MS 10월 보안 위협에 따른 정기 보안 업데이트 권고
이 권고가 다루는 취약점
권고 본문에서 CVE 번호를 추출해 우리 원장과 맞춘 것입니다. KISA 가 제공하는 매핑이 아닙니다.
● 실제 악용이 확인됨CVE-2026-96951Improper neutralization of special elements used in a command ('command injection') in Windows …9.8%높음8.8CVE-2026-96207Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to …0.5%심각10.0CVE-2026-94510Authorization bypass through user-controlled key in Microsoft Bookings allows an unauthorized a…0.4%심각9.9CVE-2026-105016Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code ov…1.0%심각9.8CVE-2026-88131Deserialization of untrusted data in Microsoft Dataverse allows an unauthorized attacker to exe…0.8%심각9.8CVE-2026-69883Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.0.8%심각9.8CVE-2026-97749Double free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a …1.0%심각9.8CVE-2026-69705Out-of-bounds write in Windows iSCSI allows an unauthorized attacker to execute code over a net…0.8%심각9.8
CVE-2026-83519Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a n…1.0%심각9.8
CVE-2026-85809Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthori…0.9%심각9.8
CVE-2026-83578Integer underflow (wrap or wraparound) in Windows PowerShell allows an unauthorized attacker to execute code o…1.0%심각9.8
CVE-2026-77900Missing authentication for critical function in Azure App Service allows an unauthorized attacker to execute c…0.5%심각9.8
CVE-2026-105010Use after free in Microsoft Windows Search Component allows an unauthorized attacker to elevate privileges ove…0.9%심각9.8
CVE-2026-69639Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a networ…0.8%심각9.8
CVE-2026-85806Integer underflow (wrap or wraparound) in Network Policy Server (NPS) allows an unauthorized attacker to execu…0.9%심각9.8
CVE-2026-85814Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute co…0.9%심각9.8
CVE-2026-83693Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a n…1.0%심각9.8
CVE-2026-83862Use after free in Windows Network Load Balancing allows an unauthorized attacker to execute code over a networ…0.6%심각9.8
CVE-2026-69634Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network.0.8%심각9.8
CVE-2026-83935Heap-based buffer overflow in Microsoft XML allows an unauthorized attacker to execute code over a network.0.7%심각9.8
CVE-2026-88178Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.0.9%심각9.8
CVE-2026-96219Out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attac…0.9%심각9.8
CVE-2026-96864Double free in Microsoft Failover Cluster Virtual Driver allows an unauthorized attacker to execute code over …0.6%심각9.8
CVE-2026-85792Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthori…0.9%심각9.8
CVE-2026-97016Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a …1.0%심각9.8
CVE-2026-83780Use after free in Windows CCFFilter Driver allows an unauthorized attacker to execute code over a network.1.0%심각9.8
CVE-2026-70096Heap-based buffer overflow in Windows Rich Text Edit Control allows an unauthorized attacker to execute code o…1.0%심각9.8
CVE-2026-102210Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a netw…0.9%심각9.8
CVE-2026-100219Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network.1.0%심각9.8
CVE-2026-97805Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over…1.0%심각9.8
CVE-2026-70147Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute c…1.0%심각9.8
CVE-2026-100222Heap-based buffer overflow in Network Policy Server (NPS) allows an unauthorized attacker to execute code over…1.0%심각9.8
CVE-2026-83517Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute co…1.0%심각9.8
CVE-2026-84015Heap-based buffer overflow in Remote Access Point-to-Point Protocol (PPP) EAP-TLS allows an unauthorized attac…0.9%심각9.8
CVE-2026-96320Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a netwo…0.9%심각9.8
CVE-2026-83869Integer underflow (wrap or wraparound) in DNS Server allows an unauthorized attacker to execute code over a ne…0.6%심각9.8
CVE-2026-85928Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execu…0.6%심각9.8
CVE-2026-96924Untrusted pointer dereference in Windows OLE allows an unauthorized attacker to execute code over a network.0.9%심각9.8
CVE-2026-69886Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a…0.8%심각9.8
CVE-2026-83910Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network.1.0%심각9.8
CVE-2026-88156Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a…1.0%심각9.8
CVE-2026-100202Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a…1.0%심각9.8
CVE-2026-96909Heap-based buffer overflow in Windows BitLocker allows an unauthorized attacker to execute code over a network…0.9%심각9.8
CVE-2026-97816Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.0.9%심각9.8
CVE-2026-97814Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a netw…1.0%심각9.8
CVE-2026-97815Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a n…0.7%심각9.8
CVE-2026-96934Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.0.7%심각9.8
CVE-2026-70300Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a …1.0%심각9.8
CVE-2026-70291Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a …1.0%심각9.8
CVE-2026-70242Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a …1.0%심각9.8
CVE-2026-83770Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a netw…1.0%심각9.8
CVE-2026-70157Heap-based buffer overflow in Windows System Information Console allows an unauthorized attacker to execute co…1.0%심각9.8
CVE-2026-96096Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a netw…0.7%심각9.8
CVE-2026-83782Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network.0.9%심각9.8
CVE-2026-70153Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute c…1.0%심각9.8
CVE-2026-96113Heap-based buffer overflow in DNS Server allows an unauthorized attacker to execute code over a network.0.7%심각9.8
CVE-2026-70024Stack-based buffer overflow in Windows Internet Information Services allows an unauthorized attacker to execut…0.8%심각9.8
CVE-2026-88102Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.0.6%심각9.8
CVE-2026-83748Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a n…0.7%심각9.8
CVE-2026-69435Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network.0.4%심각9.6
CVE-2026-102238Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an…0.7%심각9.6
CVE-2026-88092Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an una…0.8%심각9.4
CVE-2026-70279Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Ser…0.9%심각9.3
CVE-2026-70188Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an una…0.8%심각9.1
CVE-2026-96252Improper verification of cryptographic signature in Active Directory Federation Services (AD FS) allows an una…0.5%심각9.1
CVE-2026-105008No cwe for this issue in Windows Schannel allows an unauthorized attacker to perform spoofing over a network.0.6%심각9.0
CVE-2026-85818Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker to perfor…0.4%심각9.0
CVE-2026-70174Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code ove…0.8%높음8.8
CVE-2026-70185Protection mechanism failure in Windows PowerShell allows an authorized attacker to bypass a security feature …0.3%높음8.8
CVE-2026-102863Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized …0.9%높음8.8
CVE-2026-97742Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a n…0.8%높음8.8
CVE-2026-97759Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.0.8%높음8.8
CVE-2026-97758Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a ne…0.6%높음8.8
CVE-2026-105007An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.…0.8%높음8.8
CVE-2026-97757Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a ne…0.7%높음8.8
CVE-2026-97756Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a ne…0.8%높음8.8
CVE-2026-70210Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to elevate privileges over a netw…0.8%높음8.8
CVE-2026-102849Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a n…0.6%높음8.8
CVE-2026-102855Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a ne…0.6%높음8.8
CVE-2026-102235Improper encoding or escaping of output in Visual Studio Code allows an unauthorized attacker to execute code …0.6%높음8.8
CVE-2026-70215Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.0.8%높음8.8
CVE-2026-108398Untrusted search path in .NET Framework allows an authorized attacker to bypass a security feature locally.0.5%높음8.8
CVE-2026-83688Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a net…0.8%높음8.8
CVE-2026-96235Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.0.7%높음8.8
CVE-2026-108400Integer overflow or wraparound in Microsoft Windows Codecs Library allows an unauthorized attacker to execute …0.8%높음8.8
CVE-2026-97755Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.0.8%높음8.8
CVE-2026-102860Improper access control in Microsoft Office SharePoint allows an authorized attacker to elevate privileges ove…0.7%높음8.8
CVE-2026-88112Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.0.6%높음8.8
CVE-2026-70246Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges ove…0.7%높음8.8
CVE-2026-108463Improper resolution of path equivalence in Windows SmartScreen allows an unauthorized attacker to bypass a sec…0.9%높음8.8
CVE-2026-102217Improper resolution of path equivalence in WebDAV allows an authorized attacker to elevate privileges over a n…1.1%높음8.8
CVE-2026-96940Weak authorization in Microsoft Exchange Server allows an authenticated attacker to elevate privileges over a …0.5%높음8.8
CVE-2026-97754Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a ne…0.7%높음8.8
CVE-2026-70254Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.0.8%높음8.8
CVE-2026-70256Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a …0.8%높음8.8
CVE-2026-100220Heap-based buffer overflow in Windows Media Video Decoder allows an unauthorized attacker to execute code over…0.8%높음8.8
CVE-2026-108467Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an authorized attacker to execute cod…0.9%높음8.8
CVE-2026-108471Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized atta…0.3%높음8.8
CVE-2026-70262Heap-based buffer overflow in WebDAV allows an unauthorized attacker to elevate privileges over a network.0.8%높음8.8
CVE-2026-88164Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over …0.7%높음8.8
CVE-2026-70268Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a net…0.8%높음8.8
CVE-2026-97753Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a ne…0.8%높음8.8
CVE-2026-70266Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office Share…0.9%높음8.8
CVE-2026-70098Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network.0.4%높음8.8
CVE-2026-96914Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an authorized att…0.3%높음8.8
CVE-2026-70007Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network.0.6%높음8.8
CVE-2026-85339Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthori…0.6%높음8.8
CVE-2026-83759Improper control of generation of code ('code injection') in Windows Encrypting File System (EFS) allows an au…0.7%높음8.8
CVE-2026-65674Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.0.9%높음8.8
CVE-2026-97011Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code over a…0.7%높음8.8
CVE-2026-83929Out-of-bounds write in Windows GDI allows an unauthorized attacker to execute code over a network.0.6%높음8.8
CVE-2026-70068Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an unauthorized attacker to ele…0.8%높음8.8
CVE-2026-70035Deserialization of untrusted data in .NET Framework allows an unauthorized attacker to execute code over a net…1.3%높음8.8
CVE-2026-88073Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.0.3%높음8.8
CVE-2026-96917Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges local…0.3%높음8.8
CVE-2026-83789Heap-based buffer overflow in Windows SMB Client allows an unauthorized attacker to elevate privileges over a …0.8%높음8.8
CVE-2026-70297Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to execute code…1.0%높음8.8
CVE-2026-88136Improper resolution of path equivalence in WebDAV allows an authorized attacker to execute code over a network…1.0%높음8.8
CVE-2026-97752Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.0.7%높음8.8
CVE-2026-88186Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a net…0.7%높음8.8
CVE-2026-88198Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over …0.7%높음8.8
CVE-2026-88197Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.0.5%높음8.8
CVE-2026-88196Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.0.7%높음8.8
CVE-2026-102861Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over …0.7%높음8.8
CVE-2026-88202Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a net…0.7%높음8.8
CVE-2026-70069Stack-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a networ…0.9%높음8.8
CVE-2026-96952Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute co…0.8%높음8.8
CVE-2026-70258Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute co…0.8%높음8.8
CVE-2026-88200Privilege context switching error in Microsoft Office SharePoint allows an authorized attacker to elevate priv…0.7%높음8.8
CVE-2026-105593Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a n…0.7%높음8.8
CVE-2026-85900Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code…1.5%높음8.8
CVE-2026-70287Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a net…0.8%높음8.8
CVE-2026-97010Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.0.7%높음8.8
CVE-2026-70089Heap-based buffer overflow in Windows GDI allows an unauthorized attacker to execute code over a network.0.8%높음8.8
CVE-2026-97751Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a ne…0.5%높음8.8
CVE-2026-88075Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuratio…0.6%높음8.8
CVE-2026-88219Untrusted pointer dereference in RPC Runtime allows an unauthorized attacker to execute code over a network.0.8%높음8.8
CVE-2026-85817Reliance on untrusted inputs in a security decision in Windows PowerShell allows an unauthorized attacker to e…0.7%높음8.8
CVE-2026-96202Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over…0.8%높음8.8
CVE-2026-96044No cwe for this issue in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over …0.7%높음8.8
CVE-2026-69985Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a networ…0.7%높음8.8
CVE-2026-96913Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.0.3%높음8.8
CVE-2026-102862Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges ove…0.7%높음8.8
CVE-2026-97750Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a n…0.7%높음8.8
CVE-2026-83889Release of invalid pointer or reference in DNS Server allows an authorized attacker to execute code over a net…0.9%높음8.8
CVE-2026-103575Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.0.8%높음8.8
CVE-2026-102225Out-of-bounds read in Windows Text Shaping allows an unauthorized attacker to execute code over a network.0.8%높음8.8
CVE-2026-83728Improper validation of syntactic correctness of input in Windows Hyper-V allows an authorized attacker to perf…0.2%높음8.8
CVE-2026-97008Buffer underwrite ('buffer underflow') in Microsoft Office Excel allows an unauthorized attacker to execute co…0.7%높음8.8
CVE-2026-105596Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a n…0.7%높음8.8
CVE-2026-94512Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.0.5%높음8.8
CVE-2026-105597Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a n…0.7%높음8.8
CVE-2026-83725Heap-based buffer overflow in Microsoft Windows Search Component allows an unauthorized attacker to execute co…0.6%높음8.8
CVE-2026-97748Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a ne…0.7%높음8.8
CVE-2026-105598Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a n…0.7%높음8.8
CVE-2026-70282Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a …0.8%높음8.8
CVE-2026-70149Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) all…0.8%높음8.8
CVE-2026-97007Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a ne…0.7%높음8.8
CVE-2026-70158Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthori…0.9%높음8.8
CVE-2026-105717Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a n…0.8%높음8.8
CVE-2026-97747Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.0.7%높음8.8
CVE-2026-97746Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute co…0.7%높음8.8
CVE-2026-97745Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.0.8%높음8.8
CVE-2026-83716Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.0.3%높음8.8
CVE-2026-100209Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.0.8%높음8.8
CVE-2026-70167Access of resource using incompatible type ('type confusion') in DNS Server allows an authorized attacker to e…0.9%높음8.8
CVE-2026-97004Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a ne…0.7%높음8.8
CVE-2026-83874Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code over a net…0.8%높음8.8
CVE-2026-97003Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a ne…0.7%높음8.8
CVE-2026-70250Use after free in Windows DHCP Client allows an unauthorized attacker to execute code over an adjacent network…0.4%높음8.8
CVE-2026-85363Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a …0.7%높음8.8
CVE-2026-83891Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a ne…0.8%높음8.8
CVE-2026-97772Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.0.7%높음8.8
CVE-2026-97766Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a ne…0.7%높음8.8
CVE-2026-97773Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a ne…0.7%높음8.8
CVE-2026-88142Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to ex…0.9%높음8.8
CVE-2026-97775Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.0.7%높음8.8
CVE-2026-97776Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a ne…0.8%높음8.8
CVE-2026-97777Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a ne…0.7%높음8.8
CVE-2026-97778Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code over …0.6%높음8.8
CVE-2026-97761Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a n…0.8%높음8.8
CVE-2026-97765Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a ne…0.8%높음8.8
CVE-2026-97762Out-of-bounds write in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.0.7%높음8.8
CVE-2026-85905Heap-based buffer overflow in Windows UI Immersive Server allows an authorized attacker to elevate privileges …0.3%높음8.8
CVE-2026-97763Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a ne…0.7%높음8.8
CVE-2026-85903Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.0.6%높음8.8
CVE-2026-102857Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a ne…0.8%높음8.8
CVE-2026-88150Use of uninitialized resource in Microsoft Office Word allows an unauthorized attacker to execute code over a …0.7%높음8.8
CVE-2026-100214Deserialization of untrusted data in Dynamics Business Central allows an authorized attacker to execute code o…1.8%높음8.8
CVE-2026-83928Out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attac…0.6%높음8.8
CVE-2026-69918Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges local…0.4%높음8.8
CVE-2026-96957Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security …0.5%높음8.8
CVE-2026-88157Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a netwo…0.5%높음8.8
CVE-2026-88155Heap-based buffer overflow in Microsoft Office SharePoint allows an authorized attacker to execute code over a…0.8%높음8.8
CVE-2026-83797Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over…0.8%높음8.8
CVE-2026-83923Relative path traversal in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.0.9%높음8.8
CVE-2026-69943Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint …0.8%높음8.8
CVE-2026-88159Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to ex…1.0%높음8.8
CVE-2026-102226Improper limitation of a pathname to a restricted directory ('path traversal') in Dynamics Business Central al…0.9%높음8.8
CVE-2026-69945Missing authorization in Windows AppX Deployment Extensions allows an authorized attacker to elevate privilege…0.3%높음8.8
CVE-2026-88166Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code ov…0.8%높음8.8
CVE-2026-88165Out-of-bounds write in Active Directory Domain Services allows an authorized attacker to execute code over a n…0.9%높음8.8
CVE-2026-88163Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code ov…0.8%높음8.8
CVE-2026-100212Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.0.8%높음8.8
CVE-2026-96230Improper neutralization of input during web page generation ('cross-site scripting') in ASP.NET Core allows an…0.8%높음8.8
CVE-2026-102203Access of resource using incompatible type ('type confusion') in RPC Runtime allows an unauthorized attacker t…0.8%높음8.8
CVE-2026-96224Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.0.7%높음8.8
CVE-2026-83784Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privi…1.0%높음8.8
CVE-2026-102858Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute code over a …0.7%높음8.8
CVE-2026-103572Improper control of generation of code ('code injection') in Visual Studio Tools for Applications and SQL Serv…0.8%높음8.8
CVE-2026-108458Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.0.8%높음8.8
CVE-2026-105733Improper access control in Windows Hyper-V allows an authorized attacker to execute code locally.0.3%높음8.8
CVE-2026-100211Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.0.8%높음8.8
CVE-2026-83777Heap-based buffer overflow in Windows Bluetooth Service allows an unauthorized attacker to elevate privileges …0.5%높음8.8
CVE-2026-83778Heap-based buffer overflow in Microsoft Internet Messaging API allows an unauthorized attacker to execute code…0.8%높음8.8
CVE-2026-97741Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a ne…0.8%높음8.8
CVE-2026-100210Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a ne…0.8%높음8.8
CVE-2026-97739Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute co…0.8%높음8.8
CVE-2026-83771Use after free in Windows Camera Frame Server Monitor allows an unauthorized attacker to elevate privileges ov…0.5%높음8.8
CVE-2026-97738Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.0.7%높음8.8
CVE-2026-97017Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.0.7%높음8.8
CVE-2026-97012Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a…0.7%높음8.8
CVE-2026-70299Improper access control in Windows Bind Filter Driver allows an authorized attacker to elevate privileges loca…0.3%높음8.8
CVE-2026-70275Untrusted pointer dereference in Windows CD-ROM Driver allows an unauthorized attacker to execute code over a …0.8%높음8.8
CVE-2026-85931Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute c…0.9%높음8.8
CVE-2026-69326Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.0.6%높음8.8
CVE-2026-88116Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.0.6%높음8.8
CVE-2026-70302Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a net…0.8%높음8.8
CVE-2026-70301Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a net…0.8%높음8.8
CVE-2026-69370Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allo…0.7%높음8.8
CVE-2026-70580Missing authentication for critical function in Windows Credential Guard allows an authorized attacker to perf…0.3%높음8.8
CVE-2026-70343Heap-based buffer overflow in Microsoft MPEG-2 Video Extension allows an unauthorized attacker to execute code…0.8%높음8.8
CVE-2026-102869Access of resource using incompatible type ('type confusion') in .NET and Visual Studio allows an unauthorized…0.7%높음8.8
CVE-2026-88115Out-of-bounds read in Windows Server for NFS allows an unauthorized attacker to execute code over a network.0.6%높음8.8
CVE-2026-77902Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a ne…0.8%높음8.8
CVE-2026-77496Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a…0.8%높음8.8
CVE-2026-69521Integer overflow or wraparound in Windows iSCSI allows an unauthorized attacker to execute code over a network…0.7%높음8.8
CVE-2026-77910Incorrect authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over …0.8%높음8.8
CVE-2026-83934Stack-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network.0.8%높음8.8
CVE-2026-97780Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a ne…0.8%높음8.8
CVE-2026-97781Improper neutralization of special elements used in a command ('command injection') in Microsoft Office OneNot…0.8%높음8.8
CVE-2026-105727Improper limitation of a pathname to a restricted directory ('path traversal') in Dynamics Business Central al…0.9%높음8.8
CVE-2026-105718Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.0.8%높음8.8
CVE-2026-105716Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a n…0.7%높음8.8
CVE-2026-97768Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a ne…0.7%높음8.8
CVE-2026-83851Heap-based buffer overflow in Windows Partition Management Driver allows an unauthorized attacker to elevate p…0.6%높음8.8
CVE-2026-96943Integer overflow or wraparound in Windows Raw Image Extension allows an unauthorized attacker to execute code …0.6%높음8.8
CVE-2026-97767Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.0.6%높음8.8
CVE-2026-83520Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.1.3%높음8.8
CVE-2026-87697Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.0.8%높음8.8
CVE-2026-85936Double free in Windows Shell allows an unauthorized attacker to execute code over a network.0.6%높음8.8
CVE-2026-70257Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a …0.8%높음8.8
CVE-2026-83523Heap-based buffer overflow in Windows Image Acquisition allows an unauthorized attacker to execute code over a…0.8%높음8.8
CVE-2026-97769Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a ne…0.8%높음8.8
CVE-2026-96251Reliance on untrusted inputs in a security decision in Microsoft PowerShell allows an unauthorized attacker to…0.5%높음8.8
CVE-2026-102214Use after free in Windows Hyper-V allows an authorized attacker to execute code locally.0.3%높음8.8
CVE-2026-102870Improper control of generation of code ('code injection') in ASP.NET Core allows an unauthorized attacker to e…0.8%높음8.8
CVE-2026-69765Use after free in Windows Storport Miniport Driver allows an unauthorized attacker to execute code over a netw…0.7%높음8.8
CVE-2026-102850Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a n…0.6%높음8.8
CVE-2026-97770Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a n…0.7%높음8.8
CVE-2026-102856Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a ne…0.8%높음8.8
CVE-2026-97771Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.0.7%높음8.8
CVE-2026-88145Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a ne…0.7%높음8.8
CVE-2026-105595Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to execute code over a network.0.7%높음8.8
CVE-2026-88144Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.0.8%높음8.8
CVE-2026-105591Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a n…0.7%높음8.8
CVE-2026-88114Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.0.6%높음8.8
CVE-2026-83643Stack-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a …0.8%높음8.8
CVE-2026-83642Access of resource using incompatible type ('type confusion') in DNS Server allows an unauthorized attacker to…0.8%높음8.8
CVE-2026-83943Exposure of sensitive information to an unauthorized actor in Azure API Center allows an unauthorized attacker…0.4%높음8.7
CVE-2026-68883Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.0.4%높음8.5
CVE-2026-85886Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.0.4%높음8.5
CVE-2026-67625Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.0.4%높음8.5
CVE-2026-83845Improper privilege management in Windows Internet (wininet.dll) allows an authorized attacker to perform spoof…0.3%높음8.4
CVE-2026-85925Improper restriction of communication channel to intended endpoints in Azure Key Vault allows an authorized at…0.5%높음8.2
CVE-2026-85369Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally.0.3%높음8.2
CVE-2026-70175Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.0.6%높음8.1
CVE-2026-108460Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.0.7%높음8.1
CVE-2026-88171Double free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.0.7%높음8.1
CVE-2026-70127Use after free in DNS Server allows an unauthorized attacker to execute code over a network.0.7%높음8.1
CVE-2026-70111Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges over a n…0.7%높음8.1
CVE-2026-108457Out-of-bounds write in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network.0.7%높음8.1
CVE-2026-85799Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.0.7%높음8.1
CVE-2026-88185Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a net…0.7%높음8.1
CVE-2026-70571Stack-based buffer overflow in Microsoft Exchange Server allows an unauthorized attacker to execute code over …0.9%높음8.1
CVE-2026-102866Improper verification of cryptographic signature in Microsoft Office SharePoint allows an unauthorized attacke…0.6%높음8.1
CVE-2026-85926Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute c…0.7%높음8.1
CVE-2026-70229Incorrect authorization in Active Directory Domain Services allows an unauthorized attacker to execute code ov…0.7%높음8.1
CVE-2026-88094Improper neutralization of special elements in output used by a downstream component ('injection') in Azure St…0.6%높음8.1
CVE-2026-83844Out-of-bounds read in Windows Paint allows an unauthorized attacker to execute code over a network.0.6%높음8.1
CVE-2026-69802Weak authentication in Network Device Enrollment Service (NDES) allows an unauthorized attacker to execute cod…0.5%높음8.1
CVE-2026-69830Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DHCP Se…0.4%높음8.1
CVE-2026-105005Out-of-bounds write in Windows Schannel allows an unauthorized attacker to execute code over a network.0.7%높음8.1
CVE-2026-88120Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.0.7%높음8.1
CVE-2026-70269Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a net…0.7%높음8.1
CVE-2026-88119Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.0.7%높음8.1
CVE-2026-85371Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.0.7%높음8.1
CVE-2026-70062Double free in Windows Libarchive allows an unauthorized attacker to execute code over a network.0.7%높음8.1
CVE-2026-88117Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.0.5%높음8.1
CVE-2026-84012Double free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.0.7%높음8.1
CVE-2026-69913Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network.0.6%높음8.1
CVE-2026-100218Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a networ…0.7%높음8.1
CVE-2026-83522Reliance on untrusted inputs in a security decision in Windows IKE Extension allows an unauthorized attacker t…0.7%높음8.1
CVE-2026-83674Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform…0.6%높음8.1
CVE-2026-70187Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a networ…0.7%높음8.1
CVE-2026-88174Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Deploym…0.4%높음8.1
CVE-2026-88173Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to ex…0.5%높음8.1
CVE-2026-70038Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.0.7%높음8.1
CVE-2026-70197Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.0.7%높음8.1
CVE-2026-83746Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to elevate priv…1.0%높음8.1
CVE-2026-70013Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.0.5%높음8.1
CVE-2026-83914Use after free in Microsoft XML allows an unauthorized attacker to execute code over a network.0.7%높음8.1
CVE-2026-70049Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuratio…2.3%높음8.0
CVE-2026-85881Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privilege…0.7%높음8.0
CVE-2026-70213Origin validation error in Microsoft Power Apps allows an authorized attacker to execute code over a network.0.3%높음8.0
CVE-2026-88121Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to ex…0.5%높음8.0
CVE-2026-96844Integer underflow (wrap or wraparound) in Microsoft Bluetooth Driver allows an authorized attacker to elevate …0.5%높음8.0
CVE-2026-83838Integer underflow (wrap or wraparound) in Windows Bluetooth A2DP driver allows an authorized attacker to eleva…0.5%높음8.0
CVE-2026-69363Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over…0.6%높음8.0
CVE-2026-96956Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.0.4%높음8.0
CVE-2026-83847Heap-based buffer overflow in Microsoft Account allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-85800Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges loca…0.3%높음7.8
CVE-2026-83726Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-85822Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges lo…0.3%높음7.8
CVE-2026-96918Improper access control in Windows NTFS allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-85820Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to ele…0.3%높음7.8
CVE-2026-102215Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized att…0.3%높음7.8
CVE-2026-85836Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-96920Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to…0.3%높음7.8
CVE-2026-85833Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges l…0.3%높음7.8
CVE-2026-85832Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized atta…0.4%높음7.8
CVE-2026-96928Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-96929Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.0.4%높음7.8
CVE-2026-85843Use of uninitialized resource in Windows Background Intelligent Transfer Service (BITS) allows an authorized a…0.4%높음7.8
CVE-2026-85849Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an au…0.4%높음7.8
CVE-2026-85848Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized atta…0.4%높음7.8
CVE-2026-85851Use after free in Windows SmartScreen allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-102227Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to execute co…0.3%높음7.8
CVE-2026-85861Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.0.2%높음7.8
CVE-2026-85860Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to elevate privileges lo…0.2%높음7.8
CVE-2026-96911Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an…0.4%높음7.8
CVE-2026-96912Use after free in Windows Client License Service allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-85864Improper privilege management in Python allows an authorized attacker to elevate privileges locally.0.7%높음7.8
CVE-2026-85869Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate priv…0.3%높음7.8
CVE-2026-85377Access of resource using incompatible type ('type confusion') in Windows CD-ROM Driver allows an authorized at…0.3%높음7.8
CVE-2026-85874Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to execute code locally.0.3%높음7.8
CVE-2026-85872Use after free in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-85871Heap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges …0.3%높음7.8
CVE-2026-85908Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locall…0.4%높음7.8
CVE-2026-85906Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-85902Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges l…0.3%높음7.8
CVE-2026-85901Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locall…0.4%높음7.8
CVE-2026-83833Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-85911Use after free in Windows StateRepository API allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-96915Integer overflow or wraparound in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privile…0.2%높음7.8
CVE-2026-85915Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges local…0.3%높음7.8
CVE-2026-102233Missing authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature local…0.4%높음7.8
CVE-2026-85927Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker…0.3%높음7.8
CVE-2026-96867Out-of-bounds read in Windows NTFS allows an authorized attacker to execute code locally.0.3%높음7.8
CVE-2026-96862Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-96856Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate priv…0.3%높음7.8
CVE-2026-87691Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally.0.2%높음7.8
CVE-2026-87695Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized att…0.2%높음7.8
CVE-2026-87694Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-87699Heap-based buffer overflow in Winlogon allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-96324Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges local…0.3%높음7.8
CVE-2026-87702Integer overflow or wraparound in Windows Resource Management (MRM) allows an authorized attacker to elevate p…0.3%높음7.8
CVE-2026-87712Use after free in Windows Quality of Service (QoS) Packet Scheduler allows an authorized attacker to elevate p…0.2%높음7.8
CVE-2026-96843Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-88072Improper access control in Windows Host Guardian Service allows an authorized attacker to elevate privileges l…0.4%높음7.8
CVE-2026-88071Double free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-88070Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-88093Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges local…0.3%높음7.8
CVE-2026-88091Deserialization of untrusted data in Windows Management Instrumentation allows an authorized attacker to eleva…2.1%높음7.8
CVE-2026-88105Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges local…0.2%높음7.8
CVE-2026-88101Weak authentication in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges…0.2%높음7.8
CVE-2026-88100Use after free in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locall…0.3%높음7.8
CVE-2026-96847Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-88118Integer overflow or wraparound in Windows Background Intelligent Transfer Service (BITS) allows an authorized …0.4%높음7.8
CVE-2026-96317Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-88133Improper authorization in Windows Portable Device Enumerator Service allows an authorized attacker to elevate …0.4%높음7.8
CVE-2026-96318Heap-based buffer overflow in Windows Resume allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-88128Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges loc…0.3%높음7.8
CVE-2026-88135Improper access control in WebDAV allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-88134Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-70220Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.0.4%높음7.8
CVE-2026-96243Improper link resolution before file access ('link following') in Windows WalletService allows an authorized a…0.3%높음7.8
CVE-2026-70008Integer overflow or wraparound in Windows IP Over USB Service allows an authorized attacker to elevate privile…0.3%높음7.8
CVE-2026-88152Use after free in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elev…0.4%높음7.8
CVE-2026-96244Use after free in Windows Internal System User Profile allows an authorized attacker to elevate privileges loc…0.3%높음7.8
CVE-2026-96249Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-88168Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges l…0.3%높음7.8
CVE-2026-96231Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevat…0.3%높음7.8
CVE-2026-88182Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges local…0.3%높음7.8
CVE-2026-88181Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-88180Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.0.2%높음7.8
CVE-2026-88179Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-88177Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.0.2%높음7.8
CVE-2026-88193Heap-based buffer overflow in Microsoft Scripting Engine allows an authorized attacker to elevate privileges l…0.3%높음7.8
CVE-2026-96225Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevat…0.3%높음7.8
CVE-2026-96217Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-88189Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.0.2%높음7.8
CVE-2026-88188Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-96220Improper control of generation of code ('code injection') in Windows Assigned Access allows an authorized atta…0.7%높음7.8
CVE-2026-96223Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-88210Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker t…0.4%높음7.8
CVE-2026-85338Out-of-bounds read in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally…0.3%높음7.8
CVE-2026-96118Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-96108Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-70218Insufficient granularity of access control in Windows StateRepository API allows an authorized attacker to ele…0.3%높음7.8
CVE-2026-103568Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Credent…0.2%높음7.8
CVE-2026-105003Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-105004Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-85373Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker…0.3%높음7.8
CVE-2026-108130Heap-based buffer overflow in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacke…0.3%높음7.8
CVE-2026-83741Use after free in Internet Explorer allows an authorized attacker to elevate privileges locally.0.2%높음7.8
CVE-2026-69650Improper verification of cryptographic signature in Windows Key Distribution Center allows an authorized attac…0.2%높음7.8
CVE-2026-70286Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locall…0.4%높음7.8
CVE-2026-70285Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileg…0.3%높음7.8
CVE-2026-49785Improper resource shutdown or release in Windows UEFI allows an authorized attacker to bypass a security featu…0.3%높음7.8
CVE-2026-61931Use after free in Windows Perception Simulation Service allows an authorized attacker to elevate privileges lo…0.3%높음7.8
CVE-2026-68836Heap-based buffer overflow in Windows kernel32.dll allows an authorized attacker to elevate privileges locally…0.3%높음7.8
CVE-2026-69354Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges loca…0.3%높음7.8
CVE-2026-69471Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-108133Release of invalid pointer or reference in Windows Modern Device Management (MDM) allows an authorized attacke…0.3%높음7.8
CVE-2026-69633Heap-based buffer overflow in Windows Update allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-69673Improper link resolution before file access ('link following') in Windows Update allows an authorized attacker…0.5%높음7.8
CVE-2026-69718Improper neutralization of special elements used in a command ('command injection') in Windows Update allows a…1.0%높음7.8
CVE-2026-69733Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally.0.4%높음7.8
CVE-2026-70143Heap-based buffer overflow in Windows Network File System allows an authorized attacker to execute code locall…0.3%높음7.8
CVE-2026-70121Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-83796Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-85945Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.0.4%높음7.8
CVE-2026-69783External control of file name or path in Windows Update allows an authorized attacker to elevate privileges lo…0.4%높음7.8
CVE-2026-70110Stack-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate …0.4%높음7.8
CVE-2026-69798Use after free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally…0.3%높음7.8
CVE-2026-69850Untrusted pointer dereference in Windows Certificates allows an authorized attacker to elevate privileges loca…0.3%높음7.8
CVE-2026-69867Out-of-bounds read in SQLite allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-69880Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized a…0.4%높음7.8
CVE-2026-69882Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally.0.4%높음7.8
CVE-2026-69884Buffer over-read in Windows GDI allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-69898Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-69909Heap-based buffer overflow in Microsoft COM for Windows allows an authorized attacker to elevate privileges lo…0.3%높음7.8
CVE-2026-83836Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code locally.0.4%높음7.8
CVE-2026-69916Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-83882Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-69923Uncontrolled search path element in Windows AI allows an authorized attacker to elevate privileges locally.0.4%높음7.8
CVE-2026-69926Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized a…0.4%높음7.8
CVE-2026-69934Integer overflow or wraparound in Windows Spaceport.sys allows an authorized attacker to elevate privileges lo…0.3%높음7.8
CVE-2026-69942Buffer over-read in Windows Overlay Filter allows an authorized attacker to execute code locally.0.3%높음7.8
CVE-2026-102202Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized att…0.4%높음7.8
CVE-2026-69949Heap-based buffer overflow in Windows Client for NFS allows an authorized attacker to elevate privileges local…0.3%높음7.8
CVE-2026-69950Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-69952Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-69953Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-100217Improper privilege management in Windows Group Policy allows an authorized attacker to elevate privileges loca…0.3%높음7.8
CVE-2026-100215Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code loc…0.5%높음7.8
CVE-2026-69959Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to execute code locally.0.3%높음7.8
CVE-2026-83902Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges l…0.4%높음7.8
CVE-2026-102220Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-69963Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges …0.3%높음7.8
CVE-2026-83762Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-69966Integer overflow or wraparound in Microsoft Streaming Service allows an authorized attacker to elevate privile…0.3%높음7.8
CVE-2026-102218Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized att…0.3%높음7.8
CVE-2026-102216Access of resource using incompatible type ('type confusion') in Windows StateRepository API allows an authori…0.3%높음7.8
CVE-2026-83768Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.0.4%높음7.8
CVE-2026-103553Out-of-bounds read in Windows Partition Management Driver allows an authorized attacker to elevate privileges …0.3%높음7.8
CVE-2026-108136Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges local…0.3%높음7.8
CVE-2026-70010Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-70015Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to …0.3%높음7.8
CVE-2026-70027Heap-based buffer overflow in Windows Subsystem for Linux allows an authorized attacker to elevate privileges …0.3%높음7.8
CVE-2026-83927Improper link resolution before file access ('link following') in Windows Registry allows an authorized attack…0.4%높음7.8
CVE-2026-83920Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate priv…0.3%높음7.8
CVE-2026-83913Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-85850Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges …0.3%높음7.8
CVE-2026-70051Access of resource using incompatible type ('type confusion') in Windows SmartScreen allows an authorized atta…0.3%높음7.8
CVE-2026-85858Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges local…0.3%높음7.8
CVE-2026-85863Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.0.2%높음7.8
CVE-2026-70054Heap-based buffer overflow in Windows NetBIOS allows an authorized attacker to elevate privileges locally.0.4%높음7.8
CVE-2026-70060Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileg…0.4%높음7.8
CVE-2026-70059Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-70064Integer underflow (wrap or wraparound) in Windows Kerberos allows an authorized attacker to elevate privileges…0.3%높음7.8
CVE-2026-83791Improper authorization in Windows Virtual Input allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-70052Integer overflow or wraparound in Windows PowerShell allows an authorized attacker to execute code locally.0.3%높음7.8
CVE-2026-70303Out-of-bounds write in Windows Kernel allows an authorized attacker to elevate privileges locally.0.4%높음7.8
CVE-2026-85884Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an aut…0.4%높음7.8
CVE-2026-70048Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate pr…0.3%높음7.8
CVE-2026-85933Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally…0.2%높음7.8
CVE-2026-85376Weak authentication in Windows Print Spooler Components allows an authorized attacker to elevate privileges lo…0.3%높음7.8
CVE-2026-70093Heap-based buffer overflow in Windows Rich Text Edit Control allows an authorized attacker to elevate privileg…0.3%높음7.8
CVE-2026-70092Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate p…0.4%높음7.8
CVE-2026-70103Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges loca…0.4%높음7.8
CVE-2026-70102Use after free in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-70109Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate p…0.4%높음7.8
CVE-2026-70108Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileg…0.4%높음7.8
CVE-2026-70106Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.0.4%높음7.8
CVE-2026-70104Untrusted pointer dereference in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privi…0.4%높음7.8
CVE-2026-70114Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-70113Integer overflow or wraparound in Windows Client for NFS allows an authorized attacker to elevate privileges l…0.3%높음7.8
CVE-2026-70112Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to execute code locally.0.3%높음7.8
CVE-2026-85829Double free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-70117Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileg…0.4%높음7.8
CVE-2026-85837Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-70123Numeric truncation error in Microsoft Graphics Component allows an authorized attacker to elevate privileges l…0.3%높음7.8
CVE-2026-70132Heap-based buffer overflow in Windows Portable Device File System Driver allows an authorized attacker to elev…0.4%높음7.8
CVE-2026-70131Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to elevate pr…0.4%높음7.8
CVE-2026-87706Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privi…0.2%높음7.8
CVE-2026-70138Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-70023Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-70142Untrusted search path in Windows Update Service allows an authorized attacker to elevate privileges locally.0.4%높음7.8
CVE-2026-70139Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privileges local…0.3%높음7.8
CVE-2026-70151Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.0.4%높음7.8
CVE-2026-96306Out-of-bounds read in Windows Sysmain Service allows an authorized attacker to elevate privileges locally.0.2%높음7.8
CVE-2026-88109Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-96916Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-85318Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges loca…0.3%높음7.8
CVE-2026-88147Heap-based buffer overflow in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to…0.3%높음7.8
CVE-2026-70172Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-70177Numeric truncation error in Microsoft Windows Search Component allows an authorized attacker to elevate privil…0.3%높음7.8
CVE-2026-70184Improper resolution of path equivalence in Windows Backup Engine allows an authorized attacker to elevate priv…0.4%높음7.8
CVE-2026-88191Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an…0.4%높음7.8
CVE-2026-96186Deserialization of untrusted data in Microsoft Windows Media Foundation allows an authorized attacker to eleva…1.7%높음7.8
CVE-2026-83837Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges loc…0.3%높음7.8
CVE-2026-70222Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally.0.4%높음7.8
CVE-2026-70228Out-of-bounds read in Desktop Window Manager allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-70225Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock…0.3%높음7.8
CVE-2026-70238Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privi…0.3%높음7.8
CVE-2026-70233Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate p…0.4%높음7.8
CVE-2026-97807Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges local…0.3%높음7.8
CVE-2026-83826Untrusted pointer dereference in Windows Error Reporting allows an authorized attacker to elevate privileges l…0.3%높음7.8
CVE-2026-70247Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to execute code locally.0.3%높음7.8
CVE-2026-70245Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock…0.4%높음7.8
CVE-2026-97809Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges local…0.3%높음7.8
CVE-2026-70255Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges local…0.4%높음7.8
CVE-2026-97811Double free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.0.2%높음7.8
CVE-2026-97794Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized …0.3%높음7.8
CVE-2026-97798Improper neutralization of argument delimiters in a command ('argument injection') in Windows Error Reporting …0.8%높음7.8
CVE-2026-97799Improper verification of cryptographic signature in Windows Audio Service allows an authorized attacker to ele…0.3%높음7.8
CVE-2026-97800Incorrect permission assignment for critical resource in Windows Mobile Broadband allows an authorized attacke…0.2%높음7.8
CVE-2026-96308Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-83829Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate priv…0.3%높음7.8
CVE-2026-70274Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-97803Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-70278Heap-based buffer overflow in Microsoft Windows Media Foundation allows an authorized attacker to elevate priv…0.3%높음7.8
CVE-2026-97804Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-83830Heap-based buffer overflow in Windows COM+ Event System Service allows an authorized attacker to elevate privi…0.4%높음7.8
CVE-2026-96312Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-70566Null pointer dereference in Windows Schannel allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-73027External control of system or configuration setting in Windows Setup Files Cleanup allows an authorized attack…0.4%높음7.8
CVE-2026-96309Use after free in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-97806Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges local…0.3%높음7.8
CVE-2026-78459Heap-based buffer overflow in Windows Internet Information Services allows an authorized attacker to elevate p…0.3%높음7.8
CVE-2026-83513Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to ele…0.3%높음7.8
CVE-2026-81969Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to e…0.3%높음7.8
CVE-2026-83499Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to e…0.3%높음7.8
CVE-2026-83506Untrusted search path in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.0.4%높음7.8
CVE-2026-85867Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevat…0.2%높음7.8
CVE-2026-83508Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-83832Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-83518Heap-based buffer overflow in RPC Runtime allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-83514Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate pri…0.3%높음7.8
CVE-2026-83567Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-97792Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized att…0.3%높음7.8
CVE-2026-87692Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privil…1.6%높음7.8
CVE-2026-83570Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges local…0.3%높음7.8
CVE-2026-83569Heap-based buffer overflow in HID Parser Library allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-83568Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges loc…0.3%높음7.8
CVE-2026-87700Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.0.2%높음7.8
CVE-2026-83579Heap-based buffer overflow in Windows Smart Card allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-83583Improper access control in Windows Geotag Broker allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-83587Untrusted pointer dereference in Windows Core Messaging allows an authorized attacker to elevate privileges lo…0.3%높음7.8
CVE-2026-83586Weak authentication in Windows Resilient File System (ReFS) Deduplication Service allows an authorized attacke…0.3%높음7.8
CVE-2026-83585Use of externally-controlled format string in Windows NTFS allows an authorized attacker to elevate privileges…0.3%높음7.8
CVE-2026-88194Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-83638Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-83637Out-of-bounds read in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-83634Double free in Windows BitLocker allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-83588Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-83641Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-83640Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.0.3%높음7.8
CVE-2026-83639Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges …0.3%높음7.8
CVE-2026-83654Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized at…0.3%높음7.8
CVE-2026-83652Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-83650Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-83659Improper link resolution before file access ('link following') in Windows User Profile Service allows an autho…0.3%높음7.8
CVE-2026-83669Use of uninitialized resource in Windows Error Reporting allows an authorized attacker to elevate privileges l…0.4%높음7.8
CVE-2026-85842Use of externally-controlled format string in Windows Image Acquisition allows an authorized attacker to eleva…0.3%높음7.8
CVE-2026-83679Use after free in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locall…0.3%높음7.8
CVE-2026-83678Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-83690Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-87707Heap-based buffer overflow in Windows Fax and Scan Service allows an authorized attacker to elevate privileges…0.2%높음7.8
CVE-2026-85807Integer overflow or wraparound in Windows USB Video Driver allows an authorized attacker to elevate privileges…0.3%높음7.8
CVE-2026-85796Numeric truncation error in Windows Installer allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-87711Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.0.2%높음7.8
CVE-2026-83692Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges l…0.3%높음7.8
CVE-2026-83691Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-83698Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to eleva…0.3%높음7.8
CVE-2026-83700Use after free in Windows Now Playing Session Manager allows an authorized attacker to elevate privileges loca…0.3%높음7.8
CVE-2026-83704Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an…0.4%높음7.8
CVE-2026-83709Heap-based buffer overflow in Windows NTLM allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-83721Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-83732Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-83727Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-83735Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges …0.4%높음7.8
CVE-2026-83758Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to execute code locally.0.3%높음7.8
CVE-2026-83757Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-83756Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-83753Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate pri…0.3%높음7.8
CVE-2026-83761Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.0.4%높음7.8
CVE-2026-83767Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.0.2%높음7.8
CVE-2026-83763Access of resource using incompatible type ('type confusion') in Windows Input System allows an authorized att…0.4%높음7.8
CVE-2026-83769Use after free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.0.4%높음7.8
CVE-2026-83779Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-83781Improper null termination in Windows Program Compatibility Assistant Service allows an authorized attacker to …0.3%높음7.8
CVE-2026-83783Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate priv…0.3%높음7.8
CVE-2026-96995Stack-based buffer overflow in Microsoft Office Word allows an authorized attacker to elevate privileges local…0.3%높음7.8
CVE-2026-83792Incorrect authorization in Windows Device Install Service allows an authorized attacker to elevate privileges …0.3%높음7.8
CVE-2026-83828Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges …0.3%높음7.8
CVE-2026-83840Weak authentication in Windows Error Reporting allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-83850Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate priv…0.3%높음7.8
CVE-2026-96996Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.0.3%높음7.8
CVE-2026-83848Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate pr…0.4%높음7.8
CVE-2026-83859Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-83857Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to ele…0.3%높음7.8
CVE-2026-96997Use after free in Microsoft Office OneNote allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-83863Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges loca…0.3%높음7.8
CVE-2026-83861Heap-based buffer overflow in Windows Remote Desktop Protocol allows an authorized attacker to elevate privile…0.3%높음7.8
CVE-2026-83867Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate privileges l…0.4%높음7.8
CVE-2026-97001Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.0.4%높음7.8
CVE-2026-83873Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally.0.4%높음7.8
CVE-2026-83872Incorrect conversion between numeric types in Windows TCP/IP allows an authorized attacker to elevate privileg…0.3%높음7.8
CVE-2026-83877Integer overflow or wraparound in HID Parser Library allows an authorized attacker to elevate privileges local…0.3%높음7.8
CVE-2026-83876Use after free in Windows Shell allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-83881Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges lo…0.3%높음7.8
CVE-2026-83883Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-88074Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an authorized att…0.3%높음7.8
CVE-2026-83896Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges l…0.4%높음7.8
CVE-2026-97009Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.0.3%높음7.8
CVE-2026-96950Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to ele…0.3%높음7.8
CVE-2026-83903Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges l…0.3%높음7.8
CVE-2026-83912Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-83919Heap-based buffer overflow in Microsoft Internet Messaging API allows an authorized attacker to execute code l…0.3%높음7.8
CVE-2026-83918Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-83922Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-83699Stack-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elev…0.4%높음7.8
CVE-2026-96953Null pointer dereference in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attac…0.2%높음7.8
CVE-2026-83932Heap-based buffer overflow in Windows Group Policy allows an authorized attacker to elevate privileges locally…0.3%높음7.8
CVE-2026-83931Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.0.3%높음7.8
CVE-2026-84013Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-84016Out-of-bounds write in Windows EAPHost Service allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-69957Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges l…0.3%높음7.8
CVE-2026-96946Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to ele…0.3%높음7.8
CVE-2026-85327Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privil…0.3%높음7.8
CVE-2026-85332Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges local…0.3%높음7.8
CVE-2026-96947Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to ele…0.3%높음7.8
CVE-2026-96931Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-85343Improper link resolution before file access ('link following') in Windows Hyper-V allows an authorized attacke…0.4%높음7.8
CVE-2026-102196Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges local…0.3%높음7.8
CVE-2026-85341Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges loc…0.3%높음7.8
CVE-2026-85340Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-83712Out-of-bounds write in Windows NTFS allows an authorized attacker to execute code locally.0.3%높음7.8
CVE-2026-85359Improper control of generation of code ('code injection') in Windows Performance Monitor allows an authorized …0.7%높음7.8
CVE-2026-85358Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-85356Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privile…0.3%높음7.8
CVE-2026-88080Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.0.2%높음7.8
CVE-2026-102201Use after free in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges local…0.3%높음7.8
CVE-2026-85368Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-85366Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-102204Improper link resolution before file access ('link following') in Microsoft Defender for Endpoint allows an au…0.3%높음7.8
CVE-2026-102205Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized att…0.3%높음7.8
CVE-2026-88126Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-85375Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate …0.3%높음7.8
CVE-2026-96933Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate pr…0.3%높음7.8
CVE-2026-85795Use after free in Windows Text Services Framework allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-85804Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-85888Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.0.5%높음7.7
CVE-2026-102231Improper resolution of path equivalence in Visual Studio Code allows an unauthorized attacker to bypass a secu…0.4%높음7.7
CVE-2026-88081Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.0.5%높음7.7
CVE-2026-83947Missing authorization in Azure Event Grid allows an authorized attacker to perform spoofing over a network.0.4%높음7.7
CVE-2026-96236Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny s…1.1%높음7.5
CVE-2026-69986Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.0.6%높음7.5
CVE-2026-69984Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.0.6%높음7.5
CVE-2026-103577Insecure default variable initialization in Microsoft QUIC allows an unauthorized attacker to bypass a securit…0.5%높음7.5
CVE-2026-96960Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a…1.1%높음7.5
CVE-2026-69976Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.0.6%높음7.5
CVE-2026-96248Stack-based buffer overflow in Windows Host Guardian Service allows an unauthorized attacker to deny service o…1.1%높음7.5
CVE-2026-70082Uncaught exception in Windows DNS allows an unauthorized attacker to deny service over a network.1.2%높음7.5
CVE-2026-102192Integer underflow (wrap or wraparound) in Windows Failover Cluster allows an unauthorized attacker to deny ser…1.1%높음7.5
CVE-2026-70095Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network.0.6%높음7.5
CVE-2026-105592Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a n…0.5%높음7.5
CVE-2026-69789Heap-based buffer overflow in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to …0.4%높음7.5
CVE-2026-83843Out-of-bounds read in Windows Internet Key Exchange (IKE) Protocol allows an unauthorized attacker to deny ser…1.1%높음7.5
CVE-2026-105599Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over…0.5%높음7.5
CVE-2026-105714Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a n…0.5%높음7.5
CVE-2026-85891Exposure of sensitive information to an unauthorized actor in Azure HDInsight allows an unauthorized attacker …0.9%높음7.5
CVE-2026-69651Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.1.1%높음7.5
CVE-2026-87696Improper verification of cryptographic signature in Microsoft Exchange Server allows an authorized attacker to…0.4%높음7.5
CVE-2026-96246Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to disclose information over…1.0%높음7.5
CVE-2026-69454Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unau…1.0%높음7.5
CVE-2026-58280Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network.1.1%높음7.5
CVE-2026-85319Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an…1.1%높음7.5
CVE-2026-69994Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.0.6%높음7.5
CVE-2026-69988Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.0.6%높음7.5
CVE-2026-69987Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.0.6%높음7.5
CVE-2026-96233Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network.0.8%높음7.5
CVE-2026-70079Improper enforcement of behavioral workflow in Windows DNS allows an unauthorized attacker to deny service ove…1.1%높음7.5
CVE-2026-70058Out-of-bounds write in Windows DHCP Server allows an unauthorized attacker to execute code over a network.1.2%높음7.5
CVE-2026-70014Use after free in Windows Cryptographic Services allows an authorized attacker to execute code over a network.0.7%높음7.5
CVE-2026-70012Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.0.6%높음7.5
CVE-2026-84017Null pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker t…1.1%높음7.5
CVE-2026-103569Out-of-bounds read in Windows IKE Extension allows an unauthorized attacker to disclose information over a net…1.0%높음7.5
CVE-2026-96866Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service…1.1%높음7.5
CVE-2026-69991Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.0.6%높음7.5
CVE-2026-70006Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.0.6%높음7.5
CVE-2026-83754Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a netwo…0.6%높음7.5
CVE-2026-88206Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate pri…0.5%높음7.5
CVE-2026-88207Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over…0.5%높음7.5
CVE-2026-70004Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.0.6%높음7.5
CVE-2026-105728Improper authentication in Dynamics Business Central allows an unauthorized attacker to disclose information o…0.9%높음7.5
CVE-2026-69998Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.0.6%높음7.5
CVE-2026-85322Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attac…1.0%높음7.5
CVE-2026-69997Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.0.6%높음7.5
CVE-2026-69996Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.0.6%높음7.5
CVE-2026-85321Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an…1.1%높음7.5
CVE-2026-69995Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.0.6%높음7.5
CVE-2026-69992Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a netwo…0.6%높음7.5
CVE-2026-83856Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a net…0.6%높음7.5
CVE-2026-83855Integer underflow (wrap or wraparound) in Windows WLAN Service allows an unauthorized attacker to deny service…1.2%높음7.5
CVE-2026-96245Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disc…1.0%높음7.5
CVE-2026-69577Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unau…1.0%높음7.5
CVE-2026-103558Deadlock in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service o…0.9%높음7.5
CVE-2026-83665Null pointer dereference in Windows DHCP Server allows an unauthorized attacker to deny service over a network…1.2%높음7.5
CVE-2026-83655Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to deny service over a netwo…1.2%높음7.5
CVE-2026-83645Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an…1.1%높음7.5
CVE-2026-85811Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over an adjacent…0.4%높음7.5
CVE-2026-83647Out-of-bounds read in Active Directory Domain Services allows an unauthorized attacker to deny service over a …1.1%높음7.5
CVE-2026-83670Out-of-bounds read in Function Discovery Service (fdwsd.dll) allows an unauthorized attacker to disclose infor…1.0%높음7.5
CVE-2026-108131No cwe for this issue in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perfo…0.7%높음7.5
CVE-2026-87716Heap-based buffer overflow in Windows Storage Spaces Controller allows an unauthorized attacker to deny servic…1.1%높음7.5
CVE-2026-83677Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to d…0.9%높음7.5
CVE-2026-83635Out-of-bounds read in DNS Server allows an unauthorized attacker to deny service over a network.1.2%높음7.5
CVE-2026-96232Out-of-bounds read in .NET allows an unauthorized attacker to disclose information over a network.0.7%높음7.5
CVE-2026-97789Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.0.6%높음7.5
CVE-2026-97788Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attacker to disc…0.7%높음7.5
CVE-2026-83516Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attack…1.2%높음7.5
CVE-2026-96861Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service…1.1%높음7.5
CVE-2026-97801Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to perform ta…0.6%높음7.5
CVE-2026-83860Stack-based buffer overflow in Windows GDI allows an unauthorized attacker to deny service over a network.1.1%높음7.5
CVE-2026-70251Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate pri…0.5%높음7.5
CVE-2026-83795Heap-based buffer overflow in Windows IKE Extension allows an unauthorized attacker to deny service over a net…1.1%높음7.5
CVE-2026-85808Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny…1.1%높음7.5
CVE-2026-85334Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose inform…1.0%높음7.5
CVE-2026-70281Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a …1.0%높음7.5
CVE-2026-105723Untrusted pointer dereference in Windows Distributed File System (DFS) allows an unauthorized attacker to elev…1.1%높음7.5
CVE-2026-96237Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute co…0.5%높음7.5
CVE-2026-96958Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.1.1%높음7.5
CVE-2026-70207Heap-based buffer overflow in Network Policy Server (NPS) allows an authorized attacker to execute code over a…0.7%높음7.5
CVE-2026-96959Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service o…0.8%높음7.5
CVE-2026-87713Use after free in Windows Bluetooth Port Driver allows an unauthorized attacker to elevate privileges over an …0.3%높음7.5
CVE-2026-85353Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose information…1.0%높음7.5
CVE-2026-70202Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate pri…0.5%높음7.5
CVE-2026-96071Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.0.6%높음7.5
CVE-2026-84008Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.0.8%높음7.5
CVE-2026-96945Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny service over a network.0.8%높음7.5
CVE-2026-70186Deadlock in ASP.NET Core allows an unauthorized attacker to deny service over a network.0.8%높음7.5
CVE-2026-70181Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny s…1.1%높음7.5
CVE-2026-70183Concurrent execution using shared resource with improper synchronization ('race condition') in ASP.NET Core al…0.5%높음7.5
CVE-2026-70179Authentication bypass by spoofing in ASP.NET Core allows an authorized attacker to elevate privileges over a n…0.6%높음7.5
CVE-2026-88083Stack-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.0.3%높음7.5
CVE-2026-70163Allocation of resources without limits or throttling in OpenSSH for Windows allows an unauthorized attacker to…1.1%높음7.5
CVE-2026-70155Missing release of memory after effective lifetime in Windows DNS allows an unauthorized attacker to deny serv…1.2%높음7.5
CVE-2026-70159Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny s…1.1%높음7.5
CVE-2026-105715Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code over a…0.5%높음7.5
CVE-2026-70133Allocation of resources without limits or throttling in Windows SMB Server allows an unauthorized attacker to …1.1%높음7.5
CVE-2026-70031Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to deny service over a network.1.1%높음7.5
CVE-2026-85324Memory allocation with excessive size value in Active Directory Federation Services (AD FS) allows an unauthor…0.8%높음7.5
CVE-2026-105009Incorrect default permissions in Windows Server Update Service allows an authorized attacker to elevate privil…0.3%높음7.5
CVE-2026-83739Use after free in Windows Bluetooth Service allows an unauthorized attacker to execute code over an adjacent n…0.4%높음7.5
CVE-2026-70033Missing release of memory after effective lifetime in Remote Desktop Gateway Service allows an unauthorized at…1.1%높음7.5
CVE-2026-97830Double free in Windows Internet Information Services allows an unauthorized attacker to deny service over a ne…0.9%높음7.5
CVE-2026-96325Missing reference to active allocated resource in Windows SMB Server allows an unauthorized attacker to deny s…0.8%높음7.5
CVE-2026-87705Improper verification of source of a communication channel in Windows Hyper-V allows an unauthorized attacker …0.3%높음7.4
CVE-2026-96222Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacke…0.6%높음7.4
CVE-2026-83511Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform…0.6%높음7.4
CVE-2026-105013Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code…0.8%높음7.4
CVE-2026-85922Weak authentication in Azure Key Vault allows an unauthorized attacker to bypass a security feature over a net…0.5%높음7.4
CVE-2026-102234Reliance on untrusted inputs in a security decision in Visual Studio Code allows an unauthorized attacker to b…0.6%높음7.4
CVE-2026-96188External control of system or configuration setting in Microsoft PowerToys allows an authorized attacker to el…0.4%높음7.3
CVE-2026-70161Improper limitation of a pathname to a restricted directory ('path traversal') in .NET allows an authorized at…0.5%높음7.3
CVE-2026-88204Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office Share…0.6%높음7.3
CVE-2026-105732Stack-based buffer overflow in SysInternals allows an authorized attacker to elevate privileges locally.0.4%높음7.3
CVE-2026-100207Improper neutralization of special elements used in an os command ('os command injection') in Azure CycleCloud…0.4%높음7.3
CVE-2026-70190Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevat…0.5%높음7.3
CVE-2026-108399Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally.0.3%높음7.2
CVE-2026-85798Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute c…0.9%높음7.2
CVE-2026-70267Inclusion of functionality from untrusted control sphere in Microsoft Office SharePoint allows an authorized a…0.9%높음7.2
CVE-2026-70126Out-of-bounds read in Windows Bluetooth Port Driver allows an unauthorized attacker to execute code over an ad…0.5%높음7.1
CVE-2026-69452Use after free in Windows Enterprise App Management allows an authorized attacker to elevate privileges over a…0.6%높음7.1
CVE-2026-100205Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges locally.0.3%높음7.1
CVE-2026-85856Heap-based buffer overflow in Windows Internet Connection Sharing (ICS) allows an authorized attacker to execu…0.4%높음7.1
CVE-2026-83715Missing authentication for critical function in Windows Error Reporting allows an authorized attacker to perfo…0.3%높음7.1
CVE-2026-105729Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges locally.0.3%높음7.1
CVE-2026-87715Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.0.2%높음7.0
CVE-2026-69856Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.0.2%높음7.0
CVE-2026-69931Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Storage…0.2%높음7.0
CVE-2026-70249Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-70223Use after free in Windows Console Driver allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-70205Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock…0.3%높음7.0
CVE-2026-70198Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-70115Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges local…0.3%높음7.0
CVE-2026-83879Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Overlay…0.2%높음7.0
CVE-2026-83900Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-96302Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-96304Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-83752Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.0.2%높음7.0
CVE-2026-70169Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connect…0.2%높음7.0
CVE-2026-69387Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-96868Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-96310Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-96254Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-96250Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-87708Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-85828Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-100200Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-100201Heap-based buffer overflow in Windows Client License Service allows an authorized attacker to elevate privileg…0.3%높음7.0
CVE-2026-100203Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privileges local…0.3%높음7.0
CVE-2026-100216Stack-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-100225Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-102189Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-102191Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-102193Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges local…0.3%높음7.0
CVE-2026-102194Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-102195Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges local…0.3%높음7.0
CVE-2026-102197Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges local…0.3%높음7.0
CVE-2026-102208Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-102209Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges…0.2%높음7.0
CVE-2026-102211Use after free in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate…0.2%높음7.0
CVE-2026-102232Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature loc…0.3%높음7.0
CVE-2026-103554Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges local…0.3%높음7.0
CVE-2026-103555Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate…0.3%높음7.0
CVE-2026-103565Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges local…0.3%높음7.0
CVE-2026-108132Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-108134Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-108135Improper link resolution before file access ('link following') in Windows Backup Engine allows an authorized a…0.3%높음7.0
CVE-2026-108464Use after free in Software Protection Platform (SPP) allows an authorized attacker to elevate privileges local…0.3%높음7.0
CVE-2026-108465Use after free in Windows Update Delivery Optimization allows an authorized attacker to elevate privileges loc…0.3%높음7.0
CVE-2026-108468Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-109453Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate…0.3%높음7.0
CVE-2026-69736Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Credent…0.2%높음7.0
CVE-2026-69743Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate pri…0.3%높음7.0
CVE-2026-69763Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.0.2%높음7.0
CVE-2026-69766Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.0.2%높음7.0
CVE-2026-69795Null pointer dereference in Windows Clipboard Server allows an authorized attacker to elevate privileges local…0.3%높음7.0
CVE-2026-69915Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-69935Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.0.2%높음7.0
CVE-2026-69964Use after free in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.0.2%높음7.0
CVE-2026-69970Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges …0.2%높음7.0
CVE-2026-69977Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elev…0.3%높음7.0
CVE-2026-70021Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-70026Use after free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-70045Use after free in Windows Work Folders allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-70056Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-70066Use after free in Windows DHCP Server allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-70067Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-70076Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-70086Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges local…0.3%높음7.0
CVE-2026-70118Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-70134Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-70136Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges local…0.3%높음7.0
CVE-2026-70140Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-70144Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-70150Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges local…0.3%높음7.0
CVE-2026-70156Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges local…0.3%높음7.0
CVE-2026-70160Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-70164Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-70168Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privi…0.3%높음7.0
CVE-2026-70176Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-70212Improper restriction of communication channel to intended endpoints in Windows Security Center allows an autho…0.2%높음7.0
CVE-2026-70209Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-70237Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privi…0.3%높음7.0
CVE-2026-70236Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-70230Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-70243Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-70241Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-70252Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges …0.3%높음7.0
CVE-2026-70253Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-70273Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-70272Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-70271Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-70276Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-72955Use after free in Windows Application Compatibility Cache allows an authorized attacker to elevate privileges …0.3%높음7.0
CVE-2026-72934Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate pri…0.3%높음7.0
CVE-2026-72969Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate pri…0.3%높음7.0
CVE-2026-72968Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate pri…0.3%높음7.0
CVE-2026-81971Concurrent execution using shared resource with improper synchronization ('race condition') in Windows NTFS al…0.2%높음7.0
CVE-2026-83505Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorized attacker…0.2%높음7.0
CVE-2026-83510Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorized attacker…0.2%높음7.0
CVE-2026-83566Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-83564Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges local…0.3%높음7.0
CVE-2026-83574Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges local…0.3%높음7.0
CVE-2026-83584Use after free in Windows Smart Card allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-83644Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-83666Concurrent execution using shared resource with improper synchronization ('race condition') in Active Director…0.2%높음7.0
CVE-2026-85810Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-83676Integer underflow (wrap or wraparound) in Windows Installer allows an authorized attacker to elevate privilege…0.3%높음7.0
CVE-2026-83675Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-83682Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-83680Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.0.2%높음7.0
CVE-2026-83689Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-83687Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate pr…0.3%높음7.0
CVE-2026-83696Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges l…0.3%높음7.0
CVE-2026-83694Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privile…0.3%높음7.0
CVE-2026-83701Use after free in Windows Now Playing Session Manager allows an authorized attacker to elevate privileges loca…0.3%높음7.0
CVE-2026-83708Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-83707Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-83717Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-83722Use after free in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate …0.2%높음7.0
CVE-2026-83720Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-83724Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate priv…0.2%높음7.0
CVE-2026-83738Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privi…0.2%높음7.0
CVE-2026-83740Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-83749Use after free in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.0.2%높음7.0
CVE-2026-83775Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Install…0.2%높음7.0
CVE-2026-83785Use after free in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locall…0.3%높음7.0
CVE-2026-83793Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows a…0.3%높음7.0
CVE-2026-83827Heap-based buffer overflow in Windows Bluetooth Port Driver allows an authorized attacker to elevate privilege…0.3%높음7.0
CVE-2026-83842Double free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-83841Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K …0.2%높음7.0
CVE-2026-83846Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privile…0.2%높음7.0
CVE-2026-83853Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-83852Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.0.2%높음7.0
CVE-2026-83866Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-83871Heap-based buffer overflow in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.0.2%높음7.0
CVE-2026-83886Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges loca…0.3%높음7.0
CVE-2026-83899Improper privilege management in Windows Installer allows an authorized attacker to elevate privileges locally…0.2%높음7.0
CVE-2026-83901Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-83908Release of invalid pointer or reference in RPC Runtime allows an authorized attacker to elevate privileges loc…0.3%높음7.0
CVE-2026-83916Double free in Windows Error Reporting allows an authorized attacker to execute code locally.0.3%높음7.0
CVE-2026-83921Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate priv…0.3%높음7.0
CVE-2026-84019Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges …0.2%높음7.0
CVE-2026-85328Weak authentication in Windows Projected File System allows an authorized attacker to elevate privileges local…0.2%높음7.0
CVE-2026-85342Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges local…0.3%높음7.0
CVE-2026-85361Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-85355Inclusion of functionality from untrusted control sphere in Windows Common Log File System Driver allows an au…0.3%높음7.0
CVE-2026-85354Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-85370Use after free in WebDAV allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-85367Use after free in Windows Cash Drawer Protocol Provider allows an authorized attacker to elevate privileges lo…0.3%높음7.0
CVE-2026-85365Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges loca…0.2%높음7.0
CVE-2026-85364Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-85372Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-85791Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate pr…0.3%높음7.0
CVE-2026-85803Use after free in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges loca…0.3%높음7.0
CVE-2026-85802Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-85823Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges loca…0.3%높음7.0
CVE-2026-85827Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.0.2%높음7.0
CVE-2026-85826Out-of-bounds write in Windows Fast FAT Driver allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-85825Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to ele…0.2%높음7.0
CVE-2026-85834Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-85846Use after free in Windows Web Account Manager allows an authorized attacker to elevate privileges locally.0.2%높음7.0
CVE-2026-85853Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-85855Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-85868Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges lo…0.3%높음7.0
CVE-2026-85879Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker…0.2%높음7.0
CVE-2026-85912Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Clipboa…0.1%높음7.0
CVE-2026-85920Time-of-check time-of-use (toctou) race condition in Windows BitLocker allows an authorized attacker to elevat…0.2%높음7.0
CVE-2026-85943Time-of-check time-of-use (toctou) race condition in Reliable Multicast Transport Driver (RMCAST) allows an au…0.2%높음7.0
CVE-2026-85941Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Install…0.2%높음7.0
CVE-2026-87693Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.0.2%높음7.0
CVE-2026-87704Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.0.2%높음7.0
CVE-2026-87710Improper access control in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to…0.1%높음7.0
CVE-2026-88076Null pointer dereference in Windows Installer allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-88103Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges local…0.2%높음7.0
CVE-2026-88098Untrusted pointer dereference in Windows Security Support Provider Interface allows an authorized attacker to …0.2%높음7.0
CVE-2026-88096Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DCOM Se…0.2%높음7.0
CVE-2026-88113Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges local…0.2%높음7.0
CVE-2026-88124Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-88127Use after free in Windows SMB Server allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-88139Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.0.2%높음7.0
CVE-2026-88141Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-88149Double free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileg…0.2%높음7.0
CVE-2026-95943Double free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges…0.2%높음7.0
CVE-2026-96216Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-96215Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Autopil…0.2%높음7.0
CVE-2026-96209Out-of-bounds read in Windows Network File System allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-96253Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-96301Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-96307Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.0.2%높음7.0
CVE-2026-96319Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-96313Missing authentication for critical function in Windows Push Notifications allows an authorized attacker to el…0.2%높음7.0
CVE-2026-96323Use after free in Windows Update allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-96322Use after free in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally.0.2%높음7.0
CVE-2026-96923Use after free in Windows Workstation Service allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-96919Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges local…0.2%높음7.0
CVE-2026-96939Time-of-check time-of-use (toctou) race condition in Servicing Stack Updates allows an authorized attacker to …0.2%높음7.0
CVE-2026-96937Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges local…0.2%높음7.0
CVE-2026-96932Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Embedde…0.2%높음7.0
CVE-2026-96949Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to ele…0.2%높음7.0
CVE-2026-97774Time-of-check time-of-use (toctou) race condition in Microsoft Office Click-To-Run allows an authorized attack…0.2%높음7.0
CVE-2026-97787Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Contain…0.2%높음7.0
CVE-2026-97793Missing authentication for critical function in Windows Setup and Deployment allows an authorized attacker to …0.2%높음7.0
CVE-2026-97810Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized …0.3%높음7.0
CVE-2026-97808Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges local…0.3%높음7.0
CVE-2026-97812Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally…0.3%높음7.0
CVE-2026-96305Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-88161Use after free in Windows Local Security Authority (LSA) allows an authorized attacker to elevate privileges l…0.3%높음7.0
CVE-2026-62840Time-of-check time-of-use (toctou) race condition in Linux Kernel allows an authorized attacker to elevate pri…0.2%높음7.0
CVE-2026-88160Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Windo…0.2%높음7.0
CVE-2026-88082Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.0.2%높음7.0
CVE-2026-85919Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.0.2%높음7.0
CVE-2026-88088Integer overflow or wraparound in SQL Server allows an authorized attacker to elevate privileges locally.0.2%높음7.0
CVE-2026-88106Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges l…0.2%높음7.0
CVE-2026-88079Null pointer dereference in Windows MIDI Service Module allows an authorized attacker to elevate privileges lo…0.3%높음7.0
CVE-2026-83509Untrusted search path in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges local…0.3%높음7.0
CVE-2026-85824Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges loca…0.2%높음7.0
CVE-2026-85362Release of invalid pointer or reference in Windows Management Instrumentation allows an authorized attacker to…0.3%높음7.0
CVE-2026-85352Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges local…0.3%높음7.0
CVE-2026-85876Use after free in SQL Server allows an authorized attacker to elevate privileges locally.0.2%높음7.0
CVE-2026-85930Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.0.2%높음7.0
CVE-2026-85918Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate …0.3%높음7.0
CVE-2026-85914Use after free in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally.0.2%높음7.0
CVE-2026-85870Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate p…0.3%높음7.0
CVE-2026-85854Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-84020Use after free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate pr…0.3%높음7.0
CVE-2026-83911Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-83915Use after free in Windows Diagnostic Policy Service allows an authorized attacker to elevate privileges locall…0.3%높음7.0
CVE-2026-83917Use after free in Windows ALPC allows an authorized attacker to elevate privileges locally.0.2%높음7.0
CVE-2026-83924Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-83930Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges loca…0.2%높음7.0
CVE-2026-84014Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate priv…0.2%높음7.0
CVE-2026-84018Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally…0.2%높음7.0
CVE-2026-105722Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges local…0.3%높음7.0
CVE-2026-105725Use after free in Windows Security App allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-108461Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges local…0.3%높음7.0
CVE-2026-102207Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel …0.2%높음7.0
CVE-2026-83868Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Bluet…0.2%높음7.0
CVE-2026-83839Time-of-check time-of-use (toctou) race condition in Windows Hyper-V allows an authorized attacker to elevate …0.2%높음7.0
CVE-2026-108396Time-of-check time-of-use (toctou) race condition in Windows Modern Device Management (MDM) allows an authoriz…0.2%높음7.0
CVE-2026-69596Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate pri…0.3%높음7.0
CVE-2026-69840Use after free in Windows Certificates allows an authorized attacker to elevate privileges locally.0.2%높음7.0
CVE-2026-85357Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Phone S…0.2%높음7.0
CVE-2026-85329Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Accou…0.2%높음7.0
CVE-2026-88146Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Backgro…0.2%높음7.0
CVE-2026-88110Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges loca…0.3%높음7.0
CVE-2026-88107Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges l…0.2%높음7.0
CVE-2026-83834Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.0.2%높음7.0
CVE-2026-83790Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-83751Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-83750Time-of-check time-of-use (toctou) race condition in Windows Error Reporting allows an authorized attacker to …0.2%높음7.0
CVE-2026-83718Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-83710Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges local…0.3%높음7.0
CVE-2026-83702Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-83580Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to eleva…0.3%높음7.0
CVE-2026-83575Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges local…0.3%높음7.0
CVE-2026-96852Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-85934Use after free in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-85904Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Device …0.2%높음7.0
CVE-2026-83776Out-of-bounds read in Microsoft Bluetooth Driver allows an unauthorized attacker to elevate privileges with a …0.4%보통6.8
CVE-2026-96863Heap-based buffer overflow in Windows Storage Port Driver allows an unauthorized attacker to elevate privilege…0.3%보통6.8
CVE-2026-102229Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an…0.9%보통6.8
CVE-2026-83573Integer overflow or wraparound in Windows Kernel Mode Driver allows an unauthorized attacker to elevate privil…0.4%보통6.8
CVE-2026-69947Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a ph…0.4%보통6.8
CVE-2026-102206Heap-based buffer overflow in Windows Portable Device MTP Driver allows an unauthorized attacker to elevate pr…0.4%보통6.8
CVE-2026-69958Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a ph…0.4%보통6.8
CVE-2026-85323Weak authentication in Network Device Enrollment Service (NDES) allows an authorized attacker to perform spoof…0.5%보통6.8
CVE-2026-97782Observable discrepancy in Microsoft Office SharePoint allows an authorized attacker to perform tampering over …0.5%보통6.8
CVE-2026-102188Untrusted pointer dereference in Windows Storage Port Driver allows an unauthorized attacker to elevate privil…0.4%보통6.8
CVE-2026-103578Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges with a p…0.4%보통6.8
CVE-2026-83895Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an unauthorized attacker to elevate privil…0.4%보통6.8
CVE-2026-59116Use of a broken or risky cryptographic algorithm in Windows Remote Desktop allows an unauthorized attacker to …0.4%보통6.8
CVE-2026-85333Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Perform…0.2%보통6.7
CVE-2026-69902Untrusted pointer dereference in Windows NTFS allows an authorized attacker to execute code locally.0.4%보통6.7
CVE-2026-83706Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.0.3%보통6.7
CVE-2026-88089Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.0.2%보통6.7
CVE-2026-70165Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevat…0.4%보통6.7
CVE-2026-96938Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to elevate p…0.3%보통6.7
CVE-2026-70189Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.0.3%보통6.7
CVE-2026-88143Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privi…0.3%보통6.7
CVE-2026-85841Use after free in Windows DHCP Server allows an authorized attacker to execute code over a network.0.6%보통6.6
CVE-2026-83945Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.0.4%보통6.6
CVE-2026-69635Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges with a phy…0.4%보통6.6
CVE-2026-85337Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a net…0.9%보통6.5
CVE-2026-88122Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.0.8%보통6.5
CVE-2026-83648Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service ove…1.1%보통6.5
CVE-2026-83636Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally.0.4%보통6.5
CVE-2026-105719Improper input validation in Microsoft Office SharePoint allows an authorized attacker to disclose information…1.0%보통6.5
CVE-2026-85821Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to…1.0%보통6.5
CVE-2026-88151Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a ne…0.8%보통6.5
CVE-2026-83521Out-of-bounds read in Windows IKE Extension allows an authorized attacker to disclose information over a netwo…1.0%보통6.5
CVE-2026-83515Use of uninitialized resource in RPC Runtime allows an unauthorized attacker to disclose information over a ne…0.9%보통6.5
CVE-2026-88154Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a ne…0.8%보통6.5
CVE-2026-88175Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a ne…0.8%보통6.5
CVE-2026-88125Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.1.1%보통6.5
CVE-2026-88172Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a ne…0.8%보통6.5
CVE-2026-88169Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a net…0.8%보통6.5
CVE-2026-88167Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a netwo…0.8%보통6.5
CVE-2026-88184Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a ne…0.6%보통6.5
CVE-2026-70072Allocation of resources without limits or throttling in Windows Netlogon allows an authorized attacker to deny…1.1%보통6.5
CVE-2026-96303Improperly implemented security check for standard in Microsoft PowerShell allows an unauthorized attacker to …0.6%보통6.5
CVE-2026-70194Improper certificate validation in .NET Framework allows an unauthorized attacker to bypass a security feature…0.4%보통6.5
CVE-2026-83671Out-of-bounds read in Windows Hyper-V allows an authorized attacker to disclose information locally.0.4%보통6.5
CVE-2026-108128Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.1.0%보통6.5
CVE-2026-70170Untrusted pointer dereference in Windows Kernel allows an authorized attacker to deny service over a network.1.1%보통6.5
CVE-2026-88129Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.1.1%보통6.5
CVE-2026-67626Uncontrolled resource consumption in SQL Server allows an authorized attacker to deny service over a network.0.6%보통6.5
CVE-2026-88153Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a ne…0.8%보통6.5
CVE-2026-83667Out-of-bounds read in Active Directory Domain Services allows an authorized attacker to deny service over a ne…1.1%보통6.5
CVE-2026-70166Out-of-bounds read in Windows DNS allows an authorized attacker to deny service over a network.1.1%보통6.5
CVE-2026-97740Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an…0.8%보통6.5
CVE-2026-88137Files or directories accessible to external parties in WebDAV allows an authorized attacker to disclose inform…1.0%보통6.5
CVE-2026-97760Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a ne…0.8%보통6.5
CVE-2026-97779Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a ne…0.8%보통6.5
CVE-2026-108129Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.1.0%보통6.5
CVE-2026-83906Incorrect implementation of authentication algorithm in Windows Shell allows an unauthorized attacker to perfo…0.9%보통6.5
CVE-2026-96204Server-side request forgery (ssrf) in Azure Arc allows an authorized attacker to elevate privileges over a net…0.8%보통6.5
CVE-2026-83649Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker…1.1%보통6.5
CVE-2026-70122Time-of-check time-of-use (toctou) race condition in Windows Broadcast DVR User Service allows an authorized a…0.3%보통6.5
CVE-2026-85847Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose information…0.7%보통6.5
CVE-2026-70119Out-of-bounds read in Windows DNS allows an authorized attacker to execute code over a network.1.1%보통6.5
CVE-2026-85805Improperly implemented security check for standard in Windows PowerShell allows an unauthorized attacker to by…0.6%보통6.5
CVE-2026-83651Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network.0.9%보통6.5
CVE-2026-96238Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network.0.2%보통6.5
CVE-2026-97840Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.0.7%보통6.5
CVE-2026-97839Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.0.7%보통6.5
CVE-2026-97838Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.0.7%보통6.5
CVE-2026-97837Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.0.7%보통6.5
CVE-2026-97836Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.0.7%보통6.5
CVE-2026-97835Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.0.7%보통6.5
CVE-2026-85859Null pointer dereference in Windows Message Queuing Queue Manager allows an authorized attacker to deny servic…0.8%보통6.5
CVE-2026-70219Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a ne…0.8%보통6.5
CVE-2026-102865Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to disclose information o…0.8%보통6.5
CVE-2026-83703Out-of-bounds read in Windows Wi-Fi Driver allows an unauthorized attacker to deny service over an adjacent ne…0.6%보통6.5
CVE-2026-102867Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a net…0.9%보통6.5
CVE-2026-69955Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a ne…0.9%보통6.5
CVE-2026-88130Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.1.1%보통6.5
CVE-2026-83683Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to disclose info…1.1%보통6.5
CVE-2026-83685Buffer over-read in Windows IKE Extension allows an authorized attacker to deny service over a network.1.1%보통6.5
CVE-2026-85873Improper authorization in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privi…0.8%보통6.5
CVE-2026-69940Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a ne…0.9%보통6.5
CVE-2026-85932Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint …1.0%보통6.5
CVE-2026-108127Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.1.0%보통6.5
CVE-2026-96229Permissive list of allowed inputs in .NET allows an unauthorized attacker to disclose information over a netwo…0.8%보통6.5
CVE-2026-70206Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a net…0.8%보통6.5
CVE-2026-87714Missing authorization in WebDAV allows an authorized attacker to bypass a security feature over a network.0.5%보통6.5
CVE-2026-88183Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over…0.8%보통6.5
CVE-2026-85840Files or directories accessible to external parties in Windows Event Viewer allows an authorized attacker to d…1.0%보통6.5
CVE-2026-85797Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network.0.9%보통6.5
CVE-2026-70298Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint …1.1%보통6.5
CVE-2026-70263Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a net…0.9%보통6.5
CVE-2026-88192Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a ne…0.8%보통6.5
CVE-2026-85331Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information…1.0%보통6.5
CVE-2026-70259Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose in…0.8%보통6.5
CVE-2026-96206Use of uninitialized resource in Windows Subsystem for Linux allows an authorized attacker to disclose informa…0.4%보통6.5
CVE-2026-103576Url redirection to untrusted site ('open redirect') in Active Directory Federation Services (AD FS) allows an …0.8%보통6.5
CVE-2026-84007Out-of-bounds read in Remote Desktop Gateway Service allows an authorized attacker to disclose information ove…1.0%보통6.5
CVE-2026-70148Improper authorization in Windows Broadcast DVR User Service allows an authorized attacker to disclose informa…0.4%보통6.5
CVE-2026-69973Improper limitation of a pathname to a restricted directory ('path traversal') in Windows Libarchive allows an…0.7%보통6.5
CVE-2026-70248Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally.0.4%보통6.5
CVE-2026-88123Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.1.1%보통6.5
CVE-2026-88190Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a ne…0.8%보통6.5
CVE-2026-69968Relative path traversal in Windows Libarchive allows an unauthorized attacker to perform tampering over a netw…0.8%보통6.5
CVE-2026-70244Out-of-bounds read in DNS Server allows an unauthorized attacker to disclose information over a network.0.9%보통6.5
CVE-2026-88195Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a netw…0.6%보통6.5
CVE-2026-88203Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disclose infor…0.8%보통6.5
CVE-2026-88201Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a netw…0.6%보통6.5
CVE-2026-97813Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information over a net…1.0%보통6.5
CVE-2026-102199Stack-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to deny servic…0.9%보통6.5
CVE-2026-83888Buffer over-read in Windows CD-ROM Driver allows an unauthorized attacker to elevate privileges over a network…0.9%보통6.5
CVE-2026-69922Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a ne…0.9%보통6.5
CVE-2026-97829Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.0.8%보통6.5
CVE-2026-97828Buffer over-read in DNS Server allows an authorized attacker to disclose information over a network.0.8%보통6.5
CVE-2026-97827Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.0.8%보통6.5
CVE-2026-97826Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.0.8%보통6.5
CVE-2026-97825Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.0.8%보통6.5
CVE-2026-69877Origin validation error in Azure DevOps allows an unauthorized attacker to disclose information over a network…0.4%보통6.5
CVE-2026-97824Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.0.8%보통6.5
CVE-2026-97823Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.0.8%보통6.5
CVE-2026-97822Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.0.7%보통6.5
CVE-2026-97821Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.0.7%보통6.5
CVE-2026-97820Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.0.7%보통6.5
CVE-2026-94506Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to disclose information over a n…0.8%보통6.5
CVE-2026-97819Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.1.0%보통6.5
CVE-2026-97817Heap-based buffer overflow in DNS Server allows an authorized attacker to disclose information over a network.1.0%보통6.5
CVE-2026-97743Use after free in Microsoft Office Excel allows an unauthorized attacker to disclose information over a networ…0.8%보통6.5
CVE-2026-97834Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.0.6%보통6.5
CVE-2026-97833Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.0.6%보통6.5
CVE-2026-97832Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.0.6%보통6.5
CVE-2026-97831Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.0.7%보통6.5
CVE-2026-97844Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.0.7%보통6.5
CVE-2026-97843Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.0.7%보통6.5
CVE-2026-97842Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.0.6%보통6.5
CVE-2026-97841Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.0.7%보통6.5
CVE-2026-105006Use after free in HID class driver allows an unauthorized attacker to elevate privileges with a physical attac…0.3%보통6.4
CVE-2026-88085Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.0.2%보통6.4
CVE-2026-71347Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Securit…0.2%보통6.4
CVE-2026-85916Exposure of private personal information to an unauthorized actor in Azure Active Directory allows an unauthor…0.5%보통6.2
CVE-2026-102851Incorrect privilege assignment in Visual Studio Code allows an authorized attacker to bypass a security featur…0.3%보통6.1
CVE-2026-97783Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office Share…0.4%보통6.1
CVE-2026-83500Url redirection to untrusted site ('open redirect') in Windows BitLocker allows an unauthorized attacker to by…0.4%보통6.1
CVE-2026-96300Uncontrolled resource consumption in RPC Endpoint Mapper Service allows an unauthorized attacker to deny servi…0.8%보통5.9
CVE-2026-70196Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a netw…0.8%보통5.9
CVE-2026-66822Insertion of sensitive information into sent data in .NET allows an unauthorized attacker to disclose informat…0.7%보통5.9
CVE-2026-88099Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny service over a network.0.8%보통5.9
CVE-2026-88132Origin validation error in Azure Key Vault allows an unauthorized attacker to disclose information over a netw…0.3%보통5.9
CVE-2026-85790Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.0.7%보통5.9
CVE-2026-69982Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to bypass …0.6%보통5.9
CVE-2026-70005Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to bypass …0.6%보통5.9
CVE-2026-70162A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web r…0.8%보통5.9
CVE-2026-105713Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spo…0.4%보통5.7
CVE-2026-85816Out-of-bounds read in Windows Wi-Fi Driver allows an authorized attacker to disclose information over an adjac…0.5%보통5.7
CVE-2026-70097Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Virtual…0.2%보통5.6
CVE-2026-83885Inadequate encryption strength in Windows Virtualization-Based Security (VBS) Enclave allows an authorized att…0.2%보통5.6
CVE-2026-69978Null pointer dereference in Windows VMSwitch allows an authorized attacker to deny service locally.0.3%보통5.6
CVE-2026-96865Exposure of sensitive system information to an unauthorized control sphere in Windows Secure Kernel Mode allow…0.4%보통5.6
CVE-2026-96921Access of resource using incompatible type ('type confusion') in Windows Message Queuing Queue Manager allows …0.4%보통5.5
CVE-2026-85794Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to disclo…0.4%보통5.5
CVE-2026-85320Use of uninitialized resource in Windows Print Spooler Components allows an authorized attacker to disclose in…0.3%보통5.5
CVE-2026-96935Exposure of sensitive system information to an unauthorized control sphere in Windows NTFS allows an authorize…0.4%보통5.5
CVE-2026-85374Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally.0.4%보통5.5
CVE-2026-85815Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information…0.4%보통5.5
CVE-2026-85336Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information…0.4%보통5.5
CVE-2026-96930Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to…0.4%보통5.5
CVE-2026-96948Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) all…0.5%보통5.5
CVE-2026-96944Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an a…0.5%보통5.5
CVE-2026-83933Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows a…0.4%보통5.5
CVE-2026-83904Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.0.4%보통5.5
CVE-2026-83898Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.0.4%보통5.5
CVE-2026-83887Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.0.4%보통5.5
CVE-2026-83884Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.0.4%보통5.5
CVE-2026-97005Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information loca…0.4%보통5.5
CVE-2026-83870Out-of-bounds read in Windows Aggregated Data Platform Service allows an authorized attacker to disclose infor…0.4%보통5.5
CVE-2026-83864Improper access control in Windows NTFS allows an authorized attacker to disclose information locally.0.3%보통5.5
CVE-2026-83854Improper access control in Windows Notification allows an authorized attacker to disclose information locally.0.3%보통5.5
CVE-2026-83849Out-of-bounds read in Windows Hello allows an authorized attacker to disclose information locally.0.4%보통5.5
CVE-2026-83794Out-of-bounds read in Windows Portable Device MTP Driver allows an authorized attacker to disclose information…0.4%보통5.5
CVE-2026-83787Insufficient verification of data authenticity in Windows DHCP Server allows an authorized attacker to bypass …0.3%보통5.5
CVE-2026-83764Incorrect authorization in Windows Clipboard User Service allows an authorized attacker to disclose informatio…0.3%보통5.5
CVE-2026-83765Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.0.3%보통5.5
CVE-2026-97014Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.0.5%보통5.5
CVE-2026-83755Use of uninitialized resource in Windows Win32K allows an authorized attacker to disclose information locally.0.4%보통5.5
CVE-2026-83747Out-of-bounds read in Windows Error Reporting allows an authorized attacker to disclose information locally.0.4%보통5.5
CVE-2026-83736Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.0.4%보통5.5
CVE-2026-83737Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.0.4%보통5.5
CVE-2026-83733Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose information l…0.4%보통5.5
CVE-2026-83719Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally.0.3%보통5.5
CVE-2026-83723Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose infor…0.4%보통5.5
CVE-2026-83713Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to…0.5%보통5.5
CVE-2026-83714Use of uninitialized resource in Windows HTTP.sys allows an authorized attacker to disclose information locall…0.4%보통5.5
CVE-2026-97744Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information loca…0.5%보통5.5
CVE-2026-83705Exposure of sensitive system information to an unauthorized control sphere in Windows HTTP.sys allows an autho…0.5%보통5.5
CVE-2026-83695Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose infor…0.4%보통5.5
CVE-2026-83686Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information…0.4%보통5.5
CVE-2026-83681Weak authentication in Microsoft PowerToys allows an authorized attacker to perform tampering locally.0.3%보통5.5
CVE-2026-83668Out-of-bounds read in Windows WLAN Service allows an authorized attacker to disclose information locally.0.3%보통5.5
CVE-2026-83664Access of resource using incompatible type ('type confusion') in Windows Portable Device File System Driver al…0.3%보통5.5
CVE-2026-83657Weak authentication in Windows Modern Device Management (MDM) allows an authorized attacker to perform tamperi…0.2%보통5.5
CVE-2026-83658Improper access control in Windows Error Reporting allows an authorized attacker to disclose information local…0.3%보통5.5
CVE-2026-83571Null pointer dereference in Windows Audio Service allows an authorized attacker to disclose information locall…0.4%보통5.5
CVE-2026-83565Buffer over-read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information…0.4%보통5.5
CVE-2026-97790Improper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver…0.4%보통5.5
CVE-2026-88140Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information local…0.4%보통5.5
CVE-2026-81964Use of hard-coded credentials in Windows Update Orchestrator Service allows an authorized attacker to bypass a…0.3%보통5.5
CVE-2026-70288Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attac…0.3%보통5.5
CVE-2026-70277Out-of-bounds read in Windows Fast FAT Driver allows an unauthorized attacker to disclose information locally.0.6%보통5.5
CVE-2026-70270Untrusted pointer dereference in Windows Container Isolation FS Filter Driver allows an authorized attacker to…0.4%보통5.5
CVE-2026-70264Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized atta…0.4%보통5.5
CVE-2026-70260Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allo…0.5%보통5.5
CVE-2026-70261Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allo…0.5%보통5.5
CVE-2026-70232Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authori…0.5%보통5.5
CVE-2026-70234Buffer over-read in Desktop Window Manager allows an authorized attacker to disclose information locally.0.4%보통5.5
CVE-2026-70235Improper authentication in Windows Event Tracing allows an authorized attacker to perform spoofing locally.0.3%보통5.5
CVE-2026-70227Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information…0.4%보통5.5
CVE-2026-70216Insufficient granularity of access control in Windows Mobile Device Management allows an authorized attacker t…0.3%보통5.5
CVE-2026-70214Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.0.5%보통5.5
CVE-2026-96860Out-of-bounds read in Windows USB Print Driver allows an authorized attacker to disclose information locally.0.4%보통5.5
CVE-2026-96857Files or directories accessible to external parties in Windows Projected File System allows an authorized atta…0.4%보통5.5
CVE-2026-96850Use of uninitialized resource in Windows Modern Device Management (MDM) allows an authorized attacker to discl…0.4%보통5.5
CVE-2026-96848Buffer over-read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information local…0.4%보통5.5
CVE-2026-96311Improper authorization in Windows Network List Service allows an authorized attacker to perform tampering loca…0.3%보통5.5
CVE-2026-70211Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information loc…0.4%보통5.5
CVE-2026-70199Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authori…0.5%보통5.5
CVE-2026-70284Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose info…0.4%보통5.5
CVE-2026-70173Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information…0.4%보통5.5
CVE-2026-102187Use of uninitialized resource in Windows Kernel allows an authorized attacker to disclose information locally.0.4%보통5.5
CVE-2026-70141Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information…0.4%보통5.5
CVE-2026-85793Exposure of sensitive system information to an unauthorized control sphere in Windows Sysmain Service allows a…0.5%보통5.5
CVE-2026-85812Files or directories accessible to external parties in Windows Bind Filter Driver allows an authorized attacke…0.4%보통5.5
CVE-2026-95904Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locall…0.3%보통5.5
CVE-2026-70135Out-of-bounds read in Windows Remote POS Driver allows an authorized attacker to disclose information locally.0.4%보통5.5
CVE-2026-70137Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to disclose …0.4%보통5.5
CVE-2026-70128Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.0.4%보통5.5
CVE-2026-70090Use of uninitialized resource in Windows Netlogon allows an authorized attacker to disclose information locall…0.4%보통5.5
CVE-2026-96321Out-of-bounds read in Remote Desktop Display Driver allows an authorized attacker to disclose information loca…0.4%보통5.5
CVE-2026-70083Incorrect authorization in DNS Server allows an authorized attacker to perform tampering locally.0.3%보통5.5
CVE-2026-83907Exposure of sensitive system information to an unauthorized control sphere in Windows Hello allows an authoriz…0.5%보통5.5
CVE-2026-96858Missing authentication for critical function in Windows Security Account Manager allows an authorized attacker…0.4%보통5.5
CVE-2026-70084Improper access control in Windows Projected File System allows an authorized attacker to disclose information…0.4%보통5.5
CVE-2026-70071Improper verification of cryptographic signature in DNS Server allows an authorized attacker to perform tamper…0.2%보통5.5
CVE-2026-70085Missing authorization in DNS Server allows an authorized attacker to perform tampering locally.0.3%보통5.5
CVE-2026-83798Improper verification of cryptographic signature in Windows Update Stack allows an authorized attacker to perf…0.2%보통5.5
CVE-2026-85909Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to…0.4%보통5.5
CVE-2026-70087Incorrect authorization in DNS Server allows an authorized attacker to bypass a security feature locally.0.3%보통5.5
CVE-2026-70055Exposure of sensitive system information to an unauthorized control sphere in Windows Cryptographic Services a…0.5%보통5.5
CVE-2026-70057Incorrect authorization in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to b…0.3%보통5.5
CVE-2026-85857Insertion of sensitive information into log file in Windows Kernel-Mode Drivers allows an authorized attacker …0.5%보통5.5
CVE-2026-69905Missing authorization in Windows AppX Deployment Service allows an authorized attacker to perform tampering lo…0.3%보통5.5
CVE-2026-70295Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information loc…0.4%보통5.5
CVE-2026-70041Buffer over-read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally.0.4%보통5.5
CVE-2026-70044Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to disclose informati…0.5%보통5.5
CVE-2026-83773Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allo…0.5%보통5.5
CVE-2026-70017Access of resource using incompatible type ('type confusion') in Windows Secure Kernel Mode allows an authoriz…0.4%보통5.5
CVE-2026-70074Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information locally.0.4%보통5.5
CVE-2026-84011Incorrect authorization in Windows SMB Client allows an authorized attacker to bypass a security feature local…0.3%보통5.5
CVE-2026-70011Out-of-bounds read in Windows IP Over USB Service allows an authorized attacker to disclose information locall…0.4%보통5.5
CVE-2026-83760Out-of-bounds read in Microsoft Bluetooth Driver allows an authorized attacker to disclose information locally…0.3%보통5.5
CVE-2026-105726Out-of-bounds read in Microsoft Defender allows an authorized attacker to disclose information locally.0.4%보통5.5
CVE-2026-69999Out-of-bounds read in Windows Update allows an authorized attacker to disclose information locally.0.4%보통5.5
CVE-2026-105731Use of uninitialized resource in Microsoft Graphics Component allows an authorized attacker to disclose inform…0.4%보통5.5
CVE-2026-69979Improper protection of alternate path in Windows AppX Deployment Service allows an authorized attacker to bypa…0.3%보통5.5
CVE-2026-103567Buffer over-read in Windows Broadcast DVR User Service allows an authorized attacker to disclose information l…0.4%보통5.5
CVE-2026-69971Incorrect authorization in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information l…0.4%보통5.5
CVE-2026-69967Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to disclose information locally.0.4%보통5.5
CVE-2026-69954Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally.0.4%보통5.5
CVE-2026-70201Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service locally.0.4%보통5.5
CVE-2026-83893Exposure of sensitive system information to an unauthorized control sphere in Windows Clipboard User Service a…0.5%보통5.5
CVE-2026-83892Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.0.4%보통5.5
CVE-2026-83875Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.0.3%보통5.5
CVE-2026-69919Out-of-bounds read in Windows Cryptographic Services allows an authorized attacker to disclose information loc…0.4%보통5.5
CVE-2026-70208Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to disclose information locally.0.4%보통5.5
CVE-2026-70292Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information loc…0.4%보통5.5
CVE-2026-69914Out-of-bounds read in Windows AppX Deployment Service allows an authorized attacker to disclose information lo…0.4%보통5.5
CVE-2026-70293Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose info…0.4%보통5.5
CVE-2026-70294Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information loc…0.4%보통5.5
CVE-2026-69721Out-of-bounds read in Windows iSCSI allows an authorized attacker to disclose information locally.0.4%보통5.5
CVE-2026-69675Out-of-bounds read in Windows Network File System allows an authorized attacker to disclose information locall…0.4%보통5.5
CVE-2026-69644Exposure of sensitive system information to an unauthorized control sphere in Windows iSCSI allows an authoriz…0.5%보통5.5
CVE-2026-83835Buffer over-read in Windows Common Log File System Driver allows an authorized attacker to disclose informatio…0.5%보통5.5
CVE-2026-62687Improper link resolution before file access ('link following') in Windows Backup Engine allows an authorized a…0.4%보통5.5
CVE-2026-62879Missing authentication for critical function in Windows SmartScreen allows an authorized attacker to perform t…0.3%보통5.5
CVE-2026-96183Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an aut…0.3%보통5.5
CVE-2026-96218Improper access control in Windows Update Stack allows an authorized attacker to perform tampering locally.0.6%보통5.5
CVE-2026-108462Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authori…0.5%보통5.5
CVE-2026-83507Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows a…0.4%보통5.5
CVE-2026-88162Improper authorization in Windows Encrypting File System (EFS) allows an authorized attacker to perform tamper…0.3%보통5.5
CVE-2026-96247Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose informa…0.4%보통5.5
CVE-2026-88158Out-of-bounds read in Microsoft Digest Authentication allows an authorized attacker to disclose information lo…0.3%보통5.5
CVE-2026-96316Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to p…0.3%보통5.5
CVE-2026-96315Missing authorization in Windows Overlay Filter allows an authorized attacker to perform tampering locally.0.3%보통5.5
CVE-2026-96314Out-of-bounds read in Windows Audio Service allows an authorized attacker to disclose information locally.0.4%보통5.5
CVE-2026-96846Out-of-bounds read in WebDAV allows an authorized attacker to disclose information locally.0.3%보통5.5
CVE-2026-87709Improper access control in Windows Host Guardian Service allows an authorized attacker to perform tampering lo…0.2%보통5.5
CVE-2026-87698Out-of-bounds read in Windows Remote Access Service Infrastructure allows an authorized attacker to disclose i…0.3%보통5.5
CVE-2026-103560Improper authorization in DNS Server allows an authorized attacker to perform tampering locally.0.3%보통5.5
CVE-2026-96851Buffer over-read in Windows Management Instrumentation allows an authorized attacker to disclose information l…0.4%보통5.5
CVE-2026-96849Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose informa…0.4%보통5.5
CVE-2026-85935Buffer over-read in Windows USB Driver allows an authorized attacker to disclose information locally.0.4%보통5.5
CVE-2026-96855Improper access control in Windows Modern Device Management (MDM) allows an authorized attacker to perform tam…0.3%보통5.5
CVE-2026-96854Access of resource using incompatible type ('type confusion') in Windows Device Association Service allows an …0.3%보통5.5
CVE-2026-96859Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally.0.4%보통5.5
CVE-2026-85938Improper access control in Windows Broadcast DVR User Service allows an authorized attacker to disclose inform…0.3%보통5.5
CVE-2026-85910Buffer over-read in Windows StateRepository API allows an authorized attacker to disclose information locally.0.4%보통5.5
CVE-2026-85865Improper authentication in Windows DHCP Server allows an authorized attacker to bypass a security feature loca…0.3%보통5.5
CVE-2026-96910Untrusted pointer dereference in Microsoft Windows Search Component allows an authorized attacker to disclose …0.4%보통5.5
CVE-2026-85852Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information…0.4%보통5.5
CVE-2026-85830Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally.0.4%보통5.5
CVE-2026-96927Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.0.3%보통5.5
CVE-2026-96926Missing authorization in DNS Server allows an authorized attacker to perform tampering locally.0.3%보통5.5
CVE-2026-96925Integer underflow (wrap or wraparound) in Windows NTFS allows an authorized attacker to disclose information l…0.4%보통5.5
CVE-2026-85831Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to disclose information …0.4%보통5.5
CVE-2026-85835Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally.0.4%보통5.5
CVE-2026-96234Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.0.3%보통5.3
CVE-2026-102198Out-of-bounds read in Windows Remote Desktop Protocol allows an authorized attacker to disclose information ov…0.7%보통5.3
CVE-2026-69640Incorrect authorization in Windows Key Distribution Center allows an authorized attacker to bypass a security …0.6%보통5.3
CVE-2026-70025Use after free in Windows Netlogon allows an authorized attacker to deny service over a network.0.8%보통5.3
CVE-2026-85939Weak authentication in Windows Kernel allows an authorized attacker to bypass a security feature over a networ…0.4%보통5.3
CVE-2026-88086Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over an adjacent netw…0.3%보통5.3
CVE-2026-88084Allocation of resources without limits or throttling in SQL Server allows an authorized attacker to deny servi…0.5%보통5.3
CVE-2026-108466Out-of-bounds read in Windows Kernel allows an unauthorized attacker to deny service over a network.0.6%보통5.3
CVE-2026-70217Improper access control in Microsoft Office SharePoint allows an authorized attacker to disclose information o…0.9%보통4.9
CVE-2026-67628Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.0.5%보통4.9
CVE-2026-94520Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a …0.6%보통4.9
CVE-2026-83646Url redirection to untrusted site ('open redirect') in Active Directory Federation Services (AD FS) allows an …0.4%보통4.8
CVE-2026-102186Untrusted pointer dereference in Windows Network File System allows an authorized attacker to disclose informa…0.3%보통4.7
CVE-2026-70195Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to disclose info…0.2%보통4.7
CVE-2026-96853Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attac…0.2%보통4.7
CVE-2026-83504Time-of-check time-of-use (toctou) race condition in Windows SmartScreen allows an authorized attacker to disc…0.2%보통4.7
CVE-2026-83925Use of uninitialized resource in Windows Kernel allows an authorized attacker to disclose information locally.0.4%보통4.7
CVE-2026-83582Use after free in Windows Graphics Kernel allows an authorized attacker to disclose information locally.0.3%보통4.7
CVE-2026-69506Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information local…0.3%보통4.7
CVE-2026-83656Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized at…0.2%보통4.7
CVE-2026-83672Exposure of sensitive system information to an unauthorized control sphere in Windows Installer allows an auth…0.4%보통4.7
CVE-2026-83897Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem a…0.4%보통4.7
CVE-2026-69969Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an au…0.3%보통4.7
CVE-2026-69974Out-of-bounds read in Desktop Window Manager allows an authorized attacker to disclose information locally.0.3%보통4.7
CVE-2026-84009Time-of-check time-of-use (toctou) race condition in Windows Projected File System allows an authorized attack…0.2%보통4.7
CVE-2026-83905Exposure of sensitive system information to an unauthorized control sphere in Windows Shell allows an authoriz…0.4%보통4.7
CVE-2026-83786Generation of error message containing sensitive information in Windows NTFS allows an authorized attacker to …0.4%보통4.7
CVE-2026-83697Time-of-check time-of-use (toctou) race condition in Windows Modern Device Management (MDM) allows an authoriz…0.2%보통4.7
CVE-2026-83909Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem a…0.4%보통4.7
CVE-2026-70063Out-of-bounds read in Windows Kernel allows an authorized attacker to disclose information locally.0.3%보통4.7
CVE-2026-85866Exposure of sensitive system information to an unauthorized control sphere in Windows ALPC allows an authorize…0.3%보통4.7
CVE-2026-83774Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem a…0.4%보통4.7
CVE-2026-70077Use after free in Windows Kernel allows an authorized attacker to disclose information locally.0.3%보통4.7
CVE-2026-83865Relative path traversal in Windows Internet (wininet.dll) allows an authorized attacker to perform tampering l…0.3%보통4.7
CVE-2026-102859Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office Share…0.4%보통4.6
CVE-2026-83788Buffer over-read in Windows RNDIS allows an unauthorized attacker to disclose information with a physical atta…0.5%보통4.6
CVE-2026-88209Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office Share…0.4%보통4.6
CVE-2026-88208Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office Share…0.3%보통4.6
CVE-2026-102864Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office Share…0.4%보통4.6
CVE-2026-88226Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with…0.5%보통4.6
CVE-2026-83926Improper certificate validation in Windows Hello allows an authorized attacker to bypass a security feature lo…0.4%보통4.4
CVE-2026-70280Incorrect authorization in Windows Hello allows an authorized attacker to bypass a security feature locally.0.4%보통4.4
CVE-2026-102221No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locall…0.3%보통4.4
CVE-2026-70075Time-of-check time-of-use (toctou) race condition in Windows Virtualization-Based Security (VBS) Enclave allow…0.3%보통4.4
CVE-2026-105720Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges ove…0.4%보통4.3
CVE-2026-83766Incorrect authorization in Windows Hyper-V allows an authorized attacker to bypass a security feature over an …0.4%보통4.2
CVE-2026-70116Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to bypass …0.3%보통4.2
권고에는 있지만 원장에 아직 없는 CVE
권고 본문 (발췌)
원문을 그대로 옮긴 발췌이며 요약·해석하지 않았습니다.
개요 (총 14 종) o 등급 : 긴급 (Critical) 10 종 , 중요 (Important) 4 종 o 발표일 : 2026.10.13.(화) o 업데이트 내용 제품군 중요도 영향 Windows 11 긴급 권한 상승 Windows Server 2025 긴급 권한 상승 Windows Server 2022 긴급 권한 상승 Windows Server 2019 긴급 권한 상승 Windows Server 2016 긴급 권한 상승 Microsoft Office 긴급 원격 코드 실행 Microsoft SharePoint 긴급 권한 상승 Microsoft Exchange Server 긴급 권한 상승 Microsoft SQL Server 중요 원격 코드 실행 Microsoft .NET 긴급 서비스 거부 Microsoft Visual Studio 긴급 원격 코드 실행 Microsoft Dynamics 365 중요 권한 상승 Microsoft Azure 중요 정보 공개 Microsoft Defender 중요 정보 공개 [참고 사이트] [1] (한글) https://msrc.microsoft.com/update-guide/ko-kr/ [2] (영문) https://msrc.microsoft.com/update-guide/en-us/ [3] https://msrc.microsoft.com/update-guide/releaseNote/2026-Oct o 취약점 요약 정보 (총 1417개) 제품 카테고리 CVE 번호 CVE 제목 Windows UEFI CVE-2026-49785 UEFI Secure Boot 보안 기능 우회 취약성 Windows Perception Simulation Service CVE-2026-61931 Windows Perception Simulation Service 권한 상승 취약성 .NET CVE-2026-66822 .NET 정보 유출 취약성 SQL Server CVE-2026-67625 Microsoft SQL Server 원격 코드 실행 취약성 Windows kernel32.dll CVE-2026-68836 Windows kernel32.dll 권한 상승 취약성 SQL Server CVE-2026-68883 Microsoft SQL Server 권한 상승 취약성 Windows Error Reporting CVE-2026-69354 Windows Error Reporting 권한 상승 취약성 Windows Error Reporting CVE-2026-69363 Windows Error Reporting 권한 상승 취약성 Visual Studio Code CVE-2026-69370 Visual Studio Code 원격 코드 실행 취약성 Windows Error Reporting CVE-2026-69387 Windows Error Reporting 권한 상승 취약성 Azure SRE Agent CVE-2026-69435 Azure SRE Agent 권한 상승 취약성 Windows Enterprise App Management CVE-2026-69452 Windows Enterprise App Management 권한 상승 취약성 Windows iSCSI CVE-2026-69521 Windows iSCSI 원격 코드 실행 취약성 Windows Update CVE-2026-69633 Windows Update 권한 상승 취약성 Windows iSCSI CVE-2026-69634 Windows iSCSI 원격 코드 실행 취약성 Windows Libarchive CVE-2026-69639 Windows libarchive 원격 코드 실행 취약성 Windows iSCSI CVE-2026-69644 Windows iSCSI 정보 유출 취약성 Windows Key Distribution Center CVE-2026-69650 Windows Key Distribution Center 권한 상승 취약성 .NET CVE-2026-69651 .NET 서비스 거부 취약성 Windows Update CVE-2026-69673 Windows Update 권한 상승 취약성 Windows iSCSI CVE-2026-69705 Windows iSCSI 원격 코드 실행 취약성 Windows Update CVE-2026-69718 Windows Update 권한 상승 취약성 Windows iSCSI CVE-2026-69721 Windows iSCSI 정보 유출 취약성 Windows Program Compatibility Assistant Service CVE-2026-69743 Windows Program Compatibility Assistant Service 권한 상승 취약성 Windows Storage CVE-2026-69763 Windows Storage 권한 상승 취약성 Windows Storage CVE-2026-69766 Window…— KISA 보호나라 원문