CWE-908 관련 취약점
같은 약점 유형으로 분류된 취약점입니다. CWE 는 "무엇을 잘못했는가" 의 분류이고, 제품을 가리지 않고 같은 실수가 반복됩니다.
CWE-908 — 주요 취약점
악용이 확인된 것을 먼저 보여줍니다.
● 랜섬웨어 캠페인에 사용됨CVE-2025-5777Insufficient input validation leading to memory overread when the NetScaler is configured as a Gatew…100.0%심각9.3● 실제 악용이 확인됨CVE-2026-85880Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges local…3.6%높음7.8● 실제 악용이 확인됨CVE-2024-50302In the Linux kernel, the following vulnerability has been resolved: HID: core: zero-initialize the r…0.8%보통5.5● 실제 악용이 확인됨CVE-2024-29745there is a possible Information Disclosure due to uninitialized data. This could lead to local infor…0.5%보통5.5CVE-2026-69485Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute code…0.9%높음8.8CVE-2026-69349Use of uninitialized resource in Windows Management Instrumentation allows an authorized attacker to…0.8%보통5.7CVE-2026-72989Use of uninitialized resource in Windows Failover Cluster allows an unauthorized attacker to disclos…0.8%높음7.5CVE-2026-67386Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information ov…0.7%보통6.5
전체 목록
54건
CVE-2026-80091Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information over…0.7%보통6.5
CVE-2026-78519Use of uninitialized resource in Microsoft Office Outlook allows an unauthorized attacker to execute code over…0.6%높음8.8
CVE-2026-68776Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a netwo…0.6%보통6.5
CVE-2026-67648Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a netwo…0.6%보통6.5
CVE-2026-69358Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute code over a ne…0.5%높음7.1
CVE-2026-54604OpenSlide is a C library for reading whole slide image files. Prior to 4.0.1, a behavior change in libtiff 4.7…0.5%보통5.3
CVE-2026-68873Insertion of sensitive information into log file in Windows Program Compatibility Assistant Service allows an …0.5%보통5.5
CVE-2026-91946FreeRDP versions before 3.31.0 contain an information disclosure vulnerability in the RDPGFX server's ResetGra…0.4%높음7.1
CVE-2026-54634Hamlib is a ham radio control library for radios, rotators, and amplifiers. Prior to 4.7.2, the unauthenticate…0.4%높음7.3
CVE-2026-70290Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose info…0.4%보통5.5
CVE-2026-85483Use of uninitialized resource, Return of wrong status code vulnerability in Apache Thrift c_glib bindings. Thi…0.4%보통6.3
CVE-2026-92834Use of uninitialized resource, Return of wrong status code vulnerability in Apache Thrift C++ WebSocket server…0.4%보통6.3
CVE-2026-69672Use of uninitialized resource in Windows DNS allows an authorized attacker to disclose information locally.0.4%보통5.5
CVE-2026-72945Use of uninitialized resource in Windows Task Scheduler allows an authorized attacker to disclose information …0.4%보통5.5
CVE-2026-69770Use of uninitialized resource in Windows Spaceport.sys allows an authorized attacker to disclose information l…0.4%보통5.5
CVE-2026-85089FreeRDP versions 3.0.0 through 3.30.0 (before 3.31.0) transmit uninitialized heap memory in Save Session Info …0.4%높음7.1
CVE-2026-81958Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose informatio…0.4%보통5.5
CVE-2026-81391Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose informatio…0.4%보통5.5
CVE-2026-68852Use of uninitialized resource in Microsoft Account allows an authorized attacker to disclose information local…0.3%보통5.5
CVE-2026-94056Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, allows attackers to read c…0.4%높음7.5
CVE-2026-87555Uninitialized resource in GPU in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker …0.3%보통4.7
CVE-2026-69288Use of uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally.0.3%보통5.5
CVE-2026-69853Use of uninitialized resource in Windows Win32K allows an authorized attacker to disclose information locally.0.3%보통4.7
CVE-2026-102635ImageMagick versions before 7.1.2-32 and 6.9.13-57 contain uninitialized heap memory disclosure in the GIF dec…0.3%보통6.3
CVE-2026-91720Uninitialized resource in ANGLE in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to read memo…0.3%보통4.7
CVE-2026-95293Uninitialized resource in GPU in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to read memory…0.3%보통4.7
CVE-2026-102300Uninitialized resource in WebGPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to obtain c…0.3%보통4.3
CVE-2026-102313Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 154.0.8037.92 allowed a remote attacke…0.3%보통4.7
CVE-2026-102307Uninitialized resource in Dawn in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker…0.3%보통4.7
CVE-2026-102303Uninitialized resource in GPU in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker …0.3%보통4.3
CVE-2026-87642Uninitialized resource in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cros…0.3%보통4.3
CVE-2026-91740Uninitialized resource in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to obtain cro…0.2%보통4.3
CVE-2026-95359Uninitialized resource in GPU in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker …0.3%낮음3.4
CVE-2026-102311Uninitialized resource in GPU in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker …0.3%낮음3.4
CVE-2026-95324Uninitialized resource in GPU in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compro…0.3%낮음3.4
CVE-2026-87456Uninitialized resource in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had comp…0.2%낮음3.4
CVE-2026-102325Uninitialized resource in Skia in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to obtain cro…0.2%보통4.3
CVE-2026-102319Uninitialized resource in GPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compro…0.2%낮음3.4
CVE-2026-102315Uninitialized resource in Media in Google Chrome on on Windows prior to 154.0.8037.92 allowed a remote attacke…0.2%낮음3.4
CVE-2026-87497Uninitialized resource in Codecs in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read mem…0.2%보통4.3
CVE-2026-87576Uninitialized resource in GPU in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker …0.2%낮음3.4
CVE-2026-87647Uninitialized resource in GPU in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compro…0.2%낮음3.4
CVE-2026-93018Imager versions before 1.036 for Perl disclose uninitialised heap memory reading a paletted image with pixel i…0.2%미평가
CVE-2026-47600NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an err…0.1%높음7.8
CVE-2026-47555NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where a user…0.1%보통5.5
CVE-2026-15710An information leakage vulnerability exists in the Endpoint DLP component (epdlpdrv.sys) of Netskope Client fo…0.1%보통6.8
이 원장은 전체 CVE 가 아닙니다. NVD 에는 30만 건이 넘습니다. 여기 있는 것은 ① 악용이 확인된 것 ② 최근 공개된 것 ③ 국산 SW 관련 ④ KISA 권고에 등장한 것입니다. 무엇을 담았는지 밝히지 않으면 "없다" 를 "안전하다" 로 읽게 됩니다.