CWE-193 관련 취약점
같은 약점 유형으로 분류된 취약점입니다. CWE 는 "무엇을 잘못했는가" 의 분류이고, 제품을 가리지 않고 같은 실수가 반복됩니다.
CWE-193 — 주요 취약점
악용이 확인된 것을 먼저 보여줍니다.
● 실제 악용이 확인됨CVE-2021-3156Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, wh…100.0%높음7.8CVE-2026-86297A vulnerability was identified in D-Link DIR-605 B1v202WWB03. This issue affects the function tunnel…1.0%높음8.2CVE-2026-102857Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code…0.8%높음8.8CVE-2026-97741Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code…0.8%높음8.8CVE-2026-83600Netdata is an open source observability tool. Prior to 2.10.4, an authenticated child agent can send…0.5%보통6.5CVE-2026-57160PJSIP is a free and open source multimedia communication library written in C. Prior to commit d6a0e…0.4%보통6.9CVE-2026-108443Off-by-one error in Microsoft Office Word allows an unauthorized attacker to execute code over a net…0.4%높음8.8CVE-2026-81396Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute cod…0.4%높음7.8
전체 목록
30건
CVE-2026-101302TLS 1.3 embeds the actual record type as the last non-zero byte of the decrypted payload, optionally followed …0.4%보통6.5
CVE-2026-69609Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally.0.4%보통5.5
CVE-2026-104774OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.0.0 until 3.8.0, …0.4%보통5.8
CVE-2026-81738OpenVPN 2.5.0 through 2.7.6 on Windows using the tap-windows6 driver allows attackers to trigger an out-of-bou…0.3%낮음2.3
CVE-2026-83742Unsigned integer underflow in wstrncat() in src/port.c in wolfSSL wolfSSH from v1.4.11 through v1.5.0 on non-W…0.3%보통5.3
CVE-2026-115916vLLM is an inference and serving engine for large language models. Prior to 0.32.0, vllm/tokenizers/hf.py comp…0.3%보통6.5
CVE-2026-101014A vulnerability was detected in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this vulnerability i…0.3%보통5.5
CVE-2026-100889A vulnerability was detected in Trusted Domain Project OpenDKIM up to 2.11.0. Affected is the function dkim_qp…0.3%보통5.5
CVE-2026-114460A flaw was found in mod_qos. An off-by-one pointer calculation error occurs when merging request body paramete…0.3%보통5.3
CVE-2026-18460Off-by-one Error, Out-of-bounds Write vulnerability in RTI Connext Professional (Core Libraries) allows Overfl…0.3%보통6.9
CVE-2026-76081ZITADEL is an open source identity management platform. Prior to version 4.16.0, a bug in how ZITADEL updates …0.2%보통5.5
CVE-2026-85454MOOS core-moos through 10.4.0 contains a buffer overflow vulnerability in CMOOSSerialPort::GetTelegram() that …0.2%보통5.2
CVE-2026-110604Mini-XML 4.0.0 through 4.0.6 contains an off-by-one stack out-of-bounds write in mxml_strtod() when the locale…0.2%낮음2.0
CVE-2026-12727IBM MQ could allow an authenticated attacker to cause potential process instability due to an off-by-one buffe…0.2%보통4.3
CVE-2026-104033A flaw was found in SSSD. When configured to enforce account expiration using LDAP (Lightweight Directory Acce…0.2%보통5.4
CVE-2026-90781alsa-lib through 1.2.16.1 contains a stack buffer overflow in the __snd_ctl_ascii_elem_id_parse() function tha…0.2%보통4.8
CVE-2026-93018Imager versions before 1.036 for Perl disclose uninitialised heap memory reading a paletted image with pixel i…0.2%미평가
CVE-2026-42618In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_decompress() in compress.c that allows an at…0.1%높음7.1
CVE-2026-111273unarr through 1.1.1 contains an off-by-one heap-based buffer overflow in tar_get_name() in tar/parse-tar.c, re…0.1%보통6.9
CVE-2026-116735libpff through 20260926 contains an off-by-one bounds check in libpff_table_read_6c_record_entries that allows…0.1%보통6.9
CVE-2026-106584In ssh-keygen in OpenSSH before 10.6, certificates could have incorrect expiration times because of Daylight S…0.1%낮음2.5
CVE-2026-120061The psqlODBC parser for ODBC escape sequences in application SQL text writes the argument offsets of a {fn} es…높음7.5
이 원장은 전체 CVE 가 아닙니다. NVD 에는 30만 건이 넘습니다. 여기 있는 것은 ① 악용이 확인된 것 ② 최근 공개된 것 ③ 국산 SW 관련 ④ KISA 권고에 등장한 것입니다. 무엇을 담았는지 밝히지 않으면 "없다" 를 "안전하다" 로 읽게 됩니다.