read in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
|
CVE-2026-102225 | 8.8 | CWE-125 | — | |
|
Windows
Use after free in Windows Hyper-V allows an authorized attacker to execute code locally.
|
CVE-2026-102214 | 8.8 | CWE-416 | — | |
|
Windows
Heap-based buffer overflow in Windows Media Video Decoder allows an unauthorized attacker to execute code over a network.
|
CVE-2026-100220 | 8.8 | CWE-122 | — | |
|
Windows
Improper privilege management in Windows Internet (wininet.dll) allows an authorized attacker to perform spoofing locally.
|
CVE-2026-83845 | 8.4 | CWE-290 | — | |
|
Windows
Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally.
|
CVE-2026-77503 | 8.4 | CWE-125 | — | |
|
Windows
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
|
CVE-2026-69638 | 8.4 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
|
CVE-2026-69479 | 8.4 | CWE-122 | — | |
|
Windows
Buffer overflow in GPU in Google Chrome on on Windows prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to ex…
|
CVE-2026-84351 | 8.3 | CWE-121 | — | |
|
Windows
Out of bounds write in Crashpad in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer proc…
|
CVE-2026-78952 | 8.3 | CWE-787 | — | |
|
Windows
Origin validation error in Windows Network Address Translation (NAT) allows an unauthorized attacker to perform spoofing over an adjacent network.
|
CVE-2026-56179 | 8.3 | CWE-346 | — | |
|
Windows
Double free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
|
CVE-2026-85921 | 8.2 | CWE-415 | — | |
|
Windows
Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
|
CVE-2026-85369 | 8.2 | CWE-125 | — | |
|
Windows
Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
|
CVE-2026-83939 | 8.2 | CWE-822 | — | |
|
Windows
Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally.
|
CVE-2026-81354 | 8.2 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.
|
CVE-2026-72962 | 8.2 | CWE-122 | — | |
|
Windows
Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
|
CVE-2026-72961 | 8.2 | CWE-122 | — | |
|
Windows
Double free in Windows Credential Guard allows an authorized attacker to elevate privileges locally.
|
CVE-2026-72958 | 8.2 | CWE-415 | — | |
|
Windows
Heap-based buffer overflow in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69906 | 8.2 | CWE-122 | — | |
|
Windows
Untrusted pointer dereference in Windows ALPC allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69874 | 8.2 | CWE-822 | — | |
|
Windows
Integer overflow or wraparound in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69846 | 8.2 | CWE-190 | — | |
|
Windows
Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally.
|
CVE-2026-69820 | 8.2 | CWE-122 | — | |
|
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Deployment Services allows an unauthorized att…
|
CVE-2026-88174 | 8.1 | CWE-362 | — | |
|
Windows
Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.
|
CVE-2026-88173 | 8.1 | CWE-367 | — | |
|
Windows
Double free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
|
CVE-2026-88171 | 8.1 | CWE-415 | — | |
|
Windows
Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
|
CVE-2026-88120 | 8.1 | CWE-416 | — | |
|
Windows
Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
|
CVE-2026-88119 | 8.1 | CWE-416 | — | |
|
Windows
Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
|
CVE-2026-88117 | 8.1 | CWE-416 | — | |
|
Windows
Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.
|
CVE-2026-85926 | 8.1 | CWE-416 | — | |
|
Windows
Incorrect authorization in Chromoting in Google Chrome on on Windows prior to 152.0.7977.75 allowed a local attacker to execute arbitrary code outsid…
|
CVE-2026-84334 | 8.1 | CWE-863 | — | |
|
Windows
Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.
|
CVE-2026-83997 | 8.1 | CWE-416 | — | |
|
Windows
Out-of-bounds read in Windows Paint allows an unauthorized attacker to execute code over a network.
|
CVE-2026-83844 | 8.1 | CWE-125 | — | |
|
Windows
Reliance on untrusted inputs in a security decision in Windows IKE Extension allows an unauthorized attacker to perform spoofing over a network.
|
CVE-2026-83522 | 8.1 | CWE-807 | — | |
|
Windows
Untrusted pointer dereference in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.
|
CVE-2026-78444 | 8.1 | CWE-822 | — | |
|
Windows
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
|
CVE-2026-72987 | 8.1 | CWE-416 | — | |
|
Windows
Use after free in Windows SMB Client allows an unauthorized attacker to execute code over a network.
|
CVE-2026-72936 | 8.1 | CWE-416 | — | |
|
Windows
Integer overflow or wraparound in Windows Device Health Attestation (DHA) allows an unauthorized attacker to execute code over a network.
|
CVE-2026-71331 | 8.1 | CWE-122 | — | |
|
Windows
Improper link resolution before file access ('link following') in Windows Shell allows an unauthorized attacker to perform spoofing over a network.
|
CVE-2026-70563 | 8.1 | CWE-59 | — | |
|
Windows
A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClien…
|
CVE-2026-70465 | 8.1 | CWE-120 | — | |
|
Windows
Use after free in Windows Ancillary Function Driver for WinSock allows an unauthorized attacker to elevate privileges over a network.
|
CVE-2026-70342 | 8.1 | CWE-416 | — | |
|
Windows
Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges over a network.
|
CVE-2026-70111 | 8.1 | CWE-822 | — | |
|
Windows
Double free in Windows Libarchive allows an unauthorized attacker to execute code over a network.
|
CVE-2026-70062 | 8.1 | CWE-415 | — | |
|
Windows
Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.
|
CVE-2026-70038 | 8.1 | CWE-122 | — | |
|
Windows
Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.
|
CVE-2026-70013 | 8.1 | CWE-416 | — | |
|
Windows
Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network.
|
CVE-2026-69913 | 8.1 | CWE-416 | — | |
|
Windows
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
|
CVE-2026-69858 | 8.1 | CWE-416 | — | |
|
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DHCP Server allows an unauthorized attacker to…
|
CVE-2026-69830 | 8.1 | CWE-362 | — | |
|
Windows
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
|
CVE-2026-69813 | 8.1 | CWE-416 | — |