CWE-122 관련 취약점
같은 약점 유형으로 분류된 취약점입니다. CWE 는 "무엇을 잘못했는가" 의 분류이고, 제품을 가리지 않고 같은 실수가 반복됩니다.
CWE-122 — 주요 취약점
악용이 확인된 것을 먼저 보여줍니다.
● 실제 악용이 확인됨CVE-2015-3113Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0…99.8%심각9.8● 실제 악용이 확인됨CVE-2009-3459Heap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x b…86.6%높음8.8● 실제 악용이 확인됨CVE-2021-21017Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2…86.3%높음8.8● 랜섬웨어 캠페인에 사용됨CVE-2023-27997A heap-based buffer overflow vulnerability [CWE-122] in FortiOS version 7.2.4 and below, version 7.0…85.7%심각9.8● 실제 악용이 확인됨CVE-2023-4911A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GL…63.8%높음7.8● 실제 악용이 확인됨CVE-2024-38812The vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protoc…54.6%심각9.8● 랜섬웨어 캠페인에 사용됨CVE-2023-28252Windows Common Log File System Driver Elevation of Privilege Vulnerability49.0%높음7.8● 실제 악용이 확인됨CVE-2019-3568A buffer overflow vulnerability in WhatsApp VOIP stack allowed remote code execution via specially c…30.1%심각9.8
전체 목록
120건
CVE-2024-49138악용 확인Windows Common Log File System Driver Elevation of Privilege Vulnerability26.2%높음7.8
CVE-2023-36036악용 확인Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability16.7%높음7.8
CVE-2023-23376랜섬웨어 악용Windows Common Log File System Driver Elevation of Privilege Vulnerability10.9%높음7.8
CVE-2025-21333악용 확인Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability10.0%높음7.8
CVE-2020-16010악용 확인Heap buffer overflow in UI in Google Chrome on Android prior to 86.0.4240.185 allowed a remote attacker who ha…6.4%심각9.6
CVE-2025-24985악용 확인Integer overflow or wraparound in Windows Fast FAT Driver allows an unauthorized attacker to execute code loca…3.9%높음7.8
CVE-2025-25249악용 확인A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.…3.9%심각9.8
CVE-2026-85880악용 확인Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.3.6%높음7.8
CVE-2026-94127악용 확인When a BIG-IP APM access policy and an OAuth profile are configured on a virtual server, specific malicious tr…2.2%심각9.3
CVE-2025-24993악용 확인Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.2.2%높음7.8
CVE-2025-21418악용 확인Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability1.6%높음7.8
CVE-2026-53362악용 확인In the Linux kernel, the following vulnerability has been resolved: ipv6: account for fraggap on the paged all…0.7%높음7.8
CVE-2026-69829Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network.1.1%심각9.8
CVE-2026-91104HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affec…1.0%심각9.3
CVE-2026-69715Out-of-bounds read in Windows Direct Show allows an unauthorized attacker to execute code over a network.1.0%심각9.8
CVE-2026-69408Integer overflow or wraparound in Microsoft Windows Media Foundation allows an unauthorized attacker to execut…1.0%심각9.8
CVE-2026-69824Integer underflow (wrap or wraparound) in Microsoft Standard XPS allows an unauthorized attacker to execute co…1.0%심각9.8
CVE-2026-69586Integer overflow or wraparound in Microsoft Windows PDF allows an unauthorized attacker to execute code over a…1.0%심각9.8
CVE-2026-69493Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a net…1.0%심각9.8
CVE-2026-69496Heap-based buffer overflow in Windows Compressed Folder allows an unauthorized attacker to execute code over a…1.0%심각9.8
CVE-2026-91106HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affec…1.0%심각9.3
CVE-2026-91105HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affec…1.0%높음8.6
CVE-2026-69590Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthori…1.0%심각9.8
CVE-2026-78510Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a net…1.0%심각9.8
CVE-2026-78509Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a …1.0%심각9.8
CVE-2026-69845Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a netwo…0.9%심각9.8
CVE-2026-69276Integer underflow (wrap or wraparound) in Microsoft UxTheme Library (uxtheme.dll) allows an unauthorized attac…0.9%심각9.8
CVE-2026-69431Heap-based buffer overflow in Telnet Client allows an unauthorized attacker to execute code over a network.0.9%심각9.8
CVE-2026-69463Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code over a network.0.9%심각9.8
CVE-2026-69768Heap-based buffer overflow in Windows RNDIS allows an unauthorized attacker to execute code over a network.0.9%심각9.8
CVE-2026-69623Heap-based buffer overflow in Windows HTTP Print Provider allows an authorized attacker to execute code over a…0.9%높음8.0
CVE-2026-69547Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network…0.9%높음8.8
CVE-2026-69628Heap-based buffer overflow in Windows iSCSI allows an authorized attacker to execute code over a network.0.9%높음8.8
CVE-2026-69769Heap-based buffer overflow in Windows HTTP Print Provider allows an unauthorized attacker to execute code over…0.9%심각9.8
CVE-2026-72959Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthori…0.9%높음8.8
CVE-2026-72950Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthori…0.9%높음8.8
CVE-2026-69491Heap-based buffer overflow in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code ov…0.9%심각9.8
CVE-2026-55556Rsyslog is a rocket-fast system for log processing. From 8.2110.0 until 8.2604.0, the optional imhttp module's…0.9%높음8.2
CVE-2026-78456Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.0.9%높음8.8
CVE-2026-69729Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to execute code over …0.9%높음8.8
CVE-2026-72933Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execut…0.8%높음8.8
CVE-2026-69495Heap-based buffer overflow in Windows Event Logging Service allows an unauthorized attacker to execute code ov…0.8%높음8.8
CVE-2026-69494Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a net…0.8%높음8.8
CVE-2026-69669Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to execute code over a network.0.8%높음8.8
CVE-2026-67643Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.0.8%높음8.8
CVE-2026-78512Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a netwo…0.8%높음8.8
CVE-2026-78511Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a net…0.8%높음8.8
CVE-2026-70203Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a netw…0.8%높음8.8
CVE-2026-69518Heap-based buffer overflow in Windows Remote Desktop allows an unauthorized attacker to execute code over a ne…0.8%높음8.8
CVE-2026-70586Heap-based buffer overflow in Windows Paint allows an unauthorized attacker to execute code over a network.0.8%높음8.8
CVE-2026-70351Integer overflow or wraparound in Microsoft WebP Image Extension allows an unauthorized attacker to execute co…0.8%높음8.8
CVE-2026-69860Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a…0.8%높음8.8
CVE-2026-69649Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over…0.8%높음8.8
CVE-2026-69601Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute co…0.8%높음8.8
CVE-2026-69671Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a net…0.8%높음8.8
CVE-2026-72973Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a net…0.8%높음8.8
CVE-2026-69442Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.0.8%높음8.8
CVE-2026-69778Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a n…0.8%높음8.8
CVE-2026-69629Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a …0.8%높음8.8
CVE-2026-69764Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a net…0.8%높음8.8
CVE-2026-72972Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a net…0.8%높음8.8
CVE-2026-69556Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a net…0.8%높음8.8
CVE-2026-58264FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 1.1.2 until 2.5.6, the Flui…0.8%심각9.8
CVE-2026-69522Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.0.8%높음8.8
CVE-2026-78505Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.0.8%높음8.8
CVE-2026-68785Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.0.8%보통4.9
CVE-2026-68839Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute…0.8%심각9.8
CVE-2026-72940Heap-based buffer overflow in Windows Schannel allows an unauthorized attacker to execute code over a network.0.8%높음8.8
CVE-2026-54627SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC p…0.8%심각9.8
CVE-2026-54626SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC p…0.8%심각9.8
CVE-2026-69681Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate…0.8%높음8.0
CVE-2026-69434Heap-based buffer overflow in Windows URL Moniker allows an unauthorized attacker to execute code over a netwo…0.8%높음8.8
CVE-2026-69875Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network.0.8%높음8.0
CVE-2026-69512Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges over a…0.8%높음8.0
CVE-2026-69643Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges over a…0.8%높음8.0
CVE-2026-69334Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execu…0.8%높음8.8
CVE-2026-69511Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute co…0.8%높음8.8
CVE-2026-69360Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a net…0.8%높음8.8
CVE-2026-77482Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.0.8%높음8.8
CVE-2026-69772Heap-based buffer overflow in Windows Network File System allows an unauthorized attacker to execute code over…0.8%높음8.8
CVE-2026-69386Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute co…0.8%높음8.8
CVE-2026-62744Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute co…0.8%높음8.8
CVE-2026-77906Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.0.8%높음8.8
CVE-2026-72986Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.0.8%높음8.8
CVE-2026-72960Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a netw…0.8%높음8.8
CVE-2026-73018Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.0.8%높음8.8
CVE-2026-69625Heap-based buffer overflow in Windows Connected User Experiences and Telemetry allows an authorized attacker t…0.7%높음8.0
CVE-2026-69439Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges ove…0.7%높음8.8
CVE-2026-69732Heap-based buffer overflow in Windows Link Layer Topology Discovery Protocol allows an unauthorized attacker t…0.7%높음8.1
CVE-2026-69727Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges ov…0.7%높음8.0
CVE-2026-69271Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over …0.7%높음8.0
CVE-2026-69826Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges ov…0.7%높음8.0
CVE-2026-69773Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges ov…0.7%높음8.0
CVE-2026-69423Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges ove…0.7%높음8.0
CVE-2026-69346Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privil…0.7%높음8.0
CVE-2026-69481Heap-based buffer overflow in Windows Enterprise App Management allows an authorized attacker to elevate privi…0.7%높음8.0
CVE-2026-69418Heap-based buffer overflow in Volume Manager Driver allows an authorized attacker to elevate privileges over a…0.7%높음8.0
CVE-2026-69371Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges over …0.7%높음8.0
CVE-2026-69462Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over…0.7%높음8.0
CVE-2026-80087Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to disclose information over a …0.7%보통6.5
CVE-2026-93962A weakness has been identified in Kamailio up to 5.8.8/6.0.7/6.1.4/6.2.0-dev1. The impacted element is the fun…0.7%보통5.5
CVE-2026-69486Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code …0.7%높음8.8
CVE-2026-91098HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affec…0.7%높음8.6
CVE-2026-67639Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.0.7%높음8.8
CVE-2026-67638Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.0.7%높음8.8
CVE-2026-67380Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.0.7%높음8.8
CVE-2026-69786Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a netw…0.7%높음8.1
CVE-2026-92399A vulnerability was determined in GPAC 26.07.0. This affects the function rmt_client_handle_ws_frame of the fi…0.7%보통5.5
CVE-2026-69514Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to execute code ov…0.7%높음7.5
CVE-2026-68876Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to…0.7%높음8.0
CVE-2026-69325Heap-based buffer overflow in Microsoft JScript allows an unauthorized attacker to execute code over a network…0.6%높음8.1
이 원장은 전체 CVE 가 아닙니다. NVD 에는 30만 건이 넘습니다. 여기 있는 것은 ① 악용이 확인된 것 ② 최근 공개된 것 ③ 국산 SW 관련 ④ KISA 권고에 등장한 것입니다. 무엇을 담았는지 밝히지 않으면 "없다" 를 "안전하다" 로 읽게 됩니다.