악용이 확인된 취약점
미국 CISA 가 실제 악용 정황을 확인해 등재한 목록입니다. CVSS 점수가 높다고 악용되는 것이 아니고, 낮다고 안전한 것도 아닙니다 — 이 목록에 있다는 것은 이미 쓰이고 있다는 뜻입니다.
랜섬웨어 캠페인에 사용된 취약점
| CVE | 등재일 | 공급사 · 제품 | 취약점 이름 | 악용 확률 | 심각도 | 한국어 권고 |
|---|---|---|---|---|---|---|
| CVE-2026-15410 랜섬웨어 악용 | 2026-07-14 | SonicWall | SonicWall SMA1000 Appliances Code Injection Vulnerability | 11.8% | 높음7.2 | |
| CVE-2026-15409 랜섬웨어 악용 | 2026-07-14 | SonicWall | SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability | 83.7% | 심각10.0 | |
| CVE-2026-45659 랜섬웨어 악용 | 2026-07-01 | Microsoft | Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerab… | 76.1% | 높음8.8 | |
| CVE-2026-12569 랜섬웨어 악용 | 2026-06-25 | PTC | PTC Windchill and FlexPLM Improper Input Validation Vulnerability | 40.6% | 심각9.3 | |
| CVE-2026-35273 랜섬웨어 악용 | 2026-06-12 | Oracle | Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Cr… | 95.5% | 심각9.8 | |
| CVE-2026-50751 랜섬웨어 악용 | 2026-06-08 | Check Point | Check Point Security Gateway Improper Authentication Vulnerability | 83.8% | 심각9.3 | |
| CVE-2026-0257 랜섬웨어 악용 | 2026-05-29 | Palo Alto Networks | Palo Alto Networks PAN-OS Authentication Bypass Vulnerability | 93.9% | 높음7.8 | |
| CVE-2026-48027 랜섬웨어 악용 | 2026-05-27 | Nx | Nx Console Embedded Malicious Code Vulnerability | 1.8% | 심각9.3 | |
| CVE-2026-45321 랜섬웨어 악용 | 2026-05-27 | TanStack | TanStack Unspecified Vulnerability | 2.3% | 심각9.6 | |
| CVE-2026-41940 랜섬웨어 악용 | 2026-04-30 | WebPros | WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authenticatio… | 98.5% | 심각9.3 | |
| CVE-2024-1708 랜섬웨어 악용 | 2026-04-28 | ConnectWise | ConnectWise ScreenConnect Path Traversal Vulnerability | 95.5% | 높음8.4 | |
| CVE-2024-57728 랜섬웨어 악용 | 2026-04-24 | SimpleHelp | SimpleHelp Path Traversal Vulnerability | 7.0% | 높음7.2 | |
| CVE-2024-57726 랜섬웨어 악용 | 2026-04-24 | SimpleHelp | SimpleHelp Missing Authorization Vulnerability | 66.6% | 심각9.9 | |
| CVE-2026-33825 랜섬웨어 악용 | 2026-04-22 | Microsoft | Microsoft Defender Insufficient Granularity of Access Control Vulnerab… | 6.7% | 높음7.8 | |
| CVE-2024-27199 랜섬웨어 악용 | 2026-04-20 | JetBrains | JetBrains TeamCity Relative Path Traversal Vulnerability | 100.0% | 높음7.3 | |
| CVE-2023-27351 랜섬웨어 악용 | 2026-04-20 | PaperCut | PaperCut NG/MF Improper Authentication Vulnerability | 78.1% | 높음7.5 | |
| CVE-2025-60710 랜섬웨어 악용 | 2026-04-13 | Microsoft | Microsoft Windows Link Following Vulnerability | 4.6% | 높음7.8 | |
| CVE-2023-21529 랜섬웨어 악용 | 2026-04-13 | Microsoft | Microsoft Exchange Server Deserialization of Untrusted Data Vulnerabil… | 62.1% | 높음8.8 | |
| CVE-2026-20131 랜섬웨어 악용 | 2026-03-19 | Cisco | Cisco Secure Firewall Management Center (FMC) Software and Cisco Secur… | 31.2% | 심각10.0 | |
| CVE-2025-26399 랜섬웨어 악용 | 2026-03-09 | SolarWinds | SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerabili… | 89.5% | 심각9.8 | |
| CVE-2026-1731 랜섬웨어 악용 | 2026-02-13 | BeyondTrust | BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS … | 90.3% | 심각9.9 | |
| CVE-2026-24423 랜섬웨어 악용 | 2026-02-05 | SmarterTools | SmarterTools SmarterMail Missing Authentication for Critical Function … | 87.7% | 심각9.3 | |
| CVE-2026-23760 랜섬웨어 악용 | 2026-01-26 | SmarterTools | SmarterTools SmarterMail Authentication Bypass Using an Alternate Path… | 96.3% | 심각9.3 | |
| CVE-2025-52691 랜섬웨어 악용 | 2026-01-26 | SmarterTools | SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Ty… | 85.7% | 심각10.0 | |
| CVE-2025-55182 랜섬웨어 악용 | 2025-12-05 | Meta | Meta React Server Components Remote Code Execution Vulnerability | 99.8% | 심각10.0 | |
| CVE-2025-61884 랜섬웨어 악용 | 2025-10-20 | Oracle | Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerabili… | 97.8% | 높음7.5 | |
| CVE-2025-61882 랜섬웨어 악용 | 2025-10-06 | Oracle | Oracle E-Business Suite Unspecified Vulnerability | 99.7% | 심각9.8 | |
| CVE-2021-43226 랜섬웨어 악용 | 2025-10-06 | Microsoft | Microsoft Windows Privilege Escalation Vulnerability | 3.1% | 높음7.8 | |
| CVE-2025-10035 랜섬웨어 악용 | 2025-09-29 | Fortra | Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability | 99.8% | 심각9.8 | |
| CVE-2025-8088 랜섬웨어 악용 | 2025-08-12 | RARLAB | RARLAB WinRAR Path Traversal Vulnerability | 94.6% | 높음8.4 | |
| CVE-2025-49706 랜섬웨어 악용 | 2025-07-22 | Microsoft | Microsoft SharePoint Improper Authentication Vulnerability | 98.8% | 보통6.5 | |
| CVE-2025-49704 랜섬웨어 악용 | 2025-07-22 | Microsoft | Microsoft SharePoint Code Injection Vulnerability | 100.0% | 높음8.8 | |
| CVE-2025-53770 랜섬웨어 악용 | 2025-07-20 | Microsoft | Microsoft SharePoint Deserialization of Untrusted Data Vulnerability | 100.0% | 심각9.8 | |
| CVE-2025-5777 랜섬웨어 악용 | 2025-07-10 | Citrix | Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability | 100.0% | 심각9.3 | |
| CVE-2019-6693 랜섬웨어 악용 | 2025-06-25 | Fortinet | Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability | 5.6% | 보통6.5 | |
| CVE-2025-42999 랜섬웨어 악용 | 2025-05-15 | SAP | SAP NetWeaver Deserialization Vulnerability | 13.9% | 심각9.1 | |
| CVE-2025-3248 랜섬웨어 악용 | 2025-05-05 | Langflow | Langflow Missing Authentication Vulnerability | 100.0% | 심각9.8 | |
| CVE-2025-31324 랜섬웨어 악용 | 2025-04-29 | SAP | SAP NetWeaver Unrestricted File Upload Vulnerability | 99.5% | 심각9.8 | |
| CVE-2025-29824 랜섬웨어 악용 | 2025-04-08 | Microsoft | Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free … | 13.9% | 높음7.8 | |
| CVE-2025-31161 랜섬웨어 악용 | 2025-04-07 | CrushFTP | CrushFTP Authentication Bypass Vulnerability | 100.0% | 심각9.8 | |
| CVE-2025-22457 랜섬웨어 악용 | 2025-04-04 | Ivanti | Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buf… | 100.0% | 심각9.8 | |
| CVE-2025-24472 랜섬웨어 악용 | 2025-03-18 | Fortinet | Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability | 7.1% | 높음8.1 | |
| CVE-2025-26633 랜섬웨어 악용 | 2025-03-11 | Microsoft | Microsoft Windows Management Console (MMC) Improper Neutralization Vul… | 30.4% | 높음7.0 | |
| CVE-2025-22225 랜섬웨어 악용 | 2025-03-04 | VMware | VMware ESXi Arbitrary Write Vulnerability | 1.0% | 높음8.2 | |
| CVE-2018-8639 랜섬웨어 악용 | 2025-03-03 | Microsoft | Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnera… | 22.2% | 높음7.8 | |
| CVE-2024-53704 랜섬웨어 악용 | 2025-02-18 | SonicWall | SonicWall SonicOS SSLVPN Improper Authentication Vulnerability | 95.1% | 심각9.8 | |
| CVE-2024-57727 랜섬웨어 악용 | 2025-02-13 | SimpleHelp | SimpleHelp Path Traversal Vulnerability | 95.2% | 높음7.5 | |
| CVE-2020-29574 랜섬웨어 악용 | 2025-02-06 | Sophos | CyberoamOS (CROS) SQL Injection Vulnerability | 4.7% | 심각9.8 | |
| CVE-2025-23006 랜섬웨어 악용 | 2025-01-24 | SonicWall | SonicWall SMA1000 Appliances Deserialization Vulnerability | 23.4% | 심각9.8 | |
| CVE-2024-55591 랜섬웨어 악용 | 2025-01-14 | Fortinet | Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability | 98.3% | 심각9.8 | |
| CVE-2023-48365 랜섬웨어 악용 | 2025-01-13 | Qlik | Qlik Sense HTTP Tunneling Vulnerability | 24.7% | 심각9.9 | |
| CVE-2025-0282 랜섬웨어 악용 | 2025-01-08 | Ivanti | Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buf… | 100.0% | 심각9.0 | |
| CVE-2024-55550 랜섬웨어 악용 | 2025-01-07 | Mitel | Mitel MiCollab Path Traversal Vulnerability | 37.8% | 낮음2.7 | |
| CVE-2024-41713 랜섬웨어 악용 | 2025-01-07 | Mitel | Mitel MiCollab Path Traversal Vulnerability | 98.1% | 심각9.1 | |
| CVE-2024-55956 랜섬웨어 악용 | 2024-12-17 | Cleo | Cleo Multiple Products Unauthenticated File Upload Vulnerability | 94.0% | 심각9.8 | |
| CVE-2024-50623 랜섬웨어 악용 | 2024-12-13 | Cleo | Cleo Multiple Products Unrestricted File Upload Vulnerability | 98.6% | 심각9.8 | |
| CVE-2024-51378 랜섬웨어 악용 | 2024-12-04 | CyberPersons | CyberPanel Incorrect Default Permissions Vulnerability | 94.7% | 심각9.8 | |
| CVE-2024-11667 랜섬웨어 악용 | 2024-12-03 | Zyxel | Zyxel Multiple Firewalls Path Traversal Vulnerability | 2.9% | 심각9.8 | |
| CVE-2023-28461 랜섬웨어 악용 | 2024-11-25 | Array Networks | Array Networks AG and vxAG ArrayOS Missing Authentication for Critical… | 68.1% | 심각9.8 | |
| CVE-2024-9474 랜섬웨어 악용 | 2024-11-18 | Palo Alto Networks | Palo Alto Networks PAN-OS Management Interface OS Command Injection Vu… | 94.7% | 보통6.9 | |
| CVE-2024-0012 랜섬웨어 악용 | 2024-11-18 | Palo Alto Networks | Palo Alto Networks PAN-OS Management Interface Authentication Bypass V… | 99.7% | 심각9.3 | |
| CVE-2024-49039 랜섬웨어 악용 | 2024-11-12 | Microsoft | Microsoft Windows Task Scheduler Privilege Escalation Vulnerability | 14.2% | 높음8.8 | |
| CVE-2024-51567 랜섬웨어 악용 | 2024-11-07 | CyberPersons | CyberPanel Incorrect Default Permissions Vulnerability | 86.5% | 심각9.8 | |
| CVE-2024-38094 랜섬웨어 악용 | 2024-10-22 | Microsoft | Microsoft SharePoint Deserialization Vulnerability | 50.9% | 높음7.2 | |
| CVE-2024-40711 랜섬웨어 악용 | 2024-10-17 | Veeam | Veeam Backup and Replication Deserialization Vulnerability | 90.4% | 심각9.8 | |
| CVE-2024-9680 랜섬웨어 악용 | 2024-10-15 | Mozilla | Mozilla Firefox Use-After-Free Vulnerability | 23.2% | 심각9.8 | |
| CVE-2024-30088 랜섬웨어 악용 | 2024-10-15 | Microsoft | Microsoft Windows Kernel TOCTOU Race Condition Vulnerability | 68.2% | 높음7.0 | |
| CVE-2020-0618 랜섬웨어 악용 | 2024-09-18 | Microsoft | Microsoft SQL Server Reporting Services Remote Code Execution Vulnerab… | 99.0% | 높음8.8 | |
| CVE-2024-6670 랜섬웨어 악용 | 2024-09-16 | Progress | Progress WhatsUp Gold SQL Injection Vulnerability | 93.0% | 심각9.8 | |
| CVE-2024-40766 랜섬웨어 악용 | 2024-09-09 | SonicWall | SonicWall SonicOS Improper Access Control Vulnerability | 18.2% | 심각9.8 | |
| CVE-2017-1000253 랜섬웨어 악용 | 2024-09-09 | Linux | Linux Kernel PIE Stack Buffer Corruption Vulnerability | 10.7% | 높음7.8 | |
| CVE-2024-23897 랜섬웨어 악용 | 2024-08-19 | Jenkins | Jenkins Command Line Interface (CLI) Path Traversal Vulnerability | 100.0% | 심각9.8 | |
| CVE-2024-37085 랜섬웨어 악용 | 2024-07-30 | VMware | VMware ESXi Authentication Bypass Vulnerability | 26.8% | 높음7.2 | |
| CVE-2024-23692 랜섬웨어 악용 | 2024-07-09 | Rejetto | Rejetto HTTP File Server Improper Neutralization of Special Elements U… | 99.5% | 심각9.8 | |
| CVE-2024-26169 랜섬웨어 악용 | 2024-06-13 | Microsoft | Microsoft Windows Error Reporting Service Improper Privilege Managemen… | 4.0% | 높음7.8 | |
| CVE-2024-4577 랜섬웨어 악용 | 2024-06-12 | PHP Group | PHP-CGI OS Command Injection Vulnerability | 100.0% | 심각9.8 | |
| CVE-2024-24919 랜섬웨어 악용 | 2024-05-30 | Check Point | Check Point Quantum Security Gateways Information Disclosure Vulnerabi… | 100.0% | 높음8.6 | |
| CVE-2024-1086 랜섬웨어 악용 | 2024-05-30 | Linux | Linux Kernel Use-After-Free Vulnerability | 28.1% | 높음7.8 | |
| CVE-2023-43208 랜섬웨어 악용 | 2024-05-20 | NextGen Healthcare | NextGen Healthcare Mirth Connect Deserialization of Untrusted Data Vul… | 82.7% | 심각9.8 | |
| CVE-2024-30051 랜섬웨어 악용 | 2024-05-14 | Microsoft | Microsoft DWM Core Library Privilege Escalation Vulnerability | 5.6% | 높음7.8 | |
| CVE-2024-3400 랜섬웨어 악용 | 2024-04-12 | Palo Alto Networks | Palo Alto Networks PAN-OS Command Injection Vulnerability | 100.0% | 심각10.0 | |
| CVE-2023-24955 랜섬웨어 악용 | 2024-03-26 | Microsoft | Microsoft SharePoint Server Code Injection Vulnerability | 85.4% | 높음7.2 | |
| CVE-2023-48788 랜섬웨어 악용 | 2024-03-25 | Fortinet | Fortinet FortiClient EMS SQL Injection Vulnerability | 98.4% | 심각9.8 | |
| CVE-2021-44529 랜섬웨어 악용 | 2024-03-25 | Ivanti | Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injecti… | 99.1% | 심각9.8 | |
| CVE-2024-27198 랜섬웨어 악용 | 2024-03-07 | JetBrains | JetBrains TeamCity Authentication Bypass Vulnerability | 99.9% | 심각9.8 | |
| CVE-2024-21338 랜섬웨어 악용 | 2024-03-04 | Microsoft | Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Contro… | 59.8% | 높음7.8 | |
| CVE-2024-1709 랜섬웨어 악용 | 2024-02-22 | ConnectWise | ConnectWise ScreenConnect Authentication Bypass Vulnerability | 100.0% | 심각10.0 | |
| CVE-2020-3259 랜섬웨어 악용 | 2024-02-15 | Cisco | Cisco ASA and FTD Information Disclosure Vulnerability | 71.8% | 높음7.5 | |
| CVE-2024-21412 랜섬웨어 악용 | 2024-02-13 | Microsoft | Microsoft Windows Internet Shortcut Files Security Feature Bypass Vuln… | 95.4% | 높음8.1 | |
| CVE-2024-21762 랜섬웨어 악용 | 2024-02-09 | Fortinet | Fortinet FortiOS Out-of-Bound Write Vulnerability | 84.3% | 심각9.8 | |
| CVE-2024-21893 랜섬웨어 악용 | 2024-01-31 | Ivanti | Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request … | 100.0% | 높음8.2 | |
| CVE-2023-22527 랜섬웨어 악용 | 2024-01-24 | Atlassian | Atlassian Confluence Data Center and Server Template Injection Vulnera… | 100.0% | 심각9.8 | |
| CVE-2023-35082 랜섬웨어 악용 | 2024-01-18 | Ivanti | Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authenticati… | 100.0% | 심각9.8 | |
| CVE-2024-21887 랜섬웨어 악용 | 2024-01-10 | Ivanti | Ivanti Connect Secure and Policy Secure Command Injection Vulnerabilit… | 100.0% | 심각9.1 | |
| CVE-2023-46805 랜섬웨어 악용 | 2024-01-10 | Ivanti | Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerab… | 100.0% | 높음8.2 | |
| CVE-2023-29357 랜섬웨어 악용 | 2024-01-10 | Microsoft | Microsoft SharePoint Server Privilege Escalation Vulnerability | 100.0% | 심각9.8 | |
| CVE-2023-38203 랜섬웨어 악용 | 2024-01-08 | Adobe | Adobe ColdFusion Deserialization of Untrusted Data Vulnerability | 96.7% | 심각9.8 | |
| CVE-2023-29300 랜섬웨어 악용 | 2024-01-08 | Adobe | Adobe ColdFusion Deserialization of Untrusted Data Vulnerability | 100.0% | 심각9.8 | |
| CVE-2023-41266 랜섬웨어 악용 | 2023-12-07 | Qlik | Qlik Sense Path Traversal Vulnerability | 84.8% | 보통6.5 | |
| CVE-2023-41265 랜섬웨어 악용 | 2023-12-07 | Qlik | Qlik Sense HTTP Tunneling Vulnerability | 88.2% | 심각9.9 | |
| CVE-2023-47246 랜섬웨어 악용 | 2023-11-13 | SysAid | SysAid Server Path Traversal Vulnerability | 98.9% | 심각9.8 | |
| CVE-2023-22518 랜섬웨어 악용 | 2023-11-07 | Atlassian | Atlassian Confluence Data Center and Server Improper Authorization Vul… | 100.0% | 심각9.8 | |
| CVE-2023-46604 랜섬웨어 악용 | 2023-11-02 | Apache | Apache ActiveMQ Deserialization of Untrusted Data Vulnerability | 99.7% | 심각9.8 | |
| CVE-2023-46747 랜섬웨어 악용 | 2023-10-31 | F5 | F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability | 96.5% | 심각9.8 | |
| CVE-2023-4966 랜섬웨어 악용 | 2023-10-18 | Citrix | Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerabili… | 100.0% | 높음7.5 | |
| CVE-2023-40044 랜섬웨어 악용 | 2023-10-05 | Progress | Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability | 90.1% | 높음8.8 | |
| CVE-2023-22515 랜섬웨어 악용 | 2023-10-05 | Atlassian | Atlassian Confluence Data Center and Server Broken Access Control Vuln… | 99.2% | 심각9.8 | |
| CVE-2023-42793 랜섬웨어 악용 | 2023-10-04 | JetBrains | JetBrains TeamCity Authentication Bypass Vulnerability | 100.0% | 심각9.8 | |
| CVE-2021-3129 랜섬웨어 악용 | 2023-09-18 | Laravel | Laravel Ignition File Upload Vulnerability | 99.9% | 심각9.8 | |
| CVE-2017-6884 랜섬웨어 악용 | 2023-09-18 | Zyxel | Zyxel EMG2926 Routers Command Injection Vulnerability | 36.8% | 높음8.8 | |
| CVE-2023-20269 랜섬웨어 악용 | 2023-09-13 | Cisco | Cisco Adaptive Security Appliance and Firepower Threat Defense Unautho… | 25.4% | 심각9.1 | |
| CVE-2023-38831 랜섬웨어 악용 | 2023-08-24 | RARLAB | RARLAB WinRAR Code Execution Vulnerability | 97.9% | 높음7.8 | |
| CVE-2023-38035 랜섬웨어 악용 | 2023-08-22 | Ivanti | Ivanti Sentry Authentication Bypass Vulnerability | 100.0% | 심각9.8 | |
| CVE-2023-27532 랜섬웨어 악용 | 2023-08-22 | Veeam | Veeam Backup & Replication Cloud Connect Missing Authentication for Cr… | 77.6% | 높음7.5 | |
| CVE-2023-35078 랜섬웨어 악용 | 2023-07-25 | Ivanti | Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability | 100.0% | 심각9.8 | |
| CVE-2023-3519 랜섬웨어 악용 | 2023-07-19 | Citrix | Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerabilit… | 99.7% | 심각9.8 | |
| CVE-2023-36884 랜섬웨어 악용 | 2023-07-17 | Microsoft | Microsoft Windows Search Remote Code Execution Vulnerability | 98.9% | 높음7.5 | |
| CVE-2022-31199 랜섬웨어 악용 | 2023-07-11 | Netwrix | Netwrix Auditor Insecure Object Deserialization Vulnerability | 36.0% | 심각9.8 | |
| CVE-2023-27997 랜섬웨어 악용 | 2023-06-13 | Fortinet | Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vul… | 85.7% | 심각9.8 | |
| CVE-2023-34362 랜섬웨어 악용 | 2023-06-02 | Progress | Progress MOVEit Transfer SQL Injection Vulnerability | 99.9% | 심각9.8 | |
| CVE-2021-45046 랜섬웨어 악용 | 2023-05-01 | Apache | Apache Log4j2 Deserialization of Untrusted Data Vulnerability | 100.0% | 심각9.0 | |
| CVE-2023-27350 랜섬웨어 악용 | 2023-04-21 | PaperCut | PaperCut MF/NG Improper Access Control Vulnerability | 100.0% | 심각9.8 | |
| CVE-2023-28252 랜섬웨어 악용 | 2023-04-11 | Microsoft | Microsoft Windows Common Log File System (CLFS) Driver Privilege Escal… | 49.0% | 높음7.8 | |
| CVE-2021-27878 랜섬웨어 악용 | 2023-04-07 | Veritas | Veritas Backup Exec Agent Command Execution Vulnerability | 24.0% | 높음8.8 | |
| CVE-2021-27877 랜섬웨어 악용 | 2023-04-07 | Veritas | Veritas Backup Exec Agent Improper Authentication Vulnerability | 64.9% | 심각9.8 | |
| CVE-2021-27876 랜섬웨어 악용 | 2023-04-07 | Veritas | Veritas Backup Exec Agent File Access Vulnerability | 13.5% | 높음8.1 | |
| CVE-2019-1388 랜섬웨어 악용 | 2023-04-07 | Microsoft | Microsoft Windows Certificate Dialog Privilege Escalation Vulnerabilit… | 8.6% | 높음7.8 | |
| CVE-2017-7494 랜섬웨어 악용 | 2023-03-30 | Samba | Samba Remote Code Execution Vulnerability | 99.4% | 심각9.8 | |
| CVE-2023-24880 랜섬웨어 악용 | 2023-03-14 | Microsoft | Microsoft Windows SmartScreen Security Feature Bypass Vulnerability | 78.2% | 보통4.4 | |
| CVE-2022-36537 랜섬웨어 악용 | 2023-02-27 | ZK Framework | ZK Framework AuUploader Unspecified Vulnerability | 95.3% | 높음7.5 | |
| CVE-2022-47986 랜섬웨어 악용 | 2023-02-21 | IBM | IBM Aspera Faspex Code Execution Vulnerability | 100.0% | 심각9.8 | |
| CVE-2022-41223 랜섬웨어 악용 | 2023-02-21 | Mitel | Mitel MiVoice Connect Code Injection Vulnerability | 10.6% | 보통6.8 | |
| CVE-2022-40765 랜섬웨어 악용 | 2023-02-21 | Mitel | Mitel MiVoice Connect Command Injection Vulnerability | 10.5% | 보통6.8 | |
| CVE-2023-23376 랜섬웨어 악용 | 2023-02-14 | Microsoft | Microsoft Windows Common Log File System (CLFS) Driver Privilege Escal… | 10.9% | 높음7.8 | |
| CVE-2023-0669 랜섬웨어 악용 | 2023-02-10 | Fortra | Fortra GoAnywhere MFT Remote Code Execution Vulnerability | 100.0% | 높음7.2 | |
| CVE-2022-24990 랜섬웨어 악용 | 2023-02-10 | TerraMaster | TerraMaster OS Remote Command Execution Vulnerability | 83.6% | 높음7.5 | |
| CVE-2015-2291 랜섬웨어 악용 | 2023-02-10 | Intel | Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulner… | 9.0% | 높음7.8 | |
| CVE-2022-21587 랜섬웨어 악용 | 2023-02-02 | Oracle | Oracle E-Business Suite Unspecified Vulnerability | 98.3% | 심각9.8 | |
| CVE-2017-11357 랜섬웨어 악용 | 2023-01-26 | Telerik | Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerabi… | 77.7% | 심각9.8 | |
| CVE-2022-47966 랜섬웨어 악용 | 2023-01-23 | Zoho | Zoho ManageEngine Multiple Products Remote Code Execution Vulnerabilit… | 99.8% | 심각9.8 | |
| CVE-2022-41080 랜섬웨어 악용 | 2023-01-10 | Microsoft | Microsoft Exchange Server Privilege Escalation Vulnerability | 77.3% | 높음8.8 | |
| CVE-2022-44698 랜섬웨어 악용 | 2022-12-13 | Microsoft | Microsoft Defender SmartScreen Security Feature Bypass Vulnerability | 76.3% | 보통5.4 | |
| CVE-2022-42475 랜섬웨어 악용 | 2022-12-13 | Fortinet | Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability | 99.5% | 심각9.8 | |
| CVE-2022-26501 랜섬웨어 악용 | 2022-12-13 | Veeam | Veeam Backup & Replication Remote Code Execution Vulnerability | 4.1% | 심각9.8 | |
| CVE-2022-26500 랜섬웨어 악용 | 2022-12-13 | Veeam | Veeam Backup & Replication Remote Code Execution Vulnerability | 5.8% | 높음8.8 | |
| CVE-2022-41091 랜섬웨어 악용 | 2022-11-08 | Microsoft | Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulne… | 1.9% | 보통5.4 | |
| CVE-2022-41073 랜섬웨어 악용 | 2022-11-08 | Microsoft | Microsoft Windows Print Spooler Privilege Escalation Vulnerability | 2.5% | 높음7.8 | |
| CVE-2020-3433 랜섬웨어 악용 | 2022-10-24 | Cisco | Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vuln… | 10.0% | 높음7.8 | |
| CVE-2020-3153 랜섬웨어 악용 | 2022-10-24 | Cisco | Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Searc… | 28.3% | 보통6.5 | |
| CVE-2018-19323 랜섬웨어 악용 | 2022-10-24 | GIGABYTE | GIGABYTE Multiple Products Privilege Escalation Vulnerability | 7.8% | 심각9.8 | |
| CVE-2018-19322 랜섬웨어 악용 | 2022-10-24 | GIGABYTE | GIGABYTE Multiple Products Code Execution Vulnerability | 1.8% | 높음7.8 | |
| CVE-2018-19321 랜섬웨어 악용 | 2022-10-24 | GIGABYTE | GIGABYTE Multiple Products Privilege Escalation Vulnerability | 3.7% | 높음7.8 | |
| CVE-2018-19320 랜섬웨어 악용 | 2022-10-24 | GIGABYTE | GIGABYTE Multiple Products Unspecified Vulnerability | 3.6% | 높음7.8 | |
| CVE-2022-40684 랜섬웨어 악용 | 2022-10-11 | Fortinet | Fortinet Multiple Products Authentication Bypass Vulnerability | 100.0% | 심각9.8 | |
| CVE-2022-41082 랜섬웨어 악용 | 2022-09-30 | Microsoft | Microsoft Exchange Server Remote Code Execution Vulnerability | 100.0% | 높음8.0 | |
| CVE-2022-41040 랜섬웨어 악용 | 2022-09-30 | Microsoft | Microsoft Exchange Server Server-Side Request Forgery Vulnerability | 100.0% | 높음8.8 | |
| CVE-2022-37969 랜섬웨어 악용 | 2022-09-14 | Microsoft | Microsoft Windows Common Log File System (CLFS) Driver Privilege Escal… | 28.3% | 높음7.8 | |
| CVE-2022-27593 랜섬웨어 악용 | 2022-09-08 | QNAP | QNAP Photo Station Externally Controlled Reference Vulnerability | 87.9% | 심각9.1 | |
| CVE-2018-6530 랜섬웨어 악용 | 2022-09-08 | D-Link | D-Link Multiple Routers OS Command Injection Vulnerability | 96.7% | 심각9.8 | |
| CVE-2018-13374 랜섬웨어 악용 | 2022-09-08 | Fortinet | Fortinet FortiOS and FortiADC Improper Access Control Vulnerability | 37.8% | 보통4.3 | |
| CVE-2022-26352 랜섬웨어 악용 | 2022-08-25 | dotCMS | dotCMS Unrestricted Upload of File Vulnerability | 91.6% | 심각9.8 | |
| CVE-2022-2294 랜섬웨어 악용 | 2022-08-25 | WebRTC | WebRTC Heap Buffer Overflow Vulnerability | 70.5% | 높음8.8 | |
| CVE-2022-37042 랜섬웨어 악용 | 2022-08-11 | Synacor | Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnera… | 91.9% | 심각9.8 | |
| CVE-2022-27925 랜섬웨어 악용 | 2022-08-11 | Synacor | Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnera… | 98.7% | 높음7.2 | |
| CVE-2022-30333 랜섬웨어 악용 | 2022-08-09 | RARLAB | RARLAB UnRAR Directory Traversal Vulnerability | 99.1% | 높음7.5 | |
| CVE-2022-27924 랜섬웨어 악용 | 2022-08-04 | Synacor | Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerabili… | 85.4% | 높음7.5 | |
| CVE-2022-29499 랜섬웨어 악용 | 2022-06-27 | Mitel | Mitel MiVoice Connect Data Validation Vulnerability | 55.6% | 심각9.8 | |
| CVE-2021-4034 랜섬웨어 악용 | 2022-06-27 | Red Hat | Red Hat Polkit Out-of-Bounds Read and Write Vulnerability | 94.9% | 높음7.8 | |
| CVE-2022-30190 랜섬웨어 악용 | 2022-06-14 | Microsoft | Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution… | 99.2% | 높음7.8 | |
| CVE-2019-7195 랜섬웨어 악용 | 2022-06-08 | QNAP | QNAP Photo Station Path Traversal Vulnerability | 89.7% | 심각9.8 | |
| CVE-2019-7194 랜섬웨어 악용 | 2022-06-08 | QNAP | QNAP Photo Station Path Traversal Vulnerability | 83.1% | 심각9.8 | |
| CVE-2019-7193 랜섬웨어 악용 | 2022-06-08 | QNAP | QNAP QTS Improper Input Validation Vulnerability | 14.4% | 심각9.8 | |
| CVE-2019-7192 랜섬웨어 악용 | 2022-06-08 | QNAP | QNAP Photo Station Improper Access Control Vulnerability | 88.2% | 심각9.8 | |
| CVE-2022-26134 랜섬웨어 악용 | 2022-06-02 | Atlassian | Atlassian Confluence Server and Data Center Remote Code Execution Vuln… | 100.0% | 심각9.8 | |
| CVE-2016-0034 랜섬웨어 악용 | 2022-05-25 | Microsoft | Microsoft Silverlight Runtime Remote Code Execution Vulnerability | 69.6% | 높음8.8 | |
| CVE-2013-3993 랜섬웨어 악용 | 2022-05-25 | IBM | IBM InfoSphere BigInsights Invalid Input Vulnerability | 5.2% | 보통6.5 | |
| CVE-2013-0431 랜섬웨어 악용 | 2022-05-25 | Oracle | Oracle JRE Sandbox Bypass Vulnerability | 90.0% | 보통5.3 | |
| CVE-2013-0422 랜섬웨어 악용 | 2022-05-25 | Oracle | Oracle JRE Remote Code Execution Vulnerability | 97.6% | 심각9.8 | |
| CVE-2013-0074 랜섬웨어 악용 | 2022-05-25 | Microsoft | Microsoft Silverlight Double Dereference Vulnerability | 81.9% | 높음7.8 | |
| CVE-2012-1710 랜섬웨어 악용 | 2022-05-25 | Oracle | Oracle Fusion Middleware Unspecified Vulnerability | 11.5% | 심각9.8 | |
| CVE-2010-1428 랜섬웨어 악용 | 2022-05-25 | Red Hat | Red Hat JBoss Information Disclosure Vulnerability | 62.3% | 높음7.5 | |
| CVE-2010-0738 랜섬웨어 악용 | 2022-05-25 | Red Hat | Red Hat JBoss Authentication Bypass Vulnerability | 79.4% | 보통5.3 | |
| CVE-2018-19953 랜섬웨어 악용 | 2022-05-24 | QNAP | QNAP NAS File Station Cross-Site Scripting Vulnerability | 23.9% | 보통6.1 | |
| CVE-2018-19949 랜섬웨어 악용 | 2022-05-24 | QNAP | QNAP NAS File Station Command Injection Vulnerability | 24.4% | 심각9.8 | |
| CVE-2018-19943 랜섬웨어 악용 | 2022-05-24 | QNAP | QNAP NAS File Station Cross-Site Scripting Vulnerability | 17.7% | 보통5.4 | |
| CVE-2017-18362 랜섬웨어 악용 | 2022-05-24 | Kaseya | Kaseya VSA SQL Injection Vulnerability | 86.8% | 심각9.8 | |
| CVE-2017-0147 랜섬웨어 악용 | 2022-05-24 | Microsoft | Microsoft Windows SMBv1 Information Disclosure Vulnerability | 99.7% | 높음7.5 | |
| CVE-2016-3351 랜섬웨어 악용 | 2022-05-24 | Microsoft | Microsoft Internet Explorer and Edge Information Disclosure Vulnerabil… | 26.3% | 보통6.5 | |
| CVE-2020-0638 랜섬웨어 악용 | 2022-05-23 | Microsoft | Microsoft Update Notification Manager Privilege Escalation Vulnerabili… | 3.0% | 높음7.8 | |
| CVE-2019-1385 랜섬웨어 악용 | 2022-05-23 | Microsoft | Microsoft Windows AppX Deployment Extensions Privilege Escalation Vuln… | 3.6% | 높음7.8 | |
| CVE-2019-1130 랜섬웨어 악용 | 2022-05-23 | Microsoft | Microsoft Windows AppX Deployment Service Privilege Escalation Vulnera… | 2.3% | 높음7.8 | |
| CVE-2022-1388 랜섬웨어 악용 | 2022-05-10 | F5 | F5 BIG-IP Missing Authentication Vulnerability | 100.0% | 심각9.8 | |
| CVE-2022-29464 랜섬웨어 악용 | 2022-04-25 | WSO2 | WSO2 Multiple Products Unrestrictive Upload of File Vulnerability | 100.0% | 심각9.8 | |
| CVE-2018-6882 랜섬웨어 악용 | 2022-04-19 | Synacor | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vu… | 25.3% | 보통6.1 | |
| CVE-2019-16057 랜섬웨어 악용 | 2022-04-15 | D-Link | D-Link DNS-320 Remote Code Execution Vulnerability | 87.1% | 심각9.8 | |
| CVE-2022-22954 랜섬웨어 악용 | 2022-04-14 | VMware | VMware Workspace ONE Access and Identity Manager Server-Side Template … | 100.0% | 심각9.8 | |
| CVE-2022-24521 랜섬웨어 악용 | 2022-04-13 | Microsoft | Microsoft Windows CLFS Driver Privilege Escalation Vulnerability | 7.1% | 높음7.8 | |
| CVE-2018-7602 랜섬웨어 악용 | 2022-04-13 | Drupal | Drupal Core Remote Code Execution Vulnerability | 99.2% | 심각9.8 | |
| CVE-2018-20753 랜섬웨어 악용 | 2022-04-13 | Kaseya | Kaseya VSA Remote Code Execution Vulnerability | 29.3% | 심각9.8 | |
| CVE-2021-42287 랜섬웨어 악용 | 2022-04-11 | Microsoft | Microsoft Active Directory Domain Services Privilege Escalation Vulner… | 77.2% | 높음7.5 |
출처: CISA KEV Catalog (미국 국토안보부 산하 CISA, 공개자료). 등재·해제 판단은 CISA 가 합니다.
심각도가 비어 있는 행이 있습니다. KEV 는 CVE 번호만 주고 점수를 주지 않으므로, 점수는 NVD 원장에서 따로 채웁니다. 아직 채워지지 않았거나 NVD 가 아직 분석하지 않은 경우 미평가 로 남습니다 — 0점이라는 뜻이 아닙니다.