Security News

주요 제품 취약점 (2,105건)

"Windows" 관련 CVE만 표시 중 · 필터 해제 ×

기술CVE심각도유형KEV등재일
Windows
Out-of-bounds write in Windows DNS allows an unauthorized attacker to execute code over an adjacent network.
CVE-2026-62817 8.8 CWE-787 —
Windows
Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network.
CVE-2026-62800 8.8 CWE-122 —
Windows
Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.
CVE-2026-62795 8.8 CWE-416 —
Windows
Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network.
CVE-2026-62790 8.8 CWE-122 —
Windows
Heap-based buffer overflow in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.
CVE-2026-62785 8.8 CWE-122 —
Windows
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
CVE-2026-62744 8.8 CWE-122 —
Windows
Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
CVE-2026-62706 8.8 CWE-121 —
Windows
A remotely exploitable buffer overflow bug can cause a local and kernel denial-of-service attack on affected versions of Zscaler Client Connector on …
CVE-2026-59565 8.8 CWE-229 —
Windows
Improper neutralization of special elements used in a command ('command injection') in Windows Active Directory allows an unauthorized attacker to ex…
CVE-2026-49179 8.8 CWE-77 —
Windows
Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
CVE-2026-108471 8.8 CWE-822 —
Windows
Improper resolution of path equivalence in Windows SmartScreen allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-108463 8.8 CWE-41 —
Windows
Integer overflow or wraparound in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network.
CVE-2026-108400 8.8 CWE-190 —
Windows
Improper access control in Windows Hyper-V allows an authorized attacker to execute code locally.
CVE-2026-105733 8.8 — —
Windows
Out-of-bounds read in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
CVE-2026-102225 8.8 CWE-125 —
Windows
Use after free in Windows Hyper-V allows an authorized attacker to execute code locally.
CVE-2026-102214 8.8 CWE-416 —
Windows
Heap-based buffer overflow in Windows Media Video Decoder allows an unauthorized attacker to execute code over a network.
CVE-2026-100220 8.8 CWE-122 —
Windows
Improper privilege management in Windows Internet (wininet.dll) allows an authorized attacker to perform spoofing locally.
CVE-2026-83845 8.4 CWE-290 —
Windows
Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally.
CVE-2026-77503 8.4 CWE-125 —
Windows
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
CVE-2026-69638 8.4 CWE-122 —
Windows
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
CVE-2026-69479 8.4 CWE-122 —
Windows
Buffer overflow in GPU in Google Chrome on on Windows prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to ex…
CVE-2026-84351 8.3 CWE-121 —
Windows
Out of bounds write in Crashpad in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer proc…
CVE-2026-78952 8.3 CWE-787 —
Windows
Origin validation error in Windows Network Address Translation (NAT) allows an unauthorized attacker to perform spoofing over an adjacent network.
CVE-2026-56179 8.3 CWE-346 —
Windows
Double free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
CVE-2026-85921 8.2 CWE-415 —
Windows
Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
CVE-2026-85369 8.2 CWE-125 —
Windows
Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
CVE-2026-83939 8.2 CWE-822 —
Windows
Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally.
CVE-2026-81354 8.2 CWE-122 —
Windows
Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-72962 8.2 CWE-122 —
Windows
Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
CVE-2026-72961 8.2 CWE-122 —
Windows
Double free in Windows Credential Guard allows an authorized attacker to elevate privileges locally.
CVE-2026-72958 8.2 CWE-415 —
Windows
Heap-based buffer overflow in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
CVE-2026-69906 8.2 CWE-122 —
Windows
Untrusted pointer dereference in Windows ALPC allows an authorized attacker to elevate privileges locally.
CVE-2026-69874 8.2 CWE-822 —
Windows
Integer overflow or wraparound in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
CVE-2026-69846 8.2 CWE-190 —
Windows
Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally.
CVE-2026-69820 8.2 CWE-122 —
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Deployment Services allows an unauthorized att…
CVE-2026-88174 8.1 CWE-362 —
Windows
Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.
CVE-2026-88173 8.1 CWE-367 —
Windows
Double free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
CVE-2026-88171 8.1 CWE-415 —
Windows
Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
CVE-2026-88120 8.1 CWE-416 —
Windows
Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
CVE-2026-88119 8.1 CWE-416 —
Windows
Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
CVE-2026-88117 8.1 CWE-416 —
Windows
Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.
CVE-2026-85926 8.1 CWE-416 —
Windows
Incorrect authorization in Chromoting in Google Chrome on on Windows prior to 152.0.7977.75 allowed a local attacker to execute arbitrary code outsid…
CVE-2026-84334 8.1 CWE-863 —
Windows
Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.
CVE-2026-83997 8.1 CWE-416 —
Windows
Out-of-bounds read in Windows Paint allows an unauthorized attacker to execute code over a network.
CVE-2026-83844 8.1 CWE-125 —
Windows
Reliance on untrusted inputs in a security decision in Windows IKE Extension allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-83522 8.1 CWE-807 —
Windows
Untrusted pointer dereference in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.
CVE-2026-78444 8.1 CWE-822 —
Windows
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
CVE-2026-72987 8.1 CWE-416 —
Windows
Use after free in Windows SMB Client allows an unauthorized attacker to execute code over a network.
CVE-2026-72936 8.1 CWE-416 —
Windows
Integer overflow or wraparound in Windows Device Health Attestation (DHA) allows an unauthorized attacker to execute code over a network.
CVE-2026-71331 8.1 CWE-122 —
Windows
Improper link resolution before file access ('link following') in Windows Shell allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-70563 8.1 CWE-59 —
Windows
A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClien…
CVE-2026-70465 8.1 CWE-120 —
Windows
Use after free in Windows Ancillary Function Driver for WinSock allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-70342 8.1 CWE-416 —
Windows
Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-70111 8.1 CWE-822 —
Windows
Double free in Windows Libarchive allows an unauthorized attacker to execute code over a network.
CVE-2026-70062 8.1 CWE-415 —
Windows
Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.
CVE-2026-70038 8.1 CWE-122 —
Windows
Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.
CVE-2026-70013 8.1 CWE-416 —
Windows
Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network.
CVE-2026-69913 8.1 CWE-416 —
Windows
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
CVE-2026-69858 8.1 CWE-416 —
Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DHCP Server allows an unauthorized attacker to…
CVE-2026-69830 8.1 CWE-362 —
Windows
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
CVE-2026-69813 8.1 CWE-416 —