CWE-401 관련 취약점
같은 약점 유형으로 분류된 취약점입니다. CWE 는 "무엇을 잘못했는가" 의 분류이고, 제품을 가리지 않고 같은 실수가 반복됩니다.
CWE-401 — 주요 취약점
악용이 확인된 것을 먼저 보여줍니다.
● 실제 악용이 확인됨CVE-2018-0158A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS Software and Cisc…7.2%높음8.6● 실제 악용이 확인됨CVE-2023-26083Memory leak vulnerability in Mali GPU Kernel Driver in Midgard GPU Kernel Driver all versions from r…1.2%낮음3.3CVE-2026-70155Missing release of memory after effective lifetime in Windows DNS allows an unauthorized attacker to…1.2%높음7.5CVE-2026-69588Missing release of memory after effective lifetime in Windows TCP/IP allows an unauthorized attacker…1.2%높음7.5CVE-2026-70033Missing release of memory after effective lifetime in Remote Desktop Gateway Service allows an unaut…1.1%높음7.5CVE-2026-70065Missing release of memory after effective lifetime in Windows DHCP Server allows an unauthorized att…1.2%높음7.5CVE-2026-69497Missing release of memory after effective lifetime in Windows DHCP Server allows an authorized attac…1.1%보통6.5CVE-2026-69809Missing release of memory after effective lifetime in Active Directory Domain Services allows an una…1.1%높음7.5
전체 목록
82건
CVE-2026-83677Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to d…0.9%높음7.5
CVE-2026-73550Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.…0.9%높음7.5
CVE-2026-93436vLLM through 0.29.0 fails to properly clean up decode-side metadata for rejected inference requests in prefill…0.8%높음8.7
CVE-2026-63448Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring …0.7%보통5.9
CVE-2026-63446Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring …0.7%높음7.5
CVE-2026-87078Net::IDN::Punycode versions from 2.302 before 2.590 for Perl leak the output buffer on every rejected label in…0.7%심각9.1
CVE-2026-16028Protocol::HTTP2 versions before 1.14 for Perl allow memory exhaustion via closed streams that stream_state nev…0.6%높음7.5
CVE-2026-94627vLLM Mooncake connector through 0.29.0 fails to properly manage GPU KV cache block ownership when concurrent c…0.6%높음8.7
CVE-2026-69405Missing release of memory after effective lifetime in Windows DHCP Server allows an authorized attacker to den…0.6%보통5.7
CVE-2026-63128RMCP is an official Rust SDK for the Model Context Protocol. Prior to 2.0.0, the rmcp crate's stateful Streama…0.5%높음7.5
CVE-2026-18212A flaw was found in the SAML Redirect Binding implementation of Keycloak, an open-source identity and access m…0.5%높음7.5
CVE-2026-69781Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to d…0.5%보통6.5
CVE-2026-120440QuickJS-NG before 0.16.0 contains a memory leak vulnerability in js_atomics_store() in quickjs.c that fails to…0.5%보통6.9
CVE-2026-81563A BIND resolver encountering an SVCB/HTTPS AliasMode record referencing 14 or more SVCB/HTTPS ServiceMode reco…0.5%높음7.5
CVE-2026-76489Multiple Cisco products are affected by a vulnerability in the memory management implementation of Snort 3 tha…0.5%보통5.8
CVE-2026-92230Apache Karaf's XmlUtils cached XML parser/transformer factories in static ThreadLocal fields on long-lived con…0.5%높음7.5
CVE-2026-114613MessagePack is the serializer implementation for Python msgpack.org. Prior to 1.2.3, the msgpack-python C exte…0.4%높음7.5
CVE-2026-119286GraphQL-core is a Python port of the GraphQL.js reference implementation. From 3.3.0a3 until 3.3.1, validate()…0.4%높음7.5
CVE-2026-90784A vulnerability has been found in Dvidelabs flatcc up to 0.6.3. The impacted element is the function fb_clear_…0.4%보통5.5
CVE-2026-94652Missing release of memory after effective lifetime vulnerability in Apache Thrift c++ bindings. This issue aff…0.4%보통6.3
CVE-2026-93926Missing release of memory after effective lifetime, Missing release of resource after effective lifetime vulne…0.4%높음8.7
CVE-2026-69208Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, the DigestAuth server middlewar…0.4%높음7.5
CVE-2026-13148Missing release of memory after effective lifetime vulnerability in Softing smartLink allows resource leak exp…0.4%보통6.3
CVE-2026-86040libp2p is a JavaScript implementation of the libp2p networking stack. Prior to 11.0.26, @libp2p/floodsub accep…0.4%높음7.5
CVE-2026-109262ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the SVG encoder (WriteSVGImage)…0.4%보통6.9
CVE-2026-102081A Missing Release of Memory after Effective Lifetime vulnerability in the packet forwarding engine (PFE) of Ju…0.4%높음8.7
CVE-2026-87776compression is a Node.js and Express compression middleware. In versions before 1.8.2, when a client aborts th…0.4%높음7.5
CVE-2026-78127libcharon in strongSwan 4.1.2 through 6.0.7 has a missing release of memory after its effective lifetime in th…0.4%낮음3.7
CVE-2026-109263ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the YUV encoder, which fails to…0.4%보통6.3
CVE-2026-109278ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the wavelet-denoise operation, …0.4%보통6.3
CVE-2026-109261ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the GIF encoder because allocat…0.4%보통6.3
CVE-2026-109260ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the PNG encoder, which does not…0.4%보통6.3
CVE-2026-102053An Improper Release of Memory Before Removing Last Reference vulnerability in the l2ald process of Juniper Net…0.3%보통6.9
CVE-2026-116152ImageMagick before 7.1.2-33 contains a memory leak vulnerability in the MAT decoder that fails to release allo…0.3%보통6.9
CVE-2026-116155ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in the handling of XMP profiles by…0.3%보통6.9
CVE-2026-116154ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in its XML parsing code, where all…0.3%보통6.9
CVE-2026-101025Description NGINX JavaScript (njs) has a vulnerability where the built-in njs engine leaks a libxml2 parser co…0.3%보통6.9
CVE-2026-48987pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev101, EventManager in …0.3%보통6.5
CVE-2026-102032A Missing Release of Memory after Effective Lifetime vulnerability in the l2ald process of Juniper Networks Ju…0.3%높음7.1
CVE-2026-108748Quarkus LangChain4j 1.9.0 through 1.14.1 contains a missing release of memory vulnerability in the chat-scopes…0.3%보통6.9
CVE-2026-104874Multidict is an implementation of a multidict data structure. From 6.7.0 until 6.9.1, the C extension's items-…0.3%보통5.3
CVE-2026-15892The mcumgr SMP settings-management group handlers settings_mgmt_read(), settings_mgmt_write(), and settings_mg…0.3%보통5.3
CVE-2026-116151ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in the JNG encoder that fails to r…0.3%보통6.3
CVE-2026-116146ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in the MSL decoder that fails to r…0.3%보통6.3
CVE-2026-102051An Improper Release of Memory Before Removing Last Reference vulnerability in the l2cpd process of Juniper Net…0.3%높음7.1
CVE-2026-18076IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service due to a…0.3%보통4.3
CVE-2026-102716An unauthenticated client can drain the RTSP server's packet pool with a couple of dozen requests that carry a…0.3%높음8.7
CVE-2026-91926A flaw was found in gss-ntlmssp. A memory leak occurs in the NTLM target-info parser when a crafted NTLM CHALL…0.2%낮음3.7
CVE-2026-78131strongSwan 4.2.0 through 6.0.7 has a missing release of memory after its effective lifetime in the x509 plugin…0.2%낮음3.7
CVE-2026-116150ImageMagick before 7.1.2-33 contains a memory leak vulnerability in the FPX encoder that allows attackers to e…0.2%낮음2.3
CVE-2026-18313rpcapd can allocate up to 65536 bytes per each RPCAP_MSG_UPDATEFILTER_REQ or RPCAP_MSG_STARTCAP_REQ message re…0.2%보통4.3
CVE-2026-77684The Bluetooth Classic Hands-Free Profile HF role in subsys/bluetooth/host/classic/hfp_hf.c does not release th…0.2%보통5.7
CVE-2026-102762The NetX Duo MQTT client leaks the packet carrying a malformed PUBLISH message. Each malformed PUBLISH costs o…0.2%높음8.2
CVE-2026-78124strongSwan 5.0.2 through 6.0.7 allows PKCS#7 certificate enumeration in the openssl plugin that leads to a lac…0.2%낮음3.7
CVE-2026-110754Text::CSV_XS versions before 1.65 for Perl leak the parsed fields of a record that fails to parse in getline. …0.2%미평가
CVE-2026-20222A vulnerability in the EIGRP implementation in Cisco Secure Firewall Adaptive Security Appliance (ASA) Softwar…0.2%높음7.4
CVE-2026-110677Cpanel::JSON::XS versions from 4.28 before 4.80 for Perl leak the array collecting duplicate key values under …0.2%미평가
CVE-2026-110685Cpanel::JSON::XS versions before 4.80 for Perl leak the decoded arguments of a tagged value when its THAW meth…0.2%미평가
CVE-2026-110684Cpanel::JSON::XS versions from 3.0202 before 4.80 for Perl leak memory and retain overloaded objects when enco…0.2%미평가
CVE-2026-110672Cpanel::JSON::XS versions before 4.80 for Perl leak the decoded key of an object rejected for a duplicate key …0.2%미평가
CVE-2026-95395IEEE C37.118 Synchrophasor protocol dissector memory leak in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial …0.1%보통5.5
CVE-2026-47566NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged us…0.1%보통5.5
CVE-2026-109270ImageMagick before 7.1.2-32 contains a memory leak vulnerability in the -process option that allows attackers …0.1%보통4.8
CVE-2026-116159ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in the handling of the -cdl (color…0.1%보통4.8
CVE-2026-116157ImageMagick before 7.1.2-33 contains a memory leak vulnerability in PerlMagick that fails to free values retur…0.1%보통4.8
CVE-2026-116156ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak caused by a missing cleanup when t…0.1%보통4.8
CVE-2026-19740The Link Layer Control Procedure (LLCP) implementation of the Zephyr software Bluetooth LE Controller retains …0.1%보통6.5
CVE-2026-19738The Bluetooth Link Layer Control Procedure (LLCP) implementation for Connected Isochronous Stream (CIS) creati…0.1%보통6.5
CVE-2026-116158ImageMagick before 7.1.2-33 contains a memory leak vulnerability in the magick compare command caused by missi…0.1%낮음2.0
CVE-2026-19739The Bluetooth Link Layer control procedure code in subsys/bluetooth/controller/ll_sw/ull_llcp_conn_upd.c retai…0.1%보통6.5
CVE-2026-102006In Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in the process management su…0.1%보통5.5
CVE-2026-102005Wind River VxWorks 7 24.03 through 26.03, a memory leak occurs under specific, non-default configuration state…0.1%보통5.5
CVE-2026-120678A memory management flaw in the MongoDB C Driver's handling of compressed responses may cause the client libra…높음8.7
CVE-2026-121512Memory Leak with Amplification in µD3TN BPv6 EID Reference Handling allows Unauthenticated Remote Attacker to …높음7.5
이 원장은 전체 CVE 가 아닙니다. NVD 에는 30만 건이 넘습니다. 여기 있는 것은 ① 악용이 확인된 것 ② 최근 공개된 것 ③ 국산 SW 관련 ④ KISA 권고에 등장한 것입니다. 무엇을 담았는지 밝히지 않으면 "없다" 를 "안전하다" 로 읽게 됩니다.