{
  "schemaVersion": "1.0",
  "publisher": "脆弱性ナビ",
  "origin": "https://zeijaku.ittrip.xyz",
  "terms": [
    {
      "name": "CVE Program",
      "url": "https://www.cve.org/legal/termsofuse",
      "notice": "CVE content is used subject to the CVE Program Terms of Use. CVE is a trademark of The MITRE Corporation.",
      "licenseText": "CVE content: Copyright The MITRE Corporation. CVE is a trademark of The MITRE Corporation.\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nDisclaimers: ALL DOCUMENTS AND THE INFORMATION CONTAINED THEREIN PROVIDED BY MITRE ARE PROVIDED ON AN \"AS IS\" BASIS AND THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE MITRE CORPORATION, ITS BOARD OF TRUSTEES, OFFICERS, AGENTS, AND EMPLOYEES, DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION THEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE."
    },
    {
      "name": "NIST NVD",
      "url": "https://nvd.nist.gov/general/faq",
      "notice": "This product uses data from the NVD API but is not endorsed or certified by the NVD."
    },
    {
      "name": "JVN",
      "url": "https://jvn.jp/contact/index.html",
      "notice": "出典：JVN（JPCERT/CC・IPA）。原文は各レコードの参照先を確認してください。"
    },
    {
      "name": "CISA KEV",
      "url": "https://github.com/cisagov/kev-data",
      "notice": "Known Exploited Vulnerabilities catalog, CISA. CC0."
    }
  ],
  "records": [
    {
      "id": "CVE-2015-1641",
      "aliases": [],
      "title": "n/a：コード実行",
      "summary": "Microsoft Word 2007 SP3、Office 2010 SP2、Word 2010 SP2、Word 2013 SP1、Word 2013 RT SP1、Word for Mac 2011、Office Compatibility Pack SP3、SharePoint Server 2010 SP2 および 2013 SP1 上の Word Automation Services、そして Office Web Apps Server 2010 SP2 および 2013 SP1 は、細工された RTF 文書を介してリモートの攻撃者が任意のコードを実行できる脆弱性（Microsoft Office メモリ破壊脆弱性）を許可します。",
      "risk": "リモートの攻撃者が任意のコードを実行できるため、システムが乗っ取られる可能性があります。",
      "product": "Microsoft Office",
      "category": "windows",
      "component": "package",
      "severity": "unknown",
      "cvss": null,
      "cvssVersion": null,
      "cvssSource": "microsoft",
      "cvssVector": null,
      "affected": [
        {
          "product": "n/a",
          "range": "n/a"
        }
      ],
      "fixed": [],
      "steps": [
        "ベンダーの指示に従って更新プログラムを適用する。",
        "「CVE-2015-1641」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
        "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。"
      ],
      "references": [
        {
          "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/1xxx/CVE-2015-1641.json",
          "label": "CVE：microsoft"
        },
        {
          "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-1641",
          "label": "CISA KEV（悪用確認）"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2015-1641",
          "label": "CVE公式レコード"
        },
        {
          "url": "http://www.securitytracker.com/id/1032104",
          "label": "1032104"
        },
        {
          "url": "http://www.securityfocus.com/bid/73995",
          "label": "73995"
        },
        {
          "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-033",
          "label": "MS15-033"
        },
        {
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-1641",
          "label": "CISAが示す関連情報"
        },
        {
          "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
          "label": "CISA：ソフトウェア更新の基本"
        }
      ],
      "publishedAt": "2015-04-14T20:00:00.000Z",
      "modifiedAt": "2025-10-21T23:56:03.725Z",
      "fetchedAt": "2026-10-23T02:42:57.952Z",
      "exploitStatus": "confirmed",
      "sources": [
        "CVE",
        "CISA KEV"
      ],
      "originalText": "Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word for Mac 2011, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2 and 2013 SP1, and Office Web Apps Server 2010 SP2 and 2013 SP1 allow remote attackers to execute arbitrary code via a crafted RTF document, aka \"Microsoft Office Memory Corruption Vulnerability.\"",
      "sourceTitle": "",
      "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。",
      "state": "published",
      "affectedDetails": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "officialEvidence": {
        "schemaVersion": "1.0",
        "id": "CVE-2015-1641",
        "sourceType": "CVE",
        "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/1xxx/CVE-2015-1641.json",
        "fetchedAt": "2026-10-23T02:42:57.952Z",
        "publishedAt": "2015-04-14T20:00:00.000Z",
        "modifiedAt": "2025-10-21T23:56:03.725Z",
        "state": "published",
        "provider": "microsoft",
        "title": "",
        "descriptions": [
          {
            "lang": "en",
            "value": "Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word for Mac 2011, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2 and 2013 SP1, and Office Web Apps Server 2010 SP2 and 2013 SP1 allow remote attackers to execute arbitrary code via a crafted RTF document, aka \"Microsoft Office Memory Corruption Vulnerability.\"",
            "sourcePath": "/containers/cna/descriptions/0/value"
          }
        ],
        "affected": [
          {
            "vendor": "n/a",
            "product": "n/a",
            "sourcePath": "/containers/cna/affected/0",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/0/versions/0",
                "version": "n/a",
                "status": "affected"
              }
            ]
          }
        ],
        "solutions": [],
        "workarounds": [],
        "exploits": [],
        "rejectedReasons": [],
        "problemTypes": [
          {
            "cweId": "",
            "lang": "en",
            "description": "n/a",
            "sourcePath": "/containers/cna/problemTypes/0/descriptions/0"
          }
        ],
        "metrics": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "provider": "CISA-ADP",
            "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1"
          }
        ],
        "references": [
          {
            "url": "http://www.securitytracker.com/id/1032104",
            "label": "1032104",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/0"
          },
          {
            "url": "http://www.securityfocus.com/bid/73995",
            "label": "73995",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/1"
          },
          {
            "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-033",
            "label": "MS15-033",
            "tags": [
              "vendor-advisory",
              "x_refsource_MS",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/2"
          },
          {
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-1641",
            "label": "CISA-ADP",
            "tags": [
              "government-resource"
            ],
            "provider": "CISA-ADP",
            "sourcePath": "/containers/adp/1/references/0"
          }
        ],
        "snippets": [
          {
            "evidenceId": "official:/containers/cna/affected/0",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/1xxx/CVE-2015-1641.json",
            "sourcePath": "/containers/cna/affected/0",
            "text": "{\"product\":\"n/a\",\"vendor\":\"n/a\",\"versions\":[{\"status\":\"affected\",\"version\":\"n/a\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/descriptions/0/value",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/1xxx/CVE-2015-1641.json",
            "sourcePath": "/containers/cna/descriptions/0/value",
            "text": "Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word for Mac 2011, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2 and 2013 SP1, and Office Web Apps Server 2010 SP2 and 2013 SP1 allow remote attackers to execute arbitrary code via a crafted RTF document, aka \"Microsoft Office Memory Corruption Vulnerability.\"",
            "truncated": false,
            "representation": "source_excerpt"
          },
          {
            "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/1xxx/CVE-2015-1641.json",
            "sourcePath": "/containers/cna/problemTypes/0/descriptions/0",
            "text": "{\"description\":\"n/a\",\"lang\":\"en\",\"type\":\"text\"}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/adp/1/metrics/0/cvssV3_1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/1xxx/CVE-2015-1641.json",
            "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1",
            "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":7.8,\"attackVector\":\"LOCAL\",\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"REQUIRED\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"confidentialityImpact\":\"HIGH\"}",
            "truncated": false,
            "representation": "source_json"
          }
        ],
        "limits": {
          "completeness": "official_record",
          "truncatedFields": [],
          "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。"
        }
      },
      "sourceSnapshots": [
        {
          "source": "CVE",
          "modifiedAt": "2025-10-21T23:56:03.725Z",
          "fetchedAt": "2026-10-23T02:42:57.952Z",
          "state": "published"
        },
        {
          "source": "CISA KEV",
          "modifiedAt": "2021-11-03T00:00:00.000Z",
          "fetchedAt": "2026-10-23T02:17:50.489Z",
          "state": "published"
        }
      ],
      "sourceAction": "Apply updates per vendor instructions.",
      "sourceSummary": "n/aにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。",
      "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。",
      "guidance": {
        "schemaVersion": "1.0",
        "method": "automatic",
        "reviewedAt": null,
        "reviewState": "current",
        "generatedAt": "2026-10-23T03:46:06.564Z",
        "generatorVersion": "2026-10-23.3",
        "sourceFingerprint": "d3400a250e3c24980f3953ab356e758a22abd6c316f22fabb65914f8ced86d00",
        "sourceModifiedAt": "2025-10-21T23:56:03.725Z",
        "model": "@cf/openai/gpt-oss-120b",
        "verificationMethod": "exact_source_excerpt_and_independent_semantic_check",
        "summary": "Microsoft Word 2007 SP3、Office 2010 SP2、Word 2010 SP2、Word 2013 SP1、Word 2013 RT SP1、Word for Mac 2011、Office Compatibility Pack SP3、SharePoint Server 2010 SP2 および 2013 SP1 上の Word Automation Services、そして Office Web Apps Server 2010 SP2 および 2013 SP1 は、細工された RTF 文書を介してリモートの攻撃者が任意のコードを実行できる脆弱性（Microsoft Office メモリ破壊脆弱性）を許可します。",
        "risk": "リモートの攻撃者が任意のコードを実行できるため、システムが乗っ取られる可能性があります。",
        "summaryEvidenceIds": [
          "E1"
        ],
        "riskEvidenceIds": [
          "E1"
        ],
        "applicability": [
          {
            "text": "Microsoft Word 2007 SP3 が影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/1xxx/CVE-2015-1641.json"
            ],
            "evidenceIds": [
              "E1"
            ]
          },
          {
            "text": "Office 2010 SP2 が影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/1xxx/CVE-2015-1641.json"
            ],
            "evidenceIds": [
              "E1"
            ]
          },
          {
            "text": "Word 2010 SP2 が影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/1xxx/CVE-2015-1641.json"
            ],
            "evidenceIds": [
              "E1"
            ]
          },
          {
            "text": "Word 2013 SP1 が影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/1xxx/CVE-2015-1641.json"
            ],
            "evidenceIds": [
              "E1"
            ]
          },
          {
            "text": "Word 2013 RT SP1 が影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/1xxx/CVE-2015-1641.json"
            ],
            "evidenceIds": [
              "E1"
            ]
          },
          {
            "text": "Word for Mac 2011 が影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/1xxx/CVE-2015-1641.json"
            ],
            "evidenceIds": [
              "E1"
            ]
          },
          {
            "text": "Office Compatibility Pack SP3 が影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/1xxx/CVE-2015-1641.json"
            ],
            "evidenceIds": [
              "E1"
            ]
          },
          {
            "text": "SharePoint Server 2010 SP2 上の Word Automation Services が影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/1xxx/CVE-2015-1641.json"
            ],
            "evidenceIds": [
              "E1"
            ]
          },
          {
            "text": "SharePoint Server 2013 SP1 上の Word Automation Services が影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/1xxx/CVE-2015-1641.json"
            ],
            "evidenceIds": [
              "E1"
            ]
          },
          {
            "text": "Office Web Apps Server 2010 SP2 が影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/1xxx/CVE-2015-1641.json"
            ],
            "evidenceIds": [
              "E1"
            ]
          },
          {
            "text": "Office Web Apps Server 2013 SP1 が影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/1xxx/CVE-2015-1641.json"
            ],
            "evidenceIds": [
              "E1"
            ]
          },
          {
            "text": "公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/1xxx/CVE-2015-1641.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。",
            "kind": "fact",
            "sourceUrls": [
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-1641"
            ],
            "evidenceIds": [
              "E4"
            ]
          }
        ],
        "versionChecks": [
          {
            "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/1xxx/CVE-2015-1641.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "「Microsoft Office」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
              "https://www.cve.org/CVERecord?id=CVE-2015-1641",
              "http://www.securitytracker.com/id/1032104",
              "http://www.securityfocus.com/bid/73995",
              "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-033",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-1641",
              "https://nvd.nist.gov/vuln/detail/CVE-2015-1641"
            ]
          }
        ],
        "actions": [
          {
            "text": "ベンダーの指示に従って更新プログラムを適用する。",
            "kind": "fix",
            "sourceUrls": [
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-1641"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "「CVE-2015-1641」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cve.org/CVERecord?id=CVE-2015-1641",
              "http://www.securitytracker.com/id/1032104",
              "http://www.securityfocus.com/bid/73995",
              "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-033",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-1641",
              "https://nvd.nist.gov/vuln/detail/CVE-2015-1641"
            ]
          },
          {
            "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
              "https://www.cve.org/CVERecord?id=CVE-2015-1641",
              "http://www.securitytracker.com/id/1032104",
              "http://www.securityfocus.com/bid/73995",
              "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-033",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-1641",
              "https://nvd.nist.gov/vuln/detail/CVE-2015-1641"
            ]
          }
        ],
        "temporaryMitigations": [
          {
            "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cve.org/CVERecord?id=CVE-2015-1641",
              "http://www.securitytracker.com/id/1032104",
              "http://www.securityfocus.com/bid/73995",
              "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-033",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-1641",
              "https://nvd.nist.gov/vuln/detail/CVE-2015-1641"
            ]
          }
        ],
        "verification": [
          {
            "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。",
            "kind": "procedure",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/1xxx/CVE-2015-1641.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
              "https://www.cve.org/CVERecord?id=CVE-2015-1641",
              "http://www.securitytracker.com/id/1032104",
              "http://www.securityfocus.com/bid/73995",
              "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-033",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-1641",
              "https://nvd.nist.gov/vuln/detail/CVE-2015-1641"
            ]
          }
        ],
        "unknowns": [
          "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。",
          "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。"
        ],
        "sources": [
          {
            "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/1xxx/CVE-2015-1641.json",
            "label": "CVE：microsoft"
          },
          {
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-1641",
            "label": "CISA KEV（悪用確認）"
          },
          {
            "url": "https://www.cve.org/CVERecord?id=CVE-2015-1641",
            "label": "CVE公式レコード"
          },
          {
            "url": "http://www.securitytracker.com/id/1032104",
            "label": "1032104"
          },
          {
            "url": "http://www.securityfocus.com/bid/73995",
            "label": "73995"
          },
          {
            "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-033",
            "label": "MS15-033"
          },
          {
            "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-1641",
            "label": "CISAが示す関連情報"
          },
          {
            "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
            "label": "CISA：ソフトウェア更新の基本"
          }
        ],
        "evidence": [
          {
            "id": "E1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/1xxx/CVE-2015-1641.json",
            "sourceField": "/containers/cna/descriptions/0/value",
            "excerpt": "Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word for Mac 2011, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2 and 2013 SP1, and Office Web Apps Server 2010 SP2 and 2013 SP1 allow remote attackers to execute arbitrary code via a crafted RTF document, aka \"Microsoft Office Memory Corruption Vulnerability.\"",
            "language": "en",
            "representation": "source_excerpt"
          },
          {
            "id": "E2",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/1xxx/CVE-2015-1641.json",
            "sourceField": "/containers/cna/affected/0",
            "excerpt": "{\"product\":\"n/a\",\"vendor\":\"n/a\",\"versions\":[{\"status\":\"affected\",\"version\":\"n/a\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E3",
            "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-1641",
            "sourceField": "/sourceAction",
            "excerpt": "Apply updates per vendor instructions.",
            "language": null
          },
          {
            "id": "E4",
            "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-1641",
            "sourceField": "/exploitStatus",
            "excerpt": "{\"id\":\"CVE-2015-1641\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}",
            "language": "en",
            "representation": "normalized_feed_field"
          }
        ],
        "supportRequest": "件名：CVE-2015-1641（Microsoft Office）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Microsoft Word 2007 SP3 が影響を受けます。\n・Office 2010 SP2 が影響を受けます。\n・Word 2010 SP2 が影響を受けます。\n・Word 2013 SP1 が影響を受けます。\n・Word 2013 RT SP1 が影響を受けます。\n・Word for Mac 2011 が影響を受けます。\n・Office Compatibility Pack SP3 が影響を受けます。\n・SharePoint Server 2010 SP2 上の Word Automation Services が影響を受けます。\n・SharePoint Server 2013 SP1 上の Word Automation Services が影響を受けます。\n・Office Web Apps Server 2010 SP2 が影響を受けます。\n・Office Web Apps Server 2013 SP1 が影響を受けます。\n・公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2015-1641",
        "publicationCheckVersion": "2026-10-23.1",
        "sourceNotices": [],
        "automation": {
          "status": "ready",
          "lastAttempt": "2026-10-23T03:46:06.564Z",
          "lastSuccess": "2026-10-23T03:46:06.564Z",
          "sourceCheckedAt": "2026-10-23T02:42:57.952Z",
          "errorCode": null
        },
        "glossary": [
          {
            "term": "任意のコード実行",
            "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。",
            "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html",
            "kind": "general_definition"
          }
        ]
      }
    },
    {
      "id": "CVE-2016-0167",
      "aliases": [],
      "title": "n/a：権限の奪取",
      "summary": "Microsoft Windows Vista SP2、Windows Server 2008 SP2 および R2 SP1、Windows 7 SP1、Windows 8.1、Windows Server 2012 Gold および R2、Windows RT 8.1、Windows 10 Gold および 1511 のカーネルモードドライバーに、細工したアプリケーションを用いることでローカルユーザーが特権を取得できる脆弱性（\"Win32k Elevation of Privilege Vulnerability\"）が存在します。",
      "risk": "ローカルユーザーが特権を取得できるため、攻撃者がシステム上で管理者権限の操作を行える可能性があります。",
      "product": "Microsoft Win32k",
      "category": "windows",
      "component": "package",
      "severity": "unknown",
      "cvss": null,
      "cvssVersion": null,
      "cvssSource": "microsoft",
      "cvssVector": null,
      "affected": [
        {
          "product": "n/a",
          "range": "n/a"
        }
      ],
      "fixed": [],
      "steps": [
        "ベンダーの指示に従って更新プログラムを適用する。",
        "「CVE-2016-0167」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
        "Windows 11は「設定」→「Windows Update」→「更新プログラムのチェック」を開き、提供された更新を適用します。再起動を求められたら完了させます。会社管理のPC、Windows Server、サポート外の版は管理担当者に適用する修正番号と配布予定を確認してください。"
      ],
      "references": [
        {
          "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2016/0xxx/CVE-2016-0167.json",
          "label": "CVE：microsoft"
        },
        {
          "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-0167",
          "label": "CISA KEV（悪用確認）"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2016-0167",
          "label": "CVE公式レコード"
        },
        {
          "url": "http://www.securitytracker.com/id/1035529",
          "label": "1035529"
        },
        {
          "url": "http://www.securitytracker.com/id/1035532",
          "label": "1035532"
        },
        {
          "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-039",
          "label": "MS16-039"
        },
        {
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0167",
          "label": "CISAが示す関連情報"
        },
        {
          "url": "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device",
          "label": "Microsoft公式：Windowsの情報を調べる"
        },
        {
          "url": "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates",
          "label": "Microsoft公式：Windows Updateの操作"
        }
      ],
      "publishedAt": "2016-04-12T23:00:00.000Z",
      "modifiedAt": "2025-10-21T23:55:53.432Z",
      "fetchedAt": "2026-10-23T02:42:59.258Z",
      "exploitStatus": "confirmed",
      "sources": [
        "CVE",
        "CISA KEV"
      ],
      "originalText": "The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka \"Win32k Elevation of Privilege Vulnerability,\" a different vulnerability than CVE-2016-0143 and CVE-2016-0165.",
      "sourceTitle": "",
      "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。",
      "state": "published",
      "affectedDetails": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "officialEvidence": {
        "schemaVersion": "1.0",
        "id": "CVE-2016-0167",
        "sourceType": "CVE",
        "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2016/0xxx/CVE-2016-0167.json",
        "fetchedAt": "2026-10-23T02:42:59.258Z",
        "publishedAt": "2016-04-12T23:00:00.000Z",
        "modifiedAt": "2025-10-21T23:55:53.432Z",
        "state": "published",
        "provider": "microsoft",
        "title": "",
        "descriptions": [
          {
            "lang": "en",
            "value": "The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka \"Win32k Elevation of Privilege Vulnerability,\" a different vulnerability than CVE-2016-0143 and CVE-2016-0165.",
            "sourcePath": "/containers/cna/descriptions/0/value"
          }
        ],
        "affected": [
          {
            "vendor": "n/a",
            "product": "n/a",
            "sourcePath": "/containers/cna/affected/0",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/0/versions/0",
                "version": "n/a",
                "status": "affected"
              }
            ]
          }
        ],
        "solutions": [],
        "workarounds": [],
        "exploits": [],
        "rejectedReasons": [],
        "problemTypes": [
          {
            "cweId": "",
            "lang": "en",
            "description": "n/a",
            "sourcePath": "/containers/cna/problemTypes/0/descriptions/0"
          }
        ],
        "metrics": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "provider": "CISA-ADP",
            "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1"
          }
        ],
        "references": [
          {
            "url": "http://www.securitytracker.com/id/1035529",
            "label": "1035529",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/0"
          },
          {
            "url": "http://www.securitytracker.com/id/1035532",
            "label": "1035532",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/1"
          },
          {
            "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-039",
            "label": "MS16-039",
            "tags": [
              "vendor-advisory",
              "x_refsource_MS",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/2"
          },
          {
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-0167",
            "label": "CISA-ADP",
            "tags": [
              "government-resource"
            ],
            "provider": "CISA-ADP",
            "sourcePath": "/containers/adp/1/references/0"
          }
        ],
        "snippets": [
          {
            "evidenceId": "official:/containers/cna/affected/0",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2016/0xxx/CVE-2016-0167.json",
            "sourcePath": "/containers/cna/affected/0",
            "text": "{\"product\":\"n/a\",\"vendor\":\"n/a\",\"versions\":[{\"status\":\"affected\",\"version\":\"n/a\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/descriptions/0/value",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2016/0xxx/CVE-2016-0167.json",
            "sourcePath": "/containers/cna/descriptions/0/value",
            "text": "The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka \"Win32k Elevation of Privilege Vulnerability,\" a different vulnerability than CVE-2016-0143 and CVE-2016-0165.",
            "truncated": false,
            "representation": "source_excerpt"
          },
          {
            "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2016/0xxx/CVE-2016-0167.json",
            "sourcePath": "/containers/cna/problemTypes/0/descriptions/0",
            "text": "{\"description\":\"n/a\",\"lang\":\"en\",\"type\":\"text\"}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/adp/1/metrics/0/cvssV3_1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2016/0xxx/CVE-2016-0167.json",
            "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1",
            "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":7.8,\"attackVector\":\"LOCAL\",\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"REQUIRED\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"confidentialityImpact\":\"HIGH\"}",
            "truncated": false,
            "representation": "source_json"
          }
        ],
        "limits": {
          "completeness": "official_record",
          "truncatedFields": [],
          "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。"
        }
      },
      "sourceSnapshots": [
        {
          "source": "CVE",
          "modifiedAt": "2025-10-21T23:55:53.432Z",
          "fetchedAt": "2026-10-23T02:42:59.258Z",
          "state": "published"
        },
        {
          "source": "CISA KEV",
          "modifiedAt": "2021-11-03T00:00:00.000Z",
          "fetchedAt": "2026-10-23T02:17:50.489Z",
          "state": "published"
        }
      ],
      "sourceAction": "Apply updates per vendor instructions.",
      "sourceSummary": "n/aに権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。",
      "sourceRisk": "本来与えられていない権限で、操作される可能性があります。",
      "guidance": {
        "schemaVersion": "1.0",
        "method": "automatic",
        "reviewedAt": null,
        "reviewState": "current",
        "generatedAt": "2026-10-23T03:53:01.124Z",
        "generatorVersion": "2026-10-23.3",
        "sourceFingerprint": "3837f6b0f56ff1932e1240f7413a32bf3103b0bab4ab1c51f66e26b34c2af47b",
        "sourceModifiedAt": "2025-10-21T23:55:53.432Z",
        "model": "@cf/openai/gpt-oss-120b",
        "verificationMethod": "exact_source_excerpt_and_independent_semantic_check",
        "summary": "Microsoft Windows Vista SP2、Windows Server 2008 SP2 および R2 SP1、Windows 7 SP1、Windows 8.1、Windows Server 2012 Gold および R2、Windows RT 8.1、Windows 10 Gold および 1511 のカーネルモードドライバーに、細工したアプリケーションを用いることでローカルユーザーが特権を取得できる脆弱性（\"Win32k Elevation of Privilege Vulnerability\"）が存在します。",
        "risk": "ローカルユーザーが特権を取得できるため、攻撃者がシステム上で管理者権限の操作を行える可能性があります。",
        "summaryEvidenceIds": [
          "E1"
        ],
        "riskEvidenceIds": [
          "E1"
        ],
        "applicability": [
          {
            "text": "対象は、上記の Windows バージョン上でローカルユーザーが細工したアプリケーションを実行できる環境です。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2016/0xxx/CVE-2016-0167.json"
            ],
            "evidenceIds": [
              "E1"
            ]
          },
          {
            "text": "公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2016/0xxx/CVE-2016-0167.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。",
            "kind": "fact",
            "sourceUrls": [
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-0167"
            ],
            "evidenceIds": [
              "E4"
            ]
          }
        ],
        "versionChecks": [
          {
            "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2016/0xxx/CVE-2016-0167.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "「スタート」→「設定」→「システム」→「バージョン情報」を開き、Windowsのエディション・バージョン・OSビルドを控えます。会社のPCやサーバーは、この情報とCVE番号を管理担当者へ渡してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device"
            ]
          }
        ],
        "actions": [
          {
            "text": "ベンダーの指示に従って更新プログラムを適用する。",
            "kind": "fix",
            "sourceUrls": [
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-0167"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "「CVE-2016-0167」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cve.org/CVERecord?id=CVE-2016-0167",
              "http://www.securitytracker.com/id/1035529",
              "http://www.securitytracker.com/id/1035532",
              "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-039",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-0167",
              "https://nvd.nist.gov/vuln/detail/CVE-2016-0167"
            ]
          },
          {
            "text": "Windows 11は「設定」→「Windows Update」→「更新プログラムのチェック」を開き、提供された更新を適用します。再起動を求められたら完了させます。会社管理のPC、Windows Server、サポート外の版は管理担当者に適用する修正番号と配布予定を確認してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates"
            ]
          }
        ],
        "temporaryMitigations": [
          {
            "text": "すぐ更新できない場合は、CVE番号、Windowsの版、業務で必要な機能を管理担当者に伝え、修正までの利用方法と更新予定を決めてください。すべてのWindowsの問題に同じ回避策が使えるわけではありません。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates",
              "https://www.cve.org/CVERecord?id=CVE-2016-0167",
              "http://www.securitytracker.com/id/1035529",
              "http://www.securitytracker.com/id/1035532",
              "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-039",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-0167",
              "https://nvd.nist.gov/vuln/detail/CVE-2016-0167"
            ]
          }
        ],
        "verification": [
          {
            "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。",
            "kind": "procedure",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2016/0xxx/CVE-2016-0167.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "再起動後にWindows Updateを開き直して失敗・再起動待ちがないか確認し、管理担当者にこのCVEに対応する修正の適用結果を確認してもらってください。「最新の状態」と出ても、別製品の更新やサポート外の版の修正を保証するものではありません。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates"
            ]
          }
        ],
        "unknowns": [
          "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。",
          "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。"
        ],
        "sources": [
          {
            "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2016/0xxx/CVE-2016-0167.json",
            "label": "CVE：microsoft"
          },
          {
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-0167",
            "label": "CISA KEV（悪用確認）"
          },
          {
            "url": "https://www.cve.org/CVERecord?id=CVE-2016-0167",
            "label": "CVE公式レコード"
          },
          {
            "url": "http://www.securitytracker.com/id/1035529",
            "label": "1035529"
          },
          {
            "url": "http://www.securitytracker.com/id/1035532",
            "label": "1035532"
          },
          {
            "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-039",
            "label": "MS16-039"
          },
          {
            "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0167",
            "label": "CISAが示す関連情報"
          },
          {
            "url": "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device",
            "label": "Microsoft公式：Windowsの情報を調べる"
          },
          {
            "url": "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates",
            "label": "Microsoft公式：Windows Updateの操作"
          }
        ],
        "evidence": [
          {
            "id": "E1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2016/0xxx/CVE-2016-0167.json",
            "sourceField": "/containers/cna/descriptions/0/value",
            "excerpt": "The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka \"Win32k Elevation of Privilege Vulnerability,\" a different vulnerability than CVE-2016-0143 and CVE-2016-0165.",
            "language": "en",
            "representation": "source_excerpt"
          },
          {
            "id": "E2",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2016/0xxx/CVE-2016-0167.json",
            "sourceField": "/containers/cna/affected/0",
            "excerpt": "{\"product\":\"n/a\",\"vendor\":\"n/a\",\"versions\":[{\"status\":\"affected\",\"version\":\"n/a\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E3",
            "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-0167",
            "sourceField": "/sourceAction",
            "excerpt": "Apply updates per vendor instructions.",
            "language": null
          },
          {
            "id": "E4",
            "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-0167",
            "sourceField": "/exploitStatus",
            "excerpt": "{\"id\":\"CVE-2016-0167\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}",
            "language": "en",
            "representation": "normalized_feed_field"
          }
        ],
        "supportRequest": "件名：CVE-2016-0167（Microsoft Win32k）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・対象は、上記の Windows バージョン上でローカルユーザーが細工したアプリケーションを実行できる環境です。\n・公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2016-0167",
        "publicationCheckVersion": "2026-10-23.1",
        "sourceNotices": [],
        "automation": {
          "status": "ready",
          "lastAttempt": "2026-10-23T03:53:01.124Z",
          "lastSuccess": "2026-10-23T03:53:01.124Z",
          "sourceCheckedAt": "2026-10-23T02:42:59.258Z",
          "errorCode": null
        },
        "glossary": []
      }
    },
    {
      "id": "CVE-2016-0185",
      "aliases": [],
      "title": "n/a：コード実行",
      "summary": "Microsoft Windows の Media Center（Windows Vista SP2、Windows 7 SP1、Windows 8.1）で、細工された .mcl ファイル（Media Center リンク）を開くと、遠隔の攻撃者が任意のコードを実行できる脆弱性があります。",
      "risk": "攻撃者が任意のコードを実行できるため、システムが乗っ取られる可能性があります。",
      "product": "Microsoft Windows",
      "category": "windows",
      "component": "package",
      "severity": "unknown",
      "cvss": null,
      "cvssVersion": null,
      "cvssSource": "microsoft",
      "cvssVector": null,
      "affected": [
        {
          "product": "n/a",
          "range": "n/a"
        }
      ],
      "fixed": [],
      "steps": [
        "ベンダーの指示に従ってアップデートを適用してください。",
        "「CVE-2016-0185」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
        "Windows 11は「設定」→「Windows Update」→「更新プログラムのチェック」を開き、提供された更新を適用します。再起動を求められたら完了させます。会社管理のPC、Windows Server、サポート外の版は管理担当者に適用する修正番号と配布予定を確認してください。"
      ],
      "references": [
        {
          "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2016/0xxx/CVE-2016-0185.json",
          "label": "CVE：microsoft"
        },
        {
          "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-0185",
          "label": "CISA KEV（悪用確認）"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2016-0185",
          "label": "CVE公式レコード"
        },
        {
          "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-059",
          "label": "MS16-059"
        },
        {
          "url": "http://www.securityfocus.com/bid/90023",
          "label": "90023"
        },
        {
          "url": "https://www.exploit-db.com/exploits/39805/",
          "label": "39805"
        },
        {
          "url": "http://www.securitytracker.com/id/1035832",
          "label": "1035832"
        },
        {
          "url": "http://www.zerodayinitiative.com/advisories/ZDI-16-277",
          "label": "CVE掲載の参考情報"
        },
        {
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0185",
          "label": "CISAが示す関連情報"
        },
        {
          "url": "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device",
          "label": "Microsoft公式：Windowsの情報を調べる"
        },
        {
          "url": "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates",
          "label": "Microsoft公式：Windows Updateの操作"
        }
      ],
      "publishedAt": "2016-05-11T01:00:00.000Z",
      "modifiedAt": "2025-10-21T23:55:52.588Z",
      "fetchedAt": "2026-10-23T02:42:59.309Z",
      "exploitStatus": "confirmed",
      "sources": [
        "CVE",
        "CISA KEV"
      ],
      "originalText": "Media Center in Microsoft Windows Vista SP2, Windows 7 SP1, and Windows 8.1 allows remote attackers to execute arbitrary code via a crafted Media Center link (aka .mcl) file, aka \"Windows Media Center Remote Code Execution Vulnerability.\"",
      "sourceTitle": "",
      "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。",
      "state": "published",
      "affectedDetails": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "officialEvidence": {
        "schemaVersion": "1.0",
        "id": "CVE-2016-0185",
        "sourceType": "CVE",
        "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2016/0xxx/CVE-2016-0185.json",
        "fetchedAt": "2026-10-23T02:42:59.309Z",
        "publishedAt": "2016-05-11T01:00:00.000Z",
        "modifiedAt": "2025-10-21T23:55:52.588Z",
        "state": "published",
        "provider": "microsoft",
        "title": "",
        "descriptions": [
          {
            "lang": "en",
            "value": "Media Center in Microsoft Windows Vista SP2, Windows 7 SP1, and Windows 8.1 allows remote attackers to execute arbitrary code via a crafted Media Center link (aka .mcl) file, aka \"Windows Media Center Remote Code Execution Vulnerability.\"",
            "sourcePath": "/containers/cna/descriptions/0/value"
          }
        ],
        "affected": [
          {
            "vendor": "n/a",
            "product": "n/a",
            "sourcePath": "/containers/cna/affected/0",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/0/versions/0",
                "version": "n/a",
                "status": "affected"
              }
            ]
          }
        ],
        "solutions": [],
        "workarounds": [],
        "exploits": [],
        "rejectedReasons": [],
        "problemTypes": [
          {
            "cweId": "",
            "lang": "en",
            "description": "n/a",
            "sourcePath": "/containers/cna/problemTypes/0/descriptions/0"
          }
        ],
        "metrics": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "provider": "CISA-ADP",
            "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1"
          }
        ],
        "references": [
          {
            "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-059",
            "label": "MS16-059",
            "tags": [
              "vendor-advisory",
              "x_refsource_MS",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/0"
          },
          {
            "url": "http://www.securityfocus.com/bid/90023",
            "label": "90023",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/1"
          },
          {
            "url": "https://www.exploit-db.com/exploits/39805/",
            "label": "39805",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/2"
          },
          {
            "url": "http://www.securitytracker.com/id/1035832",
            "label": "1035832",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/3"
          },
          {
            "url": "http://www.zerodayinitiative.com/advisories/ZDI-16-277",
            "label": "CVE",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/4"
          },
          {
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-0185",
            "label": "CISA-ADP",
            "tags": [
              "government-resource"
            ],
            "provider": "CISA-ADP",
            "sourcePath": "/containers/adp/1/references/0"
          }
        ],
        "snippets": [
          {
            "evidenceId": "official:/containers/cna/affected/0",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2016/0xxx/CVE-2016-0185.json",
            "sourcePath": "/containers/cna/affected/0",
            "text": "{\"product\":\"n/a\",\"vendor\":\"n/a\",\"versions\":[{\"status\":\"affected\",\"version\":\"n/a\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/descriptions/0/value",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2016/0xxx/CVE-2016-0185.json",
            "sourcePath": "/containers/cna/descriptions/0/value",
            "text": "Media Center in Microsoft Windows Vista SP2, Windows 7 SP1, and Windows 8.1 allows remote attackers to execute arbitrary code via a crafted Media Center link (aka .mcl) file, aka \"Windows Media Center Remote Code Execution Vulnerability.\"",
            "truncated": false,
            "representation": "source_excerpt"
          },
          {
            "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2016/0xxx/CVE-2016-0185.json",
            "sourcePath": "/containers/cna/problemTypes/0/descriptions/0",
            "text": "{\"description\":\"n/a\",\"lang\":\"en\",\"type\":\"text\"}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/adp/1/metrics/0/cvssV3_1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2016/0xxx/CVE-2016-0185.json",
            "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1",
            "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":7.8,\"attackVector\":\"LOCAL\",\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"REQUIRED\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"confidentialityImpact\":\"HIGH\"}",
            "truncated": false,
            "representation": "source_json"
          }
        ],
        "limits": {
          "completeness": "official_record",
          "truncatedFields": [],
          "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。"
        }
      },
      "sourceSnapshots": [
        {
          "source": "CVE",
          "modifiedAt": "2025-10-21T23:55:52.588Z",
          "fetchedAt": "2026-10-23T02:42:59.309Z",
          "state": "published"
        },
        {
          "source": "CISA KEV",
          "modifiedAt": "2021-11-03T00:00:00.000Z",
          "fetchedAt": "2026-10-23T02:17:50.489Z",
          "state": "published"
        }
      ],
      "sourceAction": "Apply updates per vendor instructions.",
      "sourceSummary": "n/aにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。",
      "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。",
      "guidance": {
        "schemaVersion": "1.0",
        "method": "automatic",
        "reviewedAt": null,
        "reviewState": "current",
        "generatedAt": "2026-10-23T03:46:08.173Z",
        "generatorVersion": "2026-10-23.3",
        "sourceFingerprint": "88f546532c3d746565f7a53ed71849be11b02d8e898d1df769c9e34011dd3f18",
        "sourceModifiedAt": "2025-10-21T23:55:52.588Z",
        "model": "@cf/openai/gpt-oss-120b",
        "verificationMethod": "exact_source_excerpt_and_independent_semantic_check",
        "summary": "Microsoft Windows の Media Center（Windows Vista SP2、Windows 7 SP1、Windows 8.1）で、細工された .mcl ファイル（Media Center リンク）を開くと、遠隔の攻撃者が任意のコードを実行できる脆弱性があります。",
        "risk": "攻撃者が任意のコードを実行できるため、システムが乗っ取られる可能性があります。",
        "summaryEvidenceIds": [
          "E1"
        ],
        "riskEvidenceIds": [
          "E1"
        ],
        "applicability": [
          {
            "text": "Windows Vista SP2 の Media Center が対象です。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2016/0xxx/CVE-2016-0185.json"
            ],
            "evidenceIds": [
              "E1"
            ]
          },
          {
            "text": "Windows 7 SP1 の Media Center が対象です。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2016/0xxx/CVE-2016-0185.json"
            ],
            "evidenceIds": [
              "E1"
            ]
          },
          {
            "text": "Windows 8.1 の Media Center が対象です。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2016/0xxx/CVE-2016-0185.json"
            ],
            "evidenceIds": [
              "E1"
            ]
          },
          {
            "text": "公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2016/0xxx/CVE-2016-0185.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。",
            "kind": "fact",
            "sourceUrls": [
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-0185"
            ],
            "evidenceIds": [
              "E4"
            ]
          }
        ],
        "versionChecks": [
          {
            "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2016/0xxx/CVE-2016-0185.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "「スタート」→「設定」→「システム」→「バージョン情報」を開き、Windowsのエディション・バージョン・OSビルドを控えます。会社のPCやサーバーは、この情報とCVE番号を管理担当者へ渡してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device"
            ]
          }
        ],
        "actions": [
          {
            "text": "ベンダーの指示に従ってアップデートを適用してください。",
            "kind": "fix",
            "sourceUrls": [
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-0185"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "「CVE-2016-0185」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cve.org/CVERecord?id=CVE-2016-0185",
              "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-059",
              "http://www.securityfocus.com/bid/90023",
              "https://www.exploit-db.com/exploits/39805/",
              "http://www.securitytracker.com/id/1035832",
              "http://www.zerodayinitiative.com/advisories/ZDI-16-277",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-0185",
              "https://nvd.nist.gov/vuln/detail/CVE-2016-0185"
            ]
          },
          {
            "text": "Windows 11は「設定」→「Windows Update」→「更新プログラムのチェック」を開き、提供された更新を適用します。再起動を求められたら完了させます。会社管理のPC、Windows Server、サポート外の版は管理担当者に適用する修正番号と配布予定を確認してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates"
            ]
          }
        ],
        "temporaryMitigations": [
          {
            "text": "すぐ更新できない場合は、CVE番号、Windowsの版、業務で必要な機能を管理担当者に伝え、修正までの利用方法と更新予定を決めてください。すべてのWindowsの問題に同じ回避策が使えるわけではありません。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates",
              "https://www.cve.org/CVERecord?id=CVE-2016-0185",
              "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-059",
              "http://www.securityfocus.com/bid/90023",
              "https://www.exploit-db.com/exploits/39805/",
              "http://www.securitytracker.com/id/1035832",
              "http://www.zerodayinitiative.com/advisories/ZDI-16-277",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-0185",
              "https://nvd.nist.gov/vuln/detail/CVE-2016-0185"
            ]
          }
        ],
        "verification": [
          {
            "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。",
            "kind": "procedure",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2016/0xxx/CVE-2016-0185.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "再起動後にWindows Updateを開き直して失敗・再起動待ちがないか確認し、管理担当者にこのCVEに対応する修正の適用結果を確認してもらってください。「最新の状態」と出ても、別製品の更新やサポート外の版の修正を保証するものではありません。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates"
            ]
          }
        ],
        "unknowns": [
          "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。",
          "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。"
        ],
        "sources": [
          {
            "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2016/0xxx/CVE-2016-0185.json",
            "label": "CVE：microsoft"
          },
          {
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-0185",
            "label": "CISA KEV（悪用確認）"
          },
          {
            "url": "https://www.cve.org/CVERecord?id=CVE-2016-0185",
            "label": "CVE公式レコード"
          },
          {
            "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-059",
            "label": "MS16-059"
          },
          {
            "url": "http://www.securityfocus.com/bid/90023",
            "label": "90023"
          },
          {
            "url": "https://www.exploit-db.com/exploits/39805/",
            "label": "39805"
          },
          {
            "url": "http://www.securitytracker.com/id/1035832",
            "label": "1035832"
          },
          {
            "url": "http://www.zerodayinitiative.com/advisories/ZDI-16-277",
            "label": "CVE掲載の参考情報"
          },
          {
            "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0185",
            "label": "CISAが示す関連情報"
          },
          {
            "url": "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device",
            "label": "Microsoft公式：Windowsの情報を調べる"
          },
          {
            "url": "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates",
            "label": "Microsoft公式：Windows Updateの操作"
          }
        ],
        "evidence": [
          {
            "id": "E1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2016/0xxx/CVE-2016-0185.json",
            "sourceField": "/containers/cna/descriptions/0/value",
            "excerpt": "Media Center in Microsoft Windows Vista SP2, Windows 7 SP1, and Windows 8.1 allows remote attackers to execute arbitrary code via a crafted Media Center link (aka .mcl) file, aka \"Windows Media Center Remote Code Execution Vulnerability.\"",
            "language": "en",
            "representation": "source_excerpt"
          },
          {
            "id": "E2",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2016/0xxx/CVE-2016-0185.json",
            "sourceField": "/containers/cna/affected/0",
            "excerpt": "{\"product\":\"n/a\",\"vendor\":\"n/a\",\"versions\":[{\"status\":\"affected\",\"version\":\"n/a\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E3",
            "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-0185",
            "sourceField": "/sourceAction",
            "excerpt": "Apply updates per vendor instructions.",
            "language": null
          },
          {
            "id": "E4",
            "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-0185",
            "sourceField": "/exploitStatus",
            "excerpt": "{\"id\":\"CVE-2016-0185\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}",
            "language": "en",
            "representation": "normalized_feed_field"
          }
        ],
        "supportRequest": "件名：CVE-2016-0185（Microsoft Windows）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Windows Vista SP2 の Media Center が対象です。\n・Windows 7 SP1 の Media Center が対象です。\n・Windows 8.1 の Media Center が対象です。\n・公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2016-0185",
        "publicationCheckVersion": "2026-10-23.1",
        "sourceNotices": [],
        "automation": {
          "status": "ready",
          "lastAttempt": "2026-10-23T03:46:08.173Z",
          "lastSuccess": "2026-10-23T03:46:08.173Z",
          "sourceCheckedAt": "2026-10-23T02:42:59.309Z",
          "errorCode": null
        },
        "glossary": [
          {
            "term": "任意のコード実行",
            "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。",
            "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html",
            "kind": "general_definition"
          }
        ]
      }
    },
    {
      "id": "CVE-2016-3235",
      "aliases": [],
      "title": "n/a：脆弱性情報",
      "summary": "Microsoft Visio 2007 SP3、Visio 2010 SP2、Visio 2013 SP1、Visio 2016、Visio Viewer 2007 SP3、Visio Viewer 2010 がライブラリの読み込みを誤処理し、細工したアプリケーションを使うローカルユーザーが権限を取得できる、いわゆる「Microsoft Office OLE DLL サイドローディング脆弱性」です。",
      "risk": "ローカルユーザーが細工したアプリケーションを実行することで、権限を昇格させられる可能性があります。",
      "product": "Microsoft Office",
      "category": "windows",
      "component": "package",
      "severity": "unknown",
      "cvss": null,
      "cvssVersion": null,
      "cvssSource": "microsoft",
      "cvssVector": null,
      "affected": [
        {
          "product": "n/a",
          "range": "n/a"
        }
      ],
      "fixed": [],
      "steps": [
        "ベンダーの指示に従って更新プログラムを適用する。",
        "「CVE-2016-3235」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
        "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。"
      ],
      "references": [
        {
          "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2016/3xxx/CVE-2016-3235.json",
          "label": "CVE：microsoft"
        },
        {
          "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-3235",
          "label": "CISA KEV（悪用確認）"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2016-3235",
          "label": "CVE公式レコード"
        },
        {
          "url": "https://www.securify.nl/advisory/SFY20150804/microsoft_visio_multiple_dll_side_loading_vulnerabilities.html",
          "label": "CVE掲載の参考情報"
        },
        {
          "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-070",
          "label": "MS16-070"
        },
        {
          "url": "http://www.securityfocus.com/archive/1/538685/100/0/threaded",
          "label": "20160615 Microsoft Visio multiple DLL side loading vulnerabilities"
        },
        {
          "url": "http://www.securitytracker.com/id/1036093",
          "label": "1036093"
        },
        {
          "url": "http://packetstormsecurity.com/files/137490/Microsoft-Visio-DLL-Hijacking.html",
          "label": "CVE掲載の参考情報"
        },
        {
          "url": "http://seclists.org/fulldisclosure/2016/Jun/32",
          "label": "20160615 Microsoft Visio multiple DLL side loading vulnerabilities"
        },
        {
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-3235",
          "label": "CISAが示す関連情報"
        },
        {
          "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
          "label": "CISA：ソフトウェア更新の基本"
        }
      ],
      "publishedAt": "2016-06-16T01:00:00.000Z",
      "modifiedAt": "2025-10-21T23:55:51.339Z",
      "fetchedAt": "2026-10-23T02:42:59.865Z",
      "exploitStatus": "confirmed",
      "sources": [
        "CVE",
        "CISA KEV"
      ],
      "originalText": "Microsoft Visio 2007 SP3, Visio 2010 SP2, Visio 2013 SP1, Visio 2016, Visio Viewer 2007 SP3, and Visio Viewer 2010 mishandle library loading, which allows local users to gain privileges via a crafted application, aka \"Microsoft Office OLE DLL Side Loading Vulnerability.\"",
      "sourceTitle": "",
      "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。",
      "state": "published",
      "affectedDetails": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "officialEvidence": {
        "schemaVersion": "1.0",
        "id": "CVE-2016-3235",
        "sourceType": "CVE",
        "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2016/3xxx/CVE-2016-3235.json",
        "fetchedAt": "2026-10-23T02:42:59.865Z",
        "publishedAt": "2016-06-16T01:00:00.000Z",
        "modifiedAt": "2025-10-21T23:55:51.339Z",
        "state": "published",
        "provider": "microsoft",
        "title": "",
        "descriptions": [
          {
            "lang": "en",
            "value": "Microsoft Visio 2007 SP3, Visio 2010 SP2, Visio 2013 SP1, Visio 2016, Visio Viewer 2007 SP3, and Visio Viewer 2010 mishandle library loading, which allows local users to gain privileges via a crafted application, aka \"Microsoft Office OLE DLL Side Loading Vulnerability.\"",
            "sourcePath": "/containers/cna/descriptions/0/value"
          }
        ],
        "affected": [
          {
            "vendor": "n/a",
            "product": "n/a",
            "sourcePath": "/containers/cna/affected/0",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/0/versions/0",
                "version": "n/a",
                "status": "affected"
              }
            ]
          }
        ],
        "solutions": [],
        "workarounds": [],
        "exploits": [],
        "rejectedReasons": [],
        "problemTypes": [
          {
            "cweId": "",
            "lang": "en",
            "description": "n/a",
            "sourcePath": "/containers/cna/problemTypes/0/descriptions/0"
          }
        ],
        "metrics": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "provider": "CISA-ADP",
            "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1"
          }
        ],
        "references": [
          {
            "url": "https://www.securify.nl/advisory/SFY20150804/microsoft_visio_multiple_dll_side_loading_vulnerabilities.html",
            "label": "CVE",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/0"
          },
          {
            "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-070",
            "label": "MS16-070",
            "tags": [
              "vendor-advisory",
              "x_refsource_MS",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/1"
          },
          {
            "url": "http://www.securityfocus.com/archive/1/538685/100/0/threaded",
            "label": "20160615 Microsoft Visio multiple DLL side loading vulnerabilities",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/2"
          },
          {
            "url": "http://www.securitytracker.com/id/1036093",
            "label": "1036093",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/3"
          },
          {
            "url": "http://packetstormsecurity.com/files/137490/Microsoft-Visio-DLL-Hijacking.html",
            "label": "CVE",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/4"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2016/Jun/32",
            "label": "20160615 Microsoft Visio multiple DLL side loading vulnerabilities",
            "tags": [
              "mailing-list",
              "x_refsource_FULLDISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/5"
          },
          {
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-3235",
            "label": "CISA-ADP",
            "tags": [
              "government-resource"
            ],
            "provider": "CISA-ADP",
            "sourcePath": "/containers/adp/1/references/0"
          }
        ],
        "snippets": [
          {
            "evidenceId": "official:/containers/cna/affected/0",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2016/3xxx/CVE-2016-3235.json",
            "sourcePath": "/containers/cna/affected/0",
            "text": "{\"product\":\"n/a\",\"vendor\":\"n/a\",\"versions\":[{\"status\":\"affected\",\"version\":\"n/a\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/descriptions/0/value",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2016/3xxx/CVE-2016-3235.json",
            "sourcePath": "/containers/cna/descriptions/0/value",
            "text": "Microsoft Visio 2007 SP3, Visio 2010 SP2, Visio 2013 SP1, Visio 2016, Visio Viewer 2007 SP3, and Visio Viewer 2010 mishandle library loading, which allows local users to gain privileges via a crafted application, aka \"Microsoft Office OLE DLL Side Loading Vulnerability.\"",
            "truncated": false,
            "representation": "source_excerpt"
          },
          {
            "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2016/3xxx/CVE-2016-3235.json",
            "sourcePath": "/containers/cna/problemTypes/0/descriptions/0",
            "text": "{\"description\":\"n/a\",\"lang\":\"en\",\"type\":\"text\"}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/adp/1/metrics/0/cvssV3_1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2016/3xxx/CVE-2016-3235.json",
            "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1",
            "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":7.8,\"attackVector\":\"LOCAL\",\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"REQUIRED\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"confidentialityImpact\":\"HIGH\"}",
            "truncated": false,
            "representation": "source_json"
          }
        ],
        "limits": {
          "completeness": "official_record",
          "truncatedFields": [],
          "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。"
        }
      },
      "sourceSnapshots": [
        {
          "source": "CVE",
          "modifiedAt": "2025-10-21T23:55:51.339Z",
          "fetchedAt": "2026-10-23T02:42:59.865Z",
          "state": "published"
        },
        {
          "source": "CISA KEV",
          "modifiedAt": "2021-11-03T00:00:00.000Z",
          "fetchedAt": "2026-10-23T02:17:50.489Z",
          "state": "published"
        }
      ],
      "sourceAction": "Apply updates per vendor instructions.",
      "sourceSummary": "n/aに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。",
      "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。",
      "guidance": {
        "schemaVersion": "1.0",
        "method": "automatic",
        "reviewedAt": null,
        "reviewState": "current",
        "generatedAt": "2026-10-23T03:46:08.880Z",
        "generatorVersion": "2026-10-23.3",
        "sourceFingerprint": "c152a89e40c9370bc607048c87528614e189269736a859a8834eeb732f76481a",
        "sourceModifiedAt": "2025-10-21T23:55:51.339Z",
        "model": "@cf/openai/gpt-oss-120b",
        "verificationMethod": "exact_source_excerpt_and_independent_semantic_check",
        "summary": "Microsoft Visio 2007 SP3、Visio 2010 SP2、Visio 2013 SP1、Visio 2016、Visio Viewer 2007 SP3、Visio Viewer 2010 がライブラリの読み込みを誤処理し、細工したアプリケーションを使うローカルユーザーが権限を取得できる、いわゆる「Microsoft Office OLE DLL サイドローディング脆弱性」です。",
        "risk": "ローカルユーザーが細工したアプリケーションを実行することで、権限を昇格させられる可能性があります。",
        "summaryEvidenceIds": [
          "E1"
        ],
        "riskEvidenceIds": [
          "E1"
        ],
        "applicability": [
          {
            "text": "Microsoft Visio 2007 SP3 が影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2016/3xxx/CVE-2016-3235.json"
            ],
            "evidenceIds": [
              "E1"
            ]
          },
          {
            "text": "Microsoft Visio 2010 SP2 が影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2016/3xxx/CVE-2016-3235.json"
            ],
            "evidenceIds": [
              "E1"
            ]
          },
          {
            "text": "Microsoft Visio 2013 SP1 が影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2016/3xxx/CVE-2016-3235.json"
            ],
            "evidenceIds": [
              "E1"
            ]
          },
          {
            "text": "Microsoft Visio 2016 が影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2016/3xxx/CVE-2016-3235.json"
            ],
            "evidenceIds": [
              "E1"
            ]
          },
          {
            "text": "Microsoft Visio Viewer 2007 SP3 が影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2016/3xxx/CVE-2016-3235.json"
            ],
            "evidenceIds": [
              "E1"
            ]
          },
          {
            "text": "Microsoft Visio Viewer 2010 が影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2016/3xxx/CVE-2016-3235.json"
            ],
            "evidenceIds": [
              "E1"
            ]
          },
          {
            "text": "公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2016/3xxx/CVE-2016-3235.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。",
            "kind": "fact",
            "sourceUrls": [
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-3235"
            ],
            "evidenceIds": [
              "E4"
            ]
          }
        ],
        "versionChecks": [
          {
            "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2016/3xxx/CVE-2016-3235.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "「Microsoft Office」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
              "https://www.cve.org/CVERecord?id=CVE-2016-3235",
              "https://www.securify.nl/advisory/SFY20150804/microsoft_visio_multiple_dll_side_loading_vulnerabilities.html",
              "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-070",
              "http://www.securityfocus.com/archive/1/538685/100/0/threaded",
              "http://www.securitytracker.com/id/1036093",
              "http://packetstormsecurity.com/files/137490/Microsoft-Visio-DLL-Hijacking.html",
              "http://seclists.org/fulldisclosure/2016/Jun/32",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-3235",
              "https://nvd.nist.gov/vuln/detail/CVE-2016-3235"
            ]
          }
        ],
        "actions": [
          {
            "text": "ベンダーの指示に従って更新プログラムを適用する。",
            "kind": "fix",
            "sourceUrls": [
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-3235"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "「CVE-2016-3235」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cve.org/CVERecord?id=CVE-2016-3235",
              "https://www.securify.nl/advisory/SFY20150804/microsoft_visio_multiple_dll_side_loading_vulnerabilities.html",
              "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-070",
              "http://www.securityfocus.com/archive/1/538685/100/0/threaded",
              "http://www.securitytracker.com/id/1036093",
              "http://packetstormsecurity.com/files/137490/Microsoft-Visio-DLL-Hijacking.html",
              "http://seclists.org/fulldisclosure/2016/Jun/32",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-3235",
              "https://nvd.nist.gov/vuln/detail/CVE-2016-3235"
            ]
          },
          {
            "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
              "https://www.cve.org/CVERecord?id=CVE-2016-3235",
              "https://www.securify.nl/advisory/SFY20150804/microsoft_visio_multiple_dll_side_loading_vulnerabilities.html",
              "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-070",
              "http://www.securityfocus.com/archive/1/538685/100/0/threaded",
              "http://www.securitytracker.com/id/1036093",
              "http://packetstormsecurity.com/files/137490/Microsoft-Visio-DLL-Hijacking.html",
              "http://seclists.org/fulldisclosure/2016/Jun/32",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-3235",
              "https://nvd.nist.gov/vuln/detail/CVE-2016-3235"
            ]
          }
        ],
        "temporaryMitigations": [
          {
            "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cve.org/CVERecord?id=CVE-2016-3235",
              "https://www.securify.nl/advisory/SFY20150804/microsoft_visio_multiple_dll_side_loading_vulnerabilities.html",
              "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-070",
              "http://www.securityfocus.com/archive/1/538685/100/0/threaded",
              "http://www.securitytracker.com/id/1036093",
              "http://packetstormsecurity.com/files/137490/Microsoft-Visio-DLL-Hijacking.html",
              "http://seclists.org/fulldisclosure/2016/Jun/32",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-3235",
              "https://nvd.nist.gov/vuln/detail/CVE-2016-3235"
            ]
          }
        ],
        "verification": [
          {
            "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。",
            "kind": "procedure",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2016/3xxx/CVE-2016-3235.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
              "https://www.cve.org/CVERecord?id=CVE-2016-3235",
              "https://www.securify.nl/advisory/SFY20150804/microsoft_visio_multiple_dll_side_loading_vulnerabilities.html",
              "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-070",
              "http://www.securityfocus.com/archive/1/538685/100/0/threaded",
              "http://www.securitytracker.com/id/1036093",
              "http://packetstormsecurity.com/files/137490/Microsoft-Visio-DLL-Hijacking.html",
              "http://seclists.org/fulldisclosure/2016/Jun/32",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-3235",
              "https://nvd.nist.gov/vuln/detail/CVE-2016-3235"
            ]
          }
        ],
        "unknowns": [
          "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。",
          "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。"
        ],
        "sources": [
          {
            "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2016/3xxx/CVE-2016-3235.json",
            "label": "CVE：microsoft"
          },
          {
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-3235",
            "label": "CISA KEV（悪用確認）"
          },
          {
            "url": "https://www.cve.org/CVERecord?id=CVE-2016-3235",
            "label": "CVE公式レコード"
          },
          {
            "url": "https://www.securify.nl/advisory/SFY20150804/microsoft_visio_multiple_dll_side_loading_vulnerabilities.html",
            "label": "CVE掲載の参考情報"
          },
          {
            "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-070",
            "label": "MS16-070"
          },
          {
            "url": "http://www.securityfocus.com/archive/1/538685/100/0/threaded",
            "label": "20160615 Microsoft Visio multiple DLL side loading vulnerabilities"
          },
          {
            "url": "http://www.securitytracker.com/id/1036093",
            "label": "1036093"
          },
          {
            "url": "http://packetstormsecurity.com/files/137490/Microsoft-Visio-DLL-Hijacking.html",
            "label": "CVE掲載の参考情報"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2016/Jun/32",
            "label": "20160615 Microsoft Visio multiple DLL side loading vulnerabilities"
          },
          {
            "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-3235",
            "label": "CISAが示す関連情報"
          },
          {
            "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
            "label": "CISA：ソフトウェア更新の基本"
          }
        ],
        "evidence": [
          {
            "id": "E1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2016/3xxx/CVE-2016-3235.json",
            "sourceField": "/containers/cna/descriptions/0/value",
            "excerpt": "Microsoft Visio 2007 SP3, Visio 2010 SP2, Visio 2013 SP1, Visio 2016, Visio Viewer 2007 SP3, and Visio Viewer 2010 mishandle library loading, which allows local users to gain privileges via a crafted application, aka \"Microsoft Office OLE DLL Side Loading Vulnerability.\"",
            "language": "en",
            "representation": "source_excerpt"
          },
          {
            "id": "E2",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2016/3xxx/CVE-2016-3235.json",
            "sourceField": "/containers/cna/affected/0",
            "excerpt": "{\"product\":\"n/a\",\"vendor\":\"n/a\",\"versions\":[{\"status\":\"affected\",\"version\":\"n/a\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E3",
            "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-3235",
            "sourceField": "/sourceAction",
            "excerpt": "Apply updates per vendor instructions.",
            "language": null
          },
          {
            "id": "E4",
            "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-3235",
            "sourceField": "/exploitStatus",
            "excerpt": "{\"id\":\"CVE-2016-3235\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}",
            "language": "en",
            "representation": "normalized_feed_field"
          }
        ],
        "supportRequest": "件名：CVE-2016-3235（Microsoft Office）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Microsoft Visio 2007 SP3 が影響を受けます。\n・Microsoft Visio 2010 SP2 が影響を受けます。\n・Microsoft Visio 2013 SP1 が影響を受けます。\n・Microsoft Visio 2016 が影響を受けます。\n・Microsoft Visio Viewer 2007 SP3 が影響を受けます。\n・Microsoft Visio Viewer 2010 が影響を受けます。\n・公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2016-3235",
        "publicationCheckVersion": "2026-10-23.1",
        "sourceNotices": [],
        "automation": {
          "status": "ready",
          "lastAttempt": "2026-10-23T03:46:08.880Z",
          "lastSuccess": "2026-10-23T03:46:08.880Z",
          "sourceCheckedAt": "2026-10-23T02:42:59.865Z",
          "errorCode": null
        },
        "glossary": []
      }
    },
    {
      "id": "CVE-2016-7255",
      "aliases": [],
      "title": "n/a：権限の奪取",
      "summary": "Microsoft Windows Vista SP2、Windows Server 2008 SP2 と R2 SP1、Windows 7 SP1、Windows 8.1、Windows Server 2012 Gold と R2、Windows RT 8.1、Windows 10 Gold、1511、1607、そして Windows Server 2016 のカーネルモードドライバーは、細工されたアプリケーションを使用することでローカルユーザーが権限を昇格できる脆弱性（通称「Win32k 権限昇格脆弱性」）があります。",
      "risk": "ローカルユーザーが特権を取得できる。",
      "product": "Microsoft Win32k",
      "category": "windows",
      "component": "package",
      "severity": "unknown",
      "cvss": null,
      "cvssVersion": null,
      "cvssSource": "microsoft",
      "cvssVector": null,
      "affected": [
        {
          "product": "n/a",
          "range": "n/a"
        }
      ],
      "fixed": [],
      "steps": [
        "ベンダーの指示に従って更新プログラムを適用する。",
        "「CVE-2016-7255」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
        "Windows 11は「設定」→「Windows Update」→「更新プログラムのチェック」を開き、提供された更新を適用します。再起動を求められたら完了させます。会社管理のPC、Windows Server、サポート外の版は管理担当者に適用する修正番号と配布予定を確認してください。"
      ],
      "references": [
        {
          "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2016/7xxx/CVE-2016-7255.json",
          "label": "CVE：microsoft"
        },
        {
          "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-7255",
          "label": "CISA KEV（悪用確認）"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2016-7255",
          "label": "CVE公式レコード"
        },
        {
          "url": "http://packetstormsecurity.com/files/140468/Microsoft-Windows-Kernel-win32k.sys-NtSetWindowLongPtr-Privilege-Escalation.html",
          "label": "CVE掲載の参考情報"
        },
        {
          "url": "https://github.com/mwrlabs/CVE-2016-7255",
          "label": "CVE掲載の参考情報"
        },
        {
          "url": "https://www.exploit-db.com/exploits/40823/",
          "label": "40823"
        },
        {
          "url": "https://www.exploit-db.com/exploits/41015/",
          "label": "41015"
        },
        {
          "url": "https://securingtomorrow.mcafee.com/mcafee-labs/digging-windows-kernel-privilege-escalation-vulnerability-cve-2016-7255/",
          "label": "CVE掲載の参考情報"
        },
        {
          "url": "https://www.exploit-db.com/exploits/40745/",
          "label": "40745"
        },
        {
          "url": "http://www.securitytracker.com/id/1037251",
          "label": "1037251"
        },
        {
          "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-135",
          "label": "MS16-135"
        },
        {
          "url": "http://blog.trendmicro.com/trendlabs-security-intelligence/one-bit-rule-system-analyzing-cve-2016-7255-exploit-wild/",
          "label": "CVE掲載の参考情報"
        },
        {
          "url": "http://www.securityfocus.com/bid/94064",
          "label": "94064"
        },
        {
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-7255",
          "label": "CISAが示す関連情報"
        },
        {
          "url": "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device",
          "label": "Microsoft公式：Windowsの情報を調べる"
        },
        {
          "url": "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates",
          "label": "Microsoft公式：Windows Updateの操作"
        }
      ],
      "publishedAt": "2016-11-10T06:16:00.000Z",
      "modifiedAt": "2026-09-10T03:55:16.226Z",
      "fetchedAt": "2026-10-23T02:43:00.595Z",
      "exploitStatus": "confirmed",
      "sources": [
        "CVE",
        "CISA KEV"
      ],
      "originalText": "The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allow local users to gain privileges via a crafted application, aka \"Win32k Elevation of Privilege Vulnerability.\"",
      "sourceTitle": "",
      "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。",
      "state": "published",
      "affectedDetails": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "officialEvidence": {
        "schemaVersion": "1.0",
        "id": "CVE-2016-7255",
        "sourceType": "CVE",
        "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2016/7xxx/CVE-2016-7255.json",
        "fetchedAt": "2026-10-23T02:43:00.595Z",
        "publishedAt": "2016-11-10T06:16:00.000Z",
        "modifiedAt": "2026-09-10T03:55:16.226Z",
        "state": "published",
        "provider": "microsoft",
        "title": "",
        "descriptions": [
          {
            "lang": "en",
            "value": "The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allow local users to gain privileges via a crafted application, aka \"Win32k Elevation of Privilege Vulnerability.\"",
            "sourcePath": "/containers/cna/descriptions/0/value"
          }
        ],
        "affected": [
          {
            "vendor": "n/a",
            "product": "n/a",
            "sourcePath": "/containers/cna/affected/0",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/0/versions/0",
                "version": "n/a",
                "status": "affected"
              }
            ]
          }
        ],
        "solutions": [],
        "workarounds": [],
        "exploits": [],
        "rejectedReasons": [],
        "problemTypes": [
          {
            "cweId": "",
            "lang": "en",
            "description": "n/a",
            "sourcePath": "/containers/cna/problemTypes/0/descriptions/0"
          }
        ],
        "metrics": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "provider": "CISA-ADP",
            "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1"
          }
        ],
        "references": [
          {
            "url": "http://packetstormsecurity.com/files/140468/Microsoft-Windows-Kernel-win32k.sys-NtSetWindowLongPtr-Privilege-Escalation.html",
            "label": "CVE",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/0"
          },
          {
            "url": "https://github.com/mwrlabs/CVE-2016-7255",
            "label": "CVE",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/1"
          },
          {
            "url": "https://www.exploit-db.com/exploits/40823/",
            "label": "40823",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/2"
          },
          {
            "url": "https://www.exploit-db.com/exploits/41015/",
            "label": "41015",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/3"
          },
          {
            "url": "https://securingtomorrow.mcafee.com/mcafee-labs/digging-windows-kernel-privilege-escalation-vulnerability-cve-2016-7255/",
            "label": "CVE",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/4"
          },
          {
            "url": "https://www.exploit-db.com/exploits/40745/",
            "label": "40745",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/5"
          },
          {
            "url": "http://www.securitytracker.com/id/1037251",
            "label": "1037251",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/6"
          },
          {
            "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-135",
            "label": "MS16-135",
            "tags": [
              "vendor-advisory",
              "x_refsource_MS",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/7"
          },
          {
            "url": "http://blog.trendmicro.com/trendlabs-security-intelligence/one-bit-rule-system-analyzing-cve-2016-7255-exploit-wild/",
            "label": "CVE",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/8"
          },
          {
            "url": "http://www.securityfocus.com/bid/94064",
            "label": "94064",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/9"
          },
          {
            "url": "https://security.googleblog.com/2016/10/disclosing-vulnerabilities-to-protect.html",
            "label": "CVE",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/10"
          },
          {
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-7255",
            "label": "CISA-ADP",
            "tags": [
              "government-resource"
            ],
            "provider": "CISA-ADP",
            "sourcePath": "/containers/adp/1/references/0"
          }
        ],
        "snippets": [
          {
            "evidenceId": "official:/containers/cna/affected/0",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2016/7xxx/CVE-2016-7255.json",
            "sourcePath": "/containers/cna/affected/0",
            "text": "{\"product\":\"n/a\",\"vendor\":\"n/a\",\"versions\":[{\"status\":\"affected\",\"version\":\"n/a\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/descriptions/0/value",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2016/7xxx/CVE-2016-7255.json",
            "sourcePath": "/containers/cna/descriptions/0/value",
            "text": "The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allow local users to gain privileges via a crafted application, aka \"Win32k Elevation of Privilege Vulnerability.\"",
            "truncated": false,
            "representation": "source_excerpt"
          },
          {
            "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2016/7xxx/CVE-2016-7255.json",
            "sourcePath": "/containers/cna/problemTypes/0/descriptions/0",
            "text": "{\"description\":\"n/a\",\"lang\":\"en\",\"type\":\"text\"}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/adp/1/metrics/0/cvssV3_1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2016/7xxx/CVE-2016-7255.json",
            "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1",
            "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":7.8,\"attackVector\":\"LOCAL\",\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"REQUIRED\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"confidentialityImpact\":\"HIGH\"}",
            "truncated": false,
            "representation": "source_json"
          }
        ],
        "limits": {
          "completeness": "official_record",
          "truncatedFields": [],
          "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。"
        }
      },
      "sourceSnapshots": [
        {
          "source": "CVE",
          "modifiedAt": "2026-09-10T03:55:16.226Z",
          "fetchedAt": "2026-10-23T02:43:00.595Z",
          "state": "published"
        },
        {
          "source": "CISA KEV",
          "modifiedAt": "2021-11-03T00:00:00.000Z",
          "fetchedAt": "2026-10-23T02:17:50.489Z",
          "state": "published"
        }
      ],
      "sourceAction": "Apply updates per vendor instructions.",
      "sourceSummary": "n/aに権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。",
      "sourceRisk": "本来与えられていない権限で、操作される可能性があります。",
      "guidance": {
        "schemaVersion": "1.0",
        "method": "automatic",
        "reviewedAt": null,
        "reviewState": "current",
        "generatedAt": "2026-10-23T03:53:02.464Z",
        "generatorVersion": "2026-10-23.3",
        "sourceFingerprint": "8c20bfffcf92071d583977c4c457fe192802079743d431a55be22d6dca6c5292",
        "sourceModifiedAt": "2026-09-10T03:55:16.226Z",
        "model": "@cf/openai/gpt-oss-120b",
        "verificationMethod": "exact_source_excerpt_and_independent_semantic_check",
        "summary": "Microsoft Windows Vista SP2、Windows Server 2008 SP2 と R2 SP1、Windows 7 SP1、Windows 8.1、Windows Server 2012 Gold と R2、Windows RT 8.1、Windows 10 Gold、1511、1607、そして Windows Server 2016 のカーネルモードドライバーは、細工されたアプリケーションを使用することでローカルユーザーが権限を昇格できる脆弱性（通称「Win32k 権限昇格脆弱性」）があります。",
        "risk": "ローカルユーザーが特権を取得できる。",
        "summaryEvidenceIds": [
          "E1"
        ],
        "riskEvidenceIds": [
          "E1"
        ],
        "applicability": [
          {
            "text": "Windows Vista SP2 が影響を受ける。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2016/7xxx/CVE-2016-7255.json"
            ],
            "evidenceIds": [
              "E1"
            ]
          },
          {
            "text": "Windows Server 2008 SP2 と R2 SP1 が影響を受ける。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2016/7xxx/CVE-2016-7255.json"
            ],
            "evidenceIds": [
              "E1"
            ]
          },
          {
            "text": "Windows 7 SP1 が影響を受ける。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2016/7xxx/CVE-2016-7255.json"
            ],
            "evidenceIds": [
              "E1"
            ]
          },
          {
            "text": "Windows 8.1 が影響を受ける。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2016/7xxx/CVE-2016-7255.json"
            ],
            "evidenceIds": [
              "E1"
            ]
          },
          {
            "text": "Windows Server 2012 Gold と R2 が影響を受ける。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2016/7xxx/CVE-2016-7255.json"
            ],
            "evidenceIds": [
              "E1"
            ]
          },
          {
            "text": "Windows RT 8.1 が影響を受ける。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2016/7xxx/CVE-2016-7255.json"
            ],
            "evidenceIds": [
              "E1"
            ]
          },
          {
            "text": "Windows 10 Gold、1511、1607 が影響を受ける。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2016/7xxx/CVE-2016-7255.json"
            ],
            "evidenceIds": [
              "E1"
            ]
          },
          {
            "text": "Windows Server 2016 が影響を受ける。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2016/7xxx/CVE-2016-7255.json"
            ],
            "evidenceIds": [
              "E1"
            ]
          },
          {
            "text": "公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2016/7xxx/CVE-2016-7255.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。",
            "kind": "fact",
            "sourceUrls": [
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-7255"
            ],
            "evidenceIds": [
              "E4"
            ]
          }
        ],
        "versionChecks": [
          {
            "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2016/7xxx/CVE-2016-7255.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "「スタート」→「設定」→「システム」→「バージョン情報」を開き、Windowsのエディション・バージョン・OSビルドを控えます。会社のPCやサーバーは、この情報とCVE番号を管理担当者へ渡してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device"
            ]
          }
        ],
        "actions": [
          {
            "text": "ベンダーの指示に従って更新プログラムを適用する。",
            "kind": "fix",
            "sourceUrls": [
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-7255"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "「CVE-2016-7255」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cve.org/CVERecord?id=CVE-2016-7255",
              "http://packetstormsecurity.com/files/140468/Microsoft-Windows-Kernel-win32k.sys-NtSetWindowLongPtr-Privilege-Escalation.html",
              "https://github.com/mwrlabs/CVE-2016-7255",
              "https://www.exploit-db.com/exploits/40823/",
              "https://www.exploit-db.com/exploits/41015/",
              "https://securingtomorrow.mcafee.com/mcafee-labs/digging-windows-kernel-privilege-escalation-vulnerability-cve-2016-7255/",
              "https://www.exploit-db.com/exploits/40745/",
              "http://www.securitytracker.com/id/1037251",
              "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-135",
              "http://blog.trendmicro.com/trendlabs-security-intelligence/one-bit-rule-system-analyzing-cve-2016-7255-exploit-wild/",
              "http://www.securityfocus.com/bid/94064",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-7255",
              "https://nvd.nist.gov/vuln/detail/CVE-2016-7255"
            ]
          },
          {
            "text": "Windows 11は「設定」→「Windows Update」→「更新プログラムのチェック」を開き、提供された更新を適用します。再起動を求められたら完了させます。会社管理のPC、Windows Server、サポート外の版は管理担当者に適用する修正番号と配布予定を確認してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates"
            ]
          }
        ],
        "temporaryMitigations": [
          {
            "text": "すぐ更新できない場合は、CVE番号、Windowsの版、業務で必要な機能を管理担当者に伝え、修正までの利用方法と更新予定を決めてください。すべてのWindowsの問題に同じ回避策が使えるわけではありません。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates",
              "https://www.cve.org/CVERecord?id=CVE-2016-7255",
              "http://packetstormsecurity.com/files/140468/Microsoft-Windows-Kernel-win32k.sys-NtSetWindowLongPtr-Privilege-Escalation.html",
              "https://github.com/mwrlabs/CVE-2016-7255",
              "https://www.exploit-db.com/exploits/40823/",
              "https://www.exploit-db.com/exploits/41015/",
              "https://securingtomorrow.mcafee.com/mcafee-labs/digging-windows-kernel-privilege-escalation-vulnerability-cve-2016-7255/",
              "https://www.exploit-db.com/exploits/40745/",
              "http://www.securitytracker.com/id/1037251",
              "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-135",
              "http://blog.trendmicro.com/trendlabs-security-intelligence/one-bit-rule-system-analyzing-cve-2016-7255-exploit-wild/",
              "http://www.securityfocus.com/bid/94064",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-7255",
              "https://nvd.nist.gov/vuln/detail/CVE-2016-7255"
            ]
          }
        ],
        "verification": [
          {
            "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。",
            "kind": "procedure",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2016/7xxx/CVE-2016-7255.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "再起動後にWindows Updateを開き直して失敗・再起動待ちがないか確認し、管理担当者にこのCVEに対応する修正の適用結果を確認してもらってください。「最新の状態」と出ても、別製品の更新やサポート外の版の修正を保証するものではありません。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates"
            ]
          }
        ],
        "unknowns": [
          "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。",
          "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。"
        ],
        "sources": [
          {
            "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2016/7xxx/CVE-2016-7255.json",
            "label": "CVE：microsoft"
          },
          {
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-7255",
            "label": "CISA KEV（悪用確認）"
          },
          {
            "url": "https://www.cve.org/CVERecord?id=CVE-2016-7255",
            "label": "CVE公式レコード"
          },
          {
            "url": "http://packetstormsecurity.com/files/140468/Microsoft-Windows-Kernel-win32k.sys-NtSetWindowLongPtr-Privilege-Escalation.html",
            "label": "CVE掲載の参考情報"
          },
          {
            "url": "https://github.com/mwrlabs/CVE-2016-7255",
            "label": "CVE掲載の参考情報"
          },
          {
            "url": "https://www.exploit-db.com/exploits/40823/",
            "label": "40823"
          },
          {
            "url": "https://www.exploit-db.com/exploits/41015/",
            "label": "41015"
          },
          {
            "url": "https://securingtomorrow.mcafee.com/mcafee-labs/digging-windows-kernel-privilege-escalation-vulnerability-cve-2016-7255/",
            "label": "CVE掲載の参考情報"
          },
          {
            "url": "https://www.exploit-db.com/exploits/40745/",
            "label": "40745"
          },
          {
            "url": "http://www.securitytracker.com/id/1037251",
            "label": "1037251"
          },
          {
            "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-135",
            "label": "MS16-135"
          },
          {
            "url": "http://blog.trendmicro.com/trendlabs-security-intelligence/one-bit-rule-system-analyzing-cve-2016-7255-exploit-wild/",
            "label": "CVE掲載の参考情報"
          },
          {
            "url": "http://www.securityfocus.com/bid/94064",
            "label": "94064"
          },
          {
            "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-7255",
            "label": "CISAが示す関連情報"
          },
          {
            "url": "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device",
            "label": "Microsoft公式：Windowsの情報を調べる"
          },
          {
            "url": "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates",
            "label": "Microsoft公式：Windows Updateの操作"
          }
        ],
        "evidence": [
          {
            "id": "E1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2016/7xxx/CVE-2016-7255.json",
            "sourceField": "/containers/cna/descriptions/0/value",
            "excerpt": "The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allow local users to gain privileges via a crafted application, aka \"Win32k Elevation of Privilege Vulnerability.\"",
            "language": "en",
            "representation": "source_excerpt"
          },
          {
            "id": "E2",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2016/7xxx/CVE-2016-7255.json",
            "sourceField": "/containers/cna/affected/0",
            "excerpt": "{\"product\":\"n/a\",\"vendor\":\"n/a\",\"versions\":[{\"status\":\"affected\",\"version\":\"n/a\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E3",
            "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-7255",
            "sourceField": "/sourceAction",
            "excerpt": "Apply updates per vendor instructions.",
            "language": null
          },
          {
            "id": "E4",
            "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-7255",
            "sourceField": "/exploitStatus",
            "excerpt": "{\"id\":\"CVE-2016-7255\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}",
            "language": "en",
            "representation": "normalized_feed_field"
          }
        ],
        "supportRequest": "件名：CVE-2016-7255（Microsoft Win32k）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Windows Vista SP2 が影響を受ける。\n・Windows Server 2008 SP2 と R2 SP1 が影響を受ける。\n・Windows 7 SP1 が影響を受ける。\n・Windows 8.1 が影響を受ける。\n・Windows Server 2012 Gold と R2 が影響を受ける。\n・Windows RT 8.1 が影響を受ける。\n・Windows 10 Gold、1511、1607 が影響を受ける。\n・Windows Server 2016 が影響を受ける。\n・公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2016-7255",
        "publicationCheckVersion": "2026-10-23.1",
        "sourceNotices": [],
        "automation": {
          "status": "ready",
          "lastAttempt": "2026-10-23T03:53:02.464Z",
          "lastSuccess": "2026-10-23T03:53:02.464Z",
          "sourceCheckedAt": "2026-10-23T02:43:00.595Z",
          "errorCode": null
        },
        "glossary": [
          {
            "term": "権限昇格",
            "meaning": "本来その利用者には許可されていない、より強い権限で操作できるようになることです。必要な元の権限と、得られる権限を確認します。",
            "sourceUrl": "https://cwe.mitre.org/data/definitions/269.html",
            "kind": "general_definition"
          }
        ]
      }
    },
    {
      "id": "CVE-2017-0143",
      "aliases": [],
      "title": "Windows SMB：コード実行",
      "summary": "Microsoft Windows の SMBv1 サーバー（Windows Vista SP2、Windows Server 2008 SP2 および R2 SP1、Windows 7 SP1、Windows 8.1、Windows Server 2012 Gold と R2、Windows RT 8.1、Windows 10 Gold、1511、1607、そして Windows Server 2016）において、細工されたパケットを送ることでリモートの攻撃者が任意のコードを実行できる脆弱性（通称「Windows SMB リモートコード実行脆弱性」）が存在します。この脆弱性は CVE-2017-0144、CVE-2017-0145、CVE-2017-0146、CVE-2017-0148 で説明されているものとは異なります。",
      "risk": "攻撃者がリモートから任意のコードを実行できるため、システムが乗っ取られたり不正な操作が行われる可能性があります。",
      "product": "Windows SMB",
      "category": "windows",
      "component": "package",
      "severity": "unknown",
      "cvss": null,
      "cvssVersion": null,
      "cvssSource": "microsoft",
      "cvssVector": null,
      "affected": [
        {
          "product": "Windows SMB",
          "range": "The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607"
        }
      ],
      "fixed": [],
      "steps": [
        "ベンダーの指示に従って更新プログラムを適用する。",
        "「CVE-2017-0143」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
        "Windows 11は「設定」→「Windows Update」→「更新プログラムのチェック」を開き、提供された更新を適用します。再起動を求められたら完了させます。会社管理のPC、Windows Server、サポート外の版は管理担当者に適用する修正番号と配布予定を確認してください。"
      ],
      "references": [
        {
          "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2017/0xxx/CVE-2017-0143.json",
          "label": "CVE：microsoft"
        },
        {
          "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-0143",
          "label": "CISA KEV（悪用確認）"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-0143",
          "label": "CVE公式レコード"
        },
        {
          "url": "https://www.exploit-db.com/exploits/41891/",
          "label": "41891"
        },
        {
          "url": "http://www.securityfocus.com/bid/96703",
          "label": "96703"
        },
        {
          "url": "http://www.securitytracker.com/id/1037991",
          "label": "1037991"
        },
        {
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-701903.pdf",
          "label": "CVE掲載の参考情報"
        },
        {
          "url": "https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02",
          "label": "CVE掲載の参考情報"
        },
        {
          "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0143",
          "label": "CVE掲載の参考情報"
        },
        {
          "url": "https://www.exploit-db.com/exploits/41987/",
          "label": "41987"
        },
        {
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-966341.pdf",
          "label": "CVE掲載の参考情報"
        },
        {
          "url": "https://www.exploit-db.com/exploits/43970/",
          "label": "43970"
        },
        {
          "url": "http://packetstormsecurity.com/files/154690/DOUBLEPULSAR-Payload-Execution-Neutralization.html",
          "label": "CVE掲載の参考情報"
        },
        {
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-0143",
          "label": "CISAが示す関連情報"
        },
        {
          "url": "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device",
          "label": "Microsoft公式：Windowsの情報を調べる"
        },
        {
          "url": "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates",
          "label": "Microsoft公式：Windows Updateの操作"
        }
      ],
      "publishedAt": "2017-03-17T00:00:00.000Z",
      "modifiedAt": "2025-10-21T23:55:44.821Z",
      "fetchedAt": "2026-10-23T02:43:01.040Z",
      "exploitStatus": "confirmed",
      "sources": [
        "CVE",
        "CISA KEV"
      ],
      "originalText": "The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets, aka \"Windows SMB Remote Code Execution Vulnerability.\" This vulnerability is different from those described in CVE-2017-0144, CVE-2017-0145, CVE-2017-0146, and CVE-2017-0148.",
      "sourceTitle": "",
      "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。",
      "state": "published",
      "affectedDetails": [
        {
          "product": "Windows SMB",
          "vendor": "Microsoft Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607"
            }
          ]
        }
      ],
      "officialEvidence": {
        "schemaVersion": "1.0",
        "id": "CVE-2017-0143",
        "sourceType": "CVE",
        "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2017/0xxx/CVE-2017-0143.json",
        "fetchedAt": "2026-10-23T02:43:01.040Z",
        "publishedAt": "2017-03-17T00:00:00.000Z",
        "modifiedAt": "2025-10-21T23:55:44.821Z",
        "state": "published",
        "provider": "microsoft",
        "title": "",
        "descriptions": [
          {
            "lang": "en",
            "value": "The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets, aka \"Windows SMB Remote Code Execution Vulnerability.\" This vulnerability is different from those described in CVE-2017-0144, CVE-2017-0145, CVE-2017-0146, and CVE-2017-0148.",
            "sourcePath": "/containers/cna/descriptions/0/value"
          }
        ],
        "affected": [
          {
            "vendor": "Microsoft Corporation",
            "product": "Windows SMB",
            "sourcePath": "/containers/cna/affected/0",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/0/versions/0",
                "version": "The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607",
                "status": "affected"
              }
            ]
          }
        ],
        "solutions": [],
        "workarounds": [],
        "exploits": [],
        "rejectedReasons": [],
        "problemTypes": [
          {
            "cweId": "",
            "lang": "en",
            "description": "Remote Code Execution",
            "sourcePath": "/containers/cna/problemTypes/0/descriptions/0"
          }
        ],
        "metrics": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "provider": "CISA-ADP",
            "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1"
          }
        ],
        "references": [
          {
            "url": "https://www.exploit-db.com/exploits/41891/",
            "label": "41891",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/0"
          },
          {
            "url": "http://www.securityfocus.com/bid/96703",
            "label": "96703",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/1"
          },
          {
            "url": "http://www.securitytracker.com/id/1037991",
            "label": "1037991",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/2"
          },
          {
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-701903.pdf",
            "label": "CVE",
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/3"
          },
          {
            "url": "https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02",
            "label": "CVE",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/4"
          },
          {
            "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0143",
            "label": "CVE",
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/5"
          },
          {
            "url": "https://www.exploit-db.com/exploits/41987/",
            "label": "41987",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/6"
          },
          {
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-966341.pdf",
            "label": "CVE",
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/7"
          },
          {
            "url": "https://www.exploit-db.com/exploits/43970/",
            "label": "43970",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/8"
          },
          {
            "url": "http://packetstormsecurity.com/files/154690/DOUBLEPULSAR-Payload-Execution-Neutralization.html",
            "label": "CVE",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/9"
          },
          {
            "url": "http://packetstormsecurity.com/files/156196/SMB-DOUBLEPULSAR-Remote-Code-Execution.html",
            "label": "CVE",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/10"
          },
          {
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-0143",
            "label": "CISA-ADP",
            "tags": [
              "government-resource"
            ],
            "provider": "CISA-ADP",
            "sourcePath": "/containers/adp/1/references/0"
          }
        ],
        "snippets": [
          {
            "evidenceId": "official:/containers/cna/affected/0",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2017/0xxx/CVE-2017-0143.json",
            "sourcePath": "/containers/cna/affected/0",
            "text": "{\"product\":\"Windows SMB\",\"vendor\":\"Microsoft Corporation\",\"versions\":[{\"status\":\"affected\",\"version\":\"The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/descriptions/0/value",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2017/0xxx/CVE-2017-0143.json",
            "sourcePath": "/containers/cna/descriptions/0/value",
            "text": "The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets, aka \"Windows SMB Remote Code Execution Vulnerability.\" This vulnerability is different from those described in CVE-2017-0144, CVE-2017-0145, CVE-2017-0146, and CVE-2017-0148.",
            "truncated": false,
            "representation": "source_excerpt"
          },
          {
            "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2017/0xxx/CVE-2017-0143.json",
            "sourcePath": "/containers/cna/problemTypes/0/descriptions/0",
            "text": "{\"description\":\"Remote Code Execution\",\"lang\":\"en\",\"type\":\"text\"}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/adp/1/metrics/0/cvssV3_1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2017/0xxx/CVE-2017-0143.json",
            "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1",
            "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":8.8,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"NONE\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"LOW\",\"confidentialityImpact\":\"HIGH\"}",
            "truncated": false,
            "representation": "source_json"
          }
        ],
        "limits": {
          "completeness": "official_record",
          "truncatedFields": [],
          "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。"
        }
      },
      "sourceSnapshots": [
        {
          "source": "CVE",
          "modifiedAt": "2025-10-21T23:55:44.821Z",
          "fetchedAt": "2026-10-23T02:43:01.040Z",
          "state": "published"
        },
        {
          "source": "CISA KEV",
          "modifiedAt": "2021-11-03T00:00:00.000Z",
          "fetchedAt": "2026-10-23T02:17:50.489Z",
          "state": "published"
        }
      ],
      "sourceAction": "Apply updates per vendor instructions.",
      "sourceSummary": "Windows SMBにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。",
      "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。",
      "guidance": {
        "schemaVersion": "1.0",
        "method": "automatic",
        "reviewedAt": null,
        "reviewState": "current",
        "generatedAt": "2026-10-23T03:46:24.267Z",
        "generatorVersion": "2026-10-23.3",
        "sourceFingerprint": "241d30acdc5eb51feca6d8e75de5a3653b73f6b91fa17c53d4fdbbbe1eeea37c",
        "sourceModifiedAt": "2025-10-21T23:55:44.821Z",
        "model": "@cf/openai/gpt-oss-120b",
        "verificationMethod": "exact_source_excerpt_and_independent_semantic_check",
        "summary": "Microsoft Windows の SMBv1 サーバー（Windows Vista SP2、Windows Server 2008 SP2 および R2 SP1、Windows 7 SP1、Windows 8.1、Windows Server 2012 Gold と R2、Windows RT 8.1、Windows 10 Gold、1511、1607、そして Windows Server 2016）において、細工されたパケットを送ることでリモートの攻撃者が任意のコードを実行できる脆弱性（通称「Windows SMB リモートコード実行脆弱性」）が存在します。この脆弱性は CVE-2017-0144、CVE-2017-0145、CVE-2017-0146、CVE-2017-0148 で説明されているものとは異なります。",
        "risk": "攻撃者がリモートから任意のコードを実行できるため、システムが乗っ取られたり不正な操作が行われる可能性があります。",
        "summaryEvidenceIds": [
          "E1"
        ],
        "riskEvidenceIds": [
          "E2",
          "E1"
        ],
        "applicability": [
          {
            "text": "Windows Vista SP2 の SMBv1 サーバーが影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2017/0xxx/CVE-2017-0143.json"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "Windows Server 2008 SP2 の SMBv1 サーバーが影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2017/0xxx/CVE-2017-0143.json"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "Windows Server 2008 R2 SP1 の SMBv1 サーバーが影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2017/0xxx/CVE-2017-0143.json"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "Windows 7 SP1 の SMBv1 サーバーが影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2017/0xxx/CVE-2017-0143.json"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "Windows 8.1 の SMBv1 サーバーが影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2017/0xxx/CVE-2017-0143.json"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "Windows Server 2012 Gold の SMBv1 サーバーが影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2017/0xxx/CVE-2017-0143.json"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "Windows Server 2012 R2 の SMBv1 サーバーが影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2017/0xxx/CVE-2017-0143.json"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "Windows RT 8.1 の SMBv1 サーバーが影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2017/0xxx/CVE-2017-0143.json"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "Windows 10 Gold の SMBv1 サーバーが影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2017/0xxx/CVE-2017-0143.json"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "Windows 10 1511 の SMBv1 サーバーが影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2017/0xxx/CVE-2017-0143.json"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "Windows 10 1607 の SMBv1 サーバーが影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2017/0xxx/CVE-2017-0143.json"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "Windows Server 2016 の SMBv1 サーバーが影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2017/0xxx/CVE-2017-0143.json"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。",
            "kind": "fact",
            "sourceUrls": [
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-0143"
            ],
            "evidenceIds": [
              "E5"
            ]
          }
        ],
        "versionChecks": [
          {
            "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2017/0xxx/CVE-2017-0143.json"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "「スタート」→「設定」→「システム」→「バージョン情報」を開き、Windowsのエディション・バージョン・OSビルドを控えます。会社のPCやサーバーは、この情報とCVE番号を管理担当者へ渡してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device"
            ]
          }
        ],
        "actions": [
          {
            "text": "ベンダーの指示に従って更新プログラムを適用する。",
            "kind": "fix",
            "sourceUrls": [
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-0143"
            ],
            "evidenceIds": [
              "E4"
            ]
          },
          {
            "text": "「CVE-2017-0143」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cve.org/CVERecord?id=CVE-2017-0143",
              "https://www.exploit-db.com/exploits/41891/",
              "http://www.securityfocus.com/bid/96703",
              "http://www.securitytracker.com/id/1037991",
              "https://cert-portal.siemens.com/productcert/pdf/ssa-701903.pdf",
              "https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02",
              "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0143",
              "https://www.exploit-db.com/exploits/41987/",
              "https://cert-portal.siemens.com/productcert/pdf/ssa-966341.pdf",
              "https://www.exploit-db.com/exploits/43970/",
              "http://packetstormsecurity.com/files/154690/DOUBLEPULSAR-Payload-Execution-Neutralization.html",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-0143",
              "https://nvd.nist.gov/vuln/detail/CVE-2017-0143"
            ]
          },
          {
            "text": "Windows 11は「設定」→「Windows Update」→「更新プログラムのチェック」を開き、提供された更新を適用します。再起動を求められたら完了させます。会社管理のPC、Windows Server、サポート外の版は管理担当者に適用する修正番号と配布予定を確認してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates"
            ]
          }
        ],
        "temporaryMitigations": [
          {
            "text": "すぐ更新できない場合は、CVE番号、Windowsの版、業務で必要な機能を管理担当者に伝え、修正までの利用方法と更新予定を決めてください。すべてのWindowsの問題に同じ回避策が使えるわけではありません。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates",
              "https://www.cve.org/CVERecord?id=CVE-2017-0143",
              "https://www.exploit-db.com/exploits/41891/",
              "http://www.securityfocus.com/bid/96703",
              "http://www.securitytracker.com/id/1037991",
              "https://cert-portal.siemens.com/productcert/pdf/ssa-701903.pdf",
              "https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02",
              "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0143",
              "https://www.exploit-db.com/exploits/41987/",
              "https://cert-portal.siemens.com/productcert/pdf/ssa-966341.pdf",
              "https://www.exploit-db.com/exploits/43970/",
              "http://packetstormsecurity.com/files/154690/DOUBLEPULSAR-Payload-Execution-Neutralization.html",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-0143",
              "https://nvd.nist.gov/vuln/detail/CVE-2017-0143"
            ]
          }
        ],
        "verification": [
          {
            "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。",
            "kind": "procedure",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2017/0xxx/CVE-2017-0143.json"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "再起動後にWindows Updateを開き直して失敗・再起動待ちがないか確認し、管理担当者にこのCVEに対応する修正の適用結果を確認してもらってください。「最新の状態」と出ても、別製品の更新やサポート外の版の修正を保証するものではありません。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates"
            ]
          }
        ],
        "unknowns": [
          "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。",
          "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。"
        ],
        "sources": [
          {
            "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2017/0xxx/CVE-2017-0143.json",
            "label": "CVE：microsoft"
          },
          {
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-0143",
            "label": "CISA KEV（悪用確認）"
          },
          {
            "url": "https://www.cve.org/CVERecord?id=CVE-2017-0143",
            "label": "CVE公式レコード"
          },
          {
            "url": "https://www.exploit-db.com/exploits/41891/",
            "label": "41891"
          },
          {
            "url": "http://www.securityfocus.com/bid/96703",
            "label": "96703"
          },
          {
            "url": "http://www.securitytracker.com/id/1037991",
            "label": "1037991"
          },
          {
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-701903.pdf",
            "label": "CVE掲載の参考情報"
          },
          {
            "url": "https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02",
            "label": "CVE掲載の参考情報"
          },
          {
            "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0143",
            "label": "CVE掲載の参考情報"
          },
          {
            "url": "https://www.exploit-db.com/exploits/41987/",
            "label": "41987"
          },
          {
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-966341.pdf",
            "label": "CVE掲載の参考情報"
          },
          {
            "url": "https://www.exploit-db.com/exploits/43970/",
            "label": "43970"
          },
          {
            "url": "http://packetstormsecurity.com/files/154690/DOUBLEPULSAR-Payload-Execution-Neutralization.html",
            "label": "CVE掲載の参考情報"
          },
          {
            "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-0143",
            "label": "CISAが示す関連情報"
          },
          {
            "url": "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device",
            "label": "Microsoft公式：Windowsの情報を調べる"
          },
          {
            "url": "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates",
            "label": "Microsoft公式：Windows Updateの操作"
          }
        ],
        "evidence": [
          {
            "id": "E1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2017/0xxx/CVE-2017-0143.json",
            "sourceField": "/containers/cna/descriptions/0/value",
            "excerpt": "The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets, aka \"Windows SMB Remote Code Execution Vulnerability.\" This vulnerability is different from those described in CVE-2017-0144, CVE-2017-0145, CVE-2017-0146, and CVE-2017-0148.",
            "language": "en",
            "representation": "source_excerpt"
          },
          {
            "id": "E2",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2017/0xxx/CVE-2017-0143.json",
            "sourceField": "/containers/cna/problemTypes/0/descriptions/0",
            "excerpt": "{\"description\":\"Remote Code Execution\",\"lang\":\"en\",\"type\":\"text\"}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E3",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2017/0xxx/CVE-2017-0143.json",
            "sourceField": "/containers/cna/affected/0",
            "excerpt": "{\"product\":\"Windows SMB\",\"vendor\":\"Microsoft Corporation\",\"versions\":[{\"status\":\"affected\",\"version\":\"The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E4",
            "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-0143",
            "sourceField": "/sourceAction",
            "excerpt": "Apply updates per vendor instructions.",
            "language": null
          },
          {
            "id": "E5",
            "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-0143",
            "sourceField": "/exploitStatus",
            "excerpt": "{\"id\":\"CVE-2017-0143\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}",
            "language": "en",
            "representation": "normalized_feed_field"
          }
        ],
        "supportRequest": "件名：CVE-2017-0143（Windows SMB）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Windows Vista SP2 の SMBv1 サーバーが影響を受けます。\n・Windows Server 2008 SP2 の SMBv1 サーバーが影響を受けます。\n・Windows Server 2008 R2 SP1 の SMBv1 サーバーが影響を受けます。\n・Windows 7 SP1 の SMBv1 サーバーが影響を受けます。\n・Windows 8.1 の SMBv1 サーバーが影響を受けます。\n・Windows Server 2012 Gold の SMBv1 サーバーが影響を受けます。\n・Windows Server 2012 R2 の SMBv1 サーバーが影響を受けます。\n・Windows RT 8.1 の SMBv1 サーバーが影響を受けます。\n・Windows 10 Gold の SMBv1 サーバーが影響を受けます。\n・Windows 10 1511 の SMBv1 サーバーが影響を受けます。\n・Windows 10 1607 の SMBv1 サーバーが影響を受けます。\n・Windows Server 2016 の SMBv1 サーバーが影響を受けます。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2017-0143",
        "publicationCheckVersion": "2026-10-23.1",
        "sourceNotices": [],
        "automation": {
          "status": "ready",
          "lastAttempt": "2026-10-23T03:46:24.267Z",
          "lastSuccess": "2026-10-23T03:46:24.267Z",
          "sourceCheckedAt": "2026-10-23T02:43:01.040Z",
          "errorCode": null
        },
        "glossary": [
          {
            "term": "任意のコード実行",
            "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。",
            "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html",
            "kind": "general_definition"
          }
        ]
      }
    },
    {
      "id": "CVE-2017-0199",
      "aliases": [],
      "title": "Office/WordPad：コード実行",
      "summary": "Microsoft Office 2007 SP3、Microsoft Office 2010 SP2、Microsoft Office 2013 SP1、Microsoft Office 2016、Microsoft Windows Vista SP2、Windows Server 2008 SP2、Windows 7 SP1、Windows 8.1 のいずれでも、細工された文書を使ってリモートの攻撃者が任意のコードを実行できる可能性があります。",
      "risk": "リモートの攻撃者が対象システム上で任意のコードを実行できる可能性があります。",
      "product": "Office/WordPad",
      "category": "windows",
      "component": "package",
      "severity": "unknown",
      "cvss": null,
      "cvssVersion": null,
      "cvssSource": "microsoft",
      "cvssVector": null,
      "affected": [
        {
          "product": "Office/WordPad",
          "range": "Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, and Windows 8.1"
        }
      ],
      "fixed": [],
      "steps": [
        "ベンダーの指示に従ってアップデートを適用する。",
        "「CVE-2017-0199」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
        "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。"
      ],
      "references": [
        {
          "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2017/0xxx/CVE-2017-0199.json",
          "label": "CVE：microsoft"
        },
        {
          "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-0199",
          "label": "CISA KEV（悪用確認）"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-0199",
          "label": "CVE公式レコード"
        },
        {
          "url": "http://www.securityfocus.com/bid/97498",
          "label": "97498"
        },
        {
          "url": "https://blog.nviso.be/2017/04/12/analysis-of-a-cve-2017-0199-malicious-rtf-document/",
          "label": "CVE掲載の参考情報"
        },
        {
          "url": "http://rewtin.blogspot.nl/2017/04/cve-2017-0199-practical-exploitation-poc.html",
          "label": "CVE掲載の参考情報"
        },
        {
          "url": "https://www.exploit-db.com/exploits/41894/",
          "label": "41894"
        },
        {
          "url": "https://www.fireeye.com/blog/threat-research/2017/04/cve-2017-0199_useda.html",
          "label": "CVE掲載の参考情報"
        },
        {
          "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0199",
          "label": "CVE掲載の参考情報"
        },
        {
          "url": "https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02",
          "label": "CVE掲載の参考情報"
        },
        {
          "url": "https://www.mdsec.co.uk/2017/04/exploiting-cve-2017-0199-hta-handler-vulnerability/",
          "label": "CVE掲載の参考情報"
        },
        {
          "url": "https://www.exploit-db.com/exploits/41934/",
          "label": "41934"
        },
        {
          "url": "https://www.exploit-db.com/exploits/42995/",
          "label": "42995"
        },
        {
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-0199",
          "label": "CISAが示す関連情報"
        },
        {
          "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
          "label": "CISA：ソフトウェア更新の基本"
        }
      ],
      "publishedAt": "2017-04-12T14:00:00.000Z",
      "modifiedAt": "2025-10-21T23:55:42.609Z",
      "fetchedAt": "2026-10-23T02:43:01.280Z",
      "exploitStatus": "confirmed",
      "sources": [
        "CVE",
        "CISA KEV"
      ],
      "originalText": "Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, Windows 8.1 allow remote attackers to execute arbitrary code via a crafted document, aka \"Microsoft Office/WordPad Remote Code Execution Vulnerability w/Windows API.\"",
      "sourceTitle": "",
      "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。",
      "state": "published",
      "affectedDetails": [
        {
          "product": "Office/WordPad",
          "vendor": "Microsoft Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, and Windows 8.1"
            }
          ]
        }
      ],
      "officialEvidence": {
        "schemaVersion": "1.0",
        "id": "CVE-2017-0199",
        "sourceType": "CVE",
        "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2017/0xxx/CVE-2017-0199.json",
        "fetchedAt": "2026-10-23T02:43:01.280Z",
        "publishedAt": "2017-04-12T14:00:00.000Z",
        "modifiedAt": "2025-10-21T23:55:42.609Z",
        "state": "published",
        "provider": "microsoft",
        "title": "",
        "descriptions": [
          {
            "lang": "en",
            "value": "Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, Windows 8.1 allow remote attackers to execute arbitrary code via a crafted document, aka \"Microsoft Office/WordPad Remote Code Execution Vulnerability w/Windows API.\"",
            "sourcePath": "/containers/cna/descriptions/0/value"
          }
        ],
        "affected": [
          {
            "vendor": "Microsoft Corporation",
            "product": "Office/WordPad",
            "sourcePath": "/containers/cna/affected/0",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/0/versions/0",
                "version": "Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, and Windows 8.1",
                "status": "affected"
              }
            ]
          }
        ],
        "solutions": [],
        "workarounds": [],
        "exploits": [],
        "rejectedReasons": [],
        "problemTypes": [
          {
            "cweId": "",
            "lang": "en",
            "description": "Remote Code Execution",
            "sourcePath": "/containers/cna/problemTypes/0/descriptions/0"
          }
        ],
        "metrics": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "provider": "CISA-ADP",
            "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1"
          }
        ],
        "references": [
          {
            "url": "http://www.securityfocus.com/bid/97498",
            "label": "97498",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/0"
          },
          {
            "url": "https://blog.nviso.be/2017/04/12/analysis-of-a-cve-2017-0199-malicious-rtf-document/",
            "label": "CVE",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/1"
          },
          {
            "url": "http://rewtin.blogspot.nl/2017/04/cve-2017-0199-practical-exploitation-poc.html",
            "label": "CVE",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/2"
          },
          {
            "url": "https://www.exploit-db.com/exploits/41894/",
            "label": "41894",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/3"
          },
          {
            "url": "https://www.fireeye.com/blog/threat-research/2017/04/cve-2017-0199_useda.html",
            "label": "CVE",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/4"
          },
          {
            "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0199",
            "label": "CVE",
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/5"
          },
          {
            "url": "https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02",
            "label": "CVE",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/6"
          },
          {
            "url": "https://www.mdsec.co.uk/2017/04/exploiting-cve-2017-0199-hta-handler-vulnerability/",
            "label": "CVE",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/7"
          },
          {
            "url": "https://www.exploit-db.com/exploits/41934/",
            "label": "41934",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/8"
          },
          {
            "url": "https://www.exploit-db.com/exploits/42995/",
            "label": "42995",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/9"
          },
          {
            "url": "http://www.securitytracker.com/id/1038224",
            "label": "1038224",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/10"
          },
          {
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-0199",
            "label": "CISA-ADP",
            "tags": [
              "government-resource"
            ],
            "provider": "CISA-ADP",
            "sourcePath": "/containers/adp/1/references/0"
          }
        ],
        "snippets": [
          {
            "evidenceId": "official:/containers/cna/affected/0",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2017/0xxx/CVE-2017-0199.json",
            "sourcePath": "/containers/cna/affected/0",
            "text": "{\"product\":\"Office/WordPad\",\"vendor\":\"Microsoft Corporation\",\"versions\":[{\"status\":\"affected\",\"version\":\"Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, and Windows 8.1\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/descriptions/0/value",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2017/0xxx/CVE-2017-0199.json",
            "sourcePath": "/containers/cna/descriptions/0/value",
            "text": "Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, Windows 8.1 allow remote attackers to execute arbitrary code via a crafted document, aka \"Microsoft Office/WordPad Remote Code Execution Vulnerability w/Windows API.\"",
            "truncated": false,
            "representation": "source_excerpt"
          },
          {
            "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2017/0xxx/CVE-2017-0199.json",
            "sourcePath": "/containers/cna/problemTypes/0/descriptions/0",
            "text": "{\"description\":\"Remote Code Execution\",\"lang\":\"en\",\"type\":\"text\"}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/adp/1/metrics/0/cvssV3_1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2017/0xxx/CVE-2017-0199.json",
            "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1",
            "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":7.8,\"attackVector\":\"LOCAL\",\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"REQUIRED\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"confidentialityImpact\":\"HIGH\"}",
            "truncated": false,
            "representation": "source_json"
          }
        ],
        "limits": {
          "completeness": "official_record",
          "truncatedFields": [],
          "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。"
        }
      },
      "sourceSnapshots": [
        {
          "source": "CVE",
          "modifiedAt": "2025-10-21T23:55:42.609Z",
          "fetchedAt": "2026-10-23T02:43:01.280Z",
          "state": "published"
        },
        {
          "source": "CISA KEV",
          "modifiedAt": "2021-11-03T00:00:00.000Z",
          "fetchedAt": "2026-10-23T02:17:50.489Z",
          "state": "published"
        }
      ],
      "sourceAction": "Apply updates per vendor instructions.",
      "sourceSummary": "Office/WordPadにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。",
      "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。",
      "guidance": {
        "schemaVersion": "1.0",
        "method": "automatic",
        "reviewedAt": null,
        "reviewState": "current",
        "generatedAt": "2026-10-23T03:46:24.488Z",
        "generatorVersion": "2026-10-23.3",
        "sourceFingerprint": "9e7c2abccec7e5489c1cb4a0b8dbc71ab766db690ad3d772cfc8417ca9defc88",
        "sourceModifiedAt": "2025-10-21T23:55:42.609Z",
        "model": "@cf/openai/gpt-oss-120b",
        "verificationMethod": "exact_source_excerpt_and_independent_semantic_check",
        "summary": "Microsoft Office 2007 SP3、Microsoft Office 2010 SP2、Microsoft Office 2013 SP1、Microsoft Office 2016、Microsoft Windows Vista SP2、Windows Server 2008 SP2、Windows 7 SP1、Windows 8.1 のいずれでも、細工された文書を使ってリモートの攻撃者が任意のコードを実行できる可能性があります。",
        "risk": "リモートの攻撃者が対象システム上で任意のコードを実行できる可能性があります。",
        "summaryEvidenceIds": [
          "E1"
        ],
        "riskEvidenceIds": [
          "E1"
        ],
        "applicability": [
          {
            "text": "上記の製品（Office 2007 SP3、Office 2010 SP2、Office 2013 SP1、Office 2016、Windows Vista SP2、Windows Server 2008 SP2、Windows 7 SP1、Windows 8.1）が影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2017/0xxx/CVE-2017-0199.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。",
            "kind": "fact",
            "sourceUrls": [
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-0199"
            ],
            "evidenceIds": [
              "E4"
            ]
          }
        ],
        "versionChecks": [
          {
            "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2017/0xxx/CVE-2017-0199.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "「Office/WordPad」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
              "https://www.cve.org/CVERecord?id=CVE-2017-0199",
              "http://www.securityfocus.com/bid/97498",
              "https://blog.nviso.be/2017/04/12/analysis-of-a-cve-2017-0199-malicious-rtf-document/",
              "http://rewtin.blogspot.nl/2017/04/cve-2017-0199-practical-exploitation-poc.html",
              "https://www.exploit-db.com/exploits/41894/",
              "https://www.fireeye.com/blog/threat-research/2017/04/cve-2017-0199_useda.html",
              "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0199",
              "https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02",
              "https://www.mdsec.co.uk/2017/04/exploiting-cve-2017-0199-hta-handler-vulnerability/",
              "https://www.exploit-db.com/exploits/41934/",
              "https://www.exploit-db.com/exploits/42995/",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-0199",
              "https://nvd.nist.gov/vuln/detail/CVE-2017-0199"
            ]
          }
        ],
        "actions": [
          {
            "text": "ベンダーの指示に従ってアップデートを適用する。",
            "kind": "fix",
            "sourceUrls": [
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-0199"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "「CVE-2017-0199」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cve.org/CVERecord?id=CVE-2017-0199",
              "http://www.securityfocus.com/bid/97498",
              "https://blog.nviso.be/2017/04/12/analysis-of-a-cve-2017-0199-malicious-rtf-document/",
              "http://rewtin.blogspot.nl/2017/04/cve-2017-0199-practical-exploitation-poc.html",
              "https://www.exploit-db.com/exploits/41894/",
              "https://www.fireeye.com/blog/threat-research/2017/04/cve-2017-0199_useda.html",
              "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0199",
              "https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02",
              "https://www.mdsec.co.uk/2017/04/exploiting-cve-2017-0199-hta-handler-vulnerability/",
              "https://www.exploit-db.com/exploits/41934/",
              "https://www.exploit-db.com/exploits/42995/",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-0199",
              "https://nvd.nist.gov/vuln/detail/CVE-2017-0199"
            ]
          },
          {
            "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
              "https://www.cve.org/CVERecord?id=CVE-2017-0199",
              "http://www.securityfocus.com/bid/97498",
              "https://blog.nviso.be/2017/04/12/analysis-of-a-cve-2017-0199-malicious-rtf-document/",
              "http://rewtin.blogspot.nl/2017/04/cve-2017-0199-practical-exploitation-poc.html",
              "https://www.exploit-db.com/exploits/41894/",
              "https://www.fireeye.com/blog/threat-research/2017/04/cve-2017-0199_useda.html",
              "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0199",
              "https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02",
              "https://www.mdsec.co.uk/2017/04/exploiting-cve-2017-0199-hta-handler-vulnerability/",
              "https://www.exploit-db.com/exploits/41934/",
              "https://www.exploit-db.com/exploits/42995/",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-0199",
              "https://nvd.nist.gov/vuln/detail/CVE-2017-0199"
            ]
          }
        ],
        "temporaryMitigations": [
          {
            "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cve.org/CVERecord?id=CVE-2017-0199",
              "http://www.securityfocus.com/bid/97498",
              "https://blog.nviso.be/2017/04/12/analysis-of-a-cve-2017-0199-malicious-rtf-document/",
              "http://rewtin.blogspot.nl/2017/04/cve-2017-0199-practical-exploitation-poc.html",
              "https://www.exploit-db.com/exploits/41894/",
              "https://www.fireeye.com/blog/threat-research/2017/04/cve-2017-0199_useda.html",
              "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0199",
              "https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02",
              "https://www.mdsec.co.uk/2017/04/exploiting-cve-2017-0199-hta-handler-vulnerability/",
              "https://www.exploit-db.com/exploits/41934/",
              "https://www.exploit-db.com/exploits/42995/",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-0199",
              "https://nvd.nist.gov/vuln/detail/CVE-2017-0199"
            ]
          }
        ],
        "verification": [
          {
            "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。",
            "kind": "procedure",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2017/0xxx/CVE-2017-0199.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
              "https://www.cve.org/CVERecord?id=CVE-2017-0199",
              "http://www.securityfocus.com/bid/97498",
              "https://blog.nviso.be/2017/04/12/analysis-of-a-cve-2017-0199-malicious-rtf-document/",
              "http://rewtin.blogspot.nl/2017/04/cve-2017-0199-practical-exploitation-poc.html",
              "https://www.exploit-db.com/exploits/41894/",
              "https://www.fireeye.com/blog/threat-research/2017/04/cve-2017-0199_useda.html",
              "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0199",
              "https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02",
              "https://www.mdsec.co.uk/2017/04/exploiting-cve-2017-0199-hta-handler-vulnerability/",
              "https://www.exploit-db.com/exploits/41934/",
              "https://www.exploit-db.com/exploits/42995/",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-0199",
              "https://nvd.nist.gov/vuln/detail/CVE-2017-0199"
            ]
          }
        ],
        "unknowns": [
          "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。",
          "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。"
        ],
        "sources": [
          {
            "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2017/0xxx/CVE-2017-0199.json",
            "label": "CVE：microsoft"
          },
          {
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-0199",
            "label": "CISA KEV（悪用確認）"
          },
          {
            "url": "https://www.cve.org/CVERecord?id=CVE-2017-0199",
            "label": "CVE公式レコード"
          },
          {
            "url": "http://www.securityfocus.com/bid/97498",
            "label": "97498"
          },
          {
            "url": "https://blog.nviso.be/2017/04/12/analysis-of-a-cve-2017-0199-malicious-rtf-document/",
            "label": "CVE掲載の参考情報"
          },
          {
            "url": "http://rewtin.blogspot.nl/2017/04/cve-2017-0199-practical-exploitation-poc.html",
            "label": "CVE掲載の参考情報"
          },
          {
            "url": "https://www.exploit-db.com/exploits/41894/",
            "label": "41894"
          },
          {
            "url": "https://www.fireeye.com/blog/threat-research/2017/04/cve-2017-0199_useda.html",
            "label": "CVE掲載の参考情報"
          },
          {
            "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0199",
            "label": "CVE掲載の参考情報"
          },
          {
            "url": "https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02",
            "label": "CVE掲載の参考情報"
          },
          {
            "url": "https://www.mdsec.co.uk/2017/04/exploiting-cve-2017-0199-hta-handler-vulnerability/",
            "label": "CVE掲載の参考情報"
          },
          {
            "url": "https://www.exploit-db.com/exploits/41934/",
            "label": "41934"
          },
          {
            "url": "https://www.exploit-db.com/exploits/42995/",
            "label": "42995"
          },
          {
            "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-0199",
            "label": "CISAが示す関連情報"
          },
          {
            "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
            "label": "CISA：ソフトウェア更新の基本"
          }
        ],
        "evidence": [
          {
            "id": "E1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2017/0xxx/CVE-2017-0199.json",
            "sourceField": "/containers/cna/descriptions/0/value",
            "excerpt": "Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, Windows 8.1 allow remote attackers to execute arbitrary code via a crafted document, aka \"Microsoft Office/WordPad Remote Code Execution Vulnerability w/Windows API.\"",
            "language": "en",
            "representation": "source_excerpt"
          },
          {
            "id": "E2",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2017/0xxx/CVE-2017-0199.json",
            "sourceField": "/containers/cna/affected/0",
            "excerpt": "{\"product\":\"Office/WordPad\",\"vendor\":\"Microsoft Corporation\",\"versions\":[{\"status\":\"affected\",\"version\":\"Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, and Windows 8.1\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E3",
            "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-0199",
            "sourceField": "/sourceAction",
            "excerpt": "Apply updates per vendor instructions.",
            "language": null
          },
          {
            "id": "E4",
            "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-0199",
            "sourceField": "/exploitStatus",
            "excerpt": "{\"id\":\"CVE-2017-0199\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}",
            "language": "en",
            "representation": "normalized_feed_field"
          }
        ],
        "supportRequest": "件名：CVE-2017-0199（Office/WordPad）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・上記の製品（Office 2007 SP3、Office 2010 SP2、Office 2013 SP1、Office 2016、Windows Vista SP2、Windows Server 2008 SP2、Windows 7 SP1、Windows 8.1）が影響を受けます。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2017-0199",
        "publicationCheckVersion": "2026-10-23.1",
        "sourceNotices": [],
        "automation": {
          "status": "ready",
          "lastAttempt": "2026-10-23T03:46:24.488Z",
          "lastSuccess": "2026-10-23T03:46:24.488Z",
          "sourceCheckedAt": "2026-10-23T02:43:01.280Z",
          "errorCode": null
        },
        "glossary": [
          {
            "term": "任意のコード実行",
            "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。",
            "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html",
            "kind": "general_definition"
          }
        ]
      }
    },
    {
      "id": "CVE-2017-11774",
      "aliases": [],
      "title": "Microsoft Outlook：コード実行",
      "summary": "Microsoft Outlook 2010 SP2、Outlook 2013 SP1 および RT SP1、Outlook 2016 において、Microsoft Office がメモリ内のオブジェクトを処理する方法に起因し、攻撃者が任意のコマンドを実行できる脆弱性（「Microsoft Outlook Security Feature Bypass Vulnerability」）が存在します。",
      "risk": "攻撃者が任意のコマンドを実行できる可能性があります。",
      "product": "Microsoft Outlook",
      "category": "windows",
      "component": "package",
      "severity": "unknown",
      "cvss": null,
      "cvssVersion": null,
      "cvssSource": "microsoft",
      "cvssVector": null,
      "affected": [
        {
          "product": "Microsoft Outlook",
          "range": "Microsoft Outlook 2010 SP2"
        },
        {
          "product": "Microsoft Outlook",
          "range": "Outlook 2013 SP1 and RT SP1"
        },
        {
          "product": "Microsoft Outlook",
          "range": "Outlook 2016"
        }
      ],
      "fixed": [],
      "steps": [
        "ベンダーの指示に従って更新プログラムを適用してください。",
        "「CVE-2017-11774」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
        "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。"
      ],
      "references": [
        {
          "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2017/11xxx/CVE-2017-11774.json",
          "label": "CVE：microsoft"
        },
        {
          "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-11774",
          "label": "CISA KEV（悪用確認）"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-11774",
          "label": "CVE公式レコード"
        },
        {
          "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11774",
          "label": "CVE掲載の参考情報"
        },
        {
          "url": "http://www.securityfocus.com/bid/101098",
          "label": "101098"
        },
        {
          "url": "http://www.securitytracker.com/id/1039542",
          "label": "1039542"
        },
        {
          "url": "https://sensepost.com/blog/2017/outlook-home-page-another-ruler-vector/",
          "label": "CVE掲載の参考情報"
        },
        {
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-11774",
          "label": "CISAが示す関連情報"
        },
        {
          "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
          "label": "CISA：ソフトウェア更新の基本"
        }
      ],
      "publishedAt": "2017-10-13T13:00:00.000Z",
      "modifiedAt": "2025-10-21T23:55:31.465Z",
      "fetchedAt": "2026-10-23T02:43:01.687Z",
      "exploitStatus": "confirmed",
      "sources": [
        "CVE",
        "CISA KEV"
      ],
      "originalText": "Microsoft Outlook 2010 SP2, Outlook 2013 SP1 and RT SP1, and Outlook 2016 allow an attacker to execute arbitrary commands, due to how Microsoft Office handles objects in memory, aka \"Microsoft Outlook Security Feature Bypass Vulnerability.\"",
      "sourceTitle": "",
      "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。",
      "state": "published",
      "affectedDetails": [
        {
          "product": "Microsoft Outlook",
          "vendor": "Microsoft Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "Microsoft Outlook 2010 SP2"
            },
            {
              "status": "affected",
              "version": "Outlook 2013 SP1 and RT SP1"
            },
            {
              "status": "affected",
              "version": "Outlook 2016"
            }
          ]
        }
      ],
      "officialEvidence": {
        "schemaVersion": "1.0",
        "id": "CVE-2017-11774",
        "sourceType": "CVE",
        "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2017/11xxx/CVE-2017-11774.json",
        "fetchedAt": "2026-10-23T02:43:01.687Z",
        "publishedAt": "2017-10-13T13:00:00.000Z",
        "modifiedAt": "2025-10-21T23:55:31.465Z",
        "state": "published",
        "provider": "microsoft",
        "title": "",
        "descriptions": [
          {
            "lang": "en",
            "value": "Microsoft Outlook 2010 SP2, Outlook 2013 SP1 and RT SP1, and Outlook 2016 allow an attacker to execute arbitrary commands, due to how Microsoft Office handles objects in memory, aka \"Microsoft Outlook Security Feature Bypass Vulnerability.\"",
            "sourcePath": "/containers/cna/descriptions/0/value"
          }
        ],
        "affected": [
          {
            "vendor": "Microsoft Corporation",
            "product": "Microsoft Outlook",
            "sourcePath": "/containers/cna/affected/0",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/0/versions/0",
                "version": "Microsoft Outlook 2010 SP2",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/1",
                "version": "Outlook 2013 SP1 and RT SP1",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/2",
                "version": "Outlook 2016",
                "status": "affected"
              }
            ]
          }
        ],
        "solutions": [],
        "workarounds": [],
        "exploits": [],
        "rejectedReasons": [],
        "problemTypes": [
          {
            "cweId": "",
            "lang": "en",
            "description": "Security Feature Bypass",
            "sourcePath": "/containers/cna/problemTypes/0/descriptions/0"
          }
        ],
        "metrics": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "provider": "CISA-ADP",
            "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1"
          }
        ],
        "references": [
          {
            "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11774",
            "label": "CVE",
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/0"
          },
          {
            "url": "http://www.securityfocus.com/bid/101098",
            "label": "101098",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/1"
          },
          {
            "url": "http://www.securitytracker.com/id/1039542",
            "label": "1039542",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/2"
          },
          {
            "url": "https://sensepost.com/blog/2017/outlook-home-page-another-ruler-vector/",
            "label": "CVE",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/3"
          },
          {
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-11774",
            "label": "CISA-ADP",
            "tags": [
              "government-resource"
            ],
            "provider": "CISA-ADP",
            "sourcePath": "/containers/adp/1/references/0"
          }
        ],
        "snippets": [
          {
            "evidenceId": "official:/containers/cna/affected/0",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2017/11xxx/CVE-2017-11774.json",
            "sourcePath": "/containers/cna/affected/0",
            "text": "{\"product\":\"Microsoft Outlook\",\"vendor\":\"Microsoft Corporation\",\"versions\":[{\"status\":\"affected\",\"version\":\"Microsoft Outlook 2010 SP2\"},{\"status\":\"affected\",\"version\":\"Outlook 2013 SP1 and RT SP1\"},{\"status\":\"affected\",\"version\":\"Outlook 2016\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/descriptions/0/value",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2017/11xxx/CVE-2017-11774.json",
            "sourcePath": "/containers/cna/descriptions/0/value",
            "text": "Microsoft Outlook 2010 SP2, Outlook 2013 SP1 and RT SP1, and Outlook 2016 allow an attacker to execute arbitrary commands, due to how Microsoft Office handles objects in memory, aka \"Microsoft Outlook Security Feature Bypass Vulnerability.\"",
            "truncated": false,
            "representation": "source_excerpt"
          },
          {
            "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2017/11xxx/CVE-2017-11774.json",
            "sourcePath": "/containers/cna/problemTypes/0/descriptions/0",
            "text": "{\"description\":\"Security Feature Bypass\",\"lang\":\"en\",\"type\":\"text\"}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/adp/1/metrics/0/cvssV3_1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2017/11xxx/CVE-2017-11774.json",
            "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1",
            "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":7.8,\"attackVector\":\"LOCAL\",\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"REQUIRED\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"confidentialityImpact\":\"HIGH\"}",
            "truncated": false,
            "representation": "source_json"
          }
        ],
        "limits": {
          "completeness": "official_record",
          "truncatedFields": [],
          "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。"
        }
      },
      "sourceSnapshots": [
        {
          "source": "CVE",
          "modifiedAt": "2025-10-21T23:55:31.465Z",
          "fetchedAt": "2026-10-23T02:43:01.687Z",
          "state": "published"
        },
        {
          "source": "CISA KEV",
          "modifiedAt": "2021-11-03T00:00:00.000Z",
          "fetchedAt": "2026-10-23T02:17:50.489Z",
          "state": "published"
        }
      ],
      "sourceAction": "Apply updates per vendor instructions.",
      "sourceSummary": "Microsoft Outlookにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。",
      "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。",
      "guidance": {
        "schemaVersion": "1.0",
        "method": "automatic",
        "reviewedAt": null,
        "reviewState": "current",
        "generatedAt": "2026-10-23T03:46:27.917Z",
        "generatorVersion": "2026-10-23.3",
        "sourceFingerprint": "9aeba6d817541a4cdd9b15c9c33d8c580157bb4894ae172bf387fd7c88c2a371",
        "sourceModifiedAt": "2025-10-21T23:55:31.465Z",
        "model": "@cf/openai/gpt-oss-120b",
        "verificationMethod": "exact_source_excerpt_and_independent_semantic_check",
        "summary": "Microsoft Outlook 2010 SP2、Outlook 2013 SP1 および RT SP1、Outlook 2016 において、Microsoft Office がメモリ内のオブジェクトを処理する方法に起因し、攻撃者が任意のコマンドを実行できる脆弱性（「Microsoft Outlook Security Feature Bypass Vulnerability」）が存在します。",
        "risk": "攻撃者が任意のコマンドを実行できる可能性があります。",
        "summaryEvidenceIds": [
          "E1"
        ],
        "riskEvidenceIds": [
          "E1"
        ],
        "applicability": [
          {
            "text": "Microsoft Outlook 2010 SP2 が影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2017/11xxx/CVE-2017-11774.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "Outlook 2013 SP1 および RT SP1 が影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2017/11xxx/CVE-2017-11774.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "Outlook 2016 が影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2017/11xxx/CVE-2017-11774.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "公式の対象表：Microsoft Corporation / Microsoft Outlook。影響ありとして記載：Outlook 2016。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2017/11xxx/CVE-2017-11774.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。",
            "kind": "fact",
            "sourceUrls": [
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-11774"
            ],
            "evidenceIds": [
              "E4"
            ]
          }
        ],
        "versionChecks": [
          {
            "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2017/11xxx/CVE-2017-11774.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "「Microsoft Outlook」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
              "https://www.cve.org/CVERecord?id=CVE-2017-11774",
              "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11774",
              "http://www.securityfocus.com/bid/101098",
              "http://www.securitytracker.com/id/1039542",
              "https://sensepost.com/blog/2017/outlook-home-page-another-ruler-vector/",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-11774",
              "https://nvd.nist.gov/vuln/detail/CVE-2017-11774"
            ]
          }
        ],
        "actions": [
          {
            "text": "ベンダーの指示に従って更新プログラムを適用してください。",
            "kind": "fix",
            "sourceUrls": [
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-11774"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "「CVE-2017-11774」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cve.org/CVERecord?id=CVE-2017-11774",
              "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11774",
              "http://www.securityfocus.com/bid/101098",
              "http://www.securitytracker.com/id/1039542",
              "https://sensepost.com/blog/2017/outlook-home-page-another-ruler-vector/",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-11774",
              "https://nvd.nist.gov/vuln/detail/CVE-2017-11774"
            ]
          },
          {
            "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
              "https://www.cve.org/CVERecord?id=CVE-2017-11774",
              "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11774",
              "http://www.securityfocus.com/bid/101098",
              "http://www.securitytracker.com/id/1039542",
              "https://sensepost.com/blog/2017/outlook-home-page-another-ruler-vector/",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-11774",
              "https://nvd.nist.gov/vuln/detail/CVE-2017-11774"
            ]
          }
        ],
        "temporaryMitigations": [
          {
            "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cve.org/CVERecord?id=CVE-2017-11774",
              "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11774",
              "http://www.securityfocus.com/bid/101098",
              "http://www.securitytracker.com/id/1039542",
              "https://sensepost.com/blog/2017/outlook-home-page-another-ruler-vector/",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-11774",
              "https://nvd.nist.gov/vuln/detail/CVE-2017-11774"
            ]
          }
        ],
        "verification": [
          {
            "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。",
            "kind": "procedure",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2017/11xxx/CVE-2017-11774.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
              "https://www.cve.org/CVERecord?id=CVE-2017-11774",
              "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11774",
              "http://www.securityfocus.com/bid/101098",
              "http://www.securitytracker.com/id/1039542",
              "https://sensepost.com/blog/2017/outlook-home-page-another-ruler-vector/",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-11774",
              "https://nvd.nist.gov/vuln/detail/CVE-2017-11774"
            ]
          }
        ],
        "unknowns": [
          "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。",
          "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。"
        ],
        "sources": [
          {
            "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2017/11xxx/CVE-2017-11774.json",
            "label": "CVE：microsoft"
          },
          {
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-11774",
            "label": "CISA KEV（悪用確認）"
          },
          {
            "url": "https://www.cve.org/CVERecord?id=CVE-2017-11774",
            "label": "CVE公式レコード"
          },
          {
            "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11774",
            "label": "CVE掲載の参考情報"
          },
          {
            "url": "http://www.securityfocus.com/bid/101098",
            "label": "101098"
          },
          {
            "url": "http://www.securitytracker.com/id/1039542",
            "label": "1039542"
          },
          {
            "url": "https://sensepost.com/blog/2017/outlook-home-page-another-ruler-vector/",
            "label": "CVE掲載の参考情報"
          },
          {
            "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-11774",
            "label": "CISAが示す関連情報"
          },
          {
            "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
            "label": "CISA：ソフトウェア更新の基本"
          }
        ],
        "evidence": [
          {
            "id": "E1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2017/11xxx/CVE-2017-11774.json",
            "sourceField": "/containers/cna/descriptions/0/value",
            "excerpt": "Microsoft Outlook 2010 SP2, Outlook 2013 SP1 and RT SP1, and Outlook 2016 allow an attacker to execute arbitrary commands, due to how Microsoft Office handles objects in memory, aka \"Microsoft Outlook Security Feature Bypass Vulnerability.\"",
            "language": "en",
            "representation": "source_excerpt"
          },
          {
            "id": "E2",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2017/11xxx/CVE-2017-11774.json",
            "sourceField": "/containers/cna/affected/0",
            "excerpt": "{\"product\":\"Microsoft Outlook\",\"vendor\":\"Microsoft Corporation\",\"versions\":[{\"status\":\"affected\",\"version\":\"Microsoft Outlook 2010 SP2\"},{\"status\":\"affected\",\"version\":\"Outlook 2013 SP1 and RT SP1\"},{\"status\":\"affected\",\"version\":\"Outlook 2016\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E3",
            "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-11774",
            "sourceField": "/sourceAction",
            "excerpt": "Apply updates per vendor instructions.",
            "language": null
          },
          {
            "id": "E4",
            "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-11774",
            "sourceField": "/exploitStatus",
            "excerpt": "{\"id\":\"CVE-2017-11774\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}",
            "language": "en",
            "representation": "normalized_feed_field"
          }
        ],
        "supportRequest": "件名：CVE-2017-11774（Microsoft Outlook）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Microsoft Outlook 2010 SP2 が影響を受けます。\n・Outlook 2013 SP1 および RT SP1 が影響を受けます。\n・Outlook 2016 が影響を受けます。\n・公式の対象表：Microsoft Corporation / Microsoft Outlook。影響ありとして記載：Outlook 2016。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2017-11774",
        "publicationCheckVersion": "2026-10-23.1",
        "sourceNotices": [],
        "automation": {
          "status": "ready",
          "lastAttempt": "2026-10-23T03:46:27.917Z",
          "lastSuccess": "2026-10-23T03:46:27.917Z",
          "sourceCheckedAt": "2026-10-23T02:43:01.687Z",
          "errorCode": null
        },
        "glossary": []
      }
    },
    {
      "id": "CVE-2017-11882",
      "aliases": [],
      "title": "Microsoft Office：コード実行",
      "summary": "Microsoft Office 2007 Service Pack 3、Microsoft Office 2010 Service Pack 2、Microsoft Office 2013 Service Pack 1、Microsoft Office 2016 において、メモリ内のオブジェクトを適切に処理できないため、攻撃者が現在のユーザー権限で任意のコードを実行できる可能性があります。",
      "risk": "攻撃者が現在のユーザー権限で任意のコードを実行できるため、システムが不正に操作される可能性があります。",
      "product": "Microsoft Office",
      "category": "windows",
      "component": "package",
      "severity": "unknown",
      "cvss": null,
      "cvssVersion": null,
      "cvssSource": "microsoft",
      "cvssVector": null,
      "affected": [
        {
          "product": "Microsoft Office",
          "range": "Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, Microsoft Office 2016"
        }
      ],
      "fixed": [],
      "steps": [
        "ベンダーの指示に従って更新プログラムを適用してください。",
        "「CVE-2017-11882」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
        "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。"
      ],
      "references": [
        {
          "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2017/11xxx/CVE-2017-11882.json",
          "label": "CVE：microsoft"
        },
        {
          "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-11882",
          "label": "CISA KEV（悪用確認）"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-11882",
          "label": "CVE公式レコード"
        },
        {
          "url": "https://github.com/embedi/CVE-2017-11882",
          "label": "CVE掲載の参考情報"
        },
        {
          "url": "https://github.com/unamer/CVE-2017-11882",
          "label": "CVE掲載の参考情報"
        },
        {
          "url": "http://reversingminds-blog.logdown.com/posts/3907313-fileless-attack-in-word-without-macros-cve-2017-11882",
          "label": "CVE掲載の参考情報"
        },
        {
          "url": "https://github.com/rxwx/CVE-2017-11882",
          "label": "CVE掲載の参考情報"
        },
        {
          "url": "http://www.securityfocus.com/bid/101757",
          "label": "101757"
        },
        {
          "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11882",
          "label": "CVE掲載の参考情報"
        },
        {
          "url": "https://researchcenter.paloaltonetworks.com/2017/12/unit42-analysis-of-cve-2017-11882-exploit-in-the-wild/",
          "label": "CVE掲載の参考情報"
        },
        {
          "url": "http://www.securitytracker.com/id/1039783",
          "label": "1039783"
        },
        {
          "url": "https://www.kb.cert.org/vuls/id/421280",
          "label": "VU#421280"
        },
        {
          "url": "https://0patch.blogspot.com/2017/11/did-microsoft-just-manually-patch-their.html",
          "label": "CVE掲載の参考情報"
        },
        {
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-11882",
          "label": "CISAが示す関連情報"
        },
        {
          "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
          "label": "CISA：ソフトウェア更新の基本"
        }
      ],
      "publishedAt": "2017-11-15T03:00:00.000Z",
      "modifiedAt": "2025-10-21T23:55:30.163Z",
      "fetchedAt": "2026-10-23T02:43:01.773Z",
      "exploitStatus": "confirmed",
      "sources": [
        "CVE",
        "CISA KEV"
      ],
      "originalText": "Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and Microsoft Office 2016 allow an attacker to run arbitrary code in the context of the current user by failing to properly handle objects in memory, aka \"Microsoft Office Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-11884.",
      "sourceTitle": "",
      "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。",
      "state": "published",
      "affectedDetails": [
        {
          "product": "Microsoft Office",
          "vendor": "Microsoft Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, Microsoft Office 2016"
            }
          ]
        }
      ],
      "officialEvidence": {
        "schemaVersion": "1.0",
        "id": "CVE-2017-11882",
        "sourceType": "CVE",
        "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2017/11xxx/CVE-2017-11882.json",
        "fetchedAt": "2026-10-23T02:43:01.773Z",
        "publishedAt": "2017-11-15T03:00:00.000Z",
        "modifiedAt": "2025-10-21T23:55:30.163Z",
        "state": "published",
        "provider": "microsoft",
        "title": "",
        "descriptions": [
          {
            "lang": "en",
            "value": "Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and Microsoft Office 2016 allow an attacker to run arbitrary code in the context of the current user by failing to properly handle objects in memory, aka \"Microsoft Office Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-11884.",
            "sourcePath": "/containers/cna/descriptions/0/value"
          }
        ],
        "affected": [
          {
            "vendor": "Microsoft Corporation",
            "product": "Microsoft Office",
            "sourcePath": "/containers/cna/affected/0",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/0/versions/0",
                "version": "Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, Microsoft Office 2016",
                "status": "affected"
              }
            ]
          }
        ],
        "solutions": [],
        "workarounds": [],
        "exploits": [],
        "rejectedReasons": [],
        "problemTypes": [
          {
            "cweId": "",
            "lang": "en",
            "description": "Remote Code Execution",
            "sourcePath": "/containers/cna/problemTypes/0/descriptions/0"
          }
        ],
        "metrics": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "provider": "CISA-ADP",
            "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1"
          }
        ],
        "references": [
          {
            "url": "https://github.com/embedi/CVE-2017-11882",
            "label": "CVE",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/0"
          },
          {
            "url": "https://github.com/unamer/CVE-2017-11882",
            "label": "CVE",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/1"
          },
          {
            "url": "http://reversingminds-blog.logdown.com/posts/3907313-fileless-attack-in-word-without-macros-cve-2017-11882",
            "label": "CVE",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/2"
          },
          {
            "url": "https://github.com/rxwx/CVE-2017-11882",
            "label": "CVE",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/3"
          },
          {
            "url": "http://www.securityfocus.com/bid/101757",
            "label": "101757",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/4"
          },
          {
            "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11882",
            "label": "CVE",
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/5"
          },
          {
            "url": "https://researchcenter.paloaltonetworks.com/2017/12/unit42-analysis-of-cve-2017-11882-exploit-in-the-wild/",
            "label": "CVE",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/6"
          },
          {
            "url": "http://www.securitytracker.com/id/1039783",
            "label": "1039783",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/7"
          },
          {
            "url": "https://www.kb.cert.org/vuls/id/421280",
            "label": "VU#421280",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/8"
          },
          {
            "url": "https://0patch.blogspot.com/2017/11/did-microsoft-just-manually-patch-their.html",
            "label": "CVE",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/9"
          },
          {
            "url": "https://0patch.blogspot.com/2017/11/official-patch-for-cve-2017-11882-meets.html",
            "label": "CVE",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/10"
          },
          {
            "url": "https://github.com/0x09AL/CVE-2017-11882-metasploit",
            "label": "CVE",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/11"
          },
          {
            "url": "https://www.exploit-db.com/exploits/43163/",
            "label": "43163",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/12"
          },
          {
            "url": "https://web.archive.org/web/20181104111128/https://embedi.com/blog/skeleton-closet-ms-office-vulnerability-you-didnt-know-about/",
            "label": "CVE",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/13"
          },
          {
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-11882",
            "label": "CISA-ADP",
            "tags": [
              "government-resource"
            ],
            "provider": "CISA-ADP",
            "sourcePath": "/containers/adp/1/references/0"
          }
        ],
        "snippets": [
          {
            "evidenceId": "official:/containers/cna/affected/0",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2017/11xxx/CVE-2017-11882.json",
            "sourcePath": "/containers/cna/affected/0",
            "text": "{\"product\":\"Microsoft Office\",\"vendor\":\"Microsoft Corporation\",\"versions\":[{\"status\":\"affected\",\"version\":\"Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, Microsoft Office 2016\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/descriptions/0/value",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2017/11xxx/CVE-2017-11882.json",
            "sourcePath": "/containers/cna/descriptions/0/value",
            "text": "Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and Microsoft Office 2016 allow an attacker to run arbitrary code in the context of the current user by failing to properly handle objects in memory, aka \"Microsoft Office Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-11884.",
            "truncated": false,
            "representation": "source_excerpt"
          },
          {
            "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2017/11xxx/CVE-2017-11882.json",
            "sourcePath": "/containers/cna/problemTypes/0/descriptions/0",
            "text": "{\"description\":\"Remote Code Execution\",\"lang\":\"en\",\"type\":\"text\"}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/adp/1/metrics/0/cvssV3_1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2017/11xxx/CVE-2017-11882.json",
            "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1",
            "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":7.8,\"attackVector\":\"LOCAL\",\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"REQUIRED\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"confidentialityImpact\":\"HIGH\"}",
            "truncated": false,
            "representation": "source_json"
          }
        ],
        "limits": {
          "completeness": "official_record",
          "truncatedFields": [],
          "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。"
        }
      },
      "sourceSnapshots": [
        {
          "source": "CVE",
          "modifiedAt": "2025-10-21T23:55:30.163Z",
          "fetchedAt": "2026-10-23T02:43:01.773Z",
          "state": "published"
        },
        {
          "source": "CISA KEV",
          "modifiedAt": "2021-11-03T00:00:00.000Z",
          "fetchedAt": "2026-10-23T02:17:50.489Z",
          "state": "published"
        }
      ],
      "sourceAction": "Apply updates per vendor instructions.",
      "sourceSummary": "Microsoft Officeにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。",
      "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。",
      "guidance": {
        "schemaVersion": "1.0",
        "method": "automatic",
        "reviewedAt": null,
        "reviewState": "current",
        "generatedAt": "2026-10-23T03:46:27.969Z",
        "generatorVersion": "2026-10-23.3",
        "sourceFingerprint": "25b023655880ede162fb67d9550a69768d8de5cf8d76b9c2912d8cddde8c18db",
        "sourceModifiedAt": "2025-10-21T23:55:30.163Z",
        "model": "@cf/openai/gpt-oss-120b",
        "verificationMethod": "exact_source_excerpt_and_independent_semantic_check",
        "summary": "Microsoft Office 2007 Service Pack 3、Microsoft Office 2010 Service Pack 2、Microsoft Office 2013 Service Pack 1、Microsoft Office 2016 において、メモリ内のオブジェクトを適切に処理できないため、攻撃者が現在のユーザー権限で任意のコードを実行できる可能性があります。",
        "risk": "攻撃者が現在のユーザー権限で任意のコードを実行できるため、システムが不正に操作される可能性があります。",
        "summaryEvidenceIds": [
          "E1"
        ],
        "riskEvidenceIds": [
          "E2"
        ],
        "applicability": [
          {
            "text": "影響を受ける製品は、Microsoft Office 2007 Service Pack 3、Microsoft Office 2010 Service Pack 2、Microsoft Office 2013 Service Pack 1、Microsoft Office 2016 です。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2017/11xxx/CVE-2017-11882.json"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。",
            "kind": "fact",
            "sourceUrls": [
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-11882"
            ],
            "evidenceIds": [
              "E5"
            ]
          }
        ],
        "versionChecks": [
          {
            "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2017/11xxx/CVE-2017-11882.json"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "「Microsoft Office」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
              "https://www.cve.org/CVERecord?id=CVE-2017-11882",
              "https://github.com/embedi/CVE-2017-11882",
              "https://github.com/unamer/CVE-2017-11882",
              "http://reversingminds-blog.logdown.com/posts/3907313-fileless-attack-in-word-without-macros-cve-2017-11882",
              "https://github.com/rxwx/CVE-2017-11882",
              "http://www.securityfocus.com/bid/101757",
              "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11882",
              "https://researchcenter.paloaltonetworks.com/2017/12/unit42-analysis-of-cve-2017-11882-exploit-in-the-wild/",
              "http://www.securitytracker.com/id/1039783",
              "https://www.kb.cert.org/vuls/id/421280",
              "https://0patch.blogspot.com/2017/11/did-microsoft-just-manually-patch-their.html",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-11882",
              "https://nvd.nist.gov/vuln/detail/CVE-2017-11882"
            ]
          }
        ],
        "actions": [
          {
            "text": "ベンダーの指示に従って更新プログラムを適用してください。",
            "kind": "fix",
            "sourceUrls": [
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-11882"
            ],
            "evidenceIds": [
              "E4"
            ]
          },
          {
            "text": "「CVE-2017-11882」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cve.org/CVERecord?id=CVE-2017-11882",
              "https://github.com/embedi/CVE-2017-11882",
              "https://github.com/unamer/CVE-2017-11882",
              "http://reversingminds-blog.logdown.com/posts/3907313-fileless-attack-in-word-without-macros-cve-2017-11882",
              "https://github.com/rxwx/CVE-2017-11882",
              "http://www.securityfocus.com/bid/101757",
              "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11882",
              "https://researchcenter.paloaltonetworks.com/2017/12/unit42-analysis-of-cve-2017-11882-exploit-in-the-wild/",
              "http://www.securitytracker.com/id/1039783",
              "https://www.kb.cert.org/vuls/id/421280",
              "https://0patch.blogspot.com/2017/11/did-microsoft-just-manually-patch-their.html",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-11882",
              "https://nvd.nist.gov/vuln/detail/CVE-2017-11882"
            ]
          },
          {
            "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
              "https://www.cve.org/CVERecord?id=CVE-2017-11882",
              "https://github.com/embedi/CVE-2017-11882",
              "https://github.com/unamer/CVE-2017-11882",
              "http://reversingminds-blog.logdown.com/posts/3907313-fileless-attack-in-word-without-macros-cve-2017-11882",
              "https://github.com/rxwx/CVE-2017-11882",
              "http://www.securityfocus.com/bid/101757",
              "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11882",
              "https://researchcenter.paloaltonetworks.com/2017/12/unit42-analysis-of-cve-2017-11882-exploit-in-the-wild/",
              "http://www.securitytracker.com/id/1039783",
              "https://www.kb.cert.org/vuls/id/421280",
              "https://0patch.blogspot.com/2017/11/did-microsoft-just-manually-patch-their.html",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-11882",
              "https://nvd.nist.gov/vuln/detail/CVE-2017-11882"
            ]
          }
        ],
        "temporaryMitigations": [
          {
            "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cve.org/CVERecord?id=CVE-2017-11882",
              "https://github.com/embedi/CVE-2017-11882",
              "https://github.com/unamer/CVE-2017-11882",
              "http://reversingminds-blog.logdown.com/posts/3907313-fileless-attack-in-word-without-macros-cve-2017-11882",
              "https://github.com/rxwx/CVE-2017-11882",
              "http://www.securityfocus.com/bid/101757",
              "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11882",
              "https://researchcenter.paloaltonetworks.com/2017/12/unit42-analysis-of-cve-2017-11882-exploit-in-the-wild/",
              "http://www.securitytracker.com/id/1039783",
              "https://www.kb.cert.org/vuls/id/421280",
              "https://0patch.blogspot.com/2017/11/did-microsoft-just-manually-patch-their.html",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-11882",
              "https://nvd.nist.gov/vuln/detail/CVE-2017-11882"
            ]
          }
        ],
        "verification": [
          {
            "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。",
            "kind": "procedure",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2017/11xxx/CVE-2017-11882.json"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
              "https://www.cve.org/CVERecord?id=CVE-2017-11882",
              "https://github.com/embedi/CVE-2017-11882",
              "https://github.com/unamer/CVE-2017-11882",
              "http://reversingminds-blog.logdown.com/posts/3907313-fileless-attack-in-word-without-macros-cve-2017-11882",
              "https://github.com/rxwx/CVE-2017-11882",
              "http://www.securityfocus.com/bid/101757",
              "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11882",
              "https://researchcenter.paloaltonetworks.com/2017/12/unit42-analysis-of-cve-2017-11882-exploit-in-the-wild/",
              "http://www.securitytracker.com/id/1039783",
              "https://www.kb.cert.org/vuls/id/421280",
              "https://0patch.blogspot.com/2017/11/did-microsoft-just-manually-patch-their.html",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-11882",
              "https://nvd.nist.gov/vuln/detail/CVE-2017-11882"
            ]
          }
        ],
        "unknowns": [
          "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。",
          "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。"
        ],
        "sources": [
          {
            "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2017/11xxx/CVE-2017-11882.json",
            "label": "CVE：microsoft"
          },
          {
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-11882",
            "label": "CISA KEV（悪用確認）"
          },
          {
            "url": "https://www.cve.org/CVERecord?id=CVE-2017-11882",
            "label": "CVE公式レコード"
          },
          {
            "url": "https://github.com/embedi/CVE-2017-11882",
            "label": "CVE掲載の参考情報"
          },
          {
            "url": "https://github.com/unamer/CVE-2017-11882",
            "label": "CVE掲載の参考情報"
          },
          {
            "url": "http://reversingminds-blog.logdown.com/posts/3907313-fileless-attack-in-word-without-macros-cve-2017-11882",
            "label": "CVE掲載の参考情報"
          },
          {
            "url": "https://github.com/rxwx/CVE-2017-11882",
            "label": "CVE掲載の参考情報"
          },
          {
            "url": "http://www.securityfocus.com/bid/101757",
            "label": "101757"
          },
          {
            "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11882",
            "label": "CVE掲載の参考情報"
          },
          {
            "url": "https://researchcenter.paloaltonetworks.com/2017/12/unit42-analysis-of-cve-2017-11882-exploit-in-the-wild/",
            "label": "CVE掲載の参考情報"
          },
          {
            "url": "http://www.securitytracker.com/id/1039783",
            "label": "1039783"
          },
          {
            "url": "https://www.kb.cert.org/vuls/id/421280",
            "label": "VU#421280"
          },
          {
            "url": "https://0patch.blogspot.com/2017/11/did-microsoft-just-manually-patch-their.html",
            "label": "CVE掲載の参考情報"
          },
          {
            "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-11882",
            "label": "CISAが示す関連情報"
          },
          {
            "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
            "label": "CISA：ソフトウェア更新の基本"
          }
        ],
        "evidence": [
          {
            "id": "E1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2017/11xxx/CVE-2017-11882.json",
            "sourceField": "/containers/cna/descriptions/0/value",
            "excerpt": "Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and Microsoft Office 2016 allow an attacker to run arbitrary code in the context of the current user by failing to properly handle objects in memory, aka \"Microsoft Office Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-11884.",
            "language": "en",
            "representation": "source_excerpt"
          },
          {
            "id": "E2",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2017/11xxx/CVE-2017-11882.json",
            "sourceField": "/containers/cna/problemTypes/0/descriptions/0",
            "excerpt": "{\"description\":\"Remote Code Execution\",\"lang\":\"en\",\"type\":\"text\"}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E3",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2017/11xxx/CVE-2017-11882.json",
            "sourceField": "/containers/cna/affected/0",
            "excerpt": "{\"product\":\"Microsoft Office\",\"vendor\":\"Microsoft Corporation\",\"versions\":[{\"status\":\"affected\",\"version\":\"Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, Microsoft Office 2016\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E4",
            "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-11882",
            "sourceField": "/sourceAction",
            "excerpt": "Apply updates per vendor instructions.",
            "language": null
          },
          {
            "id": "E5",
            "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-11882",
            "sourceField": "/exploitStatus",
            "excerpt": "{\"id\":\"CVE-2017-11882\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}",
            "language": "en",
            "representation": "normalized_feed_field"
          }
        ],
        "supportRequest": "件名：CVE-2017-11882（Microsoft Office）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・影響を受ける製品は、Microsoft Office 2007 Service Pack 3、Microsoft Office 2010 Service Pack 2、Microsoft Office 2013 Service Pack 1、Microsoft Office 2016 です。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2017-11882",
        "publicationCheckVersion": "2026-10-23.1",
        "sourceNotices": [],
        "automation": {
          "status": "ready",
          "lastAttempt": "2026-10-23T03:46:27.969Z",
          "lastSuccess": "2026-10-23T03:46:27.969Z",
          "sourceCheckedAt": "2026-10-23T02:43:01.773Z",
          "errorCode": null
        },
        "glossary": [
          {
            "term": "任意のコード実行",
            "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。",
            "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html",
            "kind": "general_definition"
          }
        ]
      }
    },
    {
      "id": "CVE-2018-0798",
      "aliases": [],
      "title": "Equation Editor：コード実行",
      "summary": "Microsoft Office 2007、Microsoft Office 2010、Microsoft Office 2013、Microsoft Office 2016 に含まれる Equation Editor において、メモリ内のオブジェクト処理方法に起因するリモートコード実行の脆弱性（Microsoft Office Memory Corruption Vulnerability）があります。",
      "risk": "攻撃者が対象のコンピューター上で任意のコードを実行させられる可能性があります。",
      "product": "Equation Editor",
      "category": "windows",
      "component": "package",
      "severity": "unknown",
      "cvss": null,
      "cvssVersion": null,
      "cvssSource": "microsoft",
      "cvssVector": null,
      "affected": [
        {
          "product": "Equation Editor",
          "range": "Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016"
        }
      ],
      "fixed": [],
      "steps": [
        "ベンダーの指示に従って更新プログラムを適用する。",
        "「CVE-2018-0798」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
        "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。"
      ],
      "references": [
        {
          "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2018/0xxx/CVE-2018-0798.json",
          "label": "CVE：microsoft"
        },
        {
          "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-0798",
          "label": "CISA KEV（悪用確認）"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-0798",
          "label": "CVE公式レコード"
        },
        {
          "url": "http://www.securityfocus.com/bid/102370",
          "label": "102370"
        },
        {
          "url": "http://www.securitytracker.com/id/1040153",
          "label": "1040153"
        },
        {
          "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0798",
          "label": "CVE掲載の参考情報"
        },
        {
          "url": "https://0patch.blogspot.com/2018/01/bringing-abandoned-equation-editor-back.html",
          "label": "CVE掲載の参考情報"
        },
        {
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-0798",
          "label": "CISAが示す関連情報"
        },
        {
          "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
          "label": "CISA：ソフトウェア更新の基本"
        }
      ],
      "publishedAt": "2018-01-10T01:00:00.000Z",
      "modifiedAt": "2025-10-21T23:45:57.001Z",
      "fetchedAt": "2026-10-23T02:43:03.928Z",
      "exploitStatus": "confirmed",
      "sources": [
        "CVE",
        "CISA KEV"
      ],
      "originalText": "Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in memory, aka \"Microsoft Office Memory Corruption Vulnerability\".",
      "sourceTitle": "",
      "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。",
      "state": "published",
      "affectedDetails": [
        {
          "product": "Equation Editor",
          "vendor": "Microsoft Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016"
            }
          ]
        }
      ],
      "officialEvidence": {
        "schemaVersion": "1.0",
        "id": "CVE-2018-0798",
        "sourceType": "CVE",
        "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2018/0xxx/CVE-2018-0798.json",
        "fetchedAt": "2026-10-23T02:43:03.928Z",
        "publishedAt": "2018-01-10T01:00:00.000Z",
        "modifiedAt": "2025-10-21T23:45:57.001Z",
        "state": "published",
        "provider": "microsoft",
        "title": "",
        "descriptions": [
          {
            "lang": "en",
            "value": "Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in memory, aka \"Microsoft Office Memory Corruption Vulnerability\".",
            "sourcePath": "/containers/cna/descriptions/0/value"
          }
        ],
        "affected": [
          {
            "vendor": "Microsoft Corporation",
            "product": "Equation Editor",
            "sourcePath": "/containers/cna/affected/0",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/0/versions/0",
                "version": "Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016",
                "status": "affected"
              }
            ]
          }
        ],
        "solutions": [],
        "workarounds": [],
        "exploits": [],
        "rejectedReasons": [],
        "problemTypes": [
          {
            "cweId": "",
            "lang": "en",
            "description": "Remote Code Execution",
            "sourcePath": "/containers/cna/problemTypes/0/descriptions/0"
          }
        ],
        "metrics": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "provider": "CISA-ADP",
            "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1"
          }
        ],
        "references": [
          {
            "url": "http://www.securityfocus.com/bid/102370",
            "label": "102370",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/0"
          },
          {
            "url": "http://www.securitytracker.com/id/1040153",
            "label": "1040153",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/1"
          },
          {
            "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0798",
            "label": "CVE",
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/2"
          },
          {
            "url": "https://0patch.blogspot.com/2018/01/bringing-abandoned-equation-editor-back.html",
            "label": "CVE",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/3"
          },
          {
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-0798",
            "label": "CISA-ADP",
            "tags": [
              "government-resource"
            ],
            "provider": "CISA-ADP",
            "sourcePath": "/containers/adp/1/references/0"
          }
        ],
        "snippets": [
          {
            "evidenceId": "official:/containers/cna/affected/0",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2018/0xxx/CVE-2018-0798.json",
            "sourcePath": "/containers/cna/affected/0",
            "text": "{\"product\":\"Equation Editor\",\"vendor\":\"Microsoft Corporation\",\"versions\":[{\"status\":\"affected\",\"version\":\"Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/descriptions/0/value",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2018/0xxx/CVE-2018-0798.json",
            "sourcePath": "/containers/cna/descriptions/0/value",
            "text": "Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in memory, aka \"Microsoft Office Memory Corruption Vulnerability\".",
            "truncated": false,
            "representation": "source_excerpt"
          },
          {
            "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2018/0xxx/CVE-2018-0798.json",
            "sourcePath": "/containers/cna/problemTypes/0/descriptions/0",
            "text": "{\"description\":\"Remote Code Execution\",\"lang\":\"en\",\"type\":\"text\"}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/adp/1/metrics/0/cvssV3_1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2018/0xxx/CVE-2018-0798.json",
            "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1",
            "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":8.8,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"REQUIRED\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"confidentialityImpact\":\"HIGH\"}",
            "truncated": false,
            "representation": "source_json"
          }
        ],
        "limits": {
          "completeness": "official_record",
          "truncatedFields": [],
          "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。"
        }
      },
      "sourceSnapshots": [
        {
          "source": "CVE",
          "modifiedAt": "2025-10-21T23:45:57.001Z",
          "fetchedAt": "2026-10-23T02:43:03.928Z",
          "state": "published"
        },
        {
          "source": "CISA KEV",
          "modifiedAt": "2021-11-03T00:00:00.000Z",
          "fetchedAt": "2026-10-23T02:17:50.489Z",
          "state": "published"
        }
      ],
      "sourceAction": "Apply updates per vendor instructions.",
      "sourceSummary": "Equation Editorにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。",
      "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。",
      "guidance": {
        "schemaVersion": "1.0",
        "method": "automatic",
        "reviewedAt": null,
        "reviewState": "current",
        "generatedAt": "2026-10-23T03:46:33.867Z",
        "generatorVersion": "2026-10-23.3",
        "sourceFingerprint": "f7972e3a69ca73866472166b42189d21f39b5bd4135882b98b742cbf3aa0e188",
        "sourceModifiedAt": "2025-10-21T23:45:57.001Z",
        "model": "@cf/openai/gpt-oss-120b",
        "verificationMethod": "exact_source_excerpt_and_independent_semantic_check",
        "summary": "Microsoft Office 2007、Microsoft Office 2010、Microsoft Office 2013、Microsoft Office 2016 に含まれる Equation Editor において、メモリ内のオブジェクト処理方法に起因するリモートコード実行の脆弱性（Microsoft Office Memory Corruption Vulnerability）があります。",
        "risk": "攻撃者が対象のコンピューター上で任意のコードを実行させられる可能性があります。",
        "summaryEvidenceIds": [
          "E1"
        ],
        "riskEvidenceIds": [
          "E2"
        ],
        "applicability": [
          {
            "text": "Microsoft Office 2007 の Equation Editor が影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2018/0xxx/CVE-2018-0798.json"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "Microsoft Office 2010 の Equation Editor が影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2018/0xxx/CVE-2018-0798.json"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "Microsoft Office 2013 の Equation Editor が影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2018/0xxx/CVE-2018-0798.json"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "Microsoft Office 2016 の Equation Editor が影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2018/0xxx/CVE-2018-0798.json"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。",
            "kind": "fact",
            "sourceUrls": [
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-0798"
            ],
            "evidenceIds": [
              "E5"
            ]
          }
        ],
        "versionChecks": [
          {
            "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2018/0xxx/CVE-2018-0798.json"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "「Equation Editor」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
              "https://www.cve.org/CVERecord?id=CVE-2018-0798",
              "http://www.securityfocus.com/bid/102370",
              "http://www.securitytracker.com/id/1040153",
              "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0798",
              "https://0patch.blogspot.com/2018/01/bringing-abandoned-equation-editor-back.html",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-0798",
              "https://nvd.nist.gov/vuln/detail/CVE-2018-0798"
            ]
          }
        ],
        "actions": [
          {
            "text": "ベンダーの指示に従って更新プログラムを適用する。",
            "kind": "fix",
            "sourceUrls": [
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-0798"
            ],
            "evidenceIds": [
              "E4"
            ]
          },
          {
            "text": "「CVE-2018-0798」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cve.org/CVERecord?id=CVE-2018-0798",
              "http://www.securityfocus.com/bid/102370",
              "http://www.securitytracker.com/id/1040153",
              "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0798",
              "https://0patch.blogspot.com/2018/01/bringing-abandoned-equation-editor-back.html",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-0798",
              "https://nvd.nist.gov/vuln/detail/CVE-2018-0798"
            ]
          },
          {
            "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
              "https://www.cve.org/CVERecord?id=CVE-2018-0798",
              "http://www.securityfocus.com/bid/102370",
              "http://www.securitytracker.com/id/1040153",
              "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0798",
              "https://0patch.blogspot.com/2018/01/bringing-abandoned-equation-editor-back.html",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-0798",
              "https://nvd.nist.gov/vuln/detail/CVE-2018-0798"
            ]
          }
        ],
        "temporaryMitigations": [
          {
            "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cve.org/CVERecord?id=CVE-2018-0798",
              "http://www.securityfocus.com/bid/102370",
              "http://www.securitytracker.com/id/1040153",
              "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0798",
              "https://0patch.blogspot.com/2018/01/bringing-abandoned-equation-editor-back.html",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-0798",
              "https://nvd.nist.gov/vuln/detail/CVE-2018-0798"
            ]
          }
        ],
        "verification": [
          {
            "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。",
            "kind": "procedure",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2018/0xxx/CVE-2018-0798.json"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
              "https://www.cve.org/CVERecord?id=CVE-2018-0798",
              "http://www.securityfocus.com/bid/102370",
              "http://www.securitytracker.com/id/1040153",
              "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0798",
              "https://0patch.blogspot.com/2018/01/bringing-abandoned-equation-editor-back.html",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-0798",
              "https://nvd.nist.gov/vuln/detail/CVE-2018-0798"
            ]
          }
        ],
        "unknowns": [
          "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。",
          "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。"
        ],
        "sources": [
          {
            "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2018/0xxx/CVE-2018-0798.json",
            "label": "CVE：microsoft"
          },
          {
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-0798",
            "label": "CISA KEV（悪用確認）"
          },
          {
            "url": "https://www.cve.org/CVERecord?id=CVE-2018-0798",
            "label": "CVE公式レコード"
          },
          {
            "url": "http://www.securityfocus.com/bid/102370",
            "label": "102370"
          },
          {
            "url": "http://www.securitytracker.com/id/1040153",
            "label": "1040153"
          },
          {
            "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0798",
            "label": "CVE掲載の参考情報"
          },
          {
            "url": "https://0patch.blogspot.com/2018/01/bringing-abandoned-equation-editor-back.html",
            "label": "CVE掲載の参考情報"
          },
          {
            "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-0798",
            "label": "CISAが示す関連情報"
          },
          {
            "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
            "label": "CISA：ソフトウェア更新の基本"
          }
        ],
        "evidence": [
          {
            "id": "E1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2018/0xxx/CVE-2018-0798.json",
            "sourceField": "/containers/cna/descriptions/0/value",
            "excerpt": "Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in memory, aka \"Microsoft Office Memory Corruption Vulnerability\".",
            "language": "en",
            "representation": "source_excerpt"
          },
          {
            "id": "E2",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2018/0xxx/CVE-2018-0798.json",
            "sourceField": "/containers/cna/problemTypes/0/descriptions/0",
            "excerpt": "{\"description\":\"Remote Code Execution\",\"lang\":\"en\",\"type\":\"text\"}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E3",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2018/0xxx/CVE-2018-0798.json",
            "sourceField": "/containers/cna/affected/0",
            "excerpt": "{\"product\":\"Equation Editor\",\"vendor\":\"Microsoft Corporation\",\"versions\":[{\"status\":\"affected\",\"version\":\"Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E4",
            "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-0798",
            "sourceField": "/sourceAction",
            "excerpt": "Apply updates per vendor instructions.",
            "language": null
          },
          {
            "id": "E5",
            "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-0798",
            "sourceField": "/exploitStatus",
            "excerpt": "{\"id\":\"CVE-2018-0798\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}",
            "language": "en",
            "representation": "normalized_feed_field"
          }
        ],
        "supportRequest": "件名：CVE-2018-0798（Equation Editor）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Microsoft Office 2007 の Equation Editor が影響を受けます。\n・Microsoft Office 2010 の Equation Editor が影響を受けます。\n・Microsoft Office 2013 の Equation Editor が影響を受けます。\n・Microsoft Office 2016 の Equation Editor が影響を受けます。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2018-0798",
        "publicationCheckVersion": "2026-10-23.1",
        "sourceNotices": [],
        "automation": {
          "status": "ready",
          "lastAttempt": "2026-10-23T03:46:33.867Z",
          "lastSuccess": "2026-10-23T03:46:33.867Z",
          "sourceCheckedAt": "2026-10-23T02:43:03.928Z",
          "errorCode": null
        },
        "glossary": [
          {
            "term": "任意のコード実行",
            "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。",
            "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html",
            "kind": "general_definition"
          }
        ]
      }
    },
    {
      "id": "CVE-2018-0802",
      "aliases": [],
      "title": "Equation Editor：コード実行",
      "summary": "Microsoft Office 2007、Microsoft Office 2010、Microsoft Office 2013、Microsoft Office 2016 の Equation Editor は、メモリ内のオブジェクト処理方法に起因するリモートコード実行脆弱性があります。攻撃者はこの脆弱性を利用して、対象のコンピュータ上で任意のコードを実行できる可能性があります。この脆弱性は CVE-2018-0797 や CVE-2018-0812 とは別物です。",
      "risk": "攻撃者がリモートコード実行を行えるため、対象のコンピュータ上で任意のプログラムが実行される可能性があります。",
      "product": "Equation Editor",
      "category": "windows",
      "component": "package",
      "severity": "unknown",
      "cvss": null,
      "cvssVersion": null,
      "cvssSource": "microsoft",
      "cvssVector": null,
      "affected": [
        {
          "product": "Equation Editor",
          "range": "Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016"
        }
      ],
      "fixed": [],
      "steps": [
        "ベンダーの指示に従って更新プログラムを適用してください。",
        "「CVE-2018-0802」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
        "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。"
      ],
      "references": [
        {
          "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2018/0xxx/CVE-2018-0802.json",
          "label": "CVE：microsoft"
        },
        {
          "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-0802",
          "label": "CISA KEV（悪用確認）"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-0802",
          "label": "CVE公式レコード"
        },
        {
          "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0802",
          "label": "CVE掲載の参考情報"
        },
        {
          "url": "https://github.com/rxwx/CVE-2018-0802",
          "label": "CVE掲載の参考情報"
        },
        {
          "url": "http://www.securitytracker.com/id/1040153",
          "label": "1040153"
        },
        {
          "url": "https://0patch.blogspot.com/2018/01/the-bug-that-killed-equation-editor-how.html",
          "label": "CVE掲載の参考情報"
        },
        {
          "url": "http://www.securityfocus.com/bid/102347",
          "label": "102347"
        },
        {
          "url": "https://github.com/zldww2011/CVE-2018-0802_POC",
          "label": "CVE掲載の参考情報"
        },
        {
          "url": "https://research.checkpoint.com/another-office-equation-rce-vulnerability/",
          "label": "CVE掲載の参考情報"
        },
        {
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-0802",
          "label": "CISAが示す関連情報"
        },
        {
          "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
          "label": "CISA：ソフトウェア更新の基本"
        }
      ],
      "publishedAt": "2018-01-10T01:00:00.000Z",
      "modifiedAt": "2025-10-21T23:45:56.855Z",
      "fetchedAt": "2026-10-23T02:43:03.961Z",
      "exploitStatus": "confirmed",
      "sources": [
        "CVE",
        "CISA KEV"
      ],
      "originalText": "Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability due to the way objects are handled in memory, aka \"Microsoft Office Memory Corruption Vulnerability\". This CVE is unique from CVE-2018-0797 and CVE-2018-0812.",
      "sourceTitle": "",
      "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。",
      "state": "published",
      "affectedDetails": [
        {
          "product": "Equation Editor",
          "vendor": "Microsoft Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016"
            }
          ]
        }
      ],
      "officialEvidence": {
        "schemaVersion": "1.0",
        "id": "CVE-2018-0802",
        "sourceType": "CVE",
        "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2018/0xxx/CVE-2018-0802.json",
        "fetchedAt": "2026-10-23T02:43:03.961Z",
        "publishedAt": "2018-01-10T01:00:00.000Z",
        "modifiedAt": "2025-10-21T23:45:56.855Z",
        "state": "published",
        "provider": "microsoft",
        "title": "",
        "descriptions": [
          {
            "lang": "en",
            "value": "Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability due to the way objects are handled in memory, aka \"Microsoft Office Memory Corruption Vulnerability\". This CVE is unique from CVE-2018-0797 and CVE-2018-0812.",
            "sourcePath": "/containers/cna/descriptions/0/value"
          }
        ],
        "affected": [
          {
            "vendor": "Microsoft Corporation",
            "product": "Equation Editor",
            "sourcePath": "/containers/cna/affected/0",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/0/versions/0",
                "version": "Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016",
                "status": "affected"
              }
            ]
          }
        ],
        "solutions": [],
        "workarounds": [],
        "exploits": [],
        "rejectedReasons": [],
        "problemTypes": [
          {
            "cweId": "",
            "lang": "en",
            "description": "Remote Code Execution",
            "sourcePath": "/containers/cna/problemTypes/0/descriptions/0"
          }
        ],
        "metrics": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "provider": "CISA-ADP",
            "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1"
          }
        ],
        "references": [
          {
            "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0802",
            "label": "CVE",
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/0"
          },
          {
            "url": "https://github.com/rxwx/CVE-2018-0802",
            "label": "CVE",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/1"
          },
          {
            "url": "http://www.securitytracker.com/id/1040153",
            "label": "1040153",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/2"
          },
          {
            "url": "https://0patch.blogspot.com/2018/01/the-bug-that-killed-equation-editor-how.html",
            "label": "CVE",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/3"
          },
          {
            "url": "http://www.securityfocus.com/bid/102347",
            "label": "102347",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/4"
          },
          {
            "url": "https://github.com/zldww2011/CVE-2018-0802_POC",
            "label": "CVE",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/5"
          },
          {
            "url": "https://research.checkpoint.com/another-office-equation-rce-vulnerability/",
            "label": "CVE",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/6"
          },
          {
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-0802",
            "label": "CISA-ADP",
            "tags": [
              "government-resource"
            ],
            "provider": "CISA-ADP",
            "sourcePath": "/containers/adp/1/references/0"
          }
        ],
        "snippets": [
          {
            "evidenceId": "official:/containers/cna/affected/0",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2018/0xxx/CVE-2018-0802.json",
            "sourcePath": "/containers/cna/affected/0",
            "text": "{\"product\":\"Equation Editor\",\"vendor\":\"Microsoft Corporation\",\"versions\":[{\"status\":\"affected\",\"version\":\"Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/descriptions/0/value",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2018/0xxx/CVE-2018-0802.json",
            "sourcePath": "/containers/cna/descriptions/0/value",
            "text": "Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability due to the way objects are handled in memory, aka \"Microsoft Office Memory Corruption Vulnerability\". This CVE is unique from CVE-2018-0797 and CVE-2018-0812.",
            "truncated": false,
            "representation": "source_excerpt"
          },
          {
            "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2018/0xxx/CVE-2018-0802.json",
            "sourcePath": "/containers/cna/problemTypes/0/descriptions/0",
            "text": "{\"description\":\"Remote Code Execution\",\"lang\":\"en\",\"type\":\"text\"}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/adp/1/metrics/0/cvssV3_1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2018/0xxx/CVE-2018-0802.json",
            "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1",
            "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":7.8,\"attackVector\":\"LOCAL\",\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"REQUIRED\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"confidentialityImpact\":\"HIGH\"}",
            "truncated": false,
            "representation": "source_json"
          }
        ],
        "limits": {
          "completeness": "official_record",
          "truncatedFields": [],
          "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。"
        }
      },
      "sourceSnapshots": [
        {
          "source": "CVE",
          "modifiedAt": "2025-10-21T23:45:56.855Z",
          "fetchedAt": "2026-10-23T02:43:03.961Z",
          "state": "published"
        },
        {
          "source": "CISA KEV",
          "modifiedAt": "2021-11-03T00:00:00.000Z",
          "fetchedAt": "2026-10-23T02:17:50.489Z",
          "state": "published"
        }
      ],
      "sourceAction": "Apply updates per vendor instructions.",
      "sourceSummary": "Equation Editorにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。",
      "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。",
      "guidance": {
        "schemaVersion": "1.0",
        "method": "automatic",
        "reviewedAt": null,
        "reviewState": "current",
        "generatedAt": "2026-10-23T03:46:34.664Z",
        "generatorVersion": "2026-10-23.3",
        "sourceFingerprint": "a233ca5b579a49447d5d21d27e4a4d3d45d22b1fa937830c89220864b1ef7f16",
        "sourceModifiedAt": "2025-10-21T23:45:56.855Z",
        "model": "@cf/openai/gpt-oss-120b",
        "verificationMethod": "exact_source_excerpt_and_independent_semantic_check",
        "summary": "Microsoft Office 2007、Microsoft Office 2010、Microsoft Office 2013、Microsoft Office 2016 の Equation Editor は、メモリ内のオブジェクト処理方法に起因するリモートコード実行脆弱性があります。攻撃者はこの脆弱性を利用して、対象のコンピュータ上で任意のコードを実行できる可能性があります。この脆弱性は CVE-2018-0797 や CVE-2018-0812 とは別物です。",
        "risk": "攻撃者がリモートコード実行を行えるため、対象のコンピュータ上で任意のプログラムが実行される可能性があります。",
        "summaryEvidenceIds": [
          "E1"
        ],
        "riskEvidenceIds": [
          "E2"
        ],
        "applicability": [
          {
            "text": "Microsoft Office 2007、Microsoft Office 2010、Microsoft Office 2013、Microsoft Office 2016 の Equation Editor が影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2018/0xxx/CVE-2018-0802.json"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。",
            "kind": "fact",
            "sourceUrls": [
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-0802"
            ],
            "evidenceIds": [
              "E5"
            ]
          }
        ],
        "versionChecks": [
          {
            "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2018/0xxx/CVE-2018-0802.json"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "「Equation Editor」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
              "https://www.cve.org/CVERecord?id=CVE-2018-0802",
              "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0802",
              "https://github.com/rxwx/CVE-2018-0802",
              "http://www.securitytracker.com/id/1040153",
              "https://0patch.blogspot.com/2018/01/the-bug-that-killed-equation-editor-how.html",
              "http://www.securityfocus.com/bid/102347",
              "https://github.com/zldww2011/CVE-2018-0802_POC",
              "https://research.checkpoint.com/another-office-equation-rce-vulnerability/",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-0802",
              "https://nvd.nist.gov/vuln/detail/CVE-2018-0802"
            ]
          }
        ],
        "actions": [
          {
            "text": "ベンダーの指示に従って更新プログラムを適用してください。",
            "kind": "fix",
            "sourceUrls": [
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-0802"
            ],
            "evidenceIds": [
              "E4"
            ]
          },
          {
            "text": "「CVE-2018-0802」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cve.org/CVERecord?id=CVE-2018-0802",
              "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0802",
              "https://github.com/rxwx/CVE-2018-0802",
              "http://www.securitytracker.com/id/1040153",
              "https://0patch.blogspot.com/2018/01/the-bug-that-killed-equation-editor-how.html",
              "http://www.securityfocus.com/bid/102347",
              "https://github.com/zldww2011/CVE-2018-0802_POC",
              "https://research.checkpoint.com/another-office-equation-rce-vulnerability/",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-0802",
              "https://nvd.nist.gov/vuln/detail/CVE-2018-0802"
            ]
          },
          {
            "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
              "https://www.cve.org/CVERecord?id=CVE-2018-0802",
              "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0802",
              "https://github.com/rxwx/CVE-2018-0802",
              "http://www.securitytracker.com/id/1040153",
              "https://0patch.blogspot.com/2018/01/the-bug-that-killed-equation-editor-how.html",
              "http://www.securityfocus.com/bid/102347",
              "https://github.com/zldww2011/CVE-2018-0802_POC",
              "https://research.checkpoint.com/another-office-equation-rce-vulnerability/",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-0802",
              "https://nvd.nist.gov/vuln/detail/CVE-2018-0802"
            ]
          }
        ],
        "temporaryMitigations": [
          {
            "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cve.org/CVERecord?id=CVE-2018-0802",
              "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0802",
              "https://github.com/rxwx/CVE-2018-0802",
              "http://www.securitytracker.com/id/1040153",
              "https://0patch.blogspot.com/2018/01/the-bug-that-killed-equation-editor-how.html",
              "http://www.securityfocus.com/bid/102347",
              "https://github.com/zldww2011/CVE-2018-0802_POC",
              "https://research.checkpoint.com/another-office-equation-rce-vulnerability/",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-0802",
              "https://nvd.nist.gov/vuln/detail/CVE-2018-0802"
            ]
          }
        ],
        "verification": [
          {
            "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。",
            "kind": "procedure",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2018/0xxx/CVE-2018-0802.json"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
              "https://www.cve.org/CVERecord?id=CVE-2018-0802",
              "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0802",
              "https://github.com/rxwx/CVE-2018-0802",
              "http://www.securitytracker.com/id/1040153",
              "https://0patch.blogspot.com/2018/01/the-bug-that-killed-equation-editor-how.html",
              "http://www.securityfocus.com/bid/102347",
              "https://github.com/zldww2011/CVE-2018-0802_POC",
              "https://research.checkpoint.com/another-office-equation-rce-vulnerability/",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-0802",
              "https://nvd.nist.gov/vuln/detail/CVE-2018-0802"
            ]
          }
        ],
        "unknowns": [
          "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。",
          "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。"
        ],
        "sources": [
          {
            "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2018/0xxx/CVE-2018-0802.json",
            "label": "CVE：microsoft"
          },
          {
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-0802",
            "label": "CISA KEV（悪用確認）"
          },
          {
            "url": "https://www.cve.org/CVERecord?id=CVE-2018-0802",
            "label": "CVE公式レコード"
          },
          {
            "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0802",
            "label": "CVE掲載の参考情報"
          },
          {
            "url": "https://github.com/rxwx/CVE-2018-0802",
            "label": "CVE掲載の参考情報"
          },
          {
            "url": "http://www.securitytracker.com/id/1040153",
            "label": "1040153"
          },
          {
            "url": "https://0patch.blogspot.com/2018/01/the-bug-that-killed-equation-editor-how.html",
            "label": "CVE掲載の参考情報"
          },
          {
            "url": "http://www.securityfocus.com/bid/102347",
            "label": "102347"
          },
          {
            "url": "https://github.com/zldww2011/CVE-2018-0802_POC",
            "label": "CVE掲載の参考情報"
          },
          {
            "url": "https://research.checkpoint.com/another-office-equation-rce-vulnerability/",
            "label": "CVE掲載の参考情報"
          },
          {
            "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-0802",
            "label": "CISAが示す関連情報"
          },
          {
            "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
            "label": "CISA：ソフトウェア更新の基本"
          }
        ],
        "evidence": [
          {
            "id": "E1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2018/0xxx/CVE-2018-0802.json",
            "sourceField": "/containers/cna/descriptions/0/value",
            "excerpt": "Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability due to the way objects are handled in memory, aka \"Microsoft Office Memory Corruption Vulnerability\". This CVE is unique from CVE-2018-0797 and CVE-2018-0812.",
            "language": "en",
            "representation": "source_excerpt"
          },
          {
            "id": "E2",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2018/0xxx/CVE-2018-0802.json",
            "sourceField": "/containers/cna/problemTypes/0/descriptions/0",
            "excerpt": "{\"description\":\"Remote Code Execution\",\"lang\":\"en\",\"type\":\"text\"}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E3",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2018/0xxx/CVE-2018-0802.json",
            "sourceField": "/containers/cna/affected/0",
            "excerpt": "{\"product\":\"Equation Editor\",\"vendor\":\"Microsoft Corporation\",\"versions\":[{\"status\":\"affected\",\"version\":\"Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E4",
            "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-0802",
            "sourceField": "/sourceAction",
            "excerpt": "Apply updates per vendor instructions.",
            "language": null
          },
          {
            "id": "E5",
            "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-0802",
            "sourceField": "/exploitStatus",
            "excerpt": "{\"id\":\"CVE-2018-0802\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}",
            "language": "en",
            "representation": "normalized_feed_field"
          }
        ],
        "supportRequest": "件名：CVE-2018-0802（Equation Editor）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Microsoft Office 2007、Microsoft Office 2010、Microsoft Office 2013、Microsoft Office 2016 の Equation Editor が影響を受けます。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2018-0802",
        "publicationCheckVersion": "2026-10-23.1",
        "sourceNotices": [],
        "automation": {
          "status": "ready",
          "lastAttempt": "2026-10-23T03:46:34.664Z",
          "lastSuccess": "2026-10-23T03:46:34.664Z",
          "sourceCheckedAt": "2026-10-23T02:43:03.961Z",
          "errorCode": null
        },
        "glossary": [
          {
            "term": "任意のコード実行",
            "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。",
            "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html",
            "kind": "general_definition"
          }
        ]
      }
    },
    {
      "id": "CVE-2019-0604",
      "aliases": [],
      "title": "Microsoft SharePoint Server / Microsoft SharePoint Foundation / Microsoft SharePoint Enterprise Server：コード実行",
      "summary": "Microsoft SharePoint において、アプリケーション パッケージのソース マークアップをチェックしないため、リモートからコードを実行される脆弱性が存在します。",
      "risk": "攻撃者がサーバー上で任意のコードを実行できる可能性があります。",
      "product": "Microsoft SharePoint Server / Microsoft SharePoint Foundation / Microsoft SharePoint Enterprise Server",
      "category": "windows",
      "component": "package",
      "severity": "unknown",
      "cvss": null,
      "cvssVersion": null,
      "cvssSource": "microsoft",
      "cvssVector": null,
      "affected": [
        {
          "product": "Microsoft SharePoint Server",
          "range": "2010 Service Pack 2"
        },
        {
          "product": "Microsoft SharePoint Server",
          "range": "2019"
        },
        {
          "product": "Microsoft SharePoint Foundation",
          "range": "2013 Service Pack 1"
        },
        {
          "product": "Microsoft SharePoint Enterprise Server",
          "range": "2016"
        }
      ],
      "fixed": [],
      "steps": [
        "ベンダーの指示に従って更新プログラムを適用してください。",
        "「CVE-2019-0604」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
        "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。"
      ],
      "references": [
        {
          "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0604.json",
          "label": "CVE：microsoft"
        },
        {
          "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0604",
          "label": "CISA KEV（悪用確認）"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-0604",
          "label": "CVE公式レコード"
        },
        {
          "url": "http://www.securityfocus.com/bid/106914",
          "label": "106914"
        },
        {
          "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0604",
          "label": "CVE掲載の参考情報"
        },
        {
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0604",
          "label": "CISAが示す関連情報"
        },
        {
          "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
          "label": "CISA：ソフトウェア更新の基本"
        }
      ],
      "publishedAt": "2019-03-06T00:00:00.000Z",
      "modifiedAt": "2025-10-21T23:45:42.715Z",
      "fetchedAt": "2026-10-23T02:43:06.055Z",
      "exploitStatus": "confirmed",
      "sources": [
        "CVE",
        "CISA KEV"
      ],
      "originalText": "A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0594.",
      "sourceTitle": "",
      "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。",
      "state": "published",
      "affectedDetails": [
        {
          "product": "Microsoft SharePoint Server",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "2010 Service Pack 2"
            },
            {
              "status": "affected",
              "version": "2019"
            }
          ]
        },
        {
          "product": "Microsoft SharePoint Foundation",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "2013 Service Pack 1"
            }
          ]
        },
        {
          "product": "Microsoft SharePoint Enterprise Server",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "2016"
            }
          ]
        }
      ],
      "officialEvidence": {
        "schemaVersion": "1.0",
        "id": "CVE-2019-0604",
        "sourceType": "CVE",
        "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0604.json",
        "fetchedAt": "2026-10-23T02:43:06.055Z",
        "publishedAt": "2019-03-06T00:00:00.000Z",
        "modifiedAt": "2025-10-21T23:45:42.715Z",
        "state": "published",
        "provider": "microsoft",
        "title": "",
        "descriptions": [
          {
            "lang": "en",
            "value": "A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0594.",
            "sourcePath": "/containers/cna/descriptions/0/value"
          }
        ],
        "affected": [
          {
            "vendor": "Microsoft",
            "product": "Microsoft SharePoint Server",
            "sourcePath": "/containers/cna/affected/0",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/0/versions/0",
                "version": "2010 Service Pack 2",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/1",
                "version": "2019",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft SharePoint Foundation",
            "sourcePath": "/containers/cna/affected/1",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/1/versions/0",
                "version": "2013 Service Pack 1",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft SharePoint Enterprise Server",
            "sourcePath": "/containers/cna/affected/2",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/2/versions/0",
                "version": "2016",
                "status": "affected"
              }
            ]
          }
        ],
        "solutions": [],
        "workarounds": [],
        "exploits": [],
        "rejectedReasons": [],
        "problemTypes": [
          {
            "cweId": "",
            "lang": "en",
            "description": "Remote Code Execution",
            "sourcePath": "/containers/cna/problemTypes/0/descriptions/0"
          }
        ],
        "metrics": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "provider": "CISA-ADP",
            "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1"
          }
        ],
        "references": [
          {
            "url": "http://www.securityfocus.com/bid/106914",
            "label": "106914",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/0"
          },
          {
            "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0604",
            "label": "CVE",
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/1"
          },
          {
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-0604",
            "label": "CISA-ADP",
            "tags": [
              "government-resource"
            ],
            "provider": "CISA-ADP",
            "sourcePath": "/containers/adp/1/references/0"
          }
        ],
        "snippets": [
          {
            "evidenceId": "official:/containers/cna/affected/0",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0604.json",
            "sourcePath": "/containers/cna/affected/0",
            "text": "{\"product\":\"Microsoft SharePoint Server\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"2010 Service Pack 2\"},{\"status\":\"affected\",\"version\":\"2019\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0604.json",
            "sourcePath": "/containers/cna/affected/1",
            "text": "{\"product\":\"Microsoft SharePoint Foundation\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"2013 Service Pack 1\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/2",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0604.json",
            "sourcePath": "/containers/cna/affected/2",
            "text": "{\"product\":\"Microsoft SharePoint Enterprise Server\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"2016\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/descriptions/0/value",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0604.json",
            "sourcePath": "/containers/cna/descriptions/0/value",
            "text": "A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0594.",
            "truncated": false,
            "representation": "source_excerpt"
          },
          {
            "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0604.json",
            "sourcePath": "/containers/cna/problemTypes/0/descriptions/0",
            "text": "{\"description\":\"Remote Code Execution\",\"lang\":\"en\",\"type\":\"text\"}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/adp/1/metrics/0/cvssV3_1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0604.json",
            "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1",
            "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":9.8,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"CRITICAL\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"NONE\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"confidentialityImpact\":\"HIGH\"}",
            "truncated": false,
            "representation": "source_json"
          }
        ],
        "limits": {
          "completeness": "official_record",
          "truncatedFields": [],
          "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。"
        }
      },
      "sourceSnapshots": [
        {
          "source": "CVE",
          "modifiedAt": "2025-10-21T23:45:42.715Z",
          "fetchedAt": "2026-10-23T02:43:06.055Z",
          "state": "published"
        },
        {
          "source": "CISA KEV",
          "modifiedAt": "2021-11-03T00:00:00.000Z",
          "fetchedAt": "2026-10-23T02:17:50.489Z",
          "state": "published"
        }
      ],
      "sourceAction": "Apply updates per vendor instructions.",
      "sourceSummary": "Microsoft SharePoint Server / Microsoft SharePoint Foundation / Microsoft SharePoint Enterprise Serverにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。",
      "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。",
      "guidance": {
        "schemaVersion": "1.0",
        "method": "automatic",
        "reviewedAt": null,
        "reviewState": "current",
        "generatedAt": "2026-10-23T03:46:53.618Z",
        "generatorVersion": "2026-10-23.3",
        "sourceFingerprint": "767ba66058d1001b635df831b3cf139e88ae11a9a330e95ab14d54dee4e4293f",
        "sourceModifiedAt": "2025-10-21T23:45:42.715Z",
        "model": "@cf/openai/gpt-oss-120b",
        "verificationMethod": "exact_source_excerpt_and_independent_semantic_check",
        "summary": "Microsoft SharePoint において、アプリケーション パッケージのソース マークアップをチェックしないため、リモートからコードを実行される脆弱性が存在します。",
        "risk": "攻撃者がサーバー上で任意のコードを実行できる可能性があります。",
        "summaryEvidenceIds": [
          "E1"
        ],
        "riskEvidenceIds": [
          "E2"
        ],
        "applicability": [
          {
            "text": "Microsoft SharePoint Server の 2010 Service Pack 2 は影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0604.json"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "Microsoft SharePoint Server の 2019 は影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0604.json"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "Microsoft SharePoint Foundation の 2013 Service Pack 1 は影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0604.json"
            ],
            "evidenceIds": [
              "E4"
            ]
          },
          {
            "text": "Microsoft SharePoint Enterprise Server の 2016 は影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0604.json"
            ],
            "evidenceIds": [
              "E5"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft SharePoint Server。影響ありとして記載：2010 Service Pack 2。影響ありとして記載：2019。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0604.json"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft SharePoint Foundation。影響ありとして記載：2013 Service Pack 1。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0604.json"
            ],
            "evidenceIds": [
              "E4"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft SharePoint Enterprise Server。影響ありとして記載：2016。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0604.json"
            ],
            "evidenceIds": [
              "E5"
            ]
          },
          {
            "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。",
            "kind": "fact",
            "sourceUrls": [
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0604"
            ],
            "evidenceIds": [
              "E7"
            ]
          }
        ],
        "versionChecks": [
          {
            "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0604.json"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "「Microsoft SharePoint Server / Microsoft SharePoint Foundation / Microsoft SharePoint Enterprise Server」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
              "https://www.cve.org/CVERecord?id=CVE-2019-0604",
              "http://www.securityfocus.com/bid/106914",
              "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0604",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0604",
              "https://nvd.nist.gov/vuln/detail/CVE-2019-0604"
            ]
          }
        ],
        "actions": [
          {
            "text": "ベンダーの指示に従って更新プログラムを適用してください。",
            "kind": "fix",
            "sourceUrls": [
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0604"
            ],
            "evidenceIds": [
              "E6"
            ]
          },
          {
            "text": "「CVE-2019-0604」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cve.org/CVERecord?id=CVE-2019-0604",
              "http://www.securityfocus.com/bid/106914",
              "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0604",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0604",
              "https://nvd.nist.gov/vuln/detail/CVE-2019-0604"
            ]
          },
          {
            "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
              "https://www.cve.org/CVERecord?id=CVE-2019-0604",
              "http://www.securityfocus.com/bid/106914",
              "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0604",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0604",
              "https://nvd.nist.gov/vuln/detail/CVE-2019-0604"
            ]
          }
        ],
        "temporaryMitigations": [
          {
            "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cve.org/CVERecord?id=CVE-2019-0604",
              "http://www.securityfocus.com/bid/106914",
              "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0604",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0604",
              "https://nvd.nist.gov/vuln/detail/CVE-2019-0604"
            ]
          }
        ],
        "verification": [
          {
            "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。",
            "kind": "procedure",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0604.json"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
              "https://www.cve.org/CVERecord?id=CVE-2019-0604",
              "http://www.securityfocus.com/bid/106914",
              "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0604",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0604",
              "https://nvd.nist.gov/vuln/detail/CVE-2019-0604"
            ]
          }
        ],
        "unknowns": [
          "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。",
          "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。"
        ],
        "sources": [
          {
            "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0604.json",
            "label": "CVE：microsoft"
          },
          {
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0604",
            "label": "CISA KEV（悪用確認）"
          },
          {
            "url": "https://www.cve.org/CVERecord?id=CVE-2019-0604",
            "label": "CVE公式レコード"
          },
          {
            "url": "http://www.securityfocus.com/bid/106914",
            "label": "106914"
          },
          {
            "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0604",
            "label": "CVE掲載の参考情報"
          },
          {
            "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0604",
            "label": "CISAが示す関連情報"
          },
          {
            "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
            "label": "CISA：ソフトウェア更新の基本"
          }
        ],
        "evidence": [
          {
            "id": "E1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0604.json",
            "sourceField": "/containers/cna/descriptions/0/value",
            "excerpt": "A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0594.",
            "language": "en",
            "representation": "source_excerpt"
          },
          {
            "id": "E2",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0604.json",
            "sourceField": "/containers/cna/problemTypes/0/descriptions/0",
            "excerpt": "{\"description\":\"Remote Code Execution\",\"lang\":\"en\",\"type\":\"text\"}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E3",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0604.json",
            "sourceField": "/containers/cna/affected/0",
            "excerpt": "{\"product\":\"Microsoft SharePoint Server\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"2010 Service Pack 2\"},{\"status\":\"affected\",\"version\":\"2019\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E4",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0604.json",
            "sourceField": "/containers/cna/affected/1",
            "excerpt": "{\"product\":\"Microsoft SharePoint Foundation\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"2013 Service Pack 1\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E5",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0604.json",
            "sourceField": "/containers/cna/affected/2",
            "excerpt": "{\"product\":\"Microsoft SharePoint Enterprise Server\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"2016\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E6",
            "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0604",
            "sourceField": "/sourceAction",
            "excerpt": "Apply updates per vendor instructions.",
            "language": null
          },
          {
            "id": "E7",
            "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0604",
            "sourceField": "/exploitStatus",
            "excerpt": "{\"id\":\"CVE-2019-0604\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}",
            "language": "en",
            "representation": "normalized_feed_field"
          }
        ],
        "supportRequest": "件名：CVE-2019-0604（Microsoft SharePoint Server / Microsoft SharePoint Foundation / Microsoft SharePoint Enterprise Server）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Microsoft SharePoint Server の 2010 Service Pack 2 は影響を受けます。\n・Microsoft SharePoint Server の 2019 は影響を受けます。\n・Microsoft SharePoint Foundation の 2013 Service Pack 1 は影響を受けます。\n・Microsoft SharePoint Enterprise Server の 2016 は影響を受けます。\n・公式の対象表：Microsoft / Microsoft SharePoint Server。影響ありとして記載：2010 Service Pack 2。影響ありとして記載：2019。\n・公式の対象表：Microsoft / Microsoft SharePoint Foundation。影響ありとして記載：2013 Service Pack 1。\n・公式の対象表：Microsoft / Microsoft SharePoint Enterprise Server。影響ありとして記載：2016。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2019-0604",
        "publicationCheckVersion": "2026-10-23.1",
        "sourceNotices": [],
        "automation": {
          "status": "ready",
          "lastAttempt": "2026-10-23T03:46:53.618Z",
          "lastSuccess": "2026-10-23T03:46:53.618Z",
          "sourceCheckedAt": "2026-10-23T02:43:06.055Z",
          "errorCode": null
        },
        "glossary": [
          {
            "term": "任意のコード実行",
            "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。",
            "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html",
            "kind": "general_definition"
          }
        ]
      }
    },
    {
      "id": "CVE-2019-0797",
      "aliases": [],
      "title": "Windows Server / Windows：権限の奪取",
      "summary": "Windows の Win32k コンポーネントがメモリ内のオブジェクトを適切に処理できないため、特権昇格の脆弱性が存在します。この脆弱性は「Win32k Elevation of Privilege Vulnerability」と呼ばれます。この CVE ID は CVE-2019-0808 とは別物です。",
      "risk": "攻撃者がこの脆弱性を利用すると、通常より高い権限に昇格させられる可能性があります。",
      "product": "Windows Server / Windows",
      "category": "windows",
      "component": "package",
      "severity": "unknown",
      "cvss": null,
      "cvssVersion": null,
      "cvssSource": "microsoft",
      "cvssVector": null,
      "affected": [
        {
          "product": "Windows Server",
          "range": "2012"
        },
        {
          "product": "Windows Server",
          "range": "2012 (Core installation)"
        },
        {
          "product": "Windows Server",
          "range": "2012 R2"
        },
        {
          "product": "Windows Server",
          "range": "2012 R2 (Core installation)"
        },
        {
          "product": "Windows Server",
          "range": "2016"
        },
        {
          "product": "Windows Server",
          "range": "2016  (Core installation)"
        },
        {
          "product": "Windows Server",
          "range": "version 1709  (Core Installation)"
        },
        {
          "product": "Windows Server",
          "range": "version 1803  (Core Installation)"
        },
        {
          "product": "Windows Server",
          "range": "2019"
        },
        {
          "product": "Windows Server",
          "range": "2019  (Core installation)"
        },
        {
          "product": "Windows",
          "range": "8.1 for 32-bit systems"
        },
        {
          "product": "Windows",
          "range": "8.1 for x64-based systems"
        },
        {
          "product": "Windows",
          "range": "RT 8.1"
        },
        {
          "product": "Windows",
          "range": "10 for 32-bit Systems"
        },
        {
          "product": "Windows",
          "range": "10 for x64-based Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1607 for 32-bit Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1607 for x64-based Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1703 for 32-bit Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1703 for x64-based Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1709 for 32-bit Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1709 for x64-based Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1803 for 32-bit Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1803 for x64-based Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1803 for ARM64-based Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1809 for 32-bit Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1809 for x64-based Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1809 for ARM64-based Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1709 for ARM64-based Systems"
        }
      ],
      "fixed": [],
      "steps": [
        "ベンダーの指示に従って更新プログラムを適用する。",
        "「CVE-2019-0797」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
        "Windows 11は「設定」→「Windows Update」→「更新プログラムのチェック」を開き、提供された更新を適用します。再起動を求められたら完了させます。会社管理のPC、Windows Server、サポート外の版は管理担当者に適用する修正番号と配布予定を確認してください。"
      ],
      "references": [
        {
          "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0797.json",
          "label": "CVE：microsoft"
        },
        {
          "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0797",
          "label": "CISA KEV（悪用確認）"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-0797",
          "label": "CVE公式レコード"
        },
        {
          "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0797",
          "label": "CVE掲載の参考情報"
        },
        {
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0797",
          "label": "CISAが示す関連情報"
        },
        {
          "url": "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device",
          "label": "Microsoft公式：Windowsの情報を調べる"
        },
        {
          "url": "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates",
          "label": "Microsoft公式：Windows Updateの操作"
        }
      ],
      "publishedAt": "2019-04-09T02:34:55.000Z",
      "modifiedAt": "2025-10-21T23:45:40.120Z",
      "fetchedAt": "2026-10-23T02:43:06.207Z",
      "exploitStatus": "confirmed",
      "sources": [
        "CVE",
        "CISA KEV"
      ],
      "originalText": "An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0808.",
      "sourceTitle": "",
      "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。",
      "state": "published",
      "affectedDetails": [
        {
          "product": "Windows Server",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "2012"
            },
            {
              "status": "affected",
              "version": "2012 (Core installation)"
            },
            {
              "status": "affected",
              "version": "2012 R2"
            },
            {
              "status": "affected",
              "version": "2012 R2 (Core installation)"
            },
            {
              "status": "affected",
              "version": "2016"
            },
            {
              "status": "affected",
              "version": "2016  (Core installation)"
            },
            {
              "status": "affected",
              "version": "version 1709  (Core Installation)"
            },
            {
              "status": "affected",
              "version": "version 1803  (Core Installation)"
            },
            {
              "status": "affected",
              "version": "2019"
            },
            {
              "status": "affected",
              "version": "2019  (Core installation)"
            }
          ]
        },
        {
          "product": "Windows",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "8.1 for 32-bit systems"
            },
            {
              "status": "affected",
              "version": "8.1 for x64-based systems"
            },
            {
              "status": "affected",
              "version": "RT 8.1"
            },
            {
              "status": "affected",
              "version": "10 for 32-bit Systems"
            },
            {
              "status": "affected",
              "version": "10 for x64-based Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1607 for 32-bit Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1607 for x64-based Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1703 for 32-bit Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1703 for x64-based Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1709 for 32-bit Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1709 for x64-based Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1803 for 32-bit Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1803 for x64-based Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1803 for ARM64-based Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1809 for 32-bit Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1809 for x64-based Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1809 for ARM64-based Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1709 for ARM64-based Systems"
            }
          ]
        }
      ],
      "officialEvidence": {
        "schemaVersion": "1.0",
        "id": "CVE-2019-0797",
        "sourceType": "CVE",
        "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0797.json",
        "fetchedAt": "2026-10-23T02:43:06.207Z",
        "publishedAt": "2019-04-09T02:34:55.000Z",
        "modifiedAt": "2025-10-21T23:45:40.120Z",
        "state": "published",
        "provider": "microsoft",
        "title": "",
        "descriptions": [
          {
            "lang": "en",
            "value": "An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0808.",
            "sourcePath": "/containers/cna/descriptions/0/value"
          }
        ],
        "affected": [
          {
            "vendor": "Microsoft",
            "product": "Windows Server",
            "sourcePath": "/containers/cna/affected/0",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/0/versions/0",
                "version": "2012",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/1",
                "version": "2012 (Core installation)",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/2",
                "version": "2012 R2",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/3",
                "version": "2012 R2 (Core installation)",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/4",
                "version": "2016",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/5",
                "version": "2016  (Core installation)",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/6",
                "version": "version 1709  (Core Installation)",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/7",
                "version": "version 1803  (Core Installation)",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/8",
                "version": "2019",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/9",
                "version": "2019  (Core installation)",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows",
            "sourcePath": "/containers/cna/affected/1",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/1/versions/0",
                "version": "8.1 for 32-bit systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/1",
                "version": "8.1 for x64-based systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/2",
                "version": "RT 8.1",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/3",
                "version": "10 for 32-bit Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/4",
                "version": "10 for x64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/5",
                "version": "10 Version 1607 for 32-bit Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/6",
                "version": "10 Version 1607 for x64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/7",
                "version": "10 Version 1703 for 32-bit Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/8",
                "version": "10 Version 1703 for x64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/9",
                "version": "10 Version 1709 for 32-bit Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/10",
                "version": "10 Version 1709 for x64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/11",
                "version": "10 Version 1803 for 32-bit Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/12",
                "version": "10 Version 1803 for x64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/13",
                "version": "10 Version 1803 for ARM64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/14",
                "version": "10 Version 1809 for 32-bit Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/15",
                "version": "10 Version 1809 for x64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/16",
                "version": "10 Version 1809 for ARM64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/17",
                "version": "10 Version 1709 for ARM64-based Systems",
                "status": "affected"
              }
            ]
          }
        ],
        "solutions": [],
        "workarounds": [],
        "exploits": [],
        "rejectedReasons": [],
        "problemTypes": [
          {
            "cweId": "",
            "lang": "en",
            "description": "Elevation of Privilege",
            "sourcePath": "/containers/cna/problemTypes/0/descriptions/0"
          }
        ],
        "metrics": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "provider": "CISA-ADP",
            "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1"
          }
        ],
        "references": [
          {
            "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0797",
            "label": "CVE",
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/0"
          },
          {
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-0797",
            "label": "CISA-ADP",
            "tags": [
              "government-resource"
            ],
            "provider": "CISA-ADP",
            "sourcePath": "/containers/adp/1/references/0"
          }
        ],
        "snippets": [
          {
            "evidenceId": "official:/containers/cna/affected/0",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0797.json",
            "sourcePath": "/containers/cna/affected/0",
            "text": "{\"product\":\"Windows Server\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"2012\"},{\"status\":\"affected\",\"version\":\"2012 (Core installation)\"},{\"status\":\"affected\",\"version\":\"2012 R2\"},{\"status\":\"affected\",\"version\":\"2012 R2 (Core installation)\"},{\"status\":\"affected\",\"version\":\"2016\"},{\"status\":\"affected\",\"version\":\"2016  (Core installation)\"},{\"status\":\"affected\",\"version\":\"version 1709  (Core Installation)\"},{\"status\":\"affected\",\"version\":\"version 1803  (Core Installation)\"},{\"status\":\"affected\",\"version\":\"2019\"},{\"status\":\"affected\",\"version\":\"2019  (Core installation)\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0797.json",
            "sourcePath": "/containers/cna/affected/1",
            "text": "{\"product\":\"Windows\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"8.1 for 32-bit systems\"},{\"status\":\"affected\",\"version\":\"8.1 for x64-based systems\"},{\"status\":\"affected\",\"version\":\"RT 8.1\"},{\"status\":\"affected\",\"version\":\"10 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1607 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1607 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1703 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1703 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1709 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1709 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1803 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1803 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1803 for ARM64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1809 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1809 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1809 for ARM64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1709 for ARM64-based Systems\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/descriptions/0/value",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0797.json",
            "sourcePath": "/containers/cna/descriptions/0/value",
            "text": "An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0808.",
            "truncated": false,
            "representation": "source_excerpt"
          },
          {
            "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0797.json",
            "sourcePath": "/containers/cna/problemTypes/0/descriptions/0",
            "text": "{\"description\":\"Elevation of Privilege\",\"lang\":\"en\",\"type\":\"text\"}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/adp/1/metrics/0/cvssV3_1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0797.json",
            "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1",
            "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":7.8,\"attackVector\":\"LOCAL\",\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"NONE\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"LOW\",\"confidentialityImpact\":\"HIGH\"}",
            "truncated": false,
            "representation": "source_json"
          }
        ],
        "limits": {
          "completeness": "official_record",
          "truncatedFields": [],
          "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。"
        }
      },
      "sourceSnapshots": [
        {
          "source": "CVE",
          "modifiedAt": "2025-10-21T23:45:40.120Z",
          "fetchedAt": "2026-10-23T02:43:06.207Z",
          "state": "published"
        },
        {
          "source": "CISA KEV",
          "modifiedAt": "2021-11-03T00:00:00.000Z",
          "fetchedAt": "2026-10-23T02:17:50.489Z",
          "state": "published"
        }
      ],
      "sourceAction": "Apply updates per vendor instructions.",
      "sourceSummary": "Windows Server / Windowsに権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。",
      "sourceRisk": "本来与えられていない権限で、操作される可能性があります。",
      "guidance": {
        "schemaVersion": "1.0",
        "method": "automatic",
        "reviewedAt": null,
        "reviewState": "current",
        "generatedAt": "2026-10-23T03:46:54.413Z",
        "generatorVersion": "2026-10-23.3",
        "sourceFingerprint": "f3810b6e1a5a3b75c108b2b43984bc86dc908092c544f7e6687b0a1f0f428eeb",
        "sourceModifiedAt": "2025-10-21T23:45:40.120Z",
        "model": "@cf/openai/gpt-oss-120b",
        "verificationMethod": "exact_source_excerpt_and_independent_semantic_check",
        "summary": "Windows の Win32k コンポーネントがメモリ内のオブジェクトを適切に処理できないため、特権昇格の脆弱性が存在します。この脆弱性は「Win32k Elevation of Privilege Vulnerability」と呼ばれます。この CVE ID は CVE-2019-0808 とは別物です。",
        "risk": "攻撃者がこの脆弱性を利用すると、通常より高い権限に昇格させられる可能性があります。",
        "summaryEvidenceIds": [
          "E1"
        ],
        "riskEvidenceIds": [
          "E1"
        ],
        "applicability": [
          {
            "text": "Windows Server 2012、2012 (Core installation)、2012 R2、2012 R2 (Core installation)、2016、2016 (Core installation)、version 1709 (Core Installation)、version 1803 (Core Installation)、2019、2019 (Core installation) が影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0797.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "Windows 8.1 for 32-bit systems、8.1 for x64-based systems、RT 8.1、Windows 10 for 32-bit Systems、Windows 10 for x64-based Systems、10 Version 1607 for 32-bit Systems、10 Version 1607 for x64-based Systems、10 Version 1703 for 32-bit Systems、10 Version 1703 for x64-based Systems、10 Version 1709 for 32-bit Systems、10 Version 1709 for x64-based Systems、10 Version 1803 for 32-bit Systems、10 Version 1803 for x64-based Systems、10 Version 1803 for ARM64-based Systems、10 Version 1809 for 32-bit Systems、10 Version 1809 for x64-based Systems、10 Version 1809 for ARM64-based Systems、10 Version 1709 for ARM64-based Systems が影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0797.json"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server。影響ありとして記載：2012。影響ありとして記載：2012 (Core installation)。影響ありとして記載：2012 R2。影響ありとして記載：2012 R2 (Core installation)。影響ありとして記載：2016。影響ありとして記載：2016  (Core installation)。影響ありとして記載：version 1709  (Core Installation)。影響ありとして記載：version 1803  (Core Installation)。影響ありとして記載：2019。影響ありとして記載：2019  (Core installation)。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0797.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows。影響ありとして記載：8.1 for 32-bit systems。影響ありとして記載：8.1 for x64-based systems。影響ありとして記載：RT 8.1。影響ありとして記載：10 for 32-bit Systems。影響ありとして記載：10 for x64-based Systems。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0797.json"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。",
            "kind": "fact",
            "sourceUrls": [
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0797"
            ],
            "evidenceIds": [
              "E5"
            ]
          }
        ],
        "versionChecks": [
          {
            "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0797.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "「スタート」→「設定」→「システム」→「バージョン情報」を開き、Windowsのエディション・バージョン・OSビルドを控えます。会社のPCやサーバーは、この情報とCVE番号を管理担当者へ渡してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device"
            ]
          }
        ],
        "actions": [
          {
            "text": "ベンダーの指示に従って更新プログラムを適用する。",
            "kind": "fix",
            "sourceUrls": [
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0797"
            ],
            "evidenceIds": [
              "E4"
            ]
          },
          {
            "text": "「CVE-2019-0797」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cve.org/CVERecord?id=CVE-2019-0797",
              "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0797",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0797",
              "https://nvd.nist.gov/vuln/detail/CVE-2019-0797"
            ]
          },
          {
            "text": "Windows 11は「設定」→「Windows Update」→「更新プログラムのチェック」を開き、提供された更新を適用します。再起動を求められたら完了させます。会社管理のPC、Windows Server、サポート外の版は管理担当者に適用する修正番号と配布予定を確認してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates"
            ]
          }
        ],
        "temporaryMitigations": [
          {
            "text": "すぐ更新できない場合は、CVE番号、Windowsの版、業務で必要な機能を管理担当者に伝え、修正までの利用方法と更新予定を決めてください。すべてのWindowsの問題に同じ回避策が使えるわけではありません。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates",
              "https://www.cve.org/CVERecord?id=CVE-2019-0797",
              "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0797",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0797",
              "https://nvd.nist.gov/vuln/detail/CVE-2019-0797"
            ]
          }
        ],
        "verification": [
          {
            "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。",
            "kind": "procedure",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0797.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "再起動後にWindows Updateを開き直して失敗・再起動待ちがないか確認し、管理担当者にこのCVEに対応する修正の適用結果を確認してもらってください。「最新の状態」と出ても、別製品の更新やサポート外の版の修正を保証するものではありません。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates"
            ]
          }
        ],
        "unknowns": [
          "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。",
          "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。"
        ],
        "sources": [
          {
            "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0797.json",
            "label": "CVE：microsoft"
          },
          {
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0797",
            "label": "CISA KEV（悪用確認）"
          },
          {
            "url": "https://www.cve.org/CVERecord?id=CVE-2019-0797",
            "label": "CVE公式レコード"
          },
          {
            "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0797",
            "label": "CVE掲載の参考情報"
          },
          {
            "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0797",
            "label": "CISAが示す関連情報"
          },
          {
            "url": "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device",
            "label": "Microsoft公式：Windowsの情報を調べる"
          },
          {
            "url": "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates",
            "label": "Microsoft公式：Windows Updateの操作"
          }
        ],
        "evidence": [
          {
            "id": "E1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0797.json",
            "sourceField": "/containers/cna/descriptions/0/value",
            "excerpt": "An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0808.",
            "language": "en",
            "representation": "source_excerpt"
          },
          {
            "id": "E2",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0797.json",
            "sourceField": "/containers/cna/affected/0",
            "excerpt": "{\"product\":\"Windows Server\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"2012\"},{\"status\":\"affected\",\"version\":\"2012 (Core installation)\"},{\"status\":\"affected\",\"version\":\"2012 R2\"},{\"status\":\"affected\",\"version\":\"2012 R2 (Core installation)\"},{\"status\":\"affected\",\"version\":\"2016\"},{\"status\":\"affected\",\"version\":\"2016  (Core installation)\"},{\"status\":\"affected\",\"version\":\"version 1709  (Core Installation)\"},{\"status\":\"affected\",\"version\":\"version 1803  (Core Installation)\"},{\"status\":\"affected\",\"version\":\"2019\"},{\"status\":\"affected\",\"version\":\"2019  (Core installation)\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E3",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0797.json",
            "sourceField": "/containers/cna/affected/1",
            "excerpt": "{\"product\":\"Windows\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"8.1 for 32-bit systems\"},{\"status\":\"affected\",\"version\":\"8.1 for x64-based systems\"},{\"status\":\"affected\",\"version\":\"RT 8.1\"},{\"status\":\"affected\",\"version\":\"10 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1607 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1607 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1703 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1703 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1709 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1709 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1803 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1803 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1803 for ARM64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1809 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1809 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1809 for ARM64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1709 for ARM64-based Systems\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E4",
            "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0797",
            "sourceField": "/sourceAction",
            "excerpt": "Apply updates per vendor instructions.",
            "language": null
          },
          {
            "id": "E5",
            "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0797",
            "sourceField": "/exploitStatus",
            "excerpt": "{\"id\":\"CVE-2019-0797\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}",
            "language": "en",
            "representation": "normalized_feed_field"
          }
        ],
        "supportRequest": "件名：CVE-2019-0797（Windows Server / Windows）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Windows Server 2012、2012 (Core installation)、2012 R2、2012 R2 (Core installation)、2016、2016 (Core installation)、version 1709 (Core Installation)、version 1803 (Core Installation)、2019、2019 (Core installation) が影響を受けます。\n・Windows 8.1 for 32-bit systems、8.1 for x64-based systems、RT 8.1、Windows 10 for 32-bit Systems、Windows 10 for x64-based Systems、10 Version 1607 for 32-bit Systems、10 Version 1607 for x64-based Systems、10 Version 1703 for 32-bit Systems、10 Version 1703 for x64-based Systems、10 Version 1709 for 32-bit Systems、10 Version 1709 for x64-based Systems、10 Version 1803 for 32-bit Systems、10 Version 1803 for x64-based Systems、10 Version 1803 for ARM64-based Systems、10 Version 1809 for 32-bit Systems、10 Version 1809 for x64-based Systems、10 Version 1809 for ARM64-based Systems、10 Version 1709 for ARM64-based Systems が影響を受けます。\n・公式の対象表：Microsoft / Windows Server。影響ありとして記載：2012。影響ありとして記載：2012 (Core installation)。影響ありとして記載：2012 R2。影響ありとして記載：2012 R2 (Core installation)。影響ありとして記載：2016。影響ありとして記載：2016  (Core installation)。影響ありとして記載：version 1709  (Core Installation)。影響ありとして記載：version 1803  (Core Installation)。影響ありとして記載：2019。影響ありとして記載：2019  (Core installation)。\n・公式の対象表：Microsoft / Windows。影響ありとして記載：8.1 for 32-bit systems。影響ありとして記載：8.1 for x64-based systems。影響ありとして記載：RT 8.1。影響ありとして記載：10 for 32-bit Systems。影響ありとして記載：10 for x64-based Systems。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2019-0797",
        "publicationCheckVersion": "2026-10-23.1",
        "sourceNotices": [],
        "automation": {
          "status": "ready",
          "lastAttempt": "2026-10-23T03:46:54.413Z",
          "lastSuccess": "2026-10-23T03:46:54.413Z",
          "sourceCheckedAt": "2026-10-23T02:43:06.207Z",
          "errorCode": null
        },
        "glossary": []
      }
    },
    {
      "id": "CVE-2019-0803",
      "aliases": [],
      "title": "Windows / Windows Server：権限の奪取",
      "summary": "Windows の Win32k コンポーネントがメモリ内のオブジェクトを適切に処理できないため、特権昇格の脆弱性が存在します（別名「Win32k Elevation of Privilege Vulnerability」）。この CVE は CVE-2019-0685、CVE-2019-0859 とは別個です。",
      "risk": "特権昇格が可能になる脆弱性が存在します。",
      "product": "Windows / Windows Server",
      "category": "windows",
      "component": "package",
      "severity": "unknown",
      "cvss": null,
      "cvssVersion": null,
      "cvssSource": "microsoft",
      "cvssVector": null,
      "affected": [
        {
          "product": "Windows",
          "range": "7 for 32-bit Systems Service Pack 1"
        },
        {
          "product": "Windows",
          "range": "7 for x64-based Systems Service Pack 1"
        },
        {
          "product": "Windows",
          "range": "8.1 for 32-bit systems"
        },
        {
          "product": "Windows",
          "range": "8.1 for x64-based systems"
        },
        {
          "product": "Windows",
          "range": "RT 8.1"
        },
        {
          "product": "Windows",
          "range": "10 for 32-bit Systems"
        },
        {
          "product": "Windows",
          "range": "10 for x64-based Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1607 for 32-bit Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1607 for x64-based Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1703 for 32-bit Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1703 for x64-based Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1709 for 32-bit Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1709 for x64-based Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1803 for 32-bit Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1803 for x64-based Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1803 for ARM64-based Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1809 for 32-bit Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1809 for x64-based Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1809 for ARM64-based Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1709 for ARM64-based Systems"
        },
        {
          "product": "Windows Server",
          "range": "2008 R2 for x64-based Systems Service Pack 1 (Core installation)"
        },
        {
          "product": "Windows Server",
          "range": "2008 R2 for Itanium-Based Systems Service Pack 1"
        },
        {
          "product": "Windows Server",
          "range": "2008 R2 for x64-based Systems Service Pack 1"
        },
        {
          "product": "Windows Server",
          "range": "2008 for 32-bit Systems Service Pack 2 (Core installation)"
        },
        {
          "product": "Windows Server",
          "range": "2012"
        },
        {
          "product": "Windows Server",
          "range": "2012 (Core installation)"
        },
        {
          "product": "Windows Server",
          "range": "2012 R2"
        },
        {
          "product": "Windows Server",
          "range": "2012 R2 (Core installation)"
        },
        {
          "product": "Windows Server",
          "range": "2016"
        },
        {
          "product": "Windows Server",
          "range": "2016  (Core installation)"
        },
        {
          "product": "Windows Server",
          "range": "version 1709  (Core Installation)"
        },
        {
          "product": "Windows Server",
          "range": "version 1803  (Core Installation)"
        },
        {
          "product": "Windows Server",
          "range": "2019"
        },
        {
          "product": "Windows Server",
          "range": "2019  (Core installation)"
        },
        {
          "product": "Windows Server",
          "range": "2008 for Itanium-Based Systems Service Pack 2"
        },
        {
          "product": "Windows Server",
          "range": "2008 for 32-bit Systems Service Pack 2"
        },
        {
          "product": "Windows Server",
          "range": "2008 for x64-based Systems Service Pack 2"
        },
        {
          "product": "Windows Server",
          "range": "2008 for x64-based Systems Service Pack 2 (Core installation)"
        }
      ],
      "fixed": [],
      "steps": [
        "ベンダーの指示に従って更新を適用する。",
        "「CVE-2019-0803」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
        "Windows 11は「設定」→「Windows Update」→「更新プログラムのチェック」を開き、提供された更新を適用します。再起動を求められたら完了させます。会社管理のPC、Windows Server、サポート外の版は管理担当者に適用する修正番号と配布予定を確認してください。"
      ],
      "references": [
        {
          "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0803.json",
          "label": "CVE：microsoft"
        },
        {
          "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0803",
          "label": "CISA KEV（悪用確認）"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-0803",
          "label": "CVE公式レコード"
        },
        {
          "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0803",
          "label": "CVE掲載の参考情報"
        },
        {
          "url": "http://packetstormsecurity.com/files/153034/Microsoft-Windows-Win32k-Privilege-Escalation.html",
          "label": "CVE掲載の参考情報"
        },
        {
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0803",
          "label": "CISAが示す関連情報"
        },
        {
          "url": "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device",
          "label": "Microsoft公式：Windowsの情報を調べる"
        },
        {
          "url": "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates",
          "label": "Microsoft公式：Windows Updateの操作"
        }
      ],
      "publishedAt": "2019-04-09T20:15:28.000Z",
      "modifiedAt": "2025-10-21T23:45:39.783Z",
      "fetchedAt": "2026-10-23T02:43:06.249Z",
      "exploitStatus": "confirmed",
      "sources": [
        "CVE",
        "CISA KEV"
      ],
      "originalText": "An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0685, CVE-2019-0859.",
      "sourceTitle": "",
      "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。",
      "state": "published",
      "affectedDetails": [
        {
          "product": "Windows",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "7 for 32-bit Systems Service Pack 1"
            },
            {
              "status": "affected",
              "version": "7 for x64-based Systems Service Pack 1"
            },
            {
              "status": "affected",
              "version": "8.1 for 32-bit systems"
            },
            {
              "status": "affected",
              "version": "8.1 for x64-based systems"
            },
            {
              "status": "affected",
              "version": "RT 8.1"
            },
            {
              "status": "affected",
              "version": "10 for 32-bit Systems"
            },
            {
              "status": "affected",
              "version": "10 for x64-based Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1607 for 32-bit Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1607 for x64-based Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1703 for 32-bit Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1703 for x64-based Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1709 for 32-bit Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1709 for x64-based Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1803 for 32-bit Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1803 for x64-based Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1803 for ARM64-based Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1809 for 32-bit Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1809 for x64-based Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1809 for ARM64-based Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1709 for ARM64-based Systems"
            }
          ]
        },
        {
          "product": "Windows Server",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "2008 R2 for x64-based Systems Service Pack 1 (Core installation)"
            },
            {
              "status": "affected",
              "version": "2008 R2 for Itanium-Based Systems Service Pack 1"
            },
            {
              "status": "affected",
              "version": "2008 R2 for x64-based Systems Service Pack 1"
            },
            {
              "status": "affected",
              "version": "2008 for 32-bit Systems Service Pack 2 (Core installation)"
            },
            {
              "status": "affected",
              "version": "2012"
            },
            {
              "status": "affected",
              "version": "2012 (Core installation)"
            },
            {
              "status": "affected",
              "version": "2012 R2"
            },
            {
              "status": "affected",
              "version": "2012 R2 (Core installation)"
            },
            {
              "status": "affected",
              "version": "2016"
            },
            {
              "status": "affected",
              "version": "2016  (Core installation)"
            },
            {
              "status": "affected",
              "version": "version 1709  (Core Installation)"
            },
            {
              "status": "affected",
              "version": "version 1803  (Core Installation)"
            },
            {
              "status": "affected",
              "version": "2019"
            },
            {
              "status": "affected",
              "version": "2019  (Core installation)"
            },
            {
              "status": "affected",
              "version": "2008 for Itanium-Based Systems Service Pack 2"
            },
            {
              "status": "affected",
              "version": "2008 for 32-bit Systems Service Pack 2"
            },
            {
              "status": "affected",
              "version": "2008 for x64-based Systems Service Pack 2"
            },
            {
              "status": "affected",
              "version": "2008 for x64-based Systems Service Pack 2 (Core installation)"
            }
          ]
        }
      ],
      "officialEvidence": {
        "schemaVersion": "1.0",
        "id": "CVE-2019-0803",
        "sourceType": "CVE",
        "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0803.json",
        "fetchedAt": "2026-10-23T02:43:06.249Z",
        "publishedAt": "2019-04-09T20:15:28.000Z",
        "modifiedAt": "2025-10-21T23:45:39.783Z",
        "state": "published",
        "provider": "microsoft",
        "title": "",
        "descriptions": [
          {
            "lang": "en",
            "value": "An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0685, CVE-2019-0859.",
            "sourcePath": "/containers/cna/descriptions/0/value"
          }
        ],
        "affected": [
          {
            "vendor": "Microsoft",
            "product": "Windows",
            "sourcePath": "/containers/cna/affected/0",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/0/versions/0",
                "version": "7 for 32-bit Systems Service Pack 1",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/1",
                "version": "7 for x64-based Systems Service Pack 1",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/2",
                "version": "8.1 for 32-bit systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/3",
                "version": "8.1 for x64-based systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/4",
                "version": "RT 8.1",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/5",
                "version": "10 for 32-bit Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/6",
                "version": "10 for x64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/7",
                "version": "10 Version 1607 for 32-bit Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/8",
                "version": "10 Version 1607 for x64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/9",
                "version": "10 Version 1703 for 32-bit Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/10",
                "version": "10 Version 1703 for x64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/11",
                "version": "10 Version 1709 for 32-bit Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/12",
                "version": "10 Version 1709 for x64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/13",
                "version": "10 Version 1803 for 32-bit Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/14",
                "version": "10 Version 1803 for x64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/15",
                "version": "10 Version 1803 for ARM64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/16",
                "version": "10 Version 1809 for 32-bit Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/17",
                "version": "10 Version 1809 for x64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/18",
                "version": "10 Version 1809 for ARM64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/19",
                "version": "10 Version 1709 for ARM64-based Systems",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server",
            "sourcePath": "/containers/cna/affected/1",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/1/versions/0",
                "version": "2008 R2 for x64-based Systems Service Pack 1 (Core installation)",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/1",
                "version": "2008 R2 for Itanium-Based Systems Service Pack 1",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/2",
                "version": "2008 R2 for x64-based Systems Service Pack 1",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/3",
                "version": "2008 for 32-bit Systems Service Pack 2 (Core installation)",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/4",
                "version": "2012",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/5",
                "version": "2012 (Core installation)",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/6",
                "version": "2012 R2",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/7",
                "version": "2012 R2 (Core installation)",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/8",
                "version": "2016",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/9",
                "version": "2016  (Core installation)",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/10",
                "version": "version 1709  (Core Installation)",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/11",
                "version": "version 1803  (Core Installation)",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/12",
                "version": "2019",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/13",
                "version": "2019  (Core installation)",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/14",
                "version": "2008 for Itanium-Based Systems Service Pack 2",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/15",
                "version": "2008 for 32-bit Systems Service Pack 2",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/16",
                "version": "2008 for x64-based Systems Service Pack 2",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/17",
                "version": "2008 for x64-based Systems Service Pack 2 (Core installation)",
                "status": "affected"
              }
            ]
          }
        ],
        "solutions": [],
        "workarounds": [],
        "exploits": [],
        "rejectedReasons": [],
        "problemTypes": [
          {
            "cweId": "",
            "lang": "en",
            "description": "Elevation of Privilege",
            "sourcePath": "/containers/cna/problemTypes/0/descriptions/0"
          }
        ],
        "metrics": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "provider": "CISA-ADP",
            "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1"
          }
        ],
        "references": [
          {
            "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0803",
            "label": "CVE",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/0"
          },
          {
            "url": "http://packetstormsecurity.com/files/153034/Microsoft-Windows-Win32k-Privilege-Escalation.html",
            "label": "CVE",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/1"
          },
          {
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-0803",
            "label": "CISA-ADP",
            "tags": [
              "government-resource"
            ],
            "provider": "CISA-ADP",
            "sourcePath": "/containers/adp/1/references/0"
          }
        ],
        "snippets": [
          {
            "evidenceId": "official:/containers/cna/affected/0",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0803.json",
            "sourcePath": "/containers/cna/affected/0",
            "text": "{\"product\":\"Windows\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"7 for 32-bit Systems Service Pack 1\"},{\"status\":\"affected\",\"version\":\"7 for x64-based Systems Service Pack 1\"},{\"status\":\"affected\",\"version\":\"8.1 for 32-bit systems\"},{\"status\":\"affected\",\"version\":\"8.1 for x64-based systems\"},{\"status\":\"affected\",\"version\":\"RT 8.1\"},{\"status\":\"affected\",\"version\":\"10 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1607 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1607 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1703 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1703 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1709 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1709 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1803 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1803 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1803 for ARM64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1809 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1809 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1809 for ARM64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1709 for ARM64-based Systems\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0803.json",
            "sourcePath": "/containers/cna/affected/1",
            "text": "{\"product\":\"Windows Server\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"2008 R2 for x64-based Systems Service Pack 1 (Core installation)\"},{\"status\":\"affected\",\"version\":\"2008 R2 for Itanium-Based Systems Service Pack 1\"},{\"status\":\"affected\",\"version\":\"2008 R2 for x64-based Systems Service Pack 1\"},{\"status\":\"affected\",\"version\":\"2008 for 32-bit Systems Service Pack 2 (Core installation)\"},{\"status\":\"affected\",\"version\":\"2012\"},{\"status\":\"affected\",\"version\":\"2012 (Core installation)\"},{\"status\":\"affected\",\"version\":\"2012 R2\"},{\"status\":\"affected\",\"version\":\"2012 R2 (Core installation)\"},{\"status\":\"affected\",\"version\":\"2016\"},{\"status\":\"affected\",\"version\":\"2016  (Core installation)\"},{\"status\":\"affected\",\"version\":\"version 1709  (Core Installation)\"},{\"status\":\"affected\",\"version\":\"version 1803  (Core Installation)\"},{\"status\":\"affected\",\"version\":\"2019\"},{\"status\":\"affected\",\"version\":\"2019  (Core installation)\"},{\"status\":\"affected\",\"version\":\"2008 for Itanium-Based Systems Service Pack 2\"},{\"status\":\"affected\",\"version\":\"2008 for 32-bit Systems Service Pack 2\"},{\"status\":\"affected\",\"version\":\"2008 for x64-based Systems Service Pack 2\"},{\"status\":\"affected\",\"version\":\"2008 for x64-based Systems Service Pack 2 (Core installation)\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/descriptions/0/value",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0803.json",
            "sourcePath": "/containers/cna/descriptions/0/value",
            "text": "An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0685, CVE-2019-0859.",
            "truncated": false,
            "representation": "source_excerpt"
          },
          {
            "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0803.json",
            "sourcePath": "/containers/cna/problemTypes/0/descriptions/0",
            "text": "{\"description\":\"Elevation of Privilege\",\"lang\":\"en\",\"type\":\"text\"}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/adp/1/metrics/0/cvssV3_1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0803.json",
            "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1",
            "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":7.8,\"attackVector\":\"LOCAL\",\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"NONE\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"LOW\",\"confidentialityImpact\":\"HIGH\"}",
            "truncated": false,
            "representation": "source_json"
          }
        ],
        "limits": {
          "completeness": "official_record",
          "truncatedFields": [],
          "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。"
        }
      },
      "sourceSnapshots": [
        {
          "source": "CVE",
          "modifiedAt": "2025-10-21T23:45:39.783Z",
          "fetchedAt": "2026-10-23T02:43:06.249Z",
          "state": "published"
        },
        {
          "source": "CISA KEV",
          "modifiedAt": "2021-11-03T00:00:00.000Z",
          "fetchedAt": "2026-10-23T02:17:50.489Z",
          "state": "published"
        }
      ],
      "sourceAction": "Apply updates per vendor instructions.",
      "sourceSummary": "Windows / Windows Serverに権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。",
      "sourceRisk": "本来与えられていない権限で、操作される可能性があります。",
      "guidance": {
        "schemaVersion": "1.0",
        "method": "automatic",
        "reviewedAt": null,
        "reviewState": "current",
        "generatedAt": "2026-10-23T03:46:54.462Z",
        "generatorVersion": "2026-10-23.3",
        "sourceFingerprint": "a7697f3edb25b31ee5537cc1861da342d66835dd032e5ffcf5ef1ad16406532e",
        "sourceModifiedAt": "2025-10-21T23:45:39.783Z",
        "model": "@cf/openai/gpt-oss-120b",
        "verificationMethod": "exact_source_excerpt_and_independent_semantic_check",
        "summary": "Windows の Win32k コンポーネントがメモリ内のオブジェクトを適切に処理できないため、特権昇格の脆弱性が存在します（別名「Win32k Elevation of Privilege Vulnerability」）。この CVE は CVE-2019-0685、CVE-2019-0859 とは別個です。",
        "risk": "特権昇格が可能になる脆弱性が存在します。",
        "summaryEvidenceIds": [
          "E1"
        ],
        "riskEvidenceIds": [
          "E1"
        ],
        "applicability": [
          {
            "text": "Windows（クライアント）で、以下のバージョンが影響を受けます: 7 32ビット SP1、7 x64 SP1、8.1 32ビット、8.1 x64、RT 8.1、10 32ビット、10 x64、10 Version 1607 32ビット、10 Version 1607 x64、10 Version 1703 32ビット、10 Version 1703 x64、10 Version 1709 32ビット、10 Version 1709 x64、10 Version 1803 32ビット、10 Version 1803 x64、10 Version 1803 ARM64、10 Version 1809 32ビット、10 Version 1809 x64、10 Version 1809 ARM64、10 Version 1709 ARM64。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0803.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "Windows Serverで、以下のバージョンが影響を受けます: 2008 R2 x64 SP1（Core インストール）、2008 R2 Itanium SP1、2008 R2 x64 SP1、2008 32ビット SP2（Core インストール）、2012、2012（Core インストール）、2012 R2、2012 R2（Core インストール）、2016、2016（Core インストール）、バージョン 1709（Core インストール）、バージョン 1803（Core インストール）、2019、2019（Core インストール）、2008 Itanium SP2、2008 32ビット SP2、2008 x64 SP2、2008 x64 SP2（Core インストール）。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0803.json"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows。影響ありとして記載：8.1 for 32-bit systems。影響ありとして記載：8.1 for x64-based systems。影響ありとして記載：RT 8.1。影響ありとして記載：10 for 32-bit Systems。影響ありとして記載：10 for x64-based Systems。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0803.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server。影響ありとして記載：2012。影響ありとして記載：2012 (Core installation)。影響ありとして記載：2012 R2。影響ありとして記載：2012 R2 (Core installation)。影響ありとして記載：2016。影響ありとして記載：2016  (Core installation)。影響ありとして記載：version 1709  (Core Installation)。影響ありとして記載：version 1803  (Core Installation)。影響ありとして記載：2019。影響ありとして記載：2019  (Core installation)。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0803.json"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。",
            "kind": "fact",
            "sourceUrls": [
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0803"
            ],
            "evidenceIds": [
              "E5"
            ]
          }
        ],
        "versionChecks": [
          {
            "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0803.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "「スタート」→「設定」→「システム」→「バージョン情報」を開き、Windowsのエディション・バージョン・OSビルドを控えます。会社のPCやサーバーは、この情報とCVE番号を管理担当者へ渡してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device"
            ]
          }
        ],
        "actions": [
          {
            "text": "ベンダーの指示に従って更新を適用する。",
            "kind": "fix",
            "sourceUrls": [
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0803"
            ],
            "evidenceIds": [
              "E4"
            ]
          },
          {
            "text": "「CVE-2019-0803」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cve.org/CVERecord?id=CVE-2019-0803",
              "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0803",
              "http://packetstormsecurity.com/files/153034/Microsoft-Windows-Win32k-Privilege-Escalation.html",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0803",
              "https://nvd.nist.gov/vuln/detail/CVE-2019-0803"
            ]
          },
          {
            "text": "Windows 11は「設定」→「Windows Update」→「更新プログラムのチェック」を開き、提供された更新を適用します。再起動を求められたら完了させます。会社管理のPC、Windows Server、サポート外の版は管理担当者に適用する修正番号と配布予定を確認してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates"
            ]
          }
        ],
        "temporaryMitigations": [
          {
            "text": "すぐ更新できない場合は、CVE番号、Windowsの版、業務で必要な機能を管理担当者に伝え、修正までの利用方法と更新予定を決めてください。すべてのWindowsの問題に同じ回避策が使えるわけではありません。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates",
              "https://www.cve.org/CVERecord?id=CVE-2019-0803",
              "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0803",
              "http://packetstormsecurity.com/files/153034/Microsoft-Windows-Win32k-Privilege-Escalation.html",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0803",
              "https://nvd.nist.gov/vuln/detail/CVE-2019-0803"
            ]
          }
        ],
        "verification": [
          {
            "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。",
            "kind": "procedure",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0803.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "再起動後にWindows Updateを開き直して失敗・再起動待ちがないか確認し、管理担当者にこのCVEに対応する修正の適用結果を確認してもらってください。「最新の状態」と出ても、別製品の更新やサポート外の版の修正を保証するものではありません。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates"
            ]
          }
        ],
        "unknowns": [
          "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。",
          "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。"
        ],
        "sources": [
          {
            "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0803.json",
            "label": "CVE：microsoft"
          },
          {
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0803",
            "label": "CISA KEV（悪用確認）"
          },
          {
            "url": "https://www.cve.org/CVERecord?id=CVE-2019-0803",
            "label": "CVE公式レコード"
          },
          {
            "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0803",
            "label": "CVE掲載の参考情報"
          },
          {
            "url": "http://packetstormsecurity.com/files/153034/Microsoft-Windows-Win32k-Privilege-Escalation.html",
            "label": "CVE掲載の参考情報"
          },
          {
            "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0803",
            "label": "CISAが示す関連情報"
          },
          {
            "url": "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device",
            "label": "Microsoft公式：Windowsの情報を調べる"
          },
          {
            "url": "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates",
            "label": "Microsoft公式：Windows Updateの操作"
          }
        ],
        "evidence": [
          {
            "id": "E1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0803.json",
            "sourceField": "/containers/cna/descriptions/0/value",
            "excerpt": "An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0685, CVE-2019-0859.",
            "language": "en",
            "representation": "source_excerpt"
          },
          {
            "id": "E2",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0803.json",
            "sourceField": "/containers/cna/affected/0",
            "excerpt": "{\"product\":\"Windows\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"7 for 32-bit Systems Service Pack 1\"},{\"status\":\"affected\",\"version\":\"7 for x64-based Systems Service Pack 1\"},{\"status\":\"affected\",\"version\":\"8.1 for 32-bit systems\"},{\"status\":\"affected\",\"version\":\"8.1 for x64-based systems\"},{\"status\":\"affected\",\"version\":\"RT 8.1\"},{\"status\":\"affected\",\"version\":\"10 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1607 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1607 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1703 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1703 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1709 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1709 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1803 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1803 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1803 for ARM64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1809 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1809 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1809 for ARM64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1709 for ARM64-based Systems\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E3",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0803.json",
            "sourceField": "/containers/cna/affected/1",
            "excerpt": "{\"product\":\"Windows Server\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"2008 R2 for x64-based Systems Service Pack 1 (Core installation)\"},{\"status\":\"affected\",\"version\":\"2008 R2 for Itanium-Based Systems Service Pack 1\"},{\"status\":\"affected\",\"version\":\"2008 R2 for x64-based Systems Service Pack 1\"},{\"status\":\"affected\",\"version\":\"2008 for 32-bit Systems Service Pack 2 (Core installation)\"},{\"status\":\"affected\",\"version\":\"2012\"},{\"status\":\"affected\",\"version\":\"2012 (Core installation)\"},{\"status\":\"affected\",\"version\":\"2012 R2\"},{\"status\":\"affected\",\"version\":\"2012 R2 (Core installation)\"},{\"status\":\"affected\",\"version\":\"2016\"},{\"status\":\"affected\",\"version\":\"2016  (Core installation)\"},{\"status\":\"affected\",\"version\":\"version 1709  (Core Installation)\"},{\"status\":\"affected\",\"version\":\"version 1803  (Core Installation)\"},{\"status\":\"affected\",\"version\":\"2019\"},{\"status\":\"affected\",\"version\":\"2019  (Core installation)\"},{\"status\":\"affected\",\"version\":\"2008 for Itanium-Based Systems Service Pack 2\"},{\"status\":\"affected\",\"version\":\"2008 for 32-bit Systems Service Pack 2\"},{\"status\":\"affected\",\"version\":\"2008 for x64-based Systems Service Pack 2\"},{\"status\":\"affected\",\"version\":\"2008 for x64-based Systems Service Pack 2 (Core installation)\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E4",
            "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0803",
            "sourceField": "/sourceAction",
            "excerpt": "Apply updates per vendor instructions.",
            "language": null
          },
          {
            "id": "E5",
            "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0803",
            "sourceField": "/exploitStatus",
            "excerpt": "{\"id\":\"CVE-2019-0803\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}",
            "language": "en",
            "representation": "normalized_feed_field"
          }
        ],
        "supportRequest": "件名：CVE-2019-0803（Windows / Windows Server）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Windows（クライアント）で、以下のバージョンが影響を受けます: 7 32ビット SP1、7 x64 SP1、8.1 32ビット、8.1 x64、RT 8.1、10 32ビット、10 x64、10 Version 1607 32ビット、10 Version 1607 x64、10 Version 1703 32ビット、10 Version 1703 x64、10 Version 1709 32ビット、10 Version 1709 x64、10 Version 1803 32ビット、10 Version 1803 x64、10 Version 1803 ARM64、10 Version 1809 32ビット、10 Version 1809 x64、10 Version 1809 ARM64、10 Version 1709 ARM64。\n・Windows Serverで、以下のバージョンが影響を受けます: 2008 R2 x64 SP1（Core インストール）、2008 R2 Itanium SP1、2008 R2 x64 SP1、2008 32ビット SP2（Core インストール）、2012、2012（Core インストール）、2012 R2、2012 R2（Core インストール）、2016、2016（Core インストール）、バージョン 1709（Core インストール）、バージョン 1803（Core インストール）、2019、2019（Core インストール）、2008 Itanium SP2、2008 32ビット SP2、2008 x64 SP2、2008 x64 SP2（Core インストール）。\n・公式の対象表：Microsoft / Windows。影響ありとして記載：8.1 for 32-bit systems。影響ありとして記載：8.1 for x64-based systems。影響ありとして記載：RT 8.1。影響ありとして記載：10 for 32-bit Systems。影響ありとして記載：10 for x64-based Systems。\n・公式の対象表：Microsoft / Windows Server。影響ありとして記載：2012。影響ありとして記載：2012 (Core installation)。影響ありとして記載：2012 R2。影響ありとして記載：2012 R2 (Core installation)。影響ありとして記載：2016。影響ありとして記載：2016  (Core installation)。影響ありとして記載：version 1709  (Core Installation)。影響ありとして記載：version 1803  (Core Installation)。影響ありとして記載：2019。影響ありとして記載：2019  (Core installation)。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2019-0803",
        "publicationCheckVersion": "2026-10-23.1",
        "sourceNotices": [],
        "automation": {
          "status": "ready",
          "lastAttempt": "2026-10-23T03:46:54.462Z",
          "lastSuccess": "2026-10-23T03:46:54.462Z",
          "sourceCheckedAt": "2026-10-23T02:43:06.249Z",
          "errorCode": null
        },
        "glossary": []
      }
    },
    {
      "id": "CVE-2019-0808",
      "aliases": [],
      "title": "Windows / Windows Server：権限の奪取",
      "summary": "Windows の Win32k コンポーネントがメモリ内のオブジェクトを適切に処理できないため、特権昇格の脆弱性が存在します。",
      "risk": "攻撃者がこの脆弱性を利用すると、通常のユーザー権限から高い権限へ昇格できる可能性があります。",
      "product": "Windows / Windows Server",
      "category": "windows",
      "component": "package",
      "severity": "unknown",
      "cvss": null,
      "cvssVersion": null,
      "cvssSource": "microsoft",
      "cvssVector": null,
      "affected": [
        {
          "product": "Windows",
          "range": "7 for 32-bit Systems Service Pack 1"
        },
        {
          "product": "Windows",
          "range": "7 for x64-based Systems Service Pack 1"
        },
        {
          "product": "Windows Server",
          "range": "2008 R2 for x64-based Systems Service Pack 1 (Core installation)"
        },
        {
          "product": "Windows Server",
          "range": "2008 R2 for Itanium-Based Systems Service Pack 1"
        },
        {
          "product": "Windows Server",
          "range": "2008 R2 for x64-based Systems Service Pack 1"
        },
        {
          "product": "Windows Server",
          "range": "2008 for 32-bit Systems Service Pack 2 (Core installation)"
        },
        {
          "product": "Windows Server",
          "range": "2008 for Itanium-Based Systems Service Pack 2"
        },
        {
          "product": "Windows Server",
          "range": "2008 for 32-bit Systems Service Pack 2"
        },
        {
          "product": "Windows Server",
          "range": "2008 for x64-based Systems Service Pack 2"
        },
        {
          "product": "Windows Server",
          "range": "2008 for x64-based Systems Service Pack 2 (Core installation)"
        }
      ],
      "fixed": [],
      "steps": [
        "ベンダーの指示に従って更新プログラムを適用する。",
        "「CVE-2019-0808」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
        "Windows 11は「設定」→「Windows Update」→「更新プログラムのチェック」を開き、提供された更新を適用します。再起動を求められたら完了させます。会社管理のPC、Windows Server、サポート外の版は管理担当者に適用する修正番号と配布予定を確認してください。"
      ],
      "references": [
        {
          "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0808.json",
          "label": "CVE：microsoft"
        },
        {
          "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0808",
          "label": "CISA KEV（悪用確認）"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-0808",
          "label": "CVE公式レコード"
        },
        {
          "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0808",
          "label": "CVE掲載の参考情報"
        },
        {
          "url": "http://packetstormsecurity.com/files/157616/Microsoft-Windows-NtUserMNDragOver-Local-Privilege-Escalation.html",
          "label": "CVE掲載の参考情報"
        },
        {
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0808",
          "label": "CISAが示す関連情報"
        },
        {
          "url": "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device",
          "label": "Microsoft公式：Windowsの情報を調べる"
        },
        {
          "url": "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates",
          "label": "Microsoft公式：Windows Updateの操作"
        }
      ],
      "publishedAt": "2019-04-09T02:31:32.000Z",
      "modifiedAt": "2025-10-21T23:45:40.287Z",
      "fetchedAt": "2026-10-23T02:43:06.257Z",
      "exploitStatus": "confirmed",
      "sources": [
        "CVE",
        "CISA KEV"
      ],
      "originalText": "An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0797.",
      "sourceTitle": "",
      "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。",
      "state": "published",
      "affectedDetails": [
        {
          "product": "Windows",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "7 for 32-bit Systems Service Pack 1"
            },
            {
              "status": "affected",
              "version": "7 for x64-based Systems Service Pack 1"
            }
          ]
        },
        {
          "product": "Windows Server",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "2008 R2 for x64-based Systems Service Pack 1 (Core installation)"
            },
            {
              "status": "affected",
              "version": "2008 R2 for Itanium-Based Systems Service Pack 1"
            },
            {
              "status": "affected",
              "version": "2008 R2 for x64-based Systems Service Pack 1"
            },
            {
              "status": "affected",
              "version": "2008 for 32-bit Systems Service Pack 2 (Core installation)"
            },
            {
              "status": "affected",
              "version": "2008 for Itanium-Based Systems Service Pack 2"
            },
            {
              "status": "affected",
              "version": "2008 for 32-bit Systems Service Pack 2"
            },
            {
              "status": "affected",
              "version": "2008 for x64-based Systems Service Pack 2"
            },
            {
              "status": "affected",
              "version": "2008 for x64-based Systems Service Pack 2 (Core installation)"
            }
          ]
        }
      ],
      "officialEvidence": {
        "schemaVersion": "1.0",
        "id": "CVE-2019-0808",
        "sourceType": "CVE",
        "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0808.json",
        "fetchedAt": "2026-10-23T02:43:06.257Z",
        "publishedAt": "2019-04-09T02:31:32.000Z",
        "modifiedAt": "2025-10-21T23:45:40.287Z",
        "state": "published",
        "provider": "microsoft",
        "title": "",
        "descriptions": [
          {
            "lang": "en",
            "value": "An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0797.",
            "sourcePath": "/containers/cna/descriptions/0/value"
          }
        ],
        "affected": [
          {
            "vendor": "Microsoft",
            "product": "Windows",
            "sourcePath": "/containers/cna/affected/0",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/0/versions/0",
                "version": "7 for 32-bit Systems Service Pack 1",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/1",
                "version": "7 for x64-based Systems Service Pack 1",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server",
            "sourcePath": "/containers/cna/affected/1",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/1/versions/0",
                "version": "2008 R2 for x64-based Systems Service Pack 1 (Core installation)",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/1",
                "version": "2008 R2 for Itanium-Based Systems Service Pack 1",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/2",
                "version": "2008 R2 for x64-based Systems Service Pack 1",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/3",
                "version": "2008 for 32-bit Systems Service Pack 2 (Core installation)",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/4",
                "version": "2008 for Itanium-Based Systems Service Pack 2",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/5",
                "version": "2008 for 32-bit Systems Service Pack 2",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/6",
                "version": "2008 for x64-based Systems Service Pack 2",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/7",
                "version": "2008 for x64-based Systems Service Pack 2 (Core installation)",
                "status": "affected"
              }
            ]
          }
        ],
        "solutions": [],
        "workarounds": [],
        "exploits": [],
        "rejectedReasons": [],
        "problemTypes": [
          {
            "cweId": "",
            "lang": "en",
            "description": "Elevation of Privilege",
            "sourcePath": "/containers/cna/problemTypes/0/descriptions/0"
          }
        ],
        "metrics": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "provider": "CISA-ADP",
            "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1"
          }
        ],
        "references": [
          {
            "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0808",
            "label": "CVE",
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/0"
          },
          {
            "url": "http://packetstormsecurity.com/files/157616/Microsoft-Windows-NtUserMNDragOver-Local-Privilege-Escalation.html",
            "label": "CVE",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/1"
          },
          {
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-0808",
            "label": "CISA-ADP",
            "tags": [
              "government-resource"
            ],
            "provider": "CISA-ADP",
            "sourcePath": "/containers/adp/1/references/0"
          }
        ],
        "snippets": [
          {
            "evidenceId": "official:/containers/cna/affected/0",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0808.json",
            "sourcePath": "/containers/cna/affected/0",
            "text": "{\"product\":\"Windows\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"7 for 32-bit Systems Service Pack 1\"},{\"status\":\"affected\",\"version\":\"7 for x64-based Systems Service Pack 1\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0808.json",
            "sourcePath": "/containers/cna/affected/1",
            "text": "{\"product\":\"Windows Server\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"2008 R2 for x64-based Systems Service Pack 1 (Core installation)\"},{\"status\":\"affected\",\"version\":\"2008 R2 for Itanium-Based Systems Service Pack 1\"},{\"status\":\"affected\",\"version\":\"2008 R2 for x64-based Systems Service Pack 1\"},{\"status\":\"affected\",\"version\":\"2008 for 32-bit Systems Service Pack 2 (Core installation)\"},{\"status\":\"affected\",\"version\":\"2008 for Itanium-Based Systems Service Pack 2\"},{\"status\":\"affected\",\"version\":\"2008 for 32-bit Systems Service Pack 2\"},{\"status\":\"affected\",\"version\":\"2008 for x64-based Systems Service Pack 2\"},{\"status\":\"affected\",\"version\":\"2008 for x64-based Systems Service Pack 2 (Core installation)\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/descriptions/0/value",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0808.json",
            "sourcePath": "/containers/cna/descriptions/0/value",
            "text": "An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0797.",
            "truncated": false,
            "representation": "source_excerpt"
          },
          {
            "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0808.json",
            "sourcePath": "/containers/cna/problemTypes/0/descriptions/0",
            "text": "{\"description\":\"Elevation of Privilege\",\"lang\":\"en\",\"type\":\"text\"}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/adp/1/metrics/0/cvssV3_1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0808.json",
            "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1",
            "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":7.8,\"attackVector\":\"LOCAL\",\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"NONE\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"LOW\",\"confidentialityImpact\":\"HIGH\"}",
            "truncated": false,
            "representation": "source_json"
          }
        ],
        "limits": {
          "completeness": "official_record",
          "truncatedFields": [],
          "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。"
        }
      },
      "sourceSnapshots": [
        {
          "source": "CVE",
          "modifiedAt": "2025-10-21T23:45:40.287Z",
          "fetchedAt": "2026-10-23T02:43:06.257Z",
          "state": "published"
        },
        {
          "source": "CISA KEV",
          "modifiedAt": "2021-11-03T00:00:00.000Z",
          "fetchedAt": "2026-10-23T02:17:50.489Z",
          "state": "published"
        }
      ],
      "sourceAction": "Apply updates per vendor instructions.",
      "sourceSummary": "Windows / Windows Serverに権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。",
      "sourceRisk": "本来与えられていない権限で、操作される可能性があります。",
      "guidance": {
        "schemaVersion": "1.0",
        "method": "automatic",
        "reviewedAt": null,
        "reviewState": "current",
        "generatedAt": "2026-10-23T03:46:54.837Z",
        "generatorVersion": "2026-10-23.3",
        "sourceFingerprint": "ad713cd80b913aa4e1c66a0f2df30b98ecee771d3c4cbbdf8ad0f80fc4d3f0a6",
        "sourceModifiedAt": "2025-10-21T23:45:40.287Z",
        "model": "@cf/openai/gpt-oss-120b",
        "verificationMethod": "exact_source_excerpt_and_independent_semantic_check",
        "summary": "Windows の Win32k コンポーネントがメモリ内のオブジェクトを適切に処理できないため、特権昇格の脆弱性が存在します。",
        "risk": "攻撃者がこの脆弱性を利用すると、通常のユーザー権限から高い権限へ昇格できる可能性があります。",
        "summaryEvidenceIds": [
          "E1"
        ],
        "riskEvidenceIds": [
          "E2",
          "E1"
        ],
        "applicability": [
          {
            "text": "Windows 7 32ビット システム Service Pack 1 が影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0808.json"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "Windows 7 x64ベース システム Service Pack 1 が影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0808.json"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "Windows Server 2008 R2 x64ベース システム Service Pack 1（Core インストール）が影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0808.json"
            ],
            "evidenceIds": [
              "E4"
            ]
          },
          {
            "text": "Windows Server 2008 R2 Itanium ベース システム Service Pack 1 が影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0808.json"
            ],
            "evidenceIds": [
              "E4"
            ]
          },
          {
            "text": "Windows Server 2008 R2 x64ベース システム Service Pack 1 が影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0808.json"
            ],
            "evidenceIds": [
              "E4"
            ]
          },
          {
            "text": "Windows Server 2008 32ビット システム Service Pack 2（Core インストール）が影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0808.json"
            ],
            "evidenceIds": [
              "E4"
            ]
          },
          {
            "text": "Windows Server 2008 Itanium ベース システム Service Pack 2 が影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0808.json"
            ],
            "evidenceIds": [
              "E4"
            ]
          },
          {
            "text": "Windows Server 2008 32ビット システム Service Pack 2 が影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0808.json"
            ],
            "evidenceIds": [
              "E4"
            ]
          },
          {
            "text": "Windows Server 2008 x64ベース システム Service Pack 2 が影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0808.json"
            ],
            "evidenceIds": [
              "E4"
            ]
          },
          {
            "text": "Windows Server 2008 x64ベース システム Service Pack 2（Core インストール）が影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0808.json"
            ],
            "evidenceIds": [
              "E4"
            ]
          },
          {
            "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。",
            "kind": "fact",
            "sourceUrls": [
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0808"
            ],
            "evidenceIds": [
              "E6"
            ]
          }
        ],
        "versionChecks": [
          {
            "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0808.json"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "「スタート」→「設定」→「システム」→「バージョン情報」を開き、Windowsのエディション・バージョン・OSビルドを控えます。会社のPCやサーバーは、この情報とCVE番号を管理担当者へ渡してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device"
            ]
          }
        ],
        "actions": [
          {
            "text": "ベンダーの指示に従って更新プログラムを適用する。",
            "kind": "fix",
            "sourceUrls": [
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0808"
            ],
            "evidenceIds": [
              "E5"
            ]
          },
          {
            "text": "「CVE-2019-0808」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cve.org/CVERecord?id=CVE-2019-0808",
              "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0808",
              "http://packetstormsecurity.com/files/157616/Microsoft-Windows-NtUserMNDragOver-Local-Privilege-Escalation.html",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0808",
              "https://nvd.nist.gov/vuln/detail/CVE-2019-0808"
            ]
          },
          {
            "text": "Windows 11は「設定」→「Windows Update」→「更新プログラムのチェック」を開き、提供された更新を適用します。再起動を求められたら完了させます。会社管理のPC、Windows Server、サポート外の版は管理担当者に適用する修正番号と配布予定を確認してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates"
            ]
          }
        ],
        "temporaryMitigations": [
          {
            "text": "すぐ更新できない場合は、CVE番号、Windowsの版、業務で必要な機能を管理担当者に伝え、修正までの利用方法と更新予定を決めてください。すべてのWindowsの問題に同じ回避策が使えるわけではありません。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates",
              "https://www.cve.org/CVERecord?id=CVE-2019-0808",
              "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0808",
              "http://packetstormsecurity.com/files/157616/Microsoft-Windows-NtUserMNDragOver-Local-Privilege-Escalation.html",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0808",
              "https://nvd.nist.gov/vuln/detail/CVE-2019-0808"
            ]
          }
        ],
        "verification": [
          {
            "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。",
            "kind": "procedure",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0808.json"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "再起動後にWindows Updateを開き直して失敗・再起動待ちがないか確認し、管理担当者にこのCVEに対応する修正の適用結果を確認してもらってください。「最新の状態」と出ても、別製品の更新やサポート外の版の修正を保証するものではありません。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates"
            ]
          }
        ],
        "unknowns": [
          "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。",
          "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。"
        ],
        "sources": [
          {
            "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0808.json",
            "label": "CVE：microsoft"
          },
          {
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0808",
            "label": "CISA KEV（悪用確認）"
          },
          {
            "url": "https://www.cve.org/CVERecord?id=CVE-2019-0808",
            "label": "CVE公式レコード"
          },
          {
            "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0808",
            "label": "CVE掲載の参考情報"
          },
          {
            "url": "http://packetstormsecurity.com/files/157616/Microsoft-Windows-NtUserMNDragOver-Local-Privilege-Escalation.html",
            "label": "CVE掲載の参考情報"
          },
          {
            "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0808",
            "label": "CISAが示す関連情報"
          },
          {
            "url": "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device",
            "label": "Microsoft公式：Windowsの情報を調べる"
          },
          {
            "url": "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates",
            "label": "Microsoft公式：Windows Updateの操作"
          }
        ],
        "evidence": [
          {
            "id": "E1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0808.json",
            "sourceField": "/containers/cna/descriptions/0/value",
            "excerpt": "An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0797.",
            "language": "en",
            "representation": "source_excerpt"
          },
          {
            "id": "E2",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0808.json",
            "sourceField": "/containers/cna/problemTypes/0/descriptions/0",
            "excerpt": "{\"description\":\"Elevation of Privilege\",\"lang\":\"en\",\"type\":\"text\"}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E3",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0808.json",
            "sourceField": "/containers/cna/affected/0",
            "excerpt": "{\"product\":\"Windows\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"7 for 32-bit Systems Service Pack 1\"},{\"status\":\"affected\",\"version\":\"7 for x64-based Systems Service Pack 1\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E4",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0808.json",
            "sourceField": "/containers/cna/affected/1",
            "excerpt": "{\"product\":\"Windows Server\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"2008 R2 for x64-based Systems Service Pack 1 (Core installation)\"},{\"status\":\"affected\",\"version\":\"2008 R2 for Itanium-Based Systems Service Pack 1\"},{\"status\":\"affected\",\"version\":\"2008 R2 for x64-based Systems Service Pack 1\"},{\"status\":\"affected\",\"version\":\"2008 for 32-bit Systems Service Pack 2 (Core installation)\"},{\"status\":\"affected\",\"version\":\"2008 for Itanium-Based Systems Service Pack 2\"},{\"status\":\"affected\",\"version\":\"2008 for 32-bit Systems Service Pack 2\"},{\"status\":\"affected\",\"version\":\"2008 for x64-based Systems Service Pack 2\"},{\"status\":\"affected\",\"version\":\"2008 for x64-based Systems Service Pack 2 (Core installation)\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E5",
            "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0808",
            "sourceField": "/sourceAction",
            "excerpt": "Apply updates per vendor instructions.",
            "language": null
          },
          {
            "id": "E6",
            "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0808",
            "sourceField": "/exploitStatus",
            "excerpt": "{\"id\":\"CVE-2019-0808\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}",
            "language": "en",
            "representation": "normalized_feed_field"
          }
        ],
        "supportRequest": "件名：CVE-2019-0808（Windows / Windows Server）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Windows 7 32ビット システム Service Pack 1 が影響を受けます。\n・Windows 7 x64ベース システム Service Pack 1 が影響を受けます。\n・Windows Server 2008 R2 x64ベース システム Service Pack 1（Core インストール）が影響を受けます。\n・Windows Server 2008 R2 Itanium ベース システム Service Pack 1 が影響を受けます。\n・Windows Server 2008 R2 x64ベース システム Service Pack 1 が影響を受けます。\n・Windows Server 2008 32ビット システム Service Pack 2（Core インストール）が影響を受けます。\n・Windows Server 2008 Itanium ベース システム Service Pack 2 が影響を受けます。\n・Windows Server 2008 32ビット システム Service Pack 2 が影響を受けます。\n・Windows Server 2008 x64ベース システム Service Pack 2 が影響を受けます。\n・Windows Server 2008 x64ベース システム Service Pack 2（Core インストール）が影響を受けます。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2019-0808",
        "publicationCheckVersion": "2026-10-23.1",
        "sourceNotices": [],
        "automation": {
          "status": "ready",
          "lastAttempt": "2026-10-23T03:46:54.837Z",
          "lastSuccess": "2026-10-23T03:46:54.837Z",
          "sourceCheckedAt": "2026-10-23T02:43:06.257Z",
          "errorCode": null
        },
        "glossary": []
      }
    },
    {
      "id": "CVE-2019-0859",
      "aliases": [],
      "title": "Windows / Windows Server：権限の奪取",
      "summary": "Windows の Win32k コンポーネントがメモリ内のオブジェクトを適切に処理できないため、特権昇格の脆弱性が存在します。これは「Win32k Elevation of Privilege Vulnerability」とも呼ばれます。この CVE ID は CVE-2019-0685、CVE-2019-0803 とは別物です。",
      "risk": "攻撃者がこの脆弱性を利用して、通常より高い権限を取得できる可能性があります。",
      "product": "Windows / Windows Server",
      "category": "windows",
      "component": "package",
      "severity": "unknown",
      "cvss": null,
      "cvssVersion": null,
      "cvssSource": "microsoft",
      "cvssVector": null,
      "affected": [
        {
          "product": "Windows",
          "range": "7 for 32-bit Systems Service Pack 1"
        },
        {
          "product": "Windows",
          "range": "7 for x64-based Systems Service Pack 1"
        },
        {
          "product": "Windows",
          "range": "8.1 for 32-bit systems"
        },
        {
          "product": "Windows",
          "range": "8.1 for x64-based systems"
        },
        {
          "product": "Windows",
          "range": "RT 8.1"
        },
        {
          "product": "Windows",
          "range": "10 for 32-bit Systems"
        },
        {
          "product": "Windows",
          "range": "10 for x64-based Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1607 for 32-bit Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1607 for x64-based Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1703 for 32-bit Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1703 for x64-based Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1709 for 32-bit Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1709 for x64-based Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1803 for 32-bit Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1803 for x64-based Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1803 for ARM64-based Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1809 for 32-bit Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1809 for x64-based Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1809 for ARM64-based Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1709 for ARM64-based Systems"
        },
        {
          "product": "Windows Server",
          "range": "2008 R2 for x64-based Systems Service Pack 1 (Core installation)"
        },
        {
          "product": "Windows Server",
          "range": "2008 R2 for Itanium-Based Systems Service Pack 1"
        },
        {
          "product": "Windows Server",
          "range": "2008 R2 for x64-based Systems Service Pack 1"
        },
        {
          "product": "Windows Server",
          "range": "2008 for 32-bit Systems Service Pack 2 (Core installation)"
        },
        {
          "product": "Windows Server",
          "range": "2012"
        },
        {
          "product": "Windows Server",
          "range": "2012 (Core installation)"
        },
        {
          "product": "Windows Server",
          "range": "2012 R2"
        },
        {
          "product": "Windows Server",
          "range": "2012 R2 (Core installation)"
        },
        {
          "product": "Windows Server",
          "range": "2016"
        },
        {
          "product": "Windows Server",
          "range": "2016  (Core installation)"
        },
        {
          "product": "Windows Server",
          "range": "version 1709  (Core Installation)"
        },
        {
          "product": "Windows Server",
          "range": "version 1803  (Core Installation)"
        },
        {
          "product": "Windows Server",
          "range": "2019"
        },
        {
          "product": "Windows Server",
          "range": "2019  (Core installation)"
        },
        {
          "product": "Windows Server",
          "range": "2008 for Itanium-Based Systems Service Pack 2"
        },
        {
          "product": "Windows Server",
          "range": "2008 for 32-bit Systems Service Pack 2"
        },
        {
          "product": "Windows Server",
          "range": "2008 for x64-based Systems Service Pack 2"
        },
        {
          "product": "Windows Server",
          "range": "2008 for x64-based Systems Service Pack 2 (Core installation)"
        }
      ],
      "fixed": [],
      "steps": [
        "ベンダーの指示に従って更新プログラムを適用する。",
        "「CVE-2019-0859」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
        "Windows 11は「設定」→「Windows Update」→「更新プログラムのチェック」を開き、提供された更新を適用します。再起動を求められたら完了させます。会社管理のPC、Windows Server、サポート外の版は管理担当者に適用する修正番号と配布予定を確認してください。"
      ],
      "references": [
        {
          "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0859.json",
          "label": "CVE：microsoft"
        },
        {
          "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0859",
          "label": "CISA KEV（悪用確認）"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-0859",
          "label": "CVE公式レコード"
        },
        {
          "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0859",
          "label": "CVE掲載の参考情報"
        },
        {
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0859",
          "label": "CISAが示す関連情報"
        },
        {
          "url": "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device",
          "label": "Microsoft公式：Windowsの情報を調べる"
        },
        {
          "url": "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates",
          "label": "Microsoft公式：Windows Updateの操作"
        }
      ],
      "publishedAt": "2019-04-09T20:19:48.000Z",
      "modifiedAt": "2025-10-21T23:45:39.450Z",
      "fetchedAt": "2026-10-23T02:43:06.299Z",
      "exploitStatus": "confirmed",
      "sources": [
        "CVE",
        "CISA KEV"
      ],
      "originalText": "An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0685, CVE-2019-0803.",
      "sourceTitle": "",
      "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。",
      "state": "published",
      "affectedDetails": [
        {
          "product": "Windows",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "7 for 32-bit Systems Service Pack 1"
            },
            {
              "status": "affected",
              "version": "7 for x64-based Systems Service Pack 1"
            },
            {
              "status": "affected",
              "version": "8.1 for 32-bit systems"
            },
            {
              "status": "affected",
              "version": "8.1 for x64-based systems"
            },
            {
              "status": "affected",
              "version": "RT 8.1"
            },
            {
              "status": "affected",
              "version": "10 for 32-bit Systems"
            },
            {
              "status": "affected",
              "version": "10 for x64-based Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1607 for 32-bit Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1607 for x64-based Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1703 for 32-bit Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1703 for x64-based Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1709 for 32-bit Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1709 for x64-based Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1803 for 32-bit Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1803 for x64-based Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1803 for ARM64-based Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1809 for 32-bit Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1809 for x64-based Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1809 for ARM64-based Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1709 for ARM64-based Systems"
            }
          ]
        },
        {
          "product": "Windows Server",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "2008 R2 for x64-based Systems Service Pack 1 (Core installation)"
            },
            {
              "status": "affected",
              "version": "2008 R2 for Itanium-Based Systems Service Pack 1"
            },
            {
              "status": "affected",
              "version": "2008 R2 for x64-based Systems Service Pack 1"
            },
            {
              "status": "affected",
              "version": "2008 for 32-bit Systems Service Pack 2 (Core installation)"
            },
            {
              "status": "affected",
              "version": "2012"
            },
            {
              "status": "affected",
              "version": "2012 (Core installation)"
            },
            {
              "status": "affected",
              "version": "2012 R2"
            },
            {
              "status": "affected",
              "version": "2012 R2 (Core installation)"
            },
            {
              "status": "affected",
              "version": "2016"
            },
            {
              "status": "affected",
              "version": "2016  (Core installation)"
            },
            {
              "status": "affected",
              "version": "version 1709  (Core Installation)"
            },
            {
              "status": "affected",
              "version": "version 1803  (Core Installation)"
            },
            {
              "status": "affected",
              "version": "2019"
            },
            {
              "status": "affected",
              "version": "2019  (Core installation)"
            },
            {
              "status": "affected",
              "version": "2008 for Itanium-Based Systems Service Pack 2"
            },
            {
              "status": "affected",
              "version": "2008 for 32-bit Systems Service Pack 2"
            },
            {
              "status": "affected",
              "version": "2008 for x64-based Systems Service Pack 2"
            },
            {
              "status": "affected",
              "version": "2008 for x64-based Systems Service Pack 2 (Core installation)"
            }
          ]
        }
      ],
      "officialEvidence": {
        "schemaVersion": "1.0",
        "id": "CVE-2019-0859",
        "sourceType": "CVE",
        "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0859.json",
        "fetchedAt": "2026-10-23T02:43:06.299Z",
        "publishedAt": "2019-04-09T20:19:48.000Z",
        "modifiedAt": "2025-10-21T23:45:39.450Z",
        "state": "published",
        "provider": "microsoft",
        "title": "",
        "descriptions": [
          {
            "lang": "en",
            "value": "An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0685, CVE-2019-0803.",
            "sourcePath": "/containers/cna/descriptions/0/value"
          }
        ],
        "affected": [
          {
            "vendor": "Microsoft",
            "product": "Windows",
            "sourcePath": "/containers/cna/affected/0",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/0/versions/0",
                "version": "7 for 32-bit Systems Service Pack 1",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/1",
                "version": "7 for x64-based Systems Service Pack 1",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/2",
                "version": "8.1 for 32-bit systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/3",
                "version": "8.1 for x64-based systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/4",
                "version": "RT 8.1",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/5",
                "version": "10 for 32-bit Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/6",
                "version": "10 for x64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/7",
                "version": "10 Version 1607 for 32-bit Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/8",
                "version": "10 Version 1607 for x64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/9",
                "version": "10 Version 1703 for 32-bit Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/10",
                "version": "10 Version 1703 for x64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/11",
                "version": "10 Version 1709 for 32-bit Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/12",
                "version": "10 Version 1709 for x64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/13",
                "version": "10 Version 1803 for 32-bit Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/14",
                "version": "10 Version 1803 for x64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/15",
                "version": "10 Version 1803 for ARM64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/16",
                "version": "10 Version 1809 for 32-bit Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/17",
                "version": "10 Version 1809 for x64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/18",
                "version": "10 Version 1809 for ARM64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/19",
                "version": "10 Version 1709 for ARM64-based Systems",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server",
            "sourcePath": "/containers/cna/affected/1",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/1/versions/0",
                "version": "2008 R2 for x64-based Systems Service Pack 1 (Core installation)",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/1",
                "version": "2008 R2 for Itanium-Based Systems Service Pack 1",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/2",
                "version": "2008 R2 for x64-based Systems Service Pack 1",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/3",
                "version": "2008 for 32-bit Systems Service Pack 2 (Core installation)",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/4",
                "version": "2012",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/5",
                "version": "2012 (Core installation)",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/6",
                "version": "2012 R2",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/7",
                "version": "2012 R2 (Core installation)",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/8",
                "version": "2016",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/9",
                "version": "2016  (Core installation)",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/10",
                "version": "version 1709  (Core Installation)",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/11",
                "version": "version 1803  (Core Installation)",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/12",
                "version": "2019",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/13",
                "version": "2019  (Core installation)",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/14",
                "version": "2008 for Itanium-Based Systems Service Pack 2",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/15",
                "version": "2008 for 32-bit Systems Service Pack 2",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/16",
                "version": "2008 for x64-based Systems Service Pack 2",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/17",
                "version": "2008 for x64-based Systems Service Pack 2 (Core installation)",
                "status": "affected"
              }
            ]
          }
        ],
        "solutions": [],
        "workarounds": [],
        "exploits": [],
        "rejectedReasons": [],
        "problemTypes": [
          {
            "cweId": "",
            "lang": "en",
            "description": "Elevation of Privilege",
            "sourcePath": "/containers/cna/problemTypes/0/descriptions/0"
          }
        ],
        "metrics": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "provider": "CISA-ADP",
            "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1"
          }
        ],
        "references": [
          {
            "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0859",
            "label": "CVE",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/0"
          },
          {
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-0859",
            "label": "CISA-ADP",
            "tags": [
              "government-resource"
            ],
            "provider": "CISA-ADP",
            "sourcePath": "/containers/adp/1/references/0"
          }
        ],
        "snippets": [
          {
            "evidenceId": "official:/containers/cna/affected/0",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0859.json",
            "sourcePath": "/containers/cna/affected/0",
            "text": "{\"product\":\"Windows\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"7 for 32-bit Systems Service Pack 1\"},{\"status\":\"affected\",\"version\":\"7 for x64-based Systems Service Pack 1\"},{\"status\":\"affected\",\"version\":\"8.1 for 32-bit systems\"},{\"status\":\"affected\",\"version\":\"8.1 for x64-based systems\"},{\"status\":\"affected\",\"version\":\"RT 8.1\"},{\"status\":\"affected\",\"version\":\"10 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1607 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1607 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1703 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1703 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1709 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1709 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1803 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1803 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1803 for ARM64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1809 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1809 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1809 for ARM64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1709 for ARM64-based Systems\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0859.json",
            "sourcePath": "/containers/cna/affected/1",
            "text": "{\"product\":\"Windows Server\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"2008 R2 for x64-based Systems Service Pack 1 (Core installation)\"},{\"status\":\"affected\",\"version\":\"2008 R2 for Itanium-Based Systems Service Pack 1\"},{\"status\":\"affected\",\"version\":\"2008 R2 for x64-based Systems Service Pack 1\"},{\"status\":\"affected\",\"version\":\"2008 for 32-bit Systems Service Pack 2 (Core installation)\"},{\"status\":\"affected\",\"version\":\"2012\"},{\"status\":\"affected\",\"version\":\"2012 (Core installation)\"},{\"status\":\"affected\",\"version\":\"2012 R2\"},{\"status\":\"affected\",\"version\":\"2012 R2 (Core installation)\"},{\"status\":\"affected\",\"version\":\"2016\"},{\"status\":\"affected\",\"version\":\"2016  (Core installation)\"},{\"status\":\"affected\",\"version\":\"version 1709  (Core Installation)\"},{\"status\":\"affected\",\"version\":\"version 1803  (Core Installation)\"},{\"status\":\"affected\",\"version\":\"2019\"},{\"status\":\"affected\",\"version\":\"2019  (Core installation)\"},{\"status\":\"affected\",\"version\":\"2008 for Itanium-Based Systems Service Pack 2\"},{\"status\":\"affected\",\"version\":\"2008 for 32-bit Systems Service Pack 2\"},{\"status\":\"affected\",\"version\":\"2008 for x64-based Systems Service Pack 2\"},{\"status\":\"affected\",\"version\":\"2008 for x64-based Systems Service Pack 2 (Core installation)\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/descriptions/0/value",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0859.json",
            "sourcePath": "/containers/cna/descriptions/0/value",
            "text": "An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0685, CVE-2019-0803.",
            "truncated": false,
            "representation": "source_excerpt"
          },
          {
            "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0859.json",
            "sourcePath": "/containers/cna/problemTypes/0/descriptions/0",
            "text": "{\"description\":\"Elevation of Privilege\",\"lang\":\"en\",\"type\":\"text\"}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/adp/1/metrics/0/cvssV3_1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0859.json",
            "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1",
            "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":7.8,\"attackVector\":\"LOCAL\",\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"NONE\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"LOW\",\"confidentialityImpact\":\"HIGH\"}",
            "truncated": false,
            "representation": "source_json"
          }
        ],
        "limits": {
          "completeness": "official_record",
          "truncatedFields": [],
          "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。"
        }
      },
      "sourceSnapshots": [
        {
          "source": "CVE",
          "modifiedAt": "2025-10-21T23:45:39.450Z",
          "fetchedAt": "2026-10-23T02:43:06.299Z",
          "state": "published"
        },
        {
          "source": "CISA KEV",
          "modifiedAt": "2021-11-03T00:00:00.000Z",
          "fetchedAt": "2026-10-23T02:17:50.489Z",
          "state": "published"
        }
      ],
      "sourceAction": "Apply updates per vendor instructions.",
      "sourceSummary": "Windows / Windows Serverに権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。",
      "sourceRisk": "本来与えられていない権限で、操作される可能性があります。",
      "guidance": {
        "schemaVersion": "1.0",
        "method": "automatic",
        "reviewedAt": null,
        "reviewState": "current",
        "generatedAt": "2026-10-23T03:46:55.932Z",
        "generatorVersion": "2026-10-23.3",
        "sourceFingerprint": "d1f7f3d0dbb3394e94a4f734afaf4ba47f10adc4bc1859cce5e10035711d6aad",
        "sourceModifiedAt": "2025-10-21T23:45:39.450Z",
        "model": "@cf/openai/gpt-oss-120b",
        "verificationMethod": "exact_source_excerpt_and_independent_semantic_check",
        "summary": "Windows の Win32k コンポーネントがメモリ内のオブジェクトを適切に処理できないため、特権昇格の脆弱性が存在します。これは「Win32k Elevation of Privilege Vulnerability」とも呼ばれます。この CVE ID は CVE-2019-0685、CVE-2019-0803 とは別物です。",
        "risk": "攻撃者がこの脆弱性を利用して、通常より高い権限を取得できる可能性があります。",
        "summaryEvidenceIds": [
          "E1"
        ],
        "riskEvidenceIds": [
          "E1"
        ],
        "applicability": [
          {
            "text": "Windows の以下のバージョンが影響を受けます：7 (32 ビット、Service Pack 1)、7 (x64、Service Pack 1)、8.1 (32 ビット)、8.1 (x64)、RT 8.1、10 (32 ビット)、10 (x64)、10 Version 1607 (32 ビット)、10 Version 1607 (x64)、10 Version 1703 (32 ビット)、10 Version 1703 (x64)、10 Version 1709 (32 ビット)、10 Version 1709 (x64)、10 Version 1803 (32 ビット)、10 Version 1803 (x64)、10 Version 1803 (ARM64)、10 Version 1809 (32 ビット)、10 Version 1809 (x64)、10 Version 1809 (ARM64)、10 Version 1709 (ARM64)",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0859.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "Windows Server の以下のバージョンが影響を受けます：2008 R2 (x64、Service Pack 1、Core インストール)、2008 R2 (Itanium、Service Pack 1)、2008 R2 (x64、Service Pack 1)、2008 (32 ビット、Service Pack 2、Core インストール)、2012、2012 (Core インストール)、2012 R2、2012 R2 (Core インストール)、2016、2016 (Core インストール)、バージョン 1709 (Core インストール)、バージョン 1803 (Core インストール)、2019、2019 (Core インストール)、2008 (Itanium、Service Pack 2)、2008 (32 ビット、Service Pack 2)、2008 (x64、Service Pack 2)、2008 (x64、Service Pack 2、Core インストール)",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0859.json"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows。影響ありとして記載：8.1 for 32-bit systems。影響ありとして記載：8.1 for x64-based systems。影響ありとして記載：RT 8.1。影響ありとして記載：10 for 32-bit Systems。影響ありとして記載：10 for x64-based Systems。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0859.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server。影響ありとして記載：2012。影響ありとして記載：2012 (Core installation)。影響ありとして記載：2012 R2。影響ありとして記載：2012 R2 (Core installation)。影響ありとして記載：2016。影響ありとして記載：2016  (Core installation)。影響ありとして記載：version 1709  (Core Installation)。影響ありとして記載：version 1803  (Core Installation)。影響ありとして記載：2019。影響ありとして記載：2019  (Core installation)。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0859.json"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。",
            "kind": "fact",
            "sourceUrls": [
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0859"
            ],
            "evidenceIds": [
              "E5"
            ]
          }
        ],
        "versionChecks": [
          {
            "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0859.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "「スタート」→「設定」→「システム」→「バージョン情報」を開き、Windowsのエディション・バージョン・OSビルドを控えます。会社のPCやサーバーは、この情報とCVE番号を管理担当者へ渡してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device"
            ]
          }
        ],
        "actions": [
          {
            "text": "ベンダーの指示に従って更新プログラムを適用する。",
            "kind": "fix",
            "sourceUrls": [
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0859"
            ],
            "evidenceIds": [
              "E4"
            ]
          },
          {
            "text": "「CVE-2019-0859」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cve.org/CVERecord?id=CVE-2019-0859",
              "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0859",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0859",
              "https://nvd.nist.gov/vuln/detail/CVE-2019-0859"
            ]
          },
          {
            "text": "Windows 11は「設定」→「Windows Update」→「更新プログラムのチェック」を開き、提供された更新を適用します。再起動を求められたら完了させます。会社管理のPC、Windows Server、サポート外の版は管理担当者に適用する修正番号と配布予定を確認してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates"
            ]
          }
        ],
        "temporaryMitigations": [
          {
            "text": "すぐ更新できない場合は、CVE番号、Windowsの版、業務で必要な機能を管理担当者に伝え、修正までの利用方法と更新予定を決めてください。すべてのWindowsの問題に同じ回避策が使えるわけではありません。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates",
              "https://www.cve.org/CVERecord?id=CVE-2019-0859",
              "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0859",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0859",
              "https://nvd.nist.gov/vuln/detail/CVE-2019-0859"
            ]
          }
        ],
        "verification": [
          {
            "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。",
            "kind": "procedure",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0859.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "再起動後にWindows Updateを開き直して失敗・再起動待ちがないか確認し、管理担当者にこのCVEに対応する修正の適用結果を確認してもらってください。「最新の状態」と出ても、別製品の更新やサポート外の版の修正を保証するものではありません。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates"
            ]
          }
        ],
        "unknowns": [
          "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。",
          "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。"
        ],
        "sources": [
          {
            "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0859.json",
            "label": "CVE：microsoft"
          },
          {
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0859",
            "label": "CISA KEV（悪用確認）"
          },
          {
            "url": "https://www.cve.org/CVERecord?id=CVE-2019-0859",
            "label": "CVE公式レコード"
          },
          {
            "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0859",
            "label": "CVE掲載の参考情報"
          },
          {
            "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0859",
            "label": "CISAが示す関連情報"
          },
          {
            "url": "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device",
            "label": "Microsoft公式：Windowsの情報を調べる"
          },
          {
            "url": "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates",
            "label": "Microsoft公式：Windows Updateの操作"
          }
        ],
        "evidence": [
          {
            "id": "E1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0859.json",
            "sourceField": "/containers/cna/descriptions/0/value",
            "excerpt": "An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0685, CVE-2019-0803.",
            "language": "en",
            "representation": "source_excerpt"
          },
          {
            "id": "E2",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0859.json",
            "sourceField": "/containers/cna/affected/0",
            "excerpt": "{\"product\":\"Windows\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"7 for 32-bit Systems Service Pack 1\"},{\"status\":\"affected\",\"version\":\"7 for x64-based Systems Service Pack 1\"},{\"status\":\"affected\",\"version\":\"8.1 for 32-bit systems\"},{\"status\":\"affected\",\"version\":\"8.1 for x64-based systems\"},{\"status\":\"affected\",\"version\":\"RT 8.1\"},{\"status\":\"affected\",\"version\":\"10 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1607 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1607 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1703 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1703 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1709 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1709 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1803 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1803 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1803 for ARM64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1809 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1809 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1809 for ARM64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1709 for ARM64-based Systems\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E3",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0859.json",
            "sourceField": "/containers/cna/affected/1",
            "excerpt": "{\"product\":\"Windows Server\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"2008 R2 for x64-based Systems Service Pack 1 (Core installation)\"},{\"status\":\"affected\",\"version\":\"2008 R2 for Itanium-Based Systems Service Pack 1\"},{\"status\":\"affected\",\"version\":\"2008 R2 for x64-based Systems Service Pack 1\"},{\"status\":\"affected\",\"version\":\"2008 for 32-bit Systems Service Pack 2 (Core installation)\"},{\"status\":\"affected\",\"version\":\"2012\"},{\"status\":\"affected\",\"version\":\"2012 (Core installation)\"},{\"status\":\"affected\",\"version\":\"2012 R2\"},{\"status\":\"affected\",\"version\":\"2012 R2 (Core installation)\"},{\"status\":\"affected\",\"version\":\"2016\"},{\"status\":\"affected\",\"version\":\"2016  (Core installation)\"},{\"status\":\"affected\",\"version\":\"version 1709  (Core Installation)\"},{\"status\":\"affected\",\"version\":\"version 1803  (Core Installation)\"},{\"status\":\"affected\",\"version\":\"2019\"},{\"status\":\"affected\",\"version\":\"2019  (Core installation)\"},{\"status\":\"affected\",\"version\":\"2008 for Itanium-Based Systems Service Pack 2\"},{\"status\":\"affected\",\"version\":\"2008 for 32-bit Systems Service Pack 2\"},{\"status\":\"affected\",\"version\":\"2008 for x64-based Systems Service Pack 2\"},{\"status\":\"affected\",\"version\":\"2008 for x64-based Systems Service Pack 2 (Core installation)\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E4",
            "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0859",
            "sourceField": "/sourceAction",
            "excerpt": "Apply updates per vendor instructions.",
            "language": null
          },
          {
            "id": "E5",
            "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0859",
            "sourceField": "/exploitStatus",
            "excerpt": "{\"id\":\"CVE-2019-0859\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}",
            "language": "en",
            "representation": "normalized_feed_field"
          }
        ],
        "supportRequest": "件名：CVE-2019-0859（Windows / Windows Server）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Windows の以下のバージョンが影響を受けます：7 (32 ビット、Service Pack 1)、7 (x64、Service Pack 1)、8.1 (32 ビット)、8.1 (x64)、RT 8.1、10 (32 ビット)、10 (x64)、10 Version 1607 (32 ビット)、10 Version 1607 (x64)、10 Version 1703 (32 ビット)、10 Version 1703 (x64)、10 Version 1709 (32 ビット)、10 Version 1709 (x64)、10 Version 1803 (32 ビット)、10 Version 1803 (x64)、10 Version 1803 (ARM64)、10 Version 1809 (32 ビット)、10 Version 1809 (x64)、10 Version 1809 (ARM64)、10 Version 1709 (ARM64)\n・Windows Server の以下のバージョンが影響を受けます：2008 R2 (x64、Service Pack 1、Core インストール)、2008 R2 (Itanium、Service Pack 1)、2008 R2 (x64、Service Pack 1)、2008 (32 ビット、Service Pack 2、Core インストール)、2012、2012 (Core インストール)、2012 R2、2012 R2 (Core インストール)、2016、2016 (Core インストール)、バージョン 1709 (Core インストール)、バージョン 1803 (Core インストール)、2019、2019 (Core インストール)、2008 (Itanium、Service Pack 2)、2008 (32 ビット、Service Pack 2)、2008 (x64、Service Pack 2)、2008 (x64、Service Pack 2、Core インストール)\n・公式の対象表：Microsoft / Windows。影響ありとして記載：8.1 for 32-bit systems。影響ありとして記載：8.1 for x64-based systems。影響ありとして記載：RT 8.1。影響ありとして記載：10 for 32-bit Systems。影響ありとして記載：10 for x64-based Systems。\n・公式の対象表：Microsoft / Windows Server。影響ありとして記載：2012。影響ありとして記載：2012 (Core installation)。影響ありとして記載：2012 R2。影響ありとして記載：2012 R2 (Core installation)。影響ありとして記載：2016。影響ありとして記載：2016  (Core installation)。影響ありとして記載：version 1709  (Core Installation)。影響ありとして記載：version 1803  (Core Installation)。影響ありとして記載：2019。影響ありとして記載：2019  (Core installation)。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2019-0859",
        "publicationCheckVersion": "2026-10-23.1",
        "sourceNotices": [],
        "automation": {
          "status": "ready",
          "lastAttempt": "2026-10-23T03:46:55.932Z",
          "lastSuccess": "2026-10-23T03:46:55.932Z",
          "sourceCheckedAt": "2026-10-23T02:43:06.299Z",
          "errorCode": null
        },
        "glossary": []
      }
    },
    {
      "id": "CVE-2019-0863",
      "aliases": [],
      "title": "Windows / Windows Server / Windows 10 Version 1903 for 32-bit Systems / Windows 10 Version 1903 for x64-based Systems / Windows 10 Version 1903 for ARM64-based Systems / Windows Server, version 1903 (Server Core installation)：権限の奪取",
      "summary": "Windows Error Reporting (WER) がファイルを処理する方法に特権昇格の脆弱性が存在します。",
      "risk": "攻撃者が特権を昇格させることが可能になる恐れがあります。",
      "product": "Windows / Windows Server / Windows 10 Version 1903 for 32-bit Systems / Windows 10 Version 1903 for x64-based Systems / Windows 10 Version 1903 for ARM64-based Systems / Windows Server, version 1903 (Server Core installation)",
      "category": "windows",
      "component": "package",
      "severity": "unknown",
      "cvss": null,
      "cvssVersion": null,
      "cvssSource": "microsoft",
      "cvssVector": null,
      "affected": [
        {
          "product": "Windows",
          "range": "7 for 32-bit Systems Service Pack 1"
        },
        {
          "product": "Windows",
          "range": "7 for x64-based Systems Service Pack 1"
        },
        {
          "product": "Windows",
          "range": "8.1 for 32-bit systems"
        },
        {
          "product": "Windows",
          "range": "8.1 for x64-based systems"
        },
        {
          "product": "Windows",
          "range": "RT 8.1"
        },
        {
          "product": "Windows",
          "range": "10 for 32-bit Systems"
        },
        {
          "product": "Windows",
          "range": "10 for x64-based Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1607 for 32-bit Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1607 for x64-based Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1703 for 32-bit Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1703 for x64-based Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1709 for 32-bit Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1709 for x64-based Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1803 for 32-bit Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1803 for x64-based Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1803 for ARM64-based Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1809 for 32-bit Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1809 for x64-based Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1809 for ARM64-based Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1709 for ARM64-based Systems"
        },
        {
          "product": "Windows Server",
          "range": "2008 R2 for x64-based Systems Service Pack 1 (Core installation)"
        },
        {
          "product": "Windows Server",
          "range": "2008 R2 for Itanium-Based Systems Service Pack 1"
        },
        {
          "product": "Windows Server",
          "range": "2008 R2 for x64-based Systems Service Pack 1"
        },
        {
          "product": "Windows Server",
          "range": "2012"
        },
        {
          "product": "Windows Server",
          "range": "2012 (Core installation)"
        },
        {
          "product": "Windows Server",
          "range": "2012 R2"
        },
        {
          "product": "Windows Server",
          "range": "2012 R2 (Core installation)"
        },
        {
          "product": "Windows Server",
          "range": "2016"
        },
        {
          "product": "Windows Server",
          "range": "2016  (Core installation)"
        },
        {
          "product": "Windows Server",
          "range": "version 1803  (Core Installation)"
        },
        {
          "product": "Windows Server",
          "range": "2019"
        },
        {
          "product": "Windows Server",
          "range": "2019  (Core installation)"
        },
        {
          "product": "Windows 10 Version 1903 for 32-bit Systems",
          "range": "unspecified"
        },
        {
          "product": "Windows 10 Version 1903 for x64-based Systems",
          "range": "unspecified"
        },
        {
          "product": "Windows 10 Version 1903 for ARM64-based Systems",
          "range": "unspecified"
        },
        {
          "product": "Windows Server, version 1903 (Server Core installation)",
          "range": "unspecified"
        }
      ],
      "fixed": [],
      "steps": [
        "ベンダーの指示に従って更新プログラムを適用してください。",
        "「CVE-2019-0863」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
        "Windows 11は「設定」→「Windows Update」→「更新プログラムのチェック」を開き、提供された更新を適用します。再起動を求められたら完了させます。会社管理のPC、Windows Server、サポート外の版は管理担当者に適用する修正番号と配布予定を確認してください。"
      ],
      "references": [
        {
          "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0863.json",
          "label": "CVE：microsoft"
        },
        {
          "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0863",
          "label": "CISA KEV（悪用確認）"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-0863",
          "label": "CVE公式レコード"
        },
        {
          "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0863",
          "label": "CVE掲載の参考情報"
        },
        {
          "url": "http://packetstormsecurity.com/files/153008/Angry-Polar-Bear-2-Microsoft-Windows-Error-Reporting-Local-Privilege-Escalation.html",
          "label": "CVE掲載の参考情報"
        },
        {
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0863",
          "label": "CISAが示す関連情報"
        },
        {
          "url": "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device",
          "label": "Microsoft公式：Windowsの情報を調べる"
        },
        {
          "url": "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates",
          "label": "Microsoft公式：Windows Updateの操作"
        }
      ],
      "publishedAt": "2019-05-16T18:17:00.000Z",
      "modifiedAt": "2025-10-21T23:45:36.978Z",
      "fetchedAt": "2026-10-23T02:43:06.380Z",
      "exploitStatus": "confirmed",
      "sources": [
        "CVE",
        "CISA KEV"
      ],
      "originalText": "An elevation of privilege vulnerability exists in the way Windows Error Reporting (WER) handles files, aka 'Windows Error Reporting Elevation of Privilege Vulnerability'.",
      "sourceTitle": "",
      "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。",
      "state": "published",
      "affectedDetails": [
        {
          "product": "Windows",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "7 for 32-bit Systems Service Pack 1"
            },
            {
              "status": "affected",
              "version": "7 for x64-based Systems Service Pack 1"
            },
            {
              "status": "affected",
              "version": "8.1 for 32-bit systems"
            },
            {
              "status": "affected",
              "version": "8.1 for x64-based systems"
            },
            {
              "status": "affected",
              "version": "RT 8.1"
            },
            {
              "status": "affected",
              "version": "10 for 32-bit Systems"
            },
            {
              "status": "affected",
              "version": "10 for x64-based Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1607 for 32-bit Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1607 for x64-based Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1703 for 32-bit Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1703 for x64-based Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1709 for 32-bit Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1709 for x64-based Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1803 for 32-bit Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1803 for x64-based Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1803 for ARM64-based Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1809 for 32-bit Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1809 for x64-based Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1809 for ARM64-based Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1709 for ARM64-based Systems"
            }
          ]
        },
        {
          "product": "Windows Server",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "2008 R2 for x64-based Systems Service Pack 1 (Core installation)"
            },
            {
              "status": "affected",
              "version": "2008 R2 for Itanium-Based Systems Service Pack 1"
            },
            {
              "status": "affected",
              "version": "2008 R2 for x64-based Systems Service Pack 1"
            },
            {
              "status": "affected",
              "version": "2012"
            },
            {
              "status": "affected",
              "version": "2012 (Core installation)"
            },
            {
              "status": "affected",
              "version": "2012 R2"
            },
            {
              "status": "affected",
              "version": "2012 R2 (Core installation)"
            },
            {
              "status": "affected",
              "version": "2016"
            },
            {
              "status": "affected",
              "version": "2016  (Core installation)"
            },
            {
              "status": "affected",
              "version": "version 1803  (Core Installation)"
            },
            {
              "status": "affected",
              "version": "2019"
            },
            {
              "status": "affected",
              "version": "2019  (Core installation)"
            }
          ]
        },
        {
          "product": "Windows 10 Version 1903 for 32-bit Systems",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified"
            }
          ]
        },
        {
          "product": "Windows 10 Version 1903 for x64-based Systems",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified"
            }
          ]
        },
        {
          "product": "Windows 10 Version 1903 for ARM64-based Systems",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified"
            }
          ]
        },
        {
          "product": "Windows Server, version 1903 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified"
            }
          ]
        }
      ],
      "officialEvidence": {
        "schemaVersion": "1.0",
        "id": "CVE-2019-0863",
        "sourceType": "CVE",
        "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0863.json",
        "fetchedAt": "2026-10-23T02:43:06.380Z",
        "publishedAt": "2019-05-16T18:17:00.000Z",
        "modifiedAt": "2025-10-21T23:45:36.978Z",
        "state": "published",
        "provider": "microsoft",
        "title": "",
        "descriptions": [
          {
            "lang": "en",
            "value": "An elevation of privilege vulnerability exists in the way Windows Error Reporting (WER) handles files, aka 'Windows Error Reporting Elevation of Privilege Vulnerability'.",
            "sourcePath": "/containers/cna/descriptions/0/value"
          }
        ],
        "affected": [
          {
            "vendor": "Microsoft",
            "product": "Windows",
            "sourcePath": "/containers/cna/affected/0",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/0/versions/0",
                "version": "7 for 32-bit Systems Service Pack 1",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/1",
                "version": "7 for x64-based Systems Service Pack 1",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/2",
                "version": "8.1 for 32-bit systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/3",
                "version": "8.1 for x64-based systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/4",
                "version": "RT 8.1",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/5",
                "version": "10 for 32-bit Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/6",
                "version": "10 for x64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/7",
                "version": "10 Version 1607 for 32-bit Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/8",
                "version": "10 Version 1607 for x64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/9",
                "version": "10 Version 1703 for 32-bit Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/10",
                "version": "10 Version 1703 for x64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/11",
                "version": "10 Version 1709 for 32-bit Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/12",
                "version": "10 Version 1709 for x64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/13",
                "version": "10 Version 1803 for 32-bit Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/14",
                "version": "10 Version 1803 for x64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/15",
                "version": "10 Version 1803 for ARM64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/16",
                "version": "10 Version 1809 for 32-bit Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/17",
                "version": "10 Version 1809 for x64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/18",
                "version": "10 Version 1809 for ARM64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/19",
                "version": "10 Version 1709 for ARM64-based Systems",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server",
            "sourcePath": "/containers/cna/affected/1",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/1/versions/0",
                "version": "2008 R2 for x64-based Systems Service Pack 1 (Core installation)",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/1",
                "version": "2008 R2 for Itanium-Based Systems Service Pack 1",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/2",
                "version": "2008 R2 for x64-based Systems Service Pack 1",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/3",
                "version": "2012",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/4",
                "version": "2012 (Core installation)",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/5",
                "version": "2012 R2",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/6",
                "version": "2012 R2 (Core installation)",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/7",
                "version": "2016",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/8",
                "version": "2016  (Core installation)",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/9",
                "version": "version 1803  (Core Installation)",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/10",
                "version": "2019",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/11",
                "version": "2019  (Core installation)",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 1903 for 32-bit Systems",
            "sourcePath": "/containers/cna/affected/2",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/2/versions/0",
                "version": "unspecified",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 1903 for x64-based Systems",
            "sourcePath": "/containers/cna/affected/3",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/3/versions/0",
                "version": "unspecified",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 1903 for ARM64-based Systems",
            "sourcePath": "/containers/cna/affected/4",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/4/versions/0",
                "version": "unspecified",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server, version 1903 (Server Core installation)",
            "sourcePath": "/containers/cna/affected/5",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/5/versions/0",
                "version": "unspecified",
                "status": "affected"
              }
            ]
          }
        ],
        "solutions": [],
        "workarounds": [],
        "exploits": [],
        "rejectedReasons": [],
        "problemTypes": [
          {
            "cweId": "",
            "lang": "en",
            "description": "Elevation of Privilege",
            "sourcePath": "/containers/cna/problemTypes/0/descriptions/0"
          }
        ],
        "metrics": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "provider": "CISA-ADP",
            "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1"
          }
        ],
        "references": [
          {
            "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0863",
            "label": "CVE",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/0"
          },
          {
            "url": "http://packetstormsecurity.com/files/153008/Angry-Polar-Bear-2-Microsoft-Windows-Error-Reporting-Local-Privilege-Escalation.html",
            "label": "CVE",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/1"
          },
          {
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-0863",
            "label": "CISA-ADP",
            "tags": [
              "government-resource"
            ],
            "provider": "CISA-ADP",
            "sourcePath": "/containers/adp/1/references/0"
          }
        ],
        "snippets": [
          {
            "evidenceId": "official:/containers/cna/affected/0",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0863.json",
            "sourcePath": "/containers/cna/affected/0",
            "text": "{\"product\":\"Windows\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"7 for 32-bit Systems Service Pack 1\"},{\"status\":\"affected\",\"version\":\"7 for x64-based Systems Service Pack 1\"},{\"status\":\"affected\",\"version\":\"8.1 for 32-bit systems\"},{\"status\":\"affected\",\"version\":\"8.1 for x64-based systems\"},{\"status\":\"affected\",\"version\":\"RT 8.1\"},{\"status\":\"affected\",\"version\":\"10 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1607 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1607 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1703 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1703 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1709 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1709 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1803 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1803 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1803 for ARM64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1809 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1809 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1809 for ARM64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1709 for ARM64-based Systems\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0863.json",
            "sourcePath": "/containers/cna/affected/1",
            "text": "{\"product\":\"Windows Server\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"2008 R2 for x64-based Systems Service Pack 1 (Core installation)\"},{\"status\":\"affected\",\"version\":\"2008 R2 for Itanium-Based Systems Service Pack 1\"},{\"status\":\"affected\",\"version\":\"2008 R2 for x64-based Systems Service Pack 1\"},{\"status\":\"affected\",\"version\":\"2012\"},{\"status\":\"affected\",\"version\":\"2012 (Core installation)\"},{\"status\":\"affected\",\"version\":\"2012 R2\"},{\"status\":\"affected\",\"version\":\"2012 R2 (Core installation)\"},{\"status\":\"affected\",\"version\":\"2016\"},{\"status\":\"affected\",\"version\":\"2016  (Core installation)\"},{\"status\":\"affected\",\"version\":\"version 1803  (Core Installation)\"},{\"status\":\"affected\",\"version\":\"2019\"},{\"status\":\"affected\",\"version\":\"2019  (Core installation)\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/2",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0863.json",
            "sourcePath": "/containers/cna/affected/2",
            "text": "{\"product\":\"Windows 10 Version 1903 for 32-bit Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/3",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0863.json",
            "sourcePath": "/containers/cna/affected/3",
            "text": "{\"product\":\"Windows 10 Version 1903 for x64-based Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/4",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0863.json",
            "sourcePath": "/containers/cna/affected/4",
            "text": "{\"product\":\"Windows 10 Version 1903 for ARM64-based Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/5",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0863.json",
            "sourcePath": "/containers/cna/affected/5",
            "text": "{\"product\":\"Windows Server, version 1903 (Server Core installation)\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/descriptions/0/value",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0863.json",
            "sourcePath": "/containers/cna/descriptions/0/value",
            "text": "An elevation of privilege vulnerability exists in the way Windows Error Reporting (WER) handles files, aka 'Windows Error Reporting Elevation of Privilege Vulnerability'.",
            "truncated": false,
            "representation": "source_excerpt"
          },
          {
            "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0863.json",
            "sourcePath": "/containers/cna/problemTypes/0/descriptions/0",
            "text": "{\"description\":\"Elevation of Privilege\",\"lang\":\"en\",\"type\":\"text\"}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/adp/1/metrics/0/cvssV3_1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0863.json",
            "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1",
            "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":7.8,\"attackVector\":\"LOCAL\",\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"NONE\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"LOW\",\"confidentialityImpact\":\"HIGH\"}",
            "truncated": false,
            "representation": "source_json"
          }
        ],
        "limits": {
          "completeness": "official_record",
          "truncatedFields": [],
          "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。"
        }
      },
      "sourceSnapshots": [
        {
          "source": "CVE",
          "modifiedAt": "2025-10-21T23:45:36.978Z",
          "fetchedAt": "2026-10-23T02:43:06.380Z",
          "state": "published"
        },
        {
          "source": "CISA KEV",
          "modifiedAt": "2021-11-03T00:00:00.000Z",
          "fetchedAt": "2026-10-23T02:17:50.489Z",
          "state": "published"
        }
      ],
      "sourceAction": "Apply updates per vendor instructions.",
      "sourceSummary": "Windows / Windows Server / Windows 10 Version 1903 for 32-bit Systems / Windows 10 Version 1903 for x64-based Systems / Windows 10 Version 1903 for ARM64-based Systems / Windows Server, version 1903 (Server Core installation)に権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。",
      "sourceRisk": "本来与えられていない権限で、操作される可能性があります。",
      "guidance": {
        "schemaVersion": "1.0",
        "method": "automatic",
        "reviewedAt": null,
        "reviewState": "current",
        "generatedAt": "2026-10-23T03:46:57.329Z",
        "generatorVersion": "2026-10-23.3",
        "sourceFingerprint": "27e00a95607a89400b7d8f00d9638f66c75c426bd58e9e6b07cda5b688eb73e7",
        "sourceModifiedAt": "2025-10-21T23:45:36.978Z",
        "model": "@cf/openai/gpt-oss-120b",
        "verificationMethod": "exact_source_excerpt_and_independent_semantic_check",
        "summary": "Windows Error Reporting (WER) がファイルを処理する方法に特権昇格の脆弱性が存在します。",
        "risk": "攻撃者が特権を昇格させることが可能になる恐れがあります。",
        "summaryEvidenceIds": [
          "E1"
        ],
        "riskEvidenceIds": [
          "E1"
        ],
        "applicability": [
          {
            "text": "Windows 7 32ビット システム Service Pack 1 が影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0863.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "Windows 7 x64ベース システム Service Pack 1 が影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0863.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "Windows 8.1 32ビット システムが影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0863.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "Windows 8.1 x64ベース システムが影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0863.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "Windows RT 8.1 が影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0863.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "Windows 10 の 32ビット、x64ベース、ARM64ベースの各エディション（Version 1607、1703、1709、1803、1809、1709 (ARM64) など）が影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0863.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "Windows Server 2008 R2 (x64ベース、Itaniumベース) Service Pack 1、Core インストールを含むすべてのエディションが影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0863.json"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "Windows Server 2012、2012 (Core インストール)、2012 R2、2012 R2 (Core インストール) が影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0863.json"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "Windows Server 2016、2016 (Core インストール) が影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0863.json"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "Windows Server バージョン 1803 (Core インストール) が影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0863.json"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "Windows Server 2019、2019 (Core インストール) が影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0863.json"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "Windows 10 Version 1903 の 32ビット、x64ベース、ARM64ベースの各システムが影響を受けます（バージョンは未指定）。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0863.json"
            ],
            "evidenceIds": [
              "E4",
              "E5",
              "E6"
            ]
          },
          {
            "text": "Windows Server, version 1903 (Server Core インストール) が影響を受けます（バージョンは未指定）。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0863.json"
            ],
            "evidenceIds": [
              "E7"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows。影響ありとして記載：8.1 for 32-bit systems。影響ありとして記載：8.1 for x64-based systems。影響ありとして記載：RT 8.1。影響ありとして記載：10 for 32-bit Systems。影響ありとして記載：10 for x64-based Systems。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0863.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server。影響ありとして記載：2012。影響ありとして記載：2012 (Core installation)。影響ありとして記載：2012 R2。影響ありとして記載：2012 R2 (Core installation)。影響ありとして記載：2016。影響ありとして記載：2016  (Core installation)。影響ありとして記載：version 1803  (Core Installation)。影響ありとして記載：2019。影響ありとして記載：2019  (Core installation)。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0863.json"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 1903 for 32-bit Systems。影響ありとして記載：具体的な版番号の記載なし。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0863.json"
            ],
            "evidenceIds": [
              "E4"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 1903 for x64-based Systems。影響ありとして記載：具体的な版番号の記載なし。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0863.json"
            ],
            "evidenceIds": [
              "E5"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 1903 for ARM64-based Systems。影響ありとして記載：具体的な版番号の記載なし。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0863.json"
            ],
            "evidenceIds": [
              "E6"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server, version 1903 (Server Core installation)。影響ありとして記載：具体的な版番号の記載なし。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0863.json"
            ],
            "evidenceIds": [
              "E7"
            ]
          },
          {
            "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。",
            "kind": "fact",
            "sourceUrls": [
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0863"
            ],
            "evidenceIds": [
              "E9"
            ]
          }
        ],
        "versionChecks": [
          {
            "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0863.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "「スタート」→「設定」→「システム」→「バージョン情報」を開き、Windowsのエディション・バージョン・OSビルドを控えます。会社のPCやサーバーは、この情報とCVE番号を管理担当者へ渡してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device"
            ]
          }
        ],
        "actions": [
          {
            "text": "ベンダーの指示に従って更新プログラムを適用してください。",
            "kind": "fix",
            "sourceUrls": [
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0863"
            ],
            "evidenceIds": [
              "E8"
            ]
          },
          {
            "text": "「CVE-2019-0863」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cve.org/CVERecord?id=CVE-2019-0863",
              "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0863",
              "http://packetstormsecurity.com/files/153008/Angry-Polar-Bear-2-Microsoft-Windows-Error-Reporting-Local-Privilege-Escalation.html",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0863",
              "https://nvd.nist.gov/vuln/detail/CVE-2019-0863"
            ]
          },
          {
            "text": "Windows 11は「設定」→「Windows Update」→「更新プログラムのチェック」を開き、提供された更新を適用します。再起動を求められたら完了させます。会社管理のPC、Windows Server、サポート外の版は管理担当者に適用する修正番号と配布予定を確認してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates"
            ]
          }
        ],
        "temporaryMitigations": [
          {
            "text": "すぐ更新できない場合は、CVE番号、Windowsの版、業務で必要な機能を管理担当者に伝え、修正までの利用方法と更新予定を決めてください。すべてのWindowsの問題に同じ回避策が使えるわけではありません。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates",
              "https://www.cve.org/CVERecord?id=CVE-2019-0863",
              "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0863",
              "http://packetstormsecurity.com/files/153008/Angry-Polar-Bear-2-Microsoft-Windows-Error-Reporting-Local-Privilege-Escalation.html",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0863",
              "https://nvd.nist.gov/vuln/detail/CVE-2019-0863"
            ]
          }
        ],
        "verification": [
          {
            "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。",
            "kind": "procedure",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0863.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "再起動後にWindows Updateを開き直して失敗・再起動待ちがないか確認し、管理担当者にこのCVEに対応する修正の適用結果を確認してもらってください。「最新の状態」と出ても、別製品の更新やサポート外の版の修正を保証するものではありません。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates"
            ]
          }
        ],
        "unknowns": [
          "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。",
          "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。"
        ],
        "sources": [
          {
            "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0863.json",
            "label": "CVE：microsoft"
          },
          {
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0863",
            "label": "CISA KEV（悪用確認）"
          },
          {
            "url": "https://www.cve.org/CVERecord?id=CVE-2019-0863",
            "label": "CVE公式レコード"
          },
          {
            "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0863",
            "label": "CVE掲載の参考情報"
          },
          {
            "url": "http://packetstormsecurity.com/files/153008/Angry-Polar-Bear-2-Microsoft-Windows-Error-Reporting-Local-Privilege-Escalation.html",
            "label": "CVE掲載の参考情報"
          },
          {
            "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0863",
            "label": "CISAが示す関連情報"
          },
          {
            "url": "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device",
            "label": "Microsoft公式：Windowsの情報を調べる"
          },
          {
            "url": "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates",
            "label": "Microsoft公式：Windows Updateの操作"
          }
        ],
        "evidence": [
          {
            "id": "E1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0863.json",
            "sourceField": "/containers/cna/descriptions/0/value",
            "excerpt": "An elevation of privilege vulnerability exists in the way Windows Error Reporting (WER) handles files, aka 'Windows Error Reporting Elevation of Privilege Vulnerability'.",
            "language": "en",
            "representation": "source_excerpt"
          },
          {
            "id": "E2",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0863.json",
            "sourceField": "/containers/cna/affected/0",
            "excerpt": "{\"product\":\"Windows\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"7 for 32-bit Systems Service Pack 1\"},{\"status\":\"affected\",\"version\":\"7 for x64-based Systems Service Pack 1\"},{\"status\":\"affected\",\"version\":\"8.1 for 32-bit systems\"},{\"status\":\"affected\",\"version\":\"8.1 for x64-based systems\"},{\"status\":\"affected\",\"version\":\"RT 8.1\"},{\"status\":\"affected\",\"version\":\"10 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1607 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1607 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1703 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1703 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1709 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1709 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1803 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1803 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1803 for ARM64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1809 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1809 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1809 for ARM64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1709 for ARM64-based Systems\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E3",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0863.json",
            "sourceField": "/containers/cna/affected/1",
            "excerpt": "{\"product\":\"Windows Server\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"2008 R2 for x64-based Systems Service Pack 1 (Core installation)\"},{\"status\":\"affected\",\"version\":\"2008 R2 for Itanium-Based Systems Service Pack 1\"},{\"status\":\"affected\",\"version\":\"2008 R2 for x64-based Systems Service Pack 1\"},{\"status\":\"affected\",\"version\":\"2012\"},{\"status\":\"affected\",\"version\":\"2012 (Core installation)\"},{\"status\":\"affected\",\"version\":\"2012 R2\"},{\"status\":\"affected\",\"version\":\"2012 R2 (Core installation)\"},{\"status\":\"affected\",\"version\":\"2016\"},{\"status\":\"affected\",\"version\":\"2016  (Core installation)\"},{\"status\":\"affected\",\"version\":\"version 1803  (Core Installation)\"},{\"status\":\"affected\",\"version\":\"2019\"},{\"status\":\"affected\",\"version\":\"2019  (Core installation)\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E4",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0863.json",
            "sourceField": "/containers/cna/affected/2",
            "excerpt": "{\"product\":\"Windows 10 Version 1903 for 32-bit Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E5",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0863.json",
            "sourceField": "/containers/cna/affected/3",
            "excerpt": "{\"product\":\"Windows 10 Version 1903 for x64-based Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E6",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0863.json",
            "sourceField": "/containers/cna/affected/4",
            "excerpt": "{\"product\":\"Windows 10 Version 1903 for ARM64-based Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E7",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0863.json",
            "sourceField": "/containers/cna/affected/5",
            "excerpt": "{\"product\":\"Windows Server, version 1903 (Server Core installation)\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E8",
            "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0863",
            "sourceField": "/sourceAction",
            "excerpt": "Apply updates per vendor instructions.",
            "language": null
          },
          {
            "id": "E9",
            "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0863",
            "sourceField": "/exploitStatus",
            "excerpt": "{\"id\":\"CVE-2019-0863\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}",
            "language": "en",
            "representation": "normalized_feed_field"
          }
        ],
        "supportRequest": "件名：CVE-2019-0863（Windows / Windows Server / Windows 10 Version 1903 for 32-bit Systems / Windows 10 Version 1903 for x64-based Systems / Windows 10 Version 1903 for ARM64-based Systems / Windows Server, version 1903 (Server Core installation)）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Windows 7 32ビット システム Service Pack 1 が影響を受けます。\n・Windows 7 x64ベース システム Service Pack 1 が影響を受けます。\n・Windows 8.1 32ビット システムが影響を受けます。\n・Windows 8.1 x64ベース システムが影響を受けます。\n・Windows RT 8.1 が影響を受けます。\n・Windows 10 の 32ビット、x64ベース、ARM64ベースの各エディション（Version 1607、1703、1709、1803、1809、1709 (ARM64) など）が影響を受けます。\n・Windows Server 2008 R2 (x64ベース、Itaniumベース) Service Pack 1、Core インストールを含むすべてのエディションが影響を受けます。\n・Windows Server 2012、2012 (Core インストール)、2012 R2、2012 R2 (Core インストール) が影響を受けます。\n・Windows Server 2016、2016 (Core インストール) が影響を受けます。\n・Windows Server バージョン 1803 (Core インストール) が影響を受けます。\n・Windows Server 2019、2019 (Core インストール) が影響を受けます。\n・Windows 10 Version 1903 の 32ビット、x64ベース、ARM64ベースの各システムが影響を受けます（バージョンは未指定）。\n・Windows Server, version 1903 (Server Core インストール) が影響を受けます（バージョンは未指定）。\n・公式の対象表：Microsoft / Windows。影響ありとして記載：8.1 for 32-bit systems。影響ありとして記載：8.1 for x64-based systems。影響ありとして記載：RT 8.1。影響ありとして記載：10 for 32-bit Systems。影響ありとして記載：10 for x64-based Systems。\n・公式の対象表：Microsoft / Windows Server。影響ありとして記載：2012。影響ありとして記載：2012 (Core installation)。影響ありとして記載：2012 R2。影響ありとして記載：2012 R2 (Core installation)。影響ありとして記載：2016。影響ありとして記載：2016  (Core installation)。影響ありとして記載：version 1803  (Core Installation)。影響ありとして記載：2019。影響ありとして記載：2019  (Core installation)。\n・公式の対象表：Microsoft / Windows 10 Version 1903 for 32-bit Systems。影響ありとして記載：具体的な版番号の記載なし。\n・公式の対象表：Microsoft / Windows 10 Version 1903 for x64-based Systems。影響ありとして記載：具体的な版番号の記載なし。\n・公式の対象表：Microsoft / Windows 10 Version 1903 for ARM64-based Systems。影響ありとして記載：具体的な版番号の記載なし。\n・公式の対象表：Microsoft / Windows Server, version 1903 (Server Core installation)。影響ありとして記載：具体的な版番号の記載なし。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2019-0863",
        "publicationCheckVersion": "2026-10-23.1",
        "sourceNotices": [],
        "automation": {
          "status": "ready",
          "lastAttempt": "2026-10-23T03:46:57.329Z",
          "lastSuccess": "2026-10-23T03:46:57.329Z",
          "sourceCheckedAt": "2026-10-23T02:43:06.380Z",
          "errorCode": null
        },
        "glossary": []
      }
    },
    {
      "id": "CVE-2019-11634",
      "aliases": [],
      "title": "n/a：脆弱性情報",
      "summary": "Citrix Workspace App の Windows 用バージョン 1904 未満に、アクセス制御の不備があります。",
      "risk": "CISA はこの脆弱性が実際に悪用されたことを確認しています。",
      "product": "Citrix Workspace Application and Receiver for Windows",
      "category": "windows",
      "component": "package",
      "severity": "unknown",
      "cvss": null,
      "cvssVersion": null,
      "cvssSource": "mitre",
      "cvssVector": null,
      "affected": [
        {
          "product": "n/a",
          "range": "n/a"
        }
      ],
      "fixed": [],
      "steps": [
        "ベンダーの指示に従ってアップデートを適用してください。",
        "「CVE-2019-11634」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
        "Windows 11は「設定」→「Windows Update」→「更新プログラムのチェック」を開き、提供された更新を適用します。再起動を求められたら完了させます。会社管理のPC、Windows Server、サポート外の版は管理担当者に適用する修正番号と配布予定を確認してください。"
      ],
      "references": [
        {
          "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/11xxx/CVE-2019-11634.json",
          "label": "CVE：mitre"
        },
        {
          "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-11634",
          "label": "CISA KEV（悪用確認）"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-11634",
          "label": "CVE公式レコード"
        },
        {
          "url": "https://support.citrix.com/v1/search?searchQuery=%22%22&lang=en&sort=cr_date_desc&prod=&pver=&ct=Security+Bulletin",
          "label": "CVE掲載の参考情報"
        },
        {
          "url": "https://support.citrix.com/article/CTX251986",
          "label": "CVE掲載の参考情報"
        },
        {
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11634",
          "label": "CISAが示す関連情報"
        },
        {
          "url": "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device",
          "label": "Microsoft公式：Windowsの情報を調べる"
        },
        {
          "url": "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates",
          "label": "Microsoft公式：Windows Updateの操作"
        }
      ],
      "publishedAt": "2019-05-22T16:46:42.000Z",
      "modifiedAt": "2026-08-12T03:55:49.649Z",
      "fetchedAt": "2026-10-23T02:43:06.913Z",
      "exploitStatus": "confirmed",
      "sources": [
        "CVE",
        "CISA KEV"
      ],
      "originalText": "Citrix Workspace App before 1904 for Windows has Incorrect Access Control.",
      "sourceTitle": "",
      "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。",
      "state": "published",
      "affectedDetails": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "officialEvidence": {
        "schemaVersion": "1.0",
        "id": "CVE-2019-11634",
        "sourceType": "CVE",
        "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/11xxx/CVE-2019-11634.json",
        "fetchedAt": "2026-10-23T02:43:06.913Z",
        "publishedAt": "2019-05-22T16:46:42.000Z",
        "modifiedAt": "2026-08-12T03:55:49.649Z",
        "state": "published",
        "provider": "mitre",
        "title": "",
        "descriptions": [
          {
            "lang": "en",
            "value": "Citrix Workspace App before 1904 for Windows has Incorrect Access Control.",
            "sourcePath": "/containers/cna/descriptions/0/value"
          }
        ],
        "affected": [
          {
            "vendor": "n/a",
            "product": "n/a",
            "sourcePath": "/containers/cna/affected/0",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/0/versions/0",
                "version": "n/a",
                "status": "affected"
              }
            ]
          }
        ],
        "solutions": [],
        "workarounds": [],
        "exploits": [],
        "rejectedReasons": [],
        "problemTypes": [
          {
            "cweId": "",
            "lang": "en",
            "description": "n/a",
            "sourcePath": "/containers/cna/problemTypes/0/descriptions/0"
          }
        ],
        "metrics": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "provider": "CISA-ADP",
            "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1"
          }
        ],
        "references": [
          {
            "url": "https://support.citrix.com/v1/search?searchQuery=%22%22&lang=en&sort=cr_date_desc&prod=&pver=&ct=Security+Bulletin",
            "label": "CVE",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/0"
          },
          {
            "url": "https://support.citrix.com/article/CTX251986",
            "label": "CVE",
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/1"
          },
          {
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-11634",
            "label": "CISA-ADP",
            "tags": [
              "government-resource"
            ],
            "provider": "CISA-ADP",
            "sourcePath": "/containers/adp/1/references/0"
          }
        ],
        "snippets": [
          {
            "evidenceId": "official:/containers/cna/affected/0",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/11xxx/CVE-2019-11634.json",
            "sourcePath": "/containers/cna/affected/0",
            "text": "{\"product\":\"n/a\",\"vendor\":\"n/a\",\"versions\":[{\"status\":\"affected\",\"version\":\"n/a\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/descriptions/0/value",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/11xxx/CVE-2019-11634.json",
            "sourcePath": "/containers/cna/descriptions/0/value",
            "text": "Citrix Workspace App before 1904 for Windows has Incorrect Access Control.",
            "truncated": false,
            "representation": "source_excerpt"
          },
          {
            "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/11xxx/CVE-2019-11634.json",
            "sourcePath": "/containers/cna/problemTypes/0/descriptions/0",
            "text": "{\"description\":\"n/a\",\"lang\":\"en\",\"type\":\"text\"}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/adp/1/metrics/0/cvssV3_1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/11xxx/CVE-2019-11634.json",
            "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1",
            "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":9.8,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"CRITICAL\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"NONE\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"confidentialityImpact\":\"HIGH\"}",
            "truncated": false,
            "representation": "source_json"
          }
        ],
        "limits": {
          "completeness": "official_record",
          "truncatedFields": [],
          "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。"
        }
      },
      "sourceSnapshots": [
        {
          "source": "CVE",
          "modifiedAt": "2026-08-12T03:55:49.649Z",
          "fetchedAt": "2026-10-23T02:43:06.913Z",
          "state": "published"
        },
        {
          "source": "CISA KEV",
          "modifiedAt": "2021-11-03T00:00:00.000Z",
          "fetchedAt": "2026-10-23T02:17:50.489Z",
          "state": "published"
        }
      ],
      "sourceAction": "Apply updates per vendor instructions.",
      "sourceSummary": "n/aに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。",
      "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。",
      "guidance": {
        "schemaVersion": "1.0",
        "method": "automatic",
        "reviewedAt": null,
        "reviewState": "current",
        "generatedAt": "2026-10-23T03:53:08.757Z",
        "generatorVersion": "2026-10-23.3",
        "sourceFingerprint": "8af11ffb1442ac0fbb50c357820982216fd5c1295d43e8b5545702f5092c5414",
        "sourceModifiedAt": "2026-08-12T03:55:49.649Z",
        "model": "@cf/openai/gpt-oss-120b",
        "verificationMethod": "exact_source_excerpt_and_independent_semantic_check",
        "summary": "Citrix Workspace App の Windows 用バージョン 1904 未満に、アクセス制御の不備があります。",
        "risk": "CISA はこの脆弱性が実際に悪用されたことを確認しています。",
        "summaryEvidenceIds": [
          "E1"
        ],
        "riskEvidenceIds": [
          "E2"
        ],
        "applicability": [
          {
            "text": "Citrix Workspace App for Windows のバージョン 1904 未満が影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/11xxx/CVE-2019-11634.json"
            ],
            "evidenceIds": [
              "E1"
            ]
          },
          {
            "text": "公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/11xxx/CVE-2019-11634.json"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。",
            "kind": "fact",
            "sourceUrls": [
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-11634"
            ],
            "evidenceIds": [
              "E2"
            ]
          }
        ],
        "versionChecks": [
          {
            "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/11xxx/CVE-2019-11634.json"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "「スタート」→「設定」→「システム」→「バージョン情報」を開き、Windowsのエディション・バージョン・OSビルドを控えます。会社のPCやサーバーは、この情報とCVE番号を管理担当者へ渡してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device"
            ]
          }
        ],
        "actions": [
          {
            "text": "ベンダーの指示に従ってアップデートを適用してください。",
            "kind": "fix",
            "sourceUrls": [
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-11634"
            ],
            "evidenceIds": [
              "E4"
            ]
          },
          {
            "text": "「CVE-2019-11634」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cve.org/CVERecord?id=CVE-2019-11634",
              "https://support.citrix.com/v1/search?searchQuery=%22%22&lang=en&sort=cr_date_desc&prod=&pver=&ct=Security+Bulletin",
              "https://support.citrix.com/article/CTX251986",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-11634",
              "https://nvd.nist.gov/vuln/detail/CVE-2019-11634"
            ]
          },
          {
            "text": "Windows 11は「設定」→「Windows Update」→「更新プログラムのチェック」を開き、提供された更新を適用します。再起動を求められたら完了させます。会社管理のPC、Windows Server、サポート外の版は管理担当者に適用する修正番号と配布予定を確認してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates"
            ]
          }
        ],
        "temporaryMitigations": [
          {
            "text": "すぐ更新できない場合は、CVE番号、Windowsの版、業務で必要な機能を管理担当者に伝え、修正までの利用方法と更新予定を決めてください。すべてのWindowsの問題に同じ回避策が使えるわけではありません。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates",
              "https://www.cve.org/CVERecord?id=CVE-2019-11634",
              "https://support.citrix.com/v1/search?searchQuery=%22%22&lang=en&sort=cr_date_desc&prod=&pver=&ct=Security+Bulletin",
              "https://support.citrix.com/article/CTX251986",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-11634",
              "https://nvd.nist.gov/vuln/detail/CVE-2019-11634"
            ]
          }
        ],
        "verification": [
          {
            "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。",
            "kind": "procedure",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/11xxx/CVE-2019-11634.json"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "再起動後にWindows Updateを開き直して失敗・再起動待ちがないか確認し、管理担当者にこのCVEに対応する修正の適用結果を確認してもらってください。「最新の状態」と出ても、別製品の更新やサポート外の版の修正を保証するものではありません。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates"
            ]
          }
        ],
        "unknowns": [
          "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。",
          "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。"
        ],
        "sources": [
          {
            "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/11xxx/CVE-2019-11634.json",
            "label": "CVE：mitre"
          },
          {
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-11634",
            "label": "CISA KEV（悪用確認）"
          },
          {
            "url": "https://www.cve.org/CVERecord?id=CVE-2019-11634",
            "label": "CVE公式レコード"
          },
          {
            "url": "https://support.citrix.com/v1/search?searchQuery=%22%22&lang=en&sort=cr_date_desc&prod=&pver=&ct=Security+Bulletin",
            "label": "CVE掲載の参考情報"
          },
          {
            "url": "https://support.citrix.com/article/CTX251986",
            "label": "CVE掲載の参考情報"
          },
          {
            "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11634",
            "label": "CISAが示す関連情報"
          },
          {
            "url": "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device",
            "label": "Microsoft公式：Windowsの情報を調べる"
          },
          {
            "url": "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates",
            "label": "Microsoft公式：Windows Updateの操作"
          }
        ],
        "evidence": [
          {
            "id": "E1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/11xxx/CVE-2019-11634.json",
            "sourceField": "/containers/cna/descriptions/0/value",
            "excerpt": "Citrix Workspace App before 1904 for Windows has Incorrect Access Control.",
            "language": "en",
            "representation": "source_excerpt"
          },
          {
            "id": "E2",
            "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-11634",
            "sourceField": "/exploitStatus",
            "excerpt": "{\"id\":\"CVE-2019-11634\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}",
            "language": "en",
            "representation": "normalized_feed_field"
          },
          {
            "id": "E3",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/11xxx/CVE-2019-11634.json",
            "sourceField": "/containers/cna/affected/0",
            "excerpt": "{\"product\":\"n/a\",\"vendor\":\"n/a\",\"versions\":[{\"status\":\"affected\",\"version\":\"n/a\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E4",
            "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-11634",
            "sourceField": "/sourceAction",
            "excerpt": "Apply updates per vendor instructions.",
            "language": null
          }
        ],
        "supportRequest": "件名：CVE-2019-11634（Citrix Workspace Application and Receiver for Windows）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Citrix Workspace App for Windows のバージョン 1904 未満が影響を受けます。\n・公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2019-11634",
        "publicationCheckVersion": "2026-10-23.1",
        "sourceNotices": [],
        "automation": {
          "status": "ready",
          "lastAttempt": "2026-10-23T03:53:08.757Z",
          "lastSuccess": "2026-10-23T03:53:08.757Z",
          "sourceCheckedAt": "2026-10-23T02:43:06.913Z",
          "errorCode": null
        },
        "glossary": []
      }
    },
    {
      "id": "CVE-2019-1214",
      "aliases": [],
      "title": "Windows / Windows Server / Windows 10 Version 1903 for 32-bit Systems / Windows 10 Version 1903 for x64-based Systems / Windows 10 Version 1903 for ARM64-based Systems / Windows Server, version 1903 (Server Core installation)：権限の奪取",
      "summary": "Windows Common Log File System (CLFS) ドライバーがメモリ内のオブジェクトを不適切に処理するため、特権昇格の脆弱性が存在します。",
      "risk": "攻撃者がこの脆弱性を利用して、システム上でより高い権限を取得できる可能性があります。",
      "product": "Windows / Windows Server / Windows 10 Version 1903 for 32-bit Systems / Windows 10 Version 1903 for x64-based Systems / Windows 10 Version 1903 for ARM64-based Systems / Windows Server, version 1903 (Server Core installation)",
      "category": "windows",
      "component": "package",
      "severity": "unknown",
      "cvss": null,
      "cvssVersion": null,
      "cvssSource": "microsoft",
      "cvssVector": null,
      "affected": [
        {
          "product": "Windows",
          "range": "7 for 32-bit Systems Service Pack 1"
        },
        {
          "product": "Windows",
          "range": "7 for x64-based Systems Service Pack 1"
        },
        {
          "product": "Windows",
          "range": "8.1 for 32-bit systems"
        },
        {
          "product": "Windows",
          "range": "8.1 for x64-based systems"
        },
        {
          "product": "Windows",
          "range": "RT 8.1"
        },
        {
          "product": "Windows",
          "range": "10 for 32-bit Systems"
        },
        {
          "product": "Windows",
          "range": "10 for x64-based Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1607 for 32-bit Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1607 for x64-based Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1703 for 32-bit Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1703 for x64-based Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1709 for 32-bit Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1709 for x64-based Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1803 for 32-bit Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1803 for x64-based Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1803 for ARM64-based Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1809 for 32-bit Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1809 for x64-based Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1809 for ARM64-based Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1709 for ARM64-based Systems"
        },
        {
          "product": "Windows Server",
          "range": "2008 R2 for x64-based Systems Service Pack 1 (Core installation)"
        },
        {
          "product": "Windows Server",
          "range": "2008 R2 for Itanium-Based Systems Service Pack 1"
        },
        {
          "product": "Windows Server",
          "range": "2008 R2 for x64-based Systems Service Pack 1"
        },
        {
          "product": "Windows Server",
          "range": "2008 for 32-bit Systems Service Pack 2 (Core installation)"
        },
        {
          "product": "Windows Server",
          "range": "2012"
        },
        {
          "product": "Windows Server",
          "range": "2012 (Core installation)"
        },
        {
          "product": "Windows Server",
          "range": "2012 R2"
        },
        {
          "product": "Windows Server",
          "range": "2012 R2 (Core installation)"
        },
        {
          "product": "Windows Server",
          "range": "2016"
        },
        {
          "product": "Windows Server",
          "range": "2016  (Core installation)"
        },
        {
          "product": "Windows Server",
          "range": "version 1803  (Core Installation)"
        },
        {
          "product": "Windows Server",
          "range": "2019"
        },
        {
          "product": "Windows Server",
          "range": "2019  (Core installation)"
        },
        {
          "product": "Windows Server",
          "range": "2008 for Itanium-Based Systems Service Pack 2"
        },
        {
          "product": "Windows Server",
          "range": "2008 for 32-bit Systems Service Pack 2"
        },
        {
          "product": "Windows Server",
          "range": "2008 for x64-based Systems Service Pack 2"
        },
        {
          "product": "Windows Server",
          "range": "2008 for x64-based Systems Service Pack 2 (Core installation)"
        },
        {
          "product": "Windows 10 Version 1903 for 32-bit Systems",
          "range": "unspecified"
        },
        {
          "product": "Windows 10 Version 1903 for x64-based Systems",
          "range": "unspecified"
        },
        {
          "product": "Windows 10 Version 1903 for ARM64-based Systems",
          "range": "unspecified"
        },
        {
          "product": "Windows Server, version 1903 (Server Core installation)",
          "range": "unspecified"
        }
      ],
      "fixed": [],
      "steps": [
        "ベンダーの指示に従って更新プログラムを適用する。",
        "「CVE-2019-1214」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
        "Windows 11は「設定」→「Windows Update」→「更新プログラムのチェック」を開き、提供された更新を適用します。再起動を求められたら完了させます。会社管理のPC、Windows Server、サポート外の版は管理担当者に適用する修正番号と配布予定を確認してください。"
      ],
      "references": [
        {
          "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1214.json",
          "label": "CVE：microsoft"
        },
        {
          "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-1214",
          "label": "CISA KEV（悪用確認）"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-1214",
          "label": "CVE公式レコード"
        },
        {
          "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1214",
          "label": "CVE掲載の参考情報"
        },
        {
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-1214",
          "label": "CISAが示す関連情報"
        },
        {
          "url": "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device",
          "label": "Microsoft公式：Windowsの情報を調べる"
        },
        {
          "url": "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates",
          "label": "Microsoft公式：Windows Updateの操作"
        }
      ],
      "publishedAt": "2019-09-11T21:24:58.000Z",
      "modifiedAt": "2025-10-21T23:45:31.259Z",
      "fetchedAt": "2026-10-23T02:43:06.972Z",
      "exploitStatus": "confirmed",
      "sources": [
        "CVE",
        "CISA KEV"
      ],
      "originalText": "An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory, aka 'Windows Common Log File System Driver Elevation of Privilege Vulnerability'.",
      "sourceTitle": "",
      "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。",
      "state": "published",
      "affectedDetails": [
        {
          "product": "Windows",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "7 for 32-bit Systems Service Pack 1"
            },
            {
              "status": "affected",
              "version": "7 for x64-based Systems Service Pack 1"
            },
            {
              "status": "affected",
              "version": "8.1 for 32-bit systems"
            },
            {
              "status": "affected",
              "version": "8.1 for x64-based systems"
            },
            {
              "status": "affected",
              "version": "RT 8.1"
            },
            {
              "status": "affected",
              "version": "10 for 32-bit Systems"
            },
            {
              "status": "affected",
              "version": "10 for x64-based Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1607 for 32-bit Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1607 for x64-based Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1703 for 32-bit Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1703 for x64-based Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1709 for 32-bit Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1709 for x64-based Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1803 for 32-bit Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1803 for x64-based Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1803 for ARM64-based Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1809 for 32-bit Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1809 for x64-based Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1809 for ARM64-based Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1709 for ARM64-based Systems"
            }
          ]
        },
        {
          "product": "Windows Server",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "2008 R2 for x64-based Systems Service Pack 1 (Core installation)"
            },
            {
              "status": "affected",
              "version": "2008 R2 for Itanium-Based Systems Service Pack 1"
            },
            {
              "status": "affected",
              "version": "2008 R2 for x64-based Systems Service Pack 1"
            },
            {
              "status": "affected",
              "version": "2008 for 32-bit Systems Service Pack 2 (Core installation)"
            },
            {
              "status": "affected",
              "version": "2012"
            },
            {
              "status": "affected",
              "version": "2012 (Core installation)"
            },
            {
              "status": "affected",
              "version": "2012 R2"
            },
            {
              "status": "affected",
              "version": "2012 R2 (Core installation)"
            },
            {
              "status": "affected",
              "version": "2016"
            },
            {
              "status": "affected",
              "version": "2016  (Core installation)"
            },
            {
              "status": "affected",
              "version": "version 1803  (Core Installation)"
            },
            {
              "status": "affected",
              "version": "2019"
            },
            {
              "status": "affected",
              "version": "2019  (Core installation)"
            },
            {
              "status": "affected",
              "version": "2008 for Itanium-Based Systems Service Pack 2"
            },
            {
              "status": "affected",
              "version": "2008 for 32-bit Systems Service Pack 2"
            },
            {
              "status": "affected",
              "version": "2008 for x64-based Systems Service Pack 2"
            },
            {
              "status": "affected",
              "version": "2008 for x64-based Systems Service Pack 2 (Core installation)"
            }
          ]
        },
        {
          "product": "Windows 10 Version 1903 for 32-bit Systems",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified"
            }
          ]
        },
        {
          "product": "Windows 10 Version 1903 for x64-based Systems",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified"
            }
          ]
        },
        {
          "product": "Windows 10 Version 1903 for ARM64-based Systems",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified"
            }
          ]
        },
        {
          "product": "Windows Server, version 1903 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified"
            }
          ]
        }
      ],
      "officialEvidence": {
        "schemaVersion": "1.0",
        "id": "CVE-2019-1214",
        "sourceType": "CVE",
        "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1214.json",
        "fetchedAt": "2026-10-23T02:43:06.972Z",
        "publishedAt": "2019-09-11T21:24:58.000Z",
        "modifiedAt": "2025-10-21T23:45:31.259Z",
        "state": "published",
        "provider": "microsoft",
        "title": "",
        "descriptions": [
          {
            "lang": "en",
            "value": "An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory, aka 'Windows Common Log File System Driver Elevation of Privilege Vulnerability'.",
            "sourcePath": "/containers/cna/descriptions/0/value"
          }
        ],
        "affected": [
          {
            "vendor": "Microsoft",
            "product": "Windows",
            "sourcePath": "/containers/cna/affected/0",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/0/versions/0",
                "version": "7 for 32-bit Systems Service Pack 1",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/1",
                "version": "7 for x64-based Systems Service Pack 1",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/2",
                "version": "8.1 for 32-bit systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/3",
                "version": "8.1 for x64-based systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/4",
                "version": "RT 8.1",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/5",
                "version": "10 for 32-bit Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/6",
                "version": "10 for x64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/7",
                "version": "10 Version 1607 for 32-bit Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/8",
                "version": "10 Version 1607 for x64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/9",
                "version": "10 Version 1703 for 32-bit Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/10",
                "version": "10 Version 1703 for x64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/11",
                "version": "10 Version 1709 for 32-bit Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/12",
                "version": "10 Version 1709 for x64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/13",
                "version": "10 Version 1803 for 32-bit Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/14",
                "version": "10 Version 1803 for x64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/15",
                "version": "10 Version 1803 for ARM64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/16",
                "version": "10 Version 1809 for 32-bit Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/17",
                "version": "10 Version 1809 for x64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/18",
                "version": "10 Version 1809 for ARM64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/19",
                "version": "10 Version 1709 for ARM64-based Systems",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server",
            "sourcePath": "/containers/cna/affected/1",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/1/versions/0",
                "version": "2008 R2 for x64-based Systems Service Pack 1 (Core installation)",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/1",
                "version": "2008 R2 for Itanium-Based Systems Service Pack 1",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/2",
                "version": "2008 R2 for x64-based Systems Service Pack 1",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/3",
                "version": "2008 for 32-bit Systems Service Pack 2 (Core installation)",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/4",
                "version": "2012",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/5",
                "version": "2012 (Core installation)",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/6",
                "version": "2012 R2",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/7",
                "version": "2012 R2 (Core installation)",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/8",
                "version": "2016",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/9",
                "version": "2016  (Core installation)",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/10",
                "version": "version 1803  (Core Installation)",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/11",
                "version": "2019",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/12",
                "version": "2019  (Core installation)",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/13",
                "version": "2008 for Itanium-Based Systems Service Pack 2",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/14",
                "version": "2008 for 32-bit Systems Service Pack 2",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/15",
                "version": "2008 for x64-based Systems Service Pack 2",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/16",
                "version": "2008 for x64-based Systems Service Pack 2 (Core installation)",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 1903 for 32-bit Systems",
            "sourcePath": "/containers/cna/affected/2",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/2/versions/0",
                "version": "unspecified",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 1903 for x64-based Systems",
            "sourcePath": "/containers/cna/affected/3",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/3/versions/0",
                "version": "unspecified",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 1903 for ARM64-based Systems",
            "sourcePath": "/containers/cna/affected/4",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/4/versions/0",
                "version": "unspecified",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server, version 1903 (Server Core installation)",
            "sourcePath": "/containers/cna/affected/5",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/5/versions/0",
                "version": "unspecified",
                "status": "affected"
              }
            ]
          }
        ],
        "solutions": [],
        "workarounds": [],
        "exploits": [],
        "rejectedReasons": [],
        "problemTypes": [
          {
            "cweId": "",
            "lang": "en",
            "description": "Elevation of Privilege",
            "sourcePath": "/containers/cna/problemTypes/0/descriptions/0"
          }
        ],
        "metrics": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "provider": "CISA-ADP",
            "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1"
          }
        ],
        "references": [
          {
            "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1214",
            "label": "CVE",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/0"
          },
          {
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-1214",
            "label": "CISA-ADP",
            "tags": [
              "government-resource"
            ],
            "provider": "CISA-ADP",
            "sourcePath": "/containers/adp/1/references/0"
          }
        ],
        "snippets": [
          {
            "evidenceId": "official:/containers/cna/affected/0",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1214.json",
            "sourcePath": "/containers/cna/affected/0",
            "text": "{\"product\":\"Windows\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"7 for 32-bit Systems Service Pack 1\"},{\"status\":\"affected\",\"version\":\"7 for x64-based Systems Service Pack 1\"},{\"status\":\"affected\",\"version\":\"8.1 for 32-bit systems\"},{\"status\":\"affected\",\"version\":\"8.1 for x64-based systems\"},{\"status\":\"affected\",\"version\":\"RT 8.1\"},{\"status\":\"affected\",\"version\":\"10 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1607 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1607 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1703 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1703 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1709 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1709 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1803 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1803 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1803 for ARM64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1809 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1809 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1809 for ARM64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1709 for ARM64-based Systems\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1214.json",
            "sourcePath": "/containers/cna/affected/1",
            "text": "{\"product\":\"Windows Server\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"2008 R2 for x64-based Systems Service Pack 1 (Core installation)\"},{\"status\":\"affected\",\"version\":\"2008 R2 for Itanium-Based Systems Service Pack 1\"},{\"status\":\"affected\",\"version\":\"2008 R2 for x64-based Systems Service Pack 1\"},{\"status\":\"affected\",\"version\":\"2008 for 32-bit Systems Service Pack 2 (Core installation)\"},{\"status\":\"affected\",\"version\":\"2012\"},{\"status\":\"affected\",\"version\":\"2012 (Core installation)\"},{\"status\":\"affected\",\"version\":\"2012 R2\"},{\"status\":\"affected\",\"version\":\"2012 R2 (Core installation)\"},{\"status\":\"affected\",\"version\":\"2016\"},{\"status\":\"affected\",\"version\":\"2016  (Core installation)\"},{\"status\":\"affected\",\"version\":\"version 1803  (Core Installation)\"},{\"status\":\"affected\",\"version\":\"2019\"},{\"status\":\"affected\",\"version\":\"2019  (Core installation)\"},{\"status\":\"affected\",\"version\":\"2008 for Itanium-Based Systems Service Pack 2\"},{\"status\":\"affected\",\"version\":\"2008 for 32-bit Systems Service Pack 2\"},{\"status\":\"affected\",\"version\":\"2008 for x64-based Systems Service Pack 2\"},{\"status\":\"affected\",\"version\":\"2008 for x64-based Systems Service Pack 2 (Core installation)\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/2",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1214.json",
            "sourcePath": "/containers/cna/affected/2",
            "text": "{\"product\":\"Windows 10 Version 1903 for 32-bit Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/3",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1214.json",
            "sourcePath": "/containers/cna/affected/3",
            "text": "{\"product\":\"Windows 10 Version 1903 for x64-based Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/4",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1214.json",
            "sourcePath": "/containers/cna/affected/4",
            "text": "{\"product\":\"Windows 10 Version 1903 for ARM64-based Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/5",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1214.json",
            "sourcePath": "/containers/cna/affected/5",
            "text": "{\"product\":\"Windows Server, version 1903 (Server Core installation)\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/descriptions/0/value",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1214.json",
            "sourcePath": "/containers/cna/descriptions/0/value",
            "text": "An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory, aka 'Windows Common Log File System Driver Elevation of Privilege Vulnerability'.",
            "truncated": false,
            "representation": "source_excerpt"
          },
          {
            "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1214.json",
            "sourcePath": "/containers/cna/problemTypes/0/descriptions/0",
            "text": "{\"description\":\"Elevation of Privilege\",\"lang\":\"en\",\"type\":\"text\"}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/adp/1/metrics/0/cvssV3_1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1214.json",
            "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1",
            "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":7.8,\"attackVector\":\"LOCAL\",\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"NONE\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"LOW\",\"confidentialityImpact\":\"HIGH\"}",
            "truncated": false,
            "representation": "source_json"
          }
        ],
        "limits": {
          "completeness": "official_record",
          "truncatedFields": [],
          "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。"
        }
      },
      "sourceSnapshots": [
        {
          "source": "CVE",
          "modifiedAt": "2025-10-21T23:45:31.259Z",
          "fetchedAt": "2026-10-23T02:43:06.972Z",
          "state": "published"
        },
        {
          "source": "CISA KEV",
          "modifiedAt": "2021-11-03T00:00:00.000Z",
          "fetchedAt": "2026-10-23T02:17:50.489Z",
          "state": "published"
        }
      ],
      "sourceAction": "Apply updates per vendor instructions.",
      "sourceSummary": "Windows / Windows Server / Windows 10 Version 1903 for 32-bit Systems / Windows 10 Version 1903 for x64-based Systems / Windows 10 Version 1903 for ARM64-based Systems / Windows Server, version 1903 (Server Core installation)に権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。",
      "sourceRisk": "本来与えられていない権限で、操作される可能性があります。",
      "guidance": {
        "schemaVersion": "1.0",
        "method": "automatic",
        "reviewedAt": null,
        "reviewState": "current",
        "generatedAt": "2026-10-23T03:47:00.947Z",
        "generatorVersion": "2026-10-23.3",
        "sourceFingerprint": "b27c2b6258c4171dd951bd503eb69e794e8ef7413a5e9929d0a36a3a36041dc9",
        "sourceModifiedAt": "2025-10-21T23:45:31.259Z",
        "model": "@cf/openai/gpt-oss-120b",
        "verificationMethod": "exact_source_excerpt_and_independent_semantic_check",
        "summary": "Windows Common Log File System (CLFS) ドライバーがメモリ内のオブジェクトを不適切に処理するため、特権昇格の脆弱性が存在します。",
        "risk": "攻撃者がこの脆弱性を利用して、システム上でより高い権限を取得できる可能性があります。",
        "summaryEvidenceIds": [
          "E1"
        ],
        "riskEvidenceIds": [
          "E1"
        ],
        "applicability": [
          {
            "text": "Windows 7 (32ビット/64ビット) Service Pack 1、Windows 8.1 (32ビット/64ビット) および RT 8.1、Windows 10 の 32ビット、64ビット、ARM64 各エディション、バージョン 1607、1703、1709、1803、1809（各アーキテクチャ）および 1709 の ARM64 版が影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1214.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "Windows Server 2008 R2 (x64、Itanium、Core インストール) Service Pack 1、Windows Server 2008 (32ビット、x64、Itanium、Service Pack 2、Core インストール) および Windows Server 2012、2012 (Core)、2012 R2、2012 R2 (Core)、2016、2016 (Core)、バージョン 1803 (Core)、2019、2019 (Core) が影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1214.json"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "Windows 10 バージョン 1903 の 32ビット、x64、ARM64 各エディション、および Windows Server バージョン 1903 (Server Core インストール) は、バージョン情報が未指定ですが影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1214.json"
            ],
            "evidenceIds": [
              "E4",
              "E5",
              "E6",
              "E7"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows。影響ありとして記載：8.1 for 32-bit systems。影響ありとして記載：8.1 for x64-based systems。影響ありとして記載：RT 8.1。影響ありとして記載：10 for 32-bit Systems。影響ありとして記載：10 for x64-based Systems。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1214.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server。影響ありとして記載：2012。影響ありとして記載：2012 (Core installation)。影響ありとして記載：2012 R2。影響ありとして記載：2012 R2 (Core installation)。影響ありとして記載：2016。影響ありとして記載：2016  (Core installation)。影響ありとして記載：version 1803  (Core Installation)。影響ありとして記載：2019。影響ありとして記載：2019  (Core installation)。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1214.json"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 1903 for 32-bit Systems。影響ありとして記載：具体的な版番号の記載なし。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1214.json"
            ],
            "evidenceIds": [
              "E4"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 1903 for x64-based Systems。影響ありとして記載：具体的な版番号の記載なし。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1214.json"
            ],
            "evidenceIds": [
              "E5"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 1903 for ARM64-based Systems。影響ありとして記載：具体的な版番号の記載なし。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1214.json"
            ],
            "evidenceIds": [
              "E6"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server, version 1903 (Server Core installation)。影響ありとして記載：具体的な版番号の記載なし。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1214.json"
            ],
            "evidenceIds": [
              "E7"
            ]
          },
          {
            "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。",
            "kind": "fact",
            "sourceUrls": [
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-1214"
            ],
            "evidenceIds": [
              "E9"
            ]
          }
        ],
        "versionChecks": [
          {
            "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1214.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "「スタート」→「設定」→「システム」→「バージョン情報」を開き、Windowsのエディション・バージョン・OSビルドを控えます。会社のPCやサーバーは、この情報とCVE番号を管理担当者へ渡してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device"
            ]
          }
        ],
        "actions": [
          {
            "text": "ベンダーの指示に従って更新プログラムを適用する。",
            "kind": "fix",
            "sourceUrls": [
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-1214"
            ],
            "evidenceIds": [
              "E8"
            ]
          },
          {
            "text": "「CVE-2019-1214」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cve.org/CVERecord?id=CVE-2019-1214",
              "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1214",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-1214",
              "https://nvd.nist.gov/vuln/detail/CVE-2019-1214"
            ]
          },
          {
            "text": "Windows 11は「設定」→「Windows Update」→「更新プログラムのチェック」を開き、提供された更新を適用します。再起動を求められたら完了させます。会社管理のPC、Windows Server、サポート外の版は管理担当者に適用する修正番号と配布予定を確認してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates"
            ]
          }
        ],
        "temporaryMitigations": [
          {
            "text": "すぐ更新できない場合は、CVE番号、Windowsの版、業務で必要な機能を管理担当者に伝え、修正までの利用方法と更新予定を決めてください。すべてのWindowsの問題に同じ回避策が使えるわけではありません。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates",
              "https://www.cve.org/CVERecord?id=CVE-2019-1214",
              "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1214",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-1214",
              "https://nvd.nist.gov/vuln/detail/CVE-2019-1214"
            ]
          }
        ],
        "verification": [
          {
            "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。",
            "kind": "procedure",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1214.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "再起動後にWindows Updateを開き直して失敗・再起動待ちがないか確認し、管理担当者にこのCVEに対応する修正の適用結果を確認してもらってください。「最新の状態」と出ても、別製品の更新やサポート外の版の修正を保証するものではありません。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates"
            ]
          }
        ],
        "unknowns": [
          "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。",
          "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。"
        ],
        "sources": [
          {
            "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1214.json",
            "label": "CVE：microsoft"
          },
          {
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-1214",
            "label": "CISA KEV（悪用確認）"
          },
          {
            "url": "https://www.cve.org/CVERecord?id=CVE-2019-1214",
            "label": "CVE公式レコード"
          },
          {
            "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1214",
            "label": "CVE掲載の参考情報"
          },
          {
            "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-1214",
            "label": "CISAが示す関連情報"
          },
          {
            "url": "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device",
            "label": "Microsoft公式：Windowsの情報を調べる"
          },
          {
            "url": "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates",
            "label": "Microsoft公式：Windows Updateの操作"
          }
        ],
        "evidence": [
          {
            "id": "E1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1214.json",
            "sourceField": "/containers/cna/descriptions/0/value",
            "excerpt": "An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory, aka 'Windows Common Log File System Driver Elevation of Privilege Vulnerability'.",
            "language": "en",
            "representation": "source_excerpt"
          },
          {
            "id": "E2",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1214.json",
            "sourceField": "/containers/cna/affected/0",
            "excerpt": "{\"product\":\"Windows\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"7 for 32-bit Systems Service Pack 1\"},{\"status\":\"affected\",\"version\":\"7 for x64-based Systems Service Pack 1\"},{\"status\":\"affected\",\"version\":\"8.1 for 32-bit systems\"},{\"status\":\"affected\",\"version\":\"8.1 for x64-based systems\"},{\"status\":\"affected\",\"version\":\"RT 8.1\"},{\"status\":\"affected\",\"version\":\"10 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1607 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1607 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1703 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1703 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1709 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1709 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1803 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1803 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1803 for ARM64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1809 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1809 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1809 for ARM64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1709 for ARM64-based Systems\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E3",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1214.json",
            "sourceField": "/containers/cna/affected/1",
            "excerpt": "{\"product\":\"Windows Server\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"2008 R2 for x64-based Systems Service Pack 1 (Core installation)\"},{\"status\":\"affected\",\"version\":\"2008 R2 for Itanium-Based Systems Service Pack 1\"},{\"status\":\"affected\",\"version\":\"2008 R2 for x64-based Systems Service Pack 1\"},{\"status\":\"affected\",\"version\":\"2008 for 32-bit Systems Service Pack 2 (Core installation)\"},{\"status\":\"affected\",\"version\":\"2012\"},{\"status\":\"affected\",\"version\":\"2012 (Core installation)\"},{\"status\":\"affected\",\"version\":\"2012 R2\"},{\"status\":\"affected\",\"version\":\"2012 R2 (Core installation)\"},{\"status\":\"affected\",\"version\":\"2016\"},{\"status\":\"affected\",\"version\":\"2016  (Core installation)\"},{\"status\":\"affected\",\"version\":\"version 1803  (Core Installation)\"},{\"status\":\"affected\",\"version\":\"2019\"},{\"status\":\"affected\",\"version\":\"2019  (Core installation)\"},{\"status\":\"affected\",\"version\":\"2008 for Itanium-Based Systems Service Pack 2\"},{\"status\":\"affected\",\"version\":\"2008 for 32-bit Systems Service Pack 2\"},{\"status\":\"affected\",\"version\":\"2008 for x64-based Systems Service Pack 2\"},{\"status\":\"affected\",\"version\":\"2008 for x64-based Systems Service Pack 2 (Core installation)\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E4",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1214.json",
            "sourceField": "/containers/cna/affected/2",
            "excerpt": "{\"product\":\"Windows 10 Version 1903 for 32-bit Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E5",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1214.json",
            "sourceField": "/containers/cna/affected/3",
            "excerpt": "{\"product\":\"Windows 10 Version 1903 for x64-based Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E6",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1214.json",
            "sourceField": "/containers/cna/affected/4",
            "excerpt": "{\"product\":\"Windows 10 Version 1903 for ARM64-based Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E7",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1214.json",
            "sourceField": "/containers/cna/affected/5",
            "excerpt": "{\"product\":\"Windows Server, version 1903 (Server Core installation)\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E8",
            "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-1214",
            "sourceField": "/sourceAction",
            "excerpt": "Apply updates per vendor instructions.",
            "language": null
          },
          {
            "id": "E9",
            "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-1214",
            "sourceField": "/exploitStatus",
            "excerpt": "{\"id\":\"CVE-2019-1214\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}",
            "language": "en",
            "representation": "normalized_feed_field"
          }
        ],
        "supportRequest": "件名：CVE-2019-1214（Windows / Windows Server / Windows 10 Version 1903 for 32-bit Systems / Windows 10 Version 1903 for x64-based Systems / Windows 10 Version 1903 for ARM64-based Systems / Windows Server, version 1903 (Server Core installation)）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Windows 7 (32ビット/64ビット) Service Pack 1、Windows 8.1 (32ビット/64ビット) および RT 8.1、Windows 10 の 32ビット、64ビット、ARM64 各エディション、バージョン 1607、1703、1709、1803、1809（各アーキテクチャ）および 1709 の ARM64 版が影響を受けます。\n・Windows Server 2008 R2 (x64、Itanium、Core インストール) Service Pack 1、Windows Server 2008 (32ビット、x64、Itanium、Service Pack 2、Core インストール) および Windows Server 2012、2012 (Core)、2012 R2、2012 R2 (Core)、2016、2016 (Core)、バージョン 1803 (Core)、2019、2019 (Core) が影響を受けます。\n・Windows 10 バージョン 1903 の 32ビット、x64、ARM64 各エディション、および Windows Server バージョン 1903 (Server Core インストール) は、バージョン情報が未指定ですが影響を受けます。\n・公式の対象表：Microsoft / Windows。影響ありとして記載：8.1 for 32-bit systems。影響ありとして記載：8.1 for x64-based systems。影響ありとして記載：RT 8.1。影響ありとして記載：10 for 32-bit Systems。影響ありとして記載：10 for x64-based Systems。\n・公式の対象表：Microsoft / Windows Server。影響ありとして記載：2012。影響ありとして記載：2012 (Core installation)。影響ありとして記載：2012 R2。影響ありとして記載：2012 R2 (Core installation)。影響ありとして記載：2016。影響ありとして記載：2016  (Core installation)。影響ありとして記載：version 1803  (Core Installation)。影響ありとして記載：2019。影響ありとして記載：2019  (Core installation)。\n・公式の対象表：Microsoft / Windows 10 Version 1903 for 32-bit Systems。影響ありとして記載：具体的な版番号の記載なし。\n・公式の対象表：Microsoft / Windows 10 Version 1903 for x64-based Systems。影響ありとして記載：具体的な版番号の記載なし。\n・公式の対象表：Microsoft / Windows 10 Version 1903 for ARM64-based Systems。影響ありとして記載：具体的な版番号の記載なし。\n・公式の対象表：Microsoft / Windows Server, version 1903 (Server Core installation)。影響ありとして記載：具体的な版番号の記載なし。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2019-1214",
        "publicationCheckVersion": "2026-10-23.1",
        "sourceNotices": [],
        "automation": {
          "status": "ready",
          "lastAttempt": "2026-10-23T03:47:00.947Z",
          "lastSuccess": "2026-10-23T03:47:00.947Z",
          "sourceCheckedAt": "2026-10-23T02:43:06.972Z",
          "errorCode": null
        },
        "glossary": []
      }
    },
    {
      "id": "CVE-2019-1215",
      "aliases": [],
      "title": "Windows / Windows Server / Windows 10 Version 1903 for 32-bit Systems / Windows 10 Version 1903 for x64-based Systems / Windows 10 Version 1903 for ARM64-based Systems / Windows Server, version 1903 (Server Core installation)：権限の奪取",
      "summary": "ws2ifsl.sys（Winsock）がメモリ内のオブジェクトを処理する方法に特権昇格の脆弱性が存在します。",
      "risk": "攻撃者が特権を昇格させる可能性があります。",
      "product": "Windows / Windows Server / Windows 10 Version 1903 for 32-bit Systems / Windows 10 Version 1903 for x64-based Systems / Windows 10 Version 1903 for ARM64-based Systems / Windows Server, version 1903 (Server Core installation)",
      "category": "windows",
      "component": "package",
      "severity": "unknown",
      "cvss": null,
      "cvssVersion": null,
      "cvssSource": "microsoft",
      "cvssVector": null,
      "affected": [
        {
          "product": "Windows",
          "range": "7 for 32-bit Systems Service Pack 1"
        },
        {
          "product": "Windows",
          "range": "7 for x64-based Systems Service Pack 1"
        },
        {
          "product": "Windows",
          "range": "8.1 for 32-bit systems"
        },
        {
          "product": "Windows",
          "range": "8.1 for x64-based systems"
        },
        {
          "product": "Windows",
          "range": "RT 8.1"
        },
        {
          "product": "Windows",
          "range": "10 for 32-bit Systems"
        },
        {
          "product": "Windows",
          "range": "10 for x64-based Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1607 for 32-bit Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1607 for x64-based Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1703 for 32-bit Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1703 for x64-based Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1709 for 32-bit Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1709 for x64-based Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1803 for 32-bit Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1803 for x64-based Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1803 for ARM64-based Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1809 for 32-bit Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1809 for x64-based Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1809 for ARM64-based Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1709 for ARM64-based Systems"
        },
        {
          "product": "Windows Server",
          "range": "2008 R2 for x64-based Systems Service Pack 1 (Core installation)"
        },
        {
          "product": "Windows Server",
          "range": "2008 R2 for Itanium-Based Systems Service Pack 1"
        },
        {
          "product": "Windows Server",
          "range": "2008 R2 for x64-based Systems Service Pack 1"
        },
        {
          "product": "Windows Server",
          "range": "2008 for 32-bit Systems Service Pack 2 (Core installation)"
        },
        {
          "product": "Windows Server",
          "range": "2012"
        },
        {
          "product": "Windows Server",
          "range": "2012 (Core installation)"
        },
        {
          "product": "Windows Server",
          "range": "2012 R2"
        },
        {
          "product": "Windows Server",
          "range": "2012 R2 (Core installation)"
        },
        {
          "product": "Windows Server",
          "range": "2016"
        },
        {
          "product": "Windows Server",
          "range": "2016  (Core installation)"
        },
        {
          "product": "Windows Server",
          "range": "version 1803  (Core Installation)"
        },
        {
          "product": "Windows Server",
          "range": "2019"
        },
        {
          "product": "Windows Server",
          "range": "2019  (Core installation)"
        },
        {
          "product": "Windows Server",
          "range": "2008 for Itanium-Based Systems Service Pack 2"
        },
        {
          "product": "Windows Server",
          "range": "2008 for 32-bit Systems Service Pack 2"
        },
        {
          "product": "Windows Server",
          "range": "2008 for x64-based Systems Service Pack 2"
        },
        {
          "product": "Windows Server",
          "range": "2008 for x64-based Systems Service Pack 2 (Core installation)"
        },
        {
          "product": "Windows 10 Version 1903 for 32-bit Systems",
          "range": "unspecified"
        },
        {
          "product": "Windows 10 Version 1903 for x64-based Systems",
          "range": "unspecified"
        },
        {
          "product": "Windows 10 Version 1903 for ARM64-based Systems",
          "range": "unspecified"
        },
        {
          "product": "Windows Server, version 1903 (Server Core installation)",
          "range": "unspecified"
        }
      ],
      "fixed": [],
      "steps": [
        "ベンダーの指示に従って更新プログラムを適用する。",
        "「CVE-2019-1215」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
        "Windows 11は「設定」→「Windows Update」→「更新プログラムのチェック」を開き、提供された更新を適用します。再起動を求められたら完了させます。会社管理のPC、Windows Server、サポート外の版は管理担当者に適用する修正番号と配布予定を確認してください。"
      ],
      "references": [
        {
          "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1215.json",
          "label": "CVE：microsoft"
        },
        {
          "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-1215",
          "label": "CISA KEV（悪用確認）"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-1215",
          "label": "CVE公式レコード"
        },
        {
          "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1215",
          "label": "CVE掲載の参考情報"
        },
        {
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-1215",
          "label": "CISAが示す関連情報"
        },
        {
          "url": "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device",
          "label": "Microsoft公式：Windowsの情報を調べる"
        },
        {
          "url": "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates",
          "label": "Microsoft公式：Windows Updateの操作"
        }
      ],
      "publishedAt": "2019-09-11T21:24:58.000Z",
      "modifiedAt": "2025-10-21T23:45:31.121Z",
      "fetchedAt": "2026-10-23T02:43:07.024Z",
      "exploitStatus": "confirmed",
      "sources": [
        "CVE",
        "CISA KEV"
      ],
      "originalText": "An elevation of privilege vulnerability exists in the way that ws2ifsl.sys (Winsock) handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1253, CVE-2019-1278, CVE-2019-1303.",
      "sourceTitle": "",
      "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。",
      "state": "published",
      "affectedDetails": [
        {
          "product": "Windows",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "7 for 32-bit Systems Service Pack 1"
            },
            {
              "status": "affected",
              "version": "7 for x64-based Systems Service Pack 1"
            },
            {
              "status": "affected",
              "version": "8.1 for 32-bit systems"
            },
            {
              "status": "affected",
              "version": "8.1 for x64-based systems"
            },
            {
              "status": "affected",
              "version": "RT 8.1"
            },
            {
              "status": "affected",
              "version": "10 for 32-bit Systems"
            },
            {
              "status": "affected",
              "version": "10 for x64-based Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1607 for 32-bit Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1607 for x64-based Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1703 for 32-bit Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1703 for x64-based Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1709 for 32-bit Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1709 for x64-based Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1803 for 32-bit Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1803 for x64-based Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1803 for ARM64-based Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1809 for 32-bit Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1809 for x64-based Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1809 for ARM64-based Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1709 for ARM64-based Systems"
            }
          ]
        },
        {
          "product": "Windows Server",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "2008 R2 for x64-based Systems Service Pack 1 (Core installation)"
            },
            {
              "status": "affected",
              "version": "2008 R2 for Itanium-Based Systems Service Pack 1"
            },
            {
              "status": "affected",
              "version": "2008 R2 for x64-based Systems Service Pack 1"
            },
            {
              "status": "affected",
              "version": "2008 for 32-bit Systems Service Pack 2 (Core installation)"
            },
            {
              "status": "affected",
              "version": "2012"
            },
            {
              "status": "affected",
              "version": "2012 (Core installation)"
            },
            {
              "status": "affected",
              "version": "2012 R2"
            },
            {
              "status": "affected",
              "version": "2012 R2 (Core installation)"
            },
            {
              "status": "affected",
              "version": "2016"
            },
            {
              "status": "affected",
              "version": "2016  (Core installation)"
            },
            {
              "status": "affected",
              "version": "version 1803  (Core Installation)"
            },
            {
              "status": "affected",
              "version": "2019"
            },
            {
              "status": "affected",
              "version": "2019  (Core installation)"
            },
            {
              "status": "affected",
              "version": "2008 for Itanium-Based Systems Service Pack 2"
            },
            {
              "status": "affected",
              "version": "2008 for 32-bit Systems Service Pack 2"
            },
            {
              "status": "affected",
              "version": "2008 for x64-based Systems Service Pack 2"
            },
            {
              "status": "affected",
              "version": "2008 for x64-based Systems Service Pack 2 (Core installation)"
            }
          ]
        },
        {
          "product": "Windows 10 Version 1903 for 32-bit Systems",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified"
            }
          ]
        },
        {
          "product": "Windows 10 Version 1903 for x64-based Systems",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified"
            }
          ]
        },
        {
          "product": "Windows 10 Version 1903 for ARM64-based Systems",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified"
            }
          ]
        },
        {
          "product": "Windows Server, version 1903 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified"
            }
          ]
        }
      ],
      "officialEvidence": {
        "schemaVersion": "1.0",
        "id": "CVE-2019-1215",
        "sourceType": "CVE",
        "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1215.json",
        "fetchedAt": "2026-10-23T02:43:07.024Z",
        "publishedAt": "2019-09-11T21:24:58.000Z",
        "modifiedAt": "2025-10-21T23:45:31.121Z",
        "state": "published",
        "provider": "microsoft",
        "title": "",
        "descriptions": [
          {
            "lang": "en",
            "value": "An elevation of privilege vulnerability exists in the way that ws2ifsl.sys (Winsock) handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1253, CVE-2019-1278, CVE-2019-1303.",
            "sourcePath": "/containers/cna/descriptions/0/value"
          }
        ],
        "affected": [
          {
            "vendor": "Microsoft",
            "product": "Windows",
            "sourcePath": "/containers/cna/affected/0",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/0/versions/0",
                "version": "7 for 32-bit Systems Service Pack 1",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/1",
                "version": "7 for x64-based Systems Service Pack 1",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/2",
                "version": "8.1 for 32-bit systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/3",
                "version": "8.1 for x64-based systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/4",
                "version": "RT 8.1",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/5",
                "version": "10 for 32-bit Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/6",
                "version": "10 for x64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/7",
                "version": "10 Version 1607 for 32-bit Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/8",
                "version": "10 Version 1607 for x64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/9",
                "version": "10 Version 1703 for 32-bit Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/10",
                "version": "10 Version 1703 for x64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/11",
                "version": "10 Version 1709 for 32-bit Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/12",
                "version": "10 Version 1709 for x64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/13",
                "version": "10 Version 1803 for 32-bit Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/14",
                "version": "10 Version 1803 for x64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/15",
                "version": "10 Version 1803 for ARM64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/16",
                "version": "10 Version 1809 for 32-bit Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/17",
                "version": "10 Version 1809 for x64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/18",
                "version": "10 Version 1809 for ARM64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/19",
                "version": "10 Version 1709 for ARM64-based Systems",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server",
            "sourcePath": "/containers/cna/affected/1",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/1/versions/0",
                "version": "2008 R2 for x64-based Systems Service Pack 1 (Core installation)",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/1",
                "version": "2008 R2 for Itanium-Based Systems Service Pack 1",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/2",
                "version": "2008 R2 for x64-based Systems Service Pack 1",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/3",
                "version": "2008 for 32-bit Systems Service Pack 2 (Core installation)",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/4",
                "version": "2012",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/5",
                "version": "2012 (Core installation)",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/6",
                "version": "2012 R2",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/7",
                "version": "2012 R2 (Core installation)",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/8",
                "version": "2016",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/9",
                "version": "2016  (Core installation)",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/10",
                "version": "version 1803  (Core Installation)",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/11",
                "version": "2019",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/12",
                "version": "2019  (Core installation)",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/13",
                "version": "2008 for Itanium-Based Systems Service Pack 2",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/14",
                "version": "2008 for 32-bit Systems Service Pack 2",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/15",
                "version": "2008 for x64-based Systems Service Pack 2",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/16",
                "version": "2008 for x64-based Systems Service Pack 2 (Core installation)",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 1903 for 32-bit Systems",
            "sourcePath": "/containers/cna/affected/2",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/2/versions/0",
                "version": "unspecified",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 1903 for x64-based Systems",
            "sourcePath": "/containers/cna/affected/3",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/3/versions/0",
                "version": "unspecified",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 1903 for ARM64-based Systems",
            "sourcePath": "/containers/cna/affected/4",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/4/versions/0",
                "version": "unspecified",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server, version 1903 (Server Core installation)",
            "sourcePath": "/containers/cna/affected/5",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/5/versions/0",
                "version": "unspecified",
                "status": "affected"
              }
            ]
          }
        ],
        "solutions": [],
        "workarounds": [],
        "exploits": [],
        "rejectedReasons": [],
        "problemTypes": [
          {
            "cweId": "",
            "lang": "en",
            "description": "Elevation of Privilege",
            "sourcePath": "/containers/cna/problemTypes/0/descriptions/0"
          }
        ],
        "metrics": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "provider": "CISA-ADP",
            "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1"
          }
        ],
        "references": [
          {
            "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1215",
            "label": "CVE",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/0"
          },
          {
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-1215",
            "label": "CISA-ADP",
            "tags": [
              "government-resource"
            ],
            "provider": "CISA-ADP",
            "sourcePath": "/containers/adp/1/references/0"
          }
        ],
        "snippets": [
          {
            "evidenceId": "official:/containers/cna/affected/0",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1215.json",
            "sourcePath": "/containers/cna/affected/0",
            "text": "{\"product\":\"Windows\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"7 for 32-bit Systems Service Pack 1\"},{\"status\":\"affected\",\"version\":\"7 for x64-based Systems Service Pack 1\"},{\"status\":\"affected\",\"version\":\"8.1 for 32-bit systems\"},{\"status\":\"affected\",\"version\":\"8.1 for x64-based systems\"},{\"status\":\"affected\",\"version\":\"RT 8.1\"},{\"status\":\"affected\",\"version\":\"10 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1607 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1607 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1703 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1703 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1709 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1709 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1803 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1803 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1803 for ARM64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1809 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1809 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1809 for ARM64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1709 for ARM64-based Systems\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1215.json",
            "sourcePath": "/containers/cna/affected/1",
            "text": "{\"product\":\"Windows Server\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"2008 R2 for x64-based Systems Service Pack 1 (Core installation)\"},{\"status\":\"affected\",\"version\":\"2008 R2 for Itanium-Based Systems Service Pack 1\"},{\"status\":\"affected\",\"version\":\"2008 R2 for x64-based Systems Service Pack 1\"},{\"status\":\"affected\",\"version\":\"2008 for 32-bit Systems Service Pack 2 (Core installation)\"},{\"status\":\"affected\",\"version\":\"2012\"},{\"status\":\"affected\",\"version\":\"2012 (Core installation)\"},{\"status\":\"affected\",\"version\":\"2012 R2\"},{\"status\":\"affected\",\"version\":\"2012 R2 (Core installation)\"},{\"status\":\"affected\",\"version\":\"2016\"},{\"status\":\"affected\",\"version\":\"2016  (Core installation)\"},{\"status\":\"affected\",\"version\":\"version 1803  (Core Installation)\"},{\"status\":\"affected\",\"version\":\"2019\"},{\"status\":\"affected\",\"version\":\"2019  (Core installation)\"},{\"status\":\"affected\",\"version\":\"2008 for Itanium-Based Systems Service Pack 2\"},{\"status\":\"affected\",\"version\":\"2008 for 32-bit Systems Service Pack 2\"},{\"status\":\"affected\",\"version\":\"2008 for x64-based Systems Service Pack 2\"},{\"status\":\"affected\",\"version\":\"2008 for x64-based Systems Service Pack 2 (Core installation)\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/2",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1215.json",
            "sourcePath": "/containers/cna/affected/2",
            "text": "{\"product\":\"Windows 10 Version 1903 for 32-bit Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/3",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1215.json",
            "sourcePath": "/containers/cna/affected/3",
            "text": "{\"product\":\"Windows 10 Version 1903 for x64-based Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/4",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1215.json",
            "sourcePath": "/containers/cna/affected/4",
            "text": "{\"product\":\"Windows 10 Version 1903 for ARM64-based Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/5",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1215.json",
            "sourcePath": "/containers/cna/affected/5",
            "text": "{\"product\":\"Windows Server, version 1903 (Server Core installation)\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/descriptions/0/value",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1215.json",
            "sourcePath": "/containers/cna/descriptions/0/value",
            "text": "An elevation of privilege vulnerability exists in the way that ws2ifsl.sys (Winsock) handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1253, CVE-2019-1278, CVE-2019-1303.",
            "truncated": false,
            "representation": "source_excerpt"
          },
          {
            "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1215.json",
            "sourcePath": "/containers/cna/problemTypes/0/descriptions/0",
            "text": "{\"description\":\"Elevation of Privilege\",\"lang\":\"en\",\"type\":\"text\"}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/adp/1/metrics/0/cvssV3_1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1215.json",
            "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1",
            "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":7.8,\"attackVector\":\"LOCAL\",\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"NONE\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"LOW\",\"confidentialityImpact\":\"HIGH\"}",
            "truncated": false,
            "representation": "source_json"
          }
        ],
        "limits": {
          "completeness": "official_record",
          "truncatedFields": [],
          "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。"
        }
      },
      "sourceSnapshots": [
        {
          "source": "CVE",
          "modifiedAt": "2025-10-21T23:45:31.121Z",
          "fetchedAt": "2026-10-23T02:43:07.024Z",
          "state": "published"
        },
        {
          "source": "CISA KEV",
          "modifiedAt": "2021-11-03T00:00:00.000Z",
          "fetchedAt": "2026-10-23T02:17:50.489Z",
          "state": "published"
        }
      ],
      "sourceAction": "Apply updates per vendor instructions.",
      "sourceSummary": "Windows / Windows Server / Windows 10 Version 1903 for 32-bit Systems / Windows 10 Version 1903 for x64-based Systems / Windows 10 Version 1903 for ARM64-based Systems / Windows Server, version 1903 (Server Core installation)に権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。",
      "sourceRisk": "本来与えられていない権限で、操作される可能性があります。",
      "guidance": {
        "schemaVersion": "1.0",
        "method": "automatic",
        "reviewedAt": null,
        "reviewState": "current",
        "generatedAt": "2026-10-23T03:47:01.437Z",
        "generatorVersion": "2026-10-23.3",
        "sourceFingerprint": "ddefdb0eb7921e940edc6a68222d733cdef6140f6b360357cc4a8b9f056e1b9e",
        "sourceModifiedAt": "2025-10-21T23:45:31.121Z",
        "model": "@cf/openai/gpt-oss-120b",
        "verificationMethod": "exact_source_excerpt_and_independent_semantic_check",
        "summary": "ws2ifsl.sys（Winsock）がメモリ内のオブジェクトを処理する方法に特権昇格の脆弱性が存在します。",
        "risk": "攻撃者が特権を昇格させる可能性があります。",
        "summaryEvidenceIds": [
          "E1"
        ],
        "riskEvidenceIds": [
          "E1"
        ],
        "applicability": [
          {
            "text": "Windows 7 32ビットシステム Service Pack 1 および Windows 7 x64ベースシステム Service Pack 1 が影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1215.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "Windows 8.1 32ビットシステム、Windows 8.1 x64ベースシステム、Windows RT 8.1 が影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1215.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "Windows 10 32ビットシステムおよび Windows 10 x64ベースシステムが影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1215.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "Windows 10 Version 1607 32ビットシステムおよび Windows 10 Version 1607 x64ベースシステムが影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1215.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "Windows 10 Version 1703 32ビットシステムおよび Windows 10 Version 1703 x64ベースシステムが影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1215.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "Windows 10 Version 1709 32ビットシステム、x64ベースシステム、ARM64ベースシステムが影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1215.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "Windows 10 Version 1803 32ビットシステム、x64ベースシステム、ARM64ベースシステムが影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1215.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "Windows 10 Version 1809 32ビットシステム、x64ベースシステム、ARM64ベースシステムが影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1215.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "Windows Server 2008 R2 x64ベースシステム Service Pack 1（Core インストール）、Itanium ベースシステム Service Pack 1、x64ベースシステム Service Pack 1、Windows Server 2008 32ビットシステム Service Pack 2（Core インストール）、Itanium ベースシステム Service Pack 2、32ビットシステム Service Pack 2、x64ベースシステム Service Pack 2、x64ベースシステム Service Pack 2（Core インストール）、Windows Server 2012、2012（Core インストール）、2012 R2、2012 R2（Core インストール）、2016、2016（Core インストール）、バージョン 1803（Core インストール）、2019、2019（Core インストール）が影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1215.json"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "Windows 10 Version 1903 32ビットシステムが影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1215.json"
            ],
            "evidenceIds": [
              "E4"
            ]
          },
          {
            "text": "Windows 10 Version 1903 x64ベースシステムが影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1215.json"
            ],
            "evidenceIds": [
              "E5"
            ]
          },
          {
            "text": "Windows 10 Version 1903 ARM64ベースシステムおよび Windows Server Version 1903（Server Core インストール）が影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1215.json"
            ],
            "evidenceIds": [
              "E6",
              "E7"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows。影響ありとして記載：8.1 for 32-bit systems。影響ありとして記載：8.1 for x64-based systems。影響ありとして記載：RT 8.1。影響ありとして記載：10 for 32-bit Systems。影響ありとして記載：10 for x64-based Systems。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1215.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server。影響ありとして記載：2012。影響ありとして記載：2012 (Core installation)。影響ありとして記載：2012 R2。影響ありとして記載：2012 R2 (Core installation)。影響ありとして記載：2016。影響ありとして記載：2016  (Core installation)。影響ありとして記載：version 1803  (Core Installation)。影響ありとして記載：2019。影響ありとして記載：2019  (Core installation)。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1215.json"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 1903 for 32-bit Systems。影響ありとして記載：具体的な版番号の記載なし。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1215.json"
            ],
            "evidenceIds": [
              "E4"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 1903 for x64-based Systems。影響ありとして記載：具体的な版番号の記載なし。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1215.json"
            ],
            "evidenceIds": [
              "E5"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 1903 for ARM64-based Systems。影響ありとして記載：具体的な版番号の記載なし。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1215.json"
            ],
            "evidenceIds": [
              "E6"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server, version 1903 (Server Core installation)。影響ありとして記載：具体的な版番号の記載なし。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1215.json"
            ],
            "evidenceIds": [
              "E7"
            ]
          },
          {
            "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。",
            "kind": "fact",
            "sourceUrls": [
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-1215"
            ],
            "evidenceIds": [
              "E9"
            ]
          }
        ],
        "versionChecks": [
          {
            "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1215.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "「スタート」→「設定」→「システム」→「バージョン情報」を開き、Windowsのエディション・バージョン・OSビルドを控えます。会社のPCやサーバーは、この情報とCVE番号を管理担当者へ渡してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device"
            ]
          }
        ],
        "actions": [
          {
            "text": "ベンダーの指示に従って更新プログラムを適用する。",
            "kind": "fix",
            "sourceUrls": [
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-1215"
            ],
            "evidenceIds": [
              "E8"
            ]
          },
          {
            "text": "「CVE-2019-1215」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cve.org/CVERecord?id=CVE-2019-1215",
              "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1215",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-1215",
              "https://nvd.nist.gov/vuln/detail/CVE-2019-1215"
            ]
          },
          {
            "text": "Windows 11は「設定」→「Windows Update」→「更新プログラムのチェック」を開き、提供された更新を適用します。再起動を求められたら完了させます。会社管理のPC、Windows Server、サポート外の版は管理担当者に適用する修正番号と配布予定を確認してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates"
            ]
          }
        ],
        "temporaryMitigations": [
          {
            "text": "すぐ更新できない場合は、CVE番号、Windowsの版、業務で必要な機能を管理担当者に伝え、修正までの利用方法と更新予定を決めてください。すべてのWindowsの問題に同じ回避策が使えるわけではありません。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates",
              "https://www.cve.org/CVERecord?id=CVE-2019-1215",
              "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1215",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-1215",
              "https://nvd.nist.gov/vuln/detail/CVE-2019-1215"
            ]
          }
        ],
        "verification": [
          {
            "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。",
            "kind": "procedure",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1215.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "再起動後にWindows Updateを開き直して失敗・再起動待ちがないか確認し、管理担当者にこのCVEに対応する修正の適用結果を確認してもらってください。「最新の状態」と出ても、別製品の更新やサポート外の版の修正を保証するものではありません。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates"
            ]
          }
        ],
        "unknowns": [
          "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。",
          "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。"
        ],
        "sources": [
          {
            "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1215.json",
            "label": "CVE：microsoft"
          },
          {
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-1215",
            "label": "CISA KEV（悪用確認）"
          },
          {
            "url": "https://www.cve.org/CVERecord?id=CVE-2019-1215",
            "label": "CVE公式レコード"
          },
          {
            "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1215",
            "label": "CVE掲載の参考情報"
          },
          {
            "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-1215",
            "label": "CISAが示す関連情報"
          },
          {
            "url": "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device",
            "label": "Microsoft公式：Windowsの情報を調べる"
          },
          {
            "url": "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates",
            "label": "Microsoft公式：Windows Updateの操作"
          }
        ],
        "evidence": [
          {
            "id": "E1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1215.json",
            "sourceField": "/containers/cna/descriptions/0/value",
            "excerpt": "An elevation of privilege vulnerability exists in the way that ws2ifsl.sys (Winsock) handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1253, CVE-2019-1278, CVE-2019-1303.",
            "language": "en",
            "representation": "source_excerpt"
          },
          {
            "id": "E2",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1215.json",
            "sourceField": "/containers/cna/affected/0",
            "excerpt": "{\"product\":\"Windows\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"7 for 32-bit Systems Service Pack 1\"},{\"status\":\"affected\",\"version\":\"7 for x64-based Systems Service Pack 1\"},{\"status\":\"affected\",\"version\":\"8.1 for 32-bit systems\"},{\"status\":\"affected\",\"version\":\"8.1 for x64-based systems\"},{\"status\":\"affected\",\"version\":\"RT 8.1\"},{\"status\":\"affected\",\"version\":\"10 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1607 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1607 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1703 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1703 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1709 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1709 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1803 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1803 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1803 for ARM64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1809 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1809 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1809 for ARM64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1709 for ARM64-based Systems\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E3",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1215.json",
            "sourceField": "/containers/cna/affected/1",
            "excerpt": "{\"product\":\"Windows Server\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"2008 R2 for x64-based Systems Service Pack 1 (Core installation)\"},{\"status\":\"affected\",\"version\":\"2008 R2 for Itanium-Based Systems Service Pack 1\"},{\"status\":\"affected\",\"version\":\"2008 R2 for x64-based Systems Service Pack 1\"},{\"status\":\"affected\",\"version\":\"2008 for 32-bit Systems Service Pack 2 (Core installation)\"},{\"status\":\"affected\",\"version\":\"2012\"},{\"status\":\"affected\",\"version\":\"2012 (Core installation)\"},{\"status\":\"affected\",\"version\":\"2012 R2\"},{\"status\":\"affected\",\"version\":\"2012 R2 (Core installation)\"},{\"status\":\"affected\",\"version\":\"2016\"},{\"status\":\"affected\",\"version\":\"2016  (Core installation)\"},{\"status\":\"affected\",\"version\":\"version 1803  (Core Installation)\"},{\"status\":\"affected\",\"version\":\"2019\"},{\"status\":\"affected\",\"version\":\"2019  (Core installation)\"},{\"status\":\"affected\",\"version\":\"2008 for Itanium-Based Systems Service Pack 2\"},{\"status\":\"affected\",\"version\":\"2008 for 32-bit Systems Service Pack 2\"},{\"status\":\"affected\",\"version\":\"2008 for x64-based Systems Service Pack 2\"},{\"status\":\"affected\",\"version\":\"2008 for x64-based Systems Service Pack 2 (Core installation)\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E4",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1215.json",
            "sourceField": "/containers/cna/affected/2",
            "excerpt": "{\"product\":\"Windows 10 Version 1903 for 32-bit Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E5",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1215.json",
            "sourceField": "/containers/cna/affected/3",
            "excerpt": "{\"product\":\"Windows 10 Version 1903 for x64-based Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E6",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1215.json",
            "sourceField": "/containers/cna/affected/4",
            "excerpt": "{\"product\":\"Windows 10 Version 1903 for ARM64-based Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E7",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1xxx/CVE-2019-1215.json",
            "sourceField": "/containers/cna/affected/5",
            "excerpt": "{\"product\":\"Windows Server, version 1903 (Server Core installation)\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E8",
            "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-1215",
            "sourceField": "/sourceAction",
            "excerpt": "Apply updates per vendor instructions.",
            "language": null
          },
          {
            "id": "E9",
            "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-1215",
            "sourceField": "/exploitStatus",
            "excerpt": "{\"id\":\"CVE-2019-1215\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}",
            "language": "en",
            "representation": "normalized_feed_field"
          }
        ],
        "supportRequest": "件名：CVE-2019-1215（Windows / Windows Server / Windows 10 Version 1903 for 32-bit Systems / Windows 10 Version 1903 for x64-based Systems / Windows 10 Version 1903 for ARM64-based Systems / Windows Server, version 1903 (Server Core installation)）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Windows 7 32ビットシステム Service Pack 1 および Windows 7 x64ベースシステム Service Pack 1 が影響を受けます。\n・Windows 8.1 32ビットシステム、Windows 8.1 x64ベースシステム、Windows RT 8.1 が影響を受けます。\n・Windows 10 32ビットシステムおよび Windows 10 x64ベースシステムが影響を受けます。\n・Windows 10 Version 1607 32ビットシステムおよび Windows 10 Version 1607 x64ベースシステムが影響を受けます。\n・Windows 10 Version 1703 32ビットシステムおよび Windows 10 Version 1703 x64ベースシステムが影響を受けます。\n・Windows 10 Version 1709 32ビットシステム、x64ベースシステム、ARM64ベースシステムが影響を受けます。\n・Windows 10 Version 1803 32ビットシステム、x64ベースシステム、ARM64ベースシステムが影響を受けます。\n・Windows 10 Version 1809 32ビットシステム、x64ベースシステム、ARM64ベースシステムが影響を受けます。\n・Windows Server 2008 R2 x64ベースシステム Service Pack 1（Core インストール）、Itanium ベースシステム Service Pack 1、x64ベースシステム Service Pack 1、Windows Server 2008 32ビットシステム Service Pack 2（Core インストール）、Itanium ベースシステム Service Pack 2、32ビットシステム Service Pack 2、x64ベースシステム Service Pack 2、x64ベースシステム Service Pack 2（Core インストール）、Windows Server 2012、2012（Core インストール）、2012 R2、2012 R2（Core インストール）、2016、2016（Core インストール）、バージョン 1803（Core インストール）、2019、2019（Core インストール）が影響を受けます。\n・Windows 10 Version 1903 32ビットシステムが影響を受けます。\n・Windows 10 Version 1903 x64ベースシステムが影響を受けます。\n・Windows 10 Version 1903 ARM64ベースシステムおよび Windows Server Version 1903（Server Core インストール）が影響を受けます。\n・公式の対象表：Microsoft / Windows。影響ありとして記載：8.1 for 32-bit systems。影響ありとして記載：8.1 for x64-based systems。影響ありとして記載：RT 8.1。影響ありとして記載：10 for 32-bit Systems。影響ありとして記載：10 for x64-based Systems。\n・公式の対象表：Microsoft / Windows Server。影響ありとして記載：2012。影響ありとして記載：2012 (Core installation)。影響ありとして記載：2012 R2。影響ありとして記載：2012 R2 (Core installation)。影響ありとして記載：2016。影響ありとして記載：2016  (Core installation)。影響ありとして記載：version 1803  (Core Installation)。影響ありとして記載：2019。影響ありとして記載：2019  (Core installation)。\n・公式の対象表：Microsoft / Windows 10 Version 1903 for 32-bit Systems。影響ありとして記載：具体的な版番号の記載なし。\n・公式の対象表：Microsoft / Windows 10 Version 1903 for x64-based Systems。影響ありとして記載：具体的な版番号の記載なし。\n・公式の対象表：Microsoft / Windows 10 Version 1903 for ARM64-based Systems。影響ありとして記載：具体的な版番号の記載なし。\n・公式の対象表：Microsoft / Windows Server, version 1903 (Server Core installation)。影響ありとして記載：具体的な版番号の記載なし。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2019-1215",
        "publicationCheckVersion": "2026-10-23.1",
        "sourceNotices": [],
        "automation": {
          "status": "ready",
          "lastAttempt": "2026-10-23T03:47:01.437Z",
          "lastSuccess": "2026-10-23T03:47:01.437Z",
          "sourceCheckedAt": "2026-10-23T02:43:07.024Z",
          "errorCode": null
        },
        "glossary": []
      }
    }
  ],
  "total": 274,
  "limit": 20,
  "offset": 220,
  "filters": {
    "product": "windows",
    "type": "all",
    "q": "",
    "page": 12
  },
  "pagination": {
    "page": 12,
    "pageSize": 20,
    "totalPages": 14
  },
  "sources": [
    {
      "name": "JVN",
      "status": "ok",
      "lastSuccess": "2026-10-23T05:17:49.729Z",
      "lastAttempt": "2026-10-23T05:17:49.729Z",
      "error": null,
      "recordCount": 20,
      "coverage": "JVNの新着・更新RSS。取得した記事を蓄積。JVN iPediaは含みません。",
      "cursor": null,
      "freshness": "fresh",
      "stale": false
    },
    {
      "name": "PHP Security",
      "status": "ok",
      "lastSuccess": "2026-10-23T05:17:49.729Z",
      "lastAttempt": "2026-10-23T05:17:49.729Z",
      "error": null,
      "recordCount": 66,
      "coverage": "PHP開発元の公開アドバイザリ。公開日が新しい順とは限らない直近100件を取得し蓄積。",
      "cursor": null,
      "freshness": "fresh",
      "stale": false
    },
    {
      "name": "CISA KEV",
      "status": "ok",
      "lastSuccess": "2026-10-23T05:17:49.729Z",
      "lastAttempt": "2026-10-23T05:17:49.729Z",
      "error": null,
      "recordCount": 1754,
      "coverage": "CISAの公式GitHubミラーにある悪用確認済み一覧全件。掲載日はKEV追加日。",
      "cursor": null,
      "freshness": "fresh",
      "stale": false
    },
    {
      "name": "NVD",
      "status": "ok",
      "lastSuccess": "2026-10-23T05:17:49.729Z",
      "lastAttempt": "2026-10-23T05:17:49.729Z",
      "error": null,
      "recordCount": 2,
      "coverage": "WordPressを含む脆弱性。初回は公開7日分、以降は全製品の変更分からWordPressと保存済みIDを追跡。停止後は最後に確認できた時刻から最大7日幅・500件ずつ再開し、残りは次回取得。 今回: 2026-10-23T04:02:50.783Z 〜 2026-10-23T05:17:49.729Z、全製品の変更 54/54件まで確認、対象2件反映。",
      "cursor": null,
      "freshness": "fresh",
      "stale": false
    },
    {
      "name": "CVE",
      "status": "ok",
      "lastSuccess": "2026-10-23T05:17:49.729Z",
      "lastAttempt": "2026-10-23T05:17:49.729Z",
      "error": null,
      "recordCount": 6,
      "coverage": "取得したPHP/JVN情報のうち、公開日が新しい最大6件のCVE公式レコードで条件を補足。",
      "cursor": null,
      "freshness": "fresh",
      "stale": false
    }
  ]
}