CWE-191 관련 취약점
같은 약점 유형으로 분류된 취약점입니다. CWE 는 "무엇을 잘못했는가" 의 분류이고, 제품을 가리지 않고 같은 실수가 반복됩니다.
CWE-191 — 주요 취약점
악용이 확인된 것을 먼저 보여줍니다.
● 실제 악용이 확인됨CVE-2014-0497Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.…99.9%심각9.8● 실제 악용이 확인됨CVE-2022-0185A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesy…25.2%높음8.4● 실제 악용이 확인됨CVE-2021-31956Windows NTFS Elevation of Privilege Vulnerability22.3%높음7.8CVE-2026-83855Integer underflow (wrap or wraparound) in Windows WLAN Service allows an unauthorized attacker to de…1.2%높음7.5CVE-2026-102192Integer underflow (wrap or wraparound) in Windows Failover Cluster allows an unauthorized attacker t…1.1%높음7.5CVE-2026-85436MOOS essential-moos through 10.0.1 contains a buffer overflow vulnerability in CMOOSUDPLink::ReadPkt…1.2%높음8.7CVE-2026-83578Integer underflow (wrap or wraparound) in Windows PowerShell allows an unauthorized attacker to exec…1.0%심각9.8CVE-2026-69824Integer underflow (wrap or wraparound) in Microsoft Standard XPS allows an unauthorized attacker to …1.0%심각9.8
전체 목록
109건
CVE-2026-100222Heap-based buffer overflow in Network Policy Server (NPS) allows an unauthorized attacker to execute code over…1.0%심각9.8
CVE-2026-91103HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affec…1.0%보통5.1
CVE-2026-84411The web management service in affected RouterOS versions contains an integer underflow in its HTTP request bod…0.9%심각9.3
CVE-2026-85806Integer underflow (wrap or wraparound) in Network Policy Server (NPS) allows an unauthorized attacker to execu…0.9%심각9.8
CVE-2026-69276Integer underflow (wrap or wraparound) in Microsoft UxTheme Library (uxtheme.dll) allows an unauthorized attac…0.9%심각9.8
CVE-2026-78453Integer underflow (wrap or wraparound) in Microsoft Windows SCSI Class System File allows an unauthorized atta…0.9%보통6.5
CVE-2026-18355A heap buffer overflow flaw was found in the SASL I/O layer of 389 Directory Server (389-ds-base). In sasl_io_…0.8%높음7.5
CVE-2026-97739Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute co…0.8%높음8.8
CVE-2026-56386Integer underflow and out-of-bounds read in the HTTP/2 server DATA frame parser in Apache bRPC allows an unaut…0.7%높음7.5
CVE-2026-97746Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute co…0.7%높음8.8
CVE-2026-97004Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a ne…0.7%높음8.8
CVE-2026-83869Integer underflow (wrap or wraparound) in DNS Server allows an unauthorized attacker to execute code over a ne…0.6%심각9.8
CVE-2026-71352Integer underflow (wrap or wraparound) in Windows Remote Access Connection Manager allows an authorized attack…0.7%높음8.8
CVE-2026-91948FreeRDP versions before 3.31.0 contain an out-of-bounds write vulnerability in server-side static virtual chan…0.6%높음7.7
CVE-2026-66307Integer underflow (wrap or wraparound) in Skype for Business allows an unauthorized attacker to deny service o…0.6%높음7.5
CVE-2026-88195Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a netw…0.6%보통6.5
CVE-2026-85339Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthori…0.6%높음8.8
CVE-2026-89028MikroTik RouterOS before 7.24 contains a heap memory corruption vulnerability in the userspace SMB daemon that…0.6%높음8.2
CVE-2026-110714libsmb2 through 6.2 contains an integer underflow vulnerability in decode_acl that allows malicious SMB server…0.5%높음7.1
CVE-2026-86537Uncaught exception, Loop with unreachable exit condition ('infinite loop'), Integer underflow (wrap or wraparo…0.6%높음8.7
CVE-2026-83838Integer underflow (wrap or wraparound) in Windows Bluetooth A2DP driver allows an authorized attacker to eleva…0.5%높음8.0
CVE-2026-93599rustls-webpki through 0.103.12 (and 0.104.0-alpha releases before 0.104.0-alpha.7) contains a reachable panic …0.5%높음8.7
CVE-2026-101980An Integer Underflow vulnerability in the kernel of Juniper Networks Junos OS with Extended Echo configured al…0.5%심각9.3
CVE-2026-96844Integer underflow (wrap or wraparound) in Microsoft Bluetooth Driver allows an authorized attacker to elevate …0.5%높음8.0
CVE-2026-88964An integer underflow in OpenVPN version 2.7_alpha3 through 2.7.7 on Windows and Android allows remote authenti…0.5%높음7.1
CVE-2026-48503libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sa…0.5%높음7.5
CVE-2026-102073A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet…0.5%높음8.8
CVE-2026-83836Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code locally.0.4%높음7.8
CVE-2026-111808Apache Traffic Server can be used to exhaust an HTTP/1.1 origin's worker pool via a malformed padded HTTP/2 DA…0.4%높음7.7
CVE-2026-82459Integer underflow (wrap or wraparound), Out-of-bounds write vulnerability in Apache Thrift C++ 32 bit THeaderT…0.4%높음8.2
CVE-2026-68827Integer underflow (wrap or wraparound) in Windows GDI+ allows an authorized attacker to elevate privileges ove…0.4%높음8.0
CVE-2026-94090A security flaw has been discovered in JusticeRage Manalyze 1.0.0. The affected element is the function PE::_p…0.4%보통5.3
CVE-2026-69303Out-of-bounds read in Push Message Routing Service allows an authorized attacker to disclose information local…0.4%보통5.5
CVE-2026-96925Integer underflow (wrap or wraparound) in Windows NTFS allows an authorized attacker to disclose information l…0.4%보통5.5
CVE-2026-93395A missing lower-bound validation in the bson_new_from_buffer() function of libbson allows an integer underflow…0.4%보통6.9
CVE-2026-111075In Eclipse OpenJ9 versions prior to 0.63.0, the JITServer component fails to perform cross-field validation on…0.4%높음8.7
CVE-2026-88376Bento4 1.6.0.0 contains an integer underflow vulnerability in AP4_AvccAtom::Create() and AP4_HvccAtom::Create(…0.4%높음7.5
CVE-2026-73252Mongoose is an embedded web server and network library. Prior to 7.23, the built-in TLS stack selected by MG_T…0.4%높음7.5
CVE-2026-49868RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embe…0.4%심각9.8
CVE-2026-86132An integer underflow vulnerability in the WatchGuard Fireware OS IKEv2 daemon (iked) allows a remote, unauthen…0.4%높음8.2
CVE-2026-44235rabbitmq-c is a C-language AMQP client library for RabbitMQ. Prior to 0.16.0, a malicious AMQP server can send…0.4%보통6.5
CVE-2026-53922odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. In commit cfddd56 and earlier, …0.3%보통6.5
CVE-2026-70064Integer underflow (wrap or wraparound) in Windows Kerberos allows an authorized attacker to elevate privileges…0.3%높음7.8
CVE-2026-86133An integer underflow vulnerability in the WatchGuard Fireware OS IKE daemon (iked) allows a remote attacker wh…0.3%높음8.2
CVE-2026-69269Integer underflow (wrap or wraparound) in Microsoft Standard XPS allows an authorized attacker to elevate priv…0.3%높음7.8
CVE-2026-69421Integer underflow (wrap or wraparound) in Windows Kernel Mode Driver allows an authorized attacker to elevate …0.3%높음7.8
CVE-2026-69687Integer underflow (wrap or wraparound) in Windows USB Audio Class driver (usbaudio.sys) allows an authorized a…0.3%높음7.8
CVE-2026-83742Unsigned integer underflow in wstrncat() in src/port.c in wolfSSL wolfSSH from v1.4.11 through v1.5.0 on non-W…0.3%보통5.3
CVE-2026-50216An integer underflow exists in the DNS proxy component of the macOS NetworkExtension system extension shipped …0.3%보통5.3
CVE-2026-58249SAP NetWeaver and SAP Web Dispatcher do not properly validate certain fields in specially crafted requests han…0.3%높음7.5
CVE-2026-77488Integer underflow (wrap or wraparound) in SQL Server allows an authorized attacker to disclose information loc…0.3%보통5.5
CVE-2026-109246FreeRDP before 3.32.0 contains a divide-by-zero vulnerability in the freerdp-shadow-cli shadow server: the fra…0.3%높음7.1
CVE-2026-92853The TLS 1.3 Certificate-message parser in NetX Secure decrements the message length to skip a context byte wit…0.3%높음8.7
CVE-2026-107836RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embe…0.3%높음7.1
CVE-2026-106429An integer underflow in the KMS endpoint-parsing logic of MongoDB libmongocrypt can cause an allocation failur…0.3%높음7.1
CVE-2026-101938An Integer Underflow (Wrap or Wraparound) vulnerability in the srxpfe of Juniper Networks Junos OS and Junos O…0.3%높음7.1
CVE-2026-102168On affected Arista Wi-Fi access points with Captive Portal enabled, an unauthenticated wireless client connect…0.3%높음7.1
CVE-2026-72947Integer underflow (wrap or wraparound) in Windows File History Service allows an authorized attacker to elevat…0.3%보통6.4
CVE-2026-66767SAP NetWeaver Application Server for ABAP and ABAP Platform allows an unauthenticated user to send a specially…0.3%높음7.7
CVE-2026-120058psqlODBC sizes its row cache from the column count of a cursor's first result, but recomputes the column count…0.3%높음7.5
CVE-2026-88143Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privi…0.3%보통6.7
CVE-2026-83676Integer underflow (wrap or wraparound) in Windows Installer allows an authorized attacker to elevate privilege…0.3%높음7.0
CVE-2026-101968An Integer Underflow (Wrap or Wraparound) vulnerability in the rpd process of Juniper Networks Junos OS on EX …0.2%보통5.3
CVE-2026-103636Out-of-bounds read in the VarOpt union deserialization of Apache DataSketches C++ (repo: datasketches-cpp). va…0.2%미평가
CVE-2026-75083The receive path of the NXP KW41Z IEEE 802.15.4 driver, kw41z_rx() in drivers/ieee802154/ieee802154_kw41z.c, c…0.2%보통5.9
CVE-2026-120060psqlODBC trusts counts and lengths in server data in three places. SQLBulkOperations uses a server-supplied ro…0.2%보통5.9
CVE-2026-70388SOEM version 2.0.0 and earlier contains vulnerabilities where a malicious device on the network can send speci…0.2%높음8.3
CVE-2026-19186ieee802154_decipher_data_frame() in subsys/net/l2/ieee802154/ieee802154_frame.c computed payload_len = net_pkt…0.2%높음8.1
CVE-2026-74755An integer underflow in the mcpack2pb component of Apache bRPC (version < 1.18.0) on all platforms allows remo…0.2%미평가
CVE-2026-111881FreeRDP from 3.14.1 before 3.32.0 contains an integer underflow in the WinPR BMP writer, where a mismatched st…0.2%높음7.2
CVE-2026-69859Time-of-check time-of-use (toctou) race condition in Windows USB Audio Class driver (usbaudio.sys) allows an a…0.2%높음7.0
CVE-2026-88833A flaw was found in BusyBox's udhcpc DHCP client. When processing raw DHCP packets, the client replaces the va…0.2%보통6.5
CVE-2026-107794ExtUtils::Typemaps::STL::List versions before 1.07 for Perl allocate a 32 GiB array on an empty list. The OUTP…0.2%미평가
CVE-2013-10076ExtUtils::Typemaps::STL::Vector versions before 1.05 for Perl allocate a 32 GiB array on an empty list. The OU…0.2%미평가
CVE-2026-106464`_nx_secure_x509_parse_signature_data` computes the certificate signature's length as `tlv_length - 1` without…0.2%높음8.7
CVE-2026-61720FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.5.0 until 2.5.6, the SF2 …0.2%보통6.2
CVE-2026-103411An Integer Underflow vulnerability in DhcpMessageDecoder in Juniper Networks Session Smart Router allows an at…0.2%높음7.1
CVE-2026-81977Acrobat Reader is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could lead to discl…0.2%보통5.5
CVE-2026-82947SOEM version 2.0.0 and earlier contains multiple vulnerabilities in frame processing where a malicious device …0.2%높음7.1
CVE-2026-111735P-Net before 1.0.3 contains an integer underflow in pf_cpm_c_data_ind(). When handling a received cyclic data …0.2%높음7.1
CVE-2026-13326An out-of-bounds read in Qt NFC's language code length parsing allows a physically proximate attacker to cause…0.2%보통6.9
CVE-2026-58242SAP Cloud Connector contains an improper authorization check, which could be exploited by a low-privileged att…0.2%낮음3.5
CVE-2026-102714`_nx_icmpv6_validate_options()` scans the option area with `while (length > 2)` (`common/src/nx_icmpv6_validat…0.2%높음7.1
CVE-2026-65200The openUBMC device-management process parses PLDM-over-MCTP and NCSI-over-MCTP responses from on-bus devices,…0.1%낮음3.5
CVE-2026-47540NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an att…0.1%높음7.8
CVE-2026-86566A flaw was found in DPDK lib/vhost. A guest with runt RX descriptors can underflow the copy length in vhost en…0.1%보통6.5
CVE-2026-112010smpeg through 2.0.0 contains an integer underflow vulnerability in stream_header() in MPEGsystem.cpp that allo…0.1%보통6.8
CVE-2026-107635Dislocker through 0.7.3 contains an integer underflow vulnerability in get_vmk() and get_fvek() that allows at…0.1%보통6.8
CVE-2026-81881radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Mach-…0.1%낮음3.3
CVE-2026-47585NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel module where an attacker could ca…0.1%높음7.8
CVE-2026-20572In adsp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalati…0.1%보통6.7
CVE-2026-90996A flaw was found in sssd. A local unprivileged user could send a specially crafted request with a zero-length …0.1%보통4.0
CVE-2026-18747The MCUmgr SMP-over-console transport decodes a base64 frame, reads a 16-bit packet length from it, verifies a…0.1%보통6.8
CVE-2026-95958A security flaw has been discovered in JusticeRage Manalyze 1.0.0. Impacted is the function PE::_parse_relocat…0.1%보통4.8
CVE-2026-20576In afe, there is a possible out of bounds write due to a missing bounds check. This could lead to local escala…0.1%보통6.7
CVE-2026-107614An integer underflow in WinCursorShapeUtils::trimTransparent() in GlavSoft TightVNC Server for Windows before …0.1%보통6.1
CVE-2026-17504IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, …0.1%보통5.1
CVE-2026-106437The BSON buffer-reservation API in the MongoDB C Driver can record a length smaller than the five-byte BSON mi…0.1%보통5.9
CVE-2026-121727Kore before 4.3.0 contains an integer underflow vulnerability in HTTP request body handling that allows unauth…높음8.7
CVE-2026-61497TinyUSB before 0.20.1 contains an integer underflow vulnerability in the HID host report descriptor parser tuh…보통5.2
CVE-2018-3926An exploitable integer underflow vulnerability exists in the ZigBee firmware update routine of the hubCore bin…보통5.5
이 원장은 전체 CVE 가 아닙니다. NVD 에는 30만 건이 넘습니다. 여기 있는 것은 ① 악용이 확인된 것 ② 최근 공개된 것 ③ 국산 SW 관련 ④ KISA 권고에 등장한 것입니다. 무엇을 담았는지 밝히지 않으면 "없다" 를 "안전하다" 로 읽게 됩니다.