CWE-367 관련 취약점
같은 약점 유형으로 분류된 취약점입니다. CWE 는 "무엇을 잘못했는가" 의 분류이고, 제품을 가리지 않고 같은 실수가 반복됩니다.
CWE-367 — 주요 취약점
악용이 확인된 것을 먼저 보여줍니다.
● 랜섬웨어 캠페인에 사용됨CVE-2024-30088Windows Kernel Elevation of Privilege Vulnerability68.2%높음7.0● 실제 악용이 확인됨CVE-2023-35311Microsoft Outlook Security Feature Bypass Vulnerability15.5%높음8.8● 실제 악용이 확인됨CVE-2015-3246libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode p…8.5%보통5.1● 실제 악용이 확인됨CVE-2025-22224VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads t…1.6%높음8.2● 실제 악용이 확인됨CVE-2025-38352In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: fix race betwe…1.4%높음7.8● 실제 악용이 확인됨CVE-2026-119977WordPress Core is vulnerable to Remote Code Execution in versions 4.7 through 7.1.3. This is due to …0.6%높음8.1● 실제 악용이 확인됨CVE-2022-48618The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.1, watchOS 9.2…0.5%높음7.0CVE-2026-88173Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized atta…0.5%높음8.1
전체 목록
120건
CVE-2026-69804Time-of-check time-of-use (toctou) race condition in Microsoft Office SharePoint allows an authorized attacker…0.5%높음7.5
CVE-2026-86861pgAdmin 4's File Manager save_file endpoint, which backs saving from the Query Tool and ERD, validated the req…0.5%보통6.0
CVE-2026-82761Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in team-alembic AshAuthentication allows an at…0.4%심각9.1
CVE-2026-77633Cloudreve is a self-hosted file management and sharing system. Prior to 4.18.0, PrepareUpload in pkg/filemanag…0.4%높음7.1
CVE-2026-77972Time-of-check Time-of-use (TOCTOU) Race Condition in Slab safeurl allows an attacker who controls a hostname's…0.3%심각9.0
CVE-2026-106207Race condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary co…0.3%높음8.8
CVE-2026-105481A flaw in Node.js HTTP Agent connection reuse can cause a client to accept as valid a response that was sent b…0.3%보통6.5
CVE-2026-105163A vulnerability was detected in crossplane crossplane-runtime up to 2.2.2/2.3.2. This vulnerability affects th…0.3%보통6.9
CVE-2026-70288Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attac…0.3%보통5.5
CVE-2026-87433Race condition in FileAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromise…0.3%미평가
CVE-2026-63334draw.io is a configurable diagramming and whiteboarding application. Prior to version 30.2.7, deployments with…0.3%보통6.8
CVE-2024-11222GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.0 before 19.1.8, 19.2 before 19.…0.3%보통6.4
CVE-2026-77242MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to …0.3%높음7.5
CVE-2026-91712Race condition in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who h…0.3%높음8.3
CVE-2026-70075Time-of-check time-of-use (toctou) race condition in Windows Virtualization-Based Security (VBS) Enclave allow…0.3%보통4.4
CVE-2026-116240In server mode pgAdmin 4 validates a path into the user's storage directory with check_access_permission(), wh…0.3%높음7.1
CVE-2026-70122Time-of-check time-of-use (toctou) race condition in Windows Broadcast DVR User Service allows an authorized a…0.3%보통6.5
CVE-2026-91743Race condition in Core in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised t…0.3%높음8.3
CVE-2026-79417Improper Access Control in ArgusMonitor.sys in Argotronic eGbR ArgusMonitor 7.4.02 and earlier allows local, l…0.3%보통5.3
CVE-2026-85045Race condition in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary co…0.2%높음7.5
CVE-2026-103435Claude Code validated that a target file path resided within the project working directory at permission-check…0.3%높음7.7
CVE-2026-53708ContextForge is an AI gateway, registry, and proxy that provides centralized discovery, guardrails, and manage…0.2%보통6.6
CVE-2026-83504Time-of-check time-of-use (toctou) race condition in Windows SmartScreen allows an authorized attacker to disc…0.2%보통4.7
CVE-2026-91744Race condition in PlatformIntegration in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attac…0.2%보통5.3
CVE-2026-119552Uptime Kuma through 2.5.8 contains a race condition in the Socket.IO first-run setup handler that allows unaut…0.2%보통6.3
CVE-2026-57569Lychee is a free, open-source photo-management tool. Prior to 7.6.0, the POST /api/v2/Photo::fromUrl flow vali…0.2%낮음2.3
CVE-2026-108698hyper-mcp through 0.8.3 contains a signature verification bypass vulnerability in load_wasm in src/wasm/oci.rs…0.2%높음8.3
CVE-2026-91748Race condition in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who h…0.2%높음8.3
CVE-2026-106412Race condition in Core in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had com…0.2%높음8.3
CVE-2026-105647Ghost is a Node.js content management system. From 6.54.1 until 6.65.0, a validation issue allowed some functi…0.2%보통4.0
CVE-2026-115683A race condition in Epiphany allows a malicious website to bypass the TLS/SSL certificate warning page. Epipha…0.2%보통6.8
CVE-2026-83505Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorized attacker…0.2%높음7.0
CVE-2026-95360Race condition in Editing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social …0.2%보통5.3
CVE-2026-95344Race condition in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social…0.2%높음8.0
CVE-2026-87523Race condition in DataTransfer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging so…0.2%보통5.3
CVE-2026-105130LaraDashboard from 1.4.0 before 1.4.8 contains a race condition vulnerability in RegisterController::register …0.2%보통6.3
CVE-2026-73179Improper enforcement of single-use authorization code semantics in the JPA OAuth2 authorization code grant pro…0.2%미평가
CVE-2026-87996Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.6 until 0.11.1,…0.2%높음7.7
CVE-2026-69466Time-of-check time-of-use (toctou) race condition in Windows Kernel allows an authorized attacker to elevate p…0.2%높음7.0
CVE-2026-69440Time-of-check time-of-use (toctou) race condition in Windows MIDI Service Module allows an authorized attacker…0.2%높음7.0
CVE-2026-69779Time-of-check time-of-use (toctou) race condition in Windows Win32K allows an authorized attacker to elevate p…0.2%높음7.0
CVE-2026-83510Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorized attacker…0.2%높음7.0
CVE-2026-107276MISP contains a race condition in the email-based one-time password (OTP) login flow. When two HTTP requests c…0.2%보통6.3
CVE-2026-68488A Time-of-check Time-of-use (TOCTOU) race condition leading to insecure symlink following in Plesk causes loca…0.2%심각9.9
CVE-2026-96939Time-of-check time-of-use (toctou) race condition in Servicing Stack Updates allows an authorized attacker to …0.2%높음7.0
CVE-2026-83834Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.0.2%높음7.0
CVE-2026-83750Time-of-check time-of-use (toctou) race condition in Windows Error Reporting allows an authorized attacker to …0.2%높음7.0
CVE-2026-84009Time-of-check time-of-use (toctou) race condition in Windows Projected File System allows an authorized attack…0.2%보통4.7
CVE-2026-83697Time-of-check time-of-use (toctou) race condition in Windows Modern Device Management (MDM) allows an authoriz…0.2%보통4.7
CVE-2026-102354BentoPDF is a privacy-focused PDF toolkit that runs in the browser. In versions through 2.8.6, cloudflare/cors…0.2%보통6.8
CVE-2026-117603Electrum before 4.7.2 contains a spending limit bypass vulnerability in the Nostr Wallet Connect plugin that a…0.2%심각9.3
CVE-2026-69859Time-of-check time-of-use (toctou) race condition in Windows USB Audio Class driver (usbaudio.sys) allows an a…0.2%높음7.0
CVE-2026-83871Heap-based buffer overflow in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.0.2%높음7.0
CVE-2026-69563Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to…0.2%높음7.0
CVE-2026-93380Race condition in FileSystem in Google Chrome prior to 153.0.8010.52 allowed a remote attacker who had comprom…0.2%낮음3.1
CVE-2026-94621AliasVault is a privacy-first password manager with built-in email aliasing. Prior to 0.30.3, the AliasVault s…0.2%보통6.3
CVE-2026-78464Time-of-check time-of-use (toctou) race condition in Windows MIDI Service Module allows an authorized attacker…0.2%높음7.0
CVE-2026-85943Time-of-check time-of-use (toctou) race condition in Reliable Multicast Transport Driver (RMCAST) allows an au…0.2%높음7.0
CVE-2026-85879Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker…0.2%높음7.0
CVE-2026-84018Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally…0.2%높음7.0
CVE-2026-83839Time-of-check time-of-use (toctou) race condition in Windows Hyper-V allows an authorized attacker to elevate …0.2%높음7.0
CVE-2026-108396Time-of-check time-of-use (toctou) race condition in Windows Modern Device Management (MDM) allows an authoriz…0.2%높음7.0
CVE-2026-57114PraisonAI is a multi-agent teams system. From version 4.5.126 to before version 4.6.59, PraisonAI's Async Jobs…0.2%높음7.2
CVE-2026-67693An issue in gnutls v.3.8.13 allows an attacker to obtain sensitive information via failing to reject end-entit…0.2%높음7.5
CVE-2026-75524OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Pr…0.2%보통5.4
CVE-2026-96853Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attac…0.2%보통4.7
CVE-2026-89430Gitea validated a push mirror's remote address against the `[migrations]` allow and block lists only when the …0.2%높음8.1
CVE-2026-105743Docling simplifies document processing by parsing diverse formats and providing integrations with the generati…0.2%보통4.0
CVE-2026-97774Time-of-check time-of-use (toctou) race condition in Microsoft Office Click-To-Run allows an authorized attack…0.2%높음7.0
CVE-2026-108741Shepherd (shepherd-ai) through 0.3.1 contains a server-side request forgery guard bypass in the citation-check…0.2%낮음2.3
CVE-2026-87517Race condition in Mobile in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker leveragin…0.2%낮음3.1
CVE-2026-101088Nezha is a server and website monitoring tool. In versions >= 2.2.11 and < 2.3.1, the service sentinel worker …0.2%보통6.0
CVE-2026-88924A flaw was found in the admin backend of gvfs. The privileged gvfsd-admin daemon changes the ownership of newl…0.2%높음7.0
CVE-2026-101029Gitea's repository migration and pull mirror egress checks could be bypassed with a hostname that returns mult…0.2%보통4.3
CVE-2026-91708Race condition in Network in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromise…0.2%낮음3.1
CVE-2026-80353Time-of-check time-of-use (TOCTOU) race condition vulnerability in Apache Tomcat when creating unix domain soc…0.2%미평가
CVE-2026-85920Time-of-check time-of-use (toctou) race condition in Windows BitLocker allows an authorized attacker to elevat…0.2%높음7.0
CVE-2026-106300Race condition in CacheStorage in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compr…0.2%보통4.7
CVE-2026-62840Time-of-check time-of-use (toctou) race condition in Linux Kernel allows an authorized attacker to elevate pri…0.2%높음7.0
CVE-2026-100713Froxlor 2.3.10 and earlier contain a time-of-check time-of-use (TOCTOU) race condition in the SSH key synchron…0.2%높음7.1
CVE-2026-79968Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00,…0.1%보통5.9
CVE-2025-68404A time-of-check time-of-use (toctou) race condition vulnerability has been reported to affect QuRouter. If exp…0.2%높음7.5
CVE-2026-82430Description When launching a Docker or OCI worker, the setuid-root `worker-launcher` first changes ownership o…0.1%높음7.8
CVE-2026-102832JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Noteb…0.1%보통4.2
CVE-2026-18069IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to obtain ownership of arbitrary file system objects…0.1%보통6.0
CVE-2026-79730Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00,…0.1%보통5.6
CVE-2022-42917In FRRouting FRR before 8.5, the service user (usually frr) can escalate its privileges to root by monitoring …0.1%보통6.7
CVE-2026-82429Description The setuid-root `worker-launcher` binary adjusts ownership and permissions of worker directories b…0.1%높음7.8
CVE-2026-45720Omni manages Kubernetes on bare metal, virtual machines, or in a cloud. Prior to 1.6.6 and from 1.7.0 until 1.…0.1%높음7.0
CVE-2026-106413Race condition in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromise…0.1%보통4.2
CVE-2026-55567BleachBit cleans files to free disk space and to maintain privacy. Prior to 6.0.1, privileged Windows cleaning…0.1%높음7.8
CVE-2026-53613util-linux is a random collection of Linux utilities. In util-linux 2.17 through 2.41.6 and 2.42 through 2.42.…0.1%높음7.0
CVE-2026-77059boneIO Black contains a TOCTOU race condition in the create_timedatectl_sudoers_file() function in boneio/webu…0.1%높음8.8
CVE-2026-54575mport is the MidnightBSD Package Manager. Prior to 2.7.8, privileged package fetch and cache-cleaning operatio…0.1%보통5.8
CVE-2026-86805A time-of-check to time-of-use (TOCTOU) race condition in the dynamic loader (ld.so) of the GNU C Library (gli…0.1%보통6.3
CVE-2026-45197Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trig…0.1%미평가
CVE-2026-53612util-linux is a random collection of Linux utilities. In util-linux 2.39 through 2.41.4 and 2.42 through 2.42.…0.1%높음7.0
CVE-2026-79994The guest-to-host Unix-domain socket relay in Docker Sandboxes validates that a socket path is inside an autho…0.1%높음8.7
CVE-2026-102672Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior …0.1%보통6.7
CVE-2026-86848A flaw was found in DPDK lib/vhost vhost-crypto. The indirect-descriptor snapshot double-fetches a guest descr…0.1%높음8.8
CVE-2026-54587mport is the MidnightBSD Package Manager. Prior to 2.7.8, directory assets handled as ASSET_DIR or ASSET_DIR_O…0.1%보통5.8
CVE-2026-54576mport is the MidnightBSD Package Manager. Prior to 2.7.8, do_actual_install() in libmport/bundle_read_install_…0.1%보통5.8
CVE-2026-47497NVIDIA Virtual GPU Manager contains a vulnerability in the GPU System Processor (GSP) tracing component where …0.1%높음7.8
CVE-2026-93683A flaw was found in the DPDK vhost library. When handling a virtio indirect descriptor table, the host reads t…0.1%보통6.4
CVE-2026-76925A flaw was found in Flatpak. A Time-of-check to time-of-use (TOCTOU) race condition exists in the `org.freedes…0.1%보통5.8
CVE-2026-116250In server mode pgAdmin 4 validates a path a user gives for a file in their storage directory with check_access…0.1%높음7.3
CVE-2026-93315When proxy networking with CA injection is enabled, a build can modify its CA bundle before cleanup. This may …0.1%보통5.8
CVE-2026-112937filelock is a platform-independent file lock for Python. From 4.1.0 until 4.2.1, ReadWriteLock can remove a ra…0.1%보통6.1
CVE-2026-112935filelock is a platform-independent file lock for Python. From 3.22.0 until 4.2.1, SoftFileLock can break a sta…0.1%보통4.7
CVE-2026-112941filelock is a platform-independent file lock for Python. From 4.1.0 until 4.2.1, SoftReadWriteLock and AsyncSo…0.1%낮음3.3
CVE-2026-87554Race condition in Chromoting in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to…0.1%높음8.1
CVE-2026-92374A time-of-check time-of-use (TOCTOU) race condition combined with improper symbolic link handling in the privi…0.1%높음7.8
이 원장은 전체 CVE 가 아닙니다. NVD 에는 30만 건이 넘습니다. 여기 있는 것은 ① 악용이 확인된 것 ② 최근 공개된 것 ③ 국산 SW 관련 ④ KISA 권고에 등장한 것입니다. 무엇을 담았는지 밝히지 않으면 "없다" 를 "안전하다" 로 읽게 됩니다.