CVE Ledger

CWE-459 관련 취약점

같은 약점 유형으로 분류된 취약점입니다. CWE 는 "무엇을 잘못했는가" 의 분류이고, 제품을 가리지 않고 같은 실수가 반복됩니다.

원장 35,126건이 중 악용 확인 1,767건분류: CWE-459

CWE-459 — 주요 취약점

악용이 확인된 것을 먼저 보여줍니다.

47건

CVE-2026-109869undici is an HTTP client library for Node.js. In versions 6.23.0 through 6.29.0, 7.18.0 through 7.30.0, and 8.…0.3%높음7.5

CVE-2026-87446Incomplete cleanup in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging …0.3%미평가

CVE-2026-87436Incomplete cleanup in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging soc…0.3%미평가

CVE-2026-106203Incomplete cleanup in Autofill in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker lev…0.3%높음8.8

CVE-2026-115478obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. From 1.0.1 until 1.3…0.3%높음7.1

CVE-2026-87549Incomplete cleanup in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging s…0.3%미평가

CVE-2026-85043Incomplete cleanup in Network in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to bypass syst…0.3%심각9.1

CVE-2026-112180MISP contains a data integrity flaw in its event deletion logic. When a user deletes an event, several associa…0.3%보통5.1

CVE-2026-88932multer is a Node.js middleware for handling multipart/form-data uploads. In versions 2.2.0 through 2.3.0, when…0.3%보통5.3

CVE-2026-104427Zebra before 6.1.0 contains an incomplete cleanup vulnerability in the state write task that allows remote una…0.3%높음8.2

CVE-2026-104421Zebra before 6.2.1 contains an incomplete cleanup vulnerability that allows unauthenticated peers to block dow…0.3%보통6.9

CVE-2026-101100A flaw has been found in ag-ui-protocol ag-ui up to 2026-09-07. This vulnerability affects the function Filter…0.3%보통5.3

CVE-2026-15390Das U-Boot with CONFIG_IP_DEFRAG=y parameter fails to clear IP reassembly state after delivering a complete da…0.3%심각9.0

CVE-2026-106294Incomplete cleanup in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker t…0.3%미평가

CVE-2026-95326Incomplete cleanup in Bluetooth in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging s…0.3%미평가

CVE-2026-93446Incomplete cleanup vulnerability in Apache Tomcat could cause TLS 1.3 connections to fail intermittently. This…0.3%미평가

CVE-2026-88041Incomplete cleanup vulnerability in Apache Tomcat allowed an trailer information from a previous request to le…0.3%미평가

CVE-2026-78437Incomplete cleanup vulnerability in Apache Tomcat allows a malformed request to potentially (depends on timing…0.3%높음7.3

CVE-2026-91730Incomplete cleanup in GetUserMedia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had c…0.2%낮음3.1

CVE-2026-49484Code for IBM i is a Visual Studio Code extension for maintaining and compiling ILE languages on the IBMi platf…0.2%보통5.1

CVE-2026-106394Incomplete cleanup in Glic in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social…0.2%보통4.3

CVE-2026-106366Incomplete cleanup in CustomTabs in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attack…0.2%미평가

CVE-2026-106262Incomplete cleanup in GetUserMedia in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had c…0.2%보통4.2

CVE-2026-110924A flaw was found in OpenSSH. With GSSAPI authentication enabled, a failed GSSAPI attempt can leave delegated c…0.2%보통4.8

CVE-2026-75944A race condition during supplicant re-authentication may leave a stale ACL entry that persists in the system. …0.1%보통5.6

CVE-2026-17525Incomplete cleanup vulnerability in ABB My Control System. This issue affects My Control System: 26.4 and 26.5…0.1%보통5.1

CVE-2026-75945A race condition may cause a supplicant to remain in an authorized state after a clear dot1x host all command …0.1%낮음2.1

CVE-2026-75943A brief (milliseconds to seconds) traffic leak may occur when an authenticated supplicant is removed, either v…0.1%낮음2.1

CVE-2026-107914Backdrop CMS 1.34 before 1.34.5 and 1.35 before 1.35.1 doesn't sufficiently protect configuration exports when…0.1%높음7.8

CVE-2026-108982VeraCrypt 1.26.29 (FUSE-T build) on macOS sometimes allows unintended access to decrypted data. It does not te…0.1%높음7.2

CVE-2026-106243Incomplete cleanup in Proxy Auth in Google Chrome prior to 155.0.8059.39 allowed an adjacent attacker to obtai…0.1%보통5.3

CVE-2026-107332Insecure file permissions in the CodeCatalyst connection handler in AWS Toolkit for VS Code before 4.10.0 allo…0.1%보통6.8

CVE-2026-19740The Link Layer Control Procedure (LLCP) implementation of the Zephyr software Bluetooth LE Controller retains …0.1%보통6.5

CVE-2026-19739The Bluetooth Link Layer control procedure code in subsys/bluetooth/controller/ll_sw/ull_llcp_conn_upd.c retai…0.1%보통6.5

CVE-2026-110008@fastify/oauth2 is a Fastify wrapper for OAuth2 login flows. In versions 7.2.0 through 8.3.1, the state and co…0.1%보통4.2

CVE-2026-121204Incomplete cleanup in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web…미평가

CVE-2026-121096Incomplete cleanup in V8 in Google Chrome prior to 157.0.8103.38 allowed a local attacker to read memory via a…미평가

CVE-2026-121055Incomplete cleanup in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass sys…미평가

CVE-2026-85033The AVRCP Target role in subsys/bluetooth/host/classic/avrcp.c keeps its vendor-dependent response transmit st…보통4.6

이 원장은 전체 CVE 가 아닙니다. NVD 에는 30만 건이 넘습니다. 여기 있는 것은 ① 악용이 확인된 것 ② 최근 공개된 것 ③ 국산 SW 관련 ④ KISA 권고에 등장한 것입니다. 무엇을 담았는지 밝히지 않으면 "없다" 를 "안전하다" 로 읽게 됩니다.