CWE-427 관련 취약점
같은 약점 유형으로 분류된 취약점입니다. CWE 는 "무엇을 잘못했는가" 의 분류이고, 제품을 가리지 않고 같은 실수가 반복됩니다.
CWE-427 — 주요 취약점
악용이 확인된 것을 먼저 보여줍니다.
● 랜섬웨어 캠페인에 사용됨CVE-2020-3153A vulnerability in the installer component of Cisco AnyConnect Secure Mobility Client for Windows co…28.5%보통6.5● 랜섬웨어 캠페인에 사용됨CVE-2020-3433A vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility …10.0%높음7.8● 실제 악용이 확인됨CVE-2026-110936A vulnerability has been identified in Siemens Software Center (All versions). The affected applicat…1.0%높음8.4CVE-2026-108390Hestia Control Panel is a lightweight and powerful control panel for the modern web. From version 1.…0.7%심각9.9CVE-2026-54916NetBox Device Type Library is a collection of community-sourced device type definitions for import i…0.6%높음8.8CVE-2026-69923Uncontrolled search path element in Windows AI allows an authorized attacker to elevate privileges l…0.4%높음7.8CVE-2026-116243pgAdmin 4 runs pg_dump, pg_restore, pg_dumpall and psql from the binary path a user sets in their pr…0.3%높음7.7CVE-2026-72980Uncontrolled search path element in Windows Hello allows an authorized attacker to bypass a security…0.3%보통4.4
전체 목록
34건
CVE-2026-92202Luxion KeyShot BIP File Parsing Uncontrolled Search Path Element Remote Code Execution Vulnerability. This vul…0.2%높음7.8
CVE-2026-76199Photoshop Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitr…0.2%높음8.6
CVE-2026-103845Dimension is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code…0.2%높음8.6
CVE-2026-103665The installer for Yamaha LAN Monitor for Windows provided by Yamaha Corporation may insecurely load Dynamic Li…0.2%높음8.4
CVE-2026-68955The installer for Rakuten Kobo Desktop Application (Windows version) insecurely loads Dynamic Link Libraries. …0.2%높음8.4
CVE-2026-71170Dell Application Store, versions prior to 26.05.0.7, contains an Uncontrolled Path Element vulnerability. A lo…0.2%높음7.8
CVE-2026-91093A potential security vulnerability has been identified in HP One Agent for certain HP PC products, which might…0.2%높음8.5
CVE-2026-104349Creative Cloud Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in a…0.2%높음7.3
CVE-2026-62847Metalama is a Roslyn-based open-source patterns and architecture toolkit for C#. Prior to 2025.1.18, 2026.0.25…0.2%높음8.2
CVE-2026-83598Netdata is an open source observability tool. From rom 2.0.0 until 2.10.4, during Netdata Windows Agent MSI re…0.2%높음7.8
CVE-2026-106186Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to 155.0.8059.39 a…0.2%높음8.6
CVE-2026-92180pdfforge PDF Architect activation-service Update Service Uncontrolled Search Path Element Local Privilege Esca…0.1%높음7.8
CVE-2026-6958Acunetix 25.11.251107123 for Windows contains a local privilege escalation vulnerability in the Web Vulnerabil…0.1%높음8.5
CVE-2026-92838A DLL hijacking vulnerability exists in the GeoVision GV-Remote E-Map desktop application. The application loa…0.1%높음7.8
CVE-2026-87530Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to 153.0.8010.36 a…0.1%높음8.1
CVE-2026-107615An uncontrolled search path element vulnerability in GlavSoft TightVNC Server for Windows before 2.8.88 allows…0.1%높음7.8
CVE-2026-56795Dell Server Update Utility, versions prior to 26.07.01, contains an Uncontrolled Search Path Element vulnerabi…0.1%높음8.2
CVE-2026-47570NVIDIA GPU Display Driver for Windows contains a vulnerability in the CUDA driver where an attacker could caus…0.1%높음7.8
CVE-2026-89325An uncontrolled search path element in InsightVM assessment content in Rapid7 Insight Agent on Windows allows …0.1%높음7.8
CVE-2026-108693ImageMagick on Windows through 7.1.2-33 and 6.9.13-58 contains an uncontrolled search path vulnerability in NT…0.1%높음7.3
CVE-2026-102438An uncontrolled search path element vulnerability in ASUS Armoury Crate allows local users to execute arbitrar…0.1%높음8.5
CVE-2026-6935IBM Concert 1.0.0 through 3.0.0 invokes operating system commands without fully qualifying executable paths or…0.1%높음7.8
CVE-2026-91803A local privilege escalation vulnerability exists in the updater of Foxit PDF Editor/Reader due to unsafe load…0.1%높음8.8
CVE-2026-104809DigitalCanion has discovered a vulnerability that allows an attacker to cause the system to load an attacker-c…0.1%높음8.4
CVE-2026-25264Privilege escalation due to weak configuration during package extraction process.0.1%높음8.8
CVE-2022-24077Naver Cloud Explorer Beta allows the attacker to execute arbitrary code as System privilege via malicious DLL …높음7.8
이 원장은 전체 CVE 가 아닙니다. NVD 에는 30만 건이 넘습니다. 여기 있는 것은 ① 악용이 확인된 것 ② 최근 공개된 것 ③ 국산 SW 관련 ④ KISA 권고에 등장한 것입니다. 무엇을 담았는지 밝히지 않으면 "없다" 를 "안전하다" 로 읽게 됩니다.