CVE Ledger

CWE-126 관련 취약점

같은 약점 유형으로 분류된 취약점입니다. CWE 는 "무엇을 잘못했는가" 의 분류이고, 제품을 가리지 않고 같은 실수가 반복됩니다.

원장 35,126건이 중 악용 확인 1,767건분류: CWE-126

CWE-126 — 주요 취약점

악용이 확인된 것을 먼저 보여줍니다.

전체 목록

77건

CVE-2026-97828Buffer over-read in DNS Server allows an authorized attacker to disclose information over a network.0.8%보통6.5

CVE-2026-73029Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.0.7%보통6.5

CVE-2026-67393Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.0.7%보통6.5

CVE-2026-69474Use after free in Windows Overlay Filter allows an authorized attacker to disclose information over a network.0.7%보통4.8

CVE-2026-88201Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a netw…0.6%보통6.5

CVE-2026-88195Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a netw…0.6%보통6.5

CVE-2026-69416Buffer over-read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network…0.6%보통5.7

CVE-2026-108454Buffer over-read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a…0.5%보통6.5

CVE-2026-78516Buffer over-read in Windows Storage allows an unauthorized attacker to disclose information with a physical at…0.5%보통4.3

CVE-2026-57185Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, …0.5%보통6.5

CVE-2026-83835Buffer over-read in Windows Common Log File System Driver allows an authorized attacker to disclose informatio…0.5%보통5.5

CVE-2026-83788Buffer over-read in Windows RNDIS allows an unauthorized attacker to disclose information with a physical atta…0.5%보통4.6

CVE-2026-83565Buffer over-read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information…0.4%보통5.5

CVE-2026-70041Buffer over-read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally.0.4%보통5.5

CVE-2026-69954Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally.0.4%보통5.5

CVE-2026-53920odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. From version 17.01.0 to before …0.4%높음8.7

CVE-2026-83951Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.0.4%보통5.5

CVE-2026-83949Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.0.4%보통5.5

CVE-2026-69794Buffer over-read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information…0.4%보통5.5

CVE-2026-85835Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally.0.4%보통5.5

CVE-2026-96851Buffer over-read in Windows Management Instrumentation allows an authorized attacker to disclose information l…0.4%보통5.5

CVE-2026-85935Buffer over-read in Windows USB Driver allows an authorized attacker to disclose information locally.0.4%보통5.5

CVE-2026-85910Buffer over-read in Windows StateRepository API allows an authorized attacker to disclose information locally.0.4%보통5.5

CVE-2026-96848Buffer over-read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information local…0.4%보통5.5

CVE-2026-103567Buffer over-read in Windows Broadcast DVR User Service allows an authorized attacker to disclose information l…0.4%보통5.5

CVE-2026-81399Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.0.4%보통5.5

CVE-2026-55606odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. In versions 25.12 and prior, od…0.4%보통6.5

CVE-2026-86243Buffer over-read vulnerability in Apache Tomcat Native during the TLS handshake permits a malicious user to tr…0.4%높음7.5

CVE-2026-70234Buffer over-read in Desktop Window Manager allows an authorized attacker to disclose information locally.0.4%보통5.5

CVE-2026-85745MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11…0.4%보통4.3

CVE-2026-69957Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges l…0.3%높음7.8

CVE-2026-69884Buffer over-read in Windows GDI allows an authorized attacker to elevate privileges locally.0.3%높음7.8

CVE-2026-69942Buffer over-read in Windows Overlay Filter allows an authorized attacker to execute code locally.0.3%높음7.8

CVE-2026-69950Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.0.3%높음7.8

CVE-2026-69953Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.0.3%높음7.8

CVE-2026-69582Buffer over-read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privilege…0.3%높음7.8

CVE-2026-83719Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally.0.3%보통5.5

CVE-2026-83727Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.0.3%높음7.8

CVE-2026-68851Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally.0.3%보통5.5

CVE-2026-69316Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally.0.3%보통4.7

CVE-2026-25275Transient DOS when processing authentication frames with invalid FILS information element header lengths.0.3%높음7.5

CVE-2026-76653A missing authentication vulnerability in the VPN configuration management has been identified in Archer MR600…0.3%보통5.3

CVE-2026-95904Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locall…0.3%보통5.5

CVE-2026-112394Pillow is a Python imaging library. Prior to 13.0.0, Pillow's P;2L and P;4L raw decoders can read past the end…0.3%보통6.3

CVE-2026-112404Pillow is a Python imaging library. From 8.1.0 until 13.0.0, Pillow's TIFF tile and RGBA decode paths can read…0.3%높음8.8

CVE-2026-97399The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may read on…0.3%낮음3.7

CVE-2026-69610Buffer over-read in Windows Win32K allows an authorized attacker to elevate privileges locally.0.3%높음7.0

CVE-2026-68875Buffer over-read in Windows NTFS allows an authorized attacker to execute code locally.0.2%높음7.8

CVE-2026-102728Two client-side TLS/DTLS handshake parsers in NetX Secure read fields from a server-supplied message before va…0.2%높음7.5

CVE-2026-18238The rpcap client code that processes a RPCAP_MSG_PACKET message received from the server incorrectly validates…0.2%보통5.0

CVE-2026-93524A buffer overread in CheckKeySyms() in X.Org X Server before 21.1.25 and XWayland before 24.1.14 could be used…0.2%보통6.9

CVE-2026-94286An out-of-bounds read in libXtst's RECORD reply parser in libXtst before 1.2.6 could be used by malicious X se…0.2%높음7.1

CVE-2026-20539In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote deni…0.2%보통5.3

CVE-2026-20541In Modem, there is a possible out of bounds read due to a missing permission check. This could lead to remote …0.2%보통5.3

CVE-2026-20540In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote deni…0.2%보통5.3

CVE-2026-20538In Modem, there is a possible out of bounds read due to a missing permission check. This could lead to remote …0.2%보통5.3

CVE-2026-102758The `_nx_secure_x509_asn1_tlv_block_parse()` function parses ASN.1 TLV (tag-length-value) blocks out of DER-en…0.2%높음7.5

CVE-2026-57546Transient DOS when processing a continuous receive command with a zero-sized global configuration override.0.2%높음7.5

CVE-2026-24081Transient DOS when processing a channel map with insufficient used channels and adaptive frequency hopping is …0.2%높음7.4

CVE-2026-25294Transient DOS while parsing frame during channel usage.0.2%높음7.4

CVE-2026-95392MBIM protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service0.2%보통5.5

CVE-2026-96394The Affinity by Canva application for macOS before 3.3.1 (October 2026 release) did not validate image dimensi…0.1%낮음2.9

CVE-2026-90610A vulnerability was found in GPAC up to f1219cde. This affects the function gf_svg_attributes_copy of the file…0.1%낮음1.9

CVE-2026-101130The Affinity by Canva application before 3.3.1 (October 2026 release) did not perform adequate bounds checking…0.1%낮음3.6

CVE-2026-101094The Affinity by Canva application before 3.3.1 (October 2026 release) did not correctly handle incomplete UTF-…0.1%낮음3.6

CVE-2026-96420Toshiba file parser crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service0.1%보통4.7

CVE-2026-101310The HDA audio device model did not check for zero-length Buffer Descriptor List (BDL) entries when starting a …0.1%높음7.0

CVE-2026-24075Memory Corruption when multiple threads issue concurrent IOCTL requests to the device control handler due to i…0.1%높음7.8

CVE-2026-25284Information Disclosure when a pointer is reused after being deallocated.0.1%높음7.3

이 원장은 전체 CVE 가 아닙니다. NVD 에는 30만 건이 넘습니다. 여기 있는 것은 ① 악용이 확인된 것 ② 최근 공개된 것 ③ 국산 SW 관련 ④ KISA 권고에 등장한 것입니다. 무엇을 담았는지 밝히지 않으면 "없다" 를 "안전하다" 로 읽게 됩니다.