CWE-122 관련 취약점
같은 약점 유형으로 분류된 취약점입니다. CWE 는 "무엇을 잘못했는가" 의 분류이고, 제품을 가리지 않고 같은 실수가 반복됩니다.
CWE-122 — 주요 취약점
악용이 확인된 것을 먼저 보여줍니다.
● 실제 악용이 확인됨CVE-2015-3113Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0…99.8%심각9.8● 실제 악용이 확인됨CVE-2009-3459Heap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x b…86.6%높음8.8● 실제 악용이 확인됨CVE-2021-21017Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2…86.3%높음8.8● 랜섬웨어 캠페인에 사용됨CVE-2023-27997A heap-based buffer overflow vulnerability [CWE-122] in FortiOS version 7.2.4 and below, version 7.0…85.7%심각9.8● 실제 악용이 확인됨CVE-2023-4911A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GL…63.8%높음7.8● 실제 악용이 확인됨CVE-2024-38812The vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protoc…54.6%심각9.8● 랜섬웨어 캠페인에 사용됨CVE-2023-28252Windows Common Log File System Driver Elevation of Privilege Vulnerability48.9%높음7.8● 실제 악용이 확인됨CVE-2019-3568A buffer overflow vulnerability in WhatsApp VOIP stack allowed remote code execution via specially c…30.1%심각9.8
전체 목록
120건
CVE-2026-94127악용 확인When a BIG-IP APM access policy and an OAuth profile are configured on a virtual server, specific malicious tr…26.6%심각9.3
CVE-2024-49138악용 확인Windows Common Log File System Driver Elevation of Privilege Vulnerability26.2%높음7.8
CVE-2023-36036악용 확인Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability16.7%높음7.8
CVE-2023-23376랜섬웨어 악용Windows Common Log File System Driver Elevation of Privilege Vulnerability10.9%높음7.8
CVE-2025-21333악용 확인Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability10.1%높음7.8
CVE-2020-16010악용 확인Heap buffer overflow in UI in Google Chrome on Android prior to 86.0.4240.185 allowed a remote attacker who ha…6.4%심각9.6
CVE-2025-24985악용 확인Integer overflow or wraparound in Windows Fast FAT Driver allows an unauthorized attacker to execute code loca…3.9%높음7.8
CVE-2025-25249악용 확인A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.…3.7%심각9.8
CVE-2025-24993악용 확인Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.2.2%높음7.8
CVE-2025-21418악용 확인Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability2.1%높음7.8
CVE-2026-53362악용 확인In the Linux kernel, the following vulnerability has been resolved: ipv6: account for fraggap on the paged all…0.7%높음7.8
CVE-2026-85880악용 확인Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.0.4%높음7.8
CVE-2026-87716Heap-based buffer overflow in Windows Storage Spaces Controller allows an unauthorized attacker to deny servic…1.1%높음7.5
CVE-2026-83795Heap-based buffer overflow in Windows IKE Extension allows an unauthorized attacker to deny service over a net…1.1%높음7.5
CVE-2026-70031Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to deny service over a network.1.1%높음7.5
CVE-2026-110958A vulnerability was found in Wavlink WN530HG4B M30HG4B_V260724. The impacted element is an unknown function of…1.1%심각9.3
CVE-2026-70291Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a …1.0%심각9.8
CVE-2026-70242Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a …1.0%심각9.8
CVE-2026-69829Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network.1.1%심각9.8
CVE-2026-83770Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a netw…1.0%심각9.8
CVE-2026-83693Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a n…1.0%심각9.8
CVE-2026-97814Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a netw…1.0%심각9.8
CVE-2026-105016Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network.1.0%심각9.8
CVE-2026-97016Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a …1.0%심각9.8
CVE-2026-91104HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affec…1.0%심각9.3
CVE-2026-70153Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute c…1.0%심각9.8
CVE-2026-70147Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute c…1.0%심각9.8
CVE-2026-10136A heap-based buffer overflow vulnerability exists in the boa formUpload() functionality of X2000R (version(s):…0.9%심각9.1
CVE-2026-83578Integer underflow (wrap or wraparound) in Windows PowerShell allows an unauthorized attacker to execute code o…1.0%심각9.8
CVE-2026-70157Heap-based buffer overflow in Windows System Information Console allows an unauthorized attacker to execute co…1.0%심각9.8
CVE-2026-70096Heap-based buffer overflow in Windows Rich Text Edit Control allows an unauthorized attacker to execute code o…1.0%심각9.8
CVE-2026-83519Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a n…1.0%심각9.8
CVE-2026-83517Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute co…1.0%심각9.8
CVE-2026-69715Out-of-bounds read in Windows Direct Show allows an unauthorized attacker to execute code over a network.1.0%심각9.8
CVE-2026-69408Integer overflow or wraparound in Microsoft Windows Media Foundation allows an unauthorized attacker to execut…1.0%심각9.8
CVE-2026-69824Integer underflow (wrap or wraparound) in Microsoft Standard XPS allows an unauthorized attacker to execute co…1.0%심각9.8
CVE-2026-69586Integer overflow or wraparound in Microsoft Windows PDF allows an unauthorized attacker to execute code over a…1.0%심각9.8
CVE-2026-69493Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a net…1.0%심각9.8
CVE-2026-69496Heap-based buffer overflow in Windows Compressed Folder allows an unauthorized attacker to execute code over a…1.0%심각9.8
CVE-2026-100222Heap-based buffer overflow in Network Policy Server (NPS) allows an unauthorized attacker to execute code over…1.0%심각9.8
CVE-2026-97817Heap-based buffer overflow in DNS Server allows an authorized attacker to disclose information over a network.1.0%보통6.5
CVE-2026-97813Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information over a net…1.0%보통6.5
CVE-2026-91106HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affec…1.0%심각9.3
CVE-2026-91105HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affec…1.0%높음8.6
CVE-2026-69590Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthori…1.0%심각9.8
CVE-2026-96320Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a netwo…0.9%심각9.8
CVE-2026-85814Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute co…0.9%심각9.8
CVE-2026-85809Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthori…0.9%심각9.8
CVE-2026-78510Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a net…1.0%심각9.8
CVE-2026-78509Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a …1.0%심각9.8
CVE-2026-96909Heap-based buffer overflow in Windows BitLocker allows an unauthorized attacker to execute code over a network…0.9%심각9.8
CVE-2026-69845Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a netwo…0.9%심각9.8
CVE-2026-84015Heap-based buffer overflow in Remote Access Point-to-Point Protocol (PPP) EAP-TLS allows an unauthorized attac…0.9%심각9.8
CVE-2026-83782Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network.0.9%심각9.8
CVE-2026-102210Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a netw…0.9%심각9.8
CVE-2026-85798Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute c…0.9%높음7.2
CVE-2026-69276Integer underflow (wrap or wraparound) in Microsoft UxTheme Library (uxtheme.dll) allows an unauthorized attac…0.9%심각9.8
CVE-2026-69431Heap-based buffer overflow in Telnet Client allows an unauthorized attacker to execute code over a network.0.9%심각9.8
CVE-2026-69463Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code over a network.0.9%심각9.8
CVE-2026-69768Heap-based buffer overflow in Windows RNDIS allows an unauthorized attacker to execute code over a network.0.9%심각9.8
CVE-2026-69623Heap-based buffer overflow in Windows HTTP Print Provider allows an authorized attacker to execute code over a…0.9%높음8.0
CVE-2026-108467Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an authorized attacker to execute cod…0.9%높음8.8
CVE-2026-69547Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network…0.9%높음8.8
CVE-2026-69628Heap-based buffer overflow in Windows iSCSI allows an authorized attacker to execute code over a network.0.9%높음8.8
CVE-2026-69769Heap-based buffer overflow in Windows HTTP Print Provider allows an unauthorized attacker to execute code over…0.9%심각9.8
CVE-2026-72959Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthori…0.9%높음8.8
CVE-2026-72950Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthori…0.9%높음8.8
CVE-2026-88142Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to ex…0.9%높음8.8
CVE-2026-85931Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute c…0.9%높음8.8
CVE-2026-57198Asterisk is an open source private branch exchange and telephony toolkit. In affected deployments, an authenti…0.8%낮음2.3
CVE-2026-69491Heap-based buffer overflow in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code ov…0.9%심각9.8
CVE-2026-83523Heap-based buffer overflow in Windows Image Acquisition allows an unauthorized attacker to execute code over a…0.8%높음8.8
CVE-2026-70210Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to elevate privileges over a netw…0.8%높음8.8
CVE-2026-70149Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) all…0.8%높음8.8
CVE-2026-70089Heap-based buffer overflow in Windows GDI allows an unauthorized attacker to execute code over a network.0.8%높음8.8
CVE-2026-70068Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an unauthorized attacker to ele…0.8%높음8.8
CVE-2026-77496Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a…0.8%높음8.8
CVE-2026-70262Heap-based buffer overflow in WebDAV allows an unauthorized attacker to elevate privileges over a network.0.8%높음8.8
CVE-2026-83688Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a net…0.8%높음8.8
CVE-2026-70258Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute co…0.8%높음8.8
CVE-2026-100220Heap-based buffer overflow in Windows Media Video Decoder allows an unauthorized attacker to execute code over…0.8%높음8.8
CVE-2026-100210Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a ne…0.8%높음8.8
CVE-2026-55556Rsyslog is a rocket-fast system for log processing. From 8.2110.0 until 8.2604.0, the optional imhttp module's…0.9%높음8.2
CVE-2026-88155Heap-based buffer overflow in Microsoft Office SharePoint allows an authorized attacker to execute code over a…0.8%높음8.8
CVE-2026-88163Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code ov…0.8%높음8.8
CVE-2026-78456Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.0.9%높음8.8
CVE-2026-69729Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to execute code over …0.9%높음8.8
CVE-2026-70282Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a …0.8%높음8.8
CVE-2026-83778Heap-based buffer overflow in Microsoft Internet Messaging API allows an unauthorized attacker to execute code…0.8%높음8.8
CVE-2026-70343Heap-based buffer overflow in Microsoft MPEG-2 Video Extension allows an unauthorized attacker to execute code…0.8%높음8.8
CVE-2026-70256Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a …0.8%높음8.8
CVE-2026-70257Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a …0.8%높음8.8
CVE-2026-72933Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execut…0.8%높음8.8
CVE-2026-96952Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute co…0.8%높음8.8
CVE-2026-96202Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over…0.8%높음8.8
CVE-2026-69495Heap-based buffer overflow in Windows Event Logging Service allows an unauthorized attacker to execute code ov…0.8%높음8.8
CVE-2026-69494Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a net…0.8%높음8.8
CVE-2026-69669Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to execute code over a network.0.8%높음8.8
CVE-2026-102857Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a ne…0.8%높음8.8
CVE-2026-102856Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a ne…0.8%높음8.8
CVE-2026-67643Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.0.8%높음8.8
CVE-2026-69639Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a networ…0.8%심각9.8
CVE-2026-69634Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network.0.8%심각9.8
CVE-2026-69886Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a…0.8%심각9.8
CVE-2026-77902Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a ne…0.8%높음8.8
CVE-2026-70302Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a net…0.8%높음8.8
CVE-2026-70301Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a net…0.8%높음8.8
CVE-2026-70287Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a net…0.8%높음8.8
CVE-2026-70268Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a net…0.8%높음8.8
CVE-2026-78512Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a netwo…0.8%높음8.8
CVE-2026-78511Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a net…0.8%높음8.8
이 원장은 전체 CVE 가 아닙니다. NVD 에는 30만 건이 넘습니다. 여기 있는 것은 ① 악용이 확인된 것 ② 최근 공개된 것 ③ 국산 SW 관련 ④ KISA 권고에 등장한 것입니다. 무엇을 담았는지 밝히지 않으면 "없다" 를 "안전하다" 로 읽게 됩니다.