CWE-772 관련 취약점
같은 약점 유형으로 분류된 취약점입니다. CWE 는 "무엇을 잘못했는가" 의 분류이고, 제품을 가리지 않고 같은 실수가 반복됩니다.
CWE-772 — 주요 취약점
악용이 확인된 것을 먼저 보여줍니다.
● 실제 악용이 확인됨CVE-2024-20481A vulnerability in the Remote Access VPN (RAVPN) service of Cisco Adaptive Security Appliance (ASA) …15.9%보통5.8CVE-2026-20250A vulnerability in Datagram TLS (DTLS) message handling of Cisco Secure Firewall Adaptive Security A…0.5%높음8.6CVE-2026-63128RMCP is an official Rust SDK for the Model Context Protocol. Prior to 2.0.0, the rmcp crate's statef…0.5%높음7.5CVE-2026-94625vLLM through 0.29.0 contains a resource exhaustion vulnerability in MooncakeConnector where rejected…0.5%보통6.9CVE-2026-92230Apache Karaf's XmlUtils cached XML parser/transformer factories in static ThreadLocal fields on long…0.5%높음7.5CVE-2026-94651improper handling of exceptional conditions, Missing release of resource after effective lifetime vu…0.5%높음8.2CVE-2026-59951The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context Protocol (MC…0.5%보통6.9CVE-2026-107286Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. …0.4%높음7.5
전체 목록
37건
CVE-2026-112200P-Net before 1.0.3 does not release the Application Relationship (AR) and the RPC session when an RPC request …0.4%높음8.7
CVE-2026-115215In Eclipse ThreadX NetX Duo versions 6.0 through 6.5.2.202603a, the NetX Secure DTLS server allocates a sessio…0.4%높음8.7
CVE-2026-93926Missing release of memory after effective lifetime, Missing release of resource after effective lifetime vulne…0.4%높음8.7
CVE-2026-115793P-Net before 1.0.3 does not release the RPC session allocated for an RPC request that names an unknown interfa…0.4%높음8.7
CVE-2026-92983InternLM LMDeploy through 0.17.0 in DistServe prefill/decode disaggregation mode fails to release scheduler se…0.4%높음8.7
CVE-2026-100657Netty's STOMP codec (io.netty:netty-codec-stomp) contains a ByteBuf leak in StompSubframeDecoder. Once a frame…0.3%높음8.7
CVE-2026-85718The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously …0.3%보통5.9
CVE-2026-107834OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.0.0 until 3.8.0, …0.3%보통5.3
CVE-2026-18149undici's retry handler can leave an already-exposed response body pending forever. When a server returns a suc…0.3%보통5.9
CVE-2026-118262Echo is a Go web framework. From 4.15.0 until 4.16.1 and 5.4.1, Echo's Proxy middleware can retain a handler, …0.3%높음8.2
CVE-2026-79677Missing release of resource after effective lifetime, Comparison using wrong factors vulnerability in Apache T…0.3%높음7.5
CVE-2026-89096A flaw was found in nfs-utils. An unauthenticated remote attacker can trigger a Denial of Service (DoS) by sen…0.3%보통5.9
CVE-2026-90870A missing release of backend receiver sessions in the Ad Hoc Transfer component of Progress Software WS_FTP Se…0.3%보통5.3
CVE-2026-72931Missing release of resource after effective lifetime in Windows Secure Socket Tunneling Protocol (SSTP) allows…0.3%보통4.7
CVE-2026-81039The Bluetooth host pre-allocates a bt_conn object (a "reservation") from the fixed acl_conns[] pool for every …0.2%보통4.3
CVE-2026-16678IBM Power Systems Firmware FW1110.00 through FW1110.31, FW1120.00 through FW1120.01, and FW1060.00 through FW1…0.2%보통4.5
CVE-2026-77205Libreswan in FIPS mode has a vulnerability where badly formed received certificates are rejected, but not dele…0.2%낮음3.7
CVE-2026-19937The Bluetooth Mesh Access layer delayable-message machinery in subsys/bluetooth/mesh/delayable_msg.c manages a…0.2%보통5.7
CVE-2026-95108One logical thread of a user-mode ThreadX module costs the Module Manager's shared object pool two allocations…0.2%보통6.8
CVE-2026-104112A missing release of resources in the illumos name service cache daemon (nscd) allows a local user to exhaust …0.1%보통6.8
CVE-2026-114236storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer may, when processing corrupt or malicious inputs, le…0.1%낮음3.3
CVE-2026-19740The Link Layer Control Procedure (LLCP) implementation of the Zephyr software Bluetooth LE Controller retains …0.1%보통6.5
CVE-2026-19739The Bluetooth Link Layer control procedure code in subsys/bluetooth/controller/ll_sw/ull_llcp_conn_upd.c retai…0.1%보통6.5
CVE-2026-97686Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in the IPNET subsystem failing …0.1%보통5.5
CVE-2026-104035A flaw was found in SSSD. An issue in the Kerberos Credential Manager (KCM) responder allows a local user to c…0.1%보통5.5
CVE-2026-104031A flaw was found in SSSD. In configurations where the autofs responder service is enabled, memory allocated du…0.1%보통5.5
CVE-2026-104045A flaw was found in SSSD. A local user can trigger a Denial of Service (DoS) by exploiting a race condition in…0.1%보통4.7
CVE-2026-119636Improper release of expired privileged access checkouts in the PAM scheduled check-in task in Devolutions Serv…미평가
CVE-2026-121391FreeRDP from 3.0.0 before 3.32.2 contains a file descriptor leak in parallel_process_irp_create that fails to …보통5.3
이 원장은 전체 CVE 가 아닙니다. NVD 에는 30만 건이 넘습니다. 여기 있는 것은 ① 악용이 확인된 것 ② 최근 공개된 것 ③ 국산 SW 관련 ④ KISA 권고에 등장한 것입니다. 무엇을 담았는지 밝히지 않으면 "없다" 를 "안전하다" 로 읽게 됩니다.