{
  "schemaVersion": "1.0",
  "publisher": "脆弱性ナビ",
  "origin": "https://zeijaku.ittrip.xyz",
  "terms": [
    {
      "name": "CVE Program",
      "url": "https://www.cve.org/legal/termsofuse",
      "notice": "CVE content is used subject to the CVE Program Terms of Use. CVE is a trademark of The MITRE Corporation.",
      "licenseText": "CVE content: Copyright The MITRE Corporation. CVE is a trademark of The MITRE Corporation.\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nDisclaimers: ALL DOCUMENTS AND THE INFORMATION CONTAINED THEREIN PROVIDED BY MITRE ARE PROVIDED ON AN \"AS IS\" BASIS AND THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE MITRE CORPORATION, ITS BOARD OF TRUSTEES, OFFICERS, AGENTS, AND EMPLOYEES, DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION THEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE."
    },
    {
      "name": "NIST NVD",
      "url": "https://nvd.nist.gov/general/faq",
      "notice": "This product uses data from the NVD API but is not endorsed or certified by the NVD."
    },
    {
      "name": "JVN",
      "url": "https://jvn.jp/contact/index.html",
      "notice": "出典：JVN（JPCERT/CC・IPA）。原文は各レコードの参照先を確認してください。"
    },
    {
      "name": "CISA KEV",
      "url": "https://github.com/cisagov/kev-data",
      "notice": "Known Exploited Vulnerabilities catalog, CISA. CC0."
    }
  ],
  "records": [
    {
      "id": "CVE-2020-0601",
      "aliases": [],
      "title": "Windows / Windows Server / Windows 10 Version 1903 for 32-bit Systems / Windows 10 Version 1903 for x64-based Systems / Windows 10 Version 1903 for ARM64-based Systems / Windows Server, version 1903 (Server Core installation) / Windows 10 Version 190：脆弱性情報",
      "summary": "Windows の CryptoAPI（Crypt32.dll）が楕円曲線暗号（ECC）証明書を検証する方法に偽装（スプーフィング）脆弱性が存在します。攻撃者は偽装したコード署名証明書を使って悪意ある実行ファイルに署名でき、そのファイルが信頼できる正規のものに見えるようになります。",
      "risk": "偽装されたコード署名証明書で署名された悪意ある実行ファイルが、正規の信頼できるファイルと誤認される可能性があります。",
      "product": "Windows / Windows Server / Windows 10 Version 1903 for 32-bit Systems / Windows 10 Version 1903 for x64-based Systems / Windows 10 Version 1903 for ARM64-based Systems / Windows Server, version 1903 (Server Core installation) / Windows 10 Version 190",
      "category": "windows",
      "component": "package",
      "severity": "unknown",
      "cvss": null,
      "cvssVersion": null,
      "cvssSource": "microsoft",
      "cvssVector": null,
      "affected": [
        {
          "product": "Windows",
          "range": "10 Version 1803 for 32-bit Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1803 for x64-based Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1803 for ARM64-based Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1809 for 32-bit Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1809 for x64-based Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1809 for ARM64-based Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1709 for 32-bit Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1709 for x64-based Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1709 for ARM64-based Systems"
        },
        {
          "product": "Windows",
          "range": "10 for 32-bit Systems"
        },
        {
          "product": "Windows",
          "range": "10 for x64-based Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1607 for 32-bit Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1607 for x64-based Systems"
        },
        {
          "product": "Windows Server",
          "range": "version 1803  (Core Installation)"
        },
        {
          "product": "Windows Server",
          "range": "2019"
        },
        {
          "product": "Windows Server",
          "range": "2019  (Core installation)"
        },
        {
          "product": "Windows Server",
          "range": "2016"
        },
        {
          "product": "Windows Server",
          "range": "2016  (Core installation)"
        },
        {
          "product": "Windows 10 Version 1903 for 32-bit Systems",
          "range": "unspecified"
        },
        {
          "product": "Windows 10 Version 1903 for x64-based Systems",
          "range": "unspecified"
        },
        {
          "product": "Windows 10 Version 1903 for ARM64-based Systems",
          "range": "unspecified"
        },
        {
          "product": "Windows Server, version 1903 (Server Core installation)",
          "range": "unspecified"
        },
        {
          "product": "Windows 10 Version 1909 for 32-bit Systems",
          "range": "unspecified"
        },
        {
          "product": "Windows 10 Version 1909 for x64-based Systems",
          "range": "unspecified"
        },
        {
          "product": "Windows Server, version 1909 (Server Core installation)",
          "range": "unspecified"
        },
        {
          "product": "Windows 10 Version 1909 for ARM64-based Systems",
          "range": "unspecified"
        }
      ],
      "fixed": [],
      "steps": [
        "ベンダーの指示に従って更新プログラムを適用してください。",
        "「CVE-2020-0601」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
        "Windows 11は「設定」→「Windows Update」→「更新プログラムのチェック」を開き、提供された更新を適用します。再起動を求められたら完了させます。会社管理のPC、Windows Server、サポート外の版は管理担当者に適用する修正番号と配布予定を確認してください。"
      ],
      "references": [
        {
          "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0601.json",
          "label": "CVE：microsoft"
        },
        {
          "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-0601",
          "label": "CISA KEV（悪用確認）"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-0601",
          "label": "CVE公式レコード"
        },
        {
          "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0601",
          "label": "CVE掲載の参考情報"
        },
        {
          "url": "http://packetstormsecurity.com/files/155961/CurveBall-Microsoft-Windows-CryptoAPI-Spoofing-Proof-Of-Concept.html",
          "label": "CVE掲載の参考情報"
        },
        {
          "url": "http://packetstormsecurity.com/files/155960/CurveBall-Microsoft-Windows-CryptoAPI-Spoofing-Proof-Of-Concept.html",
          "label": "CVE掲載の参考情報"
        },
        {
          "url": "https://www.cisa.gov/news-events/directives/ed-20-02-mitigate-windows-vulnerabilities-january-2020-patch-tuesday",
          "label": "CISAが示す関連情報"
        },
        {
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-0601",
          "label": "CISAが示す関連情報"
        },
        {
          "url": "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device",
          "label": "Microsoft公式：Windowsの情報を調べる"
        },
        {
          "url": "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates",
          "label": "Microsoft公式：Windows Updateの操作"
        }
      ],
      "publishedAt": "2020-01-14T23:11:20.000Z",
      "modifiedAt": "2025-10-21T23:35:53.978Z",
      "fetchedAt": "2026-10-23T02:43:09.485Z",
      "exploitStatus": "confirmed",
      "sources": [
        "CVE",
        "CISA KEV"
      ],
      "originalText": "A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) certificates.An attacker could exploit the vulnerability by using a spoofed code-signing certificate to sign a malicious executable, making it appear the file was from a trusted, legitimate source, aka 'Windows CryptoAPI Spoofing Vulnerability'.",
      "sourceTitle": "",
      "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。",
      "state": "published",
      "affectedDetails": [
        {
          "product": "Windows",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "10 Version 1803 for 32-bit Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1803 for x64-based Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1803 for ARM64-based Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1809 for 32-bit Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1809 for x64-based Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1809 for ARM64-based Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1709 for 32-bit Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1709 for x64-based Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1709 for ARM64-based Systems"
            },
            {
              "status": "affected",
              "version": "10 for 32-bit Systems"
            },
            {
              "status": "affected",
              "version": "10 for x64-based Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1607 for 32-bit Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1607 for x64-based Systems"
            }
          ]
        },
        {
          "product": "Windows Server",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "version 1803  (Core Installation)"
            },
            {
              "status": "affected",
              "version": "2019"
            },
            {
              "status": "affected",
              "version": "2019  (Core installation)"
            },
            {
              "status": "affected",
              "version": "2016"
            },
            {
              "status": "affected",
              "version": "2016  (Core installation)"
            }
          ]
        },
        {
          "product": "Windows 10 Version 1903 for 32-bit Systems",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified"
            }
          ]
        },
        {
          "product": "Windows 10 Version 1903 for x64-based Systems",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified"
            }
          ]
        },
        {
          "product": "Windows 10 Version 1903 for ARM64-based Systems",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified"
            }
          ]
        },
        {
          "product": "Windows Server, version 1903 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified"
            }
          ]
        },
        {
          "product": "Windows 10 Version 1909 for 32-bit Systems",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified"
            }
          ]
        },
        {
          "product": "Windows 10 Version 1909 for x64-based Systems",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified"
            }
          ]
        },
        {
          "product": "Windows Server, version 1909 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified"
            }
          ]
        },
        {
          "product": "Windows 10 Version 1909 for ARM64-based Systems",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified"
            }
          ]
        }
      ],
      "officialEvidence": {
        "schemaVersion": "1.0",
        "id": "CVE-2020-0601",
        "sourceType": "CVE",
        "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0601.json",
        "fetchedAt": "2026-10-23T02:43:09.485Z",
        "publishedAt": "2020-01-14T23:11:20.000Z",
        "modifiedAt": "2025-10-21T23:35:53.978Z",
        "state": "published",
        "provider": "microsoft",
        "title": "",
        "descriptions": [
          {
            "lang": "en",
            "value": "A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) certificates.An attacker could exploit the vulnerability by using a spoofed code-signing certificate to sign a malicious executable, making it appear the file was from a trusted, legitimate source, aka 'Windows CryptoAPI Spoofing Vulnerability'.",
            "sourcePath": "/containers/cna/descriptions/0/value"
          }
        ],
        "affected": [
          {
            "vendor": "Microsoft",
            "product": "Windows",
            "sourcePath": "/containers/cna/affected/0",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/0/versions/0",
                "version": "10 Version 1803 for 32-bit Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/1",
                "version": "10 Version 1803 for x64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/2",
                "version": "10 Version 1803 for ARM64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/3",
                "version": "10 Version 1809 for 32-bit Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/4",
                "version": "10 Version 1809 for x64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/5",
                "version": "10 Version 1809 for ARM64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/6",
                "version": "10 Version 1709 for 32-bit Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/7",
                "version": "10 Version 1709 for x64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/8",
                "version": "10 Version 1709 for ARM64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/9",
                "version": "10 for 32-bit Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/10",
                "version": "10 for x64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/11",
                "version": "10 Version 1607 for 32-bit Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/12",
                "version": "10 Version 1607 for x64-based Systems",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server",
            "sourcePath": "/containers/cna/affected/1",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/1/versions/0",
                "version": "version 1803  (Core Installation)",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/1",
                "version": "2019",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/2",
                "version": "2019  (Core installation)",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/3",
                "version": "2016",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/4",
                "version": "2016  (Core installation)",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 1903 for 32-bit Systems",
            "sourcePath": "/containers/cna/affected/2",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/2/versions/0",
                "version": "unspecified",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 1903 for x64-based Systems",
            "sourcePath": "/containers/cna/affected/3",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/3/versions/0",
                "version": "unspecified",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 1903 for ARM64-based Systems",
            "sourcePath": "/containers/cna/affected/4",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/4/versions/0",
                "version": "unspecified",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server, version 1903 (Server Core installation)",
            "sourcePath": "/containers/cna/affected/5",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/5/versions/0",
                "version": "unspecified",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 1909 for 32-bit Systems",
            "sourcePath": "/containers/cna/affected/6",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/6/versions/0",
                "version": "unspecified",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 1909 for x64-based Systems",
            "sourcePath": "/containers/cna/affected/7",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/7/versions/0",
                "version": "unspecified",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server, version 1909 (Server Core installation)",
            "sourcePath": "/containers/cna/affected/8",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/8/versions/0",
                "version": "unspecified",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 1909 for ARM64-based Systems",
            "sourcePath": "/containers/cna/affected/9",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/9/versions/0",
                "version": "unspecified",
                "status": "affected"
              }
            ]
          }
        ],
        "solutions": [],
        "workarounds": [],
        "exploits": [],
        "rejectedReasons": [],
        "problemTypes": [
          {
            "cweId": "",
            "lang": "en",
            "description": "Spoofing",
            "sourcePath": "/containers/cna/problemTypes/0/descriptions/0"
          }
        ],
        "metrics": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "provider": "CISA-ADP",
            "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1"
          }
        ],
        "references": [
          {
            "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0601",
            "label": "CVE",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/0"
          },
          {
            "url": "http://packetstormsecurity.com/files/155961/CurveBall-Microsoft-Windows-CryptoAPI-Spoofing-Proof-Of-Concept.html",
            "label": "CVE",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/1"
          },
          {
            "url": "http://packetstormsecurity.com/files/155960/CurveBall-Microsoft-Windows-CryptoAPI-Spoofing-Proof-Of-Concept.html",
            "label": "CVE",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/2"
          },
          {
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-0601",
            "label": "CISA-ADP",
            "tags": [
              "government-resource"
            ],
            "provider": "CISA-ADP",
            "sourcePath": "/containers/adp/1/references/0"
          }
        ],
        "snippets": [
          {
            "evidenceId": "official:/containers/cna/affected/0",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0601.json",
            "sourcePath": "/containers/cna/affected/0",
            "text": "{\"product\":\"Windows\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"10 Version 1803 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1803 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1803 for ARM64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1809 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1809 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1809 for ARM64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1709 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1709 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1709 for ARM64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1607 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1607 for x64-based Systems\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0601.json",
            "sourcePath": "/containers/cna/affected/1",
            "text": "{\"product\":\"Windows Server\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"version 1803  (Core Installation)\"},{\"status\":\"affected\",\"version\":\"2019\"},{\"status\":\"affected\",\"version\":\"2019  (Core installation)\"},{\"status\":\"affected\",\"version\":\"2016\"},{\"status\":\"affected\",\"version\":\"2016  (Core installation)\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/2",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0601.json",
            "sourcePath": "/containers/cna/affected/2",
            "text": "{\"product\":\"Windows 10 Version 1903 for 32-bit Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/3",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0601.json",
            "sourcePath": "/containers/cna/affected/3",
            "text": "{\"product\":\"Windows 10 Version 1903 for x64-based Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/4",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0601.json",
            "sourcePath": "/containers/cna/affected/4",
            "text": "{\"product\":\"Windows 10 Version 1903 for ARM64-based Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/5",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0601.json",
            "sourcePath": "/containers/cna/affected/5",
            "text": "{\"product\":\"Windows Server, version 1903 (Server Core installation)\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/6",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0601.json",
            "sourcePath": "/containers/cna/affected/6",
            "text": "{\"product\":\"Windows 10 Version 1909 for 32-bit Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/7",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0601.json",
            "sourcePath": "/containers/cna/affected/7",
            "text": "{\"product\":\"Windows 10 Version 1909 for x64-based Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/8",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0601.json",
            "sourcePath": "/containers/cna/affected/8",
            "text": "{\"product\":\"Windows Server, version 1909 (Server Core installation)\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/9",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0601.json",
            "sourcePath": "/containers/cna/affected/9",
            "text": "{\"product\":\"Windows 10 Version 1909 for ARM64-based Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/descriptions/0/value",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0601.json",
            "sourcePath": "/containers/cna/descriptions/0/value",
            "text": "A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) certificates.An attacker could exploit the vulnerability by using a spoofed code-signing certificate to sign a malicious executable, making it appear the file was from a trusted, legitimate source, aka 'Windows CryptoAPI Spoofing Vulnerability'.",
            "truncated": false,
            "representation": "source_excerpt"
          },
          {
            "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0601.json",
            "sourcePath": "/containers/cna/problemTypes/0/descriptions/0",
            "text": "{\"description\":\"Spoofing\",\"lang\":\"en\",\"type\":\"text\"}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/adp/1/metrics/0/cvssV3_1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0601.json",
            "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1",
            "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":8.1,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"REQUIRED\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"NONE\",\"privilegesRequired\":\"NONE\",\"confidentialityImpact\":\"HIGH\"}",
            "truncated": false,
            "representation": "source_json"
          }
        ],
        "limits": {
          "completeness": "official_record",
          "truncatedFields": [],
          "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。"
        }
      },
      "sourceSnapshots": [
        {
          "source": "CVE",
          "modifiedAt": "2025-10-21T23:35:53.978Z",
          "fetchedAt": "2026-10-23T02:43:09.485Z",
          "state": "published"
        },
        {
          "source": "CISA KEV",
          "modifiedAt": "2021-11-03T00:00:00.000Z",
          "fetchedAt": "2026-10-23T02:17:50.489Z",
          "state": "published"
        }
      ],
      "sourceAction": "Apply updates per vendor instructions.",
      "sourceSummary": "Windows / Windows Server / Windows 10 Version 1903 for 32-bit Systems / Windows 10 Version 1903 for x64-based Systems / Windows 10 Version 1903 for ARM64-based Systems / Windows Server, version 1903 (Server Core installation) / Windows 10 Version 190に脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。",
      "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。",
      "guidance": {
        "schemaVersion": "1.0",
        "method": "automatic",
        "reviewedAt": null,
        "reviewState": "current",
        "generatedAt": "2026-10-23T03:47:31.305Z",
        "generatorVersion": "2026-10-23.3",
        "sourceFingerprint": "3053d31a5817edea5bfaf8adb9a7458cbcd9b49ff39d31848329da186eca8ffa",
        "sourceModifiedAt": "2025-10-21T23:35:53.978Z",
        "model": "@cf/openai/gpt-oss-120b",
        "verificationMethod": "exact_source_excerpt_and_independent_semantic_check",
        "summary": "Windows の CryptoAPI（Crypt32.dll）が楕円曲線暗号（ECC）証明書を検証する方法に偽装（スプーフィング）脆弱性が存在します。攻撃者は偽装したコード署名証明書を使って悪意ある実行ファイルに署名でき、そのファイルが信頼できる正規のものに見えるようになります。",
        "risk": "偽装されたコード署名証明書で署名された悪意ある実行ファイルが、正規の信頼できるファイルと誤認される可能性があります。",
        "summaryEvidenceIds": [
          "E1"
        ],
        "riskEvidenceIds": [
          "E1"
        ],
        "applicability": [
          {
            "text": "Windows 10 の 1803、1809、1709、1607 の各バージョン（32 ビット、x64、ARM64）および一般的な Windows 10（32 ビット、x64）は影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0601.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "Windows Server の 1803（Core インストール）、2019（標準および Core インストール）、2016（標準および Core インストール）は影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0601.json"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "Windows 10 Version 1903 の 32 ビット、x64、ARM64 系統は影響を受けます（バージョンは未指定）。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0601.json"
            ],
            "evidenceIds": [
              "E4",
              "E5",
              "E6"
            ]
          },
          {
            "text": "Windows Server, version 1903（Server Core インストール）は影響を受けます（バージョンは未指定）。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0601.json"
            ],
            "evidenceIds": [
              "E7"
            ]
          },
          {
            "text": "Windows 10 Version 1909 の 32 ビット、x64、ARM64 系統は影響を受けます（バージョンは未指定）。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0601.json"
            ],
            "evidenceIds": [
              "E8",
              "E9",
              "E10"
            ]
          },
          {
            "text": "Windows Server, version 1909（Server Core インストール）は影響を受けます（バージョンは未指定）。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0601.json"
            ],
            "evidenceIds": [
              "E11"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows。影響ありとして記載：10 for 32-bit Systems。影響ありとして記載：10 for x64-based Systems。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0601.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server。影響ありとして記載：version 1803  (Core Installation)。影響ありとして記載：2019。影響ありとして記載：2019  (Core installation)。影響ありとして記載：2016。影響ありとして記載：2016  (Core installation)。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0601.json"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 1903 for 32-bit Systems。影響ありとして記載：具体的な版番号の記載なし。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0601.json"
            ],
            "evidenceIds": [
              "E4"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 1903 for x64-based Systems。影響ありとして記載：具体的な版番号の記載なし。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0601.json"
            ],
            "evidenceIds": [
              "E5"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 1903 for ARM64-based Systems。影響ありとして記載：具体的な版番号の記載なし。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0601.json"
            ],
            "evidenceIds": [
              "E6"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server, version 1903 (Server Core installation)。影響ありとして記載：具体的な版番号の記載なし。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0601.json"
            ],
            "evidenceIds": [
              "E7"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 1909 for 32-bit Systems。影響ありとして記載：具体的な版番号の記載なし。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0601.json"
            ],
            "evidenceIds": [
              "E8"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 1909 for x64-based Systems。影響ありとして記載：具体的な版番号の記載なし。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0601.json"
            ],
            "evidenceIds": [
              "E9"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server, version 1909 (Server Core installation)。影響ありとして記載：具体的な版番号の記載なし。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0601.json"
            ],
            "evidenceIds": [
              "E11"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 1909 for ARM64-based Systems。影響ありとして記載：具体的な版番号の記載なし。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0601.json"
            ],
            "evidenceIds": [
              "E10"
            ]
          },
          {
            "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。",
            "kind": "fact",
            "sourceUrls": [
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-0601"
            ],
            "evidenceIds": [
              "E13"
            ]
          }
        ],
        "versionChecks": [
          {
            "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0601.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "「スタート」→「設定」→「システム」→「バージョン情報」を開き、Windowsのエディション・バージョン・OSビルドを控えます。会社のPCやサーバーは、この情報とCVE番号を管理担当者へ渡してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device"
            ]
          }
        ],
        "actions": [
          {
            "text": "ベンダーの指示に従って更新プログラムを適用してください。",
            "kind": "fix",
            "sourceUrls": [
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-0601"
            ],
            "evidenceIds": [
              "E12"
            ]
          },
          {
            "text": "「CVE-2020-0601」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cve.org/CVERecord?id=CVE-2020-0601",
              "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0601",
              "http://packetstormsecurity.com/files/155961/CurveBall-Microsoft-Windows-CryptoAPI-Spoofing-Proof-Of-Concept.html",
              "http://packetstormsecurity.com/files/155960/CurveBall-Microsoft-Windows-CryptoAPI-Spoofing-Proof-Of-Concept.html",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-0601",
              "https://www.cisa.gov/news-events/directives/ed-20-02-mitigate-windows-vulnerabilities-january-2020-patch-tuesday",
              "https://nvd.nist.gov/vuln/detail/CVE-2020-0601"
            ]
          },
          {
            "text": "Windows 11は「設定」→「Windows Update」→「更新プログラムのチェック」を開き、提供された更新を適用します。再起動を求められたら完了させます。会社管理のPC、Windows Server、サポート外の版は管理担当者に適用する修正番号と配布予定を確認してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates"
            ]
          }
        ],
        "temporaryMitigations": [
          {
            "text": "すぐ更新できない場合は、CVE番号、Windowsの版、業務で必要な機能を管理担当者に伝え、修正までの利用方法と更新予定を決めてください。すべてのWindowsの問題に同じ回避策が使えるわけではありません。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates",
              "https://www.cve.org/CVERecord?id=CVE-2020-0601",
              "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0601",
              "http://packetstormsecurity.com/files/155961/CurveBall-Microsoft-Windows-CryptoAPI-Spoofing-Proof-Of-Concept.html",
              "http://packetstormsecurity.com/files/155960/CurveBall-Microsoft-Windows-CryptoAPI-Spoofing-Proof-Of-Concept.html",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-0601",
              "https://www.cisa.gov/news-events/directives/ed-20-02-mitigate-windows-vulnerabilities-january-2020-patch-tuesday",
              "https://nvd.nist.gov/vuln/detail/CVE-2020-0601"
            ]
          }
        ],
        "verification": [
          {
            "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。",
            "kind": "procedure",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0601.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "再起動後にWindows Updateを開き直して失敗・再起動待ちがないか確認し、管理担当者にこのCVEに対応する修正の適用結果を確認してもらってください。「最新の状態」と出ても、別製品の更新やサポート外の版の修正を保証するものではありません。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates"
            ]
          }
        ],
        "unknowns": [
          "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。",
          "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。"
        ],
        "sources": [
          {
            "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0601.json",
            "label": "CVE：microsoft"
          },
          {
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-0601",
            "label": "CISA KEV（悪用確認）"
          },
          {
            "url": "https://www.cve.org/CVERecord?id=CVE-2020-0601",
            "label": "CVE公式レコード"
          },
          {
            "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0601",
            "label": "CVE掲載の参考情報"
          },
          {
            "url": "http://packetstormsecurity.com/files/155961/CurveBall-Microsoft-Windows-CryptoAPI-Spoofing-Proof-Of-Concept.html",
            "label": "CVE掲載の参考情報"
          },
          {
            "url": "http://packetstormsecurity.com/files/155960/CurveBall-Microsoft-Windows-CryptoAPI-Spoofing-Proof-Of-Concept.html",
            "label": "CVE掲載の参考情報"
          },
          {
            "url": "https://www.cisa.gov/news-events/directives/ed-20-02-mitigate-windows-vulnerabilities-january-2020-patch-tuesday",
            "label": "CISAが示す関連情報"
          },
          {
            "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-0601",
            "label": "CISAが示す関連情報"
          },
          {
            "url": "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device",
            "label": "Microsoft公式：Windowsの情報を調べる"
          },
          {
            "url": "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates",
            "label": "Microsoft公式：Windows Updateの操作"
          }
        ],
        "evidence": [
          {
            "id": "E1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0601.json",
            "sourceField": "/containers/cna/descriptions/0/value",
            "excerpt": "A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) certificates.An attacker could exploit the vulnerability by using a spoofed code-signing certificate to sign a malicious executable, making it appear the file was from a trusted, legitimate source, aka 'Windows CryptoAPI Spoofing Vulnerability'.",
            "language": "en",
            "representation": "source_excerpt"
          },
          {
            "id": "E2",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0601.json",
            "sourceField": "/containers/cna/affected/0",
            "excerpt": "{\"product\":\"Windows\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"10 Version 1803 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1803 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1803 for ARM64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1809 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1809 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1809 for ARM64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1709 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1709 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1709 for ARM64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1607 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1607 for x64-based Systems\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E3",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0601.json",
            "sourceField": "/containers/cna/affected/1",
            "excerpt": "{\"product\":\"Windows Server\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"version 1803  (Core Installation)\"},{\"status\":\"affected\",\"version\":\"2019\"},{\"status\":\"affected\",\"version\":\"2019  (Core installation)\"},{\"status\":\"affected\",\"version\":\"2016\"},{\"status\":\"affected\",\"version\":\"2016  (Core installation)\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E4",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0601.json",
            "sourceField": "/containers/cna/affected/2",
            "excerpt": "{\"product\":\"Windows 10 Version 1903 for 32-bit Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E5",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0601.json",
            "sourceField": "/containers/cna/affected/3",
            "excerpt": "{\"product\":\"Windows 10 Version 1903 for x64-based Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E6",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0601.json",
            "sourceField": "/containers/cna/affected/4",
            "excerpt": "{\"product\":\"Windows 10 Version 1903 for ARM64-based Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E7",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0601.json",
            "sourceField": "/containers/cna/affected/5",
            "excerpt": "{\"product\":\"Windows Server, version 1903 (Server Core installation)\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E8",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0601.json",
            "sourceField": "/containers/cna/affected/6",
            "excerpt": "{\"product\":\"Windows 10 Version 1909 for 32-bit Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E9",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0601.json",
            "sourceField": "/containers/cna/affected/7",
            "excerpt": "{\"product\":\"Windows 10 Version 1909 for x64-based Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E10",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0601.json",
            "sourceField": "/containers/cna/affected/9",
            "excerpt": "{\"product\":\"Windows 10 Version 1909 for ARM64-based Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E11",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0601.json",
            "sourceField": "/containers/cna/affected/8",
            "excerpt": "{\"product\":\"Windows Server, version 1909 (Server Core installation)\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E12",
            "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-0601",
            "sourceField": "/sourceAction",
            "excerpt": "Apply updates per vendor instructions.",
            "language": null
          },
          {
            "id": "E13",
            "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-0601",
            "sourceField": "/exploitStatus",
            "excerpt": "{\"id\":\"CVE-2020-0601\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}",
            "language": "en",
            "representation": "normalized_feed_field"
          }
        ],
        "supportRequest": "件名：CVE-2020-0601（Windows / Windows Server / Windows 10 Version 1903 for 32-bit Systems / Windows 10 Version 1903 for x64-based Systems / Windows 10 Version 1903 for ARM64-based Systems / Windows Server, version 1903 (Server Core installation) / Windows 10 Version 190）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Windows 10 の 1803、1809、1709、1607 の各バージョン（32 ビット、x64、ARM64）および一般的な Windows 10（32 ビット、x64）は影響を受けます。\n・Windows Server の 1803（Core インストール）、2019（標準および Core インストール）、2016（標準および Core インストール）は影響を受けます。\n・Windows 10 Version 1903 の 32 ビット、x64、ARM64 系統は影響を受けます（バージョンは未指定）。\n・Windows Server, version 1903（Server Core インストール）は影響を受けます（バージョンは未指定）。\n・Windows 10 Version 1909 の 32 ビット、x64、ARM64 系統は影響を受けます（バージョンは未指定）。\n・Windows Server, version 1909（Server Core インストール）は影響を受けます（バージョンは未指定）。\n・公式の対象表：Microsoft / Windows。影響ありとして記載：10 for 32-bit Systems。影響ありとして記載：10 for x64-based Systems。\n・公式の対象表：Microsoft / Windows Server。影響ありとして記載：version 1803  (Core Installation)。影響ありとして記載：2019。影響ありとして記載：2019  (Core installation)。影響ありとして記載：2016。影響ありとして記載：2016  (Core installation)。\n・公式の対象表：Microsoft / Windows 10 Version 1903 for 32-bit Systems。影響ありとして記載：具体的な版番号の記載なし。\n・公式の対象表：Microsoft / Windows 10 Version 1903 for x64-based Systems。影響ありとして記載：具体的な版番号の記載なし。\n・公式の対象表：Microsoft / Windows 10 Version 1903 for ARM64-based Systems。影響ありとして記載：具体的な版番号の記載なし。\n・公式の対象表：Microsoft / Windows Server, version 1903 (Server Core installation)。影響ありとして記載：具体的な版番号の記載なし。\n・公式の対象表：Microsoft / Windows 10 Version 1909 for 32-bit Systems。影響ありとして記載：具体的な版番号の記載なし。\n・公式の対象表：Microsoft / Windows 10 Version 1909 for x64-based Systems。影響ありとして記載：具体的な版番号の記載なし。\n・公式の対象表：Microsoft / Windows Server, version 1909 (Server Core installation)。影響ありとして記載：具体的な版番号の記載なし。\n・公式の対象表：Microsoft / Windows 10 Version 1909 for ARM64-based Systems。影響ありとして記載：具体的な版番号の記載なし。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2020-0601",
        "publicationCheckVersion": "2026-10-23.1",
        "sourceNotices": [],
        "automation": {
          "status": "ready",
          "lastAttempt": "2026-10-23T03:47:31.305Z",
          "lastSuccess": "2026-10-23T03:47:31.305Z",
          "sourceCheckedAt": "2026-10-23T02:43:09.485Z",
          "errorCode": null
        },
        "glossary": []
      }
    },
    {
      "id": "CVE-2020-0683",
      "aliases": [],
      "title": "Windows / Windows Server / Windows 10 Version 1903 for 32-bit Systems / Windows 10 Version 1903 for x64-based Systems / Windows 10 Version 1903 for ARM64-based Systems / Windows Server, version 1903 (Server Core installation) / Windows 10 Version 190：権限の奪取",
      "summary": "Windows Installer が MSI パッケージでシンボリックリンクを処理する際に、特権昇格の脆弱性が存在します。",
      "risk": "攻撃者が特権昇格を行い、システム上で管理者権限の操作が可能になる可能性があります。",
      "product": "Windows / Windows Server / Windows 10 Version 1903 for 32-bit Systems / Windows 10 Version 1903 for x64-based Systems / Windows 10 Version 1903 for ARM64-based Systems / Windows Server, version 1903 (Server Core installation) / Windows 10 Version 190",
      "category": "windows",
      "component": "package",
      "severity": "unknown",
      "cvss": null,
      "cvssVersion": null,
      "cvssSource": "microsoft",
      "cvssVector": null,
      "affected": [
        {
          "product": "Windows",
          "range": "10 Version 1803 for 32-bit Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1803 for x64-based Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1803 for ARM64-based Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1809 for 32-bit Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1809 for x64-based Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1809 for ARM64-based Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1709 for 32-bit Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1709 for x64-based Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1709 for ARM64-based Systems"
        },
        {
          "product": "Windows",
          "range": "10 for 32-bit Systems"
        },
        {
          "product": "Windows",
          "range": "10 for x64-based Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1607 for 32-bit Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1607 for x64-based Systems"
        },
        {
          "product": "Windows",
          "range": "7 for 32-bit Systems Service Pack 1"
        },
        {
          "product": "Windows",
          "range": "7 for x64-based Systems Service Pack 1"
        },
        {
          "product": "Windows",
          "range": "8.1 for 32-bit systems"
        },
        {
          "product": "Windows",
          "range": "8.1 for x64-based systems"
        },
        {
          "product": "Windows",
          "range": "RT 8.1"
        },
        {
          "product": "Windows Server",
          "range": "version 1803  (Core Installation)"
        },
        {
          "product": "Windows Server",
          "range": "2019"
        },
        {
          "product": "Windows Server",
          "range": "2019  (Core installation)"
        },
        {
          "product": "Windows Server",
          "range": "2016"
        },
        {
          "product": "Windows Server",
          "range": "2016  (Core installation)"
        },
        {
          "product": "Windows Server",
          "range": "2008 for 32-bit Systems Service Pack 2"
        },
        {
          "product": "Windows Server",
          "range": "2008 for 32-bit Systems Service Pack 2 (Core installation)"
        },
        {
          "product": "Windows Server",
          "range": "2008 for Itanium-Based Systems Service Pack 2"
        },
        {
          "product": "Windows Server",
          "range": "2008 for x64-based Systems Service Pack 2"
        },
        {
          "product": "Windows Server",
          "range": "2008 for x64-based Systems Service Pack 2 (Core installation)"
        },
        {
          "product": "Windows Server",
          "range": "2008 R2 for Itanium-Based Systems Service Pack 1"
        },
        {
          "product": "Windows Server",
          "range": "2008 R2 for x64-based Systems Service Pack 1"
        },
        {
          "product": "Windows Server",
          "range": "2008 R2 for x64-based Systems Service Pack 1 (Core installation)"
        },
        {
          "product": "Windows Server",
          "range": "2012"
        },
        {
          "product": "Windows Server",
          "range": "2012 (Core installation)"
        },
        {
          "product": "Windows Server",
          "range": "2012 R2"
        },
        {
          "product": "Windows Server",
          "range": "2012 R2 (Core installation)"
        },
        {
          "product": "Windows 10 Version 1903 for 32-bit Systems",
          "range": "unspecified"
        },
        {
          "product": "Windows 10 Version 1903 for x64-based Systems",
          "range": "unspecified"
        },
        {
          "product": "Windows 10 Version 1903 for ARM64-based Systems",
          "range": "unspecified"
        },
        {
          "product": "Windows Server, version 1903 (Server Core installation)",
          "range": "unspecified"
        },
        {
          "product": "Windows 10 Version 1909 for 32-bit Systems",
          "range": "unspecified"
        },
        {
          "product": "Windows 10 Version 1909 for x64-based Systems",
          "range": "unspecified"
        },
        {
          "product": "Windows 10 Version 1909 for ARM64-based Systems",
          "range": "unspecified"
        },
        {
          "product": "Windows Server, version 1909 (Server Core installation)",
          "range": "unspecified"
        }
      ],
      "fixed": [],
      "steps": [
        "ベンダーの指示に従って更新プログラムを適用してください。",
        "「CVE-2020-0683」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
        "Windows 11は「設定」→「Windows Update」→「更新プログラムのチェック」を開き、提供された更新を適用します。再起動を求められたら完了させます。会社管理のPC、Windows Server、サポート外の版は管理担当者に適用する修正番号と配布予定を確認してください。"
      ],
      "references": [
        {
          "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0683.json",
          "label": "CVE：microsoft"
        },
        {
          "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-0683",
          "label": "CISA KEV（悪用確認）"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-0683",
          "label": "CVE公式レコード"
        },
        {
          "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0683",
          "label": "CVE掲載の参考情報"
        },
        {
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-0683",
          "label": "CISAが示す関連情報"
        },
        {
          "url": "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device",
          "label": "Microsoft公式：Windowsの情報を調べる"
        },
        {
          "url": "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates",
          "label": "Microsoft公式：Windows Updateの操作"
        }
      ],
      "publishedAt": "2020-02-11T21:22:57.000Z",
      "modifiedAt": "2025-10-21T23:35:51.493Z",
      "fetchedAt": "2026-10-23T02:43:09.593Z",
      "exploitStatus": "confirmed",
      "sources": [
        "CVE",
        "CISA KEV"
      ],
      "originalText": "An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'Windows Installer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0686.",
      "sourceTitle": "",
      "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。",
      "state": "published",
      "affectedDetails": [
        {
          "product": "Windows",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "10 Version 1803 for 32-bit Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1803 for x64-based Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1803 for ARM64-based Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1809 for 32-bit Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1809 for x64-based Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1809 for ARM64-based Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1709 for 32-bit Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1709 for x64-based Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1709 for ARM64-based Systems"
            },
            {
              "status": "affected",
              "version": "10 for 32-bit Systems"
            },
            {
              "status": "affected",
              "version": "10 for x64-based Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1607 for 32-bit Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1607 for x64-based Systems"
            },
            {
              "status": "affected",
              "version": "7 for 32-bit Systems Service Pack 1"
            },
            {
              "status": "affected",
              "version": "7 for x64-based Systems Service Pack 1"
            },
            {
              "status": "affected",
              "version": "8.1 for 32-bit systems"
            },
            {
              "status": "affected",
              "version": "8.1 for x64-based systems"
            },
            {
              "status": "affected",
              "version": "RT 8.1"
            }
          ]
        },
        {
          "product": "Windows Server",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "version 1803  (Core Installation)"
            },
            {
              "status": "affected",
              "version": "2019"
            },
            {
              "status": "affected",
              "version": "2019  (Core installation)"
            },
            {
              "status": "affected",
              "version": "2016"
            },
            {
              "status": "affected",
              "version": "2016  (Core installation)"
            },
            {
              "status": "affected",
              "version": "2008 for 32-bit Systems Service Pack 2"
            },
            {
              "status": "affected",
              "version": "2008 for 32-bit Systems Service Pack 2 (Core installation)"
            },
            {
              "status": "affected",
              "version": "2008 for Itanium-Based Systems Service Pack 2"
            },
            {
              "status": "affected",
              "version": "2008 for x64-based Systems Service Pack 2"
            },
            {
              "status": "affected",
              "version": "2008 for x64-based Systems Service Pack 2 (Core installation)"
            },
            {
              "status": "affected",
              "version": "2008 R2 for Itanium-Based Systems Service Pack 1"
            },
            {
              "status": "affected",
              "version": "2008 R2 for x64-based Systems Service Pack 1"
            },
            {
              "status": "affected",
              "version": "2008 R2 for x64-based Systems Service Pack 1 (Core installation)"
            },
            {
              "status": "affected",
              "version": "2012"
            },
            {
              "status": "affected",
              "version": "2012 (Core installation)"
            },
            {
              "status": "affected",
              "version": "2012 R2"
            },
            {
              "status": "affected",
              "version": "2012 R2 (Core installation)"
            }
          ]
        },
        {
          "product": "Windows 10 Version 1903 for 32-bit Systems",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified"
            }
          ]
        },
        {
          "product": "Windows 10 Version 1903 for x64-based Systems",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified"
            }
          ]
        },
        {
          "product": "Windows 10 Version 1903 for ARM64-based Systems",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified"
            }
          ]
        },
        {
          "product": "Windows Server, version 1903 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified"
            }
          ]
        },
        {
          "product": "Windows 10 Version 1909 for 32-bit Systems",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified"
            }
          ]
        },
        {
          "product": "Windows 10 Version 1909 for x64-based Systems",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified"
            }
          ]
        },
        {
          "product": "Windows 10 Version 1909 for ARM64-based Systems",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified"
            }
          ]
        },
        {
          "product": "Windows Server, version 1909 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified"
            }
          ]
        }
      ],
      "officialEvidence": {
        "schemaVersion": "1.0",
        "id": "CVE-2020-0683",
        "sourceType": "CVE",
        "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0683.json",
        "fetchedAt": "2026-10-23T02:43:09.593Z",
        "publishedAt": "2020-02-11T21:22:57.000Z",
        "modifiedAt": "2025-10-21T23:35:51.493Z",
        "state": "published",
        "provider": "microsoft",
        "title": "",
        "descriptions": [
          {
            "lang": "en",
            "value": "An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'Windows Installer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0686.",
            "sourcePath": "/containers/cna/descriptions/0/value"
          }
        ],
        "affected": [
          {
            "vendor": "Microsoft",
            "product": "Windows",
            "sourcePath": "/containers/cna/affected/0",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/0/versions/0",
                "version": "10 Version 1803 for 32-bit Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/1",
                "version": "10 Version 1803 for x64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/2",
                "version": "10 Version 1803 for ARM64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/3",
                "version": "10 Version 1809 for 32-bit Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/4",
                "version": "10 Version 1809 for x64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/5",
                "version": "10 Version 1809 for ARM64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/6",
                "version": "10 Version 1709 for 32-bit Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/7",
                "version": "10 Version 1709 for x64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/8",
                "version": "10 Version 1709 for ARM64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/9",
                "version": "10 for 32-bit Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/10",
                "version": "10 for x64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/11",
                "version": "10 Version 1607 for 32-bit Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/12",
                "version": "10 Version 1607 for x64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/13",
                "version": "7 for 32-bit Systems Service Pack 1",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/14",
                "version": "7 for x64-based Systems Service Pack 1",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/15",
                "version": "8.1 for 32-bit systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/16",
                "version": "8.1 for x64-based systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/17",
                "version": "RT 8.1",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server",
            "sourcePath": "/containers/cna/affected/1",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/1/versions/0",
                "version": "version 1803  (Core Installation)",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/1",
                "version": "2019",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/2",
                "version": "2019  (Core installation)",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/3",
                "version": "2016",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/4",
                "version": "2016  (Core installation)",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/5",
                "version": "2008 for 32-bit Systems Service Pack 2",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/6",
                "version": "2008 for 32-bit Systems Service Pack 2 (Core installation)",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/7",
                "version": "2008 for Itanium-Based Systems Service Pack 2",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/8",
                "version": "2008 for x64-based Systems Service Pack 2",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/9",
                "version": "2008 for x64-based Systems Service Pack 2 (Core installation)",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/10",
                "version": "2008 R2 for Itanium-Based Systems Service Pack 1",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/11",
                "version": "2008 R2 for x64-based Systems Service Pack 1",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/12",
                "version": "2008 R2 for x64-based Systems Service Pack 1 (Core installation)",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/13",
                "version": "2012",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/14",
                "version": "2012 (Core installation)",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/15",
                "version": "2012 R2",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/16",
                "version": "2012 R2 (Core installation)",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 1903 for 32-bit Systems",
            "sourcePath": "/containers/cna/affected/2",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/2/versions/0",
                "version": "unspecified",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 1903 for x64-based Systems",
            "sourcePath": "/containers/cna/affected/3",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/3/versions/0",
                "version": "unspecified",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 1903 for ARM64-based Systems",
            "sourcePath": "/containers/cna/affected/4",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/4/versions/0",
                "version": "unspecified",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server, version 1903 (Server Core installation)",
            "sourcePath": "/containers/cna/affected/5",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/5/versions/0",
                "version": "unspecified",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 1909 for 32-bit Systems",
            "sourcePath": "/containers/cna/affected/6",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/6/versions/0",
                "version": "unspecified",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 1909 for x64-based Systems",
            "sourcePath": "/containers/cna/affected/7",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/7/versions/0",
                "version": "unspecified",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 1909 for ARM64-based Systems",
            "sourcePath": "/containers/cna/affected/8",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/8/versions/0",
                "version": "unspecified",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server, version 1909 (Server Core installation)",
            "sourcePath": "/containers/cna/affected/9",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/9/versions/0",
                "version": "unspecified",
                "status": "affected"
              }
            ]
          }
        ],
        "solutions": [],
        "workarounds": [],
        "exploits": [],
        "rejectedReasons": [],
        "problemTypes": [
          {
            "cweId": "",
            "lang": "en",
            "description": "Elevation of Privilege",
            "sourcePath": "/containers/cna/problemTypes/0/descriptions/0"
          }
        ],
        "metrics": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "provider": "CISA-ADP",
            "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1"
          }
        ],
        "references": [
          {
            "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0683",
            "label": "CVE",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/0"
          },
          {
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-0683",
            "label": "CISA-ADP",
            "tags": [
              "government-resource"
            ],
            "provider": "CISA-ADP",
            "sourcePath": "/containers/adp/1/references/0"
          }
        ],
        "snippets": [
          {
            "evidenceId": "official:/containers/cna/affected/0",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0683.json",
            "sourcePath": "/containers/cna/affected/0",
            "text": "{\"product\":\"Windows\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"10 Version 1803 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1803 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1803 for ARM64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1809 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1809 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1809 for ARM64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1709 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1709 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1709 for ARM64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1607 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1607 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"7 for 32-bit Systems Service Pack 1\"},{\"status\":\"affected\",\"version\":\"7 for x64-based Systems Service Pack 1\"},{\"status\":\"affected\",\"version\":\"8.1 for 32-bit systems\"},{\"status\":\"affected\",\"version\":\"8.1 for x64-based systems\"},{\"status\":\"affected\",\"version\":\"RT 8.1\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0683.json",
            "sourcePath": "/containers/cna/affected/1",
            "text": "{\"product\":\"Windows Server\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"version 1803  (Core Installation)\"},{\"status\":\"affected\",\"version\":\"2019\"},{\"status\":\"affected\",\"version\":\"2019  (Core installation)\"},{\"status\":\"affected\",\"version\":\"2016\"},{\"status\":\"affected\",\"version\":\"2016  (Core installation)\"},{\"status\":\"affected\",\"version\":\"2008 for 32-bit Systems Service Pack 2\"},{\"status\":\"affected\",\"version\":\"2008 for 32-bit Systems Service Pack 2 (Core installation)\"},{\"status\":\"affected\",\"version\":\"2008 for Itanium-Based Systems Service Pack 2\"},{\"status\":\"affected\",\"version\":\"2008 for x64-based Systems Service Pack 2\"},{\"status\":\"affected\",\"version\":\"2008 for x64-based Systems Service Pack 2 (Core installation)\"},{\"status\":\"affected\",\"version\":\"2008 R2 for Itanium-Based Systems Service Pack 1\"},{\"status\":\"affected\",\"version\":\"2008 R2 for x64-based Systems Service Pack 1\"},{\"status\":\"affected\",\"version\":\"2008 R2 for x64-based Systems Service Pack 1 (Core installation)\"},{\"status\":\"affected\",\"version\":\"2012\"},{\"status\":\"affected\",\"version\":\"2012 (Core installation)\"},{\"status\":\"affected\",\"version\":\"2012 R2\"},{\"status\":\"affected\",\"version\":\"2012 R2 (Core installation)\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/2",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0683.json",
            "sourcePath": "/containers/cna/affected/2",
            "text": "{\"product\":\"Windows 10 Version 1903 for 32-bit Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/3",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0683.json",
            "sourcePath": "/containers/cna/affected/3",
            "text": "{\"product\":\"Windows 10 Version 1903 for x64-based Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/4",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0683.json",
            "sourcePath": "/containers/cna/affected/4",
            "text": "{\"product\":\"Windows 10 Version 1903 for ARM64-based Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/5",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0683.json",
            "sourcePath": "/containers/cna/affected/5",
            "text": "{\"product\":\"Windows Server, version 1903 (Server Core installation)\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/6",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0683.json",
            "sourcePath": "/containers/cna/affected/6",
            "text": "{\"product\":\"Windows 10 Version 1909 for 32-bit Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/7",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0683.json",
            "sourcePath": "/containers/cna/affected/7",
            "text": "{\"product\":\"Windows 10 Version 1909 for x64-based Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/8",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0683.json",
            "sourcePath": "/containers/cna/affected/8",
            "text": "{\"product\":\"Windows 10 Version 1909 for ARM64-based Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/9",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0683.json",
            "sourcePath": "/containers/cna/affected/9",
            "text": "{\"product\":\"Windows Server, version 1909 (Server Core installation)\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/descriptions/0/value",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0683.json",
            "sourcePath": "/containers/cna/descriptions/0/value",
            "text": "An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'Windows Installer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0686.",
            "truncated": false,
            "representation": "source_excerpt"
          },
          {
            "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0683.json",
            "sourcePath": "/containers/cna/problemTypes/0/descriptions/0",
            "text": "{\"description\":\"Elevation of Privilege\",\"lang\":\"en\",\"type\":\"text\"}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/adp/1/metrics/0/cvssV3_1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0683.json",
            "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1",
            "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":7.8,\"attackVector\":\"LOCAL\",\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"NONE\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"LOW\",\"confidentialityImpact\":\"HIGH\"}",
            "truncated": false,
            "representation": "source_json"
          }
        ],
        "limits": {
          "completeness": "official_record",
          "truncatedFields": [],
          "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。"
        }
      },
      "sourceSnapshots": [
        {
          "source": "CVE",
          "modifiedAt": "2025-10-21T23:35:51.493Z",
          "fetchedAt": "2026-10-23T02:43:09.593Z",
          "state": "published"
        },
        {
          "source": "CISA KEV",
          "modifiedAt": "2021-11-03T00:00:00.000Z",
          "fetchedAt": "2026-10-23T02:17:50.489Z",
          "state": "published"
        }
      ],
      "sourceAction": "Apply updates per vendor instructions.",
      "sourceSummary": "Windows / Windows Server / Windows 10 Version 1903 for 32-bit Systems / Windows 10 Version 1903 for x64-based Systems / Windows 10 Version 1903 for ARM64-based Systems / Windows Server, version 1903 (Server Core installation) / Windows 10 Version 190に権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。",
      "sourceRisk": "本来与えられていない権限で、操作される可能性があります。",
      "guidance": {
        "schemaVersion": "1.0",
        "method": "automatic",
        "reviewedAt": null,
        "reviewState": "current",
        "generatedAt": "2026-10-23T03:47:39.154Z",
        "generatorVersion": "2026-10-23.3",
        "sourceFingerprint": "80ede5b768f11c5450b7daf619b64dcaf140a03ee5768ee404a814167a7fb900",
        "sourceModifiedAt": "2025-10-21T23:35:51.493Z",
        "model": "@cf/openai/gpt-oss-120b",
        "verificationMethod": "exact_source_excerpt_and_independent_semantic_check",
        "summary": "Windows Installer が MSI パッケージでシンボリックリンクを処理する際に、特権昇格の脆弱性が存在します。",
        "risk": "攻撃者が特権昇格を行い、システム上で管理者権限の操作が可能になる可能性があります。",
        "summaryEvidenceIds": [
          "E1"
        ],
        "riskEvidenceIds": [
          "E1"
        ],
        "applicability": [
          {
            "text": "Windows 10 Version 1803（32 ビット、64 ビット、ARM64）すべてが影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0683.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "Windows 10 Version 1809（32 ビット、64 ビット、ARM64）すべてが影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0683.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "Windows 10 Version 1709（32 ビット、64 ビット、ARM64）すべてが影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0683.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "Windows 10（32 ビット、64 ビット）すべてが影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0683.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "Windows 10 Version 1607（32 ビット、64 ビット）すべてが影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0683.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "Windows 7（32 ビット、64 ビット、Service Pack 1）すべてが影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0683.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "Windows 8.1（32 ビット、64 ビット）すべてが影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0683.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "Windows RT 8.1 が影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0683.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "Windows Server（バージョン 1803（Core インストール）、2019（標準・Core）、2016（標準・Core）、2008（32 ビット SP2、Core、Itanium SP2、x64 SP2、Core）、2008 R2（Itanium SP1、x64 SP1、Core）、2012（標準・Core）、2012 R2（標準・Core））すべてが影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0683.json"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "Windows 10 Version 1903（32 ビット、64 ビット、ARM64）はバージョンが未指定ですが影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0683.json"
            ],
            "evidenceIds": [
              "E4",
              "E5",
              "E6"
            ]
          },
          {
            "text": "Windows Server バージョン 1903（Server Core インストール）はバージョンが未指定ですが影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0683.json"
            ],
            "evidenceIds": [
              "E7"
            ]
          },
          {
            "text": "Windows 10 Version 1909（32 ビット、64 ビット、ARM64）および Windows Server バージョン 1909（Server Core インストール）はバージョンが未指定ですが影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0683.json"
            ],
            "evidenceIds": [
              "E8",
              "E9",
              "E10",
              "E11"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows。影響ありとして記載：10 for 32-bit Systems。影響ありとして記載：10 for x64-based Systems。影響ありとして記載：8.1 for 32-bit systems。影響ありとして記載：8.1 for x64-based systems。影響ありとして記載：RT 8.1。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0683.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server。影響ありとして記載：version 1803  (Core Installation)。影響ありとして記載：2019。影響ありとして記載：2019  (Core installation)。影響ありとして記載：2016。影響ありとして記載：2016  (Core installation)。影響ありとして記載：2012。影響ありとして記載：2012 (Core installation)。影響ありとして記載：2012 R2。影響ありとして記載：2012 R2 (Core installation)。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0683.json"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 1903 for 32-bit Systems。影響ありとして記載：具体的な版番号の記載なし。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0683.json"
            ],
            "evidenceIds": [
              "E4"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 1903 for x64-based Systems。影響ありとして記載：具体的な版番号の記載なし。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0683.json"
            ],
            "evidenceIds": [
              "E5"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 1903 for ARM64-based Systems。影響ありとして記載：具体的な版番号の記載なし。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0683.json"
            ],
            "evidenceIds": [
              "E6"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server, version 1903 (Server Core installation)。影響ありとして記載：具体的な版番号の記載なし。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0683.json"
            ],
            "evidenceIds": [
              "E7"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 1909 for 32-bit Systems。影響ありとして記載：具体的な版番号の記載なし。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0683.json"
            ],
            "evidenceIds": [
              "E8"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 1909 for x64-based Systems。影響ありとして記載：具体的な版番号の記載なし。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0683.json"
            ],
            "evidenceIds": [
              "E9"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 1909 for ARM64-based Systems。影響ありとして記載：具体的な版番号の記載なし。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0683.json"
            ],
            "evidenceIds": [
              "E10"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server, version 1909 (Server Core installation)。影響ありとして記載：具体的な版番号の記載なし。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0683.json"
            ],
            "evidenceIds": [
              "E11"
            ]
          },
          {
            "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。",
            "kind": "fact",
            "sourceUrls": [
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-0683"
            ],
            "evidenceIds": [
              "E13"
            ]
          }
        ],
        "versionChecks": [
          {
            "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0683.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "「スタート」→「設定」→「システム」→「バージョン情報」を開き、Windowsのエディション・バージョン・OSビルドを控えます。会社のPCやサーバーは、この情報とCVE番号を管理担当者へ渡してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device"
            ]
          }
        ],
        "actions": [
          {
            "text": "ベンダーの指示に従って更新プログラムを適用してください。",
            "kind": "fix",
            "sourceUrls": [
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-0683"
            ],
            "evidenceIds": [
              "E12"
            ]
          },
          {
            "text": "「CVE-2020-0683」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cve.org/CVERecord?id=CVE-2020-0683",
              "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0683",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-0683",
              "https://nvd.nist.gov/vuln/detail/CVE-2020-0683"
            ]
          },
          {
            "text": "Windows 11は「設定」→「Windows Update」→「更新プログラムのチェック」を開き、提供された更新を適用します。再起動を求められたら完了させます。会社管理のPC、Windows Server、サポート外の版は管理担当者に適用する修正番号と配布予定を確認してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates"
            ]
          }
        ],
        "temporaryMitigations": [
          {
            "text": "すぐ更新できない場合は、CVE番号、Windowsの版、業務で必要な機能を管理担当者に伝え、修正までの利用方法と更新予定を決めてください。すべてのWindowsの問題に同じ回避策が使えるわけではありません。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates",
              "https://www.cve.org/CVERecord?id=CVE-2020-0683",
              "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0683",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-0683",
              "https://nvd.nist.gov/vuln/detail/CVE-2020-0683"
            ]
          }
        ],
        "verification": [
          {
            "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。",
            "kind": "procedure",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0683.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "再起動後にWindows Updateを開き直して失敗・再起動待ちがないか確認し、管理担当者にこのCVEに対応する修正の適用結果を確認してもらってください。「最新の状態」と出ても、別製品の更新やサポート外の版の修正を保証するものではありません。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates"
            ]
          }
        ],
        "unknowns": [
          "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。",
          "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。"
        ],
        "sources": [
          {
            "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0683.json",
            "label": "CVE：microsoft"
          },
          {
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-0683",
            "label": "CISA KEV（悪用確認）"
          },
          {
            "url": "https://www.cve.org/CVERecord?id=CVE-2020-0683",
            "label": "CVE公式レコード"
          },
          {
            "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0683",
            "label": "CVE掲載の参考情報"
          },
          {
            "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-0683",
            "label": "CISAが示す関連情報"
          },
          {
            "url": "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device",
            "label": "Microsoft公式：Windowsの情報を調べる"
          },
          {
            "url": "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates",
            "label": "Microsoft公式：Windows Updateの操作"
          }
        ],
        "evidence": [
          {
            "id": "E1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0683.json",
            "sourceField": "/containers/cna/descriptions/0/value",
            "excerpt": "An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'Windows Installer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0686.",
            "language": "en",
            "representation": "source_excerpt"
          },
          {
            "id": "E2",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0683.json",
            "sourceField": "/containers/cna/affected/0",
            "excerpt": "{\"product\":\"Windows\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"10 Version 1803 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1803 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1803 for ARM64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1809 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1809 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1809 for ARM64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1709 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1709 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1709 for ARM64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1607 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1607 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"7 for 32-bit Systems Service Pack 1\"},{\"status\":\"affected\",\"version\":\"7 for x64-based Systems Service Pack 1\"},{\"status\":\"affected\",\"version\":\"8.1 for 32-bit systems\"},{\"status\":\"affected\",\"version\":\"8.1 for x64-based systems\"},{\"status\":\"affected\",\"version\":\"RT 8.1\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E3",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0683.json",
            "sourceField": "/containers/cna/affected/1",
            "excerpt": "{\"product\":\"Windows Server\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"version 1803  (Core Installation)\"},{\"status\":\"affected\",\"version\":\"2019\"},{\"status\":\"affected\",\"version\":\"2019  (Core installation)\"},{\"status\":\"affected\",\"version\":\"2016\"},{\"status\":\"affected\",\"version\":\"2016  (Core installation)\"},{\"status\":\"affected\",\"version\":\"2008 for 32-bit Systems Service Pack 2\"},{\"status\":\"affected\",\"version\":\"2008 for 32-bit Systems Service Pack 2 (Core installation)\"},{\"status\":\"affected\",\"version\":\"2008 for Itanium-Based Systems Service Pack 2\"},{\"status\":\"affected\",\"version\":\"2008 for x64-based Systems Service Pack 2\"},{\"status\":\"affected\",\"version\":\"2008 for x64-based Systems Service Pack 2 (Core installation)\"},{\"status\":\"affected\",\"version\":\"2008 R2 for Itanium-Based Systems Service Pack 1\"},{\"status\":\"affected\",\"version\":\"2008 R2 for x64-based Systems Service Pack 1\"},{\"status\":\"affected\",\"version\":\"2008 R2 for x64-based Systems Service Pack 1 (Core installation)\"},{\"status\":\"affected\",\"version\":\"2012\"},{\"status\":\"affected\",\"version\":\"2012 (Core installation)\"},{\"status\":\"affected\",\"version\":\"2012 R2\"},{\"status\":\"affected\",\"version\":\"2012 R2 (Core installation)\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E4",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0683.json",
            "sourceField": "/containers/cna/affected/2",
            "excerpt": "{\"product\":\"Windows 10 Version 1903 for 32-bit Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E5",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0683.json",
            "sourceField": "/containers/cna/affected/3",
            "excerpt": "{\"product\":\"Windows 10 Version 1903 for x64-based Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E6",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0683.json",
            "sourceField": "/containers/cna/affected/4",
            "excerpt": "{\"product\":\"Windows 10 Version 1903 for ARM64-based Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E7",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0683.json",
            "sourceField": "/containers/cna/affected/5",
            "excerpt": "{\"product\":\"Windows Server, version 1903 (Server Core installation)\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E8",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0683.json",
            "sourceField": "/containers/cna/affected/6",
            "excerpt": "{\"product\":\"Windows 10 Version 1909 for 32-bit Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E9",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0683.json",
            "sourceField": "/containers/cna/affected/7",
            "excerpt": "{\"product\":\"Windows 10 Version 1909 for x64-based Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E10",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0683.json",
            "sourceField": "/containers/cna/affected/8",
            "excerpt": "{\"product\":\"Windows 10 Version 1909 for ARM64-based Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E11",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0683.json",
            "sourceField": "/containers/cna/affected/9",
            "excerpt": "{\"product\":\"Windows Server, version 1909 (Server Core installation)\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E12",
            "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-0683",
            "sourceField": "/sourceAction",
            "excerpt": "Apply updates per vendor instructions.",
            "language": null
          },
          {
            "id": "E13",
            "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-0683",
            "sourceField": "/exploitStatus",
            "excerpt": "{\"id\":\"CVE-2020-0683\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}",
            "language": "en",
            "representation": "normalized_feed_field"
          }
        ],
        "supportRequest": "件名：CVE-2020-0683（Windows / Windows Server / Windows 10 Version 1903 for 32-bit Systems / Windows 10 Version 1903 for x64-based Systems / Windows 10 Version 1903 for ARM64-based Systems / Windows Server, version 1903 (Server Core installation) / Windows 10 Version 190）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Windows 10 Version 1803（32 ビット、64 ビット、ARM64）すべてが影響を受けます。\n・Windows 10 Version 1809（32 ビット、64 ビット、ARM64）すべてが影響を受けます。\n・Windows 10 Version 1709（32 ビット、64 ビット、ARM64）すべてが影響を受けます。\n・Windows 10（32 ビット、64 ビット）すべてが影響を受けます。\n・Windows 10 Version 1607（32 ビット、64 ビット）すべてが影響を受けます。\n・Windows 7（32 ビット、64 ビット、Service Pack 1）すべてが影響を受けます。\n・Windows 8.1（32 ビット、64 ビット）すべてが影響を受けます。\n・Windows RT 8.1 が影響を受けます。\n・Windows Server（バージョン 1803（Core インストール）、2019（標準・Core）、2016（標準・Core）、2008（32 ビット SP2、Core、Itanium SP2、x64 SP2、Core）、2008 R2（Itanium SP1、x64 SP1、Core）、2012（標準・Core）、2012 R2（標準・Core））すべてが影響を受けます。\n・Windows 10 Version 1903（32 ビット、64 ビット、ARM64）はバージョンが未指定ですが影響を受けます。\n・Windows Server バージョン 1903（Server Core インストール）はバージョンが未指定ですが影響を受けます。\n・Windows 10 Version 1909（32 ビット、64 ビット、ARM64）および Windows Server バージョン 1909（Server Core インストール）はバージョンが未指定ですが影響を受けます。\n・公式の対象表：Microsoft / Windows。影響ありとして記載：10 for 32-bit Systems。影響ありとして記載：10 for x64-based Systems。影響ありとして記載：8.1 for 32-bit systems。影響ありとして記載：8.1 for x64-based systems。影響ありとして記載：RT 8.1。\n・公式の対象表：Microsoft / Windows Server。影響ありとして記載：version 1803  (Core Installation)。影響ありとして記載：2019。影響ありとして記載：2019  (Core installation)。影響ありとして記載：2016。影響ありとして記載：2016  (Core installation)。影響ありとして記載：2012。影響ありとして記載：2012 (Core installation)。影響ありとして記載：2012 R2。影響ありとして記載：2012 R2 (Core installation)。\n・公式の対象表：Microsoft / Windows 10 Version 1903 for 32-bit Systems。影響ありとして記載：具体的な版番号の記載なし。\n・公式の対象表：Microsoft / Windows 10 Version 1903 for x64-based Systems。影響ありとして記載：具体的な版番号の記載なし。\n・公式の対象表：Microsoft / Windows 10 Version 1903 for ARM64-based Systems。影響ありとして記載：具体的な版番号の記載なし。\n・公式の対象表：Microsoft / Windows Server, version 1903 (Server Core installation)。影響ありとして記載：具体的な版番号の記載なし。\n・公式の対象表：Microsoft / Windows 10 Version 1909 for 32-bit Systems。影響ありとして記載：具体的な版番号の記載なし。\n・公式の対象表：Microsoft / Windows 10 Version 1909 for x64-based Systems。影響ありとして記載：具体的な版番号の記載なし。\n・公式の対象表：Microsoft / Windows 10 Version 1909 for ARM64-based Systems。影響ありとして記載：具体的な版番号の記載なし。\n・公式の対象表：Microsoft / Windows Server, version 1909 (Server Core installation)。影響ありとして記載：具体的な版番号の記載なし。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2020-0683",
        "publicationCheckVersion": "2026-10-23.1",
        "sourceNotices": [],
        "automation": {
          "status": "ready",
          "lastAttempt": "2026-10-23T03:47:39.154Z",
          "lastSuccess": "2026-10-23T03:47:39.154Z",
          "sourceCheckedAt": "2026-10-23T02:43:09.593Z",
          "errorCode": null
        },
        "glossary": []
      }
    },
    {
      "id": "CVE-2020-0688",
      "aliases": [],
      "title": "Microsoft Exchange Server 2013 / Microsoft Exchange Server 2019 Cumulative Update 3 / Microsoft Exchange Server 2016 Cumulative Update 14 / Microsoft Exchange Server 2016 Cumulative Update 15 / Microsoft Exchange Server 2019 Cumulative Update 4 / Mic：コード実行",
      "summary": "Microsoft Exchange ソフトウェアがメモリ内のオブジェクトを適切に処理できないため、リモートコード実行の脆弱性が存在します。これは「Microsoft Exchange Memory Corruption Vulnerability」とも呼ばれます。",
      "risk": "攻撃者がサーバー上で任意のコードを実行できる可能性があります。",
      "product": "Microsoft Exchange Server 2013 / Microsoft Exchange Server 2019 Cumulative Update 3 / Microsoft Exchange Server 2016 Cumulative Update 14 / Microsoft Exchange Server 2016 Cumulative Update 15 / Microsoft Exchange Server 2019 Cumulative Update 4 / Mic",
      "category": "windows",
      "component": "package",
      "severity": "unknown",
      "cvss": null,
      "cvssVersion": null,
      "cvssSource": "microsoft",
      "cvssVector": null,
      "affected": [
        {
          "product": "Microsoft Exchange Server 2013",
          "range": "Cumulative Update 23"
        },
        {
          "product": "Microsoft Exchange Server 2019 Cumulative Update 3",
          "range": "unspecified"
        },
        {
          "product": "Microsoft Exchange Server 2016 Cumulative Update 14",
          "range": "unspecified"
        },
        {
          "product": "Microsoft Exchange Server 2016 Cumulative Update 15",
          "range": "unspecified"
        },
        {
          "product": "Microsoft Exchange Server 2019 Cumulative Update 4",
          "range": "unspecified"
        },
        {
          "product": "Microsoft Exchange Server 2010 Service Pack 3 Update Rollup 30",
          "range": "unspecified"
        }
      ],
      "fixed": [],
      "steps": [
        "ベンダーの指示に従って更新プログラムを適用する。",
        "「CVE-2020-0688」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
        "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。"
      ],
      "references": [
        {
          "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0688.json",
          "label": "CVE：microsoft"
        },
        {
          "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-0688",
          "label": "CISA KEV（悪用確認）"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-0688",
          "label": "CVE公式レコード"
        },
        {
          "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0688",
          "label": "CVE掲載の参考情報"
        },
        {
          "url": "https://www.zerodayinitiative.com/advisories/ZDI-20-258/",
          "label": "CVE掲載の参考情報"
        },
        {
          "url": "http://packetstormsecurity.com/files/156592/Microsoft-Exchange-2019-15.2.221.12-Remote-Code-Execution.html",
          "label": "CVE掲載の参考情報"
        },
        {
          "url": "http://packetstormsecurity.com/files/156620/Exchange-Control-Panel-Viewstate-Deserialization.html",
          "label": "CVE掲載の参考情報"
        },
        {
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-0688",
          "label": "CISAが示す関連情報"
        },
        {
          "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
          "label": "CISA：ソフトウェア更新の基本"
        }
      ],
      "publishedAt": "2020-02-11T21:22:59.000Z",
      "modifiedAt": "2025-10-21T23:35:51.234Z",
      "fetchedAt": "2026-10-23T02:43:09.614Z",
      "exploitStatus": "confirmed",
      "sources": [
        "CVE",
        "CISA KEV"
      ],
      "originalText": "A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka 'Microsoft Exchange Memory Corruption Vulnerability'.",
      "sourceTitle": "",
      "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。",
      "state": "published",
      "affectedDetails": [
        {
          "product": "Microsoft Exchange Server 2013",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "Cumulative Update 23"
            }
          ]
        },
        {
          "product": "Microsoft Exchange Server 2019 Cumulative Update 3",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified"
            }
          ]
        },
        {
          "product": "Microsoft Exchange Server 2016 Cumulative Update 14",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified"
            }
          ]
        },
        {
          "product": "Microsoft Exchange Server 2016 Cumulative Update 15",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified"
            }
          ]
        },
        {
          "product": "Microsoft Exchange Server 2019 Cumulative Update 4",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified"
            }
          ]
        },
        {
          "product": "Microsoft Exchange Server 2010 Service Pack 3 Update Rollup 30",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified"
            }
          ]
        }
      ],
      "officialEvidence": {
        "schemaVersion": "1.0",
        "id": "CVE-2020-0688",
        "sourceType": "CVE",
        "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0688.json",
        "fetchedAt": "2026-10-23T02:43:09.614Z",
        "publishedAt": "2020-02-11T21:22:59.000Z",
        "modifiedAt": "2025-10-21T23:35:51.234Z",
        "state": "published",
        "provider": "microsoft",
        "title": "",
        "descriptions": [
          {
            "lang": "en",
            "value": "A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka 'Microsoft Exchange Memory Corruption Vulnerability'.",
            "sourcePath": "/containers/cna/descriptions/0/value"
          }
        ],
        "affected": [
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2013",
            "sourcePath": "/containers/cna/affected/0",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/0/versions/0",
                "version": "Cumulative Update 23",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2019 Cumulative Update 3",
            "sourcePath": "/containers/cna/affected/1",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/1/versions/0",
                "version": "unspecified",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2016 Cumulative Update 14",
            "sourcePath": "/containers/cna/affected/2",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/2/versions/0",
                "version": "unspecified",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2016 Cumulative Update 15",
            "sourcePath": "/containers/cna/affected/3",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/3/versions/0",
                "version": "unspecified",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2019 Cumulative Update 4",
            "sourcePath": "/containers/cna/affected/4",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/4/versions/0",
                "version": "unspecified",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2010 Service Pack 3 Update Rollup 30",
            "sourcePath": "/containers/cna/affected/5",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/5/versions/0",
                "version": "unspecified",
                "status": "affected"
              }
            ]
          }
        ],
        "solutions": [],
        "workarounds": [],
        "exploits": [],
        "rejectedReasons": [],
        "problemTypes": [
          {
            "cweId": "",
            "lang": "en",
            "description": "Remote Code Execution",
            "sourcePath": "/containers/cna/problemTypes/0/descriptions/0"
          }
        ],
        "metrics": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "provider": "CISA-ADP",
            "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1"
          }
        ],
        "references": [
          {
            "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0688",
            "label": "CVE",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/0"
          },
          {
            "url": "https://www.zerodayinitiative.com/advisories/ZDI-20-258/",
            "label": "CVE",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/1"
          },
          {
            "url": "http://packetstormsecurity.com/files/156592/Microsoft-Exchange-2019-15.2.221.12-Remote-Code-Execution.html",
            "label": "CVE",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/2"
          },
          {
            "url": "http://packetstormsecurity.com/files/156620/Exchange-Control-Panel-Viewstate-Deserialization.html",
            "label": "CVE",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/3"
          },
          {
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-0688",
            "label": "CISA-ADP",
            "tags": [
              "government-resource"
            ],
            "provider": "CISA-ADP",
            "sourcePath": "/containers/adp/1/references/0"
          }
        ],
        "snippets": [
          {
            "evidenceId": "official:/containers/cna/affected/0",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0688.json",
            "sourcePath": "/containers/cna/affected/0",
            "text": "{\"product\":\"Microsoft Exchange Server 2013\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"Cumulative Update 23\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0688.json",
            "sourcePath": "/containers/cna/affected/1",
            "text": "{\"product\":\"Microsoft Exchange Server 2019 Cumulative Update 3\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/2",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0688.json",
            "sourcePath": "/containers/cna/affected/2",
            "text": "{\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 14\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/3",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0688.json",
            "sourcePath": "/containers/cna/affected/3",
            "text": "{\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 15\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/4",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0688.json",
            "sourcePath": "/containers/cna/affected/4",
            "text": "{\"product\":\"Microsoft Exchange Server 2019 Cumulative Update 4\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/5",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0688.json",
            "sourcePath": "/containers/cna/affected/5",
            "text": "{\"product\":\"Microsoft Exchange Server 2010 Service Pack 3 Update Rollup 30\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/descriptions/0/value",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0688.json",
            "sourcePath": "/containers/cna/descriptions/0/value",
            "text": "A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka 'Microsoft Exchange Memory Corruption Vulnerability'.",
            "truncated": false,
            "representation": "source_excerpt"
          },
          {
            "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0688.json",
            "sourcePath": "/containers/cna/problemTypes/0/descriptions/0",
            "text": "{\"description\":\"Remote Code Execution\",\"lang\":\"en\",\"type\":\"text\"}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/adp/1/metrics/0/cvssV3_1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0688.json",
            "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1",
            "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":8.8,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"NONE\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"LOW\",\"confidentialityImpact\":\"HIGH\"}",
            "truncated": false,
            "representation": "source_json"
          }
        ],
        "limits": {
          "completeness": "official_record",
          "truncatedFields": [],
          "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。"
        }
      },
      "sourceSnapshots": [
        {
          "source": "CVE",
          "modifiedAt": "2025-10-21T23:35:51.234Z",
          "fetchedAt": "2026-10-23T02:43:09.614Z",
          "state": "published"
        },
        {
          "source": "CISA KEV",
          "modifiedAt": "2021-11-03T00:00:00.000Z",
          "fetchedAt": "2026-10-23T02:17:50.489Z",
          "state": "published"
        }
      ],
      "sourceAction": "Apply updates per vendor instructions.",
      "sourceSummary": "Microsoft Exchange Server 2013 / Microsoft Exchange Server 2019 Cumulative Update 3 / Microsoft Exchange Server 2016 Cumulative Update 14 / Microsoft Exchange Server 2016 Cumulative Update 15 / Microsoft Exchange Server 2019 Cumulative Update 4 / Micにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。",
      "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。",
      "guidance": {
        "schemaVersion": "1.0",
        "method": "automatic",
        "reviewedAt": null,
        "reviewState": "current",
        "generatedAt": "2026-10-23T03:47:39.184Z",
        "generatorVersion": "2026-10-23.3",
        "sourceFingerprint": "e13de2c5d69bc1c610abbd21d0c91d22b919a19d8e7f7cd9fab5210ebd8f022f",
        "sourceModifiedAt": "2025-10-21T23:35:51.234Z",
        "model": "@cf/openai/gpt-oss-120b",
        "verificationMethod": "exact_source_excerpt_and_independent_semantic_check",
        "summary": "Microsoft Exchange ソフトウェアがメモリ内のオブジェクトを適切に処理できないため、リモートコード実行の脆弱性が存在します。これは「Microsoft Exchange Memory Corruption Vulnerability」とも呼ばれます。",
        "risk": "攻撃者がサーバー上で任意のコードを実行できる可能性があります。",
        "summaryEvidenceIds": [
          "E1"
        ],
        "riskEvidenceIds": [
          "E1"
        ],
        "applicability": [
          {
            "text": "Microsoft Exchange Server 2013 の Cumulative Update 23 は影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0688.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "Microsoft Exchange Server 2019 の Cumulative Update 3 は影響を受けます（バージョンは特定されていません）。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0688.json"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "Microsoft Exchange Server 2016 の Cumulative Update 14 は影響を受けます（バージョンは特定されていません）。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0688.json"
            ],
            "evidenceIds": [
              "E4"
            ]
          },
          {
            "text": "Microsoft Exchange Server 2016 の Cumulative Update 15 は影響を受けます（バージョンは特定されていません）。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0688.json"
            ],
            "evidenceIds": [
              "E5"
            ]
          },
          {
            "text": "Microsoft Exchange Server 2019 の Cumulative Update 4 は影響を受けます（バージョンは特定されていません）。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0688.json"
            ],
            "evidenceIds": [
              "E6"
            ]
          },
          {
            "text": "Microsoft Exchange Server 2010 Service Pack 3 Update Rollup 30 は影響を受けます（バージョンは特定されていません）。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0688.json"
            ],
            "evidenceIds": [
              "E7"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2013。影響ありとして記載：Cumulative Update 23。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0688.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2019 Cumulative Update 3。影響ありとして記載：具体的な版番号の記載なし。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0688.json"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 14。影響ありとして記載：具体的な版番号の記載なし。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0688.json"
            ],
            "evidenceIds": [
              "E4"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 15。影響ありとして記載：具体的な版番号の記載なし。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0688.json"
            ],
            "evidenceIds": [
              "E5"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2019 Cumulative Update 4。影響ありとして記載：具体的な版番号の記載なし。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0688.json"
            ],
            "evidenceIds": [
              "E6"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2010 Service Pack 3 Update Rollup 30。影響ありとして記載：具体的な版番号の記載なし。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0688.json"
            ],
            "evidenceIds": [
              "E7"
            ]
          },
          {
            "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。",
            "kind": "fact",
            "sourceUrls": [
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-0688"
            ],
            "evidenceIds": [
              "E9"
            ]
          }
        ],
        "versionChecks": [
          {
            "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0688.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "「Microsoft Exchange Server 2013 / Microsoft Exchange Server 2019 Cumulative Update 3 / Microsoft Exchange Server 2016 Cumulative Update 14 / Microsoft Exchange Server 2016 Cumulative Update 15 / Microsoft Exchange Server 2019 Cumulative Update 4 / Mic」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
              "https://www.cve.org/CVERecord?id=CVE-2020-0688",
              "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0688",
              "https://www.zerodayinitiative.com/advisories/ZDI-20-258/",
              "http://packetstormsecurity.com/files/156592/Microsoft-Exchange-2019-15.2.221.12-Remote-Code-Execution.html",
              "http://packetstormsecurity.com/files/156620/Exchange-Control-Panel-Viewstate-Deserialization.html",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-0688",
              "https://nvd.nist.gov/vuln/detail/CVE-2020-0688"
            ]
          }
        ],
        "actions": [
          {
            "text": "ベンダーの指示に従って更新プログラムを適用する。",
            "kind": "fix",
            "sourceUrls": [
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-0688"
            ],
            "evidenceIds": [
              "E8"
            ]
          },
          {
            "text": "「CVE-2020-0688」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cve.org/CVERecord?id=CVE-2020-0688",
              "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0688",
              "https://www.zerodayinitiative.com/advisories/ZDI-20-258/",
              "http://packetstormsecurity.com/files/156592/Microsoft-Exchange-2019-15.2.221.12-Remote-Code-Execution.html",
              "http://packetstormsecurity.com/files/156620/Exchange-Control-Panel-Viewstate-Deserialization.html",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-0688",
              "https://nvd.nist.gov/vuln/detail/CVE-2020-0688"
            ]
          },
          {
            "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
              "https://www.cve.org/CVERecord?id=CVE-2020-0688",
              "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0688",
              "https://www.zerodayinitiative.com/advisories/ZDI-20-258/",
              "http://packetstormsecurity.com/files/156592/Microsoft-Exchange-2019-15.2.221.12-Remote-Code-Execution.html",
              "http://packetstormsecurity.com/files/156620/Exchange-Control-Panel-Viewstate-Deserialization.html",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-0688",
              "https://nvd.nist.gov/vuln/detail/CVE-2020-0688"
            ]
          }
        ],
        "temporaryMitigations": [
          {
            "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cve.org/CVERecord?id=CVE-2020-0688",
              "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0688",
              "https://www.zerodayinitiative.com/advisories/ZDI-20-258/",
              "http://packetstormsecurity.com/files/156592/Microsoft-Exchange-2019-15.2.221.12-Remote-Code-Execution.html",
              "http://packetstormsecurity.com/files/156620/Exchange-Control-Panel-Viewstate-Deserialization.html",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-0688",
              "https://nvd.nist.gov/vuln/detail/CVE-2020-0688"
            ]
          }
        ],
        "verification": [
          {
            "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。",
            "kind": "procedure",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0688.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
              "https://www.cve.org/CVERecord?id=CVE-2020-0688",
              "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0688",
              "https://www.zerodayinitiative.com/advisories/ZDI-20-258/",
              "http://packetstormsecurity.com/files/156592/Microsoft-Exchange-2019-15.2.221.12-Remote-Code-Execution.html",
              "http://packetstormsecurity.com/files/156620/Exchange-Control-Panel-Viewstate-Deserialization.html",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-0688",
              "https://nvd.nist.gov/vuln/detail/CVE-2020-0688"
            ]
          }
        ],
        "unknowns": [
          "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。",
          "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。"
        ],
        "sources": [
          {
            "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0688.json",
            "label": "CVE：microsoft"
          },
          {
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-0688",
            "label": "CISA KEV（悪用確認）"
          },
          {
            "url": "https://www.cve.org/CVERecord?id=CVE-2020-0688",
            "label": "CVE公式レコード"
          },
          {
            "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0688",
            "label": "CVE掲載の参考情報"
          },
          {
            "url": "https://www.zerodayinitiative.com/advisories/ZDI-20-258/",
            "label": "CVE掲載の参考情報"
          },
          {
            "url": "http://packetstormsecurity.com/files/156592/Microsoft-Exchange-2019-15.2.221.12-Remote-Code-Execution.html",
            "label": "CVE掲載の参考情報"
          },
          {
            "url": "http://packetstormsecurity.com/files/156620/Exchange-Control-Panel-Viewstate-Deserialization.html",
            "label": "CVE掲載の参考情報"
          },
          {
            "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-0688",
            "label": "CISAが示す関連情報"
          },
          {
            "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
            "label": "CISA：ソフトウェア更新の基本"
          }
        ],
        "evidence": [
          {
            "id": "E1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0688.json",
            "sourceField": "/containers/cna/descriptions/0/value",
            "excerpt": "A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka 'Microsoft Exchange Memory Corruption Vulnerability'.",
            "language": "en",
            "representation": "source_excerpt"
          },
          {
            "id": "E2",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0688.json",
            "sourceField": "/containers/cna/affected/0",
            "excerpt": "{\"product\":\"Microsoft Exchange Server 2013\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"Cumulative Update 23\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E3",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0688.json",
            "sourceField": "/containers/cna/affected/1",
            "excerpt": "{\"product\":\"Microsoft Exchange Server 2019 Cumulative Update 3\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E4",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0688.json",
            "sourceField": "/containers/cna/affected/2",
            "excerpt": "{\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 14\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E5",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0688.json",
            "sourceField": "/containers/cna/affected/3",
            "excerpt": "{\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 15\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E6",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0688.json",
            "sourceField": "/containers/cna/affected/4",
            "excerpt": "{\"product\":\"Microsoft Exchange Server 2019 Cumulative Update 4\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E7",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0688.json",
            "sourceField": "/containers/cna/affected/5",
            "excerpt": "{\"product\":\"Microsoft Exchange Server 2010 Service Pack 3 Update Rollup 30\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E8",
            "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-0688",
            "sourceField": "/sourceAction",
            "excerpt": "Apply updates per vendor instructions.",
            "language": null
          },
          {
            "id": "E9",
            "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-0688",
            "sourceField": "/exploitStatus",
            "excerpt": "{\"id\":\"CVE-2020-0688\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}",
            "language": "en",
            "representation": "normalized_feed_field"
          }
        ],
        "supportRequest": "件名：CVE-2020-0688（Microsoft Exchange Server 2013 / Microsoft Exchange Server 2019 Cumulative Update 3 / Microsoft Exchange Server 2016 Cumulative Update 14 / Microsoft Exchange Server 2016 Cumulative Update 15 / Microsoft Exchange Server 2019 Cumulative Update 4 / Mic）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Microsoft Exchange Server 2013 の Cumulative Update 23 は影響を受けます。\n・Microsoft Exchange Server 2019 の Cumulative Update 3 は影響を受けます（バージョンは特定されていません）。\n・Microsoft Exchange Server 2016 の Cumulative Update 14 は影響を受けます（バージョンは特定されていません）。\n・Microsoft Exchange Server 2016 の Cumulative Update 15 は影響を受けます（バージョンは特定されていません）。\n・Microsoft Exchange Server 2019 の Cumulative Update 4 は影響を受けます（バージョンは特定されていません）。\n・Microsoft Exchange Server 2010 Service Pack 3 Update Rollup 30 は影響を受けます（バージョンは特定されていません）。\n・公式の対象表：Microsoft / Microsoft Exchange Server 2013。影響ありとして記載：Cumulative Update 23。\n・公式の対象表：Microsoft / Microsoft Exchange Server 2019 Cumulative Update 3。影響ありとして記載：具体的な版番号の記載なし。\n・公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 14。影響ありとして記載：具体的な版番号の記載なし。\n・公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 15。影響ありとして記載：具体的な版番号の記載なし。\n・公式の対象表：Microsoft / Microsoft Exchange Server 2019 Cumulative Update 4。影響ありとして記載：具体的な版番号の記載なし。\n・公式の対象表：Microsoft / Microsoft Exchange Server 2010 Service Pack 3 Update Rollup 30。影響ありとして記載：具体的な版番号の記載なし。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2020-0688",
        "publicationCheckVersion": "2026-10-23.1",
        "sourceNotices": [],
        "automation": {
          "status": "ready",
          "lastAttempt": "2026-10-23T03:47:39.184Z",
          "lastSuccess": "2026-10-23T03:47:39.184Z",
          "sourceCheckedAt": "2026-10-23T02:43:09.614Z",
          "errorCode": null
        },
        "glossary": [
          {
            "term": "任意のコード実行",
            "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。",
            "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html",
            "kind": "general_definition"
          }
        ]
      }
    },
    {
      "id": "CVE-2020-0878",
      "aliases": [],
      "title": "ChakraCore / Microsoft Edge (EdgeHTML-based) / Internet Explorer 9 / Internet Explorer 11：脆弱性情報",
      "summary": "Microsoft のブラウザーがメモリ上のオブジェクトにアクセスする方法にリモートコード実行の脆弱性があります。この脆弱性によりメモリが破壊され、攻撃者が現在のユーザーの権限で任意のコードを実行できる可能性があります。攻撃者がこの脆弱性を利用すると、現在のユーザーと同じ権限を取得します。もし現在のユーザーが管理者権限でログオンしている場合、攻撃者はシステムを支配し、プログラムのインストール、データの閲覧・変更・削除、フル権限の新規アカウント作成などが可能になります。攻撃者は、脆弱性を悪用した特別に作成されたウェブサイトをホストし、ユーザーにそのサイトを閲覧させるよう誘導します。また、攻撃者は既に侵害されたサイトやユーザー生成コンテンツ・広告を掲載できるサイトに、悪用可能なコンテンツを追加して攻撃することもできます。ただし、ユーザーがそのコンテンツを閲覧しなければ攻撃は成立しません。通常はメールやインスタントメッセージでの誘導、またはメール添付ファイルを開かせるなどの手段でユーザーに行動させます。セキュリティ更新プログラムは、Microsoft のブラウザーがメモリ上のオブジェクトを処理する方法を変更することでこの脆弱性に対処します。",
      "risk": "攻撃者が脆弱性を利用すると、現在のユーザーと同じ権限でコードを実行でき、管理者権限でログオンしている場合はシステムを支配され、プログラムのインストールやデータの閲覧・変更・削除、フル権限の新規アカウント作成が可能になる恐れがあります。",
      "product": "ChakraCore / Microsoft Edge (EdgeHTML-based) / Internet Explorer 9 / Internet Explorer 11",
      "category": "windows",
      "component": "package",
      "severity": "medium",
      "cvss": 4.2,
      "cvssVersion": "3.1",
      "cvssSource": "microsoft",
      "cvssVector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C",
      "affected": [
        {
          "product": "ChakraCore",
          "range": "< publication（環境: Unknown）"
        },
        {
          "product": "Microsoft Edge (EdgeHTML-based)",
          "range": ">= 1.0..0 / < publication（環境: Windows 10 Version 1803 for 32-bit Systems / Windows 10 Version 1803 for x64-based Systems / Windows 10 Version 1803 for ARM64-based Systems / Windows 10 Version 1809 for 32-bit Systems / Windows 10 Version 1809 for x64-based Systems / Windows 10 Version 1809 for ARM64-based Systems / Windows Server 2019 / Windows 10 Version 1909 for 32-bit Systems / Windows 10 Version 1909 for x64-based Systems / Windows 10 Version 1909 for ARM64-based Systems / Windows 10 Version 1709 for 32-bit Systems / Windows 10 Version 1709 for x64-based Systems / Windows 10 Version 1709 fo"
        },
        {
          "product": "Internet Explorer 9",
          "range": ">= 1.0.0 / < publication（環境: Windows Server 2008 for 32-bit Systems Service Pack 2 / Windows Server 2008 for x64-based Systems Service Pack 2）"
        },
        {
          "product": "Internet Explorer 11",
          "range": ">= 1.0.0 / < publication（環境: Windows 10 Version 1803 for 32-bit Systems / Windows 10 Version 1803 for x64-based Systems / Windows 10 Version 1803 for ARM64-based Systems / Windows 10 Version 1809 for 32-bit Systems / Windows 10 Version 1809 for x64-based Systems / Windows 10 Version 1809 for ARM64-based Systems / Windows Server 2019 / Windows 10 Version 1909 for 32-bit Systems / Windows 10 Version 1909 for x64-based Systems / Windows 10 Version 1909 for ARM64-based Systems / Windows 10 Version 1709 for 32-bit Systems / Windows 10 Version 1709 for x64-based Systems / Windows 10 Version 1709 for"
        }
      ],
      "fixed": [],
      "steps": [
        "ベンダーの指示に従って更新プログラムを適用してください。",
        "「CVE-2020-0878」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
        "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。"
      ],
      "references": [
        {
          "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0878.json",
          "label": "CVE：microsoft"
        },
        {
          "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-0878",
          "label": "CISA KEV（悪用確認）"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-0878",
          "label": "CVE公式レコード"
        },
        {
          "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0878",
          "label": "CVE掲載の参考情報"
        },
        {
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-0878",
          "label": "CISAが示す関連情報"
        },
        {
          "url": "https://www.first.org/cvss/v3.1/specification-document",
          "label": "FIRST公式：CVSS 3.1の条件の定義"
        },
        {
          "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
          "label": "CISA：ソフトウェア更新の基本"
        }
      ],
      "publishedAt": "2020-09-11T17:08:26.000Z",
      "modifiedAt": "2025-10-21T23:35:36.572Z",
      "fetchedAt": "2026-10-23T02:43:09.710Z",
      "exploitStatus": "confirmed",
      "sources": [
        "CVE",
        "CISA KEV"
      ],
      "originalText": "",
      "sourceTitle": "Microsoft Browser Memory Corruption Vulnerability",
      "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。",
      "state": "published",
      "affectedDetails": [
        {
          "vendor": "Microsoft",
          "product": "ChakraCore",
          "cpes": [
            "cpe:2.3:a:microsoft:chakracore:*:*:*:*:*:*:*:*"
          ],
          "platforms": [
            "Unknown"
          ],
          "versions": [
            {
              "version": "0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Edge (EdgeHTML-based)",
          "cpes": [
            "cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*"
          ],
          "platforms": [
            "Windows 10 Version 1803 for 32-bit Systems",
            "Windows 10 Version 1803 for x64-based Systems",
            "Windows 10 Version 1803 for ARM64-based Systems",
            "Windows 10 Version 1809 for 32-bit Systems",
            "Windows 10 Version 1809 for x64-based Systems",
            "Windows 10 Version 1809 for ARM64-based Systems",
            "Windows Server 2019",
            "Windows 10 Version 1909 for 32-bit Systems",
            "Windows 10 Version 1909 for x64-based Systems",
            "Windows 10 Version 1909 for ARM64-based Systems",
            "Windows 10 Version 1709 for 32-bit Systems",
            "Windows 10 Version 1709 for x64-based Systems",
            "Windows 10 Version 1709 for ARM64-based Systems",
            "Windows 10 Version 1903 for 32-bit Systems",
            "Windows 10 Version 1903 for x64-based Systems",
            "Windows 10 Version 1903 for ARM64-based Systems",
            "Windows 10 Version 2004 for 32-bit Systems",
            "Windows 10 Version 2004 for ARM64-based Systems",
            "Windows 10 Version 2004 for x64-based Systems",
            "Windows 10 for 32-bit Systems",
            "Windows 10 for x64-based Systems",
            "Windows 10 Version 1607 for 32-bit Systems",
            "Windows 10 Version 1607 for x64-based Systems",
            "Windows Server 2016"
          ],
          "versions": [
            {
              "version": "1.0..0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Internet Explorer 9",
          "cpes": [
            "cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*"
          ],
          "platforms": [
            "Windows Server 2008 for 32-bit Systems Service Pack 2",
            "Windows Server 2008 for x64-based Systems Service Pack 2"
          ],
          "versions": [
            {
              "version": "1.0.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Internet Explorer 11",
          "cpes": [
            "cpe:2.3:a:microsoft:internet_explorer:11:-:*:*:*:*:*:*"
          ],
          "platforms": [
            "Windows 10 Version 1803 for 32-bit Systems",
            "Windows 10 Version 1803 for x64-based Systems",
            "Windows 10 Version 1803 for ARM64-based Systems",
            "Windows 10 Version 1809 for 32-bit Systems",
            "Windows 10 Version 1809 for x64-based Systems",
            "Windows 10 Version 1809 for ARM64-based Systems",
            "Windows Server 2019",
            "Windows 10 Version 1909 for 32-bit Systems",
            "Windows 10 Version 1909 for x64-based Systems",
            "Windows 10 Version 1909 for ARM64-based Systems",
            "Windows 10 Version 1709 for 32-bit Systems",
            "Windows 10 Version 1709 for x64-based Systems",
            "Windows 10 Version 1709 for ARM64-based Systems",
            "Windows 10 Version 1903 for 32-bit Systems",
            "Windows 10 Version 1903 for x64-based Systems",
            "Windows 10 Version 1903 for ARM64-based Systems",
            "Windows 10 Version 2004 for 32-bit Systems",
            "Windows 10 Version 2004 for ARM64-based Systems",
            "Windows 10 Version 2004 for x64-based Systems",
            "Windows 10 for 32-bit Systems",
            "Windows 10 for x64-based Systems",
            "Windows 10 Version 1607 for 32-bit Systems",
            "Windows 10 Version 1607 for x64-based Systems",
            "Windows Server 2016",
            "Windows 7 for 32-bit Systems Service Pack 1",
            "Windows 7 for x64-based Systems Service Pack 1",
            "Windows 8.1 for 32-bit systems",
            "Windows 8.1 for x64-based systems",
            "Windows RT 8.1",
            "Windows Server 2008 R2 for x64-based Systems Service Pack 1",
            "Windows Server 2012",
            "Windows Server 2012 R2"
          ],
          "versions": [
            {
              "version": "1.0.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        }
      ],
      "configurationNotes": "対象環境・機能: Unknown / Windows 10 Version 1803 for 32-bit Systems / Windows 10 Version 1803 for x64-based Systems / Windows 10 Version 1803 for ARM64-based Systems / Windows 10 Version 1809 for 32-bit Systems / Windows 10 Version 1809 for x64-based Systems / Windows 10 Version 1809 for ARM64-based Systems / Windows Server 2019 / Windows 10 Version 1909 for 32-bit Systems / Windows 10 Version 1909 for x64-based Systems / Windows 10 Version 1909 for ARM64-based Systems / Windows 10 Version 1709 for 32-bit Systems / Windows 10 Version 1709 for x64-based Systems / Windows 10 Version 1709 for ARM64-based Systems / Windows 10 Version 1903 for 32-bit Systems / Windows 10 Version 1903 for x64-based Systems / Windows 10 Version 1903 for ARM64-based Systems / Windows 10 Version 2004 for 32-bit Systems / Windows 10 Version 2004 for ARM64-based Systems / Windows 10 Version 2004 for x64-based Systems / Windows 10 for 32-bit Systems / Windows 10 for x64-based Systems / Windows 10 Version 1607 for 32-bit Systems / Windows 10 Version 1607 for x64-based Systems / Windows Server 2016 / Windows Server 2008 for 32-bit Systems Service Pack 2 / Windows Server 2008 for x64-based Systems Service Pack 2 / Windows 7 for 32-bit Systems Service Pack 1 / Windows 7 for x64-based Systems Service Pack 1 / Windows 8.1 for 32-bit systems / Windows 8.1 for x64-based systems / Windows RT 8.1 / Windows Server 2008 R2",
      "officialEvidence": {
        "schemaVersion": "1.0",
        "id": "CVE-2020-0878",
        "sourceType": "CVE",
        "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0878.json",
        "fetchedAt": "2026-10-23T02:43:09.710Z",
        "publishedAt": "2020-09-11T17:08:26.000Z",
        "modifiedAt": "2025-10-21T23:35:36.572Z",
        "state": "published",
        "provider": "microsoft",
        "title": "Microsoft Browser Memory Corruption Vulnerability",
        "descriptions": [
          {
            "lang": "en-US",
            "value": "<p>A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, the attacker could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>\n<p>An attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft browsers, and then convince a user to view the website. The attacker could also take advantage of compromised websites, or websites that accept or host user-provided content or advertisements, by adding specially crafted content that could exploit the vulnerability. In all cases, however, an attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically via an enticement in email or instant message, or by getting them to open an email attachment.</p>\n<p>The security update addresses the vulnerability by modifying how Microsoft browsers handle objects in memory.</p>",
            "sourcePath": "/containers/cna/descriptions/0/value"
          }
        ],
        "affected": [
          {
            "vendor": "Microsoft",
            "product": "ChakraCore",
            "sourcePath": "/containers/cna/affected/0",
            "platforms": [
              "Unknown"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:a:microsoft:chakracore:*:*:*:*:*:*:*:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/0/versions/0",
                "version": "0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Edge (EdgeHTML-based)",
            "sourcePath": "/containers/cna/affected/1",
            "platforms": [
              "Windows 10 Version 1803 for 32-bit Systems",
              "Windows 10 Version 1803 for x64-based Systems",
              "Windows 10 Version 1803 for ARM64-based Systems",
              "Windows 10 Version 1809 for 32-bit Systems",
              "Windows 10 Version 1809 for x64-based Systems",
              "Windows 10 Version 1809 for ARM64-based Systems",
              "Windows Server 2019",
              "Windows 10 Version 1909 for 32-bit Systems",
              "Windows 10 Version 1909 for x64-based Systems",
              "Windows 10 Version 1909 for ARM64-based Systems",
              "Windows 10 Version 1709 for 32-bit Systems",
              "Windows 10 Version 1709 for x64-based Systems",
              "Windows 10 Version 1709 for ARM64-based Systems",
              "Windows 10 Version 1903 for 32-bit Systems",
              "Windows 10 Version 1903 for x64-based Systems",
              "Windows 10 Version 1903 for ARM64-based Systems",
              "Windows 10 Version 2004 for 32-bit Systems",
              "Windows 10 Version 2004 for ARM64-based Systems",
              "Windows 10 Version 2004 for x64-based Systems",
              "Windows 10 for 32-bit Systems",
              "Windows 10 for x64-based Systems",
              "Windows 10 Version 1607 for 32-bit Systems",
              "Windows 10 Version 1607 for x64-based Systems",
              "Windows Server 2016"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/1/versions/0",
                "version": "1.0..0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Internet Explorer 9",
            "sourcePath": "/containers/cna/affected/2",
            "platforms": [
              "Windows Server 2008 for 32-bit Systems Service Pack 2",
              "Windows Server 2008 for x64-based Systems Service Pack 2"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/2/versions/0",
                "version": "1.0.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Internet Explorer 11",
            "sourcePath": "/containers/cna/affected/3",
            "platforms": [
              "Windows 10 Version 1803 for 32-bit Systems",
              "Windows 10 Version 1803 for x64-based Systems",
              "Windows 10 Version 1803 for ARM64-based Systems",
              "Windows 10 Version 1809 for 32-bit Systems",
              "Windows 10 Version 1809 for x64-based Systems",
              "Windows 10 Version 1809 for ARM64-based Systems",
              "Windows Server 2019",
              "Windows 10 Version 1909 for 32-bit Systems",
              "Windows 10 Version 1909 for x64-based Systems",
              "Windows 10 Version 1909 for ARM64-based Systems",
              "Windows 10 Version 1709 for 32-bit Systems",
              "Windows 10 Version 1709 for x64-based Systems",
              "Windows 10 Version 1709 for ARM64-based Systems",
              "Windows 10 Version 1903 for 32-bit Systems",
              "Windows 10 Version 1903 for x64-based Systems",
              "Windows 10 Version 1903 for ARM64-based Systems",
              "Windows 10 Version 2004 for 32-bit Systems",
              "Windows 10 Version 2004 for ARM64-based Systems",
              "Windows 10 Version 2004 for x64-based Systems",
              "Windows 10 for 32-bit Systems",
              "Windows 10 for x64-based Systems",
              "Windows 10 Version 1607 for 32-bit Systems",
              "Windows 10 Version 1607 for x64-based Systems",
              "Windows Server 2016",
              "Windows 7 for 32-bit Systems Service Pack 1",
              "Windows 7 for x64-based Systems Service Pack 1",
              "Windows 8.1 for 32-bit systems",
              "Windows 8.1 for x64-based systems",
              "Windows RT 8.1",
              "Windows Server 2008 R2 for x64-based Systems Service Pack 1",
              "Windows Server 2012",
              "Windows Server 2012 R2"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:a:microsoft:internet_explorer:11:-:*:*:*:*:*:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/3/versions/0",
                "version": "1.0.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          }
        ],
        "solutions": [],
        "workarounds": [],
        "exploits": [],
        "rejectedReasons": [],
        "problemTypes": [
          {
            "cweId": "",
            "lang": "en-US",
            "description": "Remote Code Execution",
            "sourcePath": "/containers/cna/problemTypes/0/descriptions/0"
          }
        ],
        "metrics": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C",
            "baseScore": 4.2,
            "baseSeverity": "MEDIUM",
            "provider": "microsoft",
            "sourcePath": "/containers/cna/metrics/0/cvssV3_1"
          }
        ],
        "references": [
          {
            "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0878",
            "label": "CVE",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/0"
          },
          {
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-0878",
            "label": "CISA-ADP",
            "tags": [
              "government-resource"
            ],
            "provider": "CISA-ADP",
            "sourcePath": "/containers/adp/1/references/0"
          }
        ],
        "snippets": [
          {
            "evidenceId": "official:/containers/cna/affected/0",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0878.json",
            "sourcePath": "/containers/cna/affected/0",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"ChakraCore\",\"cpes\":[\"cpe:2.3:a:microsoft:chakracore:*:*:*:*:*:*:*:*\"],\"platforms\":[\"Unknown\"],\"versions\":[{\"version\":\"0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0878.json",
            "sourcePath": "/containers/cna/affected/1",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Edge (EdgeHTML-based)\",\"cpes\":[\"cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*\"],\"platforms\":[\"Windows 10 Version 1803 for 32-bit Systems\",\"Windows 10 Version 1803 for x64-based Systems\",\"Windows 10 Version 1803 for ARM64-based Systems\",\"Windows 10 Version 1809 for 32-bit Systems\",\"Windows 10 Version 1809 for x64-based Systems\",\"Windows 10 Version 1809 for ARM64-based Systems\",\"Windows Server 2019\",\"Windows 10 Version 1909 for 32-bit Systems\",\"Windows 10 Version 1909 for x64-based Systems\",\"Windows 10 Version 1909 for ARM64-based Systems\",\"Windows 10 Version 1709 for 32-bit Systems\",\"Windows 10 Version 1709 for x64-based Systems\",\"Windows 10 Version 1709 for ARM64-based Systems\",\"Windows 10 Version 1903 for 32-bit Systems\",\"Windows 10 Version 1903 for x64-based Systems\",\"Windows 10 Version 1903 for ARM64-based Systems\",\"Windows 10 Version 2004 for 32-bit Systems\",\"Windows 10 Version 2004 for ARM64-based Systems\",\"Windows 10 Version 2004 for x64-based Systems\",\"Windows 10 for 32-bit Systems\",\"Windows 10 for x64-based Systems\",\"Windows 10 Version 1607 for 32-bit Systems\",\"Windows 10 Version 1607 for x64-based Systems\",\"Windows Server 2016\"],\"versions\":[{\"version\":\"1.0..0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/2",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0878.json",
            "sourcePath": "/containers/cna/affected/2",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Internet Explorer 9\",\"cpes\":[\"cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*\"],\"platforms\":[\"Windows Server 2008 for 32-bit Systems Service Pack 2\",\"Windows Server 2008 for x64-based Systems Service Pack 2\"],\"versions\":[{\"version\":\"1.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/3",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0878.json",
            "sourcePath": "/containers/cna/affected/3",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Internet Explorer 11\",\"cpes\":[\"cpe:2.3:a:microsoft:internet_explorer:11:-:*:*:*:*:*:*\"],\"platforms\":[\"Windows 10 Version 1803 for 32-bit Systems\",\"Windows 10 Version 1803 for x64-based Systems\",\"Windows 10 Version 1803 for ARM64-based Systems\",\"Windows 10 Version 1809 for 32-bit Systems\",\"Windows 10 Version 1809 for x64-based Systems\",\"Windows 10 Version 1809 for ARM64-based Systems\",\"Windows Server 2019\",\"Windows 10 Version 1909 for 32-bit Systems\",\"Windows 10 Version 1909 for x64-based Systems\",\"Windows 10 Version 1909 for ARM64-based Systems\",\"Windows 10 Version 1709 for 32-bit Systems\",\"Windows 10 Version 1709 for x64-based Systems\",\"Windows 10 Version 1709 for ARM64-based Systems\",\"Windows 10 Version 1903 for 32-bit Systems\",\"Windows 10 Version 1903 for x64-based Systems\",\"Windows 10 Version 1903 for ARM64-based Systems\",\"Windows 10 Version 2004 for 32-bit Systems\",\"Windows 10 Version 2004 for ARM64-based Systems\",\"Windows 10 Version 2004 for x64-based Systems\",\"Windows 10 for 32-bit Systems\",\"Windows 10 for x64-based Systems\",\"Windows 10 Version 1607 for 32-bit Systems\",\"Windows 10 Version 1607 for x64-based Systems\",\"Windows Server 2016\",\"Windows 7 for 32-bit Systems Service Pack 1\",\"Windows 7 for x64-based Systems Service Pack 1\",\"Windows 8.1 for 32-bit systems\",\"Windows 8.1 for x64-based systems\",\"Windows RT 8.1\",\"Windows Server 2008 R2 for x64-based Systems Service Pack 1\",\"Windows Server 2012\",\"Windows Server 2012 R2\"],\"versions\":[{\"version\":\"1.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/descriptions/0/value",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0878.json",
            "sourcePath": "/containers/cna/descriptions/0/value",
            "text": "<p>A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, the attacker could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>\n<p>An attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft browsers, and then convince a user to view the website. The attacker could also take advantage of compromised websites, or websites that accept or host user-provided content or advertisements, by adding specially crafted content that could exploit the vulnerability. In all cases, however, an attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically via an enticement in email or instant message, or by getting them to open an email attachment.</p>\n<p>The security update addresses the vulnerability by modifying how Microsoft browsers handle objects in memory.</p>",
            "truncated": false,
            "representation": "source_excerpt"
          },
          {
            "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0878.json",
            "sourcePath": "/containers/cna/problemTypes/0/descriptions/0",
            "text": "{\"description\":\"Remote Code Execution\",\"lang\":\"en-US\",\"type\":\"Impact\"}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0878.json",
            "sourcePath": "/containers/cna/metrics/0/cvssV3_1",
            "text": "{\"version\":\"3.1\",\"baseSeverity\":\"MEDIUM\",\"baseScore\":4.2,\"vectorString\":\"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C\"}",
            "truncated": false,
            "representation": "source_json"
          }
        ],
        "limits": {
          "completeness": "official_record",
          "truncatedFields": [],
          "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。"
        }
      },
      "sourceSnapshots": [
        {
          "source": "CVE",
          "modifiedAt": "2025-10-21T23:35:36.572Z",
          "fetchedAt": "2026-10-23T02:43:09.710Z",
          "state": "published"
        },
        {
          "source": "CISA KEV",
          "modifiedAt": "2021-11-03T00:00:00.000Z",
          "fetchedAt": "2026-10-23T02:17:50.489Z",
          "state": "published"
        }
      ],
      "sourceAction": "Apply updates per vendor instructions.",
      "sourceSummary": "ChakraCore / Microsoft Edge (EdgeHTML-based) / Internet Explorer 9 / Internet Explorer 11に脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。",
      "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。",
      "guidance": {
        "schemaVersion": "1.0",
        "method": "automatic",
        "reviewedAt": null,
        "reviewState": "current",
        "generatedAt": "2026-10-23T03:47:40.259Z",
        "generatorVersion": "2026-10-23.3",
        "sourceFingerprint": "f08e94616d1ac64430c74fe9ced2356a3425c3a4f9897f7d304da498bd43369d",
        "sourceModifiedAt": "2025-10-21T23:35:36.572Z",
        "model": "@cf/openai/gpt-oss-120b",
        "verificationMethod": "exact_source_excerpt_and_independent_semantic_check",
        "summary": "Microsoft のブラウザーがメモリ上のオブジェクトにアクセスする方法にリモートコード実行の脆弱性があります。この脆弱性によりメモリが破壊され、攻撃者が現在のユーザーの権限で任意のコードを実行できる可能性があります。攻撃者がこの脆弱性を利用すると、現在のユーザーと同じ権限を取得します。もし現在のユーザーが管理者権限でログオンしている場合、攻撃者はシステムを支配し、プログラムのインストール、データの閲覧・変更・削除、フル権限の新規アカウント作成などが可能になります。攻撃者は、脆弱性を悪用した特別に作成されたウェブサイトをホストし、ユーザーにそのサイトを閲覧させるよう誘導します。また、攻撃者は既に侵害されたサイトやユーザー生成コンテンツ・広告を掲載できるサイトに、悪用可能なコンテンツを追加して攻撃することもできます。ただし、ユーザーがそのコンテンツを閲覧しなければ攻撃は成立しません。通常はメールやインスタントメッセージでの誘導、またはメール添付ファイルを開かせるなどの手段でユーザーに行動させます。セキュリティ更新プログラムは、Microsoft のブラウザーがメモリ上のオブジェクトを処理する方法を変更することでこの脆弱性に対処します。",
        "risk": "攻撃者が脆弱性を利用すると、現在のユーザーと同じ権限でコードを実行でき、管理者権限でログオンしている場合はシステムを支配され、プログラムのインストールやデータの閲覧・変更・削除、フル権限の新規アカウント作成が可能になる恐れがあります。",
        "summaryEvidenceIds": [
          "E1",
          "E2"
        ],
        "riskEvidenceIds": [
          "E1"
        ],
        "applicability": [
          {
            "text": "ChakraCore が使用されているすべてのバージョン（バージョンが公開前のもの）が影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0878.json"
            ],
            "evidenceIds": [
              "E3",
              "E2"
            ]
          },
          {
            "text": "Microsoft Edge (EdgeHTML ベース) のすべてのバージョン（バージョンが公開前のもの）が影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0878.json"
            ],
            "evidenceIds": [
              "E4",
              "E2"
            ]
          },
          {
            "text": "Internet Explorer 9 のすべてのバージョン（バージョンが公開前のもの）が影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0878.json"
            ],
            "evidenceIds": [
              "E5",
              "E2"
            ]
          },
          {
            "text": "Internet Explorer 11 のすべてのバージョン（バージョンが公開前のもの）が影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0878.json"
            ],
            "evidenceIds": [
              "E6",
              "E2"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / ChakraCore。影響ありとして記載：publication未満の版。対象の環境：Unknown",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0878.json"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Edge (EdgeHTML-based)。影響ありとして記載：1.0..0以上、publication未満。対象の環境：Windows 10 Version 1803 for 32-bit Systems、Windows 10 Version 1803 for x64-based Systems、Windows 10 Version 1803 for ARM64-based Systems、Windows 10 Version 1809 for 32-bit Systems、Windows 10 Version 1809 for x64-based Systems、Windows 10 Version 1809 for ARM64-based Systems、Windows Server 2019、Windows 10 Version 1909 for 32-bit Systems、Windows 10 Version 1909 for x64-based Systems、Windows 10 Version 1909 for ARM64-based Systems、Windows 10 Version 1709 for 32-bit Systems、Windows 10 Version 1709 for x64-based Systems、Windows 10 Version 1709 for ARM64-based Systems、Windows 10 Version 1903 for 32-bit Systems、Windows 10 Version 1903 for x64-based Systems、Windows 10 Version 1903 for ARM64-based Systems、Windows 10 Version 2004 for 32-bit Systems、Windows 10 Version 2004 for ARM64-based Systems、Windows 10 Version 2004 for x64-based Systems、Windows 10 for 32-bit Systems、Windows 10 for x64-based Systems、Windows 10 Version 1607 for 32-bit Systems、Windows 10 Version 1607 for x64-based Systems、Windows Server 2016",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0878.json"
            ],
            "evidenceIds": [
              "E4"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Internet Explorer 9。影響ありとして記載：1.0.0以上、publication未満。対象の環境：Windows Server 2008 for 32-bit Systems Service Pack 2、Windows Server 2008 for x64-based Systems Service Pack 2",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0878.json"
            ],
            "evidenceIds": [
              "E5"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Internet Explorer 11。影響ありとして記載：1.0.0以上、publication未満。対象の環境：Windows 10 Version 1803 for 32-bit Systems、Windows 10 Version 1803 for x64-based Systems、Windows 10 Version 1803 for ARM64-based Systems、Windows 10 Version 1809 for 32-bit Systems、Windows 10 Version 1809 for x64-based Systems、Windows 10 Version 1809 for ARM64-based Systems、Windows Server 2019、Windows 10 Version 1909 for 32-bit Systems、Windows 10 Version 1909 for x64-based Systems、Windows 10 Version 1909 for ARM64-based Systems、Windows 10 Version 1709 for 32-bit Systems、Windows 10 Version 1709 for x64-based Systems、Windows 10 Version 1709 for ARM64-based Systems、Windows 10 Version 1903 for 32-bit Systems、Windows 10 Version 1903 for x64-based Systems、Windows 10 Version 1903 for ARM64-based Systems、Windows 10 Version 2004 for 32-bit Systems、Windows 10 Version 2004 for ARM64-based Systems、Windows 10 Version 2004 for x64-based Systems、Windows 10 for 32-bit Systems、Windows 10 for x64-based Systems、Windows 10 Version 1607 for 32-bit Systems、Windows 10 Version 1607 for x64-based Systems、Windows Server 2016、Windows 7 for 32-bit Systems Service Pack 1、Windows 7 for x64-based Systems Service Pack 1、Windows 8.1 for 32-bit systems、Windows 8.1 for x64-based systems、Windows RT 8.1、Windows Server 2008 R2 for x64-based Systems Service Pack 1、Windows Server 2012、Windows Server 2012 R2",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0878.json"
            ],
            "evidenceIds": [
              "E6"
            ]
          },
          {
            "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。",
            "kind": "fact",
            "sourceUrls": [
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-0878"
            ],
            "evidenceIds": [
              "E8"
            ]
          }
        ],
        "versionChecks": [
          {
            "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0878.json"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "「ChakraCore / Microsoft Edge (EdgeHTML-based) / Internet Explorer 9 / Internet Explorer 11」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
              "https://www.cve.org/CVERecord?id=CVE-2020-0878",
              "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0878",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-0878",
              "https://nvd.nist.gov/vuln/detail/CVE-2020-0878"
            ]
          }
        ],
        "actions": [
          {
            "text": "ベンダーの指示に従って更新プログラムを適用してください。",
            "kind": "fix",
            "sourceUrls": [
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-0878"
            ],
            "evidenceIds": [
              "E7"
            ]
          },
          {
            "text": "「CVE-2020-0878」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cve.org/CVERecord?id=CVE-2020-0878",
              "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0878",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-0878",
              "https://nvd.nist.gov/vuln/detail/CVE-2020-0878"
            ]
          },
          {
            "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
              "https://www.cve.org/CVERecord?id=CVE-2020-0878",
              "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0878",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-0878",
              "https://nvd.nist.gov/vuln/detail/CVE-2020-0878"
            ]
          }
        ],
        "temporaryMitigations": [
          {
            "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cve.org/CVERecord?id=CVE-2020-0878",
              "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0878",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-0878",
              "https://nvd.nist.gov/vuln/detail/CVE-2020-0878"
            ]
          }
        ],
        "verification": [
          {
            "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。",
            "kind": "procedure",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0878.json"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
              "https://www.cve.org/CVERecord?id=CVE-2020-0878",
              "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0878",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-0878",
              "https://nvd.nist.gov/vuln/detail/CVE-2020-0878"
            ]
          }
        ],
        "unknowns": [
          "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。",
          "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。"
        ],
        "sources": [
          {
            "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0878.json",
            "label": "CVE：microsoft"
          },
          {
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-0878",
            "label": "CISA KEV（悪用確認）"
          },
          {
            "url": "https://www.cve.org/CVERecord?id=CVE-2020-0878",
            "label": "CVE公式レコード"
          },
          {
            "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0878",
            "label": "CVE掲載の参考情報"
          },
          {
            "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-0878",
            "label": "CISAが示す関連情報"
          },
          {
            "url": "https://www.first.org/cvss/v3.1/specification-document",
            "label": "FIRST公式：CVSS 3.1の条件の定義"
          },
          {
            "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
            "label": "CISA：ソフトウェア更新の基本"
          }
        ],
        "evidence": [
          {
            "id": "E1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0878.json",
            "sourceField": "/containers/cna/descriptions/0/value",
            "excerpt": "<p>A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, the attacker could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>\n<p>An attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft browsers, and then convince a user to view the website. The attacker could also take advantage of compromised websites, or websites that accept or host user-provided content or advertisements, by adding specially crafted content that could exploit the vulnerability. In all cases, however, an attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically via an enticement in email or instant message, or by getting them to open an email attachment.</p>\n<p>The security update addresses the vulnerability by modifying how Microsoft browsers handle objects in memory.</p>",
            "language": "en-US",
            "representation": "source_excerpt"
          },
          {
            "id": "E2",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0878.json",
            "sourceField": "/containers/cna/title",
            "excerpt": "Microsoft Browser Memory Corruption Vulnerability",
            "language": null
          },
          {
            "id": "E3",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0878.json",
            "sourceField": "/containers/cna/affected/0",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"ChakraCore\",\"cpes\":[\"cpe:2.3:a:microsoft:chakracore:*:*:*:*:*:*:*:*\"],\"platforms\":[\"Unknown\"],\"versions\":[{\"version\":\"0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E4",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0878.json",
            "sourceField": "/containers/cna/affected/1",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Edge (EdgeHTML-based)\",\"cpes\":[\"cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*\"],\"platforms\":[\"Windows 10 Version 1803 for 32-bit Systems\",\"Windows 10 Version 1803 for x64-based Systems\",\"Windows 10 Version 1803 for ARM64-based Systems\",\"Windows 10 Version 1809 for 32-bit Systems\",\"Windows 10 Version 1809 for x64-based Systems\",\"Windows 10 Version 1809 for ARM64-based Systems\",\"Windows Server 2019\",\"Windows 10 Version 1909 for 32-bit Systems\",\"Windows 10 Version 1909 for x64-based Systems\",\"Windows 10 Version 1909 for ARM64-based Systems\",\"Windows 10 Version 1709 for 32-bit Systems\",\"Windows 10 Version 1709 for x64-based Systems\",\"Windows 10 Version 1709 for ARM64-based Systems\",\"Windows 10 Version 1903 for 32-bit Systems\",\"Windows 10 Version 1903 for x64-based Systems\",\"Windows 10 Version 1903 for ARM64-based Systems\",\"Windows 10 Version 2004 for 32-bit Systems\",\"Windows 10 Version 2004 for ARM64-based Systems\",\"Windows 10 Version 2004 for x64-based Systems\",\"Windows 10 for 32-bit Systems\",\"Windows 10 for x64-based Systems\",\"Windows 10 Version 1607 for 32-bit Systems\",\"Windows 10 Version 1607 for x64-based Systems\",\"Windows Server 2016\"],\"versions\":[{\"version\":\"1.0..0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E5",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0878.json",
            "sourceField": "/containers/cna/affected/2",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Internet Explorer 9\",\"cpes\":[\"cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*\"],\"platforms\":[\"Windows Server 2008 for 32-bit Systems Service Pack 2\",\"Windows Server 2008 for x64-based Systems Service Pack 2\"],\"versions\":[{\"version\":\"1.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E6",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0878.json",
            "sourceField": "/containers/cna/affected/3",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Internet Explorer 11\",\"cpes\":[\"cpe:2.3:a:microsoft:internet_explorer:11:-:*:*:*:*:*:*\"],\"platforms\":[\"Windows 10 Version 1803 for 32-bit Systems\",\"Windows 10 Version 1803 for x64-based Systems\",\"Windows 10 Version 1803 for ARM64-based Systems\",\"Windows 10 Version 1809 for 32-bit Systems\",\"Windows 10 Version 1809 for x64-based Systems\",\"Windows 10 Version 1809 for ARM64-based Systems\",\"Windows Server 2019\",\"Windows 10 Version 1909 for 32-bit Systems\",\"Windows 10 Version 1909 for x64-based Systems\",\"Windows 10 Version 1909 for ARM64-based Systems\",\"Windows 10 Version 1709 for 32-bit Systems\",\"Windows 10 Version 1709 for x64-based Systems\",\"Windows 10 Version 1709 for ARM64-based Systems\",\"Windows 10 Version 1903 for 32-bit Systems\",\"Windows 10 Version 1903 for x64-based Systems\",\"Windows 10 Version 1903 for ARM64-based Systems\",\"Windows 10 Version 2004 for 32-bit Systems\",\"Windows 10 Version 2004 for ARM64-based Systems\",\"Windows 10 Version 2004 for x64-based Systems\",\"Windows 10 for 32-bit Systems\",\"Windows 10 for x64-based Systems\",\"Windows 10 Version 1607 for 32-bit Systems\",\"Windows 10 Version 1607 for x64-based Systems\",\"Windows Server 2016\",\"Windows 7 for 32-bit Systems Service Pack 1\",\"Windows 7 for x64-based Systems Service Pack 1\",\"Windows 8.1 for 32-bit systems\",\"Windows 8.1 for x64-based systems\",\"Windows RT 8.1\",\"Windows Server 2008 R2 for x64-based Systems Service Pack 1\",\"Windows Server 2012\",\"Windows Server 2012 R2\"],\"versions\":[{\"version\":\"1.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E7",
            "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-0878",
            "sourceField": "/sourceAction",
            "excerpt": "Apply updates per vendor instructions.",
            "language": null
          },
          {
            "id": "E8",
            "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-0878",
            "sourceField": "/exploitStatus",
            "excerpt": "{\"id\":\"CVE-2020-0878\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}",
            "language": "en",
            "representation": "normalized_feed_field"
          }
        ],
        "supportRequest": "件名：CVE-2020-0878（ChakraCore / Microsoft Edge (EdgeHTML-based) / Internet Explorer 9 / Internet Explorer 11）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・ChakraCore が使用されているすべてのバージョン（バージョンが公開前のもの）が影響を受けます。\n・Microsoft Edge (EdgeHTML ベース) のすべてのバージョン（バージョンが公開前のもの）が影響を受けます。\n・Internet Explorer 9 のすべてのバージョン（バージョンが公開前のもの）が影響を受けます。\n・Internet Explorer 11 のすべてのバージョン（バージョンが公開前のもの）が影響を受けます。\n・公式の対象表：Microsoft / ChakraCore。影響ありとして記載：publication未満の版。対象の環境：Unknown\n・公式の対象表：Microsoft / Microsoft Edge (EdgeHTML-based)。影響ありとして記載：1.0..0以上、publication未満。対象の環境：Windows 10 Version 1803 for 32-bit Systems、Windows 10 Version 1803 for x64-based Systems、Windows 10 Version 1803 for ARM64-based Systems、Windows 10 Version 1809 for 32-bit Systems、Windows 10 Version 1809 for x64-based Systems、Windows 10 Version 1809 for ARM64-based Systems、Windows Server 2019、Windows 10 Version 1909 for 32-bit Systems、Windows 10 Version 1909 for x64-based Systems、Windows 10 Version 1909 for ARM64-based Systems、Windows 10 Version 1709 for 32-bit Systems、Windows 10 Version 1709 for x64-based Systems、Windows 10 Version 1709 for ARM64-based Systems、Windows 10 Version 1903 for 32-bit Systems、Windows 10 Version 1903 for x64-based Systems、Windows 10 Version 1903 for ARM64-based Systems、Windows 10 Version 2004 for 32-bit Systems、Windows 10 Version 2004 for ARM64-based Systems、Windows 10 Version 2004 for x64-based Systems、Windows 10 for 32-bit Systems、Windows 10 for x64-based Systems、Windows 10 Version 1607 for 32-bit Systems、Windows 10 Version 1607 for x64-based Systems、Windows Server 2016\n・公式の対象表：Microsoft / Internet Explorer 9。影響ありとして記載：1.0.0以上、publication未満。対象の環境：Windows Server 2008 for 32-bit Systems Service Pack 2、Windows Server 2008 for x64-based Systems Service Pack 2\n・公式の対象表：Microsoft / Internet Explorer 11。影響ありとして記載：1.0.0以上、publication未満。対象の環境：Windows 10 Version 1803 for 32-bit Systems、Windows 10 Version 1803 for x64-based Systems、Windows 10 Version 1803 for ARM64-based Systems、Windows 10 Version 1809 for 32-bit Systems、Windows 10 Version 1809 for x64-based Systems、Windows 10 Version 1809 for ARM64-based Systems、Windows Server 2019、Windows 10 Version 1909 for 32-bit Systems、Windows 10 Version 1909 for x64-based Systems、Windows 10 Version 1909 for ARM64-based Systems、Windows 10 Version 1709 for 32-bit Systems、Windows 10 Version 1709 for x64-based Systems、Windows 10 Version 1709 for ARM64-based Systems、Windows 10 Version 1903 for 32-bit Systems、Windows 10 Version 1903 for x64-based Systems、Windows 10 Version 1903 for ARM64-based Systems、Windows 10 Version 2004 for 32-bit Systems、Windows 10 Version 2004 for ARM64-based Systems、Windows 10 Version 2004 for x64-based Systems、Windows 10 for 32-bit Systems、Windows 10 for x64-based Systems、Windows 10 Version 1607 for 32-bit Systems、Windows 10 Version 1607 for x64-based Systems、Windows Server 2016、Windows 7 for 32-bit Systems Service Pack 1、Windows 7 for x64-based Systems Service Pack 1、Windows 8.1 for 32-bit systems、Windows 8.1 for x64-based systems、Windows RT 8.1、Windows Server 2008 R2 for x64-based Systems Service Pack 1、Windows Server 2012、Windows Server 2012 R2\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2020-0878",
        "publicationCheckVersion": "2026-10-23.1",
        "sourceNotices": [],
        "automation": {
          "status": "ready",
          "lastAttempt": "2026-10-23T03:47:40.259Z",
          "lastSuccess": "2026-10-23T03:47:40.259Z",
          "sourceCheckedAt": "2026-10-23T02:43:09.710Z",
          "errorCode": null
        },
        "glossary": [
          {
            "term": "任意のコード実行",
            "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。",
            "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html",
            "kind": "general_definition"
          }
        ]
      }
    },
    {
      "id": "CVE-2020-0938",
      "aliases": [],
      "title": "Windows / Windows Server / Windows 10 Version 1909 for 32-bit Systems / Windows 10 Version 1909 for x64-based Systems / Windows 10 Version 1909 for ARM64-based Systems / Windows Server, version 1909 (Server Core installation) / Windows 10 Version 190：コード実行",
      "summary": "Microsoft Windows の Adobe Type Manager Library が、特別に細工されたマルチマスターフォント（Adobe Type 1 PostScript 形式）を正しく処理できないため、リモートからコードを実行される可能性があります。この脆弱性は Windows 10 以外のシステムで攻撃者がコードを遠隔実行できることを意味し、CVE‑2020‑0938 は CVE‑2020‑1020 とは別のものです。",
      "risk": "攻撃者がこの脆弱性を利用すると、リモートでコードを実行できる可能性があります。",
      "product": "Windows / Windows Server / Windows 10 Version 1909 for 32-bit Systems / Windows 10 Version 1909 for x64-based Systems / Windows 10 Version 1909 for ARM64-based Systems / Windows Server, version 1909 (Server Core installation) / Windows 10 Version 190",
      "category": "windows",
      "component": "package",
      "severity": "unknown",
      "cvss": null,
      "cvssVersion": null,
      "cvssSource": "microsoft",
      "cvssVector": null,
      "affected": [
        {
          "product": "Windows",
          "range": "10 Version 1803 for 32-bit Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1803 for x64-based Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1803 for ARM64-based Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1809 for 32-bit Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1809 for x64-based Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1809 for ARM64-based Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1709 for 32-bit Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1709 for x64-based Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1709 for ARM64-based Systems"
        },
        {
          "product": "Windows",
          "range": "10 for 32-bit Systems"
        },
        {
          "product": "Windows",
          "range": "10 for x64-based Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1607 for 32-bit Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1607 for x64-based Systems"
        },
        {
          "product": "Windows",
          "range": "7 for 32-bit Systems Service Pack 1"
        },
        {
          "product": "Windows",
          "range": "7 for x64-based Systems Service Pack 1"
        },
        {
          "product": "Windows",
          "range": "8.1 for 32-bit systems"
        },
        {
          "product": "Windows",
          "range": "8.1 for x64-based systems"
        },
        {
          "product": "Windows",
          "range": "RT 8.1"
        },
        {
          "product": "Windows Server",
          "range": "version 1803  (Core Installation)"
        },
        {
          "product": "Windows Server",
          "range": "2019"
        },
        {
          "product": "Windows Server",
          "range": "2019  (Core installation)"
        },
        {
          "product": "Windows Server",
          "range": "2016"
        },
        {
          "product": "Windows Server",
          "range": "2016  (Core installation)"
        },
        {
          "product": "Windows Server",
          "range": "2008 for 32-bit Systems Service Pack 2"
        },
        {
          "product": "Windows Server",
          "range": "2008 for 32-bit Systems Service Pack 2 (Core installation)"
        },
        {
          "product": "Windows Server",
          "range": "2008 for Itanium-Based Systems Service Pack 2"
        },
        {
          "product": "Windows Server",
          "range": "2008 for x64-based Systems Service Pack 2"
        },
        {
          "product": "Windows Server",
          "range": "2008 for x64-based Systems Service Pack 2 (Core installation)"
        },
        {
          "product": "Windows Server",
          "range": "2008 R2 for Itanium-Based Systems Service Pack 1"
        },
        {
          "product": "Windows Server",
          "range": "2008 R2 for x64-based Systems Service Pack 1"
        },
        {
          "product": "Windows Server",
          "range": "2008 R2 for x64-based Systems Service Pack 1 (Core installation)"
        },
        {
          "product": "Windows Server",
          "range": "2012"
        },
        {
          "product": "Windows Server",
          "range": "2012 (Core installation)"
        },
        {
          "product": "Windows Server",
          "range": "2012 R2"
        },
        {
          "product": "Windows Server",
          "range": "2012 R2 (Core installation)"
        },
        {
          "product": "Windows 10 Version 1909 for 32-bit Systems",
          "range": "unspecified"
        },
        {
          "product": "Windows 10 Version 1909 for x64-based Systems",
          "range": "unspecified"
        },
        {
          "product": "Windows 10 Version 1909 for ARM64-based Systems",
          "range": "unspecified"
        },
        {
          "product": "Windows Server, version 1909 (Server Core installation)",
          "range": "unspecified"
        },
        {
          "product": "Windows 10 Version 1903 for 32-bit Systems",
          "range": "unspecified"
        },
        {
          "product": "Windows 10 Version 1903 for x64-based Systems",
          "range": "unspecified"
        },
        {
          "product": "Windows 10 Version 1903 for ARM64-based Systems",
          "range": "unspecified"
        },
        {
          "product": "Windows Server, version 1903 (Server Core installation)",
          "range": "unspecified"
        }
      ],
      "fixed": [],
      "steps": [
        "ベンダーの指示に従って更新プログラムを適用してください。",
        "「CVE-2020-0938」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
        "Windows 11は「設定」→「Windows Update」→「更新プログラムのチェック」を開き、提供された更新を適用します。再起動を求められたら完了させます。会社管理のPC、Windows Server、サポート外の版は管理担当者に適用する修正番号と配布予定を確認してください。"
      ],
      "references": [
        {
          "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0938.json",
          "label": "CVE：microsoft"
        },
        {
          "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-0938",
          "label": "CISA KEV（悪用確認）"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-0938",
          "label": "CVE公式レコード"
        },
        {
          "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0938",
          "label": "CVE掲載の参考情報"
        },
        {
          "url": "http://packetstormsecurity.com/files/161299/Apple-CoreText-libFontParser.dylib-Stack-Corruption.html",
          "label": "CVE掲載の参考情報"
        },
        {
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-0938",
          "label": "CISAが示す関連情報"
        },
        {
          "url": "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device",
          "label": "Microsoft公式：Windowsの情報を調べる"
        },
        {
          "url": "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates",
          "label": "Microsoft公式：Windows Updateの操作"
        }
      ],
      "publishedAt": "2020-04-15T15:12:55.000Z",
      "modifiedAt": "2025-10-21T23:35:46.503Z",
      "fetchedAt": "2026-10-23T02:43:09.716Z",
      "exploitStatus": "confirmed",
      "sources": [
        "CVE",
        "CISA KEV"
      ],
      "originalText": "A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted multi-master font - Adobe Type 1 PostScript format.For all systems except Windows 10, an attacker who successfully exploited the vulnerability could execute code remotely, aka 'Adobe Font Manager Library Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1020.",
      "sourceTitle": "",
      "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。",
      "state": "published",
      "affectedDetails": [
        {
          "product": "Windows",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "10 Version 1803 for 32-bit Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1803 for x64-based Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1803 for ARM64-based Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1809 for 32-bit Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1809 for x64-based Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1809 for ARM64-based Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1709 for 32-bit Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1709 for x64-based Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1709 for ARM64-based Systems"
            },
            {
              "status": "affected",
              "version": "10 for 32-bit Systems"
            },
            {
              "status": "affected",
              "version": "10 for x64-based Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1607 for 32-bit Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1607 for x64-based Systems"
            },
            {
              "status": "affected",
              "version": "7 for 32-bit Systems Service Pack 1"
            },
            {
              "status": "affected",
              "version": "7 for x64-based Systems Service Pack 1"
            },
            {
              "status": "affected",
              "version": "8.1 for 32-bit systems"
            },
            {
              "status": "affected",
              "version": "8.1 for x64-based systems"
            },
            {
              "status": "affected",
              "version": "RT 8.1"
            }
          ]
        },
        {
          "product": "Windows Server",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "version 1803  (Core Installation)"
            },
            {
              "status": "affected",
              "version": "2019"
            },
            {
              "status": "affected",
              "version": "2019  (Core installation)"
            },
            {
              "status": "affected",
              "version": "2016"
            },
            {
              "status": "affected",
              "version": "2016  (Core installation)"
            },
            {
              "status": "affected",
              "version": "2008 for 32-bit Systems Service Pack 2"
            },
            {
              "status": "affected",
              "version": "2008 for 32-bit Systems Service Pack 2 (Core installation)"
            },
            {
              "status": "affected",
              "version": "2008 for Itanium-Based Systems Service Pack 2"
            },
            {
              "status": "affected",
              "version": "2008 for x64-based Systems Service Pack 2"
            },
            {
              "status": "affected",
              "version": "2008 for x64-based Systems Service Pack 2 (Core installation)"
            },
            {
              "status": "affected",
              "version": "2008 R2 for Itanium-Based Systems Service Pack 1"
            },
            {
              "status": "affected",
              "version": "2008 R2 for x64-based Systems Service Pack 1"
            },
            {
              "status": "affected",
              "version": "2008 R2 for x64-based Systems Service Pack 1 (Core installation)"
            },
            {
              "status": "affected",
              "version": "2012"
            },
            {
              "status": "affected",
              "version": "2012 (Core installation)"
            },
            {
              "status": "affected",
              "version": "2012 R2"
            },
            {
              "status": "affected",
              "version": "2012 R2 (Core installation)"
            }
          ]
        },
        {
          "product": "Windows 10 Version 1909 for 32-bit Systems",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified"
            }
          ]
        },
        {
          "product": "Windows 10 Version 1909 for x64-based Systems",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified"
            }
          ]
        },
        {
          "product": "Windows 10 Version 1909 for ARM64-based Systems",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified"
            }
          ]
        },
        {
          "product": "Windows Server, version 1909 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified"
            }
          ]
        },
        {
          "product": "Windows 10 Version 1903 for 32-bit Systems",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified"
            }
          ]
        },
        {
          "product": "Windows 10 Version 1903 for x64-based Systems",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified"
            }
          ]
        },
        {
          "product": "Windows 10 Version 1903 for ARM64-based Systems",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified"
            }
          ]
        },
        {
          "product": "Windows Server, version 1903 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified"
            }
          ]
        }
      ],
      "officialEvidence": {
        "schemaVersion": "1.0",
        "id": "CVE-2020-0938",
        "sourceType": "CVE",
        "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0938.json",
        "fetchedAt": "2026-10-23T02:43:09.716Z",
        "publishedAt": "2020-04-15T15:12:55.000Z",
        "modifiedAt": "2025-10-21T23:35:46.503Z",
        "state": "published",
        "provider": "microsoft",
        "title": "",
        "descriptions": [
          {
            "lang": "en",
            "value": "A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted multi-master font - Adobe Type 1 PostScript format.For all systems except Windows 10, an attacker who successfully exploited the vulnerability could execute code remotely, aka 'Adobe Font Manager Library Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1020.",
            "sourcePath": "/containers/cna/descriptions/0/value"
          }
        ],
        "affected": [
          {
            "vendor": "Microsoft",
            "product": "Windows",
            "sourcePath": "/containers/cna/affected/0",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/0/versions/0",
                "version": "10 Version 1803 for 32-bit Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/1",
                "version": "10 Version 1803 for x64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/2",
                "version": "10 Version 1803 for ARM64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/3",
                "version": "10 Version 1809 for 32-bit Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/4",
                "version": "10 Version 1809 for x64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/5",
                "version": "10 Version 1809 for ARM64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/6",
                "version": "10 Version 1709 for 32-bit Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/7",
                "version": "10 Version 1709 for x64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/8",
                "version": "10 Version 1709 for ARM64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/9",
                "version": "10 for 32-bit Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/10",
                "version": "10 for x64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/11",
                "version": "10 Version 1607 for 32-bit Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/12",
                "version": "10 Version 1607 for x64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/13",
                "version": "7 for 32-bit Systems Service Pack 1",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/14",
                "version": "7 for x64-based Systems Service Pack 1",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/15",
                "version": "8.1 for 32-bit systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/16",
                "version": "8.1 for x64-based systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/17",
                "version": "RT 8.1",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server",
            "sourcePath": "/containers/cna/affected/1",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/1/versions/0",
                "version": "version 1803  (Core Installation)",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/1",
                "version": "2019",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/2",
                "version": "2019  (Core installation)",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/3",
                "version": "2016",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/4",
                "version": "2016  (Core installation)",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/5",
                "version": "2008 for 32-bit Systems Service Pack 2",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/6",
                "version": "2008 for 32-bit Systems Service Pack 2 (Core installation)",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/7",
                "version": "2008 for Itanium-Based Systems Service Pack 2",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/8",
                "version": "2008 for x64-based Systems Service Pack 2",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/9",
                "version": "2008 for x64-based Systems Service Pack 2 (Core installation)",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/10",
                "version": "2008 R2 for Itanium-Based Systems Service Pack 1",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/11",
                "version": "2008 R2 for x64-based Systems Service Pack 1",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/12",
                "version": "2008 R2 for x64-based Systems Service Pack 1 (Core installation)",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/13",
                "version": "2012",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/14",
                "version": "2012 (Core installation)",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/15",
                "version": "2012 R2",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/16",
                "version": "2012 R2 (Core installation)",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 1909 for 32-bit Systems",
            "sourcePath": "/containers/cna/affected/2",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/2/versions/0",
                "version": "unspecified",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 1909 for x64-based Systems",
            "sourcePath": "/containers/cna/affected/3",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/3/versions/0",
                "version": "unspecified",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 1909 for ARM64-based Systems",
            "sourcePath": "/containers/cna/affected/4",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/4/versions/0",
                "version": "unspecified",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server, version 1909 (Server Core installation)",
            "sourcePath": "/containers/cna/affected/5",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/5/versions/0",
                "version": "unspecified",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 1903 for 32-bit Systems",
            "sourcePath": "/containers/cna/affected/6",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/6/versions/0",
                "version": "unspecified",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 1903 for x64-based Systems",
            "sourcePath": "/containers/cna/affected/7",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/7/versions/0",
                "version": "unspecified",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 1903 for ARM64-based Systems",
            "sourcePath": "/containers/cna/affected/8",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/8/versions/0",
                "version": "unspecified",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server, version 1903 (Server Core installation)",
            "sourcePath": "/containers/cna/affected/9",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/9/versions/0",
                "version": "unspecified",
                "status": "affected"
              }
            ]
          }
        ],
        "solutions": [],
        "workarounds": [],
        "exploits": [],
        "rejectedReasons": [],
        "problemTypes": [
          {
            "cweId": "",
            "lang": "en",
            "description": "Remote Code Execution",
            "sourcePath": "/containers/cna/problemTypes/0/descriptions/0"
          }
        ],
        "metrics": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "provider": "CISA-ADP",
            "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1"
          }
        ],
        "references": [
          {
            "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0938",
            "label": "CVE",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/0"
          },
          {
            "url": "http://packetstormsecurity.com/files/161299/Apple-CoreText-libFontParser.dylib-Stack-Corruption.html",
            "label": "CVE",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/1"
          },
          {
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-0938",
            "label": "CISA-ADP",
            "tags": [
              "government-resource"
            ],
            "provider": "CISA-ADP",
            "sourcePath": "/containers/adp/1/references/0"
          }
        ],
        "snippets": [
          {
            "evidenceId": "official:/containers/cna/affected/0",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0938.json",
            "sourcePath": "/containers/cna/affected/0",
            "text": "{\"product\":\"Windows\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"10 Version 1803 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1803 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1803 for ARM64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1809 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1809 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1809 for ARM64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1709 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1709 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1709 for ARM64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1607 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1607 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"7 for 32-bit Systems Service Pack 1\"},{\"status\":\"affected\",\"version\":\"7 for x64-based Systems Service Pack 1\"},{\"status\":\"affected\",\"version\":\"8.1 for 32-bit systems\"},{\"status\":\"affected\",\"version\":\"8.1 for x64-based systems\"},{\"status\":\"affected\",\"version\":\"RT 8.1\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0938.json",
            "sourcePath": "/containers/cna/affected/1",
            "text": "{\"product\":\"Windows Server\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"version 1803  (Core Installation)\"},{\"status\":\"affected\",\"version\":\"2019\"},{\"status\":\"affected\",\"version\":\"2019  (Core installation)\"},{\"status\":\"affected\",\"version\":\"2016\"},{\"status\":\"affected\",\"version\":\"2016  (Core installation)\"},{\"status\":\"affected\",\"version\":\"2008 for 32-bit Systems Service Pack 2\"},{\"status\":\"affected\",\"version\":\"2008 for 32-bit Systems Service Pack 2 (Core installation)\"},{\"status\":\"affected\",\"version\":\"2008 for Itanium-Based Systems Service Pack 2\"},{\"status\":\"affected\",\"version\":\"2008 for x64-based Systems Service Pack 2\"},{\"status\":\"affected\",\"version\":\"2008 for x64-based Systems Service Pack 2 (Core installation)\"},{\"status\":\"affected\",\"version\":\"2008 R2 for Itanium-Based Systems Service Pack 1\"},{\"status\":\"affected\",\"version\":\"2008 R2 for x64-based Systems Service Pack 1\"},{\"status\":\"affected\",\"version\":\"2008 R2 for x64-based Systems Service Pack 1 (Core installation)\"},{\"status\":\"affected\",\"version\":\"2012\"},{\"status\":\"affected\",\"version\":\"2012 (Core installation)\"},{\"status\":\"affected\",\"version\":\"2012 R2\"},{\"status\":\"affected\",\"version\":\"2012 R2 (Core installation)\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/2",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0938.json",
            "sourcePath": "/containers/cna/affected/2",
            "text": "{\"product\":\"Windows 10 Version 1909 for 32-bit Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/3",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0938.json",
            "sourcePath": "/containers/cna/affected/3",
            "text": "{\"product\":\"Windows 10 Version 1909 for x64-based Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/4",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0938.json",
            "sourcePath": "/containers/cna/affected/4",
            "text": "{\"product\":\"Windows 10 Version 1909 for ARM64-based Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/5",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0938.json",
            "sourcePath": "/containers/cna/affected/5",
            "text": "{\"product\":\"Windows Server, version 1909 (Server Core installation)\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/6",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0938.json",
            "sourcePath": "/containers/cna/affected/6",
            "text": "{\"product\":\"Windows 10 Version 1903 for 32-bit Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/7",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0938.json",
            "sourcePath": "/containers/cna/affected/7",
            "text": "{\"product\":\"Windows 10 Version 1903 for x64-based Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/8",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0938.json",
            "sourcePath": "/containers/cna/affected/8",
            "text": "{\"product\":\"Windows 10 Version 1903 for ARM64-based Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/9",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0938.json",
            "sourcePath": "/containers/cna/affected/9",
            "text": "{\"product\":\"Windows Server, version 1903 (Server Core installation)\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/descriptions/0/value",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0938.json",
            "sourcePath": "/containers/cna/descriptions/0/value",
            "text": "A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted multi-master font - Adobe Type 1 PostScript format.For all systems except Windows 10, an attacker who successfully exploited the vulnerability could execute code remotely, aka 'Adobe Font Manager Library Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1020.",
            "truncated": false,
            "representation": "source_excerpt"
          },
          {
            "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0938.json",
            "sourcePath": "/containers/cna/problemTypes/0/descriptions/0",
            "text": "{\"description\":\"Remote Code Execution\",\"lang\":\"en\",\"type\":\"text\"}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/adp/1/metrics/0/cvssV3_1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0938.json",
            "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1",
            "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":7.8,\"attackVector\":\"LOCAL\",\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"REQUIRED\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"confidentialityImpact\":\"HIGH\"}",
            "truncated": false,
            "representation": "source_json"
          }
        ],
        "limits": {
          "completeness": "official_record",
          "truncatedFields": [],
          "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。"
        }
      },
      "sourceSnapshots": [
        {
          "source": "CVE",
          "modifiedAt": "2025-10-21T23:35:46.503Z",
          "fetchedAt": "2026-10-23T02:43:09.716Z",
          "state": "published"
        },
        {
          "source": "CISA KEV",
          "modifiedAt": "2021-11-03T00:00:00.000Z",
          "fetchedAt": "2026-10-23T02:17:50.489Z",
          "state": "published"
        }
      ],
      "sourceAction": "Apply updates per vendor instructions.",
      "sourceSummary": "Windows / Windows Server / Windows 10 Version 1909 for 32-bit Systems / Windows 10 Version 1909 for x64-based Systems / Windows 10 Version 1909 for ARM64-based Systems / Windows Server, version 1909 (Server Core installation) / Windows 10 Version 190にコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。",
      "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。",
      "guidance": {
        "schemaVersion": "1.0",
        "method": "automatic",
        "reviewedAt": null,
        "reviewState": "current",
        "generatedAt": "2026-10-23T03:47:41.066Z",
        "generatorVersion": "2026-10-23.3",
        "sourceFingerprint": "fc0ad6e4903f03875178670d7240b07524dc3da637756a668ba2d37360b39329",
        "sourceModifiedAt": "2025-10-21T23:35:46.503Z",
        "model": "@cf/openai/gpt-oss-120b",
        "verificationMethod": "exact_source_excerpt_and_independent_semantic_check",
        "summary": "Microsoft Windows の Adobe Type Manager Library が、特別に細工されたマルチマスターフォント（Adobe Type 1 PostScript 形式）を正しく処理できないため、リモートからコードを実行される可能性があります。この脆弱性は Windows 10 以外のシステムで攻撃者がコードを遠隔実行できることを意味し、CVE‑2020‑0938 は CVE‑2020‑1020 とは別のものです。",
        "risk": "攻撃者がこの脆弱性を利用すると、リモートでコードを実行できる可能性があります。",
        "summaryEvidenceIds": [
          "E1"
        ],
        "riskEvidenceIds": [
          "E1"
        ],
        "applicability": [
          {
            "text": "Windows Adobe Type Manager Library が、特別に細工されたマルチマスターフォント（Adobe Type 1 PostScript 形式）を処理する際に問題が発生します。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0938.json"
            ],
            "evidenceIds": [
              "E1"
            ]
          },
          {
            "text": "影響を受けるクライアント製品として、Windows 10 Version 1803、1809、1709、1607、10（32 ビット・64 ビット）、Windows 7 Service Pack 1（32 ビット・64 ビット）、Windows 8.1（32 ビット・64 ビット）および RT 8.1 が含まれます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0938.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "影響を受けるサーバー製品として、Windows Server バージョン 1803（Core インストール）、2019（標準・Core）、2016（標準・Core）、2008（32 ビット・Itanium・x64、各 Service Pack 2、Core インストール）、2008 R2（Itanium・x64、各 Service Pack 1、Core インストール）、2012（標準・Core）、2012 R2（標準・Core）が含まれます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0938.json"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "Windows 10 Version 1909（32 ビット・x64・ARM64）および Windows Server version 1909（Server Core インストール）は、バージョン情報が「unspecified」として記載されており、影響があるとされています。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0938.json"
            ],
            "evidenceIds": [
              "E4",
              "E5",
              "E6",
              "E7"
            ]
          },
          {
            "text": "Windows 10 Version 1903（32 ビット・x64・ARM64）および Windows Server version 1903（Server Core インストール）も、バージョン情報が「unspecified」として記載されており、影響があるとされています。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0938.json"
            ],
            "evidenceIds": [
              "E8",
              "E9",
              "E10",
              "E11"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows。影響ありとして記載：10 for 32-bit Systems。影響ありとして記載：10 for x64-based Systems。影響ありとして記載：8.1 for 32-bit systems。影響ありとして記載：8.1 for x64-based systems。影響ありとして記載：RT 8.1。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0938.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server。影響ありとして記載：version 1803  (Core Installation)。影響ありとして記載：2019。影響ありとして記載：2019  (Core installation)。影響ありとして記載：2016。影響ありとして記載：2016  (Core installation)。影響ありとして記載：2012。影響ありとして記載：2012 (Core installation)。影響ありとして記載：2012 R2。影響ありとして記載：2012 R2 (Core installation)。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0938.json"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 1909 for 32-bit Systems。影響ありとして記載：具体的な版番号の記載なし。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0938.json"
            ],
            "evidenceIds": [
              "E4"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 1909 for x64-based Systems。影響ありとして記載：具体的な版番号の記載なし。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0938.json"
            ],
            "evidenceIds": [
              "E5"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 1909 for ARM64-based Systems。影響ありとして記載：具体的な版番号の記載なし。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0938.json"
            ],
            "evidenceIds": [
              "E6"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server, version 1909 (Server Core installation)。影響ありとして記載：具体的な版番号の記載なし。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0938.json"
            ],
            "evidenceIds": [
              "E7"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 1903 for 32-bit Systems。影響ありとして記載：具体的な版番号の記載なし。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0938.json"
            ],
            "evidenceIds": [
              "E8"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 1903 for x64-based Systems。影響ありとして記載：具体的な版番号の記載なし。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0938.json"
            ],
            "evidenceIds": [
              "E9"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 1903 for ARM64-based Systems。影響ありとして記載：具体的な版番号の記載なし。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0938.json"
            ],
            "evidenceIds": [
              "E10"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server, version 1903 (Server Core installation)。影響ありとして記載：具体的な版番号の記載なし。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0938.json"
            ],
            "evidenceIds": [
              "E11"
            ]
          },
          {
            "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。",
            "kind": "fact",
            "sourceUrls": [
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-0938"
            ],
            "evidenceIds": [
              "E13"
            ]
          }
        ],
        "versionChecks": [
          {
            "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0938.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "「スタート」→「設定」→「システム」→「バージョン情報」を開き、Windowsのエディション・バージョン・OSビルドを控えます。会社のPCやサーバーは、この情報とCVE番号を管理担当者へ渡してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device"
            ]
          }
        ],
        "actions": [
          {
            "text": "ベンダーの指示に従って更新プログラムを適用してください。",
            "kind": "fix",
            "sourceUrls": [
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-0938"
            ],
            "evidenceIds": [
              "E12"
            ]
          },
          {
            "text": "「CVE-2020-0938」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cve.org/CVERecord?id=CVE-2020-0938",
              "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0938",
              "http://packetstormsecurity.com/files/161299/Apple-CoreText-libFontParser.dylib-Stack-Corruption.html",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-0938",
              "https://nvd.nist.gov/vuln/detail/CVE-2020-0938"
            ]
          },
          {
            "text": "Windows 11は「設定」→「Windows Update」→「更新プログラムのチェック」を開き、提供された更新を適用します。再起動を求められたら完了させます。会社管理のPC、Windows Server、サポート外の版は管理担当者に適用する修正番号と配布予定を確認してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates"
            ]
          }
        ],
        "temporaryMitigations": [
          {
            "text": "すぐ更新できない場合は、CVE番号、Windowsの版、業務で必要な機能を管理担当者に伝え、修正までの利用方法と更新予定を決めてください。すべてのWindowsの問題に同じ回避策が使えるわけではありません。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates",
              "https://www.cve.org/CVERecord?id=CVE-2020-0938",
              "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0938",
              "http://packetstormsecurity.com/files/161299/Apple-CoreText-libFontParser.dylib-Stack-Corruption.html",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-0938",
              "https://nvd.nist.gov/vuln/detail/CVE-2020-0938"
            ]
          }
        ],
        "verification": [
          {
            "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。",
            "kind": "procedure",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0938.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "再起動後にWindows Updateを開き直して失敗・再起動待ちがないか確認し、管理担当者にこのCVEに対応する修正の適用結果を確認してもらってください。「最新の状態」と出ても、別製品の更新やサポート外の版の修正を保証するものではありません。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates"
            ]
          }
        ],
        "unknowns": [
          "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。",
          "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。"
        ],
        "sources": [
          {
            "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0938.json",
            "label": "CVE：microsoft"
          },
          {
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-0938",
            "label": "CISA KEV（悪用確認）"
          },
          {
            "url": "https://www.cve.org/CVERecord?id=CVE-2020-0938",
            "label": "CVE公式レコード"
          },
          {
            "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0938",
            "label": "CVE掲載の参考情報"
          },
          {
            "url": "http://packetstormsecurity.com/files/161299/Apple-CoreText-libFontParser.dylib-Stack-Corruption.html",
            "label": "CVE掲載の参考情報"
          },
          {
            "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-0938",
            "label": "CISAが示す関連情報"
          },
          {
            "url": "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device",
            "label": "Microsoft公式：Windowsの情報を調べる"
          },
          {
            "url": "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates",
            "label": "Microsoft公式：Windows Updateの操作"
          }
        ],
        "evidence": [
          {
            "id": "E1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0938.json",
            "sourceField": "/containers/cna/descriptions/0/value",
            "excerpt": "A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted multi-master font - Adobe Type 1 PostScript format.For all systems except Windows 10, an attacker who successfully exploited the vulnerability could execute code remotely, aka 'Adobe Font Manager Library Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1020.",
            "language": "en",
            "representation": "source_excerpt"
          },
          {
            "id": "E2",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0938.json",
            "sourceField": "/containers/cna/affected/0",
            "excerpt": "{\"product\":\"Windows\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"10 Version 1803 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1803 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1803 for ARM64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1809 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1809 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1809 for ARM64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1709 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1709 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1709 for ARM64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1607 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1607 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"7 for 32-bit Systems Service Pack 1\"},{\"status\":\"affected\",\"version\":\"7 for x64-based Systems Service Pack 1\"},{\"status\":\"affected\",\"version\":\"8.1 for 32-bit systems\"},{\"status\":\"affected\",\"version\":\"8.1 for x64-based systems\"},{\"status\":\"affected\",\"version\":\"RT 8.1\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E3",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0938.json",
            "sourceField": "/containers/cna/affected/1",
            "excerpt": "{\"product\":\"Windows Server\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"version 1803  (Core Installation)\"},{\"status\":\"affected\",\"version\":\"2019\"},{\"status\":\"affected\",\"version\":\"2019  (Core installation)\"},{\"status\":\"affected\",\"version\":\"2016\"},{\"status\":\"affected\",\"version\":\"2016  (Core installation)\"},{\"status\":\"affected\",\"version\":\"2008 for 32-bit Systems Service Pack 2\"},{\"status\":\"affected\",\"version\":\"2008 for 32-bit Systems Service Pack 2 (Core installation)\"},{\"status\":\"affected\",\"version\":\"2008 for Itanium-Based Systems Service Pack 2\"},{\"status\":\"affected\",\"version\":\"2008 for x64-based Systems Service Pack 2\"},{\"status\":\"affected\",\"version\":\"2008 for x64-based Systems Service Pack 2 (Core installation)\"},{\"status\":\"affected\",\"version\":\"2008 R2 for Itanium-Based Systems Service Pack 1\"},{\"status\":\"affected\",\"version\":\"2008 R2 for x64-based Systems Service Pack 1\"},{\"status\":\"affected\",\"version\":\"2008 R2 for x64-based Systems Service Pack 1 (Core installation)\"},{\"status\":\"affected\",\"version\":\"2012\"},{\"status\":\"affected\",\"version\":\"2012 (Core installation)\"},{\"status\":\"affected\",\"version\":\"2012 R2\"},{\"status\":\"affected\",\"version\":\"2012 R2 (Core installation)\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E4",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0938.json",
            "sourceField": "/containers/cna/affected/2",
            "excerpt": "{\"product\":\"Windows 10 Version 1909 for 32-bit Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E5",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0938.json",
            "sourceField": "/containers/cna/affected/3",
            "excerpt": "{\"product\":\"Windows 10 Version 1909 for x64-based Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E6",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0938.json",
            "sourceField": "/containers/cna/affected/4",
            "excerpt": "{\"product\":\"Windows 10 Version 1909 for ARM64-based Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E7",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0938.json",
            "sourceField": "/containers/cna/affected/5",
            "excerpt": "{\"product\":\"Windows Server, version 1909 (Server Core installation)\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E8",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0938.json",
            "sourceField": "/containers/cna/affected/6",
            "excerpt": "{\"product\":\"Windows 10 Version 1903 for 32-bit Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E9",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0938.json",
            "sourceField": "/containers/cna/affected/7",
            "excerpt": "{\"product\":\"Windows 10 Version 1903 for x64-based Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E10",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0938.json",
            "sourceField": "/containers/cna/affected/8",
            "excerpt": "{\"product\":\"Windows 10 Version 1903 for ARM64-based Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E11",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0938.json",
            "sourceField": "/containers/cna/affected/9",
            "excerpt": "{\"product\":\"Windows Server, version 1903 (Server Core installation)\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E12",
            "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-0938",
            "sourceField": "/sourceAction",
            "excerpt": "Apply updates per vendor instructions.",
            "language": null
          },
          {
            "id": "E13",
            "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-0938",
            "sourceField": "/exploitStatus",
            "excerpt": "{\"id\":\"CVE-2020-0938\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}",
            "language": "en",
            "representation": "normalized_feed_field"
          }
        ],
        "supportRequest": "件名：CVE-2020-0938（Windows / Windows Server / Windows 10 Version 1909 for 32-bit Systems / Windows 10 Version 1909 for x64-based Systems / Windows 10 Version 1909 for ARM64-based Systems / Windows Server, version 1909 (Server Core installation) / Windows 10 Version 190）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Windows Adobe Type Manager Library が、特別に細工されたマルチマスターフォント（Adobe Type 1 PostScript 形式）を処理する際に問題が発生します。\n・影響を受けるクライアント製品として、Windows 10 Version 1803、1809、1709、1607、10（32 ビット・64 ビット）、Windows 7 Service Pack 1（32 ビット・64 ビット）、Windows 8.1（32 ビット・64 ビット）および RT 8.1 が含まれます。\n・影響を受けるサーバー製品として、Windows Server バージョン 1803（Core インストール）、2019（標準・Core）、2016（標準・Core）、2008（32 ビット・Itanium・x64、各 Service Pack 2、Core インストール）、2008 R2（Itanium・x64、各 Service Pack 1、Core インストール）、2012（標準・Core）、2012 R2（標準・Core）が含まれます。\n・Windows 10 Version 1909（32 ビット・x64・ARM64）および Windows Server version 1909（Server Core インストール）は、バージョン情報が「unspecified」として記載されており、影響があるとされています。\n・Windows 10 Version 1903（32 ビット・x64・ARM64）および Windows Server version 1903（Server Core インストール）も、バージョン情報が「unspecified」として記載されており、影響があるとされています。\n・公式の対象表：Microsoft / Windows。影響ありとして記載：10 for 32-bit Systems。影響ありとして記載：10 for x64-based Systems。影響ありとして記載：8.1 for 32-bit systems。影響ありとして記載：8.1 for x64-based systems。影響ありとして記載：RT 8.1。\n・公式の対象表：Microsoft / Windows Server。影響ありとして記載：version 1803  (Core Installation)。影響ありとして記載：2019。影響ありとして記載：2019  (Core installation)。影響ありとして記載：2016。影響ありとして記載：2016  (Core installation)。影響ありとして記載：2012。影響ありとして記載：2012 (Core installation)。影響ありとして記載：2012 R2。影響ありとして記載：2012 R2 (Core installation)。\n・公式の対象表：Microsoft / Windows 10 Version 1909 for 32-bit Systems。影響ありとして記載：具体的な版番号の記載なし。\n・公式の対象表：Microsoft / Windows 10 Version 1909 for x64-based Systems。影響ありとして記載：具体的な版番号の記載なし。\n・公式の対象表：Microsoft / Windows 10 Version 1909 for ARM64-based Systems。影響ありとして記載：具体的な版番号の記載なし。\n・公式の対象表：Microsoft / Windows Server, version 1909 (Server Core installation)。影響ありとして記載：具体的な版番号の記載なし。\n・公式の対象表：Microsoft / Windows 10 Version 1903 for 32-bit Systems。影響ありとして記載：具体的な版番号の記載なし。\n・公式の対象表：Microsoft / Windows 10 Version 1903 for x64-based Systems。影響ありとして記載：具体的な版番号の記載なし。\n・公式の対象表：Microsoft / Windows 10 Version 1903 for ARM64-based Systems。影響ありとして記載：具体的な版番号の記載なし。\n・公式の対象表：Microsoft / Windows Server, version 1903 (Server Core installation)。影響ありとして記載：具体的な版番号の記載なし。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2020-0938",
        "publicationCheckVersion": "2026-10-23.1",
        "sourceNotices": [],
        "automation": {
          "status": "ready",
          "lastAttempt": "2026-10-23T03:47:41.066Z",
          "lastSuccess": "2026-10-23T03:47:41.066Z",
          "sourceCheckedAt": "2026-10-23T02:43:09.716Z",
          "errorCode": null
        },
        "glossary": []
      }
    },
    {
      "id": "CVE-2020-0986",
      "aliases": [],
      "title": "Windows / Windows Server / Windows 10 Version 1909 for 32-bit Systems / Windows 10 Version 1909 for x64-based Systems / Windows 10 Version 1909 for ARM64-based Systems / Windows Server, version 1909 (Server Core installation) / Windows 10 Version 190：権限の奪取",
      "summary": "Windows カーネルがメモリ内のオブジェクトを正しく処理できず、特権レベルを上げられる脆弱性が存在します。",
      "risk": "攻撃者が特権レベルを上げられる可能性があります。",
      "product": "Windows / Windows Server / Windows 10 Version 1909 for 32-bit Systems / Windows 10 Version 1909 for x64-based Systems / Windows 10 Version 1909 for ARM64-based Systems / Windows Server, version 1909 (Server Core installation) / Windows 10 Version 190",
      "category": "windows",
      "component": "package",
      "severity": "unknown",
      "cvss": null,
      "cvssVersion": null,
      "cvssSource": "microsoft",
      "cvssVector": null,
      "affected": [
        {
          "product": "Windows",
          "range": "10 Version 1803 for 32-bit Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1803 for x64-based Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1803 for ARM64-based Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1809 for 32-bit Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1809 for x64-based Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1809 for ARM64-based Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1709 for 32-bit Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1709 for x64-based Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1709 for ARM64-based Systems"
        },
        {
          "product": "Windows",
          "range": "10 for 32-bit Systems"
        },
        {
          "product": "Windows",
          "range": "10 for x64-based Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1607 for 32-bit Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1607 for x64-based Systems"
        },
        {
          "product": "Windows",
          "range": "8.1 for 32-bit systems"
        },
        {
          "product": "Windows",
          "range": "8.1 for x64-based systems"
        },
        {
          "product": "Windows",
          "range": "RT 8.1"
        },
        {
          "product": "Windows Server",
          "range": "version 1803  (Core Installation)"
        },
        {
          "product": "Windows Server",
          "range": "2019"
        },
        {
          "product": "Windows Server",
          "range": "2019  (Core installation)"
        },
        {
          "product": "Windows Server",
          "range": "2016"
        },
        {
          "product": "Windows Server",
          "range": "2016  (Core installation)"
        },
        {
          "product": "Windows Server",
          "range": "2012"
        },
        {
          "product": "Windows Server",
          "range": "2012 (Core installation)"
        },
        {
          "product": "Windows Server",
          "range": "2012 R2"
        },
        {
          "product": "Windows Server",
          "range": "2012 R2 (Core installation)"
        },
        {
          "product": "Windows 10 Version 1909 for 32-bit Systems",
          "range": "unspecified"
        },
        {
          "product": "Windows 10 Version 1909 for x64-based Systems",
          "range": "unspecified"
        },
        {
          "product": "Windows 10 Version 1909 for ARM64-based Systems",
          "range": "unspecified"
        },
        {
          "product": "Windows Server, version 1909 (Server Core installation)",
          "range": "unspecified"
        },
        {
          "product": "Windows 10 Version 1903 for 32-bit Systems",
          "range": "unspecified"
        },
        {
          "product": "Windows 10 Version 1903 for x64-based Systems",
          "range": "unspecified"
        },
        {
          "product": "Windows 10 Version 1903 for ARM64-based Systems",
          "range": "unspecified"
        },
        {
          "product": "Windows Server, version 1903 (Server Core installation)",
          "range": "unspecified"
        },
        {
          "product": "Windows 10 Version 2004 for 32-bit Systems",
          "range": "unspecified"
        },
        {
          "product": "Windows Server, version 2004 (Server Core installation)",
          "range": "unspecified"
        },
        {
          "product": "Windows 10 Version 2004 for ARM64-based Systems",
          "range": "unspecified"
        },
        {
          "product": "Windows 10 Version 2004 for x64-based Systems",
          "range": "unspecified"
        }
      ],
      "fixed": [],
      "steps": [
        "ベンダーの指示に従って更新を適用してください。",
        "「CVE-2020-0986」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
        "Windows 11は「設定」→「Windows Update」→「更新プログラムのチェック」を開き、提供された更新を適用します。再起動を求められたら完了させます。会社管理のPC、Windows Server、サポート外の版は管理担当者に適用する修正番号と配布予定を確認してください。"
      ],
      "references": [
        {
          "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0986.json",
          "label": "CVE：microsoft"
        },
        {
          "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-0986",
          "label": "CISA KEV（悪用確認）"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-0986",
          "label": "CVE公式レコード"
        },
        {
          "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0986",
          "label": "CVE掲載の参考情報"
        },
        {
          "url": "http://packetstormsecurity.com/files/160698/Microsoft-Windows-splWOW64-Privilege-Escalation.html",
          "label": "CVE掲載の参考情報"
        },
        {
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-0986",
          "label": "CISAが示す関連情報"
        },
        {
          "url": "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device",
          "label": "Microsoft公式：Windowsの情報を調べる"
        },
        {
          "url": "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates",
          "label": "Microsoft公式：Windows Updateの操作"
        }
      ],
      "publishedAt": "2020-06-09T19:43:14.000Z",
      "modifiedAt": "2025-10-21T23:35:42.145Z",
      "fetchedAt": "2026-10-23T02:43:09.771Z",
      "exploitStatus": "confirmed",
      "sources": [
        "CVE",
        "CISA KEV"
      ],
      "originalText": "An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1237, CVE-2020-1246, CVE-2020-1262, CVE-2020-1264, CVE-2020-1266, CVE-2020-1269, CVE-2020-1273, CVE-2020-1274, CVE-2020-1275, CVE-2020-1276, CVE-2020-1307, CVE-2020-1316.",
      "sourceTitle": "",
      "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。",
      "state": "published",
      "affectedDetails": [
        {
          "product": "Windows",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "10 Version 1803 for 32-bit Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1803 for x64-based Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1803 for ARM64-based Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1809 for 32-bit Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1809 for x64-based Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1809 for ARM64-based Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1709 for 32-bit Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1709 for x64-based Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1709 for ARM64-based Systems"
            },
            {
              "status": "affected",
              "version": "10 for 32-bit Systems"
            },
            {
              "status": "affected",
              "version": "10 for x64-based Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1607 for 32-bit Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1607 for x64-based Systems"
            },
            {
              "status": "affected",
              "version": "8.1 for 32-bit systems"
            },
            {
              "status": "affected",
              "version": "8.1 for x64-based systems"
            },
            {
              "status": "affected",
              "version": "RT 8.1"
            }
          ]
        },
        {
          "product": "Windows Server",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "version 1803  (Core Installation)"
            },
            {
              "status": "affected",
              "version": "2019"
            },
            {
              "status": "affected",
              "version": "2019  (Core installation)"
            },
            {
              "status": "affected",
              "version": "2016"
            },
            {
              "status": "affected",
              "version": "2016  (Core installation)"
            },
            {
              "status": "affected",
              "version": "2012"
            },
            {
              "status": "affected",
              "version": "2012 (Core installation)"
            },
            {
              "status": "affected",
              "version": "2012 R2"
            },
            {
              "status": "affected",
              "version": "2012 R2 (Core installation)"
            }
          ]
        },
        {
          "product": "Windows 10 Version 1909 for 32-bit Systems",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified"
            }
          ]
        },
        {
          "product": "Windows 10 Version 1909 for x64-based Systems",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified"
            }
          ]
        },
        {
          "product": "Windows 10 Version 1909 for ARM64-based Systems",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified"
            }
          ]
        },
        {
          "product": "Windows Server, version 1909 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified"
            }
          ]
        },
        {
          "product": "Windows 10 Version 1903 for 32-bit Systems",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified"
            }
          ]
        },
        {
          "product": "Windows 10 Version 1903 for x64-based Systems",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified"
            }
          ]
        },
        {
          "product": "Windows 10 Version 1903 for ARM64-based Systems",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified"
            }
          ]
        },
        {
          "product": "Windows Server, version 1903 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified"
            }
          ]
        },
        {
          "product": "Windows 10 Version 2004 for 32-bit Systems",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified"
            }
          ]
        },
        {
          "product": "Windows Server, version 2004 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified"
            }
          ]
        },
        {
          "product": "Windows 10 Version 2004 for ARM64-based Systems",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified"
            }
          ]
        },
        {
          "product": "Windows 10 Version 2004 for x64-based Systems",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified"
            }
          ]
        }
      ],
      "officialEvidence": {
        "schemaVersion": "1.0",
        "id": "CVE-2020-0986",
        "sourceType": "CVE",
        "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0986.json",
        "fetchedAt": "2026-10-23T02:43:09.771Z",
        "publishedAt": "2020-06-09T19:43:14.000Z",
        "modifiedAt": "2025-10-21T23:35:42.145Z",
        "state": "published",
        "provider": "microsoft",
        "title": "",
        "descriptions": [
          {
            "lang": "en",
            "value": "An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1237, CVE-2020-1246, CVE-2020-1262, CVE-2020-1264, CVE-2020-1266, CVE-2020-1269, CVE-2020-1273, CVE-2020-1274, CVE-2020-1275, CVE-2020-1276, CVE-2020-1307, CVE-2020-1316.",
            "sourcePath": "/containers/cna/descriptions/0/value"
          }
        ],
        "affected": [
          {
            "vendor": "Microsoft",
            "product": "Windows",
            "sourcePath": "/containers/cna/affected/0",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/0/versions/0",
                "version": "10 Version 1803 for 32-bit Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/1",
                "version": "10 Version 1803 for x64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/2",
                "version": "10 Version 1803 for ARM64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/3",
                "version": "10 Version 1809 for 32-bit Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/4",
                "version": "10 Version 1809 for x64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/5",
                "version": "10 Version 1809 for ARM64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/6",
                "version": "10 Version 1709 for 32-bit Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/7",
                "version": "10 Version 1709 for x64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/8",
                "version": "10 Version 1709 for ARM64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/9",
                "version": "10 for 32-bit Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/10",
                "version": "10 for x64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/11",
                "version": "10 Version 1607 for 32-bit Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/12",
                "version": "10 Version 1607 for x64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/13",
                "version": "8.1 for 32-bit systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/14",
                "version": "8.1 for x64-based systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/15",
                "version": "RT 8.1",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server",
            "sourcePath": "/containers/cna/affected/1",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/1/versions/0",
                "version": "version 1803  (Core Installation)",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/1",
                "version": "2019",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/2",
                "version": "2019  (Core installation)",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/3",
                "version": "2016",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/4",
                "version": "2016  (Core installation)",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/5",
                "version": "2012",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/6",
                "version": "2012 (Core installation)",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/7",
                "version": "2012 R2",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/8",
                "version": "2012 R2 (Core installation)",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 1909 for 32-bit Systems",
            "sourcePath": "/containers/cna/affected/2",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/2/versions/0",
                "version": "unspecified",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 1909 for x64-based Systems",
            "sourcePath": "/containers/cna/affected/3",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/3/versions/0",
                "version": "unspecified",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 1909 for ARM64-based Systems",
            "sourcePath": "/containers/cna/affected/4",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/4/versions/0",
                "version": "unspecified",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server, version 1909 (Server Core installation)",
            "sourcePath": "/containers/cna/affected/5",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/5/versions/0",
                "version": "unspecified",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 1903 for 32-bit Systems",
            "sourcePath": "/containers/cna/affected/6",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/6/versions/0",
                "version": "unspecified",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 1903 for x64-based Systems",
            "sourcePath": "/containers/cna/affected/7",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/7/versions/0",
                "version": "unspecified",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 1903 for ARM64-based Systems",
            "sourcePath": "/containers/cna/affected/8",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/8/versions/0",
                "version": "unspecified",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server, version 1903 (Server Core installation)",
            "sourcePath": "/containers/cna/affected/9",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/9/versions/0",
                "version": "unspecified",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 2004 for 32-bit Systems",
            "sourcePath": "/containers/cna/affected/10",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/10/versions/0",
                "version": "unspecified",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server, version 2004 (Server Core installation)",
            "sourcePath": "/containers/cna/affected/11",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/11/versions/0",
                "version": "unspecified",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 2004 for ARM64-based Systems",
            "sourcePath": "/containers/cna/affected/12",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/12/versions/0",
                "version": "unspecified",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 2004 for x64-based Systems",
            "sourcePath": "/containers/cna/affected/13",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/13/versions/0",
                "version": "unspecified",
                "status": "affected"
              }
            ]
          }
        ],
        "solutions": [],
        "workarounds": [],
        "exploits": [],
        "rejectedReasons": [],
        "problemTypes": [
          {
            "cweId": "",
            "lang": "en",
            "description": "Elevation of Privilege",
            "sourcePath": "/containers/cna/problemTypes/0/descriptions/0"
          }
        ],
        "metrics": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "provider": "CISA-ADP",
            "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1"
          }
        ],
        "references": [
          {
            "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0986",
            "label": "CVE",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/0"
          },
          {
            "url": "http://packetstormsecurity.com/files/160698/Microsoft-Windows-splWOW64-Privilege-Escalation.html",
            "label": "CVE",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/1"
          },
          {
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-0986",
            "label": "CISA-ADP",
            "tags": [
              "government-resource"
            ],
            "provider": "CISA-ADP",
            "sourcePath": "/containers/adp/1/references/0"
          }
        ],
        "snippets": [
          {
            "evidenceId": "official:/containers/cna/affected/0",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0986.json",
            "sourcePath": "/containers/cna/affected/0",
            "text": "{\"product\":\"Windows\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"10 Version 1803 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1803 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1803 for ARM64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1809 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1809 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1809 for ARM64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1709 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1709 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1709 for ARM64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1607 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1607 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"8.1 for 32-bit systems\"},{\"status\":\"affected\",\"version\":\"8.1 for x64-based systems\"},{\"status\":\"affected\",\"version\":\"RT 8.1\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0986.json",
            "sourcePath": "/containers/cna/affected/1",
            "text": "{\"product\":\"Windows Server\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"version 1803  (Core Installation)\"},{\"status\":\"affected\",\"version\":\"2019\"},{\"status\":\"affected\",\"version\":\"2019  (Core installation)\"},{\"status\":\"affected\",\"version\":\"2016\"},{\"status\":\"affected\",\"version\":\"2016  (Core installation)\"},{\"status\":\"affected\",\"version\":\"2012\"},{\"status\":\"affected\",\"version\":\"2012 (Core installation)\"},{\"status\":\"affected\",\"version\":\"2012 R2\"},{\"status\":\"affected\",\"version\":\"2012 R2 (Core installation)\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/2",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0986.json",
            "sourcePath": "/containers/cna/affected/2",
            "text": "{\"product\":\"Windows 10 Version 1909 for 32-bit Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/3",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0986.json",
            "sourcePath": "/containers/cna/affected/3",
            "text": "{\"product\":\"Windows 10 Version 1909 for x64-based Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/4",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0986.json",
            "sourcePath": "/containers/cna/affected/4",
            "text": "{\"product\":\"Windows 10 Version 1909 for ARM64-based Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/5",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0986.json",
            "sourcePath": "/containers/cna/affected/5",
            "text": "{\"product\":\"Windows Server, version 1909 (Server Core installation)\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/6",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0986.json",
            "sourcePath": "/containers/cna/affected/6",
            "text": "{\"product\":\"Windows 10 Version 1903 for 32-bit Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/7",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0986.json",
            "sourcePath": "/containers/cna/affected/7",
            "text": "{\"product\":\"Windows 10 Version 1903 for x64-based Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/8",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0986.json",
            "sourcePath": "/containers/cna/affected/8",
            "text": "{\"product\":\"Windows 10 Version 1903 for ARM64-based Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/9",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0986.json",
            "sourcePath": "/containers/cna/affected/9",
            "text": "{\"product\":\"Windows Server, version 1903 (Server Core installation)\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/10",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0986.json",
            "sourcePath": "/containers/cna/affected/10",
            "text": "{\"product\":\"Windows 10 Version 2004 for 32-bit Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/11",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0986.json",
            "sourcePath": "/containers/cna/affected/11",
            "text": "{\"product\":\"Windows Server, version 2004 (Server Core installation)\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/12",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0986.json",
            "sourcePath": "/containers/cna/affected/12",
            "text": "{\"product\":\"Windows 10 Version 2004 for ARM64-based Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/13",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0986.json",
            "sourcePath": "/containers/cna/affected/13",
            "text": "{\"product\":\"Windows 10 Version 2004 for x64-based Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/descriptions/0/value",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0986.json",
            "sourcePath": "/containers/cna/descriptions/0/value",
            "text": "An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1237, CVE-2020-1246, CVE-2020-1262, CVE-2020-1264, CVE-2020-1266, CVE-2020-1269, CVE-2020-1273, CVE-2020-1274, CVE-2020-1275, CVE-2020-1276, CVE-2020-1307, CVE-2020-1316.",
            "truncated": false,
            "representation": "source_excerpt"
          },
          {
            "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0986.json",
            "sourcePath": "/containers/cna/problemTypes/0/descriptions/0",
            "text": "{\"description\":\"Elevation of Privilege\",\"lang\":\"en\",\"type\":\"text\"}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/adp/1/metrics/0/cvssV3_1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0986.json",
            "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1",
            "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":7.8,\"attackVector\":\"LOCAL\",\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"NONE\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"LOW\",\"confidentialityImpact\":\"HIGH\"}",
            "truncated": false,
            "representation": "source_json"
          }
        ],
        "limits": {
          "completeness": "official_record",
          "truncatedFields": [],
          "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。"
        }
      },
      "sourceSnapshots": [
        {
          "source": "CVE",
          "modifiedAt": "2025-10-21T23:35:42.145Z",
          "fetchedAt": "2026-10-23T02:43:09.771Z",
          "state": "published"
        },
        {
          "source": "CISA KEV",
          "modifiedAt": "2021-11-03T00:00:00.000Z",
          "fetchedAt": "2026-10-23T02:17:50.489Z",
          "state": "published"
        }
      ],
      "sourceAction": "Apply updates per vendor instructions.",
      "sourceSummary": "Windows / Windows Server / Windows 10 Version 1909 for 32-bit Systems / Windows 10 Version 1909 for x64-based Systems / Windows 10 Version 1909 for ARM64-based Systems / Windows Server, version 1909 (Server Core installation) / Windows 10 Version 190に権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。",
      "sourceRisk": "本来与えられていない権限で、操作される可能性があります。",
      "guidance": {
        "schemaVersion": "1.0",
        "method": "automatic",
        "reviewedAt": null,
        "reviewState": "current",
        "generatedAt": "2026-10-23T03:47:43.415Z",
        "generatorVersion": "2026-10-23.3",
        "sourceFingerprint": "6a6a2e8e792ab561763ea5976eaf3aa6b9ca949ceb0764ed1814ad6736f9ca7f",
        "sourceModifiedAt": "2025-10-21T23:35:42.145Z",
        "model": "@cf/openai/gpt-oss-120b",
        "verificationMethod": "exact_source_excerpt_and_independent_semantic_check",
        "summary": "Windows カーネルがメモリ内のオブジェクトを正しく処理できず、特権レベルを上げられる脆弱性が存在します。",
        "risk": "攻撃者が特権レベルを上げられる可能性があります。",
        "summaryEvidenceIds": [
          "E1"
        ],
        "riskEvidenceIds": [
          "E1"
        ],
        "applicability": [
          {
            "text": "Windows 10 の 1803、1809、1709、1607、10（全体）の 32-bit、x64、ARM64 系統が影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0986.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "Windows 8.1 の 32-bit および x64 系統が影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0986.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "Windows Server の 1803（Core インストール）、2019、2019（Core インストール）、2016、2016（Core インストール）、2012、2012（Core インストール）、2012 R2、2012 R2（Core インストール）が影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0986.json"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "Windows 10 Version 1909 の 32-bit、x64、ARM64 系統が影響を受けます（バージョン未指定）。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0986.json"
            ],
            "evidenceIds": [
              "E4",
              "E5",
              "E6"
            ]
          },
          {
            "text": "Windows Server, version 1909（Server Core インストール）が影響を受けます（バージョン未指定）。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0986.json"
            ],
            "evidenceIds": [
              "E7"
            ]
          },
          {
            "text": "Windows 10 Version 1903 の 32-bit、x64、ARM64 系統が影響を受けます（バージョン未指定）。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0986.json"
            ],
            "evidenceIds": [
              "E8",
              "E9",
              "E10"
            ]
          },
          {
            "text": "Windows Server, version 1903（Server Core インストール）が影響を受けます（バージョン未指定）。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0986.json"
            ],
            "evidenceIds": [
              "E11"
            ]
          },
          {
            "text": "Windows 10 Version 2004 の 32-bit、x64、ARM64 系統が影響を受けます（バージョン未指定）。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0986.json"
            ],
            "evidenceIds": [
              "E12",
              "E13",
              "E14",
              "E15"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows。影響ありとして記載：10 for 32-bit Systems。影響ありとして記載：10 for x64-based Systems。影響ありとして記載：8.1 for 32-bit systems。影響ありとして記載：8.1 for x64-based systems。影響ありとして記載：RT 8.1。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0986.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server。影響ありとして記載：version 1803  (Core Installation)。影響ありとして記載：2019。影響ありとして記載：2019  (Core installation)。影響ありとして記載：2016。影響ありとして記載：2016  (Core installation)。影響ありとして記載：2012。影響ありとして記載：2012 (Core installation)。影響ありとして記載：2012 R2。影響ありとして記載：2012 R2 (Core installation)。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0986.json"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 1909 for 32-bit Systems。影響ありとして記載：具体的な版番号の記載なし。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0986.json"
            ],
            "evidenceIds": [
              "E4"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 1909 for x64-based Systems。影響ありとして記載：具体的な版番号の記載なし。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0986.json"
            ],
            "evidenceIds": [
              "E5"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 1909 for ARM64-based Systems。影響ありとして記載：具体的な版番号の記載なし。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0986.json"
            ],
            "evidenceIds": [
              "E6"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server, version 1909 (Server Core installation)。影響ありとして記載：具体的な版番号の記載なし。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0986.json"
            ],
            "evidenceIds": [
              "E7"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 1903 for 32-bit Systems。影響ありとして記載：具体的な版番号の記載なし。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0986.json"
            ],
            "evidenceIds": [
              "E8"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 1903 for x64-based Systems。影響ありとして記載：具体的な版番号の記載なし。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0986.json"
            ],
            "evidenceIds": [
              "E9"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 1903 for ARM64-based Systems。影響ありとして記載：具体的な版番号の記載なし。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0986.json"
            ],
            "evidenceIds": [
              "E10"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server, version 1903 (Server Core installation)。影響ありとして記載：具体的な版番号の記載なし。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0986.json"
            ],
            "evidenceIds": [
              "E11"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 2004 for 32-bit Systems。影響ありとして記載：具体的な版番号の記載なし。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0986.json"
            ],
            "evidenceIds": [
              "E12"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server, version 2004 (Server Core installation)。影響ありとして記載：具体的な版番号の記載なし。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0986.json"
            ],
            "evidenceIds": [
              "E13"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 2004 for ARM64-based Systems。影響ありとして記載：具体的な版番号の記載なし。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0986.json"
            ],
            "evidenceIds": [
              "E14"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 2004 for x64-based Systems。影響ありとして記載：具体的な版番号の記載なし。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0986.json"
            ],
            "evidenceIds": [
              "E15"
            ]
          },
          {
            "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。",
            "kind": "fact",
            "sourceUrls": [
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-0986"
            ],
            "evidenceIds": [
              "E17"
            ]
          }
        ],
        "versionChecks": [
          {
            "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0986.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "「スタート」→「設定」→「システム」→「バージョン情報」を開き、Windowsのエディション・バージョン・OSビルドを控えます。会社のPCやサーバーは、この情報とCVE番号を管理担当者へ渡してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device"
            ]
          }
        ],
        "actions": [
          {
            "text": "ベンダーの指示に従って更新を適用してください。",
            "kind": "fix",
            "sourceUrls": [
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-0986"
            ],
            "evidenceIds": [
              "E16"
            ]
          },
          {
            "text": "「CVE-2020-0986」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cve.org/CVERecord?id=CVE-2020-0986",
              "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0986",
              "http://packetstormsecurity.com/files/160698/Microsoft-Windows-splWOW64-Privilege-Escalation.html",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-0986",
              "https://nvd.nist.gov/vuln/detail/CVE-2020-0986"
            ]
          },
          {
            "text": "Windows 11は「設定」→「Windows Update」→「更新プログラムのチェック」を開き、提供された更新を適用します。再起動を求められたら完了させます。会社管理のPC、Windows Server、サポート外の版は管理担当者に適用する修正番号と配布予定を確認してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates"
            ]
          }
        ],
        "temporaryMitigations": [
          {
            "text": "すぐ更新できない場合は、CVE番号、Windowsの版、業務で必要な機能を管理担当者に伝え、修正までの利用方法と更新予定を決めてください。すべてのWindowsの問題に同じ回避策が使えるわけではありません。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates",
              "https://www.cve.org/CVERecord?id=CVE-2020-0986",
              "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0986",
              "http://packetstormsecurity.com/files/160698/Microsoft-Windows-splWOW64-Privilege-Escalation.html",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-0986",
              "https://nvd.nist.gov/vuln/detail/CVE-2020-0986"
            ]
          }
        ],
        "verification": [
          {
            "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。",
            "kind": "procedure",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0986.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "再起動後にWindows Updateを開き直して失敗・再起動待ちがないか確認し、管理担当者にこのCVEに対応する修正の適用結果を確認してもらってください。「最新の状態」と出ても、別製品の更新やサポート外の版の修正を保証するものではありません。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates"
            ]
          }
        ],
        "unknowns": [
          "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。",
          "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。"
        ],
        "sources": [
          {
            "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0986.json",
            "label": "CVE：microsoft"
          },
          {
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-0986",
            "label": "CISA KEV（悪用確認）"
          },
          {
            "url": "https://www.cve.org/CVERecord?id=CVE-2020-0986",
            "label": "CVE公式レコード"
          },
          {
            "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0986",
            "label": "CVE掲載の参考情報"
          },
          {
            "url": "http://packetstormsecurity.com/files/160698/Microsoft-Windows-splWOW64-Privilege-Escalation.html",
            "label": "CVE掲載の参考情報"
          },
          {
            "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-0986",
            "label": "CISAが示す関連情報"
          },
          {
            "url": "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device",
            "label": "Microsoft公式：Windowsの情報を調べる"
          },
          {
            "url": "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates",
            "label": "Microsoft公式：Windows Updateの操作"
          }
        ],
        "evidence": [
          {
            "id": "E1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0986.json",
            "sourceField": "/containers/cna/descriptions/0/value",
            "excerpt": "An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1237, CVE-2020-1246, CVE-2020-1262, CVE-2020-1264, CVE-2020-1266, CVE-2020-1269, CVE-2020-1273, CVE-2020-1274, CVE-2020-1275, CVE-2020-1276, CVE-2020-1307, CVE-2020-1316.",
            "language": "en",
            "representation": "source_excerpt"
          },
          {
            "id": "E2",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0986.json",
            "sourceField": "/containers/cna/affected/0",
            "excerpt": "{\"product\":\"Windows\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"10 Version 1803 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1803 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1803 for ARM64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1809 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1809 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1809 for ARM64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1709 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1709 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1709 for ARM64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1607 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1607 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"8.1 for 32-bit systems\"},{\"status\":\"affected\",\"version\":\"8.1 for x64-based systems\"},{\"status\":\"affected\",\"version\":\"RT 8.1\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E3",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0986.json",
            "sourceField": "/containers/cna/affected/1",
            "excerpt": "{\"product\":\"Windows Server\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"version 1803  (Core Installation)\"},{\"status\":\"affected\",\"version\":\"2019\"},{\"status\":\"affected\",\"version\":\"2019  (Core installation)\"},{\"status\":\"affected\",\"version\":\"2016\"},{\"status\":\"affected\",\"version\":\"2016  (Core installation)\"},{\"status\":\"affected\",\"version\":\"2012\"},{\"status\":\"affected\",\"version\":\"2012 (Core installation)\"},{\"status\":\"affected\",\"version\":\"2012 R2\"},{\"status\":\"affected\",\"version\":\"2012 R2 (Core installation)\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E4",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0986.json",
            "sourceField": "/containers/cna/affected/2",
            "excerpt": "{\"product\":\"Windows 10 Version 1909 for 32-bit Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E5",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0986.json",
            "sourceField": "/containers/cna/affected/3",
            "excerpt": "{\"product\":\"Windows 10 Version 1909 for x64-based Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E6",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0986.json",
            "sourceField": "/containers/cna/affected/4",
            "excerpt": "{\"product\":\"Windows 10 Version 1909 for ARM64-based Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E7",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0986.json",
            "sourceField": "/containers/cna/affected/5",
            "excerpt": "{\"product\":\"Windows Server, version 1909 (Server Core installation)\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E8",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0986.json",
            "sourceField": "/containers/cna/affected/6",
            "excerpt": "{\"product\":\"Windows 10 Version 1903 for 32-bit Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E9",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0986.json",
            "sourceField": "/containers/cna/affected/7",
            "excerpt": "{\"product\":\"Windows 10 Version 1903 for x64-based Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E10",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0986.json",
            "sourceField": "/containers/cna/affected/8",
            "excerpt": "{\"product\":\"Windows 10 Version 1903 for ARM64-based Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E11",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0986.json",
            "sourceField": "/containers/cna/affected/9",
            "excerpt": "{\"product\":\"Windows Server, version 1903 (Server Core installation)\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E12",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0986.json",
            "sourceField": "/containers/cna/affected/10",
            "excerpt": "{\"product\":\"Windows 10 Version 2004 for 32-bit Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E13",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0986.json",
            "sourceField": "/containers/cna/affected/11",
            "excerpt": "{\"product\":\"Windows Server, version 2004 (Server Core installation)\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E14",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0986.json",
            "sourceField": "/containers/cna/affected/12",
            "excerpt": "{\"product\":\"Windows 10 Version 2004 for ARM64-based Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E15",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/0xxx/CVE-2020-0986.json",
            "sourceField": "/containers/cna/affected/13",
            "excerpt": "{\"product\":\"Windows 10 Version 2004 for x64-based Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E16",
            "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-0986",
            "sourceField": "/sourceAction",
            "excerpt": "Apply updates per vendor instructions.",
            "language": null
          },
          {
            "id": "E17",
            "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-0986",
            "sourceField": "/exploitStatus",
            "excerpt": "{\"id\":\"CVE-2020-0986\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}",
            "language": "en",
            "representation": "normalized_feed_field"
          }
        ],
        "supportRequest": "件名：CVE-2020-0986（Windows / Windows Server / Windows 10 Version 1909 for 32-bit Systems / Windows 10 Version 1909 for x64-based Systems / Windows 10 Version 1909 for ARM64-based Systems / Windows Server, version 1909 (Server Core installation) / Windows 10 Version 190）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Windows 10 の 1803、1809、1709、1607、10（全体）の 32-bit、x64、ARM64 系統が影響を受けます。\n・Windows 8.1 の 32-bit および x64 系統が影響を受けます。\n・Windows Server の 1803（Core インストール）、2019、2019（Core インストール）、2016、2016（Core インストール）、2012、2012（Core インストール）、2012 R2、2012 R2（Core インストール）が影響を受けます。\n・Windows 10 Version 1909 の 32-bit、x64、ARM64 系統が影響を受けます（バージョン未指定）。\n・Windows Server, version 1909（Server Core インストール）が影響を受けます（バージョン未指定）。\n・Windows 10 Version 1903 の 32-bit、x64、ARM64 系統が影響を受けます（バージョン未指定）。\n・Windows Server, version 1903（Server Core インストール）が影響を受けます（バージョン未指定）。\n・Windows 10 Version 2004 の 32-bit、x64、ARM64 系統が影響を受けます（バージョン未指定）。\n・公式の対象表：Microsoft / Windows。影響ありとして記載：10 for 32-bit Systems。影響ありとして記載：10 for x64-based Systems。影響ありとして記載：8.1 for 32-bit systems。影響ありとして記載：8.1 for x64-based systems。影響ありとして記載：RT 8.1。\n・公式の対象表：Microsoft / Windows Server。影響ありとして記載：version 1803  (Core Installation)。影響ありとして記載：2019。影響ありとして記載：2019  (Core installation)。影響ありとして記載：2016。影響ありとして記載：2016  (Core installation)。影響ありとして記載：2012。影響ありとして記載：2012 (Core installation)。影響ありとして記載：2012 R2。影響ありとして記載：2012 R2 (Core installation)。\n・公式の対象表：Microsoft / Windows 10 Version 1909 for 32-bit Systems。影響ありとして記載：具体的な版番号の記載なし。\n・公式の対象表：Microsoft / Windows 10 Version 1909 for x64-based Systems。影響ありとして記載：具体的な版番号の記載なし。\n・公式の対象表：Microsoft / Windows 10 Version 1909 for ARM64-based Systems。影響ありとして記載：具体的な版番号の記載なし。\n・公式の対象表：Microsoft / Windows Server, version 1909 (Server Core installation)。影響ありとして記載：具体的な版番号の記載なし。\n・公式の対象表：Microsoft / Windows 10 Version 1903 for 32-bit Systems。影響ありとして記載：具体的な版番号の記載なし。\n・公式の対象表：Microsoft / Windows 10 Version 1903 for x64-based Systems。影響ありとして記載：具体的な版番号の記載なし。\n・公式の対象表：Microsoft / Windows 10 Version 1903 for ARM64-based Systems。影響ありとして記載：具体的な版番号の記載なし。\n・公式の対象表：Microsoft / Windows Server, version 1903 (Server Core installation)。影響ありとして記載：具体的な版番号の記載なし。\n・公式の対象表：Microsoft / Windows 10 Version 2004 for 32-bit Systems。影響ありとして記載：具体的な版番号の記載なし。\n・公式の対象表：Microsoft / Windows Server, version 2004 (Server Core installation)。影響ありとして記載：具体的な版番号の記載なし。\n・公式の対象表：Microsoft / Windows 10 Version 2004 for ARM64-based Systems。影響ありとして記載：具体的な版番号の記載なし。\n・公式の対象表：Microsoft / Windows 10 Version 2004 for x64-based Systems。影響ありとして記載：具体的な版番号の記載なし。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2020-0986",
        "publicationCheckVersion": "2026-10-23.1",
        "sourceNotices": [],
        "automation": {
          "status": "ready",
          "lastAttempt": "2026-10-23T03:47:43.415Z",
          "lastSuccess": "2026-10-23T03:47:43.415Z",
          "sourceCheckedAt": "2026-10-23T02:43:09.771Z",
          "errorCode": null
        },
        "glossary": []
      }
    },
    {
      "id": "CVE-2020-1020",
      "aliases": [],
      "title": "Windows / Windows Server / Windows 10 Version 1909 for 32-bit Systems / Windows 10 Version 1909 for x64-based Systems / Windows 10 Version 1909 for ARM64-based Systems / Windows Server, version 1909 (Server Core installation) / Windows 10 Version 190：コード実行",
      "summary": "Microsoft Windows の Windows Adobe Type Manager Library が特別に細工されたマルチマスターフォント（Adobe Type 1 PostScript 形式）を正しく処理しないため、リモートコード実行の脆弱性が存在します。Windows 10 以外のすべてのシステムで、攻撃者がこの脆弱性を利用するとリモートでコードを実行できる可能性があります。この CVE は CVE-2020-0938 とは別です。",
      "risk": "攻撃者が脆弱性を利用すると、対象のサーバーや機器で攻撃者のコードを実行させられる可能性があります。",
      "product": "Windows / Windows Server / Windows 10 Version 1909 for 32-bit Systems / Windows 10 Version 1909 for x64-based Systems / Windows 10 Version 1909 for ARM64-based Systems / Windows Server, version 1909 (Server Core installation) / Windows 10 Version 190",
      "category": "windows",
      "component": "package",
      "severity": "unknown",
      "cvss": null,
      "cvssVersion": null,
      "cvssSource": "microsoft",
      "cvssVector": null,
      "affected": [
        {
          "product": "Windows",
          "range": "10 Version 1803 for 32-bit Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1803 for x64-based Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1803 for ARM64-based Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1809 for 32-bit Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1809 for x64-based Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1809 for ARM64-based Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1709 for 32-bit Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1709 for x64-based Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1709 for ARM64-based Systems"
        },
        {
          "product": "Windows",
          "range": "10 for 32-bit Systems"
        },
        {
          "product": "Windows",
          "range": "10 for x64-based Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1607 for 32-bit Systems"
        },
        {
          "product": "Windows",
          "range": "10 Version 1607 for x64-based Systems"
        },
        {
          "product": "Windows",
          "range": "7 for 32-bit Systems Service Pack 1"
        },
        {
          "product": "Windows",
          "range": "7 for x64-based Systems Service Pack 1"
        },
        {
          "product": "Windows",
          "range": "8.1 for 32-bit systems"
        },
        {
          "product": "Windows",
          "range": "8.1 for x64-based systems"
        },
        {
          "product": "Windows",
          "range": "RT 8.1"
        },
        {
          "product": "Windows Server",
          "range": "version 1803  (Core Installation)"
        },
        {
          "product": "Windows Server",
          "range": "2019"
        },
        {
          "product": "Windows Server",
          "range": "2019  (Core installation)"
        },
        {
          "product": "Windows Server",
          "range": "2016"
        },
        {
          "product": "Windows Server",
          "range": "2016  (Core installation)"
        },
        {
          "product": "Windows Server",
          "range": "2008 for 32-bit Systems Service Pack 2"
        },
        {
          "product": "Windows Server",
          "range": "2008 for 32-bit Systems Service Pack 2 (Core installation)"
        },
        {
          "product": "Windows Server",
          "range": "2008 for Itanium-Based Systems Service Pack 2"
        },
        {
          "product": "Windows Server",
          "range": "2008 for x64-based Systems Service Pack 2"
        },
        {
          "product": "Windows Server",
          "range": "2008 for x64-based Systems Service Pack 2 (Core installation)"
        },
        {
          "product": "Windows Server",
          "range": "2008 R2 for Itanium-Based Systems Service Pack 1"
        },
        {
          "product": "Windows Server",
          "range": "2008 R2 for x64-based Systems Service Pack 1"
        },
        {
          "product": "Windows Server",
          "range": "2008 R2 for x64-based Systems Service Pack 1 (Core installation)"
        },
        {
          "product": "Windows Server",
          "range": "2012"
        },
        {
          "product": "Windows Server",
          "range": "2012 (Core installation)"
        },
        {
          "product": "Windows Server",
          "range": "2012 R2"
        },
        {
          "product": "Windows Server",
          "range": "2012 R2 (Core installation)"
        },
        {
          "product": "Windows 10 Version 1909 for 32-bit Systems",
          "range": "unspecified"
        },
        {
          "product": "Windows 10 Version 1909 for x64-based Systems",
          "range": "unspecified"
        },
        {
          "product": "Windows 10 Version 1909 for ARM64-based Systems",
          "range": "unspecified"
        },
        {
          "product": "Windows Server, version 1909 (Server Core installation)",
          "range": "unspecified"
        },
        {
          "product": "Windows 10 Version 1903 for 32-bit Systems",
          "range": "unspecified"
        },
        {
          "product": "Windows 10 Version 1903 for x64-based Systems",
          "range": "unspecified"
        },
        {
          "product": "Windows 10 Version 1903 for ARM64-based Systems",
          "range": "unspecified"
        },
        {
          "product": "Windows Server, version 1903 (Server Core installation)",
          "range": "unspecified"
        }
      ],
      "fixed": [],
      "steps": [
        "ベンダーの指示に従って更新を適用する。",
        "「CVE-2020-1020」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
        "Windows 11は「設定」→「Windows Update」→「更新プログラムのチェック」を開き、提供された更新を適用します。再起動を求められたら完了させます。会社管理のPC、Windows Server、サポート外の版は管理担当者に適用する修正番号と配布予定を確認してください。"
      ],
      "references": [
        {
          "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1020.json",
          "label": "CVE：microsoft"
        },
        {
          "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-1020",
          "label": "CISA KEV（悪用確認）"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-1020",
          "label": "CVE公式レコード"
        },
        {
          "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1020",
          "label": "CVE掲載の参考情報"
        },
        {
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1020",
          "label": "CISAが示す関連情報"
        },
        {
          "url": "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device",
          "label": "Microsoft公式：Windowsの情報を調べる"
        },
        {
          "url": "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates",
          "label": "Microsoft公式：Windows Updateの操作"
        }
      ],
      "publishedAt": "2020-04-15T15:13:27.000Z",
      "modifiedAt": "2025-10-21T23:35:46.197Z",
      "fetchedAt": "2026-10-23T02:43:09.951Z",
      "exploitStatus": "confirmed",
      "sources": [
        "CVE",
        "CISA KEV"
      ],
      "originalText": "A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted multi-master font - Adobe Type 1 PostScript format.For all systems except Windows 10, an attacker who successfully exploited the vulnerability could execute code remotely, aka 'Adobe Font Manager Library Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0938.",
      "sourceTitle": "",
      "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。",
      "state": "published",
      "affectedDetails": [
        {
          "product": "Windows",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "10 Version 1803 for 32-bit Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1803 for x64-based Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1803 for ARM64-based Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1809 for 32-bit Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1809 for x64-based Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1809 for ARM64-based Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1709 for 32-bit Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1709 for x64-based Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1709 for ARM64-based Systems"
            },
            {
              "status": "affected",
              "version": "10 for 32-bit Systems"
            },
            {
              "status": "affected",
              "version": "10 for x64-based Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1607 for 32-bit Systems"
            },
            {
              "status": "affected",
              "version": "10 Version 1607 for x64-based Systems"
            },
            {
              "status": "affected",
              "version": "7 for 32-bit Systems Service Pack 1"
            },
            {
              "status": "affected",
              "version": "7 for x64-based Systems Service Pack 1"
            },
            {
              "status": "affected",
              "version": "8.1 for 32-bit systems"
            },
            {
              "status": "affected",
              "version": "8.1 for x64-based systems"
            },
            {
              "status": "affected",
              "version": "RT 8.1"
            }
          ]
        },
        {
          "product": "Windows Server",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "version 1803  (Core Installation)"
            },
            {
              "status": "affected",
              "version": "2019"
            },
            {
              "status": "affected",
              "version": "2019  (Core installation)"
            },
            {
              "status": "affected",
              "version": "2016"
            },
            {
              "status": "affected",
              "version": "2016  (Core installation)"
            },
            {
              "status": "affected",
              "version": "2008 for 32-bit Systems Service Pack 2"
            },
            {
              "status": "affected",
              "version": "2008 for 32-bit Systems Service Pack 2 (Core installation)"
            },
            {
              "status": "affected",
              "version": "2008 for Itanium-Based Systems Service Pack 2"
            },
            {
              "status": "affected",
              "version": "2008 for x64-based Systems Service Pack 2"
            },
            {
              "status": "affected",
              "version": "2008 for x64-based Systems Service Pack 2 (Core installation)"
            },
            {
              "status": "affected",
              "version": "2008 R2 for Itanium-Based Systems Service Pack 1"
            },
            {
              "status": "affected",
              "version": "2008 R2 for x64-based Systems Service Pack 1"
            },
            {
              "status": "affected",
              "version": "2008 R2 for x64-based Systems Service Pack 1 (Core installation)"
            },
            {
              "status": "affected",
              "version": "2012"
            },
            {
              "status": "affected",
              "version": "2012 (Core installation)"
            },
            {
              "status": "affected",
              "version": "2012 R2"
            },
            {
              "status": "affected",
              "version": "2012 R2 (Core installation)"
            }
          ]
        },
        {
          "product": "Windows 10 Version 1909 for 32-bit Systems",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified"
            }
          ]
        },
        {
          "product": "Windows 10 Version 1909 for x64-based Systems",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified"
            }
          ]
        },
        {
          "product": "Windows 10 Version 1909 for ARM64-based Systems",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified"
            }
          ]
        },
        {
          "product": "Windows Server, version 1909 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified"
            }
          ]
        },
        {
          "product": "Windows 10 Version 1903 for 32-bit Systems",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified"
            }
          ]
        },
        {
          "product": "Windows 10 Version 1903 for x64-based Systems",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified"
            }
          ]
        },
        {
          "product": "Windows 10 Version 1903 for ARM64-based Systems",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified"
            }
          ]
        },
        {
          "product": "Windows Server, version 1903 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified"
            }
          ]
        }
      ],
      "officialEvidence": {
        "schemaVersion": "1.0",
        "id": "CVE-2020-1020",
        "sourceType": "CVE",
        "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1020.json",
        "fetchedAt": "2026-10-23T02:43:09.951Z",
        "publishedAt": "2020-04-15T15:13:27.000Z",
        "modifiedAt": "2025-10-21T23:35:46.197Z",
        "state": "published",
        "provider": "microsoft",
        "title": "",
        "descriptions": [
          {
            "lang": "en",
            "value": "A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted multi-master font - Adobe Type 1 PostScript format.For all systems except Windows 10, an attacker who successfully exploited the vulnerability could execute code remotely, aka 'Adobe Font Manager Library Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0938.",
            "sourcePath": "/containers/cna/descriptions/0/value"
          }
        ],
        "affected": [
          {
            "vendor": "Microsoft",
            "product": "Windows",
            "sourcePath": "/containers/cna/affected/0",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/0/versions/0",
                "version": "10 Version 1803 for 32-bit Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/1",
                "version": "10 Version 1803 for x64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/2",
                "version": "10 Version 1803 for ARM64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/3",
                "version": "10 Version 1809 for 32-bit Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/4",
                "version": "10 Version 1809 for x64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/5",
                "version": "10 Version 1809 for ARM64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/6",
                "version": "10 Version 1709 for 32-bit Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/7",
                "version": "10 Version 1709 for x64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/8",
                "version": "10 Version 1709 for ARM64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/9",
                "version": "10 for 32-bit Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/10",
                "version": "10 for x64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/11",
                "version": "10 Version 1607 for 32-bit Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/12",
                "version": "10 Version 1607 for x64-based Systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/13",
                "version": "7 for 32-bit Systems Service Pack 1",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/14",
                "version": "7 for x64-based Systems Service Pack 1",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/15",
                "version": "8.1 for 32-bit systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/16",
                "version": "8.1 for x64-based systems",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/17",
                "version": "RT 8.1",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server",
            "sourcePath": "/containers/cna/affected/1",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/1/versions/0",
                "version": "version 1803  (Core Installation)",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/1",
                "version": "2019",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/2",
                "version": "2019  (Core installation)",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/3",
                "version": "2016",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/4",
                "version": "2016  (Core installation)",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/5",
                "version": "2008 for 32-bit Systems Service Pack 2",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/6",
                "version": "2008 for 32-bit Systems Service Pack 2 (Core installation)",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/7",
                "version": "2008 for Itanium-Based Systems Service Pack 2",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/8",
                "version": "2008 for x64-based Systems Service Pack 2",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/9",
                "version": "2008 for x64-based Systems Service Pack 2 (Core installation)",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/10",
                "version": "2008 R2 for Itanium-Based Systems Service Pack 1",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/11",
                "version": "2008 R2 for x64-based Systems Service Pack 1",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/12",
                "version": "2008 R2 for x64-based Systems Service Pack 1 (Core installation)",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/13",
                "version": "2012",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/14",
                "version": "2012 (Core installation)",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/15",
                "version": "2012 R2",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/1/versions/16",
                "version": "2012 R2 (Core installation)",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 1909 for 32-bit Systems",
            "sourcePath": "/containers/cna/affected/2",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/2/versions/0",
                "version": "unspecified",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 1909 for x64-based Systems",
            "sourcePath": "/containers/cna/affected/3",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/3/versions/0",
                "version": "unspecified",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 1909 for ARM64-based Systems",
            "sourcePath": "/containers/cna/affected/4",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/4/versions/0",
                "version": "unspecified",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server, version 1909 (Server Core installation)",
            "sourcePath": "/containers/cna/affected/5",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/5/versions/0",
                "version": "unspecified",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 1903 for 32-bit Systems",
            "sourcePath": "/containers/cna/affected/6",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/6/versions/0",
                "version": "unspecified",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 1903 for x64-based Systems",
            "sourcePath": "/containers/cna/affected/7",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/7/versions/0",
                "version": "unspecified",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 1903 for ARM64-based Systems",
            "sourcePath": "/containers/cna/affected/8",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/8/versions/0",
                "version": "unspecified",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server, version 1903 (Server Core installation)",
            "sourcePath": "/containers/cna/affected/9",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/9/versions/0",
                "version": "unspecified",
                "status": "affected"
              }
            ]
          }
        ],
        "solutions": [],
        "workarounds": [],
        "exploits": [],
        "rejectedReasons": [],
        "problemTypes": [
          {
            "cweId": "",
            "lang": "en",
            "description": "Remote Code Execution",
            "sourcePath": "/containers/cna/problemTypes/0/descriptions/0"
          }
        ],
        "metrics": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "provider": "CISA-ADP",
            "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1"
          }
        ],
        "references": [
          {
            "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1020",
            "label": "CVE",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/0"
          },
          {
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-1020",
            "label": "CISA-ADP",
            "tags": [
              "government-resource"
            ],
            "provider": "CISA-ADP",
            "sourcePath": "/containers/adp/1/references/0"
          }
        ],
        "snippets": [
          {
            "evidenceId": "official:/containers/cna/affected/0",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1020.json",
            "sourcePath": "/containers/cna/affected/0",
            "text": "{\"product\":\"Windows\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"10 Version 1803 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1803 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1803 for ARM64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1809 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1809 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1809 for ARM64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1709 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1709 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1709 for ARM64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1607 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1607 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"7 for 32-bit Systems Service Pack 1\"},{\"status\":\"affected\",\"version\":\"7 for x64-based Systems Service Pack 1\"},{\"status\":\"affected\",\"version\":\"8.1 for 32-bit systems\"},{\"status\":\"affected\",\"version\":\"8.1 for x64-based systems\"},{\"status\":\"affected\",\"version\":\"RT 8.1\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1020.json",
            "sourcePath": "/containers/cna/affected/1",
            "text": "{\"product\":\"Windows Server\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"version 1803  (Core Installation)\"},{\"status\":\"affected\",\"version\":\"2019\"},{\"status\":\"affected\",\"version\":\"2019  (Core installation)\"},{\"status\":\"affected\",\"version\":\"2016\"},{\"status\":\"affected\",\"version\":\"2016  (Core installation)\"},{\"status\":\"affected\",\"version\":\"2008 for 32-bit Systems Service Pack 2\"},{\"status\":\"affected\",\"version\":\"2008 for 32-bit Systems Service Pack 2 (Core installation)\"},{\"status\":\"affected\",\"version\":\"2008 for Itanium-Based Systems Service Pack 2\"},{\"status\":\"affected\",\"version\":\"2008 for x64-based Systems Service Pack 2\"},{\"status\":\"affected\",\"version\":\"2008 for x64-based Systems Service Pack 2 (Core installation)\"},{\"status\":\"affected\",\"version\":\"2008 R2 for Itanium-Based Systems Service Pack 1\"},{\"status\":\"affected\",\"version\":\"2008 R2 for x64-based Systems Service Pack 1\"},{\"status\":\"affected\",\"version\":\"2008 R2 for x64-based Systems Service Pack 1 (Core installation)\"},{\"status\":\"affected\",\"version\":\"2012\"},{\"status\":\"affected\",\"version\":\"2012 (Core installation)\"},{\"status\":\"affected\",\"version\":\"2012 R2\"},{\"status\":\"affected\",\"version\":\"2012 R2 (Core installation)\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/2",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1020.json",
            "sourcePath": "/containers/cna/affected/2",
            "text": "{\"product\":\"Windows 10 Version 1909 for 32-bit Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/3",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1020.json",
            "sourcePath": "/containers/cna/affected/3",
            "text": "{\"product\":\"Windows 10 Version 1909 for x64-based Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/4",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1020.json",
            "sourcePath": "/containers/cna/affected/4",
            "text": "{\"product\":\"Windows 10 Version 1909 for ARM64-based Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/5",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1020.json",
            "sourcePath": "/containers/cna/affected/5",
            "text": "{\"product\":\"Windows Server, version 1909 (Server Core installation)\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/6",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1020.json",
            "sourcePath": "/containers/cna/affected/6",
            "text": "{\"product\":\"Windows 10 Version 1903 for 32-bit Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/7",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1020.json",
            "sourcePath": "/containers/cna/affected/7",
            "text": "{\"product\":\"Windows 10 Version 1903 for x64-based Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/8",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1020.json",
            "sourcePath": "/containers/cna/affected/8",
            "text": "{\"product\":\"Windows 10 Version 1903 for ARM64-based Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/9",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1020.json",
            "sourcePath": "/containers/cna/affected/9",
            "text": "{\"product\":\"Windows Server, version 1903 (Server Core installation)\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/descriptions/0/value",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1020.json",
            "sourcePath": "/containers/cna/descriptions/0/value",
            "text": "A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted multi-master font - Adobe Type 1 PostScript format.For all systems except Windows 10, an attacker who successfully exploited the vulnerability could execute code remotely, aka 'Adobe Font Manager Library Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0938.",
            "truncated": false,
            "representation": "source_excerpt"
          },
          {
            "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1020.json",
            "sourcePath": "/containers/cna/problemTypes/0/descriptions/0",
            "text": "{\"description\":\"Remote Code Execution\",\"lang\":\"en\",\"type\":\"text\"}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/adp/1/metrics/0/cvssV3_1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1020.json",
            "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1",
            "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":8.8,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"REQUIRED\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"confidentialityImpact\":\"HIGH\"}",
            "truncated": false,
            "representation": "source_json"
          }
        ],
        "limits": {
          "completeness": "official_record",
          "truncatedFields": [],
          "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。"
        }
      },
      "sourceSnapshots": [
        {
          "source": "CVE",
          "modifiedAt": "2025-10-21T23:35:46.197Z",
          "fetchedAt": "2026-10-23T02:43:09.951Z",
          "state": "published"
        },
        {
          "source": "CISA KEV",
          "modifiedAt": "2021-11-03T00:00:00.000Z",
          "fetchedAt": "2026-10-23T02:17:50.489Z",
          "state": "published"
        }
      ],
      "sourceAction": "Apply updates per vendor instructions.",
      "sourceSummary": "Windows / Windows Server / Windows 10 Version 1909 for 32-bit Systems / Windows 10 Version 1909 for x64-based Systems / Windows 10 Version 1909 for ARM64-based Systems / Windows Server, version 1909 (Server Core installation) / Windows 10 Version 190にコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。",
      "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。",
      "guidance": {
        "schemaVersion": "1.0",
        "method": "automatic",
        "reviewedAt": null,
        "reviewState": "current",
        "generatedAt": "2026-10-23T03:47:50.069Z",
        "generatorVersion": "2026-10-23.3",
        "sourceFingerprint": "844e5201991333955f2088a217795bdb271a6cc5bef479b514321fbbbcc1e16f",
        "sourceModifiedAt": "2025-10-21T23:35:46.197Z",
        "model": "@cf/openai/gpt-oss-120b",
        "verificationMethod": "exact_source_excerpt_and_independent_semantic_check",
        "summary": "Microsoft Windows の Windows Adobe Type Manager Library が特別に細工されたマルチマスターフォント（Adobe Type 1 PostScript 形式）を正しく処理しないため、リモートコード実行の脆弱性が存在します。Windows 10 以外のすべてのシステムで、攻撃者がこの脆弱性を利用するとリモートでコードを実行できる可能性があります。この CVE は CVE-2020-0938 とは別です。",
        "risk": "攻撃者が脆弱性を利用すると、対象のサーバーや機器で攻撃者のコードを実行させられる可能性があります。",
        "summaryEvidenceIds": [
          "E1"
        ],
        "riskEvidenceIds": [
          "E1"
        ],
        "applicability": [
          {
            "text": "Windows 10 の以下のバージョンが影響を受ける: 1803（32ビット、x64、ARM64）、1809（32ビット、x64、ARM64）、1709（32ビット、x64、ARM64）、1607（32ビット、x64）、および全般的な 10（32ビット、x64）",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1020.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "Windows 7（32ビット、x64） Service Pack 1 が影響を受ける",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1020.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "Windows 8.1（32ビット、x64） が影響を受ける",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1020.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "Windows RT 8.1 が影響を受ける",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1020.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "Windows Server の以下のバージョンが影響を受ける: 1803（Core インストール）、2019、2019（Core インストール）、2016、2016（Core インストール）、2008（32ビット SP2、Core、Itanium SP2、x64 SP2、x64 Core）、2008 R2（Itanium SP1、x64 SP1、x64 Core）、2012、2012（Core インストール）、2012 R2、2012 R2（Core インストール）",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1020.json"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "Windows 10 Version 1909（32ビット、x64、ARM64）が影響を受ける",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1020.json"
            ],
            "evidenceIds": [
              "E4",
              "E5",
              "E6"
            ]
          },
          {
            "text": "Windows Server, version 1909（Server Core インストール）が影響を受ける",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1020.json"
            ],
            "evidenceIds": [
              "E7"
            ]
          },
          {
            "text": "Windows 10 Version 1903（32ビット、x64、ARM64）が影響を受ける",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1020.json"
            ],
            "evidenceIds": [
              "E8",
              "E9",
              "E10"
            ]
          },
          {
            "text": "Windows Server, version 1903（Server Core インストール）が影響を受ける",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1020.json"
            ],
            "evidenceIds": [
              "E11"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows。影響ありとして記載：10 for 32-bit Systems。影響ありとして記載：10 for x64-based Systems。影響ありとして記載：8.1 for 32-bit systems。影響ありとして記載：8.1 for x64-based systems。影響ありとして記載：RT 8.1。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1020.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server。影響ありとして記載：version 1803  (Core Installation)。影響ありとして記載：2019。影響ありとして記載：2019  (Core installation)。影響ありとして記載：2016。影響ありとして記載：2016  (Core installation)。影響ありとして記載：2012。影響ありとして記載：2012 (Core installation)。影響ありとして記載：2012 R2。影響ありとして記載：2012 R2 (Core installation)。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1020.json"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 1909 for 32-bit Systems。影響ありとして記載：具体的な版番号の記載なし。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1020.json"
            ],
            "evidenceIds": [
              "E4"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 1909 for x64-based Systems。影響ありとして記載：具体的な版番号の記載なし。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1020.json"
            ],
            "evidenceIds": [
              "E5"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 1909 for ARM64-based Systems。影響ありとして記載：具体的な版番号の記載なし。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1020.json"
            ],
            "evidenceIds": [
              "E6"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server, version 1909 (Server Core installation)。影響ありとして記載：具体的な版番号の記載なし。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1020.json"
            ],
            "evidenceIds": [
              "E7"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 1903 for 32-bit Systems。影響ありとして記載：具体的な版番号の記載なし。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1020.json"
            ],
            "evidenceIds": [
              "E8"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 1903 for x64-based Systems。影響ありとして記載：具体的な版番号の記載なし。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1020.json"
            ],
            "evidenceIds": [
              "E9"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 1903 for ARM64-based Systems。影響ありとして記載：具体的な版番号の記載なし。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1020.json"
            ],
            "evidenceIds": [
              "E10"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server, version 1903 (Server Core installation)。影響ありとして記載：具体的な版番号の記載なし。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1020.json"
            ],
            "evidenceIds": [
              "E11"
            ]
          },
          {
            "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。",
            "kind": "fact",
            "sourceUrls": [
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-1020"
            ],
            "evidenceIds": [
              "E13"
            ]
          }
        ],
        "versionChecks": [
          {
            "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1020.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "「スタート」→「設定」→「システム」→「バージョン情報」を開き、Windowsのエディション・バージョン・OSビルドを控えます。会社のPCやサーバーは、この情報とCVE番号を管理担当者へ渡してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device"
            ]
          }
        ],
        "actions": [
          {
            "text": "ベンダーの指示に従って更新を適用する。",
            "kind": "fix",
            "sourceUrls": [
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-1020"
            ],
            "evidenceIds": [
              "E12"
            ]
          },
          {
            "text": "「CVE-2020-1020」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cve.org/CVERecord?id=CVE-2020-1020",
              "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1020",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-1020",
              "https://nvd.nist.gov/vuln/detail/CVE-2020-1020"
            ]
          },
          {
            "text": "Windows 11は「設定」→「Windows Update」→「更新プログラムのチェック」を開き、提供された更新を適用します。再起動を求められたら完了させます。会社管理のPC、Windows Server、サポート外の版は管理担当者に適用する修正番号と配布予定を確認してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates"
            ]
          }
        ],
        "temporaryMitigations": [
          {
            "text": "すぐ更新できない場合は、CVE番号、Windowsの版、業務で必要な機能を管理担当者に伝え、修正までの利用方法と更新予定を決めてください。すべてのWindowsの問題に同じ回避策が使えるわけではありません。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates",
              "https://www.cve.org/CVERecord?id=CVE-2020-1020",
              "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1020",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-1020",
              "https://nvd.nist.gov/vuln/detail/CVE-2020-1020"
            ]
          }
        ],
        "verification": [
          {
            "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。",
            "kind": "procedure",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1020.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "再起動後にWindows Updateを開き直して失敗・再起動待ちがないか確認し、管理担当者にこのCVEに対応する修正の適用結果を確認してもらってください。「最新の状態」と出ても、別製品の更新やサポート外の版の修正を保証するものではありません。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates"
            ]
          }
        ],
        "unknowns": [
          "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。",
          "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。"
        ],
        "sources": [
          {
            "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1020.json",
            "label": "CVE：microsoft"
          },
          {
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-1020",
            "label": "CISA KEV（悪用確認）"
          },
          {
            "url": "https://www.cve.org/CVERecord?id=CVE-2020-1020",
            "label": "CVE公式レコード"
          },
          {
            "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1020",
            "label": "CVE掲載の参考情報"
          },
          {
            "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1020",
            "label": "CISAが示す関連情報"
          },
          {
            "url": "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device",
            "label": "Microsoft公式：Windowsの情報を調べる"
          },
          {
            "url": "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates",
            "label": "Microsoft公式：Windows Updateの操作"
          }
        ],
        "evidence": [
          {
            "id": "E1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1020.json",
            "sourceField": "/containers/cna/descriptions/0/value",
            "excerpt": "A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted multi-master font - Adobe Type 1 PostScript format.For all systems except Windows 10, an attacker who successfully exploited the vulnerability could execute code remotely, aka 'Adobe Font Manager Library Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0938.",
            "language": "en",
            "representation": "source_excerpt"
          },
          {
            "id": "E2",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1020.json",
            "sourceField": "/containers/cna/affected/0",
            "excerpt": "{\"product\":\"Windows\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"10 Version 1803 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1803 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1803 for ARM64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1809 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1809 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1809 for ARM64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1709 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1709 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1709 for ARM64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1607 for 32-bit Systems\"},{\"status\":\"affected\",\"version\":\"10 Version 1607 for x64-based Systems\"},{\"status\":\"affected\",\"version\":\"7 for 32-bit Systems Service Pack 1\"},{\"status\":\"affected\",\"version\":\"7 for x64-based Systems Service Pack 1\"},{\"status\":\"affected\",\"version\":\"8.1 for 32-bit systems\"},{\"status\":\"affected\",\"version\":\"8.1 for x64-based systems\"},{\"status\":\"affected\",\"version\":\"RT 8.1\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E3",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1020.json",
            "sourceField": "/containers/cna/affected/1",
            "excerpt": "{\"product\":\"Windows Server\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"version 1803  (Core Installation)\"},{\"status\":\"affected\",\"version\":\"2019\"},{\"status\":\"affected\",\"version\":\"2019  (Core installation)\"},{\"status\":\"affected\",\"version\":\"2016\"},{\"status\":\"affected\",\"version\":\"2016  (Core installation)\"},{\"status\":\"affected\",\"version\":\"2008 for 32-bit Systems Service Pack 2\"},{\"status\":\"affected\",\"version\":\"2008 for 32-bit Systems Service Pack 2 (Core installation)\"},{\"status\":\"affected\",\"version\":\"2008 for Itanium-Based Systems Service Pack 2\"},{\"status\":\"affected\",\"version\":\"2008 for x64-based Systems Service Pack 2\"},{\"status\":\"affected\",\"version\":\"2008 for x64-based Systems Service Pack 2 (Core installation)\"},{\"status\":\"affected\",\"version\":\"2008 R2 for Itanium-Based Systems Service Pack 1\"},{\"status\":\"affected\",\"version\":\"2008 R2 for x64-based Systems Service Pack 1\"},{\"status\":\"affected\",\"version\":\"2008 R2 for x64-based Systems Service Pack 1 (Core installation)\"},{\"status\":\"affected\",\"version\":\"2012\"},{\"status\":\"affected\",\"version\":\"2012 (Core installation)\"},{\"status\":\"affected\",\"version\":\"2012 R2\"},{\"status\":\"affected\",\"version\":\"2012 R2 (Core installation)\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E4",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1020.json",
            "sourceField": "/containers/cna/affected/2",
            "excerpt": "{\"product\":\"Windows 10 Version 1909 for 32-bit Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E5",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1020.json",
            "sourceField": "/containers/cna/affected/3",
            "excerpt": "{\"product\":\"Windows 10 Version 1909 for x64-based Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E6",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1020.json",
            "sourceField": "/containers/cna/affected/4",
            "excerpt": "{\"product\":\"Windows 10 Version 1909 for ARM64-based Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E7",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1020.json",
            "sourceField": "/containers/cna/affected/5",
            "excerpt": "{\"product\":\"Windows Server, version 1909 (Server Core installation)\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E8",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1020.json",
            "sourceField": "/containers/cna/affected/6",
            "excerpt": "{\"product\":\"Windows 10 Version 1903 for 32-bit Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E9",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1020.json",
            "sourceField": "/containers/cna/affected/7",
            "excerpt": "{\"product\":\"Windows 10 Version 1903 for x64-based Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E10",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1020.json",
            "sourceField": "/containers/cna/affected/8",
            "excerpt": "{\"product\":\"Windows 10 Version 1903 for ARM64-based Systems\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E11",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1020.json",
            "sourceField": "/containers/cna/affected/9",
            "excerpt": "{\"product\":\"Windows Server, version 1903 (Server Core installation)\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E12",
            "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-1020",
            "sourceField": "/sourceAction",
            "excerpt": "Apply updates per vendor instructions.",
            "language": null
          },
          {
            "id": "E13",
            "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-1020",
            "sourceField": "/exploitStatus",
            "excerpt": "{\"id\":\"CVE-2020-1020\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}",
            "language": "en",
            "representation": "normalized_feed_field"
          }
        ],
        "supportRequest": "件名：CVE-2020-1020（Windows / Windows Server / Windows 10 Version 1909 for 32-bit Systems / Windows 10 Version 1909 for x64-based Systems / Windows 10 Version 1909 for ARM64-based Systems / Windows Server, version 1909 (Server Core installation) / Windows 10 Version 190）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Windows 10 の以下のバージョンが影響を受ける: 1803（32ビット、x64、ARM64）、1809（32ビット、x64、ARM64）、1709（32ビット、x64、ARM64）、1607（32ビット、x64）、および全般的な 10（32ビット、x64）\n・Windows 7（32ビット、x64） Service Pack 1 が影響を受ける\n・Windows 8.1（32ビット、x64） が影響を受ける\n・Windows RT 8.1 が影響を受ける\n・Windows Server の以下のバージョンが影響を受ける: 1803（Core インストール）、2019、2019（Core インストール）、2016、2016（Core インストール）、2008（32ビット SP2、Core、Itanium SP2、x64 SP2、x64 Core）、2008 R2（Itanium SP1、x64 SP1、x64 Core）、2012、2012（Core インストール）、2012 R2、2012 R2（Core インストール）\n・Windows 10 Version 1909（32ビット、x64、ARM64）が影響を受ける\n・Windows Server, version 1909（Server Core インストール）が影響を受ける\n・Windows 10 Version 1903（32ビット、x64、ARM64）が影響を受ける\n・Windows Server, version 1903（Server Core インストール）が影響を受ける\n・公式の対象表：Microsoft / Windows。影響ありとして記載：10 for 32-bit Systems。影響ありとして記載：10 for x64-based Systems。影響ありとして記載：8.1 for 32-bit systems。影響ありとして記載：8.1 for x64-based systems。影響ありとして記載：RT 8.1。\n・公式の対象表：Microsoft / Windows Server。影響ありとして記載：version 1803  (Core Installation)。影響ありとして記載：2019。影響ありとして記載：2019  (Core installation)。影響ありとして記載：2016。影響ありとして記載：2016  (Core installation)。影響ありとして記載：2012。影響ありとして記載：2012 (Core installation)。影響ありとして記載：2012 R2。影響ありとして記載：2012 R2 (Core installation)。\n・公式の対象表：Microsoft / Windows 10 Version 1909 for 32-bit Systems。影響ありとして記載：具体的な版番号の記載なし。\n・公式の対象表：Microsoft / Windows 10 Version 1909 for x64-based Systems。影響ありとして記載：具体的な版番号の記載なし。\n・公式の対象表：Microsoft / Windows 10 Version 1909 for ARM64-based Systems。影響ありとして記載：具体的な版番号の記載なし。\n・公式の対象表：Microsoft / Windows Server, version 1909 (Server Core installation)。影響ありとして記載：具体的な版番号の記載なし。\n・公式の対象表：Microsoft / Windows 10 Version 1903 for 32-bit Systems。影響ありとして記載：具体的な版番号の記載なし。\n・公式の対象表：Microsoft / Windows 10 Version 1903 for x64-based Systems。影響ありとして記載：具体的な版番号の記載なし。\n・公式の対象表：Microsoft / Windows 10 Version 1903 for ARM64-based Systems。影響ありとして記載：具体的な版番号の記載なし。\n・公式の対象表：Microsoft / Windows Server, version 1903 (Server Core installation)。影響ありとして記載：具体的な版番号の記載なし。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2020-1020",
        "publicationCheckVersion": "2026-10-23.1",
        "sourceNotices": [],
        "automation": {
          "status": "ready",
          "lastAttempt": "2026-10-23T03:47:50.069Z",
          "lastSuccess": "2026-10-23T03:47:50.069Z",
          "sourceCheckedAt": "2026-10-23T02:43:09.951Z",
          "errorCode": null
        },
        "glossary": [
          {
            "term": "任意のコード実行",
            "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。",
            "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html",
            "kind": "general_definition"
          }
        ]
      }
    },
    {
      "id": "CVE-2020-1054",
      "aliases": [],
      "title": "Windows 10 Version 1507 / Windows 10 Version 1607 / Windows 10 Version 1709 / Windows 10 Version 1709 for 32-bit Systems / Windows 10 Version 1803 / Windows 10 Version 1809 / Windows 10 Version 1903 for 32-bit Systems / Windows 10 Version 1903 for AR：権限の奪取",
      "summary": "Windows のカーネルモードドライバーがメモリ内のオブジェクトを正しく処理しないため、特権昇格の脆弱性が存在します。攻撃者がこの脆弱性を利用すると、カーネルモードで任意のコードを実行でき、プログラムのインストールやデータの閲覧・変更・削除、フルユーザー権限の新規アカウント作成が可能になります。攻撃を行うには、まずシステムにログオンし、続いて特別に作成したアプリケーションを実行する必要があります。更新プログラムは、カーネルモードドライバーのメモリオブジェクト処理方法を修正することでこの脆弱性に対処します。",
      "risk": "攻撃者がカーネルモードで任意のコードを実行できるため、プログラムのインストールやデータの閲覧・変更・削除、フル権限のアカウント作成が可能になる。",
      "product": "Windows 10 Version 1507 / Windows 10 Version 1607 / Windows 10 Version 1709 / Windows 10 Version 1709 for 32-bit Systems / Windows 10 Version 1803 / Windows 10 Version 1809 / Windows 10 Version 1903 for 32-bit Systems / Windows 10 Version 1903 for AR",
      "category": "windows",
      "component": "package",
      "severity": "high",
      "cvss": 7,
      "cvssVersion": "3.1",
      "cvssSource": "microsoft",
      "cvssVector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
      "affected": [
        {
          "product": "Windows 10 Version 1507",
          "range": ">= 10.0.10240.0 / < publication（環境: 32-bit Systems / x64-based Systems）"
        },
        {
          "product": "Windows 10 Version 1607",
          "range": ">= 10.0.14393.0 / < publication（環境: 32-bit Systems / x64-based Systems）"
        },
        {
          "product": "Windows 10 Version 1709",
          "range": ">= 10.0.0 / < publication（環境: ARM64-based Systems / x64-based Systems）"
        },
        {
          "product": "Windows 10 Version 1709 for 32-bit Systems",
          "range": ">= 10.0.0 / < publication（環境: 32-bit Systems）"
        },
        {
          "product": "Windows 10 Version 1803",
          "range": ">= 10.0.0 / < publication（環境: 32-bit Systems / ARM64-based Systems / x64-based Systems）"
        },
        {
          "product": "Windows 10 Version 1809",
          "range": ">= 10.0.17763.0 / < publication（環境: 32-bit Systems / x64-based Systems）"
        },
        {
          "product": "Windows 10 Version 1809",
          "range": ">= 10.0.0 / < publication（環境: ARM64-based Systems）"
        },
        {
          "product": "Windows 10 Version 1903 for 32-bit Systems",
          "range": ">= 10.0.0 / < publication"
        },
        {
          "product": "Windows 10 Version 1903 for ARM64-based Systems",
          "range": ">= 10.0.0 / < publication"
        },
        {
          "product": "Windows 10 Version 1903 for x64-based Systems",
          "range": ">= 10.0.0 / < publication"
        },
        {
          "product": "Windows 10 Version 1909",
          "range": ">= 10.0.0 / < publication（環境: 32-bit Systems / ARM64-based Systems / x64-based Systems）"
        },
        {
          "product": "Windows 7",
          "range": ">= 6.1.0 / < publication（環境: 32-bit Systems）"
        },
        {
          "product": "Windows 7 Service Pack 1",
          "range": ">= 6.1.0 / < publication（環境: x64-based Systems）"
        },
        {
          "product": "Windows 8.1",
          "range": ">= 6.3.0 / < publication（環境: 32-bit Systems / ARM64-based Systems / x64-based Systems）"
        },
        {
          "product": "Windows Server 2008 R2 Service Pack 1",
          "range": ">= 6.1.7601.0 / < publication（環境: x64-based Systems）"
        },
        {
          "product": "Windows Server 2008 R2 Service Pack 1 (Server Core installation)",
          "range": ">= 6.1.7601.0 / < publication（環境: x64-based Systems）"
        },
        {
          "product": "Windows Server 2008 Service Pack 2",
          "range": ">= 6.0.6003.0 / < publication（環境: 32-bit Systems / x64-based Systems）"
        },
        {
          "product": "Windows Server 2008 Service Pack 2 (Server Core installation)",
          "range": ">= 6.0.6003.0 / < publication（環境: 32-bit Systems / x64-based Systems）"
        },
        {
          "product": "Windows Server 2012",
          "range": ">= 6.2.9200.0 / < publication（環境: x64-based Systems）"
        },
        {
          "product": "Windows Server 2012 (Server Core installation)",
          "range": ">= 6.2.9200.0 / < publication（環境: x64-based Systems）"
        },
        {
          "product": "Windows Server 2012 R2",
          "range": ">= 6.3.9600.0 / < publication（環境: x64-based Systems）"
        },
        {
          "product": "Windows Server 2012 R2 (Server Core installation)",
          "range": ">= 6.3.9600.0 / < publication（環境: x64-based Systems）"
        },
        {
          "product": "Windows Server 2016",
          "range": ">= 10.0.14393.0 / < publication（環境: x64-based Systems）"
        },
        {
          "product": "Windows Server 2016 (Server Core installation)",
          "range": ">= 10.0.14393.0 / < publication（環境: x64-based Systems）"
        },
        {
          "product": "Windows Server 2019",
          "range": ">= 10.0.17763.0 / < publication（環境: x64-based Systems）"
        },
        {
          "product": "Windows Server 2019 (Server Core installation)",
          "range": ">= 10.0.17763.0 / < publication（環境: x64-based Systems）"
        },
        {
          "product": "Windows Server, version 1803  (Server Core Installation)",
          "range": ">= 10.0.0 / < publication（環境: x64-based Systems）"
        },
        {
          "product": "Windows Server, version 1903 (Server Core installation)",
          "range": ">= 10.0.0 / < publication（環境: x64-based Systems）"
        },
        {
          "product": "Windows Server, version 1909 (Server Core installation)",
          "range": ">= 10.0.0 / < publication（環境: x64-based Systems）"
        }
      ],
      "fixed": [],
      "steps": [
        "ベンダーの指示に従って更新プログラムを適用する。",
        "「CVE-2020-1054」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
        "Windows 11は「設定」→「Windows Update」→「更新プログラムのチェック」を開き、提供された更新を適用します。再起動を求められたら完了させます。会社管理のPC、Windows Server、サポート外の版は管理担当者に適用する修正番号と配布予定を確認してください。"
      ],
      "references": [
        {
          "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json",
          "label": "CVE：microsoft"
        },
        {
          "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-1054",
          "label": "CISA KEV（悪用確認）"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-1054",
          "label": "CVE公式レコード"
        },
        {
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-1054",
          "label": "Win32k Elevation of Privilege Vulnerability"
        },
        {
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1054",
          "label": "CISAが示す関連情報"
        },
        {
          "url": "https://www.first.org/cvss/v3.1/specification-document",
          "label": "FIRST公式：CVSS 3.1の条件の定義"
        },
        {
          "url": "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device",
          "label": "Microsoft公式：Windowsの情報を調べる"
        },
        {
          "url": "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates",
          "label": "Microsoft公式：Windows Updateの操作"
        }
      ],
      "publishedAt": "2020-05-21T22:52:50.000Z",
      "modifiedAt": "2026-10-07T17:30:41.211Z",
      "fetchedAt": "2026-10-23T03:17:49.705Z",
      "exploitStatus": "confirmed",
      "sources": [
        "CVE",
        "CISA KEV"
      ],
      "originalText": "",
      "sourceTitle": "Win32k Elevation of Privilege Vulnerability",
      "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。",
      "state": "published",
      "affectedDetails": [
        {
          "vendor": "Microsoft",
          "product": "Windows 10 Version 1507",
          "platforms": [
            "32-bit Systems",
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "10.0.10240.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows 10 Version 1607",
          "platforms": [
            "32-bit Systems",
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "10.0.14393.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows 10 Version 1709",
          "platforms": [
            "ARM64-based Systems",
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "10.0.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows 10 Version 1709 for 32-bit Systems",
          "platforms": [
            "32-bit Systems"
          ],
          "versions": [
            {
              "version": "10.0.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows 10 Version 1803",
          "platforms": [
            "32-bit Systems",
            "ARM64-based Systems",
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "10.0.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows 10 Version 1809",
          "platforms": [
            "32-bit Systems",
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "10.0.17763.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows 10 Version 1809",
          "platforms": [
            "ARM64-based Systems"
          ],
          "versions": [
            {
              "version": "10.0.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows 10 Version 1903 for 32-bit Systems",
          "versions": [
            {
              "version": "10.0.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows 10 Version 1903 for ARM64-based Systems",
          "versions": [
            {
              "version": "10.0.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows 10 Version 1903 for x64-based Systems",
          "versions": [
            {
              "version": "10.0.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows 10 Version 1909",
          "platforms": [
            "32-bit Systems",
            "ARM64-based Systems",
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "10.0.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows 7",
          "platforms": [
            "32-bit Systems"
          ],
          "versions": [
            {
              "version": "6.1.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows 7 Service Pack 1",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "6.1.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows 8.1",
          "platforms": [
            "32-bit Systems",
            "ARM64-based Systems",
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "6.3.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows Server 2008 R2 Service Pack 1",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "6.1.7601.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows Server 2008 R2 Service Pack 1 (Server Core installation)",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "6.1.7601.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows Server 2008 Service Pack 2",
          "platforms": [
            "32-bit Systems",
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "6.0.6003.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows Server 2008 Service Pack 2 (Server Core installation)",
          "platforms": [
            "32-bit Systems",
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "6.0.6003.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows Server 2012",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "6.2.9200.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows Server 2012 (Server Core installation)",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "6.2.9200.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows Server 2012 R2",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "6.3.9600.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows Server 2012 R2 (Server Core installation)",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "6.3.9600.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows Server 2016",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "10.0.14393.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows Server 2016 (Server Core installation)",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "10.0.14393.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows Server 2019",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "10.0.17763.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows Server 2019 (Server Core installation)",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "10.0.17763.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows Server, version 1803  (Server Core Installation)",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "10.0.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows Server, version 1903 (Server Core installation)",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "10.0.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows Server, version 1909 (Server Core installation)",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "10.0.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        }
      ],
      "configurationNotes": "対象環境・機能: 32-bit Systems / x64-based Systems / ARM64-based Systems。製品バージョンだけでなく、原文の利用条件を照合してください。",
      "officialEvidence": {
        "schemaVersion": "1.0",
        "id": "CVE-2020-1054",
        "sourceType": "CVE",
        "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json",
        "fetchedAt": "2026-10-23T02:43:10.050Z",
        "publishedAt": "2020-05-21T22:52:50.000Z",
        "modifiedAt": "2026-10-07T17:30:41.211Z",
        "state": "published",
        "provider": "microsoft",
        "title": "Win32k Elevation of Privilege Vulnerability",
        "descriptions": [
          {
            "lang": "en-US",
            "value": "An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.\nTo exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system.\nThe update addresses this vulnerability by correcting how the Windows kernel-mode driver handles objects in memory.",
            "sourcePath": "/containers/cna/descriptions/0/value"
          }
        ],
        "affected": [
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 1507",
            "sourcePath": "/containers/cna/affected/0",
            "platforms": [
              "32-bit Systems",
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/0/versions/0",
                "version": "10.0.10240.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 1607",
            "sourcePath": "/containers/cna/affected/1",
            "platforms": [
              "32-bit Systems",
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/1/versions/0",
                "version": "10.0.14393.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 1709",
            "sourcePath": "/containers/cna/affected/2",
            "platforms": [
              "ARM64-based Systems",
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/2/versions/0",
                "version": "10.0.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 1709 for 32-bit Systems",
            "sourcePath": "/containers/cna/affected/3",
            "platforms": [
              "32-bit Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/3/versions/0",
                "version": "10.0.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 1803",
            "sourcePath": "/containers/cna/affected/4",
            "platforms": [
              "32-bit Systems",
              "ARM64-based Systems",
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/4/versions/0",
                "version": "10.0.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 1809",
            "sourcePath": "/containers/cna/affected/5",
            "platforms": [
              "32-bit Systems",
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/5/versions/0",
                "version": "10.0.17763.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 1809",
            "sourcePath": "/containers/cna/affected/6",
            "platforms": [
              "ARM64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/6/versions/0",
                "version": "10.0.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 1903 for 32-bit Systems",
            "sourcePath": "/containers/cna/affected/7",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/7/versions/0",
                "version": "10.0.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 1903 for ARM64-based Systems",
            "sourcePath": "/containers/cna/affected/8",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/8/versions/0",
                "version": "10.0.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 1903 for x64-based Systems",
            "sourcePath": "/containers/cna/affected/9",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/9/versions/0",
                "version": "10.0.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 1909",
            "sourcePath": "/containers/cna/affected/10",
            "platforms": [
              "32-bit Systems",
              "ARM64-based Systems",
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/10/versions/0",
                "version": "10.0.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 7",
            "sourcePath": "/containers/cna/affected/11",
            "platforms": [
              "32-bit Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/11/versions/0",
                "version": "6.1.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 7 Service Pack 1",
            "sourcePath": "/containers/cna/affected/12",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/12/versions/0",
                "version": "6.1.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 8.1",
            "sourcePath": "/containers/cna/affected/13",
            "platforms": [
              "32-bit Systems",
              "ARM64-based Systems",
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/13/versions/0",
                "version": "6.3.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server 2008 R2 Service Pack 1",
            "sourcePath": "/containers/cna/affected/14",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/14/versions/0",
                "version": "6.1.7601.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server 2008 R2 Service Pack 1 (Server Core installation)",
            "sourcePath": "/containers/cna/affected/15",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/15/versions/0",
                "version": "6.1.7601.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server 2008 Service Pack 2",
            "sourcePath": "/containers/cna/affected/16",
            "platforms": [
              "32-bit Systems",
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/16/versions/0",
                "version": "6.0.6003.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server 2008 Service Pack 2 (Server Core installation)",
            "sourcePath": "/containers/cna/affected/17",
            "platforms": [
              "32-bit Systems",
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/17/versions/0",
                "version": "6.0.6003.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server 2012",
            "sourcePath": "/containers/cna/affected/18",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/18/versions/0",
                "version": "6.2.9200.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server 2012 (Server Core installation)",
            "sourcePath": "/containers/cna/affected/19",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/19/versions/0",
                "version": "6.2.9200.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server 2012 R2",
            "sourcePath": "/containers/cna/affected/20",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/20/versions/0",
                "version": "6.3.9600.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server 2012 R2 (Server Core installation)",
            "sourcePath": "/containers/cna/affected/21",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/21/versions/0",
                "version": "6.3.9600.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server 2016",
            "sourcePath": "/containers/cna/affected/22",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/22/versions/0",
                "version": "10.0.14393.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server 2016 (Server Core installation)",
            "sourcePath": "/containers/cna/affected/23",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/23/versions/0",
                "version": "10.0.14393.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server 2019",
            "sourcePath": "/containers/cna/affected/24",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/24/versions/0",
                "version": "10.0.17763.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server 2019 (Server Core installation)",
            "sourcePath": "/containers/cna/affected/25",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/25/versions/0",
                "version": "10.0.17763.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server, version 1803  (Server Core Installation)",
            "sourcePath": "/containers/cna/affected/26",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/26/versions/0",
                "version": "10.0.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server, version 1903 (Server Core installation)",
            "sourcePath": "/containers/cna/affected/27",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/27/versions/0",
                "version": "10.0.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server, version 1909 (Server Core installation)",
            "sourcePath": "/containers/cna/affected/28",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/28/versions/0",
                "version": "10.0.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          }
        ],
        "solutions": [],
        "workarounds": [],
        "exploits": [],
        "rejectedReasons": [],
        "problemTypes": [
          {
            "cweId": "",
            "lang": "en-US",
            "description": "Elevation of Privilege",
            "sourcePath": "/containers/cna/problemTypes/0/descriptions/0"
          }
        ],
        "metrics": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "provider": "microsoft",
            "sourcePath": "/containers/cna/metrics/0/cvssV3_1"
          }
        ],
        "references": [
          {
            "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-1054",
            "label": "Win32k Elevation of Privilege Vulnerability",
            "tags": [
              "vendor-advisory",
              "patch"
            ],
            "provider": "microsoft",
            "sourcePath": "/containers/cna/references/0"
          },
          {
            "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1054",
            "label": "CVE",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/0"
          },
          {
            "url": "http://packetstormsecurity.com/files/160515/Microsoft-Windows-DrawIconEx-Local-Privilege-Escalation.html",
            "label": "CVE",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/1"
          },
          {
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-1054",
            "label": "CISA-ADP",
            "tags": [
              "government-resource"
            ],
            "provider": "CISA-ADP",
            "sourcePath": "/containers/adp/1/references/0"
          }
        ],
        "snippets": [
          {
            "evidenceId": "official:/containers/cna/affected/0",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json",
            "sourcePath": "/containers/cna/affected/0",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1507\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.10240.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json",
            "sourcePath": "/containers/cna/affected/1",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1607\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/2",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json",
            "sourcePath": "/containers/cna/affected/2",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1709\",\"platforms\":[\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/3",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json",
            "sourcePath": "/containers/cna/affected/3",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1709 for 32-bit Systems\",\"platforms\":[\"32-bit Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/4",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json",
            "sourcePath": "/containers/cna/affected/4",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1803\",\"platforms\":[\"32-bit Systems\",\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/5",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json",
            "sourcePath": "/containers/cna/affected/5",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1809\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/6",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json",
            "sourcePath": "/containers/cna/affected/6",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1809\",\"platforms\":[\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/7",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json",
            "sourcePath": "/containers/cna/affected/7",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1903 for 32-bit Systems\",\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/8",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json",
            "sourcePath": "/containers/cna/affected/8",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1903 for ARM64-based Systems\",\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/9",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json",
            "sourcePath": "/containers/cna/affected/9",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1903 for x64-based Systems\",\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/10",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json",
            "sourcePath": "/containers/cna/affected/10",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1909\",\"platforms\":[\"32-bit Systems\",\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/11",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json",
            "sourcePath": "/containers/cna/affected/11",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 7\",\"platforms\":[\"32-bit Systems\"],\"versions\":[{\"version\":\"6.1.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/12",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json",
            "sourcePath": "/containers/cna/affected/12",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 7 Service Pack 1\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.1.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/13",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json",
            "sourcePath": "/containers/cna/affected/13",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 8.1\",\"platforms\":[\"32-bit Systems\",\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"6.3.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/14",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json",
            "sourcePath": "/containers/cna/affected/14",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2008 R2 Service Pack 1\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.1.7601.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/15",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json",
            "sourcePath": "/containers/cna/affected/15",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2008 R2 Service Pack 1 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.1.7601.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/16",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json",
            "sourcePath": "/containers/cna/affected/16",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2008 Service Pack 2\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"6.0.6003.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/17",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json",
            "sourcePath": "/containers/cna/affected/17",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2008 Service Pack 2 (Server Core installation)\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"6.0.6003.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/18",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json",
            "sourcePath": "/containers/cna/affected/18",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.2.9200.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/19",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json",
            "sourcePath": "/containers/cna/affected/19",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.2.9200.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/20",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json",
            "sourcePath": "/containers/cna/affected/20",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012 R2\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.3.9600.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/21",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json",
            "sourcePath": "/containers/cna/affected/21",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012 R2 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.3.9600.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/22",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json",
            "sourcePath": "/containers/cna/affected/22",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2016\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/23",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json",
            "sourcePath": "/containers/cna/affected/23",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2016 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/24",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json",
            "sourcePath": "/containers/cna/affected/24",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2019\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/25",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json",
            "sourcePath": "/containers/cna/affected/25",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2019 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/26",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json",
            "sourcePath": "/containers/cna/affected/26",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server, version 1803  (Server Core Installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/27",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json",
            "sourcePath": "/containers/cna/affected/27",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server, version 1903 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/28",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json",
            "sourcePath": "/containers/cna/affected/28",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server, version 1909 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/descriptions/0/value",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json",
            "sourcePath": "/containers/cna/descriptions/0/value",
            "text": "An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.\nTo exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system.\nThe update addresses this vulnerability by correcting how the Windows kernel-mode driver handles objects in memory.",
            "truncated": false,
            "representation": "source_excerpt"
          },
          {
            "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json",
            "sourcePath": "/containers/cna/problemTypes/0/descriptions/0",
            "text": "{\"description\":\"Elevation of Privilege\",\"lang\":\"en-US\",\"type\":\"Impact\"}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json",
            "sourcePath": "/containers/cna/metrics/0/cvssV3_1",
            "text": "{\"version\":\"3.1\",\"baseSeverity\":\"HIGH\",\"baseScore\":7,\"vectorString\":\"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C\"}",
            "truncated": false,
            "representation": "source_json"
          }
        ],
        "limits": {
          "completeness": "official_record",
          "truncatedFields": [],
          "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。"
        }
      },
      "sourceSnapshots": [
        {
          "source": "CVE",
          "modifiedAt": "2026-10-07T17:30:41.211Z",
          "fetchedAt": "2026-10-23T02:43:10.050Z",
          "state": "published"
        },
        {
          "source": "CISA KEV",
          "modifiedAt": "2021-11-03T00:00:00.000Z",
          "fetchedAt": "2026-10-23T03:17:49.705Z",
          "state": "published"
        }
      ],
      "sourceAction": "Apply updates per vendor instructions.",
      "sourceSummary": "Windows 10 Version 1507 / Windows 10 Version 1607 / Windows 10 Version 1709 / Windows 10 Version 1709 for 32-bit Systems / Windows 10 Version 1803 / Windows 10 Version 1809 / Windows 10 Version 1903 for 32-bit Systems / Windows 10 Version 1903 for ARに権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。",
      "sourceRisk": "本来与えられていない権限で、操作される可能性があります。",
      "guidance": {
        "schemaVersion": "1.0",
        "method": "automatic",
        "reviewedAt": null,
        "reviewState": "current",
        "generatedAt": "2026-10-23T03:57:57.086Z",
        "generatorVersion": "2026-10-23.3",
        "sourceFingerprint": "92d12bca6edcf7f3bd76ba25a11fe78d9b5fca30363f8dcf9b7ec4f9ddf60753",
        "sourceModifiedAt": "2026-10-07T17:30:41.211Z",
        "model": "@cf/openai/gpt-oss-120b",
        "verificationMethod": "exact_source_excerpt_and_independent_semantic_check",
        "summary": "Windows のカーネルモードドライバーがメモリ内のオブジェクトを正しく処理しないため、特権昇格の脆弱性が存在します。攻撃者がこの脆弱性を利用すると、カーネルモードで任意のコードを実行でき、プログラムのインストールやデータの閲覧・変更・削除、フルユーザー権限の新規アカウント作成が可能になります。攻撃を行うには、まずシステムにログオンし、続いて特別に作成したアプリケーションを実行する必要があります。更新プログラムは、カーネルモードドライバーのメモリオブジェクト処理方法を修正することでこの脆弱性に対処します。",
        "risk": "攻撃者がカーネルモードで任意のコードを実行できるため、プログラムのインストールやデータの閲覧・変更・削除、フル権限のアカウント作成が可能になる。",
        "summaryEvidenceIds": [
          "E1",
          "E2"
        ],
        "riskEvidenceIds": [
          "E1"
        ],
        "applicability": [
          {
            "text": "攻撃者は対象システムにログオンしている必要がある。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json"
            ],
            "evidenceIds": [
              "E1",
              "E2"
            ]
          },
          {
            "text": "攻撃者は特別に作成したアプリケーションを実行できる必要がある。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json"
            ],
            "evidenceIds": [
              "E1",
              "E2"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 1507。影響ありとして記載：10.0.10240.0以上、publication未満。対象の環境：32-bit Systems、x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 1607。影響ありとして記載：10.0.14393.0以上、publication未満。対象の環境：32-bit Systems、x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json"
            ],
            "evidenceIds": [
              "E4"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 1709。影響ありとして記載：10.0.0以上、publication未満。対象の環境：ARM64-based Systems、x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json"
            ],
            "evidenceIds": [
              "E5"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 1709 for 32-bit Systems。影響ありとして記載：10.0.0以上、publication未満。対象の環境：32-bit Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json"
            ],
            "evidenceIds": [
              "E6"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 1803。影響ありとして記載：10.0.0以上、publication未満。対象の環境：32-bit Systems、ARM64-based Systems、x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json"
            ],
            "evidenceIds": [
              "E7"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 1809。影響ありとして記載：10.0.17763.0以上、publication未満。対象の環境：32-bit Systems、x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json"
            ],
            "evidenceIds": [
              "E8"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 1809。影響ありとして記載：10.0.0以上、publication未満。対象の環境：ARM64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json"
            ],
            "evidenceIds": [
              "E9"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 1903 for 32-bit Systems。影響ありとして記載：10.0.0以上、publication未満。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json"
            ],
            "evidenceIds": [
              "E10"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 1903 for ARM64-based Systems。影響ありとして記載：10.0.0以上、publication未満。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json"
            ],
            "evidenceIds": [
              "E11"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 1903 for x64-based Systems。影響ありとして記載：10.0.0以上、publication未満。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json"
            ],
            "evidenceIds": [
              "E12"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 1909。影響ありとして記載：10.0.0以上、publication未満。対象の環境：32-bit Systems、ARM64-based Systems、x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json"
            ],
            "evidenceIds": [
              "E13"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 7。影響ありとして記載：6.1.0以上、publication未満。対象の環境：32-bit Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json"
            ],
            "evidenceIds": [
              "E14"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 7 Service Pack 1。影響ありとして記載：6.1.0以上、publication未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json"
            ],
            "evidenceIds": [
              "E15"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 8.1。影響ありとして記載：6.3.0以上、publication未満。対象の環境：32-bit Systems、ARM64-based Systems、x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json"
            ],
            "evidenceIds": [
              "E16"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server 2008 R2 Service Pack 1。影響ありとして記載：6.1.7601.0以上、publication未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json"
            ],
            "evidenceIds": [
              "E17"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server 2008 R2 Service Pack 1 (Server Core installation)。影響ありとして記載：6.1.7601.0以上、publication未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json"
            ],
            "evidenceIds": [
              "E18"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server 2008 Service Pack 2。影響ありとして記載：6.0.6003.0以上、publication未満。対象の環境：32-bit Systems、x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json"
            ],
            "evidenceIds": [
              "E19"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server 2008 Service Pack 2 (Server Core installation)。影響ありとして記載：6.0.6003.0以上、publication未満。対象の環境：32-bit Systems、x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json"
            ],
            "evidenceIds": [
              "E20"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server 2012。影響ありとして記載：6.2.9200.0以上、publication未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json"
            ],
            "evidenceIds": [
              "E21"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server 2012 (Server Core installation)。影響ありとして記載：6.2.9200.0以上、publication未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json"
            ],
            "evidenceIds": [
              "E22"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server 2012 R2。影響ありとして記載：6.3.9600.0以上、publication未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json"
            ],
            "evidenceIds": [
              "E23"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server 2012 R2 (Server Core installation)。影響ありとして記載：6.3.9600.0以上、publication未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json"
            ],
            "evidenceIds": [
              "E24"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server 2016。影響ありとして記載：10.0.14393.0以上、publication未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json"
            ],
            "evidenceIds": [
              "E25"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server 2016 (Server Core installation)。影響ありとして記載：10.0.14393.0以上、publication未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json"
            ],
            "evidenceIds": [
              "E26"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server 2019。影響ありとして記載：10.0.17763.0以上、publication未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json"
            ],
            "evidenceIds": [
              "E27"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server 2019 (Server Core installation)。影響ありとして記載：10.0.17763.0以上、publication未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json"
            ],
            "evidenceIds": [
              "E28"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server, version 1803  (Server Core Installation)。影響ありとして記載：10.0.0以上、publication未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json"
            ],
            "evidenceIds": [
              "E29"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server, version 1903 (Server Core installation)。影響ありとして記載：10.0.0以上、publication未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json"
            ],
            "evidenceIds": [
              "E30"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server, version 1909 (Server Core installation)。影響ありとして記載：10.0.0以上、publication未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json"
            ],
            "evidenceIds": [
              "E31"
            ]
          },
          {
            "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。",
            "kind": "fact",
            "sourceUrls": [
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-1054"
            ],
            "evidenceIds": [
              "E33"
            ]
          }
        ],
        "versionChecks": [
          {
            "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "「スタート」→「設定」→「システム」→「バージョン情報」を開き、Windowsのエディション・バージョン・OSビルドを控えます。会社のPCやサーバーは、この情報とCVE番号を管理担当者へ渡してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device"
            ]
          }
        ],
        "actions": [
          {
            "text": "ベンダーの指示に従って更新プログラムを適用する。",
            "kind": "fix",
            "sourceUrls": [
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-1054"
            ],
            "evidenceIds": [
              "E32"
            ]
          },
          {
            "text": "「CVE-2020-1054」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cve.org/CVERecord?id=CVE-2020-1054",
              "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-1054",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-1054",
              "https://nvd.nist.gov/vuln/detail/CVE-2020-1054"
            ]
          },
          {
            "text": "Windows 11は「設定」→「Windows Update」→「更新プログラムのチェック」を開き、提供された更新を適用します。再起動を求められたら完了させます。会社管理のPC、Windows Server、サポート外の版は管理担当者に適用する修正番号と配布予定を確認してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates"
            ]
          }
        ],
        "temporaryMitigations": [
          {
            "text": "すぐ更新できない場合は、CVE番号、Windowsの版、業務で必要な機能を管理担当者に伝え、修正までの利用方法と更新予定を決めてください。すべてのWindowsの問題に同じ回避策が使えるわけではありません。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates",
              "https://www.cve.org/CVERecord?id=CVE-2020-1054",
              "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-1054",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-1054",
              "https://nvd.nist.gov/vuln/detail/CVE-2020-1054"
            ]
          }
        ],
        "verification": [
          {
            "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。",
            "kind": "procedure",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "再起動後にWindows Updateを開き直して失敗・再起動待ちがないか確認し、管理担当者にこのCVEに対応する修正の適用結果を確認してもらってください。「最新の状態」と出ても、別製品の更新やサポート外の版の修正を保証するものではありません。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates"
            ]
          }
        ],
        "unknowns": [
          "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。",
          "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。"
        ],
        "sources": [
          {
            "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json",
            "label": "CVE：microsoft"
          },
          {
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-1054",
            "label": "CISA KEV（悪用確認）"
          },
          {
            "url": "https://www.cve.org/CVERecord?id=CVE-2020-1054",
            "label": "CVE公式レコード"
          },
          {
            "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-1054",
            "label": "Win32k Elevation of Privilege Vulnerability"
          },
          {
            "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1054",
            "label": "CISAが示す関連情報"
          },
          {
            "url": "https://www.first.org/cvss/v3.1/specification-document",
            "label": "FIRST公式：CVSS 3.1の条件の定義"
          },
          {
            "url": "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device",
            "label": "Microsoft公式：Windowsの情報を調べる"
          },
          {
            "url": "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates",
            "label": "Microsoft公式：Windows Updateの操作"
          }
        ],
        "evidence": [
          {
            "id": "E1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json",
            "sourceField": "/containers/cna/descriptions/0/value",
            "excerpt": "An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.\nTo exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system.\nThe update addresses this vulnerability by correcting how the Windows kernel-mode driver handles objects in memory.",
            "language": "en-US",
            "representation": "source_excerpt"
          },
          {
            "id": "E2",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json",
            "sourceField": "/containers/cna/title",
            "excerpt": "Win32k Elevation of Privilege Vulnerability",
            "language": null
          },
          {
            "id": "E3",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json",
            "sourceField": "/containers/cna/affected/0",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1507\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.10240.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E4",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json",
            "sourceField": "/containers/cna/affected/1",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1607\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E5",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json",
            "sourceField": "/containers/cna/affected/2",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1709\",\"platforms\":[\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E6",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json",
            "sourceField": "/containers/cna/affected/3",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1709 for 32-bit Systems\",\"platforms\":[\"32-bit Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E7",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json",
            "sourceField": "/containers/cna/affected/4",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1803\",\"platforms\":[\"32-bit Systems\",\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E8",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json",
            "sourceField": "/containers/cna/affected/5",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1809\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E9",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json",
            "sourceField": "/containers/cna/affected/6",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1809\",\"platforms\":[\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E10",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json",
            "sourceField": "/containers/cna/affected/7",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1903 for 32-bit Systems\",\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E11",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json",
            "sourceField": "/containers/cna/affected/8",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1903 for ARM64-based Systems\",\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E12",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json",
            "sourceField": "/containers/cna/affected/9",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1903 for x64-based Systems\",\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E13",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json",
            "sourceField": "/containers/cna/affected/10",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1909\",\"platforms\":[\"32-bit Systems\",\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E14",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json",
            "sourceField": "/containers/cna/affected/11",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 7\",\"platforms\":[\"32-bit Systems\"],\"versions\":[{\"version\":\"6.1.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E15",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json",
            "sourceField": "/containers/cna/affected/12",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 7 Service Pack 1\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.1.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E16",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json",
            "sourceField": "/containers/cna/affected/13",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 8.1\",\"platforms\":[\"32-bit Systems\",\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"6.3.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E17",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json",
            "sourceField": "/containers/cna/affected/14",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2008 R2 Service Pack 1\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.1.7601.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E18",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json",
            "sourceField": "/containers/cna/affected/15",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2008 R2 Service Pack 1 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.1.7601.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E19",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json",
            "sourceField": "/containers/cna/affected/16",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2008 Service Pack 2\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"6.0.6003.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E20",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json",
            "sourceField": "/containers/cna/affected/17",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2008 Service Pack 2 (Server Core installation)\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"6.0.6003.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E21",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json",
            "sourceField": "/containers/cna/affected/18",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.2.9200.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E22",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json",
            "sourceField": "/containers/cna/affected/19",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.2.9200.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E23",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json",
            "sourceField": "/containers/cna/affected/20",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012 R2\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.3.9600.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E24",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json",
            "sourceField": "/containers/cna/affected/21",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012 R2 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.3.9600.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E25",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json",
            "sourceField": "/containers/cna/affected/22",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2016\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E26",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json",
            "sourceField": "/containers/cna/affected/23",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2016 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E27",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json",
            "sourceField": "/containers/cna/affected/24",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2019\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E28",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json",
            "sourceField": "/containers/cna/affected/25",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2019 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E29",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json",
            "sourceField": "/containers/cna/affected/26",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server, version 1803  (Server Core Installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E30",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json",
            "sourceField": "/containers/cna/affected/27",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server, version 1903 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E31",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1054.json",
            "sourceField": "/containers/cna/affected/28",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server, version 1909 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E32",
            "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-1054",
            "sourceField": "/sourceAction",
            "excerpt": "Apply updates per vendor instructions.",
            "language": null
          },
          {
            "id": "E33",
            "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-1054",
            "sourceField": "/exploitStatus",
            "excerpt": "{\"id\":\"CVE-2020-1054\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}",
            "language": "en",
            "representation": "normalized_feed_field"
          }
        ],
        "supportRequest": "件名：CVE-2020-1054（Windows 10 Version 1507 / Windows 10 Version 1607 / Windows 10 Version 1709 / Windows 10 Version 1709 for 32-bit Systems / Windows 10 Version 1803 / Windows 10 Version 1809 / Windows 10 Version 1903 for 32-bit Systems / Windows 10 Version 1903 for AR）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・攻撃者は対象システムにログオンしている必要がある。\n・攻撃者は特別に作成したアプリケーションを実行できる必要がある。\n・公式の対象表：Microsoft / Windows 10 Version 1507。影響ありとして記載：10.0.10240.0以上、publication未満。対象の環境：32-bit Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 1607。影響ありとして記載：10.0.14393.0以上、publication未満。対象の環境：32-bit Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 1709。影響ありとして記載：10.0.0以上、publication未満。対象の環境：ARM64-based Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 1709 for 32-bit Systems。影響ありとして記載：10.0.0以上、publication未満。対象の環境：32-bit Systems\n・公式の対象表：Microsoft / Windows 10 Version 1803。影響ありとして記載：10.0.0以上、publication未満。対象の環境：32-bit Systems、ARM64-based Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 1809。影響ありとして記載：10.0.17763.0以上、publication未満。対象の環境：32-bit Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 1809。影響ありとして記載：10.0.0以上、publication未満。対象の環境：ARM64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 1903 for 32-bit Systems。影響ありとして記載：10.0.0以上、publication未満。\n・公式の対象表：Microsoft / Windows 10 Version 1903 for ARM64-based Systems。影響ありとして記載：10.0.0以上、publication未満。\n・公式の対象表：Microsoft / Windows 10 Version 1903 for x64-based Systems。影響ありとして記載：10.0.0以上、publication未満。\n・公式の対象表：Microsoft / Windows 10 Version 1909。影響ありとして記載：10.0.0以上、publication未満。対象の環境：32-bit Systems、ARM64-based Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 7。影響ありとして記載：6.1.0以上、publication未満。対象の環境：32-bit Systems\n・公式の対象表：Microsoft / Windows 7 Service Pack 1。影響ありとして記載：6.1.0以上、publication未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows 8.1。影響ありとして記載：6.3.0以上、publication未満。対象の環境：32-bit Systems、ARM64-based Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2008 R2 Service Pack 1。影響ありとして記載：6.1.7601.0以上、publication未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2008 R2 Service Pack 1 (Server Core installation)。影響ありとして記載：6.1.7601.0以上、publication未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2008 Service Pack 2。影響ありとして記載：6.0.6003.0以上、publication未満。対象の環境：32-bit Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2008 Service Pack 2 (Server Core installation)。影響ありとして記載：6.0.6003.0以上、publication未満。対象の環境：32-bit Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2012。影響ありとして記載：6.2.9200.0以上、publication未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2012 (Server Core installation)。影響ありとして記載：6.2.9200.0以上、publication未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2012 R2。影響ありとして記載：6.3.9600.0以上、publication未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2012 R2 (Server Core installation)。影響ありとして記載：6.3.9600.0以上、publication未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2016。影響ありとして記載：10.0.14393.0以上、publication未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2016 (Server Core installation)。影響ありとして記載：10.0.14393.0以上、publication未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2019。影響ありとして記載：10.0.17763.0以上、publication未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2019 (Server Core installation)。影響ありとして記載：10.0.17763.0以上、publication未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server, version 1803  (Server Core Installation)。影響ありとして記載：10.0.0以上、publication未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server, version 1903 (Server Core installation)。影響ありとして記載：10.0.0以上、publication未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server, version 1909 (Server Core installation)。影響ありとして記載：10.0.0以上、publication未満。対象の環境：x64-based Systems\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2020-1054",
        "publicationCheckVersion": "2026-10-23.1",
        "sourceNotices": [],
        "automation": {
          "status": "ready",
          "lastAttempt": "2026-10-23T03:57:57.086Z",
          "lastSuccess": "2026-10-23T03:57:57.086Z",
          "sourceCheckedAt": "2026-10-23T02:43:10.050Z",
          "errorCode": null
        },
        "glossary": [
          {
            "term": "任意のコード実行",
            "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。",
            "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html",
            "kind": "general_definition"
          }
        ]
      }
    },
    {
      "id": "CVE-2020-1350",
      "aliases": [],
      "title": "Windows Server / Windows Server, version 1909 (Server Core installation) / Windows Server, version 1903 (Server Core installation) / Windows Server, version 2004 (Server Core installation)：コード実行",
      "summary": "Windows DNSサーバーがリクエストを正しく処理できないと、攻撃者がサーバー上で任意のコードを実行できる脆弱性が存在します。",
      "risk": "攻撃者がサーバー上で任意のコードを実行できる可能性があります。",
      "product": "Windows Server / Windows Server, version 1909 (Server Core installation) / Windows Server, version 1903 (Server Core installation) / Windows Server, version 2004 (Server Core installation)",
      "category": "windows",
      "component": "package",
      "severity": "unknown",
      "cvss": null,
      "cvssVersion": null,
      "cvssSource": "microsoft",
      "cvssVector": null,
      "affected": [
        {
          "product": "Windows Server",
          "range": "2019"
        },
        {
          "product": "Windows Server",
          "range": "2019  (Core installation)"
        },
        {
          "product": "Windows Server",
          "range": "2016"
        },
        {
          "product": "Windows Server",
          "range": "2016  (Core installation)"
        },
        {
          "product": "Windows Server",
          "range": "2008 for 32-bit Systems Service Pack 2"
        },
        {
          "product": "Windows Server",
          "range": "2008 for 32-bit Systems Service Pack 2 (Core installation)"
        },
        {
          "product": "Windows Server",
          "range": "2008 for x64-based Systems Service Pack 2"
        },
        {
          "product": "Windows Server",
          "range": "2008 for x64-based Systems Service Pack 2 (Core installation)"
        },
        {
          "product": "Windows Server",
          "range": "2008 R2 for x64-based Systems Service Pack 1"
        },
        {
          "product": "Windows Server",
          "range": "2008 R2 for x64-based Systems Service Pack 1 (Core installation)"
        },
        {
          "product": "Windows Server",
          "range": "2012"
        },
        {
          "product": "Windows Server",
          "range": "2012 (Core installation)"
        },
        {
          "product": "Windows Server",
          "range": "2012 R2"
        },
        {
          "product": "Windows Server",
          "range": "2012 R2 (Core installation)"
        },
        {
          "product": "Windows Server, version 1909 (Server Core installation)",
          "range": "unspecified"
        },
        {
          "product": "Windows Server, version 1903 (Server Core installation)",
          "range": "unspecified"
        },
        {
          "product": "Windows Server, version 2004 (Server Core installation)",
          "range": "unspecified"
        }
      ],
      "fixed": [],
      "steps": [
        "ベンダーの指示に従って更新プログラムを適用する。",
        "「CVE-2020-1350」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
        "Windows 11は「設定」→「Windows Update」→「更新プログラムのチェック」を開き、提供された更新を適用します。再起動を求められたら完了させます。会社管理のPC、Windows Server、サポート外の版は管理担当者に適用する修正番号と配布予定を確認してください。"
      ],
      "references": [
        {
          "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1350.json",
          "label": "CVE：microsoft"
        },
        {
          "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-1350",
          "label": "CISA KEV（悪用確認）"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-1350",
          "label": "CVE公式レコード"
        },
        {
          "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1350",
          "label": "CVE掲載の参考情報"
        },
        {
          "url": "http://packetstormsecurity.com/files/158484/SIGRed-Windows-DNS-Denial-Of-Service.html",
          "label": "CVE掲載の参考情報"
        },
        {
          "url": "https://www.cisa.gov/news-events/directives/ed-20-03-mitigate-windows-dns-server-remote-code-execution-vulnerability-july-2020-patch-tuesday",
          "label": "CISAが示す関連情報"
        },
        {
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1350",
          "label": "CISAが示す関連情報"
        },
        {
          "url": "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device",
          "label": "Microsoft公式：Windowsの情報を調べる"
        },
        {
          "url": "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates",
          "label": "Microsoft公式：Windows Updateの操作"
        }
      ],
      "publishedAt": "2020-07-14T22:54:06.000Z",
      "modifiedAt": "2025-10-21T23:35:39.529Z",
      "fetchedAt": "2026-10-23T02:43:10.435Z",
      "exploitStatus": "confirmed",
      "sources": [
        "CVE",
        "CISA KEV"
      ],
      "originalText": "A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle requests, aka 'Windows DNS Server Remote Code Execution Vulnerability'.",
      "sourceTitle": "",
      "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。",
      "state": "published",
      "affectedDetails": [
        {
          "product": "Windows Server",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "2019"
            },
            {
              "status": "affected",
              "version": "2019  (Core installation)"
            },
            {
              "status": "affected",
              "version": "2016"
            },
            {
              "status": "affected",
              "version": "2016  (Core installation)"
            },
            {
              "status": "affected",
              "version": "2008 for 32-bit Systems Service Pack 2"
            },
            {
              "status": "affected",
              "version": "2008 for 32-bit Systems Service Pack 2 (Core installation)"
            },
            {
              "status": "affected",
              "version": "2008 for x64-based Systems Service Pack 2"
            },
            {
              "status": "affected",
              "version": "2008 for x64-based Systems Service Pack 2 (Core installation)"
            },
            {
              "status": "affected",
              "version": "2008 R2 for x64-based Systems Service Pack 1"
            },
            {
              "status": "affected",
              "version": "2008 R2 for x64-based Systems Service Pack 1 (Core installation)"
            },
            {
              "status": "affected",
              "version": "2012"
            },
            {
              "status": "affected",
              "version": "2012 (Core installation)"
            },
            {
              "status": "affected",
              "version": "2012 R2"
            },
            {
              "status": "affected",
              "version": "2012 R2 (Core installation)"
            }
          ]
        },
        {
          "product": "Windows Server, version 1909 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified"
            }
          ]
        },
        {
          "product": "Windows Server, version 1903 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified"
            }
          ]
        },
        {
          "product": "Windows Server, version 2004 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified"
            }
          ]
        }
      ],
      "officialEvidence": {
        "schemaVersion": "1.0",
        "id": "CVE-2020-1350",
        "sourceType": "CVE",
        "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1350.json",
        "fetchedAt": "2026-10-23T02:43:10.435Z",
        "publishedAt": "2020-07-14T22:54:06.000Z",
        "modifiedAt": "2025-10-21T23:35:39.529Z",
        "state": "published",
        "provider": "microsoft",
        "title": "",
        "descriptions": [
          {
            "lang": "en",
            "value": "A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle requests, aka 'Windows DNS Server Remote Code Execution Vulnerability'.",
            "sourcePath": "/containers/cna/descriptions/0/value"
          }
        ],
        "affected": [
          {
            "vendor": "Microsoft",
            "product": "Windows Server",
            "sourcePath": "/containers/cna/affected/0",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/0/versions/0",
                "version": "2019",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/1",
                "version": "2019  (Core installation)",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/2",
                "version": "2016",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/3",
                "version": "2016  (Core installation)",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/4",
                "version": "2008 for 32-bit Systems Service Pack 2",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/5",
                "version": "2008 for 32-bit Systems Service Pack 2 (Core installation)",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/6",
                "version": "2008 for x64-based Systems Service Pack 2",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/7",
                "version": "2008 for x64-based Systems Service Pack 2 (Core installation)",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/8",
                "version": "2008 R2 for x64-based Systems Service Pack 1",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/9",
                "version": "2008 R2 for x64-based Systems Service Pack 1 (Core installation)",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/10",
                "version": "2012",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/11",
                "version": "2012 (Core installation)",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/12",
                "version": "2012 R2",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/0/versions/13",
                "version": "2012 R2 (Core installation)",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server, version 1909 (Server Core installation)",
            "sourcePath": "/containers/cna/affected/1",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/1/versions/0",
                "version": "unspecified",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server, version 1903 (Server Core installation)",
            "sourcePath": "/containers/cna/affected/2",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/2/versions/0",
                "version": "unspecified",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server, version 2004 (Server Core installation)",
            "sourcePath": "/containers/cna/affected/3",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/3/versions/0",
                "version": "unspecified",
                "status": "affected"
              }
            ]
          }
        ],
        "solutions": [],
        "workarounds": [],
        "exploits": [],
        "rejectedReasons": [],
        "problemTypes": [
          {
            "cweId": "",
            "lang": "en",
            "description": "Remote Code Execution",
            "sourcePath": "/containers/cna/problemTypes/0/descriptions/0"
          }
        ],
        "metrics": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore": 10,
            "baseSeverity": "CRITICAL",
            "provider": "CISA-ADP",
            "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1"
          }
        ],
        "references": [
          {
            "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1350",
            "label": "CVE",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/0"
          },
          {
            "url": "http://packetstormsecurity.com/files/158484/SIGRed-Windows-DNS-Denial-Of-Service.html",
            "label": "CVE",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/1"
          },
          {
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-1350",
            "label": "CISA-ADP",
            "tags": [
              "government-resource"
            ],
            "provider": "CISA-ADP",
            "sourcePath": "/containers/adp/1/references/0"
          }
        ],
        "snippets": [
          {
            "evidenceId": "official:/containers/cna/affected/0",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1350.json",
            "sourcePath": "/containers/cna/affected/0",
            "text": "{\"product\":\"Windows Server\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"2019\"},{\"status\":\"affected\",\"version\":\"2019  (Core installation)\"},{\"status\":\"affected\",\"version\":\"2016\"},{\"status\":\"affected\",\"version\":\"2016  (Core installation)\"},{\"status\":\"affected\",\"version\":\"2008 for 32-bit Systems Service Pack 2\"},{\"status\":\"affected\",\"version\":\"2008 for 32-bit Systems Service Pack 2 (Core installation)\"},{\"status\":\"affected\",\"version\":\"2008 for x64-based Systems Service Pack 2\"},{\"status\":\"affected\",\"version\":\"2008 for x64-based Systems Service Pack 2 (Core installation)\"},{\"status\":\"affected\",\"version\":\"2008 R2 for x64-based Systems Service Pack 1\"},{\"status\":\"affected\",\"version\":\"2008 R2 for x64-based Systems Service Pack 1 (Core installation)\"},{\"status\":\"affected\",\"version\":\"2012\"},{\"status\":\"affected\",\"version\":\"2012 (Core installation)\"},{\"status\":\"affected\",\"version\":\"2012 R2\"},{\"status\":\"affected\",\"version\":\"2012 R2 (Core installation)\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1350.json",
            "sourcePath": "/containers/cna/affected/1",
            "text": "{\"product\":\"Windows Server, version 1909 (Server Core installation)\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/2",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1350.json",
            "sourcePath": "/containers/cna/affected/2",
            "text": "{\"product\":\"Windows Server, version 1903 (Server Core installation)\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/3",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1350.json",
            "sourcePath": "/containers/cna/affected/3",
            "text": "{\"product\":\"Windows Server, version 2004 (Server Core installation)\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/descriptions/0/value",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1350.json",
            "sourcePath": "/containers/cna/descriptions/0/value",
            "text": "A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle requests, aka 'Windows DNS Server Remote Code Execution Vulnerability'.",
            "truncated": false,
            "representation": "source_excerpt"
          },
          {
            "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1350.json",
            "sourcePath": "/containers/cna/problemTypes/0/descriptions/0",
            "text": "{\"description\":\"Remote Code Execution\",\"lang\":\"en\",\"type\":\"text\"}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/adp/1/metrics/0/cvssV3_1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1350.json",
            "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1",
            "text": "{\"scope\":\"CHANGED\",\"version\":\"3.1\",\"baseScore\":10,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"CRITICAL\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"NONE\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"confidentialityImpact\":\"HIGH\"}",
            "truncated": false,
            "representation": "source_json"
          }
        ],
        "limits": {
          "completeness": "official_record",
          "truncatedFields": [],
          "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。"
        }
      },
      "sourceSnapshots": [
        {
          "source": "CVE",
          "modifiedAt": "2025-10-21T23:35:39.529Z",
          "fetchedAt": "2026-10-23T02:43:10.435Z",
          "state": "published"
        },
        {
          "source": "CISA KEV",
          "modifiedAt": "2021-11-03T00:00:00.000Z",
          "fetchedAt": "2026-10-23T02:17:50.489Z",
          "state": "published"
        }
      ],
      "sourceAction": "Apply updates per vendor instructions.",
      "sourceSummary": "Windows Server / Windows Server, version 1909 (Server Core installation) / Windows Server, version 1903 (Server Core installation) / Windows Server, version 2004 (Server Core installation)にコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。",
      "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。",
      "guidance": {
        "schemaVersion": "1.0",
        "method": "automatic",
        "reviewedAt": null,
        "reviewState": "current",
        "generatedAt": "2026-10-23T03:48:06.669Z",
        "generatorVersion": "2026-10-23.3",
        "sourceFingerprint": "dd594f57f9e4d9f8aa3965a7d5310b62664ccc87fcb4cf5792429dc3b0a4ff4b",
        "sourceModifiedAt": "2025-10-21T23:35:39.529Z",
        "model": "@cf/openai/gpt-oss-120b",
        "verificationMethod": "exact_source_excerpt_and_independent_semantic_check",
        "summary": "Windows DNSサーバーがリクエストを正しく処理できないと、攻撃者がサーバー上で任意のコードを実行できる脆弱性が存在します。",
        "risk": "攻撃者がサーバー上で任意のコードを実行できる可能性があります。",
        "summaryEvidenceIds": [
          "E1"
        ],
        "riskEvidenceIds": [
          "E1"
        ],
        "applicability": [
          {
            "text": "Windows Server（2016、2016 Core、2019、2019 Core、2008 32ビット SP2、2008 32ビット SP2 Core、2008 x64 SP2、2008 x64 SP2 Core、2008 R2 x64 SP1、2008 R2 x64 SP1 Core、2012、2012 Core、2012 R2、2012 R2 Core）が影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1350.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "Windows Server, version 1909 (Server Core installation) が影響を受けます（バージョンは未指定）。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1350.json"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "Windows Server, version 1903 (Server Core installation) が影響を受けます（バージョンは未指定）。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1350.json"
            ],
            "evidenceIds": [
              "E4"
            ]
          },
          {
            "text": "Windows Server, version 2004 (Server Core installation) が影響を受けます（バージョンは未指定）。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1350.json"
            ],
            "evidenceIds": [
              "E5"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server。影響ありとして記載：2019。影響ありとして記載：2019  (Core installation)。影響ありとして記載：2016。影響ありとして記載：2016  (Core installation)。影響ありとして記載：2012。影響ありとして記載：2012 (Core installation)。影響ありとして記載：2012 R2。影響ありとして記載：2012 R2 (Core installation)。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1350.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server, version 1909 (Server Core installation)。影響ありとして記載：具体的な版番号の記載なし。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1350.json"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server, version 1903 (Server Core installation)。影響ありとして記載：具体的な版番号の記載なし。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1350.json"
            ],
            "evidenceIds": [
              "E4"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server, version 2004 (Server Core installation)。影響ありとして記載：具体的な版番号の記載なし。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1350.json"
            ],
            "evidenceIds": [
              "E5"
            ]
          },
          {
            "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。",
            "kind": "fact",
            "sourceUrls": [
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-1350"
            ],
            "evidenceIds": [
              "E7"
            ]
          }
        ],
        "versionChecks": [
          {
            "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1350.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "「スタート」→「設定」→「システム」→「バージョン情報」を開き、Windowsのエディション・バージョン・OSビルドを控えます。会社のPCやサーバーは、この情報とCVE番号を管理担当者へ渡してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device"
            ]
          }
        ],
        "actions": [
          {
            "text": "ベンダーの指示に従って更新プログラムを適用する。",
            "kind": "fix",
            "sourceUrls": [
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-1350"
            ],
            "evidenceIds": [
              "E6"
            ]
          },
          {
            "text": "「CVE-2020-1350」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cve.org/CVERecord?id=CVE-2020-1350",
              "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1350",
              "http://packetstormsecurity.com/files/158484/SIGRed-Windows-DNS-Denial-Of-Service.html",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-1350",
              "https://www.cisa.gov/news-events/directives/ed-20-03-mitigate-windows-dns-server-remote-code-execution-vulnerability-july-2020-patch-tuesday",
              "https://nvd.nist.gov/vuln/detail/CVE-2020-1350"
            ]
          },
          {
            "text": "Windows 11は「設定」→「Windows Update」→「更新プログラムのチェック」を開き、提供された更新を適用します。再起動を求められたら完了させます。会社管理のPC、Windows Server、サポート外の版は管理担当者に適用する修正番号と配布予定を確認してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates"
            ]
          }
        ],
        "temporaryMitigations": [
          {
            "text": "すぐ更新できない場合は、CVE番号、Windowsの版、業務で必要な機能を管理担当者に伝え、修正までの利用方法と更新予定を決めてください。すべてのWindowsの問題に同じ回避策が使えるわけではありません。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates",
              "https://www.cve.org/CVERecord?id=CVE-2020-1350",
              "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1350",
              "http://packetstormsecurity.com/files/158484/SIGRed-Windows-DNS-Denial-Of-Service.html",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-1350",
              "https://www.cisa.gov/news-events/directives/ed-20-03-mitigate-windows-dns-server-remote-code-execution-vulnerability-july-2020-patch-tuesday",
              "https://nvd.nist.gov/vuln/detail/CVE-2020-1350"
            ]
          }
        ],
        "verification": [
          {
            "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。",
            "kind": "procedure",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1350.json"
            ],
            "evidenceIds": [
              "E2"
            ]
          },
          {
            "text": "再起動後にWindows Updateを開き直して失敗・再起動待ちがないか確認し、管理担当者にこのCVEに対応する修正の適用結果を確認してもらってください。「最新の状態」と出ても、別製品の更新やサポート外の版の修正を保証するものではありません。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates"
            ]
          }
        ],
        "unknowns": [
          "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。",
          "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。"
        ],
        "sources": [
          {
            "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1350.json",
            "label": "CVE：microsoft"
          },
          {
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-1350",
            "label": "CISA KEV（悪用確認）"
          },
          {
            "url": "https://www.cve.org/CVERecord?id=CVE-2020-1350",
            "label": "CVE公式レコード"
          },
          {
            "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1350",
            "label": "CVE掲載の参考情報"
          },
          {
            "url": "http://packetstormsecurity.com/files/158484/SIGRed-Windows-DNS-Denial-Of-Service.html",
            "label": "CVE掲載の参考情報"
          },
          {
            "url": "https://www.cisa.gov/news-events/directives/ed-20-03-mitigate-windows-dns-server-remote-code-execution-vulnerability-july-2020-patch-tuesday",
            "label": "CISAが示す関連情報"
          },
          {
            "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1350",
            "label": "CISAが示す関連情報"
          },
          {
            "url": "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device",
            "label": "Microsoft公式：Windowsの情報を調べる"
          },
          {
            "url": "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates",
            "label": "Microsoft公式：Windows Updateの操作"
          }
        ],
        "evidence": [
          {
            "id": "E1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1350.json",
            "sourceField": "/containers/cna/descriptions/0/value",
            "excerpt": "A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle requests, aka 'Windows DNS Server Remote Code Execution Vulnerability'.",
            "language": "en",
            "representation": "source_excerpt"
          },
          {
            "id": "E2",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1350.json",
            "sourceField": "/containers/cna/affected/0",
            "excerpt": "{\"product\":\"Windows Server\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"2019\"},{\"status\":\"affected\",\"version\":\"2019  (Core installation)\"},{\"status\":\"affected\",\"version\":\"2016\"},{\"status\":\"affected\",\"version\":\"2016  (Core installation)\"},{\"status\":\"affected\",\"version\":\"2008 for 32-bit Systems Service Pack 2\"},{\"status\":\"affected\",\"version\":\"2008 for 32-bit Systems Service Pack 2 (Core installation)\"},{\"status\":\"affected\",\"version\":\"2008 for x64-based Systems Service Pack 2\"},{\"status\":\"affected\",\"version\":\"2008 for x64-based Systems Service Pack 2 (Core installation)\"},{\"status\":\"affected\",\"version\":\"2008 R2 for x64-based Systems Service Pack 1\"},{\"status\":\"affected\",\"version\":\"2008 R2 for x64-based Systems Service Pack 1 (Core installation)\"},{\"status\":\"affected\",\"version\":\"2012\"},{\"status\":\"affected\",\"version\":\"2012 (Core installation)\"},{\"status\":\"affected\",\"version\":\"2012 R2\"},{\"status\":\"affected\",\"version\":\"2012 R2 (Core installation)\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E3",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1350.json",
            "sourceField": "/containers/cna/affected/1",
            "excerpt": "{\"product\":\"Windows Server, version 1909 (Server Core installation)\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E4",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1350.json",
            "sourceField": "/containers/cna/affected/2",
            "excerpt": "{\"product\":\"Windows Server, version 1903 (Server Core installation)\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E5",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1350.json",
            "sourceField": "/containers/cna/affected/3",
            "excerpt": "{\"product\":\"Windows Server, version 2004 (Server Core installation)\",\"vendor\":\"Microsoft\",\"versions\":[{\"status\":\"affected\",\"version\":\"unspecified\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E6",
            "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-1350",
            "sourceField": "/sourceAction",
            "excerpt": "Apply updates per vendor instructions.",
            "language": null
          },
          {
            "id": "E7",
            "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-1350",
            "sourceField": "/exploitStatus",
            "excerpt": "{\"id\":\"CVE-2020-1350\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}",
            "language": "en",
            "representation": "normalized_feed_field"
          }
        ],
        "supportRequest": "件名：CVE-2020-1350（Windows Server / Windows Server, version 1909 (Server Core installation) / Windows Server, version 1903 (Server Core installation) / Windows Server, version 2004 (Server Core installation)）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Windows Server（2016、2016 Core、2019、2019 Core、2008 32ビット SP2、2008 32ビット SP2 Core、2008 x64 SP2、2008 x64 SP2 Core、2008 R2 x64 SP1、2008 R2 x64 SP1 Core、2012、2012 Core、2012 R2、2012 R2 Core）が影響を受けます。\n・Windows Server, version 1909 (Server Core installation) が影響を受けます（バージョンは未指定）。\n・Windows Server, version 1903 (Server Core installation) が影響を受けます（バージョンは未指定）。\n・Windows Server, version 2004 (Server Core installation) が影響を受けます（バージョンは未指定）。\n・公式の対象表：Microsoft / Windows Server。影響ありとして記載：2019。影響ありとして記載：2019  (Core installation)。影響ありとして記載：2016。影響ありとして記載：2016  (Core installation)。影響ありとして記載：2012。影響ありとして記載：2012 (Core installation)。影響ありとして記載：2012 R2。影響ありとして記載：2012 R2 (Core installation)。\n・公式の対象表：Microsoft / Windows Server, version 1909 (Server Core installation)。影響ありとして記載：具体的な版番号の記載なし。\n・公式の対象表：Microsoft / Windows Server, version 1903 (Server Core installation)。影響ありとして記載：具体的な版番号の記載なし。\n・公式の対象表：Microsoft / Windows Server, version 2004 (Server Core installation)。影響ありとして記載：具体的な版番号の記載なし。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2020-1350",
        "publicationCheckVersion": "2026-10-23.1",
        "sourceNotices": [],
        "automation": {
          "status": "ready",
          "lastAttempt": "2026-10-23T03:48:06.669Z",
          "lastSuccess": "2026-10-23T03:48:06.669Z",
          "sourceCheckedAt": "2026-10-23T02:43:10.435Z",
          "errorCode": null
        },
        "glossary": [
          {
            "term": "任意のコード実行",
            "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。",
            "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html",
            "kind": "general_definition"
          }
        ]
      }
    },
    {
      "id": "CVE-2020-1464",
      "aliases": [],
      "title": "Windows 10 Version 1803 / Windows 10 Version 1809 / Windows Server 2019 / Windows Server 2019 (Server Core installation) / Windows 10 Version 1909 / Windows Server, version 1909 (Server Core installation) / Windows 10 Version 1709 for 32-bit Systems ：脆弱性情報",
      "summary": "Windows がファイル署名を正しく検証しないために、偽装（スプーフィング）の脆弱性が存在します。攻撃者がこの脆弱性を利用すると、セキュリティ機能を回避して、正しく署名されていないファイルを読み込むことが可能になります。",
      "risk": "攻撃者はセキュリティ機能を回避し、正しく署名されていないファイルをロードできるようになる可能性があります。",
      "product": "Windows 10 Version 1803 / Windows 10 Version 1809 / Windows Server 2019 / Windows Server 2019 (Server Core installation) / Windows 10 Version 1909 / Windows Server, version 1909 (Server Core installation) / Windows 10 Version 1709 for 32-bit Systems ",
      "category": "windows",
      "component": "package",
      "severity": "high",
      "cvss": 7.8,
      "cvssVersion": "3.1",
      "cvssSource": "microsoft",
      "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
      "affected": [
        {
          "product": "Windows 10 Version 1803",
          "range": ">= 10.0.0 / < publication（環境: 32-bit Systems / x64-based Systems / ARM64-based Systems）"
        },
        {
          "product": "Windows 10 Version 1809",
          "range": ">= 10.0.0 / < publication（環境: 32-bit Systems / x64-based Systems / ARM64-based Systems）"
        },
        {
          "product": "Windows Server 2019",
          "range": ">= 10.0.0 / < publication（環境: x64-based Systems）"
        },
        {
          "product": "Windows Server 2019 (Server Core installation)",
          "range": ">= 10.0.0 / < publication（環境: x64-based Systems）"
        },
        {
          "product": "Windows 10 Version 1909",
          "range": ">= 10.0.0 / < publication（環境: 32-bit Systems / x64-based Systems / ARM64-based Systems）"
        },
        {
          "product": "Windows Server, version 1909 (Server Core installation)",
          "range": ">= 10.0.0 / < publication（環境: x64-based Systems）"
        },
        {
          "product": "Windows 10 Version 1709 for 32-bit Systems",
          "range": ">= 10.0.0 / < publication（環境: 32-bit Systems）"
        },
        {
          "product": "Windows 10 Version 1709",
          "range": ">= 10.0.0 / < publication（環境: x64-based Systems / ARM64-based Systems）"
        },
        {
          "product": "Windows 10 Version 1903 for 32-bit Systems",
          "range": ">= 10.0.0 / < publication（環境: Unknown）"
        },
        {
          "product": "Windows 10 Version 1903 for x64-based Systems",
          "range": ">= 10.0.0 / < publication（環境: Unknown）"
        },
        {
          "product": "Windows 10 Version 1903 for ARM64-based Systems",
          "range": ">= 10.0.0 / < publication（環境: Unknown）"
        },
        {
          "product": "Windows Server, version 1903 (Server Core installation)",
          "range": ">= 10.0.0 / < publication（環境: x64-based Systems）"
        },
        {
          "product": "Windows 10 Version 2004",
          "range": ">= 10.0.0 / < publication（環境: 32-bit Systems / ARM64-based Systems / x64-based Systems）"
        },
        {
          "product": "Windows Server version 2004",
          "range": ">= 10.0.0 / < publication（環境: x64-based Systems）"
        },
        {
          "product": "Windows 10 Version 1507",
          "range": ">= 10.0.0 / < publication（環境: 32-bit Systems / x64-based Systems）"
        },
        {
          "product": "Windows 10 Version 1607",
          "range": ">= 10.0.0 / < publication（環境: 32-bit Systems / x64-based Systems）"
        },
        {
          "product": "Windows Server 2016",
          "range": ">= 10.0.0 / < publication（環境: x64-based Systems）"
        },
        {
          "product": "Windows Server 2016 (Server Core installation)",
          "range": ">= 10.0.0 / < publication（環境: x64-based Systems）"
        },
        {
          "product": "Windows 7",
          "range": ">= 6.1.0 / < publication（環境: 32-bit Systems）"
        },
        {
          "product": "Windows 7 Service Pack 1",
          "range": ">= 6.1.0 / < publication（環境: x64-based Systems）"
        },
        {
          "product": "Windows 8.1",
          "range": ">= 6.3.0 / < publication（環境: 32-bit Systems / x64-based Systems / ARM64-based Systems）"
        },
        {
          "product": "Windows Server 2008 Service Pack 2",
          "range": ">= 6.0.0 / < publication（環境: 32-bit Systems）"
        },
        {
          "product": "Windows Server 2008 Service Pack 2 (Server Core installation)",
          "range": ">= 6.0.0 / < publication（環境: 32-bit Systems / x64-based Systems）"
        },
        {
          "product": "Windows Server 2008  Service Pack 2",
          "range": ">= 6.0.0 / < publication（環境: x64-based Systems）"
        },
        {
          "product": "Windows Server 2008 R2 Service Pack 1",
          "range": ">= 6.1.0 / < publication（環境: x64-based Systems）"
        },
        {
          "product": "Windows Server 2008 R2 Service Pack 1 (Server Core installation)",
          "range": ">= 6.0.0 / < publication（環境: x64-based Systems）"
        },
        {
          "product": "Windows Server 2012",
          "range": ">= 6.2.0 / < publication（環境: x64-based Systems）"
        },
        {
          "product": "Windows Server 2012 (Server Core installation)",
          "range": ">= 6.2.0 / < publication（環境: x64-based Systems）"
        },
        {
          "product": "Windows Server 2012 R2",
          "range": ">= 6.3.0 / < publication（環境: x64-based Systems）"
        },
        {
          "product": "Windows Server 2012 R2 (Server Core installation)",
          "range": ">= 6.3.0 / < publication（環境: x64-based Systems）"
        }
      ],
      "fixed": [],
      "steps": [
        "ベンダーの指示に従って更新プログラムを適用してください。",
        "「CVE-2020-1464」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
        "Windows 11は「設定」→「Windows Update」→「更新プログラムのチェック」を開き、提供された更新を適用します。再起動を求められたら完了させます。会社管理のPC、Windows Server、サポート外の版は管理担当者に適用する修正番号と配布予定を確認してください。"
      ],
      "references": [
        {
          "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json",
          "label": "CVE：microsoft"
        },
        {
          "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-1464",
          "label": "CISA KEV（悪用確認）"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-1464",
          "label": "CVE公式レコード"
        },
        {
          "url": "https://medium.com/%40TalBeerySec/glueball-the-story-of-cve-2020-1464-50091a1f98bd",
          "label": "CVE掲載の参考情報"
        },
        {
          "url": "https://krebsonsecurity.com/2020/08/microsoft-put-off-fixing-zero-day-for-2-years/",
          "label": "CVE掲載の参考情報"
        },
        {
          "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1464",
          "label": "CVE掲載の参考情報"
        },
        {
          "url": "https://blog.virustotal.com/2019/01/distribution-of-malicious-jar-appended.html",
          "label": "CVE掲載の参考情報"
        },
        {
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1464",
          "label": "CISAが示す関連情報"
        },
        {
          "url": "https://www.first.org/cvss/v3.1/specification-document",
          "label": "FIRST公式：CVSS 3.1の条件の定義"
        },
        {
          "url": "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device",
          "label": "Microsoft公式：Windowsの情報を調べる"
        },
        {
          "url": "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates",
          "label": "Microsoft公式：Windows Updateの操作"
        }
      ],
      "publishedAt": "2020-08-17T19:13:03.000Z",
      "modifiedAt": "2025-10-21T23:35:37.819Z",
      "fetchedAt": "2026-10-23T03:17:49.705Z",
      "exploitStatus": "confirmed",
      "sources": [
        "CVE",
        "CISA KEV"
      ],
      "originalText": "",
      "sourceTitle": "Windows Spoofing Vulnerability",
      "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。",
      "state": "published",
      "affectedDetails": [
        {
          "vendor": "Microsoft",
          "product": "Windows 10 Version 1803",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "cpe:2.3:o:microsoft:windows_10_1803:*:*:*:*:*:*:x64:*",
            "cpe:2.3:o:microsoft:windows_10_1803:*:*:*:*:*:*:arm64:*"
          ],
          "platforms": [
            "32-bit Systems",
            "x64-based Systems",
            "ARM64-based Systems"
          ],
          "versions": [
            {
              "version": "10.0.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows 10 Version 1809",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:arm64:*"
          ],
          "platforms": [
            "32-bit Systems",
            "x64-based Systems",
            "ARM64-based Systems"
          ],
          "versions": [
            {
              "version": "10.0.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows Server 2019",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*"
          ],
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "10.0.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows Server 2019 (Server Core installation)",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*"
          ],
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "10.0.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows 10 Version 1909",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_10_1909:*:*:*:*:*:*:x86:*",
            "cpe:2.3:o:microsoft:windows_10_1909:*:*:*:*:*:*:x64:*",
            "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*"
          ],
          "platforms": [
            "32-bit Systems",
            "x64-based Systems",
            "ARM64-based Systems"
          ],
          "versions": [
            {
              "version": "10.0.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows Server, version 1909 (Server Core installation)",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_server_1909:*:*:*:*:*:*:*:*"
          ],
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "10.0.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows 10 Version 1709 for 32-bit Systems",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*"
          ],
          "platforms": [
            "32-bit Systems"
          ],
          "versions": [
            {
              "version": "10.0.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows 10 Version 1709",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*"
          ],
          "platforms": [
            "x64-based Systems",
            "ARM64-based Systems"
          ],
          "versions": [
            {
              "version": "10.0.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows 10 Version 1903 for 32-bit Systems",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*"
          ],
          "platforms": [
            "Unknown"
          ],
          "versions": [
            {
              "version": "10.0.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows 10 Version 1903 for x64-based Systems",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*"
          ],
          "platforms": [
            "Unknown"
          ],
          "versions": [
            {
              "version": "10.0.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows 10 Version 1903 for ARM64-based Systems",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*"
          ],
          "platforms": [
            "Unknown"
          ],
          "versions": [
            {
              "version": "10.0.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows Server, version 1903 (Server Core installation)",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_server_1903:*:*:*:*:*:*:*:*"
          ],
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "10.0.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows 10 Version 2004",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*"
          ],
          "platforms": [
            "32-bit Systems",
            "ARM64-based Systems",
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "10.0.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows Server version 2004",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_server_2004:*:*:*:*:*:*:*:*"
          ],
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "10.0.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows 10 Version 1507",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*",
            "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*"
          ],
          "platforms": [
            "32-bit Systems",
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "10.0.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows 10 Version 1607",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*"
          ],
          "platforms": [
            "32-bit Systems",
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "10.0.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows Server 2016",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*"
          ],
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "10.0.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows Server 2016 (Server Core installation)",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*"
          ],
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "10.0.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows 7",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:x86:*"
          ],
          "platforms": [
            "32-bit Systems"
          ],
          "versions": [
            {
              "version": "6.1.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows 7 Service Pack 1",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:x64:*"
          ],
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "6.1.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows 8.1",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:x86:*",
            "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:x64:*",
            "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*"
          ],
          "platforms": [
            "32-bit Systems",
            "x64-based Systems",
            "ARM64-based Systems"
          ],
          "versions": [
            {
              "version": "6.3.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows Server 2008 Service Pack 2",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x64:*"
          ],
          "platforms": [
            "32-bit Systems"
          ],
          "versions": [
            {
              "version": "6.0.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows Server 2008 Service Pack 2 (Server Core installation)",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x64:*",
            "cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x86:*"
          ],
          "platforms": [
            "32-bit Systems",
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "6.0.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows Server 2008  Service Pack 2",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x86:*"
          ],
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "6.0.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows Server 2008 R2 Service Pack 1",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_server_2008_R2:*:*:*:*:*:*:x64:*"
          ],
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "6.1.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows Server 2008 R2 Service Pack 1 (Server Core installation)",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_server_2008_R2:*:*:*:*:*:*:x64:*"
          ],
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "6.0.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows Server 2012",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*"
          ],
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "6.2.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows Server 2012 (Server Core installation)",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*"
          ],
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "6.2.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows Server 2012 R2",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*"
          ],
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "6.3.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows Server 2012 R2 (Server Core installation)",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*"
          ],
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "6.3.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        }
      ],
      "configurationNotes": "対象環境・機能: 32-bit Systems / x64-based Systems / ARM64-based Systems / Unknown。製品バージョンだけでなく、原文の利用条件を照合してください。",
      "officialEvidence": {
        "schemaVersion": "1.0",
        "id": "CVE-2020-1464",
        "sourceType": "CVE",
        "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json",
        "fetchedAt": "2026-10-23T02:43:10.598Z",
        "publishedAt": "2020-08-17T19:13:03.000Z",
        "modifiedAt": "2025-10-21T23:35:37.819Z",
        "state": "published",
        "provider": "microsoft",
        "title": "Windows Spoofing Vulnerability",
        "descriptions": [
          {
            "lang": "en-US",
            "value": "A spoofing vulnerability exists when Windows incorrectly validates file signatures. An attacker who successfully exploited this vulnerability could bypass security features and load improperly signed files.\nIn an attack scenario, an attacker could bypass security features intended to prevent improperly signed files from being loaded.\nThe update addresses the vulnerability by correcting how Windows validates file signatures.",
            "sourcePath": "/containers/cna/descriptions/0/value"
          }
        ],
        "affected": [
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 1803",
            "sourcePath": "/containers/cna/affected/0",
            "platforms": [
              "32-bit Systems",
              "x64-based Systems",
              "ARM64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
              "cpe:2.3:o:microsoft:windows_10_1803:*:*:*:*:*:*:x64:*",
              "cpe:2.3:o:microsoft:windows_10_1803:*:*:*:*:*:*:arm64:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/0/versions/0",
                "version": "10.0.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 1809",
            "sourcePath": "/containers/cna/affected/1",
            "platforms": [
              "32-bit Systems",
              "x64-based Systems",
              "ARM64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
              "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
              "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:arm64:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/1/versions/0",
                "version": "10.0.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server 2019",
            "sourcePath": "/containers/cna/affected/2",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/2/versions/0",
                "version": "10.0.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server 2019 (Server Core installation)",
            "sourcePath": "/containers/cna/affected/3",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/3/versions/0",
                "version": "10.0.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 1909",
            "sourcePath": "/containers/cna/affected/4",
            "platforms": [
              "32-bit Systems",
              "x64-based Systems",
              "ARM64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_10_1909:*:*:*:*:*:*:x86:*",
              "cpe:2.3:o:microsoft:windows_10_1909:*:*:*:*:*:*:x64:*",
              "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/4/versions/0",
                "version": "10.0.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server, version 1909 (Server Core installation)",
            "sourcePath": "/containers/cna/affected/5",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_server_1909:*:*:*:*:*:*:*:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/5/versions/0",
                "version": "10.0.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 1709 for 32-bit Systems",
            "sourcePath": "/containers/cna/affected/6",
            "platforms": [
              "32-bit Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/6/versions/0",
                "version": "10.0.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 1709",
            "sourcePath": "/containers/cna/affected/7",
            "platforms": [
              "x64-based Systems",
              "ARM64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/7/versions/0",
                "version": "10.0.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 1903 for 32-bit Systems",
            "sourcePath": "/containers/cna/affected/8",
            "platforms": [
              "Unknown"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/8/versions/0",
                "version": "10.0.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 1903 for x64-based Systems",
            "sourcePath": "/containers/cna/affected/9",
            "platforms": [
              "Unknown"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/9/versions/0",
                "version": "10.0.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 1903 for ARM64-based Systems",
            "sourcePath": "/containers/cna/affected/10",
            "platforms": [
              "Unknown"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/10/versions/0",
                "version": "10.0.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server, version 1903 (Server Core installation)",
            "sourcePath": "/containers/cna/affected/11",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_server_1903:*:*:*:*:*:*:*:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/11/versions/0",
                "version": "10.0.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 2004",
            "sourcePath": "/containers/cna/affected/12",
            "platforms": [
              "32-bit Systems",
              "ARM64-based Systems",
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/12/versions/0",
                "version": "10.0.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server version 2004",
            "sourcePath": "/containers/cna/affected/13",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_server_2004:*:*:*:*:*:*:*:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/13/versions/0",
                "version": "10.0.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 1507",
            "sourcePath": "/containers/cna/affected/14",
            "platforms": [
              "32-bit Systems",
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*",
              "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/14/versions/0",
                "version": "10.0.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 1607",
            "sourcePath": "/containers/cna/affected/15",
            "platforms": [
              "32-bit Systems",
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
              "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/15/versions/0",
                "version": "10.0.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server 2016",
            "sourcePath": "/containers/cna/affected/16",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/16/versions/0",
                "version": "10.0.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server 2016 (Server Core installation)",
            "sourcePath": "/containers/cna/affected/17",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/17/versions/0",
                "version": "10.0.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 7",
            "sourcePath": "/containers/cna/affected/18",
            "platforms": [
              "32-bit Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:x86:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/18/versions/0",
                "version": "6.1.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 7 Service Pack 1",
            "sourcePath": "/containers/cna/affected/19",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:x64:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/19/versions/0",
                "version": "6.1.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 8.1",
            "sourcePath": "/containers/cna/affected/20",
            "platforms": [
              "32-bit Systems",
              "x64-based Systems",
              "ARM64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:x86:*",
              "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:x64:*",
              "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/20/versions/0",
                "version": "6.3.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server 2008 Service Pack 2",
            "sourcePath": "/containers/cna/affected/21",
            "platforms": [
              "32-bit Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x64:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/21/versions/0",
                "version": "6.0.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server 2008 Service Pack 2 (Server Core installation)",
            "sourcePath": "/containers/cna/affected/22",
            "platforms": [
              "32-bit Systems",
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x64:*",
              "cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x86:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/22/versions/0",
                "version": "6.0.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server 2008  Service Pack 2",
            "sourcePath": "/containers/cna/affected/23",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x86:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/23/versions/0",
                "version": "6.0.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server 2008 R2 Service Pack 1",
            "sourcePath": "/containers/cna/affected/24",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_server_2008_R2:*:*:*:*:*:*:x64:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/24/versions/0",
                "version": "6.1.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server 2008 R2 Service Pack 1 (Server Core installation)",
            "sourcePath": "/containers/cna/affected/25",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_server_2008_R2:*:*:*:*:*:*:x64:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/25/versions/0",
                "version": "6.0.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server 2012",
            "sourcePath": "/containers/cna/affected/26",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/26/versions/0",
                "version": "6.2.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server 2012 (Server Core installation)",
            "sourcePath": "/containers/cna/affected/27",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/27/versions/0",
                "version": "6.2.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server 2012 R2",
            "sourcePath": "/containers/cna/affected/28",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/28/versions/0",
                "version": "6.3.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server 2012 R2 (Server Core installation)",
            "sourcePath": "/containers/cna/affected/29",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/29/versions/0",
                "version": "6.3.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          }
        ],
        "solutions": [],
        "workarounds": [],
        "exploits": [],
        "rejectedReasons": [],
        "problemTypes": [
          {
            "cweId": "",
            "lang": "en-US",
            "description": "Spoofing",
            "sourcePath": "/containers/cna/problemTypes/0/descriptions/0"
          }
        ],
        "metrics": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "provider": "microsoft",
            "sourcePath": "/containers/cna/metrics/0/cvssV3_1"
          }
        ],
        "references": [
          {
            "url": "https://medium.com/%40TalBeerySec/glueball-the-story-of-cve-2020-1464-50091a1f98bd",
            "label": "CVE",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/0"
          },
          {
            "url": "https://krebsonsecurity.com/2020/08/microsoft-put-off-fixing-zero-day-for-2-years/",
            "label": "CVE",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/1"
          },
          {
            "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1464",
            "label": "CVE",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/2"
          },
          {
            "url": "https://blog.virustotal.com/2019/01/distribution-of-malicious-jar-appended.html",
            "label": "CVE",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/3"
          },
          {
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-1464",
            "label": "CISA-ADP",
            "tags": [
              "government-resource"
            ],
            "provider": "CISA-ADP",
            "sourcePath": "/containers/adp/1/references/0"
          }
        ],
        "snippets": [
          {
            "evidenceId": "official:/containers/cna/affected/0",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json",
            "sourcePath": "/containers/cna/affected/0",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1803\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*\",\"cpe:2.3:o:microsoft:windows_10_1803:*:*:*:*:*:*:x64:*\",\"cpe:2.3:o:microsoft:windows_10_1803:*:*:*:*:*:*:arm64:*\"],\"platforms\":[\"32-bit Systems\",\"x64-based Systems\",\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json",
            "sourcePath": "/containers/cna/affected/1",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1809\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*\",\"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*\",\"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:arm64:*\"],\"platforms\":[\"32-bit Systems\",\"x64-based Systems\",\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/2",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json",
            "sourcePath": "/containers/cna/affected/2",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2019\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/3",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json",
            "sourcePath": "/containers/cna/affected/3",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2019 (Server Core installation)\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/4",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json",
            "sourcePath": "/containers/cna/affected/4",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1909\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_10_1909:*:*:*:*:*:*:x86:*\",\"cpe:2.3:o:microsoft:windows_10_1909:*:*:*:*:*:*:x64:*\",\"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*\"],\"platforms\":[\"32-bit Systems\",\"x64-based Systems\",\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/5",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json",
            "sourcePath": "/containers/cna/affected/5",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server, version 1909 (Server Core installation)\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_1909:*:*:*:*:*:*:*:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/6",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json",
            "sourcePath": "/containers/cna/affected/6",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1709 for 32-bit Systems\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*\"],\"platforms\":[\"32-bit Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/7",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json",
            "sourcePath": "/containers/cna/affected/7",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1709\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*\"],\"platforms\":[\"x64-based Systems\",\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/8",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json",
            "sourcePath": "/containers/cna/affected/8",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1903 for 32-bit Systems\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*\"],\"platforms\":[\"Unknown\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/9",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json",
            "sourcePath": "/containers/cna/affected/9",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1903 for x64-based Systems\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*\"],\"platforms\":[\"Unknown\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/10",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json",
            "sourcePath": "/containers/cna/affected/10",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1903 for ARM64-based Systems\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*\"],\"platforms\":[\"Unknown\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/11",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json",
            "sourcePath": "/containers/cna/affected/11",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server, version 1903 (Server Core installation)\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_1903:*:*:*:*:*:*:*:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/12",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json",
            "sourcePath": "/containers/cna/affected/12",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 2004\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*\"],\"platforms\":[\"32-bit Systems\",\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/13",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json",
            "sourcePath": "/containers/cna/affected/13",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server version 2004\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2004:*:*:*:*:*:*:*:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/14",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json",
            "sourcePath": "/containers/cna/affected/14",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1507\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*\",\"cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*\"],\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/15",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json",
            "sourcePath": "/containers/cna/affected/15",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1607\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*\",\"cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*\"],\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/16",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json",
            "sourcePath": "/containers/cna/affected/16",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2016\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/17",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json",
            "sourcePath": "/containers/cna/affected/17",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2016 (Server Core installation)\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/18",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json",
            "sourcePath": "/containers/cna/affected/18",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 7\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:x86:*\"],\"platforms\":[\"32-bit Systems\"],\"versions\":[{\"version\":\"6.1.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/19",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json",
            "sourcePath": "/containers/cna/affected/19",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 7 Service Pack 1\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:x64:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.1.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/20",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json",
            "sourcePath": "/containers/cna/affected/20",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 8.1\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:x86:*\",\"cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:x64:*\",\"cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*\"],\"platforms\":[\"32-bit Systems\",\"x64-based Systems\",\"ARM64-based Systems\"],\"versions\":[{\"version\":\"6.3.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/21",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json",
            "sourcePath": "/containers/cna/affected/21",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2008 Service Pack 2\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x64:*\"],\"platforms\":[\"32-bit Systems\"],\"versions\":[{\"version\":\"6.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/22",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json",
            "sourcePath": "/containers/cna/affected/22",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2008 Service Pack 2 (Server Core installation)\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x64:*\",\"cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x86:*\"],\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"6.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/23",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json",
            "sourcePath": "/containers/cna/affected/23",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2008  Service Pack 2\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x86:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/24",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json",
            "sourcePath": "/containers/cna/affected/24",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2008 R2 Service Pack 1\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2008_R2:*:*:*:*:*:*:x64:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.1.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/25",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json",
            "sourcePath": "/containers/cna/affected/25",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2008 R2 Service Pack 1 (Server Core installation)\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2008_R2:*:*:*:*:*:*:x64:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/26",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json",
            "sourcePath": "/containers/cna/affected/26",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.2.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/27",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json",
            "sourcePath": "/containers/cna/affected/27",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012 (Server Core installation)\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.2.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/28",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json",
            "sourcePath": "/containers/cna/affected/28",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012 R2\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.3.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/29",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json",
            "sourcePath": "/containers/cna/affected/29",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012 R2 (Server Core installation)\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.3.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/descriptions/0/value",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json",
            "sourcePath": "/containers/cna/descriptions/0/value",
            "text": "A spoofing vulnerability exists when Windows incorrectly validates file signatures. An attacker who successfully exploited this vulnerability could bypass security features and load improperly signed files.\nIn an attack scenario, an attacker could bypass security features intended to prevent improperly signed files from being loaded.\nThe update addresses the vulnerability by correcting how Windows validates file signatures.",
            "truncated": false,
            "representation": "source_excerpt"
          },
          {
            "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json",
            "sourcePath": "/containers/cna/problemTypes/0/descriptions/0",
            "text": "{\"description\":\"Spoofing\",\"lang\":\"en-US\",\"type\":\"Impact\"}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json",
            "sourcePath": "/containers/cna/metrics/0/cvssV3_1",
            "text": "{\"version\":\"3.1\",\"baseSeverity\":\"HIGH\",\"baseScore\":7.8,\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C\"}",
            "truncated": false,
            "representation": "source_json"
          }
        ],
        "limits": {
          "completeness": "official_record",
          "truncatedFields": [],
          "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。"
        }
      },
      "sourceSnapshots": [
        {
          "source": "CVE",
          "modifiedAt": "2025-10-21T23:35:37.819Z",
          "fetchedAt": "2026-10-23T02:43:10.598Z",
          "state": "published"
        },
        {
          "source": "CISA KEV",
          "modifiedAt": "2021-11-03T00:00:00.000Z",
          "fetchedAt": "2026-10-23T03:17:49.705Z",
          "state": "published"
        }
      ],
      "sourceAction": "Apply updates per vendor instructions.",
      "sourceSummary": "Windows 10 Version 1803 / Windows 10 Version 1809 / Windows Server 2019 / Windows Server 2019 (Server Core installation) / Windows 10 Version 1909 / Windows Server, version 1909 (Server Core installation) / Windows 10 Version 1709 for 32-bit Systems に脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。",
      "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。",
      "guidance": {
        "schemaVersion": "1.0",
        "method": "automatic",
        "reviewedAt": null,
        "reviewState": "current",
        "generatedAt": "2026-10-23T03:58:05.945Z",
        "generatorVersion": "2026-10-23.3",
        "sourceFingerprint": "81d2ed849c3103b5bc082ab41ebd51a045e8f3b1a8c204c11f26fd582d05f105",
        "sourceModifiedAt": "2025-10-21T23:35:37.819Z",
        "model": "@cf/openai/gpt-oss-120b",
        "verificationMethod": "exact_source_excerpt_and_independent_semantic_check",
        "summary": "Windows がファイル署名を正しく検証しないために、偽装（スプーフィング）の脆弱性が存在します。攻撃者がこの脆弱性を利用すると、セキュリティ機能を回避して、正しく署名されていないファイルを読み込むことが可能になります。",
        "risk": "攻撃者はセキュリティ機能を回避し、正しく署名されていないファイルをロードできるようになる可能性があります。",
        "summaryEvidenceIds": [
          "E1",
          "E2"
        ],
        "riskEvidenceIds": [
          "E1"
        ],
        "applicability": [
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 1803。影響ありとして記載：10.0.0以上、publication未満。対象の環境：32-bit Systems、x64-based Systems、ARM64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 1809。影響ありとして記載：10.0.0以上、publication未満。対象の環境：32-bit Systems、x64-based Systems、ARM64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json"
            ],
            "evidenceIds": [
              "E4"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server 2019。影響ありとして記載：10.0.0以上、publication未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json"
            ],
            "evidenceIds": [
              "E5"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server 2019 (Server Core installation)。影響ありとして記載：10.0.0以上、publication未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json"
            ],
            "evidenceIds": [
              "E6"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 1909。影響ありとして記載：10.0.0以上、publication未満。対象の環境：32-bit Systems、x64-based Systems、ARM64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json"
            ],
            "evidenceIds": [
              "E7"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server, version 1909 (Server Core installation)。影響ありとして記載：10.0.0以上、publication未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json"
            ],
            "evidenceIds": [
              "E8"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 1709 for 32-bit Systems。影響ありとして記載：10.0.0以上、publication未満。対象の環境：32-bit Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json"
            ],
            "evidenceIds": [
              "E9"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 1709。影響ありとして記載：10.0.0以上、publication未満。対象の環境：x64-based Systems、ARM64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json"
            ],
            "evidenceIds": [
              "E10"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 1903 for 32-bit Systems。影響ありとして記載：10.0.0以上、publication未満。対象の環境：Unknown",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json"
            ],
            "evidenceIds": [
              "E11"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 1903 for x64-based Systems。影響ありとして記載：10.0.0以上、publication未満。対象の環境：Unknown",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json"
            ],
            "evidenceIds": [
              "E12"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 1903 for ARM64-based Systems。影響ありとして記載：10.0.0以上、publication未満。対象の環境：Unknown",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json"
            ],
            "evidenceIds": [
              "E13"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server, version 1903 (Server Core installation)。影響ありとして記載：10.0.0以上、publication未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json"
            ],
            "evidenceIds": [
              "E14"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 2004。影響ありとして記載：10.0.0以上、publication未満。対象の環境：32-bit Systems、ARM64-based Systems、x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json"
            ],
            "evidenceIds": [
              "E15"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server version 2004。影響ありとして記載：10.0.0以上、publication未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json"
            ],
            "evidenceIds": [
              "E16"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 1507。影響ありとして記載：10.0.0以上、publication未満。対象の環境：32-bit Systems、x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json"
            ],
            "evidenceIds": [
              "E17"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 1607。影響ありとして記載：10.0.0以上、publication未満。対象の環境：32-bit Systems、x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json"
            ],
            "evidenceIds": [
              "E18"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server 2016。影響ありとして記載：10.0.0以上、publication未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json"
            ],
            "evidenceIds": [
              "E19"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server 2016 (Server Core installation)。影響ありとして記載：10.0.0以上、publication未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json"
            ],
            "evidenceIds": [
              "E20"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 7。影響ありとして記載：6.1.0以上、publication未満。対象の環境：32-bit Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json"
            ],
            "evidenceIds": [
              "E21"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 7 Service Pack 1。影響ありとして記載：6.1.0以上、publication未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json"
            ],
            "evidenceIds": [
              "E22"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 8.1。影響ありとして記載：6.3.0以上、publication未満。対象の環境：32-bit Systems、x64-based Systems、ARM64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json"
            ],
            "evidenceIds": [
              "E23"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server 2008 Service Pack 2。影響ありとして記載：6.0.0以上、publication未満。対象の環境：32-bit Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json"
            ],
            "evidenceIds": [
              "E24"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server 2008 Service Pack 2 (Server Core installation)。影響ありとして記載：6.0.0以上、publication未満。対象の環境：32-bit Systems、x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json"
            ],
            "evidenceIds": [
              "E25"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server 2008  Service Pack 2。影響ありとして記載：6.0.0以上、publication未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json"
            ],
            "evidenceIds": [
              "E26"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server 2008 R2 Service Pack 1。影響ありとして記載：6.1.0以上、publication未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json"
            ],
            "evidenceIds": [
              "E27"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server 2008 R2 Service Pack 1 (Server Core installation)。影響ありとして記載：6.0.0以上、publication未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json"
            ],
            "evidenceIds": [
              "E28"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server 2012。影響ありとして記載：6.2.0以上、publication未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json"
            ],
            "evidenceIds": [
              "E29"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server 2012 (Server Core installation)。影響ありとして記載：6.2.0以上、publication未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json"
            ],
            "evidenceIds": [
              "E30"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server 2012 R2。影響ありとして記載：6.3.0以上、publication未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json"
            ],
            "evidenceIds": [
              "E31"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server 2012 R2 (Server Core installation)。影響ありとして記載：6.3.0以上、publication未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json"
            ],
            "evidenceIds": [
              "E32"
            ]
          },
          {
            "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。",
            "kind": "fact",
            "sourceUrls": [
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-1464"
            ],
            "evidenceIds": [
              "E34"
            ]
          }
        ],
        "versionChecks": [
          {
            "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "「スタート」→「設定」→「システム」→「バージョン情報」を開き、Windowsのエディション・バージョン・OSビルドを控えます。会社のPCやサーバーは、この情報とCVE番号を管理担当者へ渡してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device"
            ]
          }
        ],
        "actions": [
          {
            "text": "ベンダーの指示に従って更新プログラムを適用してください。",
            "kind": "fix",
            "sourceUrls": [
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-1464"
            ],
            "evidenceIds": [
              "E33"
            ]
          },
          {
            "text": "「CVE-2020-1464」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cve.org/CVERecord?id=CVE-2020-1464",
              "https://medium.com/%40TalBeerySec/glueball-the-story-of-cve-2020-1464-50091a1f98bd",
              "https://krebsonsecurity.com/2020/08/microsoft-put-off-fixing-zero-day-for-2-years/",
              "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1464",
              "https://blog.virustotal.com/2019/01/distribution-of-malicious-jar-appended.html",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-1464",
              "https://nvd.nist.gov/vuln/detail/CVE-2020-1464"
            ]
          },
          {
            "text": "Windows 11は「設定」→「Windows Update」→「更新プログラムのチェック」を開き、提供された更新を適用します。再起動を求められたら完了させます。会社管理のPC、Windows Server、サポート外の版は管理担当者に適用する修正番号と配布予定を確認してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates"
            ]
          }
        ],
        "temporaryMitigations": [
          {
            "text": "すぐ更新できない場合は、CVE番号、Windowsの版、業務で必要な機能を管理担当者に伝え、修正までの利用方法と更新予定を決めてください。すべてのWindowsの問題に同じ回避策が使えるわけではありません。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates",
              "https://www.cve.org/CVERecord?id=CVE-2020-1464",
              "https://medium.com/%40TalBeerySec/glueball-the-story-of-cve-2020-1464-50091a1f98bd",
              "https://krebsonsecurity.com/2020/08/microsoft-put-off-fixing-zero-day-for-2-years/",
              "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1464",
              "https://blog.virustotal.com/2019/01/distribution-of-malicious-jar-appended.html",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-1464",
              "https://nvd.nist.gov/vuln/detail/CVE-2020-1464"
            ]
          }
        ],
        "verification": [
          {
            "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。",
            "kind": "procedure",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "再起動後にWindows Updateを開き直して失敗・再起動待ちがないか確認し、管理担当者にこのCVEに対応する修正の適用結果を確認してもらってください。「最新の状態」と出ても、別製品の更新やサポート外の版の修正を保証するものではありません。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates"
            ]
          }
        ],
        "unknowns": [
          "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。",
          "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。"
        ],
        "sources": [
          {
            "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json",
            "label": "CVE：microsoft"
          },
          {
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-1464",
            "label": "CISA KEV（悪用確認）"
          },
          {
            "url": "https://www.cve.org/CVERecord?id=CVE-2020-1464",
            "label": "CVE公式レコード"
          },
          {
            "url": "https://medium.com/%40TalBeerySec/glueball-the-story-of-cve-2020-1464-50091a1f98bd",
            "label": "CVE掲載の参考情報"
          },
          {
            "url": "https://krebsonsecurity.com/2020/08/microsoft-put-off-fixing-zero-day-for-2-years/",
            "label": "CVE掲載の参考情報"
          },
          {
            "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1464",
            "label": "CVE掲載の参考情報"
          },
          {
            "url": "https://blog.virustotal.com/2019/01/distribution-of-malicious-jar-appended.html",
            "label": "CVE掲載の参考情報"
          },
          {
            "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1464",
            "label": "CISAが示す関連情報"
          },
          {
            "url": "https://www.first.org/cvss/v3.1/specification-document",
            "label": "FIRST公式：CVSS 3.1の条件の定義"
          },
          {
            "url": "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device",
            "label": "Microsoft公式：Windowsの情報を調べる"
          },
          {
            "url": "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates",
            "label": "Microsoft公式：Windows Updateの操作"
          }
        ],
        "evidence": [
          {
            "id": "E1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json",
            "sourceField": "/containers/cna/descriptions/0/value",
            "excerpt": "A spoofing vulnerability exists when Windows incorrectly validates file signatures. An attacker who successfully exploited this vulnerability could bypass security features and load improperly signed files.\nIn an attack scenario, an attacker could bypass security features intended to prevent improperly signed files from being loaded.\nThe update addresses the vulnerability by correcting how Windows validates file signatures.",
            "language": "en-US",
            "representation": "source_excerpt"
          },
          {
            "id": "E2",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json",
            "sourceField": "/containers/cna/title",
            "excerpt": "Windows Spoofing Vulnerability",
            "language": null
          },
          {
            "id": "E3",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json",
            "sourceField": "/containers/cna/affected/0",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1803\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*\",\"cpe:2.3:o:microsoft:windows_10_1803:*:*:*:*:*:*:x64:*\",\"cpe:2.3:o:microsoft:windows_10_1803:*:*:*:*:*:*:arm64:*\"],\"platforms\":[\"32-bit Systems\",\"x64-based Systems\",\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E4",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json",
            "sourceField": "/containers/cna/affected/1",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1809\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*\",\"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*\",\"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:arm64:*\"],\"platforms\":[\"32-bit Systems\",\"x64-based Systems\",\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E5",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json",
            "sourceField": "/containers/cna/affected/2",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2019\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E6",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json",
            "sourceField": "/containers/cna/affected/3",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2019 (Server Core installation)\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E7",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json",
            "sourceField": "/containers/cna/affected/4",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1909\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_10_1909:*:*:*:*:*:*:x86:*\",\"cpe:2.3:o:microsoft:windows_10_1909:*:*:*:*:*:*:x64:*\",\"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*\"],\"platforms\":[\"32-bit Systems\",\"x64-based Systems\",\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E8",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json",
            "sourceField": "/containers/cna/affected/5",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server, version 1909 (Server Core installation)\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_1909:*:*:*:*:*:*:*:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E9",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json",
            "sourceField": "/containers/cna/affected/6",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1709 for 32-bit Systems\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*\"],\"platforms\":[\"32-bit Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E10",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json",
            "sourceField": "/containers/cna/affected/7",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1709\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*\"],\"platforms\":[\"x64-based Systems\",\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E11",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json",
            "sourceField": "/containers/cna/affected/8",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1903 for 32-bit Systems\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*\"],\"platforms\":[\"Unknown\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E12",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json",
            "sourceField": "/containers/cna/affected/9",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1903 for x64-based Systems\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*\"],\"platforms\":[\"Unknown\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E13",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json",
            "sourceField": "/containers/cna/affected/10",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1903 for ARM64-based Systems\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*\"],\"platforms\":[\"Unknown\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E14",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json",
            "sourceField": "/containers/cna/affected/11",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server, version 1903 (Server Core installation)\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_1903:*:*:*:*:*:*:*:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E15",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json",
            "sourceField": "/containers/cna/affected/12",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 2004\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*\"],\"platforms\":[\"32-bit Systems\",\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E16",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json",
            "sourceField": "/containers/cna/affected/13",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server version 2004\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2004:*:*:*:*:*:*:*:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E17",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json",
            "sourceField": "/containers/cna/affected/14",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1507\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*\",\"cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*\"],\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E18",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json",
            "sourceField": "/containers/cna/affected/15",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1607\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*\",\"cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*\"],\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E19",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json",
            "sourceField": "/containers/cna/affected/16",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2016\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E20",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json",
            "sourceField": "/containers/cna/affected/17",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2016 (Server Core installation)\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E21",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json",
            "sourceField": "/containers/cna/affected/18",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 7\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:x86:*\"],\"platforms\":[\"32-bit Systems\"],\"versions\":[{\"version\":\"6.1.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E22",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json",
            "sourceField": "/containers/cna/affected/19",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 7 Service Pack 1\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:x64:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.1.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E23",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json",
            "sourceField": "/containers/cna/affected/20",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 8.1\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:x86:*\",\"cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:x64:*\",\"cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*\"],\"platforms\":[\"32-bit Systems\",\"x64-based Systems\",\"ARM64-based Systems\"],\"versions\":[{\"version\":\"6.3.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E24",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json",
            "sourceField": "/containers/cna/affected/21",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2008 Service Pack 2\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x64:*\"],\"platforms\":[\"32-bit Systems\"],\"versions\":[{\"version\":\"6.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E25",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json",
            "sourceField": "/containers/cna/affected/22",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2008 Service Pack 2 (Server Core installation)\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x64:*\",\"cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x86:*\"],\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"6.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E26",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json",
            "sourceField": "/containers/cna/affected/23",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2008  Service Pack 2\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x86:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E27",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json",
            "sourceField": "/containers/cna/affected/24",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2008 R2 Service Pack 1\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2008_R2:*:*:*:*:*:*:x64:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.1.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E28",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json",
            "sourceField": "/containers/cna/affected/25",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2008 R2 Service Pack 1 (Server Core installation)\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2008_R2:*:*:*:*:*:*:x64:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E29",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json",
            "sourceField": "/containers/cna/affected/26",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.2.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E30",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json",
            "sourceField": "/containers/cna/affected/27",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012 (Server Core installation)\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.2.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E31",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json",
            "sourceField": "/containers/cna/affected/28",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012 R2\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.3.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E32",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1464.json",
            "sourceField": "/containers/cna/affected/29",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012 R2 (Server Core installation)\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.3.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E33",
            "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-1464",
            "sourceField": "/sourceAction",
            "excerpt": "Apply updates per vendor instructions.",
            "language": null
          },
          {
            "id": "E34",
            "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-1464",
            "sourceField": "/exploitStatus",
            "excerpt": "{\"id\":\"CVE-2020-1464\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}",
            "language": "en",
            "representation": "normalized_feed_field"
          }
        ],
        "supportRequest": "件名：CVE-2020-1464（Windows 10 Version 1803 / Windows 10 Version 1809 / Windows Server 2019 / Windows Server 2019 (Server Core installation) / Windows 10 Version 1909 / Windows Server, version 1909 (Server Core installation) / Windows 10 Version 1709 for 32-bit Systems ）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・公式の対象表：Microsoft / Windows 10 Version 1803。影響ありとして記載：10.0.0以上、publication未満。対象の環境：32-bit Systems、x64-based Systems、ARM64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 1809。影響ありとして記載：10.0.0以上、publication未満。対象の環境：32-bit Systems、x64-based Systems、ARM64-based Systems\n・公式の対象表：Microsoft / Windows Server 2019。影響ありとして記載：10.0.0以上、publication未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2019 (Server Core installation)。影響ありとして記載：10.0.0以上、publication未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 1909。影響ありとして記載：10.0.0以上、publication未満。対象の環境：32-bit Systems、x64-based Systems、ARM64-based Systems\n・公式の対象表：Microsoft / Windows Server, version 1909 (Server Core installation)。影響ありとして記載：10.0.0以上、publication未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 1709 for 32-bit Systems。影響ありとして記載：10.0.0以上、publication未満。対象の環境：32-bit Systems\n・公式の対象表：Microsoft / Windows 10 Version 1709。影響ありとして記載：10.0.0以上、publication未満。対象の環境：x64-based Systems、ARM64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 1903 for 32-bit Systems。影響ありとして記載：10.0.0以上、publication未満。対象の環境：Unknown\n・公式の対象表：Microsoft / Windows 10 Version 1903 for x64-based Systems。影響ありとして記載：10.0.0以上、publication未満。対象の環境：Unknown\n・公式の対象表：Microsoft / Windows 10 Version 1903 for ARM64-based Systems。影響ありとして記載：10.0.0以上、publication未満。対象の環境：Unknown\n・公式の対象表：Microsoft / Windows Server, version 1903 (Server Core installation)。影響ありとして記載：10.0.0以上、publication未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 2004。影響ありとして記載：10.0.0以上、publication未満。対象の環境：32-bit Systems、ARM64-based Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows Server version 2004。影響ありとして記載：10.0.0以上、publication未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 1507。影響ありとして記載：10.0.0以上、publication未満。対象の環境：32-bit Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 1607。影響ありとして記載：10.0.0以上、publication未満。対象の環境：32-bit Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2016。影響ありとして記載：10.0.0以上、publication未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2016 (Server Core installation)。影響ありとして記載：10.0.0以上、publication未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows 7。影響ありとして記載：6.1.0以上、publication未満。対象の環境：32-bit Systems\n・公式の対象表：Microsoft / Windows 7 Service Pack 1。影響ありとして記載：6.1.0以上、publication未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows 8.1。影響ありとして記載：6.3.0以上、publication未満。対象の環境：32-bit Systems、x64-based Systems、ARM64-based Systems\n・公式の対象表：Microsoft / Windows Server 2008 Service Pack 2。影響ありとして記載：6.0.0以上、publication未満。対象の環境：32-bit Systems\n・公式の対象表：Microsoft / Windows Server 2008 Service Pack 2 (Server Core installation)。影響ありとして記載：6.0.0以上、publication未満。対象の環境：32-bit Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2008  Service Pack 2。影響ありとして記載：6.0.0以上、publication未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2008 R2 Service Pack 1。影響ありとして記載：6.1.0以上、publication未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2008 R2 Service Pack 1 (Server Core installation)。影響ありとして記載：6.0.0以上、publication未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2012。影響ありとして記載：6.2.0以上、publication未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2012 (Server Core installation)。影響ありとして記載：6.2.0以上、publication未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2012 R2。影響ありとして記載：6.3.0以上、publication未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2012 R2 (Server Core installation)。影響ありとして記載：6.3.0以上、publication未満。対象の環境：x64-based Systems\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2020-1464",
        "publicationCheckVersion": "2026-10-23.1",
        "sourceNotices": [],
        "automation": {
          "status": "ready",
          "lastAttempt": "2026-10-23T03:58:05.945Z",
          "lastSuccess": "2026-10-23T03:58:05.945Z",
          "sourceCheckedAt": "2026-10-23T02:43:10.598Z",
          "errorCode": null
        },
        "glossary": []
      }
    },
    {
      "id": "CVE-2020-17087",
      "aliases": [],
      "title": "Windows 10 Version 1803 / Windows 10 Version 1809 / Windows Server 2019 / Windows Server 2019 (Server Core installation) / Windows 10 Version 1909 / Windows Server, version 1909 (Server Core installation) / Windows 10 Version 1903 for 32-bit Systems ：権限の奪取",
      "summary": "Windows カーネルのローカル権限昇格脆弱性",
      "risk": "攻撃者がローカルでシステム上の権限を昇格させる可能性がある",
      "product": "Windows 10 Version 1803 / Windows 10 Version 1809 / Windows Server 2019 / Windows Server 2019 (Server Core installation) / Windows 10 Version 1909 / Windows Server, version 1909 (Server Core installation) / Windows 10 Version 1903 for 32-bit Systems ",
      "category": "windows",
      "component": "package",
      "severity": "high",
      "cvss": 7.8,
      "cvssVersion": "3.1",
      "cvssSource": "microsoft",
      "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C",
      "affected": [
        {
          "product": "Windows 10 Version 1803",
          "range": ">= 10.0.0 / < publication（環境: 32-bit Systems / x64-based Systems / ARM64-based Systems）"
        },
        {
          "product": "Windows 10 Version 1809",
          "range": ">= 10.0.0 / < publication（環境: 32-bit Systems / x64-based Systems / ARM64-based Systems）"
        },
        {
          "product": "Windows Server 2019",
          "range": ">= 10.0.0 / < publication（環境: x64-based Systems）"
        },
        {
          "product": "Windows Server 2019 (Server Core installation)",
          "range": ">= 10.0.0 / < publication（環境: x64-based Systems）"
        },
        {
          "product": "Windows 10 Version 1909",
          "range": ">= 10.0.0 / < publication（環境: 32-bit Systems / x64-based Systems / ARM64-based Systems）"
        },
        {
          "product": "Windows Server, version 1909 (Server Core installation)",
          "range": ">= 10.0.0 / < publication（環境: x64-based Systems）"
        },
        {
          "product": "Windows 10 Version 1903 for 32-bit Systems",
          "range": ">= 10.0.0 / < publication（環境: Unknown）"
        },
        {
          "product": "Windows 10 Version 1903 for x64-based Systems",
          "range": ">= 10.0.0 / < publication（環境: Unknown）"
        },
        {
          "product": "Windows 10 Version 1903 for ARM64-based Systems",
          "range": ">= 10.0.0 / < publication（環境: Unknown）"
        },
        {
          "product": "Windows Server, version 1903 (Server Core installation)",
          "range": ">= 10.0.0 / < publication（環境: x64-based Systems）"
        },
        {
          "product": "Windows 10 Version 2004",
          "range": ">= 10.0.0 / < publication（環境: 32-bit Systems / ARM64-based Systems / x64-based Systems）"
        },
        {
          "product": "Windows Server version 2004",
          "range": ">= 10.0.0 / < publication（環境: x64-based Systems）"
        },
        {
          "product": "Windows 10 Version 20H2",
          "range": ">= 10.0.0 / < publication（環境: 32-bit Systems / ARM64-based Systems）"
        },
        {
          "product": "Windows Server version 20H2",
          "range": ">= 10.0.0 / < publication（環境: x64-based Systems）"
        },
        {
          "product": "Windows 10 Version 1507",
          "range": ">= 10.0.0 / < publication（環境: 32-bit Systems / x64-based Systems）"
        },
        {
          "product": "Windows 10 Version 1607",
          "range": ">= 10.0.0 / < publication（環境: 32-bit Systems / x64-based Systems）"
        },
        {
          "product": "Windows Server 2016",
          "range": ">= 10.0.0 / < publication（環境: x64-based Systems）"
        },
        {
          "product": "Windows Server 2016 (Server Core installation)",
          "range": ">= 10.0.0 / < publication（環境: x64-based Systems）"
        },
        {
          "product": "Windows 7",
          "range": ">= 6.1.0 / < publication（環境: 32-bit Systems）"
        },
        {
          "product": "Windows 7 Service Pack 1",
          "range": ">= 6.1.0 / < publication（環境: x64-based Systems）"
        },
        {
          "product": "Windows 8.1",
          "range": ">= 6.3.0 / < publication（環境: 32-bit Systems / x64-based Systems / ARM64-based Systems）"
        },
        {
          "product": "Windows Server 2008 Service Pack 2",
          "range": ">= 6.0.0 / < publication（環境: 32-bit Systems）"
        },
        {
          "product": "Windows Server 2008 Service Pack 2 (Server Core installation)",
          "range": ">= 6.0.0 / < publication（環境: 32-bit Systems / x64-based Systems）"
        },
        {
          "product": "Windows Server 2008  Service Pack 2",
          "range": ">= 6.0.0 / < publication（環境: x64-based Systems）"
        },
        {
          "product": "Windows Server 2008 R2 Service Pack 1",
          "range": ">= 6.1.0 / < publication（環境: x64-based Systems）"
        },
        {
          "product": "Windows Server 2008 R2 Service Pack 1 (Server Core installation)",
          "range": ">= 6.0.0 / < publication（環境: x64-based Systems）"
        },
        {
          "product": "Windows Server 2012",
          "range": ">= 6.2.0 / < publication（環境: x64-based Systems）"
        },
        {
          "product": "Windows Server 2012 (Server Core installation)",
          "range": ">= 6.2.0 / < publication（環境: x64-based Systems）"
        },
        {
          "product": "Windows Server 2012 R2",
          "range": ">= 6.3.0 / < publication（環境: x64-based Systems）"
        },
        {
          "product": "Windows Server 2012 R2 (Server Core installation)",
          "range": ">= 6.3.0 / < publication（環境: x64-based Systems）"
        }
      ],
      "fixed": [],
      "steps": [
        "ベンダーの指示に従って更新プログラムを適用する",
        "「CVE-2020-17087」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
        "Windows 11は「設定」→「Windows Update」→「更新プログラムのチェック」を開き、提供された更新を適用します。再起動を求められたら完了させます。会社管理のPC、Windows Server、サポート外の版は管理担当者に適用する修正番号と配布予定を確認してください。"
      ],
      "references": [
        {
          "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json",
          "label": "CVE：microsoft"
        },
        {
          "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-17087",
          "label": "CISA KEV（悪用確認）"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-17087",
          "label": "CVE公式レコード"
        },
        {
          "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17087",
          "label": "CVE掲載の参考情報"
        },
        {
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-17087",
          "label": "CISAが示す関連情報"
        },
        {
          "url": "https://www.first.org/cvss/v3.1/specification-document",
          "label": "FIRST公式：CVSS 3.1の条件の定義"
        },
        {
          "url": "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device",
          "label": "Microsoft公式：Windowsの情報を調べる"
        },
        {
          "url": "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates",
          "label": "Microsoft公式：Windows Updateの操作"
        }
      ],
      "publishedAt": "2020-11-11T06:48:33.000Z",
      "modifiedAt": "2025-10-21T23:35:32.826Z",
      "fetchedAt": "2026-10-23T03:17:49.705Z",
      "exploitStatus": "confirmed",
      "sources": [
        "CVE",
        "CISA KEV"
      ],
      "originalText": "",
      "sourceTitle": "Windows Kernel Local Elevation of Privilege Vulnerability",
      "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。",
      "state": "published",
      "affectedDetails": [
        {
          "vendor": "Microsoft",
          "product": "Windows 10 Version 1803",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "cpe:2.3:o:microsoft:windows_10_1803:*:*:*:*:*:*:x64:*",
            "cpe:2.3:o:microsoft:windows_10_1803:*:*:*:*:*:*:arm64:*"
          ],
          "platforms": [
            "32-bit Systems",
            "x64-based Systems",
            "ARM64-based Systems"
          ],
          "versions": [
            {
              "version": "10.0.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows 10 Version 1809",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:arm64:*"
          ],
          "platforms": [
            "32-bit Systems",
            "x64-based Systems",
            "ARM64-based Systems"
          ],
          "versions": [
            {
              "version": "10.0.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows Server 2019",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*"
          ],
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "10.0.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows Server 2019 (Server Core installation)",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*"
          ],
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "10.0.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows 10 Version 1909",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_10_1909:*:*:*:*:*:*:x86:*",
            "cpe:2.3:o:microsoft:windows_10_1909:*:*:*:*:*:*:x64:*",
            "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*"
          ],
          "platforms": [
            "32-bit Systems",
            "x64-based Systems",
            "ARM64-based Systems"
          ],
          "versions": [
            {
              "version": "10.0.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows Server, version 1909 (Server Core installation)",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_server_1909:*:*:*:*:*:*:*:*"
          ],
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "10.0.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows 10 Version 1903 for 32-bit Systems",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*"
          ],
          "platforms": [
            "Unknown"
          ],
          "versions": [
            {
              "version": "10.0.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows 10 Version 1903 for x64-based Systems",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*"
          ],
          "platforms": [
            "Unknown"
          ],
          "versions": [
            {
              "version": "10.0.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows 10 Version 1903 for ARM64-based Systems",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*"
          ],
          "platforms": [
            "Unknown"
          ],
          "versions": [
            {
              "version": "10.0.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows Server, version 1903 (Server Core installation)",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_server_1903:*:*:*:*:*:*:*:*"
          ],
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "10.0.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows 10 Version 2004",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*"
          ],
          "platforms": [
            "32-bit Systems",
            "ARM64-based Systems",
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "10.0.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows Server version 2004",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_server_2004:*:*:*:*:*:*:*:*"
          ],
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "10.0.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows 10 Version 20H2",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_10_20H2:*:*:*:*:*:*:x86:*",
            "cpe:2.3:o:microsoft:windows_10_20H2:*:*:*:*:*:*:arm64:*"
          ],
          "platforms": [
            "32-bit Systems",
            "ARM64-based Systems"
          ],
          "versions": [
            {
              "version": "10.0.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows Server version 20H2",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_server_20H2:*:*:*:*:*:*:*:*"
          ],
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "10.0.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows 10 Version 1507",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*",
            "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*"
          ],
          "platforms": [
            "32-bit Systems",
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "10.0.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows 10 Version 1607",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*"
          ],
          "platforms": [
            "32-bit Systems",
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "10.0.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows Server 2016",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*"
          ],
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "10.0.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows Server 2016 (Server Core installation)",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*"
          ],
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "10.0.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows 7",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:x86:*"
          ],
          "platforms": [
            "32-bit Systems"
          ],
          "versions": [
            {
              "version": "6.1.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows 7 Service Pack 1",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:x64:*"
          ],
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "6.1.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows 8.1",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:x86:*",
            "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:x64:*",
            "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*"
          ],
          "platforms": [
            "32-bit Systems",
            "x64-based Systems",
            "ARM64-based Systems"
          ],
          "versions": [
            {
              "version": "6.3.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows Server 2008 Service Pack 2",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x64:*"
          ],
          "platforms": [
            "32-bit Systems"
          ],
          "versions": [
            {
              "version": "6.0.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows Server 2008 Service Pack 2 (Server Core installation)",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x64:*",
            "cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x86:*"
          ],
          "platforms": [
            "32-bit Systems",
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "6.0.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows Server 2008  Service Pack 2",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x86:*"
          ],
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "6.0.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows Server 2008 R2 Service Pack 1",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_server_2008_R2:*:*:*:*:*:*:x64:*"
          ],
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "6.1.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows Server 2008 R2 Service Pack 1 (Server Core installation)",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_server_2008_R2:*:*:*:*:*:*:x64:*"
          ],
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "6.0.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows Server 2012",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*"
          ],
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "6.2.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows Server 2012 (Server Core installation)",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*"
          ],
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "6.2.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows Server 2012 R2",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*"
          ],
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "6.3.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows Server 2012 R2 (Server Core installation)",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*"
          ],
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "6.3.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        }
      ],
      "configurationNotes": "対象環境・機能: 32-bit Systems / x64-based Systems / ARM64-based Systems / Unknown。製品バージョンだけでなく、原文の利用条件を照合してください。",
      "officialEvidence": {
        "schemaVersion": "1.0",
        "id": "CVE-2020-17087",
        "sourceType": "CVE",
        "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json",
        "fetchedAt": "2026-10-23T02:43:11.104Z",
        "publishedAt": "2020-11-11T06:48:33.000Z",
        "modifiedAt": "2025-10-21T23:35:32.826Z",
        "state": "published",
        "provider": "microsoft",
        "title": "Windows Kernel Local Elevation of Privilege Vulnerability",
        "descriptions": [
          {
            "lang": "en-US",
            "value": "Windows Kernel Local Elevation of Privilege Vulnerability",
            "sourcePath": "/containers/cna/descriptions/0/value"
          }
        ],
        "affected": [
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 1803",
            "sourcePath": "/containers/cna/affected/0",
            "platforms": [
              "32-bit Systems",
              "x64-based Systems",
              "ARM64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
              "cpe:2.3:o:microsoft:windows_10_1803:*:*:*:*:*:*:x64:*",
              "cpe:2.3:o:microsoft:windows_10_1803:*:*:*:*:*:*:arm64:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/0/versions/0",
                "version": "10.0.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 1809",
            "sourcePath": "/containers/cna/affected/1",
            "platforms": [
              "32-bit Systems",
              "x64-based Systems",
              "ARM64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
              "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
              "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:arm64:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/1/versions/0",
                "version": "10.0.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server 2019",
            "sourcePath": "/containers/cna/affected/2",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/2/versions/0",
                "version": "10.0.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server 2019 (Server Core installation)",
            "sourcePath": "/containers/cna/affected/3",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/3/versions/0",
                "version": "10.0.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 1909",
            "sourcePath": "/containers/cna/affected/4",
            "platforms": [
              "32-bit Systems",
              "x64-based Systems",
              "ARM64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_10_1909:*:*:*:*:*:*:x86:*",
              "cpe:2.3:o:microsoft:windows_10_1909:*:*:*:*:*:*:x64:*",
              "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/4/versions/0",
                "version": "10.0.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server, version 1909 (Server Core installation)",
            "sourcePath": "/containers/cna/affected/5",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_server_1909:*:*:*:*:*:*:*:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/5/versions/0",
                "version": "10.0.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 1903 for 32-bit Systems",
            "sourcePath": "/containers/cna/affected/6",
            "platforms": [
              "Unknown"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/6/versions/0",
                "version": "10.0.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 1903 for x64-based Systems",
            "sourcePath": "/containers/cna/affected/7",
            "platforms": [
              "Unknown"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/7/versions/0",
                "version": "10.0.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 1903 for ARM64-based Systems",
            "sourcePath": "/containers/cna/affected/8",
            "platforms": [
              "Unknown"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/8/versions/0",
                "version": "10.0.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server, version 1903 (Server Core installation)",
            "sourcePath": "/containers/cna/affected/9",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_server_1903:*:*:*:*:*:*:*:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/9/versions/0",
                "version": "10.0.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 2004",
            "sourcePath": "/containers/cna/affected/10",
            "platforms": [
              "32-bit Systems",
              "ARM64-based Systems",
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/10/versions/0",
                "version": "10.0.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server version 2004",
            "sourcePath": "/containers/cna/affected/11",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_server_2004:*:*:*:*:*:*:*:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/11/versions/0",
                "version": "10.0.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 20H2",
            "sourcePath": "/containers/cna/affected/12",
            "platforms": [
              "32-bit Systems",
              "ARM64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_10_20H2:*:*:*:*:*:*:x86:*",
              "cpe:2.3:o:microsoft:windows_10_20H2:*:*:*:*:*:*:arm64:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/12/versions/0",
                "version": "10.0.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server version 20H2",
            "sourcePath": "/containers/cna/affected/13",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_server_20H2:*:*:*:*:*:*:*:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/13/versions/0",
                "version": "10.0.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 1507",
            "sourcePath": "/containers/cna/affected/14",
            "platforms": [
              "32-bit Systems",
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*",
              "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/14/versions/0",
                "version": "10.0.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 1607",
            "sourcePath": "/containers/cna/affected/15",
            "platforms": [
              "32-bit Systems",
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
              "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/15/versions/0",
                "version": "10.0.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server 2016",
            "sourcePath": "/containers/cna/affected/16",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/16/versions/0",
                "version": "10.0.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server 2016 (Server Core installation)",
            "sourcePath": "/containers/cna/affected/17",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/17/versions/0",
                "version": "10.0.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 7",
            "sourcePath": "/containers/cna/affected/18",
            "platforms": [
              "32-bit Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:x86:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/18/versions/0",
                "version": "6.1.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 7 Service Pack 1",
            "sourcePath": "/containers/cna/affected/19",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:x64:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/19/versions/0",
                "version": "6.1.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 8.1",
            "sourcePath": "/containers/cna/affected/20",
            "platforms": [
              "32-bit Systems",
              "x64-based Systems",
              "ARM64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:x86:*",
              "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:x64:*",
              "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/20/versions/0",
                "version": "6.3.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server 2008 Service Pack 2",
            "sourcePath": "/containers/cna/affected/21",
            "platforms": [
              "32-bit Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x64:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/21/versions/0",
                "version": "6.0.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server 2008 Service Pack 2 (Server Core installation)",
            "sourcePath": "/containers/cna/affected/22",
            "platforms": [
              "32-bit Systems",
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x64:*",
              "cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x86:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/22/versions/0",
                "version": "6.0.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server 2008  Service Pack 2",
            "sourcePath": "/containers/cna/affected/23",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x86:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/23/versions/0",
                "version": "6.0.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server 2008 R2 Service Pack 1",
            "sourcePath": "/containers/cna/affected/24",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_server_2008_R2:*:*:*:*:*:*:x64:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/24/versions/0",
                "version": "6.1.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server 2008 R2 Service Pack 1 (Server Core installation)",
            "sourcePath": "/containers/cna/affected/25",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_server_2008_R2:*:*:*:*:*:*:x64:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/25/versions/0",
                "version": "6.0.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server 2012",
            "sourcePath": "/containers/cna/affected/26",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/26/versions/0",
                "version": "6.2.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server 2012 (Server Core installation)",
            "sourcePath": "/containers/cna/affected/27",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/27/versions/0",
                "version": "6.2.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server 2012 R2",
            "sourcePath": "/containers/cna/affected/28",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/28/versions/0",
                "version": "6.3.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server 2012 R2 (Server Core installation)",
            "sourcePath": "/containers/cna/affected/29",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/29/versions/0",
                "version": "6.3.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          }
        ],
        "solutions": [],
        "workarounds": [],
        "exploits": [],
        "rejectedReasons": [],
        "problemTypes": [
          {
            "cweId": "",
            "lang": "en-US",
            "description": "Elevation of Privilege",
            "sourcePath": "/containers/cna/problemTypes/0/descriptions/0"
          }
        ],
        "metrics": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "provider": "microsoft",
            "sourcePath": "/containers/cna/metrics/0/cvssV3_1"
          }
        ],
        "references": [
          {
            "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17087",
            "label": "CVE",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/0"
          },
          {
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-17087",
            "label": "CISA-ADP",
            "tags": [
              "government-resource"
            ],
            "provider": "CISA-ADP",
            "sourcePath": "/containers/adp/1/references/0"
          }
        ],
        "snippets": [
          {
            "evidenceId": "official:/containers/cna/affected/0",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json",
            "sourcePath": "/containers/cna/affected/0",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1803\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*\",\"cpe:2.3:o:microsoft:windows_10_1803:*:*:*:*:*:*:x64:*\",\"cpe:2.3:o:microsoft:windows_10_1803:*:*:*:*:*:*:arm64:*\"],\"platforms\":[\"32-bit Systems\",\"x64-based Systems\",\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json",
            "sourcePath": "/containers/cna/affected/1",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1809\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*\",\"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*\",\"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:arm64:*\"],\"platforms\":[\"32-bit Systems\",\"x64-based Systems\",\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/2",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json",
            "sourcePath": "/containers/cna/affected/2",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2019\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/3",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json",
            "sourcePath": "/containers/cna/affected/3",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2019 (Server Core installation)\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/4",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json",
            "sourcePath": "/containers/cna/affected/4",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1909\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_10_1909:*:*:*:*:*:*:x86:*\",\"cpe:2.3:o:microsoft:windows_10_1909:*:*:*:*:*:*:x64:*\",\"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*\"],\"platforms\":[\"32-bit Systems\",\"x64-based Systems\",\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/5",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json",
            "sourcePath": "/containers/cna/affected/5",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server, version 1909 (Server Core installation)\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_1909:*:*:*:*:*:*:*:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/6",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json",
            "sourcePath": "/containers/cna/affected/6",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1903 for 32-bit Systems\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*\"],\"platforms\":[\"Unknown\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/7",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json",
            "sourcePath": "/containers/cna/affected/7",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1903 for x64-based Systems\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*\"],\"platforms\":[\"Unknown\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/8",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json",
            "sourcePath": "/containers/cna/affected/8",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1903 for ARM64-based Systems\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*\"],\"platforms\":[\"Unknown\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/9",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json",
            "sourcePath": "/containers/cna/affected/9",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server, version 1903 (Server Core installation)\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_1903:*:*:*:*:*:*:*:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/10",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json",
            "sourcePath": "/containers/cna/affected/10",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 2004\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*\"],\"platforms\":[\"32-bit Systems\",\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/11",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json",
            "sourcePath": "/containers/cna/affected/11",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server version 2004\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2004:*:*:*:*:*:*:*:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/12",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json",
            "sourcePath": "/containers/cna/affected/12",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 20H2\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_10_20H2:*:*:*:*:*:*:x86:*\",\"cpe:2.3:o:microsoft:windows_10_20H2:*:*:*:*:*:*:arm64:*\"],\"platforms\":[\"32-bit Systems\",\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/13",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json",
            "sourcePath": "/containers/cna/affected/13",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server version 20H2\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_20H2:*:*:*:*:*:*:*:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/14",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json",
            "sourcePath": "/containers/cna/affected/14",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1507\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*\",\"cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*\"],\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/15",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json",
            "sourcePath": "/containers/cna/affected/15",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1607\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*\",\"cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*\"],\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/16",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json",
            "sourcePath": "/containers/cna/affected/16",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2016\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/17",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json",
            "sourcePath": "/containers/cna/affected/17",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2016 (Server Core installation)\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/18",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json",
            "sourcePath": "/containers/cna/affected/18",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 7\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:x86:*\"],\"platforms\":[\"32-bit Systems\"],\"versions\":[{\"version\":\"6.1.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/19",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json",
            "sourcePath": "/containers/cna/affected/19",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 7 Service Pack 1\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:x64:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.1.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/20",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json",
            "sourcePath": "/containers/cna/affected/20",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 8.1\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:x86:*\",\"cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:x64:*\",\"cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*\"],\"platforms\":[\"32-bit Systems\",\"x64-based Systems\",\"ARM64-based Systems\"],\"versions\":[{\"version\":\"6.3.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/21",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json",
            "sourcePath": "/containers/cna/affected/21",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2008 Service Pack 2\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x64:*\"],\"platforms\":[\"32-bit Systems\"],\"versions\":[{\"version\":\"6.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/22",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json",
            "sourcePath": "/containers/cna/affected/22",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2008 Service Pack 2 (Server Core installation)\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x64:*\",\"cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x86:*\"],\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"6.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/23",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json",
            "sourcePath": "/containers/cna/affected/23",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2008  Service Pack 2\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x86:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/24",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json",
            "sourcePath": "/containers/cna/affected/24",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2008 R2 Service Pack 1\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2008_R2:*:*:*:*:*:*:x64:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.1.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/25",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json",
            "sourcePath": "/containers/cna/affected/25",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2008 R2 Service Pack 1 (Server Core installation)\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2008_R2:*:*:*:*:*:*:x64:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/26",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json",
            "sourcePath": "/containers/cna/affected/26",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.2.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/27",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json",
            "sourcePath": "/containers/cna/affected/27",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012 (Server Core installation)\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.2.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/28",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json",
            "sourcePath": "/containers/cna/affected/28",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012 R2\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.3.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/29",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json",
            "sourcePath": "/containers/cna/affected/29",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012 R2 (Server Core installation)\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.3.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/descriptions/0/value",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json",
            "sourcePath": "/containers/cna/descriptions/0/value",
            "text": "Windows Kernel Local Elevation of Privilege Vulnerability",
            "truncated": false,
            "representation": "source_excerpt"
          },
          {
            "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json",
            "sourcePath": "/containers/cna/problemTypes/0/descriptions/0",
            "text": "{\"description\":\"Elevation of Privilege\",\"lang\":\"en-US\",\"type\":\"Impact\"}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json",
            "sourcePath": "/containers/cna/metrics/0/cvssV3_1",
            "text": "{\"version\":\"3.1\",\"baseSeverity\":\"HIGH\",\"baseScore\":7.8,\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C\"}",
            "truncated": false,
            "representation": "source_json"
          }
        ],
        "limits": {
          "completeness": "official_record",
          "truncatedFields": [],
          "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。"
        }
      },
      "sourceSnapshots": [
        {
          "source": "CVE",
          "modifiedAt": "2025-10-21T23:35:32.826Z",
          "fetchedAt": "2026-10-23T02:43:11.104Z",
          "state": "published"
        },
        {
          "source": "CISA KEV",
          "modifiedAt": "2021-11-03T00:00:00.000Z",
          "fetchedAt": "2026-10-23T03:17:49.705Z",
          "state": "published"
        }
      ],
      "sourceAction": "Apply updates per vendor instructions.",
      "sourceSummary": "Windows 10 Version 1803 / Windows 10 Version 1809 / Windows Server 2019 / Windows Server 2019 (Server Core installation) / Windows 10 Version 1909 / Windows Server, version 1909 (Server Core installation) / Windows 10 Version 1903 for 32-bit Systems に権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。",
      "sourceRisk": "本来与えられていない権限で、操作される可能性があります。",
      "guidance": {
        "schemaVersion": "1.0",
        "method": "automatic",
        "reviewedAt": null,
        "reviewState": "current",
        "generatedAt": "2026-10-23T03:58:09.011Z",
        "generatorVersion": "2026-10-23.3",
        "sourceFingerprint": "14efe20bce5ac3a5e783b786e0eef5f4252226a36a5ef39ddcc736589d58248b",
        "sourceModifiedAt": "2025-10-21T23:35:32.826Z",
        "model": "@cf/openai/gpt-oss-120b",
        "verificationMethod": "exact_source_excerpt_and_independent_semantic_check",
        "summary": "Windows カーネルのローカル権限昇格脆弱性",
        "risk": "攻撃者がローカルでシステム上の権限を昇格させる可能性がある",
        "summaryEvidenceIds": [
          "E1",
          "E2"
        ],
        "riskEvidenceIds": [
          "E3"
        ],
        "applicability": [
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 1803。影響ありとして記載：10.0.0以上、publication未満。対象の環境：32-bit Systems、x64-based Systems、ARM64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json"
            ],
            "evidenceIds": [
              "E4"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 1809。影響ありとして記載：10.0.0以上、publication未満。対象の環境：32-bit Systems、x64-based Systems、ARM64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json"
            ],
            "evidenceIds": [
              "E5"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server 2019。影響ありとして記載：10.0.0以上、publication未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json"
            ],
            "evidenceIds": [
              "E6"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server 2019 (Server Core installation)。影響ありとして記載：10.0.0以上、publication未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json"
            ],
            "evidenceIds": [
              "E7"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 1909。影響ありとして記載：10.0.0以上、publication未満。対象の環境：32-bit Systems、x64-based Systems、ARM64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json"
            ],
            "evidenceIds": [
              "E8"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server, version 1909 (Server Core installation)。影響ありとして記載：10.0.0以上、publication未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json"
            ],
            "evidenceIds": [
              "E9"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 1903 for 32-bit Systems。影響ありとして記載：10.0.0以上、publication未満。対象の環境：Unknown",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json"
            ],
            "evidenceIds": [
              "E10"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 1903 for x64-based Systems。影響ありとして記載：10.0.0以上、publication未満。対象の環境：Unknown",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json"
            ],
            "evidenceIds": [
              "E11"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 1903 for ARM64-based Systems。影響ありとして記載：10.0.0以上、publication未満。対象の環境：Unknown",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json"
            ],
            "evidenceIds": [
              "E12"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server, version 1903 (Server Core installation)。影響ありとして記載：10.0.0以上、publication未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json"
            ],
            "evidenceIds": [
              "E13"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 2004。影響ありとして記載：10.0.0以上、publication未満。対象の環境：32-bit Systems、ARM64-based Systems、x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json"
            ],
            "evidenceIds": [
              "E14"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server version 2004。影響ありとして記載：10.0.0以上、publication未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json"
            ],
            "evidenceIds": [
              "E15"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 20H2。影響ありとして記載：10.0.0以上、publication未満。対象の環境：32-bit Systems、ARM64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json"
            ],
            "evidenceIds": [
              "E16"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server version 20H2。影響ありとして記載：10.0.0以上、publication未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json"
            ],
            "evidenceIds": [
              "E17"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 1507。影響ありとして記載：10.0.0以上、publication未満。対象の環境：32-bit Systems、x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json"
            ],
            "evidenceIds": [
              "E18"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 1607。影響ありとして記載：10.0.0以上、publication未満。対象の環境：32-bit Systems、x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json"
            ],
            "evidenceIds": [
              "E19"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server 2016。影響ありとして記載：10.0.0以上、publication未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json"
            ],
            "evidenceIds": [
              "E20"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server 2016 (Server Core installation)。影響ありとして記載：10.0.0以上、publication未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json"
            ],
            "evidenceIds": [
              "E21"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 7。影響ありとして記載：6.1.0以上、publication未満。対象の環境：32-bit Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json"
            ],
            "evidenceIds": [
              "E22"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 7 Service Pack 1。影響ありとして記載：6.1.0以上、publication未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json"
            ],
            "evidenceIds": [
              "E23"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 8.1。影響ありとして記載：6.3.0以上、publication未満。対象の環境：32-bit Systems、x64-based Systems、ARM64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json"
            ],
            "evidenceIds": [
              "E24"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server 2008 Service Pack 2。影響ありとして記載：6.0.0以上、publication未満。対象の環境：32-bit Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json"
            ],
            "evidenceIds": [
              "E25"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server 2008 Service Pack 2 (Server Core installation)。影響ありとして記載：6.0.0以上、publication未満。対象の環境：32-bit Systems、x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json"
            ],
            "evidenceIds": [
              "E26"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server 2008  Service Pack 2。影響ありとして記載：6.0.0以上、publication未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json"
            ],
            "evidenceIds": [
              "E27"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server 2008 R2 Service Pack 1。影響ありとして記載：6.1.0以上、publication未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json"
            ],
            "evidenceIds": [
              "E28"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server 2008 R2 Service Pack 1 (Server Core installation)。影響ありとして記載：6.0.0以上、publication未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json"
            ],
            "evidenceIds": [
              "E29"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server 2012。影響ありとして記載：6.2.0以上、publication未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json"
            ],
            "evidenceIds": [
              "E30"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server 2012 (Server Core installation)。影響ありとして記載：6.2.0以上、publication未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json"
            ],
            "evidenceIds": [
              "E31"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server 2012 R2。影響ありとして記載：6.3.0以上、publication未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json"
            ],
            "evidenceIds": [
              "E32"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server 2012 R2 (Server Core installation)。影響ありとして記載：6.3.0以上、publication未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json"
            ],
            "evidenceIds": [
              "E33"
            ]
          },
          {
            "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。",
            "kind": "fact",
            "sourceUrls": [
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-17087"
            ],
            "evidenceIds": [
              "E35"
            ]
          }
        ],
        "versionChecks": [
          {
            "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json"
            ],
            "evidenceIds": [
              "E4"
            ]
          },
          {
            "text": "「スタート」→「設定」→「システム」→「バージョン情報」を開き、Windowsのエディション・バージョン・OSビルドを控えます。会社のPCやサーバーは、この情報とCVE番号を管理担当者へ渡してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device"
            ]
          }
        ],
        "actions": [
          {
            "text": "ベンダーの指示に従って更新プログラムを適用する",
            "kind": "fix",
            "sourceUrls": [
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-17087"
            ],
            "evidenceIds": [
              "E34"
            ]
          },
          {
            "text": "「CVE-2020-17087」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cve.org/CVERecord?id=CVE-2020-17087",
              "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17087",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-17087",
              "https://nvd.nist.gov/vuln/detail/CVE-2020-17087"
            ]
          },
          {
            "text": "Windows 11は「設定」→「Windows Update」→「更新プログラムのチェック」を開き、提供された更新を適用します。再起動を求められたら完了させます。会社管理のPC、Windows Server、サポート外の版は管理担当者に適用する修正番号と配布予定を確認してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates"
            ]
          }
        ],
        "temporaryMitigations": [
          {
            "text": "すぐ更新できない場合は、CVE番号、Windowsの版、業務で必要な機能を管理担当者に伝え、修正までの利用方法と更新予定を決めてください。すべてのWindowsの問題に同じ回避策が使えるわけではありません。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates",
              "https://www.cve.org/CVERecord?id=CVE-2020-17087",
              "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17087",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-17087",
              "https://nvd.nist.gov/vuln/detail/CVE-2020-17087"
            ]
          }
        ],
        "verification": [
          {
            "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。",
            "kind": "procedure",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json"
            ],
            "evidenceIds": [
              "E4"
            ]
          },
          {
            "text": "再起動後にWindows Updateを開き直して失敗・再起動待ちがないか確認し、管理担当者にこのCVEに対応する修正の適用結果を確認してもらってください。「最新の状態」と出ても、別製品の更新やサポート外の版の修正を保証するものではありません。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates"
            ]
          }
        ],
        "unknowns": [
          "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。",
          "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。"
        ],
        "sources": [
          {
            "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json",
            "label": "CVE：microsoft"
          },
          {
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-17087",
            "label": "CISA KEV（悪用確認）"
          },
          {
            "url": "https://www.cve.org/CVERecord?id=CVE-2020-17087",
            "label": "CVE公式レコード"
          },
          {
            "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17087",
            "label": "CVE掲載の参考情報"
          },
          {
            "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-17087",
            "label": "CISAが示す関連情報"
          },
          {
            "url": "https://www.first.org/cvss/v3.1/specification-document",
            "label": "FIRST公式：CVSS 3.1の条件の定義"
          },
          {
            "url": "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device",
            "label": "Microsoft公式：Windowsの情報を調べる"
          },
          {
            "url": "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates",
            "label": "Microsoft公式：Windows Updateの操作"
          }
        ],
        "evidence": [
          {
            "id": "E1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json",
            "sourceField": "/containers/cna/descriptions/0/value",
            "excerpt": "Windows Kernel Local Elevation of Privilege Vulnerability",
            "language": "en-US",
            "representation": "source_excerpt"
          },
          {
            "id": "E2",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json",
            "sourceField": "/containers/cna/title",
            "excerpt": "Windows Kernel Local Elevation of Privilege Vulnerability",
            "language": null
          },
          {
            "id": "E3",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json",
            "sourceField": "/containers/cna/problemTypes/0/descriptions/0",
            "excerpt": "{\"description\":\"Elevation of Privilege\",\"lang\":\"en-US\",\"type\":\"Impact\"}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E4",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json",
            "sourceField": "/containers/cna/affected/0",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1803\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*\",\"cpe:2.3:o:microsoft:windows_10_1803:*:*:*:*:*:*:x64:*\",\"cpe:2.3:o:microsoft:windows_10_1803:*:*:*:*:*:*:arm64:*\"],\"platforms\":[\"32-bit Systems\",\"x64-based Systems\",\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E5",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json",
            "sourceField": "/containers/cna/affected/1",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1809\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*\",\"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*\",\"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:arm64:*\"],\"platforms\":[\"32-bit Systems\",\"x64-based Systems\",\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E6",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json",
            "sourceField": "/containers/cna/affected/2",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2019\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E7",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json",
            "sourceField": "/containers/cna/affected/3",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2019 (Server Core installation)\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E8",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json",
            "sourceField": "/containers/cna/affected/4",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1909\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_10_1909:*:*:*:*:*:*:x86:*\",\"cpe:2.3:o:microsoft:windows_10_1909:*:*:*:*:*:*:x64:*\",\"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*\"],\"platforms\":[\"32-bit Systems\",\"x64-based Systems\",\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E9",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json",
            "sourceField": "/containers/cna/affected/5",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server, version 1909 (Server Core installation)\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_1909:*:*:*:*:*:*:*:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E10",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json",
            "sourceField": "/containers/cna/affected/6",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1903 for 32-bit Systems\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*\"],\"platforms\":[\"Unknown\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E11",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json",
            "sourceField": "/containers/cna/affected/7",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1903 for x64-based Systems\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*\"],\"platforms\":[\"Unknown\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E12",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json",
            "sourceField": "/containers/cna/affected/8",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1903 for ARM64-based Systems\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*\"],\"platforms\":[\"Unknown\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E13",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json",
            "sourceField": "/containers/cna/affected/9",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server, version 1903 (Server Core installation)\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_1903:*:*:*:*:*:*:*:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E14",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json",
            "sourceField": "/containers/cna/affected/10",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 2004\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*\"],\"platforms\":[\"32-bit Systems\",\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E15",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json",
            "sourceField": "/containers/cna/affected/11",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server version 2004\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2004:*:*:*:*:*:*:*:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E16",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json",
            "sourceField": "/containers/cna/affected/12",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 20H2\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_10_20H2:*:*:*:*:*:*:x86:*\",\"cpe:2.3:o:microsoft:windows_10_20H2:*:*:*:*:*:*:arm64:*\"],\"platforms\":[\"32-bit Systems\",\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E17",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json",
            "sourceField": "/containers/cna/affected/13",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server version 20H2\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_20H2:*:*:*:*:*:*:*:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E18",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json",
            "sourceField": "/containers/cna/affected/14",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1507\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*\",\"cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*\"],\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E19",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json",
            "sourceField": "/containers/cna/affected/15",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1607\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*\",\"cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*\"],\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E20",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json",
            "sourceField": "/containers/cna/affected/16",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2016\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E21",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json",
            "sourceField": "/containers/cna/affected/17",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2016 (Server Core installation)\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E22",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json",
            "sourceField": "/containers/cna/affected/18",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 7\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:x86:*\"],\"platforms\":[\"32-bit Systems\"],\"versions\":[{\"version\":\"6.1.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E23",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json",
            "sourceField": "/containers/cna/affected/19",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 7 Service Pack 1\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:x64:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.1.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E24",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json",
            "sourceField": "/containers/cna/affected/20",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 8.1\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:x86:*\",\"cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:x64:*\",\"cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*\"],\"platforms\":[\"32-bit Systems\",\"x64-based Systems\",\"ARM64-based Systems\"],\"versions\":[{\"version\":\"6.3.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E25",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json",
            "sourceField": "/containers/cna/affected/21",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2008 Service Pack 2\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x64:*\"],\"platforms\":[\"32-bit Systems\"],\"versions\":[{\"version\":\"6.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E26",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json",
            "sourceField": "/containers/cna/affected/22",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2008 Service Pack 2 (Server Core installation)\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x64:*\",\"cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x86:*\"],\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"6.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E27",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json",
            "sourceField": "/containers/cna/affected/23",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2008  Service Pack 2\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x86:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E28",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json",
            "sourceField": "/containers/cna/affected/24",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2008 R2 Service Pack 1\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2008_R2:*:*:*:*:*:*:x64:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.1.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E29",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json",
            "sourceField": "/containers/cna/affected/25",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2008 R2 Service Pack 1 (Server Core installation)\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2008_R2:*:*:*:*:*:*:x64:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E30",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json",
            "sourceField": "/containers/cna/affected/26",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.2.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E31",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json",
            "sourceField": "/containers/cna/affected/27",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012 (Server Core installation)\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.2.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E32",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json",
            "sourceField": "/containers/cna/affected/28",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012 R2\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.3.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E33",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17087.json",
            "sourceField": "/containers/cna/affected/29",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012 R2 (Server Core installation)\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.3.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E34",
            "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-17087",
            "sourceField": "/sourceAction",
            "excerpt": "Apply updates per vendor instructions.",
            "language": null
          },
          {
            "id": "E35",
            "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-17087",
            "sourceField": "/exploitStatus",
            "excerpt": "{\"id\":\"CVE-2020-17087\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}",
            "language": "en",
            "representation": "normalized_feed_field"
          }
        ],
        "supportRequest": "件名：CVE-2020-17087（Windows 10 Version 1803 / Windows 10 Version 1809 / Windows Server 2019 / Windows Server 2019 (Server Core installation) / Windows 10 Version 1909 / Windows Server, version 1909 (Server Core installation) / Windows 10 Version 1903 for 32-bit Systems ）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・公式の対象表：Microsoft / Windows 10 Version 1803。影響ありとして記載：10.0.0以上、publication未満。対象の環境：32-bit Systems、x64-based Systems、ARM64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 1809。影響ありとして記載：10.0.0以上、publication未満。対象の環境：32-bit Systems、x64-based Systems、ARM64-based Systems\n・公式の対象表：Microsoft / Windows Server 2019。影響ありとして記載：10.0.0以上、publication未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2019 (Server Core installation)。影響ありとして記載：10.0.0以上、publication未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 1909。影響ありとして記載：10.0.0以上、publication未満。対象の環境：32-bit Systems、x64-based Systems、ARM64-based Systems\n・公式の対象表：Microsoft / Windows Server, version 1909 (Server Core installation)。影響ありとして記載：10.0.0以上、publication未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 1903 for 32-bit Systems。影響ありとして記載：10.0.0以上、publication未満。対象の環境：Unknown\n・公式の対象表：Microsoft / Windows 10 Version 1903 for x64-based Systems。影響ありとして記載：10.0.0以上、publication未満。対象の環境：Unknown\n・公式の対象表：Microsoft / Windows 10 Version 1903 for ARM64-based Systems。影響ありとして記載：10.0.0以上、publication未満。対象の環境：Unknown\n・公式の対象表：Microsoft / Windows Server, version 1903 (Server Core installation)。影響ありとして記載：10.0.0以上、publication未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 2004。影響ありとして記載：10.0.0以上、publication未満。対象の環境：32-bit Systems、ARM64-based Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows Server version 2004。影響ありとして記載：10.0.0以上、publication未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 20H2。影響ありとして記載：10.0.0以上、publication未満。対象の環境：32-bit Systems、ARM64-based Systems\n・公式の対象表：Microsoft / Windows Server version 20H2。影響ありとして記載：10.0.0以上、publication未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 1507。影響ありとして記載：10.0.0以上、publication未満。対象の環境：32-bit Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 1607。影響ありとして記載：10.0.0以上、publication未満。対象の環境：32-bit Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2016。影響ありとして記載：10.0.0以上、publication未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2016 (Server Core installation)。影響ありとして記載：10.0.0以上、publication未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows 7。影響ありとして記載：6.1.0以上、publication未満。対象の環境：32-bit Systems\n・公式の対象表：Microsoft / Windows 7 Service Pack 1。影響ありとして記載：6.1.0以上、publication未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows 8.1。影響ありとして記載：6.3.0以上、publication未満。対象の環境：32-bit Systems、x64-based Systems、ARM64-based Systems\n・公式の対象表：Microsoft / Windows Server 2008 Service Pack 2。影響ありとして記載：6.0.0以上、publication未満。対象の環境：32-bit Systems\n・公式の対象表：Microsoft / Windows Server 2008 Service Pack 2 (Server Core installation)。影響ありとして記載：6.0.0以上、publication未満。対象の環境：32-bit Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2008  Service Pack 2。影響ありとして記載：6.0.0以上、publication未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2008 R2 Service Pack 1。影響ありとして記載：6.1.0以上、publication未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2008 R2 Service Pack 1 (Server Core installation)。影響ありとして記載：6.0.0以上、publication未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2012。影響ありとして記載：6.2.0以上、publication未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2012 (Server Core installation)。影響ありとして記載：6.2.0以上、publication未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2012 R2。影響ありとして記載：6.3.0以上、publication未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2012 R2 (Server Core installation)。影響ありとして記載：6.3.0以上、publication未満。対象の環境：x64-based Systems\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2020-17087",
        "publicationCheckVersion": "2026-10-23.1",
        "sourceNotices": [],
        "automation": {
          "status": "ready",
          "lastAttempt": "2026-10-23T03:58:09.011Z",
          "lastSuccess": "2026-10-23T03:58:09.011Z",
          "sourceCheckedAt": "2026-10-23T02:43:11.104Z",
          "errorCode": null
        },
        "glossary": [
          {
            "term": "権限昇格",
            "meaning": "本来その利用者には許可されていない、より強い権限で操作できるようになることです。必要な元の権限と、得られる権限を確認します。",
            "sourceUrl": "https://cwe.mitre.org/data/definitions/269.html",
            "kind": "general_definition"
          }
        ]
      }
    },
    {
      "id": "CVE-2020-17144",
      "aliases": [],
      "title": "Microsoft Exchange Server 2010 Service Pack 3 Update Rollup 31：コード実行",
      "summary": "Microsoft Exchange Server 2010 Service Pack 3 Update Rollup 31 にリモートコード実行の脆弱性が存在します。",
      "risk": "攻撃者がサーバー上で任意のコードを実行できる可能性があります。",
      "product": "Microsoft Exchange Server 2010 Service Pack 3 Update Rollup 31",
      "category": "windows",
      "component": "package",
      "severity": "high",
      "cvss": 8.4,
      "cvssVersion": "3.1",
      "cvssSource": "microsoft",
      "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C",
      "affected": [
        {
          "product": "Microsoft Exchange Server 2010 Service Pack 3 Update Rollup 31",
          "range": "< publication"
        }
      ],
      "fixed": [],
      "steps": [
        "ベンダーの指示に従って更新を適用する。",
        "「CVE-2020-17144」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
        "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。"
      ],
      "references": [
        {
          "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17144.json",
          "label": "CVE：microsoft"
        },
        {
          "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-17144",
          "label": "CISA KEV（悪用確認）"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-17144",
          "label": "CVE公式レコード"
        },
        {
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-17144",
          "label": "Microsoft Exchange Remote Code Execution Vulnerability"
        },
        {
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-17144",
          "label": "CISAが示す関連情報"
        },
        {
          "url": "https://www.first.org/cvss/v3.1/specification-document",
          "label": "FIRST公式：CVSS 3.1の条件の定義"
        },
        {
          "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
          "label": "CISA：ソフトウェア更新の基本"
        }
      ],
      "publishedAt": "2020-12-09T23:36:55.000Z",
      "modifiedAt": "2026-06-09T18:07:57.165Z",
      "fetchedAt": "2026-10-23T02:43:11.106Z",
      "exploitStatus": "confirmed",
      "sources": [
        "CVE",
        "CISA KEV"
      ],
      "originalText": "",
      "sourceTitle": "Microsoft Exchange Remote Code Execution Vulnerability",
      "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。",
      "state": "published",
      "affectedDetails": [
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2010 Service Pack 3 Update Rollup 31",
          "versions": [
            {
              "version": "0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        }
      ],
      "officialEvidence": {
        "schemaVersion": "1.0",
        "id": "CVE-2020-17144",
        "sourceType": "CVE",
        "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17144.json",
        "fetchedAt": "2026-10-23T02:43:11.106Z",
        "publishedAt": "2020-12-09T23:36:55.000Z",
        "modifiedAt": "2026-06-09T18:07:57.165Z",
        "state": "published",
        "provider": "microsoft",
        "title": "Microsoft Exchange Remote Code Execution Vulnerability",
        "descriptions": [
          {
            "lang": "en-US",
            "value": "Microsoft Exchange Remote Code Execution Vulnerability",
            "sourcePath": "/containers/cna/descriptions/0/value"
          }
        ],
        "affected": [
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2010 Service Pack 3 Update Rollup 31",
            "sourcePath": "/containers/cna/affected/0",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/0/versions/0",
                "version": "0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          }
        ],
        "solutions": [],
        "workarounds": [],
        "exploits": [],
        "rejectedReasons": [],
        "problemTypes": [
          {
            "cweId": "",
            "lang": "en-US",
            "description": "Remote Code Execution",
            "sourcePath": "/containers/cna/problemTypes/0/descriptions/0"
          }
        ],
        "metrics": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "baseScore": 8.4,
            "baseSeverity": "HIGH",
            "provider": "microsoft",
            "sourcePath": "/containers/cna/metrics/0/cvssV3_1"
          }
        ],
        "references": [
          {
            "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-17144",
            "label": "Microsoft Exchange Remote Code Execution Vulnerability",
            "tags": [
              "vendor-advisory",
              "patch"
            ],
            "provider": "microsoft",
            "sourcePath": "/containers/cna/references/0"
          },
          {
            "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17144",
            "label": "CVE",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/0"
          },
          {
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-17144",
            "label": "CISA-ADP",
            "tags": [
              "government-resource"
            ],
            "provider": "CISA-ADP",
            "sourcePath": "/containers/adp/1/references/0"
          }
        ],
        "snippets": [
          {
            "evidenceId": "official:/containers/cna/affected/0",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17144.json",
            "sourcePath": "/containers/cna/affected/0",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2010 Service Pack 3 Update Rollup 31\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/descriptions/0/value",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17144.json",
            "sourcePath": "/containers/cna/descriptions/0/value",
            "text": "Microsoft Exchange Remote Code Execution Vulnerability",
            "truncated": false,
            "representation": "source_excerpt"
          },
          {
            "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17144.json",
            "sourcePath": "/containers/cna/problemTypes/0/descriptions/0",
            "text": "{\"description\":\"Remote Code Execution\",\"lang\":\"en-US\",\"type\":\"Impact\"}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17144.json",
            "sourcePath": "/containers/cna/metrics/0/cvssV3_1",
            "text": "{\"version\":\"3.1\",\"baseSeverity\":\"HIGH\",\"baseScore\":8.4,\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C\"}",
            "truncated": false,
            "representation": "source_json"
          }
        ],
        "limits": {
          "completeness": "official_record",
          "truncatedFields": [],
          "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。"
        }
      },
      "sourceSnapshots": [
        {
          "source": "CVE",
          "modifiedAt": "2026-06-09T18:07:57.165Z",
          "fetchedAt": "2026-10-23T02:43:11.106Z",
          "state": "published"
        },
        {
          "source": "CISA KEV",
          "modifiedAt": "2021-11-03T00:00:00.000Z",
          "fetchedAt": "2026-10-23T02:17:50.489Z",
          "state": "published"
        }
      ],
      "sourceAction": "Apply updates per vendor instructions.",
      "sourceSummary": "Microsoft Exchange Server 2010 Service Pack 3 Update Rollup 31にコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。",
      "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。",
      "guidance": {
        "schemaVersion": "1.0",
        "method": "automatic",
        "reviewedAt": null,
        "reviewState": "current",
        "generatedAt": "2026-10-23T03:48:22.608Z",
        "generatorVersion": "2026-10-23.3",
        "sourceFingerprint": "e1a0defc0b4fa70252fd1a5be223b8dc015cdaca1237ad7ca467a9c06e1be7a4",
        "sourceModifiedAt": "2026-06-09T18:07:57.165Z",
        "model": "@cf/openai/gpt-oss-120b",
        "verificationMethod": "exact_source_excerpt_and_independent_semantic_check",
        "summary": "Microsoft Exchange Server 2010 Service Pack 3 Update Rollup 31 にリモートコード実行の脆弱性が存在します。",
        "risk": "攻撃者がサーバー上で任意のコードを実行できる可能性があります。",
        "summaryEvidenceIds": [
          "E1",
          "E2"
        ],
        "riskEvidenceIds": [
          "E3"
        ],
        "applicability": [
          {
            "text": "Microsoft Exchange Server 2010 Service Pack 3 Update Rollup 31 のすべてのバージョンが影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17144.json"
            ],
            "evidenceIds": [
              "E4",
              "E1"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2010 Service Pack 3 Update Rollup 31。影響ありとして記載：publication未満の版。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17144.json"
            ],
            "evidenceIds": [
              "E4"
            ]
          },
          {
            "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。",
            "kind": "fact",
            "sourceUrls": [
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-17144"
            ],
            "evidenceIds": [
              "E6"
            ]
          }
        ],
        "versionChecks": [
          {
            "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17144.json"
            ],
            "evidenceIds": [
              "E4"
            ]
          },
          {
            "text": "「Microsoft Exchange Server 2010 Service Pack 3 Update Rollup 31」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
              "https://www.cve.org/CVERecord?id=CVE-2020-17144",
              "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-17144",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-17144",
              "https://nvd.nist.gov/vuln/detail/CVE-2020-17144"
            ]
          }
        ],
        "actions": [
          {
            "text": "ベンダーの指示に従って更新を適用する。",
            "kind": "fix",
            "sourceUrls": [
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-17144"
            ],
            "evidenceIds": [
              "E5"
            ]
          },
          {
            "text": "「CVE-2020-17144」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cve.org/CVERecord?id=CVE-2020-17144",
              "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-17144",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-17144",
              "https://nvd.nist.gov/vuln/detail/CVE-2020-17144"
            ]
          },
          {
            "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
              "https://www.cve.org/CVERecord?id=CVE-2020-17144",
              "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-17144",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-17144",
              "https://nvd.nist.gov/vuln/detail/CVE-2020-17144"
            ]
          }
        ],
        "temporaryMitigations": [
          {
            "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cve.org/CVERecord?id=CVE-2020-17144",
              "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-17144",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-17144",
              "https://nvd.nist.gov/vuln/detail/CVE-2020-17144"
            ]
          }
        ],
        "verification": [
          {
            "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。",
            "kind": "procedure",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17144.json"
            ],
            "evidenceIds": [
              "E4"
            ]
          },
          {
            "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
              "https://www.cve.org/CVERecord?id=CVE-2020-17144",
              "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-17144",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-17144",
              "https://nvd.nist.gov/vuln/detail/CVE-2020-17144"
            ]
          }
        ],
        "unknowns": [
          "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。",
          "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。"
        ],
        "sources": [
          {
            "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17144.json",
            "label": "CVE：microsoft"
          },
          {
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-17144",
            "label": "CISA KEV（悪用確認）"
          },
          {
            "url": "https://www.cve.org/CVERecord?id=CVE-2020-17144",
            "label": "CVE公式レコード"
          },
          {
            "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-17144",
            "label": "Microsoft Exchange Remote Code Execution Vulnerability"
          },
          {
            "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-17144",
            "label": "CISAが示す関連情報"
          },
          {
            "url": "https://www.first.org/cvss/v3.1/specification-document",
            "label": "FIRST公式：CVSS 3.1の条件の定義"
          },
          {
            "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
            "label": "CISA：ソフトウェア更新の基本"
          }
        ],
        "evidence": [
          {
            "id": "E1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17144.json",
            "sourceField": "/containers/cna/title",
            "excerpt": "Microsoft Exchange Remote Code Execution Vulnerability",
            "language": null
          },
          {
            "id": "E2",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17144.json",
            "sourceField": "/containers/cna/descriptions/0/value",
            "excerpt": "Microsoft Exchange Remote Code Execution Vulnerability",
            "language": "en-US",
            "representation": "source_excerpt"
          },
          {
            "id": "E3",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17144.json",
            "sourceField": "/containers/cna/problemTypes/0/descriptions/0",
            "excerpt": "{\"description\":\"Remote Code Execution\",\"lang\":\"en-US\",\"type\":\"Impact\"}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E4",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/17xxx/CVE-2020-17144.json",
            "sourceField": "/containers/cna/affected/0",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2010 Service Pack 3 Update Rollup 31\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E5",
            "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-17144",
            "sourceField": "/sourceAction",
            "excerpt": "Apply updates per vendor instructions.",
            "language": null
          },
          {
            "id": "E6",
            "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-17144",
            "sourceField": "/exploitStatus",
            "excerpt": "{\"id\":\"CVE-2020-17144\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}",
            "language": "en",
            "representation": "normalized_feed_field"
          }
        ],
        "supportRequest": "件名：CVE-2020-17144（Microsoft Exchange Server 2010 Service Pack 3 Update Rollup 31）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Microsoft Exchange Server 2010 Service Pack 3 Update Rollup 31 のすべてのバージョンが影響を受けます。\n・公式の対象表：Microsoft / Microsoft Exchange Server 2010 Service Pack 3 Update Rollup 31。影響ありとして記載：publication未満の版。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2020-17144",
        "publicationCheckVersion": "2026-10-23.1",
        "sourceNotices": [],
        "automation": {
          "status": "ready",
          "lastAttempt": "2026-10-23T03:48:22.608Z",
          "lastSuccess": "2026-10-23T03:48:22.608Z",
          "sourceCheckedAt": "2026-10-23T02:43:11.106Z",
          "errorCode": null
        },
        "glossary": [
          {
            "term": "任意のコード実行",
            "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。",
            "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html",
            "kind": "general_definition"
          }
        ]
      }
    },
    {
      "id": "CVE-2021-1675",
      "aliases": [],
      "title": "Windows 10 Version 1809 / Windows Server 2019 / Windows Server 2019 (Server Core installation) / Windows 10 Version 1909 / Windows 10 Version 21H1 / Windows 10 Version 2004 / Windows Server version 2004 / Windows 10 Version 20H2 / Windows Server vers：コード実行",
      "summary": "Windows Print Spooler のリモートコード実行脆弱性",
      "risk": "攻撃者が特権を昇格させることができる",
      "product": "Windows 10 Version 1809 / Windows Server 2019 / Windows Server 2019 (Server Core installation) / Windows 10 Version 1909 / Windows 10 Version 21H1 / Windows 10 Version 2004 / Windows Server version 2004 / Windows 10 Version 20H2 / Windows Server vers",
      "category": "windows",
      "component": "package",
      "severity": "high",
      "cvss": 7.8,
      "cvssVersion": "3.1",
      "cvssSource": "microsoft",
      "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
      "affected": [
        {
          "product": "Windows 10 Version 1809",
          "range": ">= 10.0.0 / < 10.0.17763.1999（環境: 32-bit Systems / x64-based Systems / ARM64-based Systems）"
        },
        {
          "product": "Windows Server 2019",
          "range": ">= 10.0.0 / < 10.0.17763.1999（環境: x64-based Systems）"
        },
        {
          "product": "Windows Server 2019 (Server Core installation)",
          "range": ">= 10.0.0 / < 10.0.17763.1999（環境: x64-based Systems）"
        },
        {
          "product": "Windows 10 Version 1909",
          "range": ">= 10.0.0 / < 10.0.18363.1621（環境: 32-bit Systems / x64-based Systems / ARM64-based Systems）"
        },
        {
          "product": "Windows 10 Version 21H1",
          "range": ">= 10.0.0 / < 10.0.19043.1052（環境: x64-based Systems / ARM64-based Systems / 32-bit Systems）"
        },
        {
          "product": "Windows 10 Version 2004",
          "range": ">= 10.0.0 / < 10.0.19041.1052（環境: 32-bit Systems / ARM64-based Systems / x64-based Systems）"
        },
        {
          "product": "Windows Server version 2004",
          "range": ">= 10.0.0 / < 10.0.19041.1052（環境: x64-based Systems）"
        },
        {
          "product": "Windows 10 Version 20H2",
          "range": ">= 10.0.0 / < 10.0.19042.1052（環境: 32-bit Systems / ARM64-based Systems）"
        },
        {
          "product": "Windows Server version 20H2",
          "range": ">= 10.0.0 / < 10.0.19042.1052（環境: x64-based Systems）"
        },
        {
          "product": "Windows 10 Version 1507",
          "range": ">= 10.0.0 / < 10.0.10240.18967（環境: 32-bit Systems / x64-based Systems）"
        },
        {
          "product": "Windows 10 Version 1607",
          "range": ">= 10.0.0 / < 10.0.14393.4467（環境: 32-bit Systems / x64-based Systems）"
        },
        {
          "product": "Windows Server 2016",
          "range": ">= 10.0.0 / < 10.0.14393.4467（環境: x64-based Systems）"
        },
        {
          "product": "Windows Server 2016 (Server Core installation)",
          "range": ">= 10.0.0 / < 10.0.14393.4467（環境: x64-based Systems）"
        },
        {
          "product": "Windows 7",
          "range": ">= 6.1.0 / < 6.1.7601.25632（環境: 32-bit Systems）"
        },
        {
          "product": "Windows 7 Service Pack 1",
          "range": ">= 6.1.0 / < 6.1.7601.25632（環境: x64-based Systems）"
        },
        {
          "product": "Windows 8.1",
          "range": ">= 6.3.0 / < 6.3.9600.20045（環境: 32-bit Systems / x64-based Systems / ARM64-based Systems）"
        },
        {
          "product": "Windows 8.1",
          "range": ">= 6.3.0 / < 6.3.9600.20044（環境: 32-bit Systems / x64-based Systems / ARM64-based Systems）"
        },
        {
          "product": "Windows Server 2008 Service Pack 2",
          "range": ">= 6.0.0 / < 6.0.6003.21137（環境: 32-bit Systems）"
        },
        {
          "product": "Windows Server 2008 Service Pack 2 (Server Core installation)",
          "range": ">= 6.0.0 / < 6.0.6003.21137（環境: 32-bit Systems / x64-based Systems）"
        },
        {
          "product": "Windows Server 2008  Service Pack 2",
          "range": ">= 6.0.0 / < 6.0.6003.21137（環境: x64-based Systems）"
        },
        {
          "product": "Windows Server 2008 R2 Service Pack 1",
          "range": ">= 6.1.0 / < 6.1.7601.25632（環境: x64-based Systems）"
        },
        {
          "product": "Windows Server 2008 R2 Service Pack 1 (Server Core installation)",
          "range": ">= 6.0.0 / < 6.1.7601.25632（環境: x64-based Systems）"
        },
        {
          "product": "Windows Server 2012",
          "range": ">= 6.2.0 / < 6.2.9200.23372（環境: x64-based Systems）"
        },
        {
          "product": "Windows Server 2012 (Server Core installation)",
          "range": ">= 6.2.0 / < 6.2.9200.23372（環境: x64-based Systems）"
        },
        {
          "product": "Windows Server 2012 R2",
          "range": ">= 6.3.0 / < 6.3.9600.20045（環境: x64-based Systems）"
        },
        {
          "product": "Windows Server 2012 R2",
          "range": ">= 6.3.0 / < 6.3.9600.20044（環境: x64-based Systems）"
        },
        {
          "product": "Windows Server 2012 R2 (Server Core installation)",
          "range": ">= 6.3.0 / < 6.3.9600.20045（環境: x64-based Systems）"
        },
        {
          "product": "Windows Server 2012 R2 (Server Core installation)",
          "range": ">= 6.3.0 / < 6.3.9600.20044（環境: x64-based Systems）"
        }
      ],
      "fixed": [],
      "steps": [
        "ベンダーの指示に従って更新プログラムを適用する。",
        "「CVE-2021-1675」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
        "Windows 11は「設定」→「Windows Update」→「更新プログラムのチェック」を開き、提供された更新を適用します。再起動を求められたら完了させます。会社管理のPC、Windows Server、サポート外の版は管理担当者に適用する修正番号と配布予定を確認してください。"
      ],
      "references": [
        {
          "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json",
          "label": "CVE：microsoft"
        },
        {
          "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-1675",
          "label": "CISA KEV（悪用確認）"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-1675",
          "label": "CVE公式レコード"
        },
        {
          "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1675",
          "label": "CVE掲載の参考情報"
        },
        {
          "url": "https://www.kb.cert.org/vuls/id/383432",
          "label": "VU#383432"
        },
        {
          "url": "http://packetstormsecurity.com/files/163349/Microsoft-PrintNightmare-Proof-Of-Concept.html",
          "label": "CVE掲載の参考情報"
        },
        {
          "url": "http://packetstormsecurity.com/files/163351/PrintNightmare-Windows-Spooler-Service-Remote-Code-Execution.html",
          "label": "CVE掲載の参考情報"
        },
        {
          "url": "http://packetstormsecurity.com/files/167261/Print-Spooler-Remote-DLL-Injection.html",
          "label": "CVE掲載の参考情報"
        },
        {
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-1675",
          "label": "CISAが示す関連情報"
        },
        {
          "url": "https://www.first.org/cvss/v3.1/specification-document",
          "label": "FIRST公式：CVSS 3.1の条件の定義"
        },
        {
          "url": "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device",
          "label": "Microsoft公式：Windowsの情報を調べる"
        },
        {
          "url": "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates",
          "label": "Microsoft公式：Windows Updateの操作"
        }
      ],
      "publishedAt": "2021-06-08T22:46:11.000Z",
      "modifiedAt": "2026-08-12T03:55:44.254Z",
      "fetchedAt": "2026-10-23T02:43:13.856Z",
      "exploitStatus": "confirmed",
      "sources": [
        "CVE",
        "CISA KEV"
      ],
      "originalText": "",
      "sourceTitle": "Windows Print Spooler Remote Code Execution Vulnerability",
      "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。",
      "state": "published",
      "affectedDetails": [
        {
          "vendor": "Microsoft",
          "product": "Windows 10 Version 1809",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_10_1809:10.0.17763.1999:*:*:*:*:*:x86:*",
            "cpe:2.3:o:microsoft:windows_10_1809:10.0.17763.1999:*:*:*:*:*:x64:*",
            "cpe:2.3:o:microsoft:windows_10_1809:10.0.17763.1999:*:*:*:*:*:arm64:*"
          ],
          "platforms": [
            "32-bit Systems",
            "x64-based Systems",
            "ARM64-based Systems"
          ],
          "versions": [
            {
              "version": "10.0.0",
              "lessThan": "10.0.17763.1999",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows Server 2019",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_server_2019:10.0.17763.1999:*:*:*:*:*:*:*"
          ],
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "10.0.0",
              "lessThan": "10.0.17763.1999",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows Server 2019 (Server Core installation)",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_server_2019:10.0.17763.1999:*:*:*:*:*:*:*"
          ],
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "10.0.0",
              "lessThan": "10.0.17763.1999",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows 10 Version 1909",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_10_1909:10.0.18363.1621:*:*:*:*:*:x86:*",
            "cpe:2.3:o:microsoft:windows_10_1909:10.0.18363.1621:*:*:*:*:*:x64:*",
            "cpe:2.3:o:microsoft:windows_10_1809:10.0.18363.1621:*:*:*:*:*:x64:*"
          ],
          "platforms": [
            "32-bit Systems",
            "x64-based Systems",
            "ARM64-based Systems"
          ],
          "versions": [
            {
              "version": "10.0.0",
              "lessThan": "10.0.18363.1621",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows 10 Version 21H1",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_10_21H1:10.0.19043.1052:*:*:*:*:*:x64:*",
            "cpe:2.3:o:microsoft:windows_10_21H1:10.0.19043.1052:*:*:*:*:*:arm64:*",
            "cpe:2.3:o:microsoft:windows_10_21H1:10.0.19043.1052:*:*:*:*:*:x86:*"
          ],
          "platforms": [
            "x64-based Systems",
            "ARM64-based Systems",
            "32-bit Systems"
          ],
          "versions": [
            {
              "version": "10.0.0",
              "lessThan": "10.0.19043.1052",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows 10 Version 2004",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_10_1809:10.0.19041.1052:*:*:*:*:*:x64:*"
          ],
          "platforms": [
            "32-bit Systems",
            "ARM64-based Systems",
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "10.0.0",
              "lessThan": "10.0.19041.1052",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows Server version 2004",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_server_2004:10.0.19041.1052:*:*:*:*:*:*:*"
          ],
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "10.0.0",
              "lessThan": "10.0.19041.1052",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows 10 Version 20H2",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_10_20H2:10.0.19042.1052:*:*:*:*:*:x86:*",
            "cpe:2.3:o:microsoft:windows_10_20H2:10.0.19042.1052:*:*:*:*:*:arm64:*"
          ],
          "platforms": [
            "32-bit Systems",
            "ARM64-based Systems"
          ],
          "versions": [
            {
              "version": "10.0.0",
              "lessThan": "10.0.19042.1052",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows Server version 20H2",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_server_20H2:10.0.19042.1052:*:*:*:*:*:*:*"
          ],
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "10.0.0",
              "lessThan": "10.0.19042.1052",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows 10 Version 1507",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_10_1507:10.0.10240.18967:*:*:*:*:*:x86:*",
            "cpe:2.3:o:microsoft:windows_10_1507:10.0.10240.18967:*:*:*:*:*:x64:*"
          ],
          "platforms": [
            "32-bit Systems",
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "10.0.0",
              "lessThan": "10.0.10240.18967",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows 10 Version 1607",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_10_1607:10.0.14393.4467:*:*:*:*:*:x86:*",
            "cpe:2.3:o:microsoft:windows_10_1607:10.0.14393.4467:*:*:*:*:*:x64:*"
          ],
          "platforms": [
            "32-bit Systems",
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "10.0.0",
              "lessThan": "10.0.14393.4467",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows Server 2016",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_server_2016:10.0.14393.4467:*:*:*:*:*:*:*"
          ],
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "10.0.0",
              "lessThan": "10.0.14393.4467",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows Server 2016 (Server Core installation)",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_server_2016:10.0.14393.4467:*:*:*:*:*:*:*"
          ],
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "10.0.0",
              "lessThan": "10.0.14393.4467",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows 7",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_7:6.1.7601.25632:sp1:*:*:*:*:x86:*"
          ],
          "platforms": [
            "32-bit Systems"
          ],
          "versions": [
            {
              "version": "6.1.0",
              "lessThan": "6.1.7601.25632",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows 7 Service Pack 1",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_7:6.1.7601.25632:sp1:*:*:*:*:x64:*"
          ],
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "6.1.0",
              "lessThan": "6.1.7601.25632",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows 8.1",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_8.1:6.3.9600.20045:*:*:*:*:*:x86:*",
            "cpe:2.3:o:microsoft:windows_8.1:6.3.9600.20044:*:*:*:*:*:x86:*",
            "cpe:2.3:o:microsoft:windows_8.1:6.3.9600.20045:*:*:*:*:*:x64:*",
            "cpe:2.3:o:microsoft:windows_8.1:6.3.9600.20044:*:*:*:*:*:x64:*",
            "cpe:2.3:o:microsoft:windows_rt_8.1:6.3.9600.20045:*:*:*:*:*:*:*"
          ],
          "platforms": [
            "32-bit Systems",
            "x64-based Systems",
            "ARM64-based Systems"
          ],
          "versions": [
            {
              "version": "6.3.0",
              "lessThan": "6.3.9600.20045",
              "versionType": "custom",
              "status": "affected"
            },
            {
              "version": "6.3.0",
              "lessThan": "6.3.9600.20044",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows Server 2008 Service Pack 2",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_server_2008_sp2:6.0.6003.21137:*:*:*:*:*:x64:*"
          ],
          "platforms": [
            "32-bit Systems"
          ],
          "versions": [
            {
              "version": "6.0.0",
              "lessThan": "6.0.6003.21137",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows Server 2008 Service Pack 2 (Server Core installation)",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_server_2008_sp2:6.0.6003.21137:*:*:*:*:*:x64:*",
            "cpe:2.3:o:microsoft:windows_server_2008_sp2:6.0.6003.21137:*:*:*:*:*:x86:*"
          ],
          "platforms": [
            "32-bit Systems",
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "6.0.0",
              "lessThan": "6.0.6003.21137",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows Server 2008  Service Pack 2",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_server_2008_sp2:6.0.6003.21137:*:*:*:*:*:x86:*"
          ],
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "6.0.0",
              "lessThan": "6.0.6003.21137",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows Server 2008 R2 Service Pack 1",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_server_2008_R2:6.1.7601.25632:*:*:*:*:*:x64:*"
          ],
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "6.1.0",
              "lessThan": "6.1.7601.25632",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows Server 2008 R2 Service Pack 1 (Server Core installation)",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_server_2008_R2:6.1.7601.25632:*:*:*:*:*:x64:*"
          ],
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "6.0.0",
              "lessThan": "6.1.7601.25632",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows Server 2012",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_server_2012:6.2.9200.23372:*:*:*:*:*:x64:*"
          ],
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "6.2.0",
              "lessThan": "6.2.9200.23372",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows Server 2012 (Server Core installation)",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_server_2012:6.2.9200.23372:*:*:*:*:*:x64:*"
          ],
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "6.2.0",
              "lessThan": "6.2.9200.23372",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows Server 2012 R2",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_server_2012_R2:6.3.9600.20045:*:*:*:*:*:x64:*",
            "cpe:2.3:o:microsoft:windows_server_2012_R2:6.3.9600.20044:*:*:*:*:*:x64:*"
          ],
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "6.3.0",
              "lessThan": "6.3.9600.20045",
              "versionType": "custom",
              "status": "affected"
            },
            {
              "version": "6.3.0",
              "lessThan": "6.3.9600.20044",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows Server 2012 R2 (Server Core installation)",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_server_2012_R2:6.3.9600.20045:*:*:*:*:*:x64:*",
            "cpe:2.3:o:microsoft:windows_server_2012_R2:6.3.9600.20044:*:*:*:*:*:x64:*"
          ],
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "6.3.0",
              "lessThan": "6.3.9600.20045",
              "versionType": "custom",
              "status": "affected"
            },
            {
              "version": "6.3.0",
              "lessThan": "6.3.9600.20044",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        }
      ],
      "configurationNotes": "対象環境・機能: 32-bit Systems / x64-based Systems / ARM64-based Systems。製品バージョンだけでなく、原文の利用条件を照合してください。",
      "officialEvidence": {
        "schemaVersion": "1.0",
        "id": "CVE-2021-1675",
        "sourceType": "CVE",
        "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json",
        "fetchedAt": "2026-10-23T02:43:13.856Z",
        "publishedAt": "2021-06-08T22:46:11.000Z",
        "modifiedAt": "2026-08-12T03:55:44.254Z",
        "state": "published",
        "provider": "microsoft",
        "title": "Windows Print Spooler Remote Code Execution Vulnerability",
        "descriptions": [
          {
            "lang": "en-US",
            "value": "Windows Print Spooler Remote Code Execution Vulnerability",
            "sourcePath": "/containers/cna/descriptions/0/value"
          }
        ],
        "affected": [
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 1809",
            "sourcePath": "/containers/cna/affected/0",
            "platforms": [
              "32-bit Systems",
              "x64-based Systems",
              "ARM64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_10_1809:10.0.17763.1999:*:*:*:*:*:x86:*",
              "cpe:2.3:o:microsoft:windows_10_1809:10.0.17763.1999:*:*:*:*:*:x64:*",
              "cpe:2.3:o:microsoft:windows_10_1809:10.0.17763.1999:*:*:*:*:*:arm64:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/0/versions/0",
                "version": "10.0.0",
                "lessThan": "10.0.17763.1999",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server 2019",
            "sourcePath": "/containers/cna/affected/1",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_server_2019:10.0.17763.1999:*:*:*:*:*:*:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/1/versions/0",
                "version": "10.0.0",
                "lessThan": "10.0.17763.1999",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server 2019 (Server Core installation)",
            "sourcePath": "/containers/cna/affected/2",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_server_2019:10.0.17763.1999:*:*:*:*:*:*:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/2/versions/0",
                "version": "10.0.0",
                "lessThan": "10.0.17763.1999",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 1909",
            "sourcePath": "/containers/cna/affected/3",
            "platforms": [
              "32-bit Systems",
              "x64-based Systems",
              "ARM64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_10_1909:10.0.18363.1621:*:*:*:*:*:x86:*",
              "cpe:2.3:o:microsoft:windows_10_1909:10.0.18363.1621:*:*:*:*:*:x64:*",
              "cpe:2.3:o:microsoft:windows_10_1809:10.0.18363.1621:*:*:*:*:*:x64:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/3/versions/0",
                "version": "10.0.0",
                "lessThan": "10.0.18363.1621",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 21H1",
            "sourcePath": "/containers/cna/affected/4",
            "platforms": [
              "x64-based Systems",
              "ARM64-based Systems",
              "32-bit Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_10_21H1:10.0.19043.1052:*:*:*:*:*:x64:*",
              "cpe:2.3:o:microsoft:windows_10_21H1:10.0.19043.1052:*:*:*:*:*:arm64:*",
              "cpe:2.3:o:microsoft:windows_10_21H1:10.0.19043.1052:*:*:*:*:*:x86:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/4/versions/0",
                "version": "10.0.0",
                "lessThan": "10.0.19043.1052",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 2004",
            "sourcePath": "/containers/cna/affected/5",
            "platforms": [
              "32-bit Systems",
              "ARM64-based Systems",
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_10_1809:10.0.19041.1052:*:*:*:*:*:x64:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/5/versions/0",
                "version": "10.0.0",
                "lessThan": "10.0.19041.1052",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server version 2004",
            "sourcePath": "/containers/cna/affected/6",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_server_2004:10.0.19041.1052:*:*:*:*:*:*:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/6/versions/0",
                "version": "10.0.0",
                "lessThan": "10.0.19041.1052",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 20H2",
            "sourcePath": "/containers/cna/affected/7",
            "platforms": [
              "32-bit Systems",
              "ARM64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_10_20H2:10.0.19042.1052:*:*:*:*:*:x86:*",
              "cpe:2.3:o:microsoft:windows_10_20H2:10.0.19042.1052:*:*:*:*:*:arm64:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/7/versions/0",
                "version": "10.0.0",
                "lessThan": "10.0.19042.1052",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server version 20H2",
            "sourcePath": "/containers/cna/affected/8",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_server_20H2:10.0.19042.1052:*:*:*:*:*:*:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/8/versions/0",
                "version": "10.0.0",
                "lessThan": "10.0.19042.1052",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 1507",
            "sourcePath": "/containers/cna/affected/9",
            "platforms": [
              "32-bit Systems",
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_10_1507:10.0.10240.18967:*:*:*:*:*:x86:*",
              "cpe:2.3:o:microsoft:windows_10_1507:10.0.10240.18967:*:*:*:*:*:x64:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/9/versions/0",
                "version": "10.0.0",
                "lessThan": "10.0.10240.18967",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 1607",
            "sourcePath": "/containers/cna/affected/10",
            "platforms": [
              "32-bit Systems",
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_10_1607:10.0.14393.4467:*:*:*:*:*:x86:*",
              "cpe:2.3:o:microsoft:windows_10_1607:10.0.14393.4467:*:*:*:*:*:x64:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/10/versions/0",
                "version": "10.0.0",
                "lessThan": "10.0.14393.4467",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server 2016",
            "sourcePath": "/containers/cna/affected/11",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_server_2016:10.0.14393.4467:*:*:*:*:*:*:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/11/versions/0",
                "version": "10.0.0",
                "lessThan": "10.0.14393.4467",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server 2016 (Server Core installation)",
            "sourcePath": "/containers/cna/affected/12",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_server_2016:10.0.14393.4467:*:*:*:*:*:*:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/12/versions/0",
                "version": "10.0.0",
                "lessThan": "10.0.14393.4467",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 7",
            "sourcePath": "/containers/cna/affected/13",
            "platforms": [
              "32-bit Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_7:6.1.7601.25632:sp1:*:*:*:*:x86:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/13/versions/0",
                "version": "6.1.0",
                "lessThan": "6.1.7601.25632",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 7 Service Pack 1",
            "sourcePath": "/containers/cna/affected/14",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_7:6.1.7601.25632:sp1:*:*:*:*:x64:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/14/versions/0",
                "version": "6.1.0",
                "lessThan": "6.1.7601.25632",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 8.1",
            "sourcePath": "/containers/cna/affected/15",
            "platforms": [
              "32-bit Systems",
              "x64-based Systems",
              "ARM64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_8.1:6.3.9600.20045:*:*:*:*:*:x86:*",
              "cpe:2.3:o:microsoft:windows_8.1:6.3.9600.20044:*:*:*:*:*:x86:*",
              "cpe:2.3:o:microsoft:windows_8.1:6.3.9600.20045:*:*:*:*:*:x64:*",
              "cpe:2.3:o:microsoft:windows_8.1:6.3.9600.20044:*:*:*:*:*:x64:*",
              "cpe:2.3:o:microsoft:windows_rt_8.1:6.3.9600.20045:*:*:*:*:*:*:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/15/versions/0",
                "version": "6.3.0",
                "lessThan": "6.3.9600.20045",
                "versionType": "custom",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/15/versions/1",
                "version": "6.3.0",
                "lessThan": "6.3.9600.20044",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server 2008 Service Pack 2",
            "sourcePath": "/containers/cna/affected/16",
            "platforms": [
              "32-bit Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_server_2008_sp2:6.0.6003.21137:*:*:*:*:*:x64:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/16/versions/0",
                "version": "6.0.0",
                "lessThan": "6.0.6003.21137",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server 2008 Service Pack 2 (Server Core installation)",
            "sourcePath": "/containers/cna/affected/17",
            "platforms": [
              "32-bit Systems",
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_server_2008_sp2:6.0.6003.21137:*:*:*:*:*:x64:*",
              "cpe:2.3:o:microsoft:windows_server_2008_sp2:6.0.6003.21137:*:*:*:*:*:x86:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/17/versions/0",
                "version": "6.0.0",
                "lessThan": "6.0.6003.21137",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server 2008  Service Pack 2",
            "sourcePath": "/containers/cna/affected/18",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_server_2008_sp2:6.0.6003.21137:*:*:*:*:*:x86:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/18/versions/0",
                "version": "6.0.0",
                "lessThan": "6.0.6003.21137",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server 2008 R2 Service Pack 1",
            "sourcePath": "/containers/cna/affected/19",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_server_2008_R2:6.1.7601.25632:*:*:*:*:*:x64:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/19/versions/0",
                "version": "6.1.0",
                "lessThan": "6.1.7601.25632",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server 2008 R2 Service Pack 1 (Server Core installation)",
            "sourcePath": "/containers/cna/affected/20",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_server_2008_R2:6.1.7601.25632:*:*:*:*:*:x64:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/20/versions/0",
                "version": "6.0.0",
                "lessThan": "6.1.7601.25632",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server 2012",
            "sourcePath": "/containers/cna/affected/21",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_server_2012:6.2.9200.23372:*:*:*:*:*:x64:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/21/versions/0",
                "version": "6.2.0",
                "lessThan": "6.2.9200.23372",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server 2012 (Server Core installation)",
            "sourcePath": "/containers/cna/affected/22",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_server_2012:6.2.9200.23372:*:*:*:*:*:x64:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/22/versions/0",
                "version": "6.2.0",
                "lessThan": "6.2.9200.23372",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server 2012 R2",
            "sourcePath": "/containers/cna/affected/23",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_server_2012_R2:6.3.9600.20045:*:*:*:*:*:x64:*",
              "cpe:2.3:o:microsoft:windows_server_2012_R2:6.3.9600.20044:*:*:*:*:*:x64:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/23/versions/0",
                "version": "6.3.0",
                "lessThan": "6.3.9600.20045",
                "versionType": "custom",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/23/versions/1",
                "version": "6.3.0",
                "lessThan": "6.3.9600.20044",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server 2012 R2 (Server Core installation)",
            "sourcePath": "/containers/cna/affected/24",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_server_2012_R2:6.3.9600.20045:*:*:*:*:*:x64:*",
              "cpe:2.3:o:microsoft:windows_server_2012_R2:6.3.9600.20044:*:*:*:*:*:x64:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/24/versions/0",
                "version": "6.3.0",
                "lessThan": "6.3.9600.20045",
                "versionType": "custom",
                "status": "affected"
              },
              {
                "sourcePath": "/containers/cna/affected/24/versions/1",
                "version": "6.3.0",
                "lessThan": "6.3.9600.20044",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          }
        ],
        "solutions": [],
        "workarounds": [],
        "exploits": [],
        "rejectedReasons": [],
        "problemTypes": [
          {
            "cweId": "",
            "lang": "en-US",
            "description": "Elevation of Privilege",
            "sourcePath": "/containers/cna/problemTypes/0/descriptions/0"
          }
        ],
        "metrics": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "provider": "microsoft",
            "sourcePath": "/containers/cna/metrics/0/cvssV3_1"
          }
        ],
        "references": [
          {
            "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1675",
            "label": "CVE",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/1/references/0"
          },
          {
            "url": "https://www.kb.cert.org/vuls/id/383432",
            "label": "VU#383432",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/1/references/1"
          },
          {
            "url": "http://packetstormsecurity.com/files/163349/Microsoft-PrintNightmare-Proof-Of-Concept.html",
            "label": "CVE",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/1/references/2"
          },
          {
            "url": "http://packetstormsecurity.com/files/163351/PrintNightmare-Windows-Spooler-Service-Remote-Code-Execution.html",
            "label": "CVE",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/1/references/3"
          },
          {
            "url": "http://packetstormsecurity.com/files/167261/Print-Spooler-Remote-DLL-Injection.html",
            "label": "CVE",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/1/references/4"
          },
          {
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-1675",
            "label": "CISA-ADP",
            "tags": [
              "government-resource"
            ],
            "provider": "CISA-ADP",
            "sourcePath": "/containers/adp/0/references/0"
          }
        ],
        "snippets": [
          {
            "evidenceId": "official:/containers/cna/affected/0",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json",
            "sourcePath": "/containers/cna/affected/0",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1809\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_10_1809:10.0.17763.1999:*:*:*:*:*:x86:*\",\"cpe:2.3:o:microsoft:windows_10_1809:10.0.17763.1999:*:*:*:*:*:x64:*\",\"cpe:2.3:o:microsoft:windows_10_1809:10.0.17763.1999:*:*:*:*:*:arm64:*\"],\"platforms\":[\"32-bit Systems\",\"x64-based Systems\",\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"10.0.17763.1999\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json",
            "sourcePath": "/containers/cna/affected/1",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2019\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2019:10.0.17763.1999:*:*:*:*:*:*:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"10.0.17763.1999\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/2",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json",
            "sourcePath": "/containers/cna/affected/2",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2019 (Server Core installation)\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2019:10.0.17763.1999:*:*:*:*:*:*:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"10.0.17763.1999\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/3",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json",
            "sourcePath": "/containers/cna/affected/3",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1909\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_10_1909:10.0.18363.1621:*:*:*:*:*:x86:*\",\"cpe:2.3:o:microsoft:windows_10_1909:10.0.18363.1621:*:*:*:*:*:x64:*\",\"cpe:2.3:o:microsoft:windows_10_1809:10.0.18363.1621:*:*:*:*:*:x64:*\"],\"platforms\":[\"32-bit Systems\",\"x64-based Systems\",\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"10.0.18363.1621\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/4",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json",
            "sourcePath": "/containers/cna/affected/4",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 21H1\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_10_21H1:10.0.19043.1052:*:*:*:*:*:x64:*\",\"cpe:2.3:o:microsoft:windows_10_21H1:10.0.19043.1052:*:*:*:*:*:arm64:*\",\"cpe:2.3:o:microsoft:windows_10_21H1:10.0.19043.1052:*:*:*:*:*:x86:*\"],\"platforms\":[\"x64-based Systems\",\"ARM64-based Systems\",\"32-bit Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"10.0.19043.1052\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/5",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json",
            "sourcePath": "/containers/cna/affected/5",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 2004\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_10_1809:10.0.19041.1052:*:*:*:*:*:x64:*\"],\"platforms\":[\"32-bit Systems\",\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"10.0.19041.1052\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/6",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json",
            "sourcePath": "/containers/cna/affected/6",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server version 2004\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2004:10.0.19041.1052:*:*:*:*:*:*:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"10.0.19041.1052\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/7",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json",
            "sourcePath": "/containers/cna/affected/7",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 20H2\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_10_20H2:10.0.19042.1052:*:*:*:*:*:x86:*\",\"cpe:2.3:o:microsoft:windows_10_20H2:10.0.19042.1052:*:*:*:*:*:arm64:*\"],\"platforms\":[\"32-bit Systems\",\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"10.0.19042.1052\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/8",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json",
            "sourcePath": "/containers/cna/affected/8",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server version 20H2\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_20H2:10.0.19042.1052:*:*:*:*:*:*:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"10.0.19042.1052\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/9",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json",
            "sourcePath": "/containers/cna/affected/9",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1507\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_10_1507:10.0.10240.18967:*:*:*:*:*:x86:*\",\"cpe:2.3:o:microsoft:windows_10_1507:10.0.10240.18967:*:*:*:*:*:x64:*\"],\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"10.0.10240.18967\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/10",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json",
            "sourcePath": "/containers/cna/affected/10",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1607\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_10_1607:10.0.14393.4467:*:*:*:*:*:x86:*\",\"cpe:2.3:o:microsoft:windows_10_1607:10.0.14393.4467:*:*:*:*:*:x64:*\"],\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"10.0.14393.4467\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/11",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json",
            "sourcePath": "/containers/cna/affected/11",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2016\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2016:10.0.14393.4467:*:*:*:*:*:*:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"10.0.14393.4467\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/12",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json",
            "sourcePath": "/containers/cna/affected/12",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2016 (Server Core installation)\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2016:10.0.14393.4467:*:*:*:*:*:*:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"10.0.14393.4467\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/13",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json",
            "sourcePath": "/containers/cna/affected/13",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 7\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_7:6.1.7601.25632:sp1:*:*:*:*:x86:*\"],\"platforms\":[\"32-bit Systems\"],\"versions\":[{\"version\":\"6.1.0\",\"lessThan\":\"6.1.7601.25632\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/14",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json",
            "sourcePath": "/containers/cna/affected/14",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 7 Service Pack 1\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_7:6.1.7601.25632:sp1:*:*:*:*:x64:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.1.0\",\"lessThan\":\"6.1.7601.25632\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/15",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json",
            "sourcePath": "/containers/cna/affected/15",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 8.1\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_8.1:6.3.9600.20045:*:*:*:*:*:x86:*\",\"cpe:2.3:o:microsoft:windows_8.1:6.3.9600.20044:*:*:*:*:*:x86:*\",\"cpe:2.3:o:microsoft:windows_8.1:6.3.9600.20045:*:*:*:*:*:x64:*\",\"cpe:2.3:o:microsoft:windows_8.1:6.3.9600.20044:*:*:*:*:*:x64:*\",\"cpe:2.3:o:microsoft:windows_rt_8.1:6.3.9600.20045:*:*:*:*:*:*:*\"],\"platforms\":[\"32-bit Systems\",\"x64-based Systems\",\"ARM64-based Systems\"],\"versions\":[{\"version\":\"6.3.0\",\"lessThan\":\"6.3.9600.20045\",\"versionType\":\"custom\",\"status\":\"affected\"},{\"version\":\"6.3.0\",\"lessThan\":\"6.3.9600.20044\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/16",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json",
            "sourcePath": "/containers/cna/affected/16",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2008 Service Pack 2\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2008_sp2:6.0.6003.21137:*:*:*:*:*:x64:*\"],\"platforms\":[\"32-bit Systems\"],\"versions\":[{\"version\":\"6.0.0\",\"lessThan\":\"6.0.6003.21137\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/17",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json",
            "sourcePath": "/containers/cna/affected/17",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2008 Service Pack 2 (Server Core installation)\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2008_sp2:6.0.6003.21137:*:*:*:*:*:x64:*\",\"cpe:2.3:o:microsoft:windows_server_2008_sp2:6.0.6003.21137:*:*:*:*:*:x86:*\"],\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"6.0.0\",\"lessThan\":\"6.0.6003.21137\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/18",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json",
            "sourcePath": "/containers/cna/affected/18",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2008  Service Pack 2\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2008_sp2:6.0.6003.21137:*:*:*:*:*:x86:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.0.0\",\"lessThan\":\"6.0.6003.21137\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/19",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json",
            "sourcePath": "/containers/cna/affected/19",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2008 R2 Service Pack 1\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2008_R2:6.1.7601.25632:*:*:*:*:*:x64:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.1.0\",\"lessThan\":\"6.1.7601.25632\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/20",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json",
            "sourcePath": "/containers/cna/affected/20",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2008 R2 Service Pack 1 (Server Core installation)\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2008_R2:6.1.7601.25632:*:*:*:*:*:x64:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.0.0\",\"lessThan\":\"6.1.7601.25632\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/21",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json",
            "sourcePath": "/containers/cna/affected/21",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2012:6.2.9200.23372:*:*:*:*:*:x64:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.2.0\",\"lessThan\":\"6.2.9200.23372\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/22",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json",
            "sourcePath": "/containers/cna/affected/22",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012 (Server Core installation)\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2012:6.2.9200.23372:*:*:*:*:*:x64:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.2.0\",\"lessThan\":\"6.2.9200.23372\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/23",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json",
            "sourcePath": "/containers/cna/affected/23",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012 R2\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2012_R2:6.3.9600.20045:*:*:*:*:*:x64:*\",\"cpe:2.3:o:microsoft:windows_server_2012_R2:6.3.9600.20044:*:*:*:*:*:x64:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.3.0\",\"lessThan\":\"6.3.9600.20045\",\"versionType\":\"custom\",\"status\":\"affected\"},{\"version\":\"6.3.0\",\"lessThan\":\"6.3.9600.20044\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/24",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json",
            "sourcePath": "/containers/cna/affected/24",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012 R2 (Server Core installation)\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2012_R2:6.3.9600.20045:*:*:*:*:*:x64:*\",\"cpe:2.3:o:microsoft:windows_server_2012_R2:6.3.9600.20044:*:*:*:*:*:x64:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.3.0\",\"lessThan\":\"6.3.9600.20045\",\"versionType\":\"custom\",\"status\":\"affected\"},{\"version\":\"6.3.0\",\"lessThan\":\"6.3.9600.20044\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/descriptions/0/value",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json",
            "sourcePath": "/containers/cna/descriptions/0/value",
            "text": "Windows Print Spooler Remote Code Execution Vulnerability",
            "truncated": false,
            "representation": "source_excerpt"
          },
          {
            "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json",
            "sourcePath": "/containers/cna/problemTypes/0/descriptions/0",
            "text": "{\"description\":\"Elevation of Privilege\",\"lang\":\"en-US\",\"type\":\"Impact\"}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json",
            "sourcePath": "/containers/cna/metrics/0/cvssV3_1",
            "text": "{\"version\":\"3.1\",\"baseSeverity\":\"HIGH\",\"baseScore\":7.8,\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C\"}",
            "truncated": false,
            "representation": "source_json"
          }
        ],
        "limits": {
          "completeness": "official_record",
          "truncatedFields": [],
          "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。"
        }
      },
      "sourceSnapshots": [
        {
          "source": "CVE",
          "modifiedAt": "2026-08-12T03:55:44.254Z",
          "fetchedAt": "2026-10-23T02:43:13.856Z",
          "state": "published"
        },
        {
          "source": "CISA KEV",
          "modifiedAt": "2021-11-03T00:00:00.000Z",
          "fetchedAt": "2026-10-23T02:17:50.489Z",
          "state": "published"
        }
      ],
      "sourceAction": "Apply updates per vendor instructions.",
      "sourceSummary": "Windows 10 Version 1809 / Windows Server 2019 / Windows Server 2019 (Server Core installation) / Windows 10 Version 1909 / Windows 10 Version 21H1 / Windows 10 Version 2004 / Windows Server version 2004 / Windows 10 Version 20H2 / Windows Server versにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。",
      "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。",
      "guidance": {
        "schemaVersion": "1.0",
        "method": "automatic",
        "reviewedAt": null,
        "reviewState": "current",
        "generatedAt": "2026-10-23T03:49:30.962Z",
        "generatorVersion": "2026-10-23.3",
        "sourceFingerprint": "3b67e2a8a66fd682ce15d57428941088ae5b058ddff736c1e046912b4acb8439",
        "sourceModifiedAt": "2026-08-12T03:55:44.254Z",
        "model": "@cf/openai/gpt-oss-120b",
        "verificationMethod": "exact_source_excerpt_and_independent_semantic_check",
        "summary": "Windows Print Spooler のリモートコード実行脆弱性",
        "risk": "攻撃者が特権を昇格させることができる",
        "summaryEvidenceIds": [
          "E1",
          "E2"
        ],
        "riskEvidenceIds": [
          "E3"
        ],
        "applicability": [
          {
            "text": "Windows 10 Version 1809 の 10.0.0 以上で 10.0.17763.1999 未満のバージョンが影響を受ける",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json"
            ],
            "evidenceIds": [
              "E4",
              "E1"
            ]
          },
          {
            "text": "Windows Server 2019 の 10.0.0 以上で 10.0.17763.1999 未満のバージョンが影響を受ける",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json"
            ],
            "evidenceIds": [
              "E5",
              "E1"
            ]
          },
          {
            "text": "Windows Server 2019 (Server Core installation) の 10.0.0 以上で 10.0.17763.1999 未満のバージョンが影響を受ける",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json"
            ],
            "evidenceIds": [
              "E6",
              "E1"
            ]
          },
          {
            "text": "Windows 10 Version 1909 の 10.0.0 以上で 10.0.18363.1621 未満のバージョンが影響を受ける",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json"
            ],
            "evidenceIds": [
              "E7",
              "E1"
            ]
          },
          {
            "text": "Windows 10 Version 21H1 の 10.0.0 以上で 10.0.19043.1052 未満のバージョンが影響を受ける",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json"
            ],
            "evidenceIds": [
              "E8",
              "E1"
            ]
          },
          {
            "text": "Windows 10 Version 2004 の 10.0.0 以上で 10.0.19041.1052 未満のバージョンが影響を受ける",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json"
            ],
            "evidenceIds": [
              "E9",
              "E1"
            ]
          },
          {
            "text": "Windows Server version 2004 の 10.0.0 以上で 10.0.19041.1052 未満のバージョンが影響を受ける",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json"
            ],
            "evidenceIds": [
              "E10",
              "E1"
            ]
          },
          {
            "text": "Windows 10 Version 20H2 の 10.0.0 以上で 10.0.19042.1052 未満のバージョンが影響を受ける",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json"
            ],
            "evidenceIds": [
              "E11",
              "E1"
            ]
          },
          {
            "text": "Windows Server version 20H2 の 10.0.0 以上で 10.0.19042.1052 未満のバージョンが影響を受ける",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json"
            ],
            "evidenceIds": [
              "E12",
              "E1"
            ]
          },
          {
            "text": "Windows 10 Version 1507 の 10.0.0 以上で 10.0.10240.18967 未満のバージョンが影響を受ける",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json"
            ],
            "evidenceIds": [
              "E13",
              "E1"
            ]
          },
          {
            "text": "Windows 10 Version 1607 の 10.0.0 以上で 10.0.14393.4467 未満のバージョンが影響を受ける",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json"
            ],
            "evidenceIds": [
              "E14",
              "E1"
            ]
          },
          {
            "text": "Windows Server 2016 の 10.0.0 以上で 10.0.14393.4467 未満のバージョンが影響を受ける",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json"
            ],
            "evidenceIds": [
              "E15",
              "E1"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 1809。影響ありとして記載：10.0.0以上、10.0.17763.1999未満。対象の環境：32-bit Systems、x64-based Systems、ARM64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json"
            ],
            "evidenceIds": [
              "E4"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server 2019。影響ありとして記載：10.0.0以上、10.0.17763.1999未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json"
            ],
            "evidenceIds": [
              "E5"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server 2019 (Server Core installation)。影響ありとして記載：10.0.0以上、10.0.17763.1999未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json"
            ],
            "evidenceIds": [
              "E6"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 1909。影響ありとして記載：10.0.0以上、10.0.18363.1621未満。対象の環境：32-bit Systems、x64-based Systems、ARM64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json"
            ],
            "evidenceIds": [
              "E7"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 21H1。影響ありとして記載：10.0.0以上、10.0.19043.1052未満。対象の環境：x64-based Systems、ARM64-based Systems、32-bit Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json"
            ],
            "evidenceIds": [
              "E8"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 2004。影響ありとして記載：10.0.0以上、10.0.19041.1052未満。対象の環境：32-bit Systems、ARM64-based Systems、x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json"
            ],
            "evidenceIds": [
              "E9"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server version 2004。影響ありとして記載：10.0.0以上、10.0.19041.1052未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json"
            ],
            "evidenceIds": [
              "E10"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 20H2。影響ありとして記載：10.0.0以上、10.0.19042.1052未満。対象の環境：32-bit Systems、ARM64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json"
            ],
            "evidenceIds": [
              "E11"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server version 20H2。影響ありとして記載：10.0.0以上、10.0.19042.1052未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json"
            ],
            "evidenceIds": [
              "E12"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 1507。影響ありとして記載：10.0.0以上、10.0.10240.18967未満。対象の環境：32-bit Systems、x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json"
            ],
            "evidenceIds": [
              "E13"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 1607。影響ありとして記載：10.0.0以上、10.0.14393.4467未満。対象の環境：32-bit Systems、x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json"
            ],
            "evidenceIds": [
              "E14"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server 2016。影響ありとして記載：10.0.0以上、10.0.14393.4467未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json"
            ],
            "evidenceIds": [
              "E15"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server 2016 (Server Core installation)。影響ありとして記載：10.0.0以上、10.0.14393.4467未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json"
            ],
            "evidenceIds": [
              "E16"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 7。影響ありとして記載：6.1.0以上、6.1.7601.25632未満。対象の環境：32-bit Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json"
            ],
            "evidenceIds": [
              "E17"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 7 Service Pack 1。影響ありとして記載：6.1.0以上、6.1.7601.25632未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json"
            ],
            "evidenceIds": [
              "E18"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 8.1。影響ありとして記載：6.3.0以上、6.3.9600.20045未満。影響ありとして記載：6.3.0以上、6.3.9600.20044未満。対象の環境：32-bit Systems、x64-based Systems、ARM64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json"
            ],
            "evidenceIds": [
              "E19"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server 2008 Service Pack 2。影響ありとして記載：6.0.0以上、6.0.6003.21137未満。対象の環境：32-bit Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json"
            ],
            "evidenceIds": [
              "E20"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server 2008 Service Pack 2 (Server Core installation)。影響ありとして記載：6.0.0以上、6.0.6003.21137未満。対象の環境：32-bit Systems、x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json"
            ],
            "evidenceIds": [
              "E21"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server 2008  Service Pack 2。影響ありとして記載：6.0.0以上、6.0.6003.21137未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json"
            ],
            "evidenceIds": [
              "E22"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server 2008 R2 Service Pack 1。影響ありとして記載：6.1.0以上、6.1.7601.25632未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json"
            ],
            "evidenceIds": [
              "E23"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server 2008 R2 Service Pack 1 (Server Core installation)。影響ありとして記載：6.0.0以上、6.1.7601.25632未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json"
            ],
            "evidenceIds": [
              "E24"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server 2012。影響ありとして記載：6.2.0以上、6.2.9200.23372未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json"
            ],
            "evidenceIds": [
              "E25"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server 2012 (Server Core installation)。影響ありとして記載：6.2.0以上、6.2.9200.23372未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json"
            ],
            "evidenceIds": [
              "E26"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server 2012 R2。影響ありとして記載：6.3.0以上、6.3.9600.20045未満。影響ありとして記載：6.3.0以上、6.3.9600.20044未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json"
            ],
            "evidenceIds": [
              "E27"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server 2012 R2 (Server Core installation)。影響ありとして記載：6.3.0以上、6.3.9600.20045未満。影響ありとして記載：6.3.0以上、6.3.9600.20044未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json"
            ],
            "evidenceIds": [
              "E28"
            ]
          },
          {
            "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。",
            "kind": "fact",
            "sourceUrls": [
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-1675"
            ],
            "evidenceIds": [
              "E30"
            ]
          }
        ],
        "versionChecks": [
          {
            "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json"
            ],
            "evidenceIds": [
              "E4"
            ]
          },
          {
            "text": "「スタート」→「設定」→「システム」→「バージョン情報」を開き、Windowsのエディション・バージョン・OSビルドを控えます。会社のPCやサーバーは、この情報とCVE番号を管理担当者へ渡してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device"
            ]
          }
        ],
        "actions": [
          {
            "text": "ベンダーの指示に従って更新プログラムを適用する。",
            "kind": "fix",
            "sourceUrls": [
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-1675"
            ],
            "evidenceIds": [
              "E29"
            ]
          },
          {
            "text": "「CVE-2021-1675」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cve.org/CVERecord?id=CVE-2021-1675",
              "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1675",
              "https://www.kb.cert.org/vuls/id/383432",
              "http://packetstormsecurity.com/files/163349/Microsoft-PrintNightmare-Proof-Of-Concept.html",
              "http://packetstormsecurity.com/files/163351/PrintNightmare-Windows-Spooler-Service-Remote-Code-Execution.html",
              "http://packetstormsecurity.com/files/167261/Print-Spooler-Remote-DLL-Injection.html",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-1675",
              "https://nvd.nist.gov/vuln/detail/CVE-2021-1675"
            ]
          },
          {
            "text": "Windows 11は「設定」→「Windows Update」→「更新プログラムのチェック」を開き、提供された更新を適用します。再起動を求められたら完了させます。会社管理のPC、Windows Server、サポート外の版は管理担当者に適用する修正番号と配布予定を確認してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates"
            ]
          }
        ],
        "temporaryMitigations": [
          {
            "text": "すぐ更新できない場合は、CVE番号、Windowsの版、業務で必要な機能を管理担当者に伝え、修正までの利用方法と更新予定を決めてください。すべてのWindowsの問題に同じ回避策が使えるわけではありません。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates",
              "https://www.cve.org/CVERecord?id=CVE-2021-1675",
              "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1675",
              "https://www.kb.cert.org/vuls/id/383432",
              "http://packetstormsecurity.com/files/163349/Microsoft-PrintNightmare-Proof-Of-Concept.html",
              "http://packetstormsecurity.com/files/163351/PrintNightmare-Windows-Spooler-Service-Remote-Code-Execution.html",
              "http://packetstormsecurity.com/files/167261/Print-Spooler-Remote-DLL-Injection.html",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-1675",
              "https://nvd.nist.gov/vuln/detail/CVE-2021-1675"
            ]
          }
        ],
        "verification": [
          {
            "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。",
            "kind": "procedure",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json"
            ],
            "evidenceIds": [
              "E4"
            ]
          },
          {
            "text": "再起動後にWindows Updateを開き直して失敗・再起動待ちがないか確認し、管理担当者にこのCVEに対応する修正の適用結果を確認してもらってください。「最新の状態」と出ても、別製品の更新やサポート外の版の修正を保証するものではありません。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates"
            ]
          }
        ],
        "unknowns": [
          "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。",
          "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。"
        ],
        "sources": [
          {
            "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json",
            "label": "CVE：microsoft"
          },
          {
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-1675",
            "label": "CISA KEV（悪用確認）"
          },
          {
            "url": "https://www.cve.org/CVERecord?id=CVE-2021-1675",
            "label": "CVE公式レコード"
          },
          {
            "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1675",
            "label": "CVE掲載の参考情報"
          },
          {
            "url": "https://www.kb.cert.org/vuls/id/383432",
            "label": "VU#383432"
          },
          {
            "url": "http://packetstormsecurity.com/files/163349/Microsoft-PrintNightmare-Proof-Of-Concept.html",
            "label": "CVE掲載の参考情報"
          },
          {
            "url": "http://packetstormsecurity.com/files/163351/PrintNightmare-Windows-Spooler-Service-Remote-Code-Execution.html",
            "label": "CVE掲載の参考情報"
          },
          {
            "url": "http://packetstormsecurity.com/files/167261/Print-Spooler-Remote-DLL-Injection.html",
            "label": "CVE掲載の参考情報"
          },
          {
            "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-1675",
            "label": "CISAが示す関連情報"
          },
          {
            "url": "https://www.first.org/cvss/v3.1/specification-document",
            "label": "FIRST公式：CVSS 3.1の条件の定義"
          },
          {
            "url": "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device",
            "label": "Microsoft公式：Windowsの情報を調べる"
          },
          {
            "url": "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates",
            "label": "Microsoft公式：Windows Updateの操作"
          }
        ],
        "evidence": [
          {
            "id": "E1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json",
            "sourceField": "/containers/cna/title",
            "excerpt": "Windows Print Spooler Remote Code Execution Vulnerability",
            "language": null
          },
          {
            "id": "E2",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json",
            "sourceField": "/containers/cna/descriptions/0/value",
            "excerpt": "Windows Print Spooler Remote Code Execution Vulnerability",
            "language": "en-US",
            "representation": "source_excerpt"
          },
          {
            "id": "E3",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json",
            "sourceField": "/containers/cna/problemTypes/0/descriptions/0",
            "excerpt": "{\"description\":\"Elevation of Privilege\",\"lang\":\"en-US\",\"type\":\"Impact\"}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E4",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json",
            "sourceField": "/containers/cna/affected/0",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1809\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_10_1809:10.0.17763.1999:*:*:*:*:*:x86:*\",\"cpe:2.3:o:microsoft:windows_10_1809:10.0.17763.1999:*:*:*:*:*:x64:*\",\"cpe:2.3:o:microsoft:windows_10_1809:10.0.17763.1999:*:*:*:*:*:arm64:*\"],\"platforms\":[\"32-bit Systems\",\"x64-based Systems\",\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"10.0.17763.1999\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E5",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json",
            "sourceField": "/containers/cna/affected/1",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2019\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2019:10.0.17763.1999:*:*:*:*:*:*:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"10.0.17763.1999\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E6",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json",
            "sourceField": "/containers/cna/affected/2",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2019 (Server Core installation)\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2019:10.0.17763.1999:*:*:*:*:*:*:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"10.0.17763.1999\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E7",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json",
            "sourceField": "/containers/cna/affected/3",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1909\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_10_1909:10.0.18363.1621:*:*:*:*:*:x86:*\",\"cpe:2.3:o:microsoft:windows_10_1909:10.0.18363.1621:*:*:*:*:*:x64:*\",\"cpe:2.3:o:microsoft:windows_10_1809:10.0.18363.1621:*:*:*:*:*:x64:*\"],\"platforms\":[\"32-bit Systems\",\"x64-based Systems\",\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"10.0.18363.1621\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E8",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json",
            "sourceField": "/containers/cna/affected/4",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 21H1\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_10_21H1:10.0.19043.1052:*:*:*:*:*:x64:*\",\"cpe:2.3:o:microsoft:windows_10_21H1:10.0.19043.1052:*:*:*:*:*:arm64:*\",\"cpe:2.3:o:microsoft:windows_10_21H1:10.0.19043.1052:*:*:*:*:*:x86:*\"],\"platforms\":[\"x64-based Systems\",\"ARM64-based Systems\",\"32-bit Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"10.0.19043.1052\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E9",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json",
            "sourceField": "/containers/cna/affected/5",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 2004\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_10_1809:10.0.19041.1052:*:*:*:*:*:x64:*\"],\"platforms\":[\"32-bit Systems\",\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"10.0.19041.1052\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E10",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json",
            "sourceField": "/containers/cna/affected/6",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server version 2004\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2004:10.0.19041.1052:*:*:*:*:*:*:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"10.0.19041.1052\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E11",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json",
            "sourceField": "/containers/cna/affected/7",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 20H2\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_10_20H2:10.0.19042.1052:*:*:*:*:*:x86:*\",\"cpe:2.3:o:microsoft:windows_10_20H2:10.0.19042.1052:*:*:*:*:*:arm64:*\"],\"platforms\":[\"32-bit Systems\",\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"10.0.19042.1052\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E12",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json",
            "sourceField": "/containers/cna/affected/8",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server version 20H2\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_20H2:10.0.19042.1052:*:*:*:*:*:*:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"10.0.19042.1052\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E13",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json",
            "sourceField": "/containers/cna/affected/9",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1507\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_10_1507:10.0.10240.18967:*:*:*:*:*:x86:*\",\"cpe:2.3:o:microsoft:windows_10_1507:10.0.10240.18967:*:*:*:*:*:x64:*\"],\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"10.0.10240.18967\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E14",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json",
            "sourceField": "/containers/cna/affected/10",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1607\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_10_1607:10.0.14393.4467:*:*:*:*:*:x86:*\",\"cpe:2.3:o:microsoft:windows_10_1607:10.0.14393.4467:*:*:*:*:*:x64:*\"],\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"10.0.14393.4467\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E15",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json",
            "sourceField": "/containers/cna/affected/11",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2016\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2016:10.0.14393.4467:*:*:*:*:*:*:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"10.0.14393.4467\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E16",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json",
            "sourceField": "/containers/cna/affected/12",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2016 (Server Core installation)\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2016:10.0.14393.4467:*:*:*:*:*:*:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"10.0.14393.4467\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E17",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json",
            "sourceField": "/containers/cna/affected/13",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 7\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_7:6.1.7601.25632:sp1:*:*:*:*:x86:*\"],\"platforms\":[\"32-bit Systems\"],\"versions\":[{\"version\":\"6.1.0\",\"lessThan\":\"6.1.7601.25632\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E18",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json",
            "sourceField": "/containers/cna/affected/14",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 7 Service Pack 1\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_7:6.1.7601.25632:sp1:*:*:*:*:x64:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.1.0\",\"lessThan\":\"6.1.7601.25632\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E19",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json",
            "sourceField": "/containers/cna/affected/15",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 8.1\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_8.1:6.3.9600.20045:*:*:*:*:*:x86:*\",\"cpe:2.3:o:microsoft:windows_8.1:6.3.9600.20044:*:*:*:*:*:x86:*\",\"cpe:2.3:o:microsoft:windows_8.1:6.3.9600.20045:*:*:*:*:*:x64:*\",\"cpe:2.3:o:microsoft:windows_8.1:6.3.9600.20044:*:*:*:*:*:x64:*\",\"cpe:2.3:o:microsoft:windows_rt_8.1:6.3.9600.20045:*:*:*:*:*:*:*\"],\"platforms\":[\"32-bit Systems\",\"x64-based Systems\",\"ARM64-based Systems\"],\"versions\":[{\"version\":\"6.3.0\",\"lessThan\":\"6.3.9600.20045\",\"versionType\":\"custom\",\"status\":\"affected\"},{\"version\":\"6.3.0\",\"lessThan\":\"6.3.9600.20044\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E20",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json",
            "sourceField": "/containers/cna/affected/16",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2008 Service Pack 2\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2008_sp2:6.0.6003.21137:*:*:*:*:*:x64:*\"],\"platforms\":[\"32-bit Systems\"],\"versions\":[{\"version\":\"6.0.0\",\"lessThan\":\"6.0.6003.21137\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E21",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json",
            "sourceField": "/containers/cna/affected/17",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2008 Service Pack 2 (Server Core installation)\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2008_sp2:6.0.6003.21137:*:*:*:*:*:x64:*\",\"cpe:2.3:o:microsoft:windows_server_2008_sp2:6.0.6003.21137:*:*:*:*:*:x86:*\"],\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"6.0.0\",\"lessThan\":\"6.0.6003.21137\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E22",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json",
            "sourceField": "/containers/cna/affected/18",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2008  Service Pack 2\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2008_sp2:6.0.6003.21137:*:*:*:*:*:x86:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.0.0\",\"lessThan\":\"6.0.6003.21137\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E23",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json",
            "sourceField": "/containers/cna/affected/19",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2008 R2 Service Pack 1\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2008_R2:6.1.7601.25632:*:*:*:*:*:x64:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.1.0\",\"lessThan\":\"6.1.7601.25632\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E24",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json",
            "sourceField": "/containers/cna/affected/20",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2008 R2 Service Pack 1 (Server Core installation)\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2008_R2:6.1.7601.25632:*:*:*:*:*:x64:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.0.0\",\"lessThan\":\"6.1.7601.25632\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E25",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json",
            "sourceField": "/containers/cna/affected/21",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2012:6.2.9200.23372:*:*:*:*:*:x64:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.2.0\",\"lessThan\":\"6.2.9200.23372\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E26",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json",
            "sourceField": "/containers/cna/affected/22",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012 (Server Core installation)\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2012:6.2.9200.23372:*:*:*:*:*:x64:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.2.0\",\"lessThan\":\"6.2.9200.23372\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E27",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json",
            "sourceField": "/containers/cna/affected/23",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012 R2\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2012_R2:6.3.9600.20045:*:*:*:*:*:x64:*\",\"cpe:2.3:o:microsoft:windows_server_2012_R2:6.3.9600.20044:*:*:*:*:*:x64:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.3.0\",\"lessThan\":\"6.3.9600.20045\",\"versionType\":\"custom\",\"status\":\"affected\"},{\"version\":\"6.3.0\",\"lessThan\":\"6.3.9600.20044\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E28",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1675.json",
            "sourceField": "/containers/cna/affected/24",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012 R2 (Server Core installation)\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2012_R2:6.3.9600.20045:*:*:*:*:*:x64:*\",\"cpe:2.3:o:microsoft:windows_server_2012_R2:6.3.9600.20044:*:*:*:*:*:x64:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.3.0\",\"lessThan\":\"6.3.9600.20045\",\"versionType\":\"custom\",\"status\":\"affected\"},{\"version\":\"6.3.0\",\"lessThan\":\"6.3.9600.20044\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E29",
            "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-1675",
            "sourceField": "/sourceAction",
            "excerpt": "Apply updates per vendor instructions.",
            "language": null
          },
          {
            "id": "E30",
            "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-1675",
            "sourceField": "/exploitStatus",
            "excerpt": "{\"id\":\"CVE-2021-1675\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}",
            "language": "en",
            "representation": "normalized_feed_field"
          }
        ],
        "supportRequest": "件名：CVE-2021-1675（Windows 10 Version 1809 / Windows Server 2019 / Windows Server 2019 (Server Core installation) / Windows 10 Version 1909 / Windows 10 Version 21H1 / Windows 10 Version 2004 / Windows Server version 2004 / Windows 10 Version 20H2 / Windows Server vers）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Windows 10 Version 1809 の 10.0.0 以上で 10.0.17763.1999 未満のバージョンが影響を受ける\n・Windows Server 2019 の 10.0.0 以上で 10.0.17763.1999 未満のバージョンが影響を受ける\n・Windows Server 2019 (Server Core installation) の 10.0.0 以上で 10.0.17763.1999 未満のバージョンが影響を受ける\n・Windows 10 Version 1909 の 10.0.0 以上で 10.0.18363.1621 未満のバージョンが影響を受ける\n・Windows 10 Version 21H1 の 10.0.0 以上で 10.0.19043.1052 未満のバージョンが影響を受ける\n・Windows 10 Version 2004 の 10.0.0 以上で 10.0.19041.1052 未満のバージョンが影響を受ける\n・Windows Server version 2004 の 10.0.0 以上で 10.0.19041.1052 未満のバージョンが影響を受ける\n・Windows 10 Version 20H2 の 10.0.0 以上で 10.0.19042.1052 未満のバージョンが影響を受ける\n・Windows Server version 20H2 の 10.0.0 以上で 10.0.19042.1052 未満のバージョンが影響を受ける\n・Windows 10 Version 1507 の 10.0.0 以上で 10.0.10240.18967 未満のバージョンが影響を受ける\n・Windows 10 Version 1607 の 10.0.0 以上で 10.0.14393.4467 未満のバージョンが影響を受ける\n・Windows Server 2016 の 10.0.0 以上で 10.0.14393.4467 未満のバージョンが影響を受ける\n・公式の対象表：Microsoft / Windows 10 Version 1809。影響ありとして記載：10.0.0以上、10.0.17763.1999未満。対象の環境：32-bit Systems、x64-based Systems、ARM64-based Systems\n・公式の対象表：Microsoft / Windows Server 2019。影響ありとして記載：10.0.0以上、10.0.17763.1999未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2019 (Server Core installation)。影響ありとして記載：10.0.0以上、10.0.17763.1999未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 1909。影響ありとして記載：10.0.0以上、10.0.18363.1621未満。対象の環境：32-bit Systems、x64-based Systems、ARM64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 21H1。影響ありとして記載：10.0.0以上、10.0.19043.1052未満。対象の環境：x64-based Systems、ARM64-based Systems、32-bit Systems\n・公式の対象表：Microsoft / Windows 10 Version 2004。影響ありとして記載：10.0.0以上、10.0.19041.1052未満。対象の環境：32-bit Systems、ARM64-based Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows Server version 2004。影響ありとして記載：10.0.0以上、10.0.19041.1052未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 20H2。影響ありとして記載：10.0.0以上、10.0.19042.1052未満。対象の環境：32-bit Systems、ARM64-based Systems\n・公式の対象表：Microsoft / Windows Server version 20H2。影響ありとして記載：10.0.0以上、10.0.19042.1052未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 1507。影響ありとして記載：10.0.0以上、10.0.10240.18967未満。対象の環境：32-bit Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 1607。影響ありとして記載：10.0.0以上、10.0.14393.4467未満。対象の環境：32-bit Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2016。影響ありとして記載：10.0.0以上、10.0.14393.4467未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2016 (Server Core installation)。影響ありとして記載：10.0.0以上、10.0.14393.4467未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows 7。影響ありとして記載：6.1.0以上、6.1.7601.25632未満。対象の環境：32-bit Systems\n・公式の対象表：Microsoft / Windows 7 Service Pack 1。影響ありとして記載：6.1.0以上、6.1.7601.25632未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows 8.1。影響ありとして記載：6.3.0以上、6.3.9600.20045未満。影響ありとして記載：6.3.0以上、6.3.9600.20044未満。対象の環境：32-bit Systems、x64-based Systems、ARM64-based Systems\n・公式の対象表：Microsoft / Windows Server 2008 Service Pack 2。影響ありとして記載：6.0.0以上、6.0.6003.21137未満。対象の環境：32-bit Systems\n・公式の対象表：Microsoft / Windows Server 2008 Service Pack 2 (Server Core installation)。影響ありとして記載：6.0.0以上、6.0.6003.21137未満。対象の環境：32-bit Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2008  Service Pack 2。影響ありとして記載：6.0.0以上、6.0.6003.21137未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2008 R2 Service Pack 1。影響ありとして記載：6.1.0以上、6.1.7601.25632未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2008 R2 Service Pack 1 (Server Core installation)。影響ありとして記載：6.0.0以上、6.1.7601.25632未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2012。影響ありとして記載：6.2.0以上、6.2.9200.23372未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2012 (Server Core installation)。影響ありとして記載：6.2.0以上、6.2.9200.23372未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2012 R2。影響ありとして記載：6.3.0以上、6.3.9600.20045未満。影響ありとして記載：6.3.0以上、6.3.9600.20044未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2012 R2 (Server Core installation)。影響ありとして記載：6.3.0以上、6.3.9600.20045未満。影響ありとして記載：6.3.0以上、6.3.9600.20044未満。対象の環境：x64-based Systems\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2021-1675",
        "publicationCheckVersion": "2026-10-23.1",
        "sourceNotices": [],
        "automation": {
          "status": "ready",
          "lastAttempt": "2026-10-23T03:49:30.962Z",
          "lastSuccess": "2026-10-23T03:49:30.962Z",
          "sourceCheckedAt": "2026-10-23T02:43:13.856Z",
          "errorCode": null
        },
        "glossary": [
          {
            "term": "任意のコード実行",
            "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。",
            "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html",
            "kind": "general_definition"
          }
        ]
      }
    },
    {
      "id": "CVE-2021-1732",
      "aliases": [],
      "title": "Windows 10 Version 1803 / Windows 10 Version 1809 / Windows Server 2019 / Windows Server 2019 (Server Core installation) / Windows 10 Version 1909 / Windows Server, version 1909 (Server Core installation) / Windows 10 Version 2004 / Windows Server ve：権限の奪取",
      "summary": "Windows の Win32k における特権昇格の脆弱性です。",
      "risk": "攻撃者が特権を昇格させる可能性があります。",
      "product": "Windows 10 Version 1803 / Windows 10 Version 1809 / Windows Server 2019 / Windows Server 2019 (Server Core installation) / Windows 10 Version 1909 / Windows Server, version 1909 (Server Core installation) / Windows 10 Version 2004 / Windows Server ve",
      "category": "windows",
      "component": "package",
      "severity": "high",
      "cvss": 7.8,
      "cvssVersion": "3.1",
      "cvssSource": "microsoft",
      "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C",
      "affected": [
        {
          "product": "Windows 10 Version 1803",
          "range": ">= 10.0.0 / < publication（環境: 32-bit Systems / x64-based Systems / ARM64-based Systems）"
        },
        {
          "product": "Windows 10 Version 1809",
          "range": ">= 10.0.0 / < publication（環境: 32-bit Systems / x64-based Systems / ARM64-based Systems）"
        },
        {
          "product": "Windows Server 2019",
          "range": ">= 10.0.0 / < publication（環境: x64-based Systems）"
        },
        {
          "product": "Windows Server 2019 (Server Core installation)",
          "range": ">= 10.0.0 / < publication（環境: x64-based Systems）"
        },
        {
          "product": "Windows 10 Version 1909",
          "range": ">= 10.0.0 / < publication（環境: 32-bit Systems / x64-based Systems / ARM64-based Systems）"
        },
        {
          "product": "Windows Server, version 1909 (Server Core installation)",
          "range": ">= 10.0.0 / < publication（環境: x64-based Systems）"
        },
        {
          "product": "Windows 10 Version 2004",
          "range": ">= 10.0.0 / < publication（環境: 32-bit Systems / ARM64-based Systems / x64-based Systems）"
        },
        {
          "product": "Windows Server version 2004",
          "range": ">= 10.0.0 / < publication（環境: x64-based Systems）"
        },
        {
          "product": "Windows 10 Version 20H2",
          "range": ">= 10.0.0 / < publication（環境: 32-bit Systems / ARM64-based Systems）"
        },
        {
          "product": "Windows Server version 20H2",
          "range": ">= 10.0.0 / < publication（環境: x64-based Systems）"
        }
      ],
      "fixed": [],
      "steps": [
        "ベンダーの指示に従って更新プログラムを適用してください。",
        "「CVE-2021-1732」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
        "Windows 11は「設定」→「Windows Update」→「更新プログラムのチェック」を開き、提供された更新を適用します。再起動を求められたら完了させます。会社管理のPC、Windows Server、サポート外の版は管理担当者に適用する修正番号と配布予定を確認してください。"
      ],
      "references": [
        {
          "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1732.json",
          "label": "CVE：microsoft"
        },
        {
          "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-1732",
          "label": "CISA KEV（悪用確認）"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-1732",
          "label": "CVE公式レコード"
        },
        {
          "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1732",
          "label": "CVE掲載の参考情報"
        },
        {
          "url": "http://packetstormsecurity.com/files/161880/Win32k-ConsoleControl-Offset-Confusion.html",
          "label": "CVE掲載の参考情報"
        },
        {
          "url": "http://packetstormsecurity.com/files/166169/Win32k-ConsoleControl-Offset-Confusion-Privilege-Escalation.html",
          "label": "CVE掲載の参考情報"
        },
        {
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-1732",
          "label": "CISAが示す関連情報"
        },
        {
          "url": "https://www.first.org/cvss/v3.1/specification-document",
          "label": "FIRST公式：CVSS 3.1の条件の定義"
        },
        {
          "url": "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device",
          "label": "Microsoft公式：Windowsの情報を調べる"
        },
        {
          "url": "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates",
          "label": "Microsoft公式：Windows Updateの操作"
        }
      ],
      "publishedAt": "2021-02-25T23:01:31.000Z",
      "modifiedAt": "2026-08-12T03:55:47.051Z",
      "fetchedAt": "2026-10-23T02:43:13.858Z",
      "exploitStatus": "confirmed",
      "sources": [
        "CVE",
        "CISA KEV"
      ],
      "originalText": "",
      "sourceTitle": "Windows Win32k Elevation of Privilege Vulnerability",
      "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。",
      "state": "published",
      "affectedDetails": [
        {
          "vendor": "Microsoft",
          "product": "Windows 10 Version 1803",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "cpe:2.3:o:microsoft:windows_10_1803:*:*:*:*:*:*:x64:*",
            "cpe:2.3:o:microsoft:windows_10_1803:*:*:*:*:*:*:arm64:*"
          ],
          "platforms": [
            "32-bit Systems",
            "x64-based Systems",
            "ARM64-based Systems"
          ],
          "versions": [
            {
              "version": "10.0.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows 10 Version 1809",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:arm64:*"
          ],
          "platforms": [
            "32-bit Systems",
            "x64-based Systems",
            "ARM64-based Systems"
          ],
          "versions": [
            {
              "version": "10.0.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows Server 2019",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*"
          ],
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "10.0.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows Server 2019 (Server Core installation)",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*"
          ],
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "10.0.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows 10 Version 1909",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_10_1909:*:*:*:*:*:*:x86:*",
            "cpe:2.3:o:microsoft:windows_10_1909:*:*:*:*:*:*:x64:*",
            "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*"
          ],
          "platforms": [
            "32-bit Systems",
            "x64-based Systems",
            "ARM64-based Systems"
          ],
          "versions": [
            {
              "version": "10.0.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows Server, version 1909 (Server Core installation)",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_server_1909:*:*:*:*:*:*:*:*"
          ],
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "10.0.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows 10 Version 2004",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*"
          ],
          "platforms": [
            "32-bit Systems",
            "ARM64-based Systems",
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "10.0.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows Server version 2004",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_server_2004:*:*:*:*:*:*:*:*"
          ],
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "10.0.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows 10 Version 20H2",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_10_20H2:*:*:*:*:*:*:x86:*",
            "cpe:2.3:o:microsoft:windows_10_20H2:*:*:*:*:*:*:arm64:*"
          ],
          "platforms": [
            "32-bit Systems",
            "ARM64-based Systems"
          ],
          "versions": [
            {
              "version": "10.0.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows Server version 20H2",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_server_20H2:*:*:*:*:*:*:*:*"
          ],
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "10.0.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        }
      ],
      "configurationNotes": "対象環境・機能: 32-bit Systems / x64-based Systems / ARM64-based Systems。製品バージョンだけでなく、原文の利用条件を照合してください。",
      "officialEvidence": {
        "schemaVersion": "1.0",
        "id": "CVE-2021-1732",
        "sourceType": "CVE",
        "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1732.json",
        "fetchedAt": "2026-10-23T02:43:13.858Z",
        "publishedAt": "2021-02-25T23:01:31.000Z",
        "modifiedAt": "2026-08-12T03:55:47.051Z",
        "state": "published",
        "provider": "microsoft",
        "title": "Windows Win32k Elevation of Privilege Vulnerability",
        "descriptions": [
          {
            "lang": "en-US",
            "value": "Windows Win32k Elevation of Privilege Vulnerability",
            "sourcePath": "/containers/cna/descriptions/0/value"
          }
        ],
        "affected": [
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 1803",
            "sourcePath": "/containers/cna/affected/0",
            "platforms": [
              "32-bit Systems",
              "x64-based Systems",
              "ARM64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
              "cpe:2.3:o:microsoft:windows_10_1803:*:*:*:*:*:*:x64:*",
              "cpe:2.3:o:microsoft:windows_10_1803:*:*:*:*:*:*:arm64:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/0/versions/0",
                "version": "10.0.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 1809",
            "sourcePath": "/containers/cna/affected/1",
            "platforms": [
              "32-bit Systems",
              "x64-based Systems",
              "ARM64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
              "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
              "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:arm64:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/1/versions/0",
                "version": "10.0.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server 2019",
            "sourcePath": "/containers/cna/affected/2",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/2/versions/0",
                "version": "10.0.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server 2019 (Server Core installation)",
            "sourcePath": "/containers/cna/affected/3",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/3/versions/0",
                "version": "10.0.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 1909",
            "sourcePath": "/containers/cna/affected/4",
            "platforms": [
              "32-bit Systems",
              "x64-based Systems",
              "ARM64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_10_1909:*:*:*:*:*:*:x86:*",
              "cpe:2.3:o:microsoft:windows_10_1909:*:*:*:*:*:*:x64:*",
              "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/4/versions/0",
                "version": "10.0.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server, version 1909 (Server Core installation)",
            "sourcePath": "/containers/cna/affected/5",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_server_1909:*:*:*:*:*:*:*:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/5/versions/0",
                "version": "10.0.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 2004",
            "sourcePath": "/containers/cna/affected/6",
            "platforms": [
              "32-bit Systems",
              "ARM64-based Systems",
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/6/versions/0",
                "version": "10.0.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server version 2004",
            "sourcePath": "/containers/cna/affected/7",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_server_2004:*:*:*:*:*:*:*:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/7/versions/0",
                "version": "10.0.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 20H2",
            "sourcePath": "/containers/cna/affected/8",
            "platforms": [
              "32-bit Systems",
              "ARM64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_10_20H2:*:*:*:*:*:*:x86:*",
              "cpe:2.3:o:microsoft:windows_10_20H2:*:*:*:*:*:*:arm64:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/8/versions/0",
                "version": "10.0.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server version 20H2",
            "sourcePath": "/containers/cna/affected/9",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_server_20H2:*:*:*:*:*:*:*:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/9/versions/0",
                "version": "10.0.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          }
        ],
        "solutions": [],
        "workarounds": [],
        "exploits": [],
        "rejectedReasons": [],
        "problemTypes": [
          {
            "cweId": "",
            "lang": "en-US",
            "description": "Elevation of Privilege",
            "sourcePath": "/containers/cna/problemTypes/0/descriptions/0"
          }
        ],
        "metrics": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "provider": "microsoft",
            "sourcePath": "/containers/cna/metrics/0/cvssV3_1"
          }
        ],
        "references": [
          {
            "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1732",
            "label": "CVE",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/0"
          },
          {
            "url": "http://packetstormsecurity.com/files/161880/Win32k-ConsoleControl-Offset-Confusion.html",
            "label": "CVE",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/1"
          },
          {
            "url": "http://packetstormsecurity.com/files/166169/Win32k-ConsoleControl-Offset-Confusion-Privilege-Escalation.html",
            "label": "CVE",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/2"
          },
          {
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-1732",
            "label": "CISA-ADP",
            "tags": [
              "government-resource"
            ],
            "provider": "CISA-ADP",
            "sourcePath": "/containers/adp/1/references/0"
          }
        ],
        "snippets": [
          {
            "evidenceId": "official:/containers/cna/affected/0",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1732.json",
            "sourcePath": "/containers/cna/affected/0",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1803\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*\",\"cpe:2.3:o:microsoft:windows_10_1803:*:*:*:*:*:*:x64:*\",\"cpe:2.3:o:microsoft:windows_10_1803:*:*:*:*:*:*:arm64:*\"],\"platforms\":[\"32-bit Systems\",\"x64-based Systems\",\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1732.json",
            "sourcePath": "/containers/cna/affected/1",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1809\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*\",\"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*\",\"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:arm64:*\"],\"platforms\":[\"32-bit Systems\",\"x64-based Systems\",\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/2",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1732.json",
            "sourcePath": "/containers/cna/affected/2",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2019\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/3",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1732.json",
            "sourcePath": "/containers/cna/affected/3",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2019 (Server Core installation)\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/4",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1732.json",
            "sourcePath": "/containers/cna/affected/4",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1909\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_10_1909:*:*:*:*:*:*:x86:*\",\"cpe:2.3:o:microsoft:windows_10_1909:*:*:*:*:*:*:x64:*\",\"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*\"],\"platforms\":[\"32-bit Systems\",\"x64-based Systems\",\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/5",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1732.json",
            "sourcePath": "/containers/cna/affected/5",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server, version 1909 (Server Core installation)\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_1909:*:*:*:*:*:*:*:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/6",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1732.json",
            "sourcePath": "/containers/cna/affected/6",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 2004\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*\"],\"platforms\":[\"32-bit Systems\",\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/7",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1732.json",
            "sourcePath": "/containers/cna/affected/7",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server version 2004\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2004:*:*:*:*:*:*:*:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/8",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1732.json",
            "sourcePath": "/containers/cna/affected/8",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 20H2\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_10_20H2:*:*:*:*:*:*:x86:*\",\"cpe:2.3:o:microsoft:windows_10_20H2:*:*:*:*:*:*:arm64:*\"],\"platforms\":[\"32-bit Systems\",\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/9",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1732.json",
            "sourcePath": "/containers/cna/affected/9",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server version 20H2\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_20H2:*:*:*:*:*:*:*:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/descriptions/0/value",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1732.json",
            "sourcePath": "/containers/cna/descriptions/0/value",
            "text": "Windows Win32k Elevation of Privilege Vulnerability",
            "truncated": false,
            "representation": "source_excerpt"
          },
          {
            "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1732.json",
            "sourcePath": "/containers/cna/problemTypes/0/descriptions/0",
            "text": "{\"description\":\"Elevation of Privilege\",\"lang\":\"en-US\",\"type\":\"Impact\"}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1732.json",
            "sourcePath": "/containers/cna/metrics/0/cvssV3_1",
            "text": "{\"version\":\"3.1\",\"baseSeverity\":\"HIGH\",\"baseScore\":7.8,\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C\"}",
            "truncated": false,
            "representation": "source_json"
          }
        ],
        "limits": {
          "completeness": "official_record",
          "truncatedFields": [],
          "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。"
        }
      },
      "sourceSnapshots": [
        {
          "source": "CVE",
          "modifiedAt": "2026-08-12T03:55:47.051Z",
          "fetchedAt": "2026-10-23T02:43:13.858Z",
          "state": "published"
        },
        {
          "source": "CISA KEV",
          "modifiedAt": "2021-11-03T00:00:00.000Z",
          "fetchedAt": "2026-10-23T02:17:50.489Z",
          "state": "published"
        }
      ],
      "sourceAction": "Apply updates per vendor instructions.",
      "sourceSummary": "Windows 10 Version 1803 / Windows 10 Version 1809 / Windows Server 2019 / Windows Server 2019 (Server Core installation) / Windows 10 Version 1909 / Windows Server, version 1909 (Server Core installation) / Windows 10 Version 2004 / Windows Server veに権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。",
      "sourceRisk": "本来与えられていない権限で、操作される可能性があります。",
      "guidance": {
        "schemaVersion": "1.0",
        "method": "automatic",
        "reviewedAt": null,
        "reviewState": "current",
        "generatedAt": "2026-10-23T03:49:31.527Z",
        "generatorVersion": "2026-10-23.3",
        "sourceFingerprint": "d234f7bcdb84bcdd681f6848af75d3acda3eb10e910bc803dc8351fc8a6351a1",
        "sourceModifiedAt": "2026-08-12T03:55:47.051Z",
        "model": "@cf/openai/gpt-oss-120b",
        "verificationMethod": "exact_source_excerpt_and_independent_semantic_check",
        "summary": "Windows の Win32k における特権昇格の脆弱性です。",
        "risk": "攻撃者が特権を昇格させる可能性があります。",
        "summaryEvidenceIds": [
          "E1",
          "E2"
        ],
        "riskEvidenceIds": [
          "E3"
        ],
        "applicability": [
          {
            "text": "Windows 10 Version 1803 が影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1732.json"
            ],
            "evidenceIds": [
              "E4",
              "E2"
            ]
          },
          {
            "text": "Windows 10 Version 1809 が影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1732.json"
            ],
            "evidenceIds": [
              "E5",
              "E2"
            ]
          },
          {
            "text": "Windows Server 2019 が影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1732.json"
            ],
            "evidenceIds": [
              "E6",
              "E2"
            ]
          },
          {
            "text": "Windows Server 2019 (Server Core installation) が影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1732.json"
            ],
            "evidenceIds": [
              "E7",
              "E2"
            ]
          },
          {
            "text": "Windows 10 Version 1909 が影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1732.json"
            ],
            "evidenceIds": [
              "E8",
              "E2"
            ]
          },
          {
            "text": "Windows Server, version 1909 (Server Core installation) が影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1732.json"
            ],
            "evidenceIds": [
              "E9",
              "E2"
            ]
          },
          {
            "text": "Windows 10 Version 2004 が影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1732.json"
            ],
            "evidenceIds": [
              "E10",
              "E2"
            ]
          },
          {
            "text": "Windows Server version 2004 が影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1732.json"
            ],
            "evidenceIds": [
              "E11",
              "E2"
            ]
          },
          {
            "text": "Windows 10 Version 20H2 が影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1732.json"
            ],
            "evidenceIds": [
              "E12",
              "E2"
            ]
          },
          {
            "text": "Windows Server version 20H2 が影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1732.json"
            ],
            "evidenceIds": [
              "E13",
              "E2"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 1803。影響ありとして記載：10.0.0以上、publication未満。対象の環境：32-bit Systems、x64-based Systems、ARM64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1732.json"
            ],
            "evidenceIds": [
              "E4"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 1809。影響ありとして記載：10.0.0以上、publication未満。対象の環境：32-bit Systems、x64-based Systems、ARM64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1732.json"
            ],
            "evidenceIds": [
              "E5"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server 2019。影響ありとして記載：10.0.0以上、publication未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1732.json"
            ],
            "evidenceIds": [
              "E6"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server 2019 (Server Core installation)。影響ありとして記載：10.0.0以上、publication未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1732.json"
            ],
            "evidenceIds": [
              "E7"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 1909。影響ありとして記載：10.0.0以上、publication未満。対象の環境：32-bit Systems、x64-based Systems、ARM64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1732.json"
            ],
            "evidenceIds": [
              "E8"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server, version 1909 (Server Core installation)。影響ありとして記載：10.0.0以上、publication未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1732.json"
            ],
            "evidenceIds": [
              "E9"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 2004。影響ありとして記載：10.0.0以上、publication未満。対象の環境：32-bit Systems、ARM64-based Systems、x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1732.json"
            ],
            "evidenceIds": [
              "E10"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server version 2004。影響ありとして記載：10.0.0以上、publication未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1732.json"
            ],
            "evidenceIds": [
              "E11"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 20H2。影響ありとして記載：10.0.0以上、publication未満。対象の環境：32-bit Systems、ARM64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1732.json"
            ],
            "evidenceIds": [
              "E12"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server version 20H2。影響ありとして記載：10.0.0以上、publication未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1732.json"
            ],
            "evidenceIds": [
              "E13"
            ]
          },
          {
            "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。",
            "kind": "fact",
            "sourceUrls": [
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-1732"
            ],
            "evidenceIds": [
              "E15"
            ]
          }
        ],
        "versionChecks": [
          {
            "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1732.json"
            ],
            "evidenceIds": [
              "E4"
            ]
          },
          {
            "text": "「スタート」→「設定」→「システム」→「バージョン情報」を開き、Windowsのエディション・バージョン・OSビルドを控えます。会社のPCやサーバーは、この情報とCVE番号を管理担当者へ渡してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device"
            ]
          }
        ],
        "actions": [
          {
            "text": "ベンダーの指示に従って更新プログラムを適用してください。",
            "kind": "fix",
            "sourceUrls": [
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-1732"
            ],
            "evidenceIds": [
              "E14"
            ]
          },
          {
            "text": "「CVE-2021-1732」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cve.org/CVERecord?id=CVE-2021-1732",
              "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1732",
              "http://packetstormsecurity.com/files/161880/Win32k-ConsoleControl-Offset-Confusion.html",
              "http://packetstormsecurity.com/files/166169/Win32k-ConsoleControl-Offset-Confusion-Privilege-Escalation.html",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-1732",
              "https://nvd.nist.gov/vuln/detail/CVE-2021-1732"
            ]
          },
          {
            "text": "Windows 11は「設定」→「Windows Update」→「更新プログラムのチェック」を開き、提供された更新を適用します。再起動を求められたら完了させます。会社管理のPC、Windows Server、サポート外の版は管理担当者に適用する修正番号と配布予定を確認してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates"
            ]
          }
        ],
        "temporaryMitigations": [
          {
            "text": "すぐ更新できない場合は、CVE番号、Windowsの版、業務で必要な機能を管理担当者に伝え、修正までの利用方法と更新予定を決めてください。すべてのWindowsの問題に同じ回避策が使えるわけではありません。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates",
              "https://www.cve.org/CVERecord?id=CVE-2021-1732",
              "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1732",
              "http://packetstormsecurity.com/files/161880/Win32k-ConsoleControl-Offset-Confusion.html",
              "http://packetstormsecurity.com/files/166169/Win32k-ConsoleControl-Offset-Confusion-Privilege-Escalation.html",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-1732",
              "https://nvd.nist.gov/vuln/detail/CVE-2021-1732"
            ]
          }
        ],
        "verification": [
          {
            "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。",
            "kind": "procedure",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1732.json"
            ],
            "evidenceIds": [
              "E4"
            ]
          },
          {
            "text": "再起動後にWindows Updateを開き直して失敗・再起動待ちがないか確認し、管理担当者にこのCVEに対応する修正の適用結果を確認してもらってください。「最新の状態」と出ても、別製品の更新やサポート外の版の修正を保証するものではありません。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates"
            ]
          }
        ],
        "unknowns": [
          "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。",
          "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。"
        ],
        "sources": [
          {
            "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1732.json",
            "label": "CVE：microsoft"
          },
          {
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-1732",
            "label": "CISA KEV（悪用確認）"
          },
          {
            "url": "https://www.cve.org/CVERecord?id=CVE-2021-1732",
            "label": "CVE公式レコード"
          },
          {
            "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1732",
            "label": "CVE掲載の参考情報"
          },
          {
            "url": "http://packetstormsecurity.com/files/161880/Win32k-ConsoleControl-Offset-Confusion.html",
            "label": "CVE掲載の参考情報"
          },
          {
            "url": "http://packetstormsecurity.com/files/166169/Win32k-ConsoleControl-Offset-Confusion-Privilege-Escalation.html",
            "label": "CVE掲載の参考情報"
          },
          {
            "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-1732",
            "label": "CISAが示す関連情報"
          },
          {
            "url": "https://www.first.org/cvss/v3.1/specification-document",
            "label": "FIRST公式：CVSS 3.1の条件の定義"
          },
          {
            "url": "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device",
            "label": "Microsoft公式：Windowsの情報を調べる"
          },
          {
            "url": "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates",
            "label": "Microsoft公式：Windows Updateの操作"
          }
        ],
        "evidence": [
          {
            "id": "E1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1732.json",
            "sourceField": "/containers/cna/descriptions/0/value",
            "excerpt": "Windows Win32k Elevation of Privilege Vulnerability",
            "language": "en-US",
            "representation": "source_excerpt"
          },
          {
            "id": "E2",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1732.json",
            "sourceField": "/containers/cna/title",
            "excerpt": "Windows Win32k Elevation of Privilege Vulnerability",
            "language": null
          },
          {
            "id": "E3",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1732.json",
            "sourceField": "/containers/cna/problemTypes/0/descriptions/0",
            "excerpt": "{\"description\":\"Elevation of Privilege\",\"lang\":\"en-US\",\"type\":\"Impact\"}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E4",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1732.json",
            "sourceField": "/containers/cna/affected/0",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1803\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*\",\"cpe:2.3:o:microsoft:windows_10_1803:*:*:*:*:*:*:x64:*\",\"cpe:2.3:o:microsoft:windows_10_1803:*:*:*:*:*:*:arm64:*\"],\"platforms\":[\"32-bit Systems\",\"x64-based Systems\",\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E5",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1732.json",
            "sourceField": "/containers/cna/affected/1",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1809\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*\",\"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*\",\"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:arm64:*\"],\"platforms\":[\"32-bit Systems\",\"x64-based Systems\",\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E6",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1732.json",
            "sourceField": "/containers/cna/affected/2",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2019\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E7",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1732.json",
            "sourceField": "/containers/cna/affected/3",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2019 (Server Core installation)\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E8",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1732.json",
            "sourceField": "/containers/cna/affected/4",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1909\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_10_1909:*:*:*:*:*:*:x86:*\",\"cpe:2.3:o:microsoft:windows_10_1909:*:*:*:*:*:*:x64:*\",\"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*\"],\"platforms\":[\"32-bit Systems\",\"x64-based Systems\",\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E9",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1732.json",
            "sourceField": "/containers/cna/affected/5",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server, version 1909 (Server Core installation)\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_1909:*:*:*:*:*:*:*:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E10",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1732.json",
            "sourceField": "/containers/cna/affected/6",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 2004\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*\"],\"platforms\":[\"32-bit Systems\",\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E11",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1732.json",
            "sourceField": "/containers/cna/affected/7",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server version 2004\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2004:*:*:*:*:*:*:*:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E12",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1732.json",
            "sourceField": "/containers/cna/affected/8",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 20H2\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_10_20H2:*:*:*:*:*:*:x86:*\",\"cpe:2.3:o:microsoft:windows_10_20H2:*:*:*:*:*:*:arm64:*\"],\"platforms\":[\"32-bit Systems\",\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E13",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/1xxx/CVE-2021-1732.json",
            "sourceField": "/containers/cna/affected/9",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server version 20H2\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_20H2:*:*:*:*:*:*:*:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E14",
            "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-1732",
            "sourceField": "/sourceAction",
            "excerpt": "Apply updates per vendor instructions.",
            "language": null
          },
          {
            "id": "E15",
            "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-1732",
            "sourceField": "/exploitStatus",
            "excerpt": "{\"id\":\"CVE-2021-1732\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}",
            "language": "en",
            "representation": "normalized_feed_field"
          }
        ],
        "supportRequest": "件名：CVE-2021-1732（Windows 10 Version 1803 / Windows 10 Version 1809 / Windows Server 2019 / Windows Server 2019 (Server Core installation) / Windows 10 Version 1909 / Windows Server, version 1909 (Server Core installation) / Windows 10 Version 2004 / Windows Server ve）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Windows 10 Version 1803 が影響を受けます。\n・Windows 10 Version 1809 が影響を受けます。\n・Windows Server 2019 が影響を受けます。\n・Windows Server 2019 (Server Core installation) が影響を受けます。\n・Windows 10 Version 1909 が影響を受けます。\n・Windows Server, version 1909 (Server Core installation) が影響を受けます。\n・Windows 10 Version 2004 が影響を受けます。\n・Windows Server version 2004 が影響を受けます。\n・Windows 10 Version 20H2 が影響を受けます。\n・Windows Server version 20H2 が影響を受けます。\n・公式の対象表：Microsoft / Windows 10 Version 1803。影響ありとして記載：10.0.0以上、publication未満。対象の環境：32-bit Systems、x64-based Systems、ARM64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 1809。影響ありとして記載：10.0.0以上、publication未満。対象の環境：32-bit Systems、x64-based Systems、ARM64-based Systems\n・公式の対象表：Microsoft / Windows Server 2019。影響ありとして記載：10.0.0以上、publication未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2019 (Server Core installation)。影響ありとして記載：10.0.0以上、publication未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 1909。影響ありとして記載：10.0.0以上、publication未満。対象の環境：32-bit Systems、x64-based Systems、ARM64-based Systems\n・公式の対象表：Microsoft / Windows Server, version 1909 (Server Core installation)。影響ありとして記載：10.0.0以上、publication未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 2004。影響ありとして記載：10.0.0以上、publication未満。対象の環境：32-bit Systems、ARM64-based Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows Server version 2004。影響ありとして記載：10.0.0以上、publication未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 20H2。影響ありとして記載：10.0.0以上、publication未満。対象の環境：32-bit Systems、ARM64-based Systems\n・公式の対象表：Microsoft / Windows Server version 20H2。影響ありとして記載：10.0.0以上、publication未満。対象の環境：x64-based Systems\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2021-1732",
        "publicationCheckVersion": "2026-10-23.1",
        "sourceNotices": [],
        "automation": {
          "status": "ready",
          "lastAttempt": "2026-10-23T03:49:31.527Z",
          "lastSuccess": "2026-10-23T03:49:31.527Z",
          "sourceCheckedAt": "2026-10-23T02:43:13.858Z",
          "errorCode": null
        },
        "glossary": []
      }
    },
    {
      "id": "CVE-2021-26855",
      "aliases": [],
      "title": "Microsoft Exchange Server 2013 Cumulative Update 21 / Microsoft Exchange Server 2013 Cumulative Update 22 / Microsoft Exchange Server 2013 Cumulative Update 23 / Microsoft Exchange Server 2016 Cumulative Update 10 / Microsoft Exchange Server 2016 Cum：コード実行",
      "summary": "Microsoft Exchange Server において、リモートからコードを実行できる脆弱性が存在します。",
      "risk": "攻撃者がサーバー上で任意のコードを実行できる可能性があります。",
      "product": "Microsoft Exchange Server 2013 Cumulative Update 21 / Microsoft Exchange Server 2013 Cumulative Update 22 / Microsoft Exchange Server 2013 Cumulative Update 23 / Microsoft Exchange Server 2016 Cumulative Update 10 / Microsoft Exchange Server 2016 Cum",
      "category": "windows",
      "component": "package",
      "severity": "critical",
      "cvss": 9.1,
      "cvssVersion": "3.1",
      "cvssSource": "microsoft",
      "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:F/RL:O/RC:C",
      "affected": [
        {
          "product": "Microsoft Exchange Server 2013 Cumulative Update 21",
          "range": ">= 15.00.0 / < 15.00.1395.012（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2013 Cumulative Update 22",
          "range": ">= 15.00.0 / < 15.00.1473.006（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2013 Cumulative Update 23",
          "range": ">= 15.00.0 / < 15.00.1497.012（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2016 Cumulative Update 10",
          "range": ">= 15.01.0 / < 15.01.1531.012（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2016 Cumulative Update 11",
          "range": ">= 15.01.0 / < 15.01.1591.018（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2016 Cumulative Update 12",
          "range": ">= 15.01.0 / < 15.01.1713.010（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2016 Cumulative Update 13",
          "range": ">= 15.01.0 / < 15.01.1779.008（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2016 Cumulative Update 14",
          "range": ">= 15.01.0 / < 15.01.1847.012（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2016 Cumulative Update 15",
          "range": ">= 15.01.0 / < 15.01.1913.012（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2016 Cumulative Update 16",
          "range": ">= 15.01.0 / < 15.01.1979.008（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2016 Cumulative Update 17",
          "range": ">= 15.01.0 / < 15.01.2044.013（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2016 Cumulative Update 18",
          "range": ">= 15.01.0 / < 15.01.2106.013（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2016 Cumulative Update 19",
          "range": ">= 15.01.0 / < 15.01.2176.009（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2016 Cumulative Update 8",
          "range": ">= 15.01.0 / < 15.01.1415.010（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2016 Cumulative Update 9",
          "range": ">= 15.01.0 / < 15.01.1466.016（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2019",
          "range": ">= 15.02.0 / < 15.02.0221.018（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2019 Cumulative Update 1",
          "range": ">= 15.02.0 / < 15.01.1979.006（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2019 Cumulative Update 2",
          "range": ">= 15.02.0 / < 15.02.0397.011（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2019 Cumulative Update 3",
          "range": ">= 15.02.0 / < 15.02.0464.015（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2019 Cumulative Update 4",
          "range": ">= 15.02.0 / < 15.02.0659.012（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2019 Cumulative Update 5",
          "range": ">= 15.02.0 / < 15.02.0595.008（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2019 Cumulative Update 6",
          "range": ">= 15.02.0 / < 15.02.0529.013（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2019 Cumulative Update 7",
          "range": ">= 15.02.0 / < 15.02.0721.013（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2019 Cumulative Update 8",
          "range": ">= 15.02.0 / < 15.02.0792.010（環境: x64-based Systems）"
        }
      ],
      "fixed": [],
      "steps": [
        "ベンダーの指示に従って更新プログラムを適用してください。",
        "「CVE-2021-26855」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
        "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。"
      ],
      "references": [
        {
          "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26855.json",
          "label": "CVE：microsoft"
        },
        {
          "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-26855",
          "label": "CISA KEV（悪用確認）"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-26855",
          "label": "CVE公式レコード"
        },
        {
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26855",
          "label": "Microsoft Exchange Server Remote Code Execution Vulnerability"
        },
        {
          "url": "https://www.cisa.gov/news-events/directives/ed-21-02-mitigate-microsoft-exchange-premises-product-vulnerabilities",
          "label": "CISAが示す関連情報"
        },
        {
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-26855",
          "label": "CISAが示す関連情報"
        },
        {
          "url": "https://www.first.org/cvss/v3.1/specification-document",
          "label": "FIRST公式：CVSS 3.1の条件の定義"
        },
        {
          "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
          "label": "CISA：ソフトウェア更新の基本"
        }
      ],
      "publishedAt": "2021-03-02T23:55:26.000Z",
      "modifiedAt": "2026-08-19T16:30:15.282Z",
      "fetchedAt": "2026-10-23T03:17:49.705Z",
      "exploitStatus": "confirmed",
      "sources": [
        "CVE",
        "CISA KEV"
      ],
      "originalText": "",
      "sourceTitle": "Microsoft Exchange Server Remote Code Execution Vulnerability",
      "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。",
      "state": "published",
      "affectedDetails": [
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2013 Cumulative Update 21",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.00.0",
              "lessThan": "15.00.1395.012",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2013 Cumulative Update 22",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.00.0",
              "lessThan": "15.00.1473.006",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2013 Cumulative Update 23",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.00.0",
              "lessThan": "15.00.1497.012",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2016 Cumulative Update 10",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.01.0",
              "lessThan": "15.01.1531.012",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2016 Cumulative Update 11",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.01.0",
              "lessThan": "15.01.1591.018",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2016 Cumulative Update 12",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.01.0",
              "lessThan": "15.01.1713.010",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2016 Cumulative Update 13",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.01.0",
              "lessThan": "15.01.1779.008",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2016 Cumulative Update 14",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.01.0",
              "lessThan": "15.01.1847.012",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2016 Cumulative Update 15",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.01.0",
              "lessThan": "15.01.1913.012",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2016 Cumulative Update 16",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.01.0",
              "lessThan": "15.01.1979.008",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2016 Cumulative Update 17",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.01.0",
              "lessThan": "15.01.2044.013",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2016 Cumulative Update 18",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.01.0",
              "lessThan": "15.01.2106.013",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2016 Cumulative Update 19",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.01.0",
              "lessThan": "15.01.2176.009",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2016 Cumulative Update 8",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.01.0",
              "lessThan": "15.01.1415.010",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2016 Cumulative Update 9",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.01.0",
              "lessThan": "15.01.1466.016",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2019",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.02.0",
              "lessThan": "15.02.0221.018",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2019 Cumulative Update 1",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.02.0",
              "lessThan": "15.01.1979.006",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2019 Cumulative Update 2",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.02.0",
              "lessThan": "15.02.0397.011",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2019 Cumulative Update 3",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.02.0",
              "lessThan": "15.02.0464.015",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2019 Cumulative Update 4",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.02.0",
              "lessThan": "15.02.0659.012",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2019 Cumulative Update 5",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.02.0",
              "lessThan": "15.02.0595.008",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2019 Cumulative Update 6",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.02.0",
              "lessThan": "15.02.0529.013",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2019 Cumulative Update 7",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.02.0",
              "lessThan": "15.02.0721.013",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2019 Cumulative Update 8",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.02.0",
              "lessThan": "15.02.0792.010",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        }
      ],
      "configurationNotes": "対象環境・機能: x64-based Systems。製品バージョンだけでなく、原文の利用条件を照合してください。",
      "officialEvidence": {
        "schemaVersion": "1.0",
        "id": "CVE-2021-26855",
        "sourceType": "CVE",
        "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26855.json",
        "fetchedAt": "2026-10-23T02:43:15.990Z",
        "publishedAt": "2021-03-02T23:55:26.000Z",
        "modifiedAt": "2026-08-19T16:30:15.282Z",
        "state": "published",
        "provider": "microsoft",
        "title": "Microsoft Exchange Server Remote Code Execution Vulnerability",
        "descriptions": [
          {
            "lang": "en-US",
            "value": "Microsoft Exchange Server Remote Code Execution Vulnerability",
            "sourcePath": "/containers/cna/descriptions/0/value"
          }
        ],
        "affected": [
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2013 Cumulative Update 21",
            "sourcePath": "/containers/cna/affected/0",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/0/versions/0",
                "version": "15.00.0",
                "lessThan": "15.00.1395.012",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2013 Cumulative Update 22",
            "sourcePath": "/containers/cna/affected/1",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/1/versions/0",
                "version": "15.00.0",
                "lessThan": "15.00.1473.006",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2013 Cumulative Update 23",
            "sourcePath": "/containers/cna/affected/2",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/2/versions/0",
                "version": "15.00.0",
                "lessThan": "15.00.1497.012",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2016 Cumulative Update 10",
            "sourcePath": "/containers/cna/affected/3",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/3/versions/0",
                "version": "15.01.0",
                "lessThan": "15.01.1531.012",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2016 Cumulative Update 11",
            "sourcePath": "/containers/cna/affected/4",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/4/versions/0",
                "version": "15.01.0",
                "lessThan": "15.01.1591.018",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2016 Cumulative Update 12",
            "sourcePath": "/containers/cna/affected/5",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/5/versions/0",
                "version": "15.01.0",
                "lessThan": "15.01.1713.010",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2016 Cumulative Update 13",
            "sourcePath": "/containers/cna/affected/6",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/6/versions/0",
                "version": "15.01.0",
                "lessThan": "15.01.1779.008",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2016 Cumulative Update 14",
            "sourcePath": "/containers/cna/affected/7",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/7/versions/0",
                "version": "15.01.0",
                "lessThan": "15.01.1847.012",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2016 Cumulative Update 15",
            "sourcePath": "/containers/cna/affected/8",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/8/versions/0",
                "version": "15.01.0",
                "lessThan": "15.01.1913.012",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2016 Cumulative Update 16",
            "sourcePath": "/containers/cna/affected/9",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/9/versions/0",
                "version": "15.01.0",
                "lessThan": "15.01.1979.008",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2016 Cumulative Update 17",
            "sourcePath": "/containers/cna/affected/10",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/10/versions/0",
                "version": "15.01.0",
                "lessThan": "15.01.2044.013",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2016 Cumulative Update 18",
            "sourcePath": "/containers/cna/affected/11",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/11/versions/0",
                "version": "15.01.0",
                "lessThan": "15.01.2106.013",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2016 Cumulative Update 19",
            "sourcePath": "/containers/cna/affected/12",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/12/versions/0",
                "version": "15.01.0",
                "lessThan": "15.01.2176.009",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2016 Cumulative Update 8",
            "sourcePath": "/containers/cna/affected/13",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/13/versions/0",
                "version": "15.01.0",
                "lessThan": "15.01.1415.010",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2016 Cumulative Update 9",
            "sourcePath": "/containers/cna/affected/14",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/14/versions/0",
                "version": "15.01.0",
                "lessThan": "15.01.1466.016",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2019",
            "sourcePath": "/containers/cna/affected/15",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/15/versions/0",
                "version": "15.02.0",
                "lessThan": "15.02.0221.018",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2019 Cumulative Update 1",
            "sourcePath": "/containers/cna/affected/16",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/16/versions/0",
                "version": "15.02.0",
                "lessThan": "15.01.1979.006",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2019 Cumulative Update 2",
            "sourcePath": "/containers/cna/affected/17",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/17/versions/0",
                "version": "15.02.0",
                "lessThan": "15.02.0397.011",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2019 Cumulative Update 3",
            "sourcePath": "/containers/cna/affected/18",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/18/versions/0",
                "version": "15.02.0",
                "lessThan": "15.02.0464.015",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2019 Cumulative Update 4",
            "sourcePath": "/containers/cna/affected/19",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/19/versions/0",
                "version": "15.02.0",
                "lessThan": "15.02.0659.012",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2019 Cumulative Update 5",
            "sourcePath": "/containers/cna/affected/20",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/20/versions/0",
                "version": "15.02.0",
                "lessThan": "15.02.0595.008",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2019 Cumulative Update 6",
            "sourcePath": "/containers/cna/affected/21",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/21/versions/0",
                "version": "15.02.0",
                "lessThan": "15.02.0529.013",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2019 Cumulative Update 7",
            "sourcePath": "/containers/cna/affected/22",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/22/versions/0",
                "version": "15.02.0",
                "lessThan": "15.02.0721.013",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2019 Cumulative Update 8",
            "sourcePath": "/containers/cna/affected/23",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/23/versions/0",
                "version": "15.02.0",
                "lessThan": "15.02.0792.010",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          }
        ],
        "solutions": [],
        "workarounds": [],
        "exploits": [],
        "rejectedReasons": [],
        "problemTypes": [
          {
            "cweId": "",
            "lang": "en-US",
            "description": "Remote Code Execution",
            "sourcePath": "/containers/cna/problemTypes/0/descriptions/0"
          }
        ],
        "metrics": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:F/RL:O/RC:C",
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "provider": "microsoft",
            "sourcePath": "/containers/cna/metrics/0/cvssV3_1"
          }
        ],
        "references": [
          {
            "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26855",
            "label": "Microsoft Exchange Server Remote Code Execution Vulnerability",
            "tags": [
              "vendor-advisory",
              "patch"
            ],
            "provider": "microsoft",
            "sourcePath": "/containers/cna/references/0"
          },
          {
            "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26855",
            "label": "CVE",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/0"
          },
          {
            "url": "http://packetstormsecurity.com/files/161846/Microsoft-Exchange-2019-SSRF-Arbitrary-File-Write.html",
            "label": "CVE",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/1"
          },
          {
            "url": "http://packetstormsecurity.com/files/161938/Microsoft-Exchange-ProxyLogon-Remote-Code-Execution.html",
            "label": "CVE",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/2"
          },
          {
            "url": "http://packetstormsecurity.com/files/162610/Microsoft-Exchange-2019-Unauthenticated-Email-Download.html",
            "label": "CVE",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/3"
          },
          {
            "url": "http://packetstormsecurity.com/files/162736/Microsoft-Exchange-ProxyLogon-Collector.html",
            "label": "CVE",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/4"
          },
          {
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-26855",
            "label": "CISA-ADP",
            "tags": [
              "government-resource"
            ],
            "provider": "CISA-ADP",
            "sourcePath": "/containers/adp/1/references/0"
          }
        ],
        "snippets": [
          {
            "evidenceId": "official:/containers/cna/affected/0",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26855.json",
            "sourcePath": "/containers/cna/affected/0",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2013 Cumulative Update 21\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.00.0\",\"lessThan\":\"15.00.1395.012\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26855.json",
            "sourcePath": "/containers/cna/affected/1",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2013 Cumulative Update 22\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.00.0\",\"lessThan\":\"15.00.1473.006\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/2",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26855.json",
            "sourcePath": "/containers/cna/affected/2",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2013 Cumulative Update 23\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.00.0\",\"lessThan\":\"15.00.1497.012\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/3",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26855.json",
            "sourcePath": "/containers/cna/affected/3",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 10\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.1531.012\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/4",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26855.json",
            "sourcePath": "/containers/cna/affected/4",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 11\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.1591.018\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/5",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26855.json",
            "sourcePath": "/containers/cna/affected/5",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 12\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.1713.010\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/6",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26855.json",
            "sourcePath": "/containers/cna/affected/6",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 13\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.1779.008\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/7",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26855.json",
            "sourcePath": "/containers/cna/affected/7",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 14\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.1847.012\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/8",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26855.json",
            "sourcePath": "/containers/cna/affected/8",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 15\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.1913.012\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/9",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26855.json",
            "sourcePath": "/containers/cna/affected/9",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 16\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.1979.008\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/10",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26855.json",
            "sourcePath": "/containers/cna/affected/10",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 17\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.2044.013\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/11",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26855.json",
            "sourcePath": "/containers/cna/affected/11",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 18\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.2106.013\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/12",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26855.json",
            "sourcePath": "/containers/cna/affected/12",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 19\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.2176.009\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/13",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26855.json",
            "sourcePath": "/containers/cna/affected/13",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 8\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.1415.010\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/14",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26855.json",
            "sourcePath": "/containers/cna/affected/14",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 9\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.1466.016\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/15",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26855.json",
            "sourcePath": "/containers/cna/affected/15",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2019\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.02.0\",\"lessThan\":\"15.02.0221.018\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/16",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26855.json",
            "sourcePath": "/containers/cna/affected/16",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2019 Cumulative Update 1\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.02.0\",\"lessThan\":\"15.01.1979.006\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/17",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26855.json",
            "sourcePath": "/containers/cna/affected/17",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2019 Cumulative Update 2\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.02.0\",\"lessThan\":\"15.02.0397.011\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/18",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26855.json",
            "sourcePath": "/containers/cna/affected/18",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2019 Cumulative Update 3\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.02.0\",\"lessThan\":\"15.02.0464.015\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/19",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26855.json",
            "sourcePath": "/containers/cna/affected/19",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2019 Cumulative Update 4\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.02.0\",\"lessThan\":\"15.02.0659.012\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/20",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26855.json",
            "sourcePath": "/containers/cna/affected/20",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2019 Cumulative Update 5\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.02.0\",\"lessThan\":\"15.02.0595.008\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/21",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26855.json",
            "sourcePath": "/containers/cna/affected/21",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2019 Cumulative Update 6\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.02.0\",\"lessThan\":\"15.02.0529.013\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/22",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26855.json",
            "sourcePath": "/containers/cna/affected/22",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2019 Cumulative Update 7\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.02.0\",\"lessThan\":\"15.02.0721.013\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/23",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26855.json",
            "sourcePath": "/containers/cna/affected/23",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2019 Cumulative Update 8\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.02.0\",\"lessThan\":\"15.02.0792.010\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/descriptions/0/value",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26855.json",
            "sourcePath": "/containers/cna/descriptions/0/value",
            "text": "Microsoft Exchange Server Remote Code Execution Vulnerability",
            "truncated": false,
            "representation": "source_excerpt"
          },
          {
            "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26855.json",
            "sourcePath": "/containers/cna/problemTypes/0/descriptions/0",
            "text": "{\"description\":\"Remote Code Execution\",\"lang\":\"en-US\",\"type\":\"Impact\"}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26855.json",
            "sourcePath": "/containers/cna/metrics/0/cvssV3_1",
            "text": "{\"version\":\"3.1\",\"baseSeverity\":\"CRITICAL\",\"baseScore\":9.1,\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:F/RL:O/RC:C\"}",
            "truncated": false,
            "representation": "source_json"
          }
        ],
        "limits": {
          "completeness": "official_record",
          "truncatedFields": [],
          "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。"
        }
      },
      "sourceSnapshots": [
        {
          "source": "CVE",
          "modifiedAt": "2026-08-19T16:30:15.282Z",
          "fetchedAt": "2026-10-23T02:43:15.990Z",
          "state": "published"
        },
        {
          "source": "CISA KEV",
          "modifiedAt": "2021-11-03T00:00:00.000Z",
          "fetchedAt": "2026-10-23T03:17:49.705Z",
          "state": "published"
        }
      ],
      "sourceAction": "Apply updates per vendor instructions.",
      "sourceSummary": "Microsoft Exchange Server 2013 Cumulative Update 21 / Microsoft Exchange Server 2013 Cumulative Update 22 / Microsoft Exchange Server 2013 Cumulative Update 23 / Microsoft Exchange Server 2016 Cumulative Update 10 / Microsoft Exchange Server 2016 Cumにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。",
      "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。",
      "guidance": {
        "schemaVersion": "1.0",
        "method": "automatic",
        "reviewedAt": null,
        "reviewState": "current",
        "generatedAt": "2026-10-23T03:58:23.365Z",
        "generatorVersion": "2026-10-23.3",
        "sourceFingerprint": "2e1f4ea0911bf4714c7df8e87fd26fee78b92922ff68d2e16e261b642a4f8785",
        "sourceModifiedAt": "2026-08-19T16:30:15.282Z",
        "model": "@cf/openai/gpt-oss-120b",
        "verificationMethod": "exact_source_excerpt_and_independent_semantic_check",
        "summary": "Microsoft Exchange Server において、リモートからコードを実行できる脆弱性が存在します。",
        "risk": "攻撃者がサーバー上で任意のコードを実行できる可能性があります。",
        "summaryEvidenceIds": [
          "E1"
        ],
        "riskEvidenceIds": [
          "E2"
        ],
        "applicability": [
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2013 Cumulative Update 21。影響ありとして記載：15.00.0以上、15.00.1395.012未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26855.json"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2013 Cumulative Update 22。影響ありとして記載：15.00.0以上、15.00.1473.006未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26855.json"
            ],
            "evidenceIds": [
              "E4"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2013 Cumulative Update 23。影響ありとして記載：15.00.0以上、15.00.1497.012未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26855.json"
            ],
            "evidenceIds": [
              "E5"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 10。影響ありとして記載：15.01.0以上、15.01.1531.012未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26855.json"
            ],
            "evidenceIds": [
              "E6"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 11。影響ありとして記載：15.01.0以上、15.01.1591.018未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26855.json"
            ],
            "evidenceIds": [
              "E7"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 12。影響ありとして記載：15.01.0以上、15.01.1713.010未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26855.json"
            ],
            "evidenceIds": [
              "E8"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 13。影響ありとして記載：15.01.0以上、15.01.1779.008未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26855.json"
            ],
            "evidenceIds": [
              "E9"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 14。影響ありとして記載：15.01.0以上、15.01.1847.012未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26855.json"
            ],
            "evidenceIds": [
              "E10"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 15。影響ありとして記載：15.01.0以上、15.01.1913.012未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26855.json"
            ],
            "evidenceIds": [
              "E11"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 16。影響ありとして記載：15.01.0以上、15.01.1979.008未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26855.json"
            ],
            "evidenceIds": [
              "E12"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 17。影響ありとして記載：15.01.0以上、15.01.2044.013未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26855.json"
            ],
            "evidenceIds": [
              "E13"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 18。影響ありとして記載：15.01.0以上、15.01.2106.013未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26855.json"
            ],
            "evidenceIds": [
              "E14"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 19。影響ありとして記載：15.01.0以上、15.01.2176.009未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26855.json"
            ],
            "evidenceIds": [
              "E15"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 8。影響ありとして記載：15.01.0以上、15.01.1415.010未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26855.json"
            ],
            "evidenceIds": [
              "E16"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 9。影響ありとして記載：15.01.0以上、15.01.1466.016未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26855.json"
            ],
            "evidenceIds": [
              "E17"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2019。影響ありとして記載：15.02.0以上、15.02.0221.018未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26855.json"
            ],
            "evidenceIds": [
              "E18"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2019 Cumulative Update 1。影響ありとして記載：15.02.0以上、15.01.1979.006未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26855.json"
            ],
            "evidenceIds": [
              "E19"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2019 Cumulative Update 2。影響ありとして記載：15.02.0以上、15.02.0397.011未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26855.json"
            ],
            "evidenceIds": [
              "E20"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2019 Cumulative Update 3。影響ありとして記載：15.02.0以上、15.02.0464.015未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26855.json"
            ],
            "evidenceIds": [
              "E21"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2019 Cumulative Update 4。影響ありとして記載：15.02.0以上、15.02.0659.012未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26855.json"
            ],
            "evidenceIds": [
              "E22"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2019 Cumulative Update 5。影響ありとして記載：15.02.0以上、15.02.0595.008未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26855.json"
            ],
            "evidenceIds": [
              "E23"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2019 Cumulative Update 6。影響ありとして記載：15.02.0以上、15.02.0529.013未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26855.json"
            ],
            "evidenceIds": [
              "E24"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2019 Cumulative Update 7。影響ありとして記載：15.02.0以上、15.02.0721.013未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26855.json"
            ],
            "evidenceIds": [
              "E25"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2019 Cumulative Update 8。影響ありとして記載：15.02.0以上、15.02.0792.010未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26855.json"
            ],
            "evidenceIds": [
              "E26"
            ]
          },
          {
            "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。",
            "kind": "fact",
            "sourceUrls": [
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-26855"
            ],
            "evidenceIds": [
              "E28"
            ]
          }
        ],
        "versionChecks": [
          {
            "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26855.json"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "「Microsoft Exchange Server 2013 Cumulative Update 21 / Microsoft Exchange Server 2013 Cumulative Update 22 / Microsoft Exchange Server 2013 Cumulative Update 23 / Microsoft Exchange Server 2016 Cumulative Update 10 / Microsoft Exchange Server 2016 Cum」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
              "https://www.cve.org/CVERecord?id=CVE-2021-26855",
              "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26855",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-26855",
              "https://www.cisa.gov/news-events/directives/ed-21-02-mitigate-microsoft-exchange-premises-product-vulnerabilities",
              "https://nvd.nist.gov/vuln/detail/CVE-2021-26855"
            ]
          }
        ],
        "actions": [
          {
            "text": "ベンダーの指示に従って更新プログラムを適用してください。",
            "kind": "fix",
            "sourceUrls": [
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-26855"
            ],
            "evidenceIds": [
              "E27"
            ]
          },
          {
            "text": "「CVE-2021-26855」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cve.org/CVERecord?id=CVE-2021-26855",
              "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26855",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-26855",
              "https://www.cisa.gov/news-events/directives/ed-21-02-mitigate-microsoft-exchange-premises-product-vulnerabilities",
              "https://nvd.nist.gov/vuln/detail/CVE-2021-26855"
            ]
          },
          {
            "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
              "https://www.cve.org/CVERecord?id=CVE-2021-26855",
              "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26855",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-26855",
              "https://www.cisa.gov/news-events/directives/ed-21-02-mitigate-microsoft-exchange-premises-product-vulnerabilities",
              "https://nvd.nist.gov/vuln/detail/CVE-2021-26855"
            ]
          }
        ],
        "temporaryMitigations": [
          {
            "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cve.org/CVERecord?id=CVE-2021-26855",
              "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26855",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-26855",
              "https://www.cisa.gov/news-events/directives/ed-21-02-mitigate-microsoft-exchange-premises-product-vulnerabilities",
              "https://nvd.nist.gov/vuln/detail/CVE-2021-26855"
            ]
          }
        ],
        "verification": [
          {
            "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。",
            "kind": "procedure",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26855.json"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
              "https://www.cve.org/CVERecord?id=CVE-2021-26855",
              "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26855",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-26855",
              "https://www.cisa.gov/news-events/directives/ed-21-02-mitigate-microsoft-exchange-premises-product-vulnerabilities",
              "https://nvd.nist.gov/vuln/detail/CVE-2021-26855"
            ]
          }
        ],
        "unknowns": [
          "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。",
          "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。"
        ],
        "sources": [
          {
            "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26855.json",
            "label": "CVE：microsoft"
          },
          {
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-26855",
            "label": "CISA KEV（悪用確認）"
          },
          {
            "url": "https://www.cve.org/CVERecord?id=CVE-2021-26855",
            "label": "CVE公式レコード"
          },
          {
            "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26855",
            "label": "Microsoft Exchange Server Remote Code Execution Vulnerability"
          },
          {
            "url": "https://www.cisa.gov/news-events/directives/ed-21-02-mitigate-microsoft-exchange-premises-product-vulnerabilities",
            "label": "CISAが示す関連情報"
          },
          {
            "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-26855",
            "label": "CISAが示す関連情報"
          },
          {
            "url": "https://www.first.org/cvss/v3.1/specification-document",
            "label": "FIRST公式：CVSS 3.1の条件の定義"
          },
          {
            "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
            "label": "CISA：ソフトウェア更新の基本"
          }
        ],
        "evidence": [
          {
            "id": "E1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26855.json",
            "sourceField": "/containers/cna/title",
            "excerpt": "Microsoft Exchange Server Remote Code Execution Vulnerability",
            "language": null
          },
          {
            "id": "E2",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26855.json",
            "sourceField": "/containers/cna/problemTypes/0/descriptions/0",
            "excerpt": "{\"description\":\"Remote Code Execution\",\"lang\":\"en-US\",\"type\":\"Impact\"}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E3",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26855.json",
            "sourceField": "/containers/cna/affected/0",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2013 Cumulative Update 21\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.00.0\",\"lessThan\":\"15.00.1395.012\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E4",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26855.json",
            "sourceField": "/containers/cna/affected/1",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2013 Cumulative Update 22\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.00.0\",\"lessThan\":\"15.00.1473.006\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E5",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26855.json",
            "sourceField": "/containers/cna/affected/2",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2013 Cumulative Update 23\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.00.0\",\"lessThan\":\"15.00.1497.012\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E6",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26855.json",
            "sourceField": "/containers/cna/affected/3",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 10\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.1531.012\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E7",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26855.json",
            "sourceField": "/containers/cna/affected/4",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 11\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.1591.018\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E8",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26855.json",
            "sourceField": "/containers/cna/affected/5",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 12\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.1713.010\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E9",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26855.json",
            "sourceField": "/containers/cna/affected/6",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 13\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.1779.008\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E10",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26855.json",
            "sourceField": "/containers/cna/affected/7",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 14\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.1847.012\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E11",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26855.json",
            "sourceField": "/containers/cna/affected/8",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 15\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.1913.012\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E12",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26855.json",
            "sourceField": "/containers/cna/affected/9",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 16\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.1979.008\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E13",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26855.json",
            "sourceField": "/containers/cna/affected/10",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 17\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.2044.013\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E14",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26855.json",
            "sourceField": "/containers/cna/affected/11",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 18\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.2106.013\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E15",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26855.json",
            "sourceField": "/containers/cna/affected/12",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 19\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.2176.009\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E16",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26855.json",
            "sourceField": "/containers/cna/affected/13",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 8\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.1415.010\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E17",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26855.json",
            "sourceField": "/containers/cna/affected/14",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 9\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.1466.016\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E18",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26855.json",
            "sourceField": "/containers/cna/affected/15",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2019\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.02.0\",\"lessThan\":\"15.02.0221.018\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E19",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26855.json",
            "sourceField": "/containers/cna/affected/16",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2019 Cumulative Update 1\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.02.0\",\"lessThan\":\"15.01.1979.006\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E20",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26855.json",
            "sourceField": "/containers/cna/affected/17",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2019 Cumulative Update 2\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.02.0\",\"lessThan\":\"15.02.0397.011\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E21",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26855.json",
            "sourceField": "/containers/cna/affected/18",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2019 Cumulative Update 3\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.02.0\",\"lessThan\":\"15.02.0464.015\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E22",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26855.json",
            "sourceField": "/containers/cna/affected/19",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2019 Cumulative Update 4\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.02.0\",\"lessThan\":\"15.02.0659.012\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E23",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26855.json",
            "sourceField": "/containers/cna/affected/20",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2019 Cumulative Update 5\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.02.0\",\"lessThan\":\"15.02.0595.008\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E24",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26855.json",
            "sourceField": "/containers/cna/affected/21",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2019 Cumulative Update 6\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.02.0\",\"lessThan\":\"15.02.0529.013\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E25",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26855.json",
            "sourceField": "/containers/cna/affected/22",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2019 Cumulative Update 7\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.02.0\",\"lessThan\":\"15.02.0721.013\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E26",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26855.json",
            "sourceField": "/containers/cna/affected/23",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2019 Cumulative Update 8\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.02.0\",\"lessThan\":\"15.02.0792.010\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E27",
            "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-26855",
            "sourceField": "/sourceAction",
            "excerpt": "Apply updates per vendor instructions.",
            "language": null
          },
          {
            "id": "E28",
            "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-26855",
            "sourceField": "/exploitStatus",
            "excerpt": "{\"id\":\"CVE-2021-26855\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}",
            "language": "en",
            "representation": "normalized_feed_field"
          }
        ],
        "supportRequest": "件名：CVE-2021-26855（Microsoft Exchange Server 2013 Cumulative Update 21 / Microsoft Exchange Server 2013 Cumulative Update 22 / Microsoft Exchange Server 2013 Cumulative Update 23 / Microsoft Exchange Server 2016 Cumulative Update 10 / Microsoft Exchange Server 2016 Cum）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・公式の対象表：Microsoft / Microsoft Exchange Server 2013 Cumulative Update 21。影響ありとして記載：15.00.0以上、15.00.1395.012未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2013 Cumulative Update 22。影響ありとして記載：15.00.0以上、15.00.1473.006未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2013 Cumulative Update 23。影響ありとして記載：15.00.0以上、15.00.1497.012未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 10。影響ありとして記載：15.01.0以上、15.01.1531.012未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 11。影響ありとして記載：15.01.0以上、15.01.1591.018未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 12。影響ありとして記載：15.01.0以上、15.01.1713.010未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 13。影響ありとして記載：15.01.0以上、15.01.1779.008未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 14。影響ありとして記載：15.01.0以上、15.01.1847.012未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 15。影響ありとして記載：15.01.0以上、15.01.1913.012未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 16。影響ありとして記載：15.01.0以上、15.01.1979.008未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 17。影響ありとして記載：15.01.0以上、15.01.2044.013未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 18。影響ありとして記載：15.01.0以上、15.01.2106.013未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 19。影響ありとして記載：15.01.0以上、15.01.2176.009未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 8。影響ありとして記載：15.01.0以上、15.01.1415.010未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 9。影響ありとして記載：15.01.0以上、15.01.1466.016未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2019。影響ありとして記載：15.02.0以上、15.02.0221.018未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2019 Cumulative Update 1。影響ありとして記載：15.02.0以上、15.01.1979.006未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2019 Cumulative Update 2。影響ありとして記載：15.02.0以上、15.02.0397.011未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2019 Cumulative Update 3。影響ありとして記載：15.02.0以上、15.02.0464.015未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2019 Cumulative Update 4。影響ありとして記載：15.02.0以上、15.02.0659.012未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2019 Cumulative Update 5。影響ありとして記載：15.02.0以上、15.02.0595.008未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2019 Cumulative Update 6。影響ありとして記載：15.02.0以上、15.02.0529.013未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2019 Cumulative Update 7。影響ありとして記載：15.02.0以上、15.02.0721.013未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2019 Cumulative Update 8。影響ありとして記載：15.02.0以上、15.02.0792.010未満。対象の環境：x64-based Systems\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2021-26855",
        "publicationCheckVersion": "2026-10-23.1",
        "sourceNotices": [],
        "automation": {
          "status": "ready",
          "lastAttempt": "2026-10-23T03:58:23.365Z",
          "lastSuccess": "2026-10-23T03:58:23.365Z",
          "sourceCheckedAt": "2026-10-23T02:43:15.990Z",
          "errorCode": null
        },
        "glossary": [
          {
            "term": "任意のコード実行",
            "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。",
            "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html",
            "kind": "general_definition"
          }
        ]
      }
    },
    {
      "id": "CVE-2021-26857",
      "aliases": [],
      "title": "Microsoft Exchange Server 2010 Service Pack 3 / Microsoft Exchange Server 2013 Cumulative Update 21 / Microsoft Exchange Server 2013 Cumulative Update 22 / Microsoft Exchange Server 2013 Cumulative Update 23 / Microsoft Exchange Server 2013 Service P：コード実行",
      "summary": "Microsoft Exchange Server のリモートコード実行脆弱性",
      "risk": "攻撃者がサーバー上で任意のコードを実行できる可能性がある",
      "product": "Microsoft Exchange Server 2010 Service Pack 3 / Microsoft Exchange Server 2013 Cumulative Update 21 / Microsoft Exchange Server 2013 Cumulative Update 22 / Microsoft Exchange Server 2013 Cumulative Update 23 / Microsoft Exchange Server 2013 Service P",
      "category": "windows",
      "component": "package",
      "severity": "high",
      "cvss": 7.8,
      "cvssVersion": "3.1",
      "cvssSource": "microsoft",
      "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C",
      "affected": [
        {
          "product": "Microsoft Exchange Server 2010 Service Pack 3",
          "range": ">= 14.0.0.0 / < 14.03.0513.000"
        },
        {
          "product": "Microsoft Exchange Server 2013 Cumulative Update 21",
          "range": ">= 15.00.0 / < 15.00.1395.012（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2013 Cumulative Update 22",
          "range": ">= 15.00.0 / < 15.00.1473.006（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2013 Cumulative Update 23",
          "range": ">= 15.00.0 / < 15.00.1497.012（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2013 Service Pack 1",
          "range": ">= 15.00.0 / < 15.00.0847.064（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2016 Cumulative Update 10",
          "range": ">= 15.01.0 / < 15.01.1531.012（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2016 Cumulative Update 11",
          "range": ">= 15.01.0 / < 15.01.1591.018（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2016 Cumulative Update 12",
          "range": ">= 15.01.0 / < 15.01.1713.010（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2016 Cumulative Update 13",
          "range": ">= 15.01.0 / < 15.01.1779.008（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2016 Cumulative Update 14",
          "range": ">= 15.01.0 / < 15.01.1847.012（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2016 Cumulative Update 15",
          "range": ">= 15.01.0 / < 15.01.1913.012（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2016 Cumulative Update 16",
          "range": ">= 15.01.0 / < 15.01.1979.008（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2016 Cumulative Update 17",
          "range": ">= 15.01.0 / < 15.01.2044.013（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2016 Cumulative Update 18",
          "range": ">= 15.01.0 / < 15.01.2106.013（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2016 Cumulative Update 19",
          "range": ">= 15.01.0 / < 15.01.2176.009（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2016 Cumulative Update 8",
          "range": ">= 15.01.0 / < 15.01.1415.010（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2016 Cumulative Update 9",
          "range": ">= 15.01.0 / < 15.01.1466.016（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2019",
          "range": ">= 15.02.0 / < 15.02.0221.018（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2019 Cumulative Update 1",
          "range": ">= 15.02.0 / < 15.01.1979.006（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2019 Cumulative Update 2",
          "range": ">= 15.02.0 / < 15.02.0397.011（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2019 Cumulative Update 3",
          "range": ">= 15.02.0 / < 15.02.0464.015（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2019 Cumulative Update 4",
          "range": ">= 15.02.0 / < 15.02.0659.012（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2019 Cumulative Update 5",
          "range": ">= 15.02.0 / < 15.02.0595.008（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2019 Cumulative Update 6",
          "range": ">= 15.02.0 / < 15.02.0529.013（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2019 Cumulative Update 7",
          "range": ">= 15.02.0 / < 15.02.0721.013（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2019 Cumulative Update 8",
          "range": ">= 15.02.0 / < 15.02.0792.010（環境: x64-based Systems）"
        }
      ],
      "fixed": [],
      "steps": [
        "ベンダーの指示に従って更新プログラムを適用する",
        "「CVE-2021-26857」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
        "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。"
      ],
      "references": [
        {
          "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json",
          "label": "CVE：microsoft"
        },
        {
          "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-26857",
          "label": "CISA KEV（悪用確認）"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-26857",
          "label": "CVE公式レコード"
        },
        {
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26857",
          "label": "Microsoft Exchange Server Remote Code Execution Vulnerability"
        },
        {
          "url": "https://www.cisa.gov/news-events/directives/ed-21-02-mitigate-microsoft-exchange-premises-product-vulnerabilities",
          "label": "CISAが示す関連情報"
        },
        {
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-26857",
          "label": "CISAが示す関連情報"
        },
        {
          "url": "https://www.first.org/cvss/v3.1/specification-document",
          "label": "FIRST公式：CVSS 3.1の条件の定義"
        },
        {
          "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
          "label": "CISA：ソフトウェア更新の基本"
        }
      ],
      "publishedAt": "2021-03-02T23:55:26.000Z",
      "modifiedAt": "2026-08-19T16:30:15.844Z",
      "fetchedAt": "2026-10-23T02:43:16.046Z",
      "exploitStatus": "confirmed",
      "sources": [
        "CVE",
        "CISA KEV"
      ],
      "originalText": "",
      "sourceTitle": "Microsoft Exchange Server Remote Code Execution Vulnerability",
      "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。",
      "state": "published",
      "affectedDetails": [
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2010 Service Pack 3",
          "versions": [
            {
              "version": "14.0.0.0",
              "lessThan": "14.03.0513.000",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2013 Cumulative Update 21",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.00.0",
              "lessThan": "15.00.1395.012",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2013 Cumulative Update 22",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.00.0",
              "lessThan": "15.00.1473.006",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2013 Cumulative Update 23",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.00.0",
              "lessThan": "15.00.1497.012",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2013 Service Pack 1",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.00.0",
              "lessThan": "15.00.0847.064",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2016 Cumulative Update 10",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.01.0",
              "lessThan": "15.01.1531.012",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2016 Cumulative Update 11",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.01.0",
              "lessThan": "15.01.1591.018",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2016 Cumulative Update 12",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.01.0",
              "lessThan": "15.01.1713.010",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2016 Cumulative Update 13",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.01.0",
              "lessThan": "15.01.1779.008",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2016 Cumulative Update 14",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.01.0",
              "lessThan": "15.01.1847.012",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2016 Cumulative Update 15",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.01.0",
              "lessThan": "15.01.1913.012",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2016 Cumulative Update 16",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.01.0",
              "lessThan": "15.01.1979.008",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2016 Cumulative Update 17",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.01.0",
              "lessThan": "15.01.2044.013",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2016 Cumulative Update 18",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.01.0",
              "lessThan": "15.01.2106.013",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2016 Cumulative Update 19",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.01.0",
              "lessThan": "15.01.2176.009",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2016 Cumulative Update 8",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.01.0",
              "lessThan": "15.01.1415.010",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2016 Cumulative Update 9",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.01.0",
              "lessThan": "15.01.1466.016",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2019",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.02.0",
              "lessThan": "15.02.0221.018",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2019 Cumulative Update 1",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.02.0",
              "lessThan": "15.01.1979.006",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2019 Cumulative Update 2",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.02.0",
              "lessThan": "15.02.0397.011",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2019 Cumulative Update 3",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.02.0",
              "lessThan": "15.02.0464.015",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2019 Cumulative Update 4",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.02.0",
              "lessThan": "15.02.0659.012",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2019 Cumulative Update 5",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.02.0",
              "lessThan": "15.02.0595.008",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2019 Cumulative Update 6",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.02.0",
              "lessThan": "15.02.0529.013",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2019 Cumulative Update 7",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.02.0",
              "lessThan": "15.02.0721.013",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2019 Cumulative Update 8",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.02.0",
              "lessThan": "15.02.0792.010",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        }
      ],
      "configurationNotes": "対象環境・機能: x64-based Systems。製品バージョンだけでなく、原文の利用条件を照合してください。",
      "officialEvidence": {
        "schemaVersion": "1.0",
        "id": "CVE-2021-26857",
        "sourceType": "CVE",
        "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json",
        "fetchedAt": "2026-10-23T02:43:16.046Z",
        "publishedAt": "2021-03-02T23:55:26.000Z",
        "modifiedAt": "2026-08-19T16:30:15.844Z",
        "state": "published",
        "provider": "microsoft",
        "title": "Microsoft Exchange Server Remote Code Execution Vulnerability",
        "descriptions": [
          {
            "lang": "en-US",
            "value": "Microsoft Exchange Server Remote Code Execution Vulnerability",
            "sourcePath": "/containers/cna/descriptions/0/value"
          }
        ],
        "affected": [
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2010 Service Pack 3",
            "sourcePath": "/containers/cna/affected/0",
            "platforms": [],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/0/versions/0",
                "version": "14.0.0.0",
                "lessThan": "14.03.0513.000",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2013 Cumulative Update 21",
            "sourcePath": "/containers/cna/affected/1",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/1/versions/0",
                "version": "15.00.0",
                "lessThan": "15.00.1395.012",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2013 Cumulative Update 22",
            "sourcePath": "/containers/cna/affected/2",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/2/versions/0",
                "version": "15.00.0",
                "lessThan": "15.00.1473.006",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2013 Cumulative Update 23",
            "sourcePath": "/containers/cna/affected/3",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/3/versions/0",
                "version": "15.00.0",
                "lessThan": "15.00.1497.012",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2013 Service Pack 1",
            "sourcePath": "/containers/cna/affected/4",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/4/versions/0",
                "version": "15.00.0",
                "lessThan": "15.00.0847.064",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2016 Cumulative Update 10",
            "sourcePath": "/containers/cna/affected/5",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/5/versions/0",
                "version": "15.01.0",
                "lessThan": "15.01.1531.012",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2016 Cumulative Update 11",
            "sourcePath": "/containers/cna/affected/6",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/6/versions/0",
                "version": "15.01.0",
                "lessThan": "15.01.1591.018",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2016 Cumulative Update 12",
            "sourcePath": "/containers/cna/affected/7",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/7/versions/0",
                "version": "15.01.0",
                "lessThan": "15.01.1713.010",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2016 Cumulative Update 13",
            "sourcePath": "/containers/cna/affected/8",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/8/versions/0",
                "version": "15.01.0",
                "lessThan": "15.01.1779.008",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2016 Cumulative Update 14",
            "sourcePath": "/containers/cna/affected/9",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/9/versions/0",
                "version": "15.01.0",
                "lessThan": "15.01.1847.012",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2016 Cumulative Update 15",
            "sourcePath": "/containers/cna/affected/10",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/10/versions/0",
                "version": "15.01.0",
                "lessThan": "15.01.1913.012",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2016 Cumulative Update 16",
            "sourcePath": "/containers/cna/affected/11",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/11/versions/0",
                "version": "15.01.0",
                "lessThan": "15.01.1979.008",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2016 Cumulative Update 17",
            "sourcePath": "/containers/cna/affected/12",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/12/versions/0",
                "version": "15.01.0",
                "lessThan": "15.01.2044.013",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2016 Cumulative Update 18",
            "sourcePath": "/containers/cna/affected/13",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/13/versions/0",
                "version": "15.01.0",
                "lessThan": "15.01.2106.013",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2016 Cumulative Update 19",
            "sourcePath": "/containers/cna/affected/14",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/14/versions/0",
                "version": "15.01.0",
                "lessThan": "15.01.2176.009",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2016 Cumulative Update 8",
            "sourcePath": "/containers/cna/affected/15",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/15/versions/0",
                "version": "15.01.0",
                "lessThan": "15.01.1415.010",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2016 Cumulative Update 9",
            "sourcePath": "/containers/cna/affected/16",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/16/versions/0",
                "version": "15.01.0",
                "lessThan": "15.01.1466.016",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2019",
            "sourcePath": "/containers/cna/affected/17",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/17/versions/0",
                "version": "15.02.0",
                "lessThan": "15.02.0221.018",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2019 Cumulative Update 1",
            "sourcePath": "/containers/cna/affected/18",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/18/versions/0",
                "version": "15.02.0",
                "lessThan": "15.01.1979.006",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2019 Cumulative Update 2",
            "sourcePath": "/containers/cna/affected/19",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/19/versions/0",
                "version": "15.02.0",
                "lessThan": "15.02.0397.011",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2019 Cumulative Update 3",
            "sourcePath": "/containers/cna/affected/20",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/20/versions/0",
                "version": "15.02.0",
                "lessThan": "15.02.0464.015",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2019 Cumulative Update 4",
            "sourcePath": "/containers/cna/affected/21",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/21/versions/0",
                "version": "15.02.0",
                "lessThan": "15.02.0659.012",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2019 Cumulative Update 5",
            "sourcePath": "/containers/cna/affected/22",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/22/versions/0",
                "version": "15.02.0",
                "lessThan": "15.02.0595.008",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2019 Cumulative Update 6",
            "sourcePath": "/containers/cna/affected/23",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/23/versions/0",
                "version": "15.02.0",
                "lessThan": "15.02.0529.013",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2019 Cumulative Update 7",
            "sourcePath": "/containers/cna/affected/24",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/24/versions/0",
                "version": "15.02.0",
                "lessThan": "15.02.0721.013",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2019 Cumulative Update 8",
            "sourcePath": "/containers/cna/affected/25",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/25/versions/0",
                "version": "15.02.0",
                "lessThan": "15.02.0792.010",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          }
        ],
        "solutions": [],
        "workarounds": [],
        "exploits": [],
        "rejectedReasons": [],
        "problemTypes": [
          {
            "cweId": "",
            "lang": "en-US",
            "description": "Remote Code Execution",
            "sourcePath": "/containers/cna/problemTypes/0/descriptions/0"
          }
        ],
        "metrics": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "provider": "microsoft",
            "sourcePath": "/containers/cna/metrics/0/cvssV3_1"
          }
        ],
        "references": [
          {
            "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26857",
            "label": "Microsoft Exchange Server Remote Code Execution Vulnerability",
            "tags": [
              "vendor-advisory",
              "patch"
            ],
            "provider": "microsoft",
            "sourcePath": "/containers/cna/references/0"
          },
          {
            "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26857",
            "label": "CVE",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/0"
          },
          {
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-26857",
            "label": "CISA-ADP",
            "tags": [
              "government-resource"
            ],
            "provider": "CISA-ADP",
            "sourcePath": "/containers/adp/1/references/0"
          }
        ],
        "snippets": [
          {
            "evidenceId": "official:/containers/cna/affected/0",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json",
            "sourcePath": "/containers/cna/affected/0",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2010 Service Pack 3\",\"versions\":[{\"version\":\"14.0.0.0\",\"lessThan\":\"14.03.0513.000\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json",
            "sourcePath": "/containers/cna/affected/1",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2013 Cumulative Update 21\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.00.0\",\"lessThan\":\"15.00.1395.012\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/2",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json",
            "sourcePath": "/containers/cna/affected/2",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2013 Cumulative Update 22\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.00.0\",\"lessThan\":\"15.00.1473.006\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/3",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json",
            "sourcePath": "/containers/cna/affected/3",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2013 Cumulative Update 23\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.00.0\",\"lessThan\":\"15.00.1497.012\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/4",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json",
            "sourcePath": "/containers/cna/affected/4",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2013 Service Pack 1\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.00.0\",\"lessThan\":\"15.00.0847.064\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/5",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json",
            "sourcePath": "/containers/cna/affected/5",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 10\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.1531.012\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/6",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json",
            "sourcePath": "/containers/cna/affected/6",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 11\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.1591.018\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/7",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json",
            "sourcePath": "/containers/cna/affected/7",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 12\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.1713.010\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/8",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json",
            "sourcePath": "/containers/cna/affected/8",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 13\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.1779.008\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/9",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json",
            "sourcePath": "/containers/cna/affected/9",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 14\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.1847.012\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/10",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json",
            "sourcePath": "/containers/cna/affected/10",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 15\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.1913.012\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/11",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json",
            "sourcePath": "/containers/cna/affected/11",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 16\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.1979.008\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/12",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json",
            "sourcePath": "/containers/cna/affected/12",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 17\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.2044.013\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/13",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json",
            "sourcePath": "/containers/cna/affected/13",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 18\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.2106.013\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/14",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json",
            "sourcePath": "/containers/cna/affected/14",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 19\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.2176.009\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/15",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json",
            "sourcePath": "/containers/cna/affected/15",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 8\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.1415.010\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/16",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json",
            "sourcePath": "/containers/cna/affected/16",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 9\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.1466.016\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/17",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json",
            "sourcePath": "/containers/cna/affected/17",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2019\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.02.0\",\"lessThan\":\"15.02.0221.018\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/18",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json",
            "sourcePath": "/containers/cna/affected/18",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2019 Cumulative Update 1\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.02.0\",\"lessThan\":\"15.01.1979.006\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/19",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json",
            "sourcePath": "/containers/cna/affected/19",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2019 Cumulative Update 2\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.02.0\",\"lessThan\":\"15.02.0397.011\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/20",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json",
            "sourcePath": "/containers/cna/affected/20",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2019 Cumulative Update 3\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.02.0\",\"lessThan\":\"15.02.0464.015\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/21",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json",
            "sourcePath": "/containers/cna/affected/21",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2019 Cumulative Update 4\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.02.0\",\"lessThan\":\"15.02.0659.012\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/22",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json",
            "sourcePath": "/containers/cna/affected/22",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2019 Cumulative Update 5\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.02.0\",\"lessThan\":\"15.02.0595.008\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/23",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json",
            "sourcePath": "/containers/cna/affected/23",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2019 Cumulative Update 6\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.02.0\",\"lessThan\":\"15.02.0529.013\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/24",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json",
            "sourcePath": "/containers/cna/affected/24",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2019 Cumulative Update 7\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.02.0\",\"lessThan\":\"15.02.0721.013\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/25",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json",
            "sourcePath": "/containers/cna/affected/25",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2019 Cumulative Update 8\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.02.0\",\"lessThan\":\"15.02.0792.010\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/descriptions/0/value",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json",
            "sourcePath": "/containers/cna/descriptions/0/value",
            "text": "Microsoft Exchange Server Remote Code Execution Vulnerability",
            "truncated": false,
            "representation": "source_excerpt"
          },
          {
            "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json",
            "sourcePath": "/containers/cna/problemTypes/0/descriptions/0",
            "text": "{\"description\":\"Remote Code Execution\",\"lang\":\"en-US\",\"type\":\"Impact\"}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json",
            "sourcePath": "/containers/cna/metrics/0/cvssV3_1",
            "text": "{\"version\":\"3.1\",\"baseSeverity\":\"HIGH\",\"baseScore\":7.8,\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C\"}",
            "truncated": false,
            "representation": "source_json"
          }
        ],
        "limits": {
          "completeness": "official_record",
          "truncatedFields": [],
          "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。"
        }
      },
      "sourceSnapshots": [
        {
          "source": "CVE",
          "modifiedAt": "2026-08-19T16:30:15.844Z",
          "fetchedAt": "2026-10-23T02:43:16.046Z",
          "state": "published"
        },
        {
          "source": "CISA KEV",
          "modifiedAt": "2021-11-03T00:00:00.000Z",
          "fetchedAt": "2026-10-23T02:17:50.489Z",
          "state": "published"
        }
      ],
      "sourceAction": "Apply updates per vendor instructions.",
      "sourceSummary": "Microsoft Exchange Server 2010 Service Pack 3 / Microsoft Exchange Server 2013 Cumulative Update 21 / Microsoft Exchange Server 2013 Cumulative Update 22 / Microsoft Exchange Server 2013 Cumulative Update 23 / Microsoft Exchange Server 2013 Service Pにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。",
      "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。",
      "guidance": {
        "schemaVersion": "1.0",
        "method": "automatic",
        "reviewedAt": null,
        "reviewState": "current",
        "generatedAt": "2026-10-23T03:50:03.894Z",
        "generatorVersion": "2026-10-23.3",
        "sourceFingerprint": "42d5d116bf721913092d7a37180e46650da00b6ceb24c0335f2a9a92474118d3",
        "sourceModifiedAt": "2026-08-19T16:30:15.844Z",
        "model": "@cf/openai/gpt-oss-120b",
        "verificationMethod": "exact_source_excerpt_and_independent_semantic_check",
        "summary": "Microsoft Exchange Server のリモートコード実行脆弱性",
        "risk": "攻撃者がサーバー上で任意のコードを実行できる可能性がある",
        "summaryEvidenceIds": [
          "E1",
          "E2"
        ],
        "riskEvidenceIds": [
          "E3"
        ],
        "applicability": [
          {
            "text": "Microsoft Exchange Server 2010 Service Pack 3（バージョン 14.0.0.0 未満 14.03.0513.000）",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json"
            ],
            "evidenceIds": [
              "E4",
              "E1"
            ]
          },
          {
            "text": "Microsoft Exchange Server 2013 Cumulative Update 21（バージョン 15.00.0 未満 15.00.1395.012）",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json"
            ],
            "evidenceIds": [
              "E5",
              "E1"
            ]
          },
          {
            "text": "Microsoft Exchange Server 2013 Cumulative Update 22（バージョン 15.00.0 未満 15.00.1473.006）",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json"
            ],
            "evidenceIds": [
              "E6",
              "E1"
            ]
          },
          {
            "text": "Microsoft Exchange Server 2013 Cumulative Update 23（バージョン 15.00.0 未満 15.00.1497.012）",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json"
            ],
            "evidenceIds": [
              "E7",
              "E1"
            ]
          },
          {
            "text": "Microsoft Exchange Server 2013 Service Pack 1（バージョン 15.00.0 未満 15.00.0847.064）",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json"
            ],
            "evidenceIds": [
              "E8",
              "E1"
            ]
          },
          {
            "text": "Microsoft Exchange Server 2016 Cumulative Update 10（バージョン 15.01.0 未満 15.01.1531.012）",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json"
            ],
            "evidenceIds": [
              "E9",
              "E1"
            ]
          },
          {
            "text": "Microsoft Exchange Server 2016 Cumulative Update 11（バージョン 15.01.0 未満 15.01.1591.018）",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json"
            ],
            "evidenceIds": [
              "E10",
              "E1"
            ]
          },
          {
            "text": "Microsoft Exchange Server 2016 Cumulative Update 12（バージョン 15.01.0 未満 15.01.1713.010）",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json"
            ],
            "evidenceIds": [
              "E11",
              "E1"
            ]
          },
          {
            "text": "Microsoft Exchange Server 2016 Cumulative Update 13（バージョン 15.01.0 未満 15.01.1779.008）",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json"
            ],
            "evidenceIds": [
              "E12",
              "E1"
            ]
          },
          {
            "text": "Microsoft Exchange Server 2016 Cumulative Update 14（バージョン 15.01.0 未満 15.01.1847.012）",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json"
            ],
            "evidenceIds": [
              "E13",
              "E1"
            ]
          },
          {
            "text": "Microsoft Exchange Server 2016 Cumulative Update 15（バージョン 15.01.0 未満 15.01.1913.012）",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json"
            ],
            "evidenceIds": [
              "E14",
              "E1"
            ]
          },
          {
            "text": "Microsoft Exchange Server 2016 Cumulative Update 16（バージョン 15.01.0 未満 15.01.1979.008）",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json"
            ],
            "evidenceIds": [
              "E15",
              "E1"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2010 Service Pack 3。影響ありとして記載：14.0.0.0以上、14.03.0513.000未満。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json"
            ],
            "evidenceIds": [
              "E4"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2013 Cumulative Update 21。影響ありとして記載：15.00.0以上、15.00.1395.012未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json"
            ],
            "evidenceIds": [
              "E5"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2013 Cumulative Update 22。影響ありとして記載：15.00.0以上、15.00.1473.006未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json"
            ],
            "evidenceIds": [
              "E6"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2013 Cumulative Update 23。影響ありとして記載：15.00.0以上、15.00.1497.012未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json"
            ],
            "evidenceIds": [
              "E7"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2013 Service Pack 1。影響ありとして記載：15.00.0以上、15.00.0847.064未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json"
            ],
            "evidenceIds": [
              "E8"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 10。影響ありとして記載：15.01.0以上、15.01.1531.012未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json"
            ],
            "evidenceIds": [
              "E9"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 11。影響ありとして記載：15.01.0以上、15.01.1591.018未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json"
            ],
            "evidenceIds": [
              "E10"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 12。影響ありとして記載：15.01.0以上、15.01.1713.010未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json"
            ],
            "evidenceIds": [
              "E11"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 13。影響ありとして記載：15.01.0以上、15.01.1779.008未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json"
            ],
            "evidenceIds": [
              "E12"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 14。影響ありとして記載：15.01.0以上、15.01.1847.012未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json"
            ],
            "evidenceIds": [
              "E13"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 15。影響ありとして記載：15.01.0以上、15.01.1913.012未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json"
            ],
            "evidenceIds": [
              "E14"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 16。影響ありとして記載：15.01.0以上、15.01.1979.008未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json"
            ],
            "evidenceIds": [
              "E15"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 17。影響ありとして記載：15.01.0以上、15.01.2044.013未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json"
            ],
            "evidenceIds": [
              "E16"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 18。影響ありとして記載：15.01.0以上、15.01.2106.013未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json"
            ],
            "evidenceIds": [
              "E17"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 19。影響ありとして記載：15.01.0以上、15.01.2176.009未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json"
            ],
            "evidenceIds": [
              "E18"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 8。影響ありとして記載：15.01.0以上、15.01.1415.010未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json"
            ],
            "evidenceIds": [
              "E19"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 9。影響ありとして記載：15.01.0以上、15.01.1466.016未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json"
            ],
            "evidenceIds": [
              "E20"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2019。影響ありとして記載：15.02.0以上、15.02.0221.018未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json"
            ],
            "evidenceIds": [
              "E21"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2019 Cumulative Update 1。影響ありとして記載：15.02.0以上、15.01.1979.006未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json"
            ],
            "evidenceIds": [
              "E22"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2019 Cumulative Update 2。影響ありとして記載：15.02.0以上、15.02.0397.011未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json"
            ],
            "evidenceIds": [
              "E23"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2019 Cumulative Update 3。影響ありとして記載：15.02.0以上、15.02.0464.015未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json"
            ],
            "evidenceIds": [
              "E24"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2019 Cumulative Update 4。影響ありとして記載：15.02.0以上、15.02.0659.012未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json"
            ],
            "evidenceIds": [
              "E25"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2019 Cumulative Update 5。影響ありとして記載：15.02.0以上、15.02.0595.008未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json"
            ],
            "evidenceIds": [
              "E26"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2019 Cumulative Update 6。影響ありとして記載：15.02.0以上、15.02.0529.013未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json"
            ],
            "evidenceIds": [
              "E27"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2019 Cumulative Update 7。影響ありとして記載：15.02.0以上、15.02.0721.013未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json"
            ],
            "evidenceIds": [
              "E28"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2019 Cumulative Update 8。影響ありとして記載：15.02.0以上、15.02.0792.010未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json"
            ],
            "evidenceIds": [
              "E29"
            ]
          },
          {
            "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。",
            "kind": "fact",
            "sourceUrls": [
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-26857"
            ],
            "evidenceIds": [
              "E31"
            ]
          }
        ],
        "versionChecks": [
          {
            "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json"
            ],
            "evidenceIds": [
              "E4"
            ]
          },
          {
            "text": "「Microsoft Exchange Server 2010 Service Pack 3 / Microsoft Exchange Server 2013 Cumulative Update 21 / Microsoft Exchange Server 2013 Cumulative Update 22 / Microsoft Exchange Server 2013 Cumulative Update 23 / Microsoft Exchange Server 2013 Service P」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
              "https://www.cve.org/CVERecord?id=CVE-2021-26857",
              "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26857",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-26857",
              "https://www.cisa.gov/news-events/directives/ed-21-02-mitigate-microsoft-exchange-premises-product-vulnerabilities",
              "https://nvd.nist.gov/vuln/detail/CVE-2021-26857"
            ]
          }
        ],
        "actions": [
          {
            "text": "ベンダーの指示に従って更新プログラムを適用する",
            "kind": "fix",
            "sourceUrls": [
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-26857"
            ],
            "evidenceIds": [
              "E30"
            ]
          },
          {
            "text": "「CVE-2021-26857」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cve.org/CVERecord?id=CVE-2021-26857",
              "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26857",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-26857",
              "https://www.cisa.gov/news-events/directives/ed-21-02-mitigate-microsoft-exchange-premises-product-vulnerabilities",
              "https://nvd.nist.gov/vuln/detail/CVE-2021-26857"
            ]
          },
          {
            "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
              "https://www.cve.org/CVERecord?id=CVE-2021-26857",
              "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26857",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-26857",
              "https://www.cisa.gov/news-events/directives/ed-21-02-mitigate-microsoft-exchange-premises-product-vulnerabilities",
              "https://nvd.nist.gov/vuln/detail/CVE-2021-26857"
            ]
          }
        ],
        "temporaryMitigations": [
          {
            "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cve.org/CVERecord?id=CVE-2021-26857",
              "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26857",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-26857",
              "https://www.cisa.gov/news-events/directives/ed-21-02-mitigate-microsoft-exchange-premises-product-vulnerabilities",
              "https://nvd.nist.gov/vuln/detail/CVE-2021-26857"
            ]
          }
        ],
        "verification": [
          {
            "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。",
            "kind": "procedure",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json"
            ],
            "evidenceIds": [
              "E4"
            ]
          },
          {
            "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
              "https://www.cve.org/CVERecord?id=CVE-2021-26857",
              "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26857",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-26857",
              "https://www.cisa.gov/news-events/directives/ed-21-02-mitigate-microsoft-exchange-premises-product-vulnerabilities",
              "https://nvd.nist.gov/vuln/detail/CVE-2021-26857"
            ]
          }
        ],
        "unknowns": [
          "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。",
          "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。"
        ],
        "sources": [
          {
            "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json",
            "label": "CVE：microsoft"
          },
          {
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-26857",
            "label": "CISA KEV（悪用確認）"
          },
          {
            "url": "https://www.cve.org/CVERecord?id=CVE-2021-26857",
            "label": "CVE公式レコード"
          },
          {
            "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26857",
            "label": "Microsoft Exchange Server Remote Code Execution Vulnerability"
          },
          {
            "url": "https://www.cisa.gov/news-events/directives/ed-21-02-mitigate-microsoft-exchange-premises-product-vulnerabilities",
            "label": "CISAが示す関連情報"
          },
          {
            "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-26857",
            "label": "CISAが示す関連情報"
          },
          {
            "url": "https://www.first.org/cvss/v3.1/specification-document",
            "label": "FIRST公式：CVSS 3.1の条件の定義"
          },
          {
            "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
            "label": "CISA：ソフトウェア更新の基本"
          }
        ],
        "evidence": [
          {
            "id": "E1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json",
            "sourceField": "/containers/cna/title",
            "excerpt": "Microsoft Exchange Server Remote Code Execution Vulnerability",
            "language": null
          },
          {
            "id": "E2",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json",
            "sourceField": "/containers/cna/descriptions/0/value",
            "excerpt": "Microsoft Exchange Server Remote Code Execution Vulnerability",
            "language": "en-US",
            "representation": "source_excerpt"
          },
          {
            "id": "E3",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json",
            "sourceField": "/containers/cna/problemTypes/0/descriptions/0",
            "excerpt": "{\"description\":\"Remote Code Execution\",\"lang\":\"en-US\",\"type\":\"Impact\"}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E4",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json",
            "sourceField": "/containers/cna/affected/0",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2010 Service Pack 3\",\"versions\":[{\"version\":\"14.0.0.0\",\"lessThan\":\"14.03.0513.000\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E5",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json",
            "sourceField": "/containers/cna/affected/1",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2013 Cumulative Update 21\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.00.0\",\"lessThan\":\"15.00.1395.012\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E6",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json",
            "sourceField": "/containers/cna/affected/2",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2013 Cumulative Update 22\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.00.0\",\"lessThan\":\"15.00.1473.006\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E7",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json",
            "sourceField": "/containers/cna/affected/3",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2013 Cumulative Update 23\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.00.0\",\"lessThan\":\"15.00.1497.012\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E8",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json",
            "sourceField": "/containers/cna/affected/4",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2013 Service Pack 1\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.00.0\",\"lessThan\":\"15.00.0847.064\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E9",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json",
            "sourceField": "/containers/cna/affected/5",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 10\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.1531.012\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E10",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json",
            "sourceField": "/containers/cna/affected/6",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 11\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.1591.018\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E11",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json",
            "sourceField": "/containers/cna/affected/7",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 12\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.1713.010\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E12",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json",
            "sourceField": "/containers/cna/affected/8",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 13\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.1779.008\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E13",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json",
            "sourceField": "/containers/cna/affected/9",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 14\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.1847.012\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E14",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json",
            "sourceField": "/containers/cna/affected/10",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 15\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.1913.012\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E15",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json",
            "sourceField": "/containers/cna/affected/11",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 16\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.1979.008\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E16",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json",
            "sourceField": "/containers/cna/affected/12",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 17\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.2044.013\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E17",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json",
            "sourceField": "/containers/cna/affected/13",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 18\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.2106.013\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E18",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json",
            "sourceField": "/containers/cna/affected/14",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 19\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.2176.009\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E19",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json",
            "sourceField": "/containers/cna/affected/15",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 8\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.1415.010\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E20",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json",
            "sourceField": "/containers/cna/affected/16",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 9\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.1466.016\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E21",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json",
            "sourceField": "/containers/cna/affected/17",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2019\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.02.0\",\"lessThan\":\"15.02.0221.018\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E22",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json",
            "sourceField": "/containers/cna/affected/18",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2019 Cumulative Update 1\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.02.0\",\"lessThan\":\"15.01.1979.006\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E23",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json",
            "sourceField": "/containers/cna/affected/19",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2019 Cumulative Update 2\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.02.0\",\"lessThan\":\"15.02.0397.011\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E24",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json",
            "sourceField": "/containers/cna/affected/20",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2019 Cumulative Update 3\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.02.0\",\"lessThan\":\"15.02.0464.015\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E25",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json",
            "sourceField": "/containers/cna/affected/21",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2019 Cumulative Update 4\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.02.0\",\"lessThan\":\"15.02.0659.012\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E26",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json",
            "sourceField": "/containers/cna/affected/22",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2019 Cumulative Update 5\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.02.0\",\"lessThan\":\"15.02.0595.008\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E27",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json",
            "sourceField": "/containers/cna/affected/23",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2019 Cumulative Update 6\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.02.0\",\"lessThan\":\"15.02.0529.013\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E28",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json",
            "sourceField": "/containers/cna/affected/24",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2019 Cumulative Update 7\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.02.0\",\"lessThan\":\"15.02.0721.013\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E29",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26857.json",
            "sourceField": "/containers/cna/affected/25",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2019 Cumulative Update 8\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.02.0\",\"lessThan\":\"15.02.0792.010\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E30",
            "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-26857",
            "sourceField": "/sourceAction",
            "excerpt": "Apply updates per vendor instructions.",
            "language": null
          },
          {
            "id": "E31",
            "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-26857",
            "sourceField": "/exploitStatus",
            "excerpt": "{\"id\":\"CVE-2021-26857\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}",
            "language": "en",
            "representation": "normalized_feed_field"
          }
        ],
        "supportRequest": "件名：CVE-2021-26857（Microsoft Exchange Server 2010 Service Pack 3 / Microsoft Exchange Server 2013 Cumulative Update 21 / Microsoft Exchange Server 2013 Cumulative Update 22 / Microsoft Exchange Server 2013 Cumulative Update 23 / Microsoft Exchange Server 2013 Service P）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Microsoft Exchange Server 2010 Service Pack 3（バージョン 14.0.0.0 未満 14.03.0513.000）\n・Microsoft Exchange Server 2013 Cumulative Update 21（バージョン 15.00.0 未満 15.00.1395.012）\n・Microsoft Exchange Server 2013 Cumulative Update 22（バージョン 15.00.0 未満 15.00.1473.006）\n・Microsoft Exchange Server 2013 Cumulative Update 23（バージョン 15.00.0 未満 15.00.1497.012）\n・Microsoft Exchange Server 2013 Service Pack 1（バージョン 15.00.0 未満 15.00.0847.064）\n・Microsoft Exchange Server 2016 Cumulative Update 10（バージョン 15.01.0 未満 15.01.1531.012）\n・Microsoft Exchange Server 2016 Cumulative Update 11（バージョン 15.01.0 未満 15.01.1591.018）\n・Microsoft Exchange Server 2016 Cumulative Update 12（バージョン 15.01.0 未満 15.01.1713.010）\n・Microsoft Exchange Server 2016 Cumulative Update 13（バージョン 15.01.0 未満 15.01.1779.008）\n・Microsoft Exchange Server 2016 Cumulative Update 14（バージョン 15.01.0 未満 15.01.1847.012）\n・Microsoft Exchange Server 2016 Cumulative Update 15（バージョン 15.01.0 未満 15.01.1913.012）\n・Microsoft Exchange Server 2016 Cumulative Update 16（バージョン 15.01.0 未満 15.01.1979.008）\n・公式の対象表：Microsoft / Microsoft Exchange Server 2010 Service Pack 3。影響ありとして記載：14.0.0.0以上、14.03.0513.000未満。\n・公式の対象表：Microsoft / Microsoft Exchange Server 2013 Cumulative Update 21。影響ありとして記載：15.00.0以上、15.00.1395.012未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2013 Cumulative Update 22。影響ありとして記載：15.00.0以上、15.00.1473.006未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2013 Cumulative Update 23。影響ありとして記載：15.00.0以上、15.00.1497.012未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2013 Service Pack 1。影響ありとして記載：15.00.0以上、15.00.0847.064未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 10。影響ありとして記載：15.01.0以上、15.01.1531.012未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 11。影響ありとして記載：15.01.0以上、15.01.1591.018未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 12。影響ありとして記載：15.01.0以上、15.01.1713.010未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 13。影響ありとして記載：15.01.0以上、15.01.1779.008未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 14。影響ありとして記載：15.01.0以上、15.01.1847.012未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 15。影響ありとして記載：15.01.0以上、15.01.1913.012未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 16。影響ありとして記載：15.01.0以上、15.01.1979.008未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 17。影響ありとして記載：15.01.0以上、15.01.2044.013未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 18。影響ありとして記載：15.01.0以上、15.01.2106.013未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 19。影響ありとして記載：15.01.0以上、15.01.2176.009未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 8。影響ありとして記載：15.01.0以上、15.01.1415.010未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 9。影響ありとして記載：15.01.0以上、15.01.1466.016未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2019。影響ありとして記載：15.02.0以上、15.02.0221.018未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2019 Cumulative Update 1。影響ありとして記載：15.02.0以上、15.01.1979.006未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2019 Cumulative Update 2。影響ありとして記載：15.02.0以上、15.02.0397.011未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2019 Cumulative Update 3。影響ありとして記載：15.02.0以上、15.02.0464.015未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2019 Cumulative Update 4。影響ありとして記載：15.02.0以上、15.02.0659.012未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2019 Cumulative Update 5。影響ありとして記載：15.02.0以上、15.02.0595.008未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2019 Cumulative Update 6。影響ありとして記載：15.02.0以上、15.02.0529.013未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2019 Cumulative Update 7。影響ありとして記載：15.02.0以上、15.02.0721.013未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2019 Cumulative Update 8。影響ありとして記載：15.02.0以上、15.02.0792.010未満。対象の環境：x64-based Systems\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2021-26857",
        "publicationCheckVersion": "2026-10-23.1",
        "sourceNotices": [],
        "automation": {
          "status": "ready",
          "lastAttempt": "2026-10-23T03:50:03.894Z",
          "lastSuccess": "2026-10-23T03:50:03.894Z",
          "sourceCheckedAt": "2026-10-23T02:43:16.046Z",
          "errorCode": null
        },
        "glossary": [
          {
            "term": "任意のコード実行",
            "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。",
            "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html",
            "kind": "general_definition"
          }
        ]
      }
    },
    {
      "id": "CVE-2021-26858",
      "aliases": [],
      "title": "Microsoft Exchange Server 2013 Cumulative Update 21 / Microsoft Exchange Server 2013 Cumulative Update 22 / Microsoft Exchange Server 2013 Cumulative Update 23 / Microsoft Exchange Server 2016 Cumulative Update 10 / Microsoft Exchange Server 2016 Cum：コード実行",
      "summary": "Microsoft Exchange Server におけるリモートコード実行の脆弱性",
      "risk": "攻撃者がリモートでコードを実行できる可能性がある",
      "product": "Microsoft Exchange Server 2013 Cumulative Update 21 / Microsoft Exchange Server 2013 Cumulative Update 22 / Microsoft Exchange Server 2013 Cumulative Update 23 / Microsoft Exchange Server 2016 Cumulative Update 10 / Microsoft Exchange Server 2016 Cum",
      "category": "windows",
      "component": "package",
      "severity": "high",
      "cvss": 7.8,
      "cvssVersion": "3.1",
      "cvssSource": "microsoft",
      "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C",
      "affected": [
        {
          "product": "Microsoft Exchange Server 2013 Cumulative Update 21",
          "range": ">= 15.00.0 / < 15.00.1395.012（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2013 Cumulative Update 22",
          "range": ">= 15.00.0 / < 15.00.1473.006（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2013 Cumulative Update 23",
          "range": ">= 15.00.0 / < 15.00.1497.012（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2016 Cumulative Update 10",
          "range": ">= 15.01.0 / < 15.01.1531.012（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2016 Cumulative Update 11",
          "range": ">= 15.01.0 / < 15.01.1591.018（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2016 Cumulative Update 12",
          "range": ">= 15.01.0 / < 15.01.1713.010（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2016 Cumulative Update 13",
          "range": ">= 15.01.0 / < 15.01.1779.008（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2016 Cumulative Update 14",
          "range": ">= 15.01.0 / < 15.01.1847.012（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2016 Cumulative Update 15",
          "range": ">= 15.01.0 / < 15.01.1913.012（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2016 Cumulative Update 16",
          "range": ">= 15.01.0 / < 15.01.1979.008（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2016 Cumulative Update 17",
          "range": ">= 15.01.0 / < 15.01.2044.013（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2016 Cumulative Update 18",
          "range": ">= 15.01.0 / < 15.01.2106.013（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2016 Cumulative Update 19",
          "range": ">= 15.01.0 / < 15.01.2176.009（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2016 Cumulative Update 8",
          "range": ">= 15.01.0 / < 15.01.1415.010（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2016 Cumulative Update 9",
          "range": ">= 15.01.0 / < 15.01.1466.016（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2019",
          "range": ">= 15.02.0 / < 15.02.0221.018（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2019 Cumulative Update 1",
          "range": ">= 15.02.0 / < 15.01.1979.006（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2019 Cumulative Update 2",
          "range": ">= 15.02.0 / < 15.02.0397.011（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2019 Cumulative Update 3",
          "range": ">= 15.02.0 / < 15.02.0464.015（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2019 Cumulative Update 4",
          "range": ">= 15.02.0 / < 15.02.0659.012（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2019 Cumulative Update 5",
          "range": ">= 15.02.0 / < 15.02.0595.008（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2019 Cumulative Update 6",
          "range": ">= 15.02.0 / < 15.02.0529.013（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2019 Cumulative Update 7",
          "range": ">= 15.02.0 / < 15.02.0721.013（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2019 Cumulative Update 8",
          "range": ">= 15.02.0 / < 15.02.0792.010（環境: x64-based Systems）"
        }
      ],
      "fixed": [],
      "steps": [
        "ベンダーの指示に従って更新プログラムを適用する",
        "「CVE-2021-26858」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
        "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。"
      ],
      "references": [
        {
          "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json",
          "label": "CVE：microsoft"
        },
        {
          "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-26858",
          "label": "CISA KEV（悪用確認）"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-26858",
          "label": "CVE公式レコード"
        },
        {
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26858",
          "label": "Microsoft Exchange Server Remote Code Execution Vulnerability"
        },
        {
          "url": "https://www.cisa.gov/news-events/directives/ed-21-02-mitigate-microsoft-exchange-premises-product-vulnerabilities",
          "label": "CISAが示す関連情報"
        },
        {
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-26858",
          "label": "CISAが示す関連情報"
        },
        {
          "url": "https://www.first.org/cvss/v3.1/specification-document",
          "label": "FIRST公式：CVSS 3.1の条件の定義"
        },
        {
          "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
          "label": "CISA：ソフトウェア更新の基本"
        }
      ],
      "publishedAt": "2021-03-02T23:55:27.000Z",
      "modifiedAt": "2026-10-01T20:12:19.501Z",
      "fetchedAt": "2026-10-23T02:43:16.097Z",
      "exploitStatus": "confirmed",
      "sources": [
        "CVE",
        "CISA KEV"
      ],
      "originalText": "",
      "sourceTitle": "Microsoft Exchange Server Remote Code Execution Vulnerability",
      "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。",
      "state": "published",
      "affectedDetails": [
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2013 Cumulative Update 21",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.00.0",
              "lessThan": "15.00.1395.012",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2013 Cumulative Update 22",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.00.0",
              "lessThan": "15.00.1473.006",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2013 Cumulative Update 23",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.00.0",
              "lessThan": "15.00.1497.012",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2016 Cumulative Update 10",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.01.0",
              "lessThan": "15.01.1531.012",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2016 Cumulative Update 11",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.01.0",
              "lessThan": "15.01.1591.018",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2016 Cumulative Update 12",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.01.0",
              "lessThan": "15.01.1713.010",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2016 Cumulative Update 13",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.01.0",
              "lessThan": "15.01.1779.008",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2016 Cumulative Update 14",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.01.0",
              "lessThan": "15.01.1847.012",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2016 Cumulative Update 15",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.01.0",
              "lessThan": "15.01.1913.012",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2016 Cumulative Update 16",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.01.0",
              "lessThan": "15.01.1979.008",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2016 Cumulative Update 17",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.01.0",
              "lessThan": "15.01.2044.013",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2016 Cumulative Update 18",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.01.0",
              "lessThan": "15.01.2106.013",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2016 Cumulative Update 19",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.01.0",
              "lessThan": "15.01.2176.009",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2016 Cumulative Update 8",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.01.0",
              "lessThan": "15.01.1415.010",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2016 Cumulative Update 9",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.01.0",
              "lessThan": "15.01.1466.016",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2019",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.02.0",
              "lessThan": "15.02.0221.018",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2019 Cumulative Update 1",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.02.0",
              "lessThan": "15.01.1979.006",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2019 Cumulative Update 2",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.02.0",
              "lessThan": "15.02.0397.011",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2019 Cumulative Update 3",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.02.0",
              "lessThan": "15.02.0464.015",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2019 Cumulative Update 4",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.02.0",
              "lessThan": "15.02.0659.012",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2019 Cumulative Update 5",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.02.0",
              "lessThan": "15.02.0595.008",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2019 Cumulative Update 6",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.02.0",
              "lessThan": "15.02.0529.013",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2019 Cumulative Update 7",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.02.0",
              "lessThan": "15.02.0721.013",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2019 Cumulative Update 8",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.02.0",
              "lessThan": "15.02.0792.010",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        }
      ],
      "configurationNotes": "対象環境・機能: x64-based Systems。製品バージョンだけでなく、原文の利用条件を照合してください。",
      "officialEvidence": {
        "schemaVersion": "1.0",
        "id": "CVE-2021-26858",
        "sourceType": "CVE",
        "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json",
        "fetchedAt": "2026-10-23T02:43:16.097Z",
        "publishedAt": "2021-03-02T23:55:27.000Z",
        "modifiedAt": "2026-10-01T20:12:19.501Z",
        "state": "published",
        "provider": "microsoft",
        "title": "Microsoft Exchange Server Remote Code Execution Vulnerability",
        "descriptions": [
          {
            "lang": "en-US",
            "value": "Microsoft Exchange Server Remote Code Execution Vulnerability",
            "sourcePath": "/containers/cna/descriptions/0/value"
          }
        ],
        "affected": [
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2013 Cumulative Update 21",
            "sourcePath": "/containers/cna/affected/0",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/0/versions/0",
                "version": "15.00.0",
                "lessThan": "15.00.1395.012",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2013 Cumulative Update 22",
            "sourcePath": "/containers/cna/affected/1",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/1/versions/0",
                "version": "15.00.0",
                "lessThan": "15.00.1473.006",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2013 Cumulative Update 23",
            "sourcePath": "/containers/cna/affected/2",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/2/versions/0",
                "version": "15.00.0",
                "lessThan": "15.00.1497.012",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2016 Cumulative Update 10",
            "sourcePath": "/containers/cna/affected/3",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/3/versions/0",
                "version": "15.01.0",
                "lessThan": "15.01.1531.012",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2016 Cumulative Update 11",
            "sourcePath": "/containers/cna/affected/4",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/4/versions/0",
                "version": "15.01.0",
                "lessThan": "15.01.1591.018",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2016 Cumulative Update 12",
            "sourcePath": "/containers/cna/affected/5",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/5/versions/0",
                "version": "15.01.0",
                "lessThan": "15.01.1713.010",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2016 Cumulative Update 13",
            "sourcePath": "/containers/cna/affected/6",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/6/versions/0",
                "version": "15.01.0",
                "lessThan": "15.01.1779.008",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2016 Cumulative Update 14",
            "sourcePath": "/containers/cna/affected/7",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/7/versions/0",
                "version": "15.01.0",
                "lessThan": "15.01.1847.012",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2016 Cumulative Update 15",
            "sourcePath": "/containers/cna/affected/8",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/8/versions/0",
                "version": "15.01.0",
                "lessThan": "15.01.1913.012",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2016 Cumulative Update 16",
            "sourcePath": "/containers/cna/affected/9",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/9/versions/0",
                "version": "15.01.0",
                "lessThan": "15.01.1979.008",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2016 Cumulative Update 17",
            "sourcePath": "/containers/cna/affected/10",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/10/versions/0",
                "version": "15.01.0",
                "lessThan": "15.01.2044.013",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2016 Cumulative Update 18",
            "sourcePath": "/containers/cna/affected/11",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/11/versions/0",
                "version": "15.01.0",
                "lessThan": "15.01.2106.013",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2016 Cumulative Update 19",
            "sourcePath": "/containers/cna/affected/12",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/12/versions/0",
                "version": "15.01.0",
                "lessThan": "15.01.2176.009",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2016 Cumulative Update 8",
            "sourcePath": "/containers/cna/affected/13",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/13/versions/0",
                "version": "15.01.0",
                "lessThan": "15.01.1415.010",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2016 Cumulative Update 9",
            "sourcePath": "/containers/cna/affected/14",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/14/versions/0",
                "version": "15.01.0",
                "lessThan": "15.01.1466.016",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2019",
            "sourcePath": "/containers/cna/affected/15",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/15/versions/0",
                "version": "15.02.0",
                "lessThan": "15.02.0221.018",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2019 Cumulative Update 1",
            "sourcePath": "/containers/cna/affected/16",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/16/versions/0",
                "version": "15.02.0",
                "lessThan": "15.01.1979.006",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2019 Cumulative Update 2",
            "sourcePath": "/containers/cna/affected/17",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/17/versions/0",
                "version": "15.02.0",
                "lessThan": "15.02.0397.011",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2019 Cumulative Update 3",
            "sourcePath": "/containers/cna/affected/18",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/18/versions/0",
                "version": "15.02.0",
                "lessThan": "15.02.0464.015",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2019 Cumulative Update 4",
            "sourcePath": "/containers/cna/affected/19",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/19/versions/0",
                "version": "15.02.0",
                "lessThan": "15.02.0659.012",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2019 Cumulative Update 5",
            "sourcePath": "/containers/cna/affected/20",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/20/versions/0",
                "version": "15.02.0",
                "lessThan": "15.02.0595.008",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2019 Cumulative Update 6",
            "sourcePath": "/containers/cna/affected/21",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/21/versions/0",
                "version": "15.02.0",
                "lessThan": "15.02.0529.013",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2019 Cumulative Update 7",
            "sourcePath": "/containers/cna/affected/22",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/22/versions/0",
                "version": "15.02.0",
                "lessThan": "15.02.0721.013",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2019 Cumulative Update 8",
            "sourcePath": "/containers/cna/affected/23",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/23/versions/0",
                "version": "15.02.0",
                "lessThan": "15.02.0792.010",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          }
        ],
        "solutions": [],
        "workarounds": [],
        "exploits": [],
        "rejectedReasons": [],
        "problemTypes": [
          {
            "cweId": "",
            "lang": "en-US",
            "description": "Remote Code Execution",
            "sourcePath": "/containers/cna/problemTypes/0/descriptions/0"
          }
        ],
        "metrics": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "provider": "microsoft",
            "sourcePath": "/containers/cna/metrics/0/cvssV3_1"
          }
        ],
        "references": [
          {
            "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26858",
            "label": "Microsoft Exchange Server Remote Code Execution Vulnerability",
            "tags": [
              "vendor-advisory",
              "patch"
            ],
            "provider": "microsoft",
            "sourcePath": "/containers/cna/references/0"
          },
          {
            "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26858",
            "label": "CVE",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/0"
          },
          {
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-26858",
            "label": "CISA-ADP",
            "tags": [
              "government-resource"
            ],
            "provider": "CISA-ADP",
            "sourcePath": "/containers/adp/1/references/0"
          }
        ],
        "snippets": [
          {
            "evidenceId": "official:/containers/cna/affected/0",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json",
            "sourcePath": "/containers/cna/affected/0",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2013 Cumulative Update 21\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.00.0\",\"lessThan\":\"15.00.1395.012\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json",
            "sourcePath": "/containers/cna/affected/1",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2013 Cumulative Update 22\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.00.0\",\"lessThan\":\"15.00.1473.006\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/2",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json",
            "sourcePath": "/containers/cna/affected/2",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2013 Cumulative Update 23\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.00.0\",\"lessThan\":\"15.00.1497.012\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/3",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json",
            "sourcePath": "/containers/cna/affected/3",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 10\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.1531.012\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/4",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json",
            "sourcePath": "/containers/cna/affected/4",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 11\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.1591.018\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/5",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json",
            "sourcePath": "/containers/cna/affected/5",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 12\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.1713.010\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/6",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json",
            "sourcePath": "/containers/cna/affected/6",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 13\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.1779.008\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/7",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json",
            "sourcePath": "/containers/cna/affected/7",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 14\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.1847.012\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/8",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json",
            "sourcePath": "/containers/cna/affected/8",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 15\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.1913.012\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/9",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json",
            "sourcePath": "/containers/cna/affected/9",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 16\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.1979.008\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/10",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json",
            "sourcePath": "/containers/cna/affected/10",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 17\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.2044.013\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/11",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json",
            "sourcePath": "/containers/cna/affected/11",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 18\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.2106.013\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/12",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json",
            "sourcePath": "/containers/cna/affected/12",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 19\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.2176.009\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/13",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json",
            "sourcePath": "/containers/cna/affected/13",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 8\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.1415.010\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/14",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json",
            "sourcePath": "/containers/cna/affected/14",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 9\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.1466.016\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/15",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json",
            "sourcePath": "/containers/cna/affected/15",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2019\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.02.0\",\"lessThan\":\"15.02.0221.018\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/16",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json",
            "sourcePath": "/containers/cna/affected/16",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2019 Cumulative Update 1\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.02.0\",\"lessThan\":\"15.01.1979.006\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/17",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json",
            "sourcePath": "/containers/cna/affected/17",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2019 Cumulative Update 2\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.02.0\",\"lessThan\":\"15.02.0397.011\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/18",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json",
            "sourcePath": "/containers/cna/affected/18",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2019 Cumulative Update 3\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.02.0\",\"lessThan\":\"15.02.0464.015\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/19",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json",
            "sourcePath": "/containers/cna/affected/19",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2019 Cumulative Update 4\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.02.0\",\"lessThan\":\"15.02.0659.012\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/20",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json",
            "sourcePath": "/containers/cna/affected/20",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2019 Cumulative Update 5\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.02.0\",\"lessThan\":\"15.02.0595.008\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/21",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json",
            "sourcePath": "/containers/cna/affected/21",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2019 Cumulative Update 6\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.02.0\",\"lessThan\":\"15.02.0529.013\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/22",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json",
            "sourcePath": "/containers/cna/affected/22",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2019 Cumulative Update 7\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.02.0\",\"lessThan\":\"15.02.0721.013\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/23",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json",
            "sourcePath": "/containers/cna/affected/23",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2019 Cumulative Update 8\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.02.0\",\"lessThan\":\"15.02.0792.010\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/descriptions/0/value",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json",
            "sourcePath": "/containers/cna/descriptions/0/value",
            "text": "Microsoft Exchange Server Remote Code Execution Vulnerability",
            "truncated": false,
            "representation": "source_excerpt"
          },
          {
            "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json",
            "sourcePath": "/containers/cna/problemTypes/0/descriptions/0",
            "text": "{\"description\":\"Remote Code Execution\",\"lang\":\"en-US\",\"type\":\"Impact\"}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json",
            "sourcePath": "/containers/cna/metrics/0/cvssV3_1",
            "text": "{\"version\":\"3.1\",\"baseSeverity\":\"HIGH\",\"baseScore\":7.8,\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C\"}",
            "truncated": false,
            "representation": "source_json"
          }
        ],
        "limits": {
          "completeness": "official_record",
          "truncatedFields": [],
          "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。"
        }
      },
      "sourceSnapshots": [
        {
          "source": "CVE",
          "modifiedAt": "2026-10-01T20:12:19.501Z",
          "fetchedAt": "2026-10-23T02:43:16.097Z",
          "state": "published"
        },
        {
          "source": "CISA KEV",
          "modifiedAt": "2021-11-03T00:00:00.000Z",
          "fetchedAt": "2026-10-23T02:17:50.489Z",
          "state": "published"
        }
      ],
      "sourceAction": "Apply updates per vendor instructions.",
      "sourceSummary": "Microsoft Exchange Server 2013 Cumulative Update 21 / Microsoft Exchange Server 2013 Cumulative Update 22 / Microsoft Exchange Server 2013 Cumulative Update 23 / Microsoft Exchange Server 2016 Cumulative Update 10 / Microsoft Exchange Server 2016 Cumにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。",
      "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。",
      "guidance": {
        "schemaVersion": "1.0",
        "method": "automatic",
        "reviewedAt": null,
        "reviewState": "current",
        "generatedAt": "2026-10-23T03:50:05.702Z",
        "generatorVersion": "2026-10-23.3",
        "sourceFingerprint": "af7165b818498568d394f1f17a6f89100269b2dae590838af5077343b9b38008",
        "sourceModifiedAt": "2026-10-01T20:12:19.501Z",
        "model": "@cf/openai/gpt-oss-120b",
        "verificationMethod": "exact_source_excerpt_and_independent_semantic_check",
        "summary": "Microsoft Exchange Server におけるリモートコード実行の脆弱性",
        "risk": "攻撃者がリモートでコードを実行できる可能性がある",
        "summaryEvidenceIds": [
          "E1",
          "E2"
        ],
        "riskEvidenceIds": [
          "E3"
        ],
        "applicability": [
          {
            "text": "Microsoft Exchange Server 2013 Cumulative Update 21（バージョン 15.00.0 未満 15.00.1395.012）",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json"
            ],
            "evidenceIds": [
              "E4",
              "E1"
            ]
          },
          {
            "text": "Microsoft Exchange Server 2013 Cumulative Update 22（バージョン 15.00.0 未満 15.00.1473.006）",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json"
            ],
            "evidenceIds": [
              "E5",
              "E1"
            ]
          },
          {
            "text": "Microsoft Exchange Server 2013 Cumulative Update 23（バージョン 15.00.0 未満 15.00.1497.012）",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json"
            ],
            "evidenceIds": [
              "E6",
              "E1"
            ]
          },
          {
            "text": "Microsoft Exchange Server 2016 Cumulative Update 8（バージョン 15.01.0 未満 15.01.1415.010）",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json"
            ],
            "evidenceIds": [
              "E7",
              "E1"
            ]
          },
          {
            "text": "Microsoft Exchange Server 2016 Cumulative Update 9（バージョン 15.01.0 未満 15.01.1466.016）",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json"
            ],
            "evidenceIds": [
              "E8",
              "E1"
            ]
          },
          {
            "text": "Microsoft Exchange Server 2016 Cumulative Update 10（バージョン 15.01.0 未満 15.01.1531.012）",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json"
            ],
            "evidenceIds": [
              "E9",
              "E1"
            ]
          },
          {
            "text": "Microsoft Exchange Server 2016 Cumulative Update 11（バージョン 15.01.0 未満 15.01.1591.018）",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json"
            ],
            "evidenceIds": [
              "E10",
              "E1"
            ]
          },
          {
            "text": "Microsoft Exchange Server 2016 Cumulative Update 12（バージョン 15.01.0 未満 15.01.1713.010）",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json"
            ],
            "evidenceIds": [
              "E11",
              "E1"
            ]
          },
          {
            "text": "Microsoft Exchange Server 2016 Cumulative Update 13（バージョン 15.01.0 未満 15.01.1779.008）",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json"
            ],
            "evidenceIds": [
              "E12",
              "E1"
            ]
          },
          {
            "text": "Microsoft Exchange Server 2016 Cumulative Update 14（バージョン 15.01.0 未満 15.01.1847.012）",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json"
            ],
            "evidenceIds": [
              "E13",
              "E1"
            ]
          },
          {
            "text": "Microsoft Exchange Server 2016 Cumulative Update 15（バージョン 15.01.0 未満 15.01.1913.012）",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json"
            ],
            "evidenceIds": [
              "E14",
              "E1"
            ]
          },
          {
            "text": "Microsoft Exchange Server 2016 Cumulative Update 16（バージョン 15.01.0 未満 15.01.1979.008）",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json"
            ],
            "evidenceIds": [
              "E15",
              "E1"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2013 Cumulative Update 21。影響ありとして記載：15.00.0以上、15.00.1395.012未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json"
            ],
            "evidenceIds": [
              "E4"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2013 Cumulative Update 22。影響ありとして記載：15.00.0以上、15.00.1473.006未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json"
            ],
            "evidenceIds": [
              "E5"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2013 Cumulative Update 23。影響ありとして記載：15.00.0以上、15.00.1497.012未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json"
            ],
            "evidenceIds": [
              "E6"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 10。影響ありとして記載：15.01.0以上、15.01.1531.012未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json"
            ],
            "evidenceIds": [
              "E9"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 11。影響ありとして記載：15.01.0以上、15.01.1591.018未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json"
            ],
            "evidenceIds": [
              "E10"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 12。影響ありとして記載：15.01.0以上、15.01.1713.010未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json"
            ],
            "evidenceIds": [
              "E11"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 13。影響ありとして記載：15.01.0以上、15.01.1779.008未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json"
            ],
            "evidenceIds": [
              "E12"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 14。影響ありとして記載：15.01.0以上、15.01.1847.012未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json"
            ],
            "evidenceIds": [
              "E13"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 15。影響ありとして記載：15.01.0以上、15.01.1913.012未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json"
            ],
            "evidenceIds": [
              "E14"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 16。影響ありとして記載：15.01.0以上、15.01.1979.008未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json"
            ],
            "evidenceIds": [
              "E15"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 17。影響ありとして記載：15.01.0以上、15.01.2044.013未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json"
            ],
            "evidenceIds": [
              "E16"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 18。影響ありとして記載：15.01.0以上、15.01.2106.013未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json"
            ],
            "evidenceIds": [
              "E17"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 19。影響ありとして記載：15.01.0以上、15.01.2176.009未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json"
            ],
            "evidenceIds": [
              "E18"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 8。影響ありとして記載：15.01.0以上、15.01.1415.010未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json"
            ],
            "evidenceIds": [
              "E7"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 9。影響ありとして記載：15.01.0以上、15.01.1466.016未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json"
            ],
            "evidenceIds": [
              "E8"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2019。影響ありとして記載：15.02.0以上、15.02.0221.018未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json"
            ],
            "evidenceIds": [
              "E19"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2019 Cumulative Update 1。影響ありとして記載：15.02.0以上、15.01.1979.006未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json"
            ],
            "evidenceIds": [
              "E20"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2019 Cumulative Update 2。影響ありとして記載：15.02.0以上、15.02.0397.011未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json"
            ],
            "evidenceIds": [
              "E21"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2019 Cumulative Update 3。影響ありとして記載：15.02.0以上、15.02.0464.015未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json"
            ],
            "evidenceIds": [
              "E22"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2019 Cumulative Update 4。影響ありとして記載：15.02.0以上、15.02.0659.012未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json"
            ],
            "evidenceIds": [
              "E23"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2019 Cumulative Update 5。影響ありとして記載：15.02.0以上、15.02.0595.008未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json"
            ],
            "evidenceIds": [
              "E24"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2019 Cumulative Update 6。影響ありとして記載：15.02.0以上、15.02.0529.013未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json"
            ],
            "evidenceIds": [
              "E25"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2019 Cumulative Update 7。影響ありとして記載：15.02.0以上、15.02.0721.013未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json"
            ],
            "evidenceIds": [
              "E26"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2019 Cumulative Update 8。影響ありとして記載：15.02.0以上、15.02.0792.010未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json"
            ],
            "evidenceIds": [
              "E27"
            ]
          },
          {
            "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。",
            "kind": "fact",
            "sourceUrls": [
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-26858"
            ],
            "evidenceIds": [
              "E29"
            ]
          }
        ],
        "versionChecks": [
          {
            "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json"
            ],
            "evidenceIds": [
              "E4"
            ]
          },
          {
            "text": "「Microsoft Exchange Server 2013 Cumulative Update 21 / Microsoft Exchange Server 2013 Cumulative Update 22 / Microsoft Exchange Server 2013 Cumulative Update 23 / Microsoft Exchange Server 2016 Cumulative Update 10 / Microsoft Exchange Server 2016 Cum」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
              "https://www.cve.org/CVERecord?id=CVE-2021-26858",
              "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26858",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-26858",
              "https://www.cisa.gov/news-events/directives/ed-21-02-mitigate-microsoft-exchange-premises-product-vulnerabilities",
              "https://nvd.nist.gov/vuln/detail/CVE-2021-26858"
            ]
          }
        ],
        "actions": [
          {
            "text": "ベンダーの指示に従って更新プログラムを適用する",
            "kind": "fix",
            "sourceUrls": [
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-26858"
            ],
            "evidenceIds": [
              "E28"
            ]
          },
          {
            "text": "「CVE-2021-26858」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cve.org/CVERecord?id=CVE-2021-26858",
              "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26858",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-26858",
              "https://www.cisa.gov/news-events/directives/ed-21-02-mitigate-microsoft-exchange-premises-product-vulnerabilities",
              "https://nvd.nist.gov/vuln/detail/CVE-2021-26858"
            ]
          },
          {
            "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
              "https://www.cve.org/CVERecord?id=CVE-2021-26858",
              "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26858",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-26858",
              "https://www.cisa.gov/news-events/directives/ed-21-02-mitigate-microsoft-exchange-premises-product-vulnerabilities",
              "https://nvd.nist.gov/vuln/detail/CVE-2021-26858"
            ]
          }
        ],
        "temporaryMitigations": [
          {
            "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cve.org/CVERecord?id=CVE-2021-26858",
              "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26858",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-26858",
              "https://www.cisa.gov/news-events/directives/ed-21-02-mitigate-microsoft-exchange-premises-product-vulnerabilities",
              "https://nvd.nist.gov/vuln/detail/CVE-2021-26858"
            ]
          }
        ],
        "verification": [
          {
            "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。",
            "kind": "procedure",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json"
            ],
            "evidenceIds": [
              "E4"
            ]
          },
          {
            "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
              "https://www.cve.org/CVERecord?id=CVE-2021-26858",
              "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26858",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-26858",
              "https://www.cisa.gov/news-events/directives/ed-21-02-mitigate-microsoft-exchange-premises-product-vulnerabilities",
              "https://nvd.nist.gov/vuln/detail/CVE-2021-26858"
            ]
          }
        ],
        "unknowns": [
          "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。",
          "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。"
        ],
        "sources": [
          {
            "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json",
            "label": "CVE：microsoft"
          },
          {
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-26858",
            "label": "CISA KEV（悪用確認）"
          },
          {
            "url": "https://www.cve.org/CVERecord?id=CVE-2021-26858",
            "label": "CVE公式レコード"
          },
          {
            "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26858",
            "label": "Microsoft Exchange Server Remote Code Execution Vulnerability"
          },
          {
            "url": "https://www.cisa.gov/news-events/directives/ed-21-02-mitigate-microsoft-exchange-premises-product-vulnerabilities",
            "label": "CISAが示す関連情報"
          },
          {
            "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-26858",
            "label": "CISAが示す関連情報"
          },
          {
            "url": "https://www.first.org/cvss/v3.1/specification-document",
            "label": "FIRST公式：CVSS 3.1の条件の定義"
          },
          {
            "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
            "label": "CISA：ソフトウェア更新の基本"
          }
        ],
        "evidence": [
          {
            "id": "E1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json",
            "sourceField": "/containers/cna/title",
            "excerpt": "Microsoft Exchange Server Remote Code Execution Vulnerability",
            "language": null
          },
          {
            "id": "E2",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json",
            "sourceField": "/containers/cna/descriptions/0/value",
            "excerpt": "Microsoft Exchange Server Remote Code Execution Vulnerability",
            "language": "en-US",
            "representation": "source_excerpt"
          },
          {
            "id": "E3",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json",
            "sourceField": "/containers/cna/problemTypes/0/descriptions/0",
            "excerpt": "{\"description\":\"Remote Code Execution\",\"lang\":\"en-US\",\"type\":\"Impact\"}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E4",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json",
            "sourceField": "/containers/cna/affected/0",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2013 Cumulative Update 21\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.00.0\",\"lessThan\":\"15.00.1395.012\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E5",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json",
            "sourceField": "/containers/cna/affected/1",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2013 Cumulative Update 22\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.00.0\",\"lessThan\":\"15.00.1473.006\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E6",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json",
            "sourceField": "/containers/cna/affected/2",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2013 Cumulative Update 23\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.00.0\",\"lessThan\":\"15.00.1497.012\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E7",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json",
            "sourceField": "/containers/cna/affected/13",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 8\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.1415.010\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E8",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json",
            "sourceField": "/containers/cna/affected/14",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 9\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.1466.016\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E9",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json",
            "sourceField": "/containers/cna/affected/3",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 10\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.1531.012\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E10",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json",
            "sourceField": "/containers/cna/affected/4",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 11\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.1591.018\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E11",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json",
            "sourceField": "/containers/cna/affected/5",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 12\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.1713.010\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E12",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json",
            "sourceField": "/containers/cna/affected/6",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 13\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.1779.008\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E13",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json",
            "sourceField": "/containers/cna/affected/7",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 14\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.1847.012\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E14",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json",
            "sourceField": "/containers/cna/affected/8",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 15\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.1913.012\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E15",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json",
            "sourceField": "/containers/cna/affected/9",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 16\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.1979.008\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E16",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json",
            "sourceField": "/containers/cna/affected/10",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 17\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.2044.013\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E17",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json",
            "sourceField": "/containers/cna/affected/11",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 18\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.2106.013\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E18",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json",
            "sourceField": "/containers/cna/affected/12",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 19\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.2176.009\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E19",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json",
            "sourceField": "/containers/cna/affected/15",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2019\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.02.0\",\"lessThan\":\"15.02.0221.018\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E20",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json",
            "sourceField": "/containers/cna/affected/16",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2019 Cumulative Update 1\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.02.0\",\"lessThan\":\"15.01.1979.006\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E21",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json",
            "sourceField": "/containers/cna/affected/17",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2019 Cumulative Update 2\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.02.0\",\"lessThan\":\"15.02.0397.011\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E22",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json",
            "sourceField": "/containers/cna/affected/18",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2019 Cumulative Update 3\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.02.0\",\"lessThan\":\"15.02.0464.015\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E23",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json",
            "sourceField": "/containers/cna/affected/19",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2019 Cumulative Update 4\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.02.0\",\"lessThan\":\"15.02.0659.012\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E24",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json",
            "sourceField": "/containers/cna/affected/20",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2019 Cumulative Update 5\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.02.0\",\"lessThan\":\"15.02.0595.008\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E25",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json",
            "sourceField": "/containers/cna/affected/21",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2019 Cumulative Update 6\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.02.0\",\"lessThan\":\"15.02.0529.013\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E26",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json",
            "sourceField": "/containers/cna/affected/22",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2019 Cumulative Update 7\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.02.0\",\"lessThan\":\"15.02.0721.013\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E27",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/26xxx/CVE-2021-26858.json",
            "sourceField": "/containers/cna/affected/23",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2019 Cumulative Update 8\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.02.0\",\"lessThan\":\"15.02.0792.010\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E28",
            "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-26858",
            "sourceField": "/sourceAction",
            "excerpt": "Apply updates per vendor instructions.",
            "language": null
          },
          {
            "id": "E29",
            "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-26858",
            "sourceField": "/exploitStatus",
            "excerpt": "{\"id\":\"CVE-2021-26858\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}",
            "language": "en",
            "representation": "normalized_feed_field"
          }
        ],
        "supportRequest": "件名：CVE-2021-26858（Microsoft Exchange Server 2013 Cumulative Update 21 / Microsoft Exchange Server 2013 Cumulative Update 22 / Microsoft Exchange Server 2013 Cumulative Update 23 / Microsoft Exchange Server 2016 Cumulative Update 10 / Microsoft Exchange Server 2016 Cum）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Microsoft Exchange Server 2013 Cumulative Update 21（バージョン 15.00.0 未満 15.00.1395.012）\n・Microsoft Exchange Server 2013 Cumulative Update 22（バージョン 15.00.0 未満 15.00.1473.006）\n・Microsoft Exchange Server 2013 Cumulative Update 23（バージョン 15.00.0 未満 15.00.1497.012）\n・Microsoft Exchange Server 2016 Cumulative Update 8（バージョン 15.01.0 未満 15.01.1415.010）\n・Microsoft Exchange Server 2016 Cumulative Update 9（バージョン 15.01.0 未満 15.01.1466.016）\n・Microsoft Exchange Server 2016 Cumulative Update 10（バージョン 15.01.0 未満 15.01.1531.012）\n・Microsoft Exchange Server 2016 Cumulative Update 11（バージョン 15.01.0 未満 15.01.1591.018）\n・Microsoft Exchange Server 2016 Cumulative Update 12（バージョン 15.01.0 未満 15.01.1713.010）\n・Microsoft Exchange Server 2016 Cumulative Update 13（バージョン 15.01.0 未満 15.01.1779.008）\n・Microsoft Exchange Server 2016 Cumulative Update 14（バージョン 15.01.0 未満 15.01.1847.012）\n・Microsoft Exchange Server 2016 Cumulative Update 15（バージョン 15.01.0 未満 15.01.1913.012）\n・Microsoft Exchange Server 2016 Cumulative Update 16（バージョン 15.01.0 未満 15.01.1979.008）\n・公式の対象表：Microsoft / Microsoft Exchange Server 2013 Cumulative Update 21。影響ありとして記載：15.00.0以上、15.00.1395.012未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2013 Cumulative Update 22。影響ありとして記載：15.00.0以上、15.00.1473.006未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2013 Cumulative Update 23。影響ありとして記載：15.00.0以上、15.00.1497.012未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 10。影響ありとして記載：15.01.0以上、15.01.1531.012未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 11。影響ありとして記載：15.01.0以上、15.01.1591.018未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 12。影響ありとして記載：15.01.0以上、15.01.1713.010未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 13。影響ありとして記載：15.01.0以上、15.01.1779.008未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 14。影響ありとして記載：15.01.0以上、15.01.1847.012未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 15。影響ありとして記載：15.01.0以上、15.01.1913.012未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 16。影響ありとして記載：15.01.0以上、15.01.1979.008未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 17。影響ありとして記載：15.01.0以上、15.01.2044.013未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 18。影響ありとして記載：15.01.0以上、15.01.2106.013未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 19。影響ありとして記載：15.01.0以上、15.01.2176.009未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 8。影響ありとして記載：15.01.0以上、15.01.1415.010未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 9。影響ありとして記載：15.01.0以上、15.01.1466.016未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2019。影響ありとして記載：15.02.0以上、15.02.0221.018未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2019 Cumulative Update 1。影響ありとして記載：15.02.0以上、15.01.1979.006未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2019 Cumulative Update 2。影響ありとして記載：15.02.0以上、15.02.0397.011未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2019 Cumulative Update 3。影響ありとして記載：15.02.0以上、15.02.0464.015未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2019 Cumulative Update 4。影響ありとして記載：15.02.0以上、15.02.0659.012未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2019 Cumulative Update 5。影響ありとして記載：15.02.0以上、15.02.0595.008未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2019 Cumulative Update 6。影響ありとして記載：15.02.0以上、15.02.0529.013未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2019 Cumulative Update 7。影響ありとして記載：15.02.0以上、15.02.0721.013未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2019 Cumulative Update 8。影響ありとして記載：15.02.0以上、15.02.0792.010未満。対象の環境：x64-based Systems\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2021-26858",
        "publicationCheckVersion": "2026-10-23.1",
        "sourceNotices": [],
        "automation": {
          "status": "ready",
          "lastAttempt": "2026-10-23T03:50:05.702Z",
          "lastSuccess": "2026-10-23T03:50:05.702Z",
          "sourceCheckedAt": "2026-10-23T02:43:16.097Z",
          "errorCode": null
        },
        "glossary": [
          {
            "term": "任意のコード実行",
            "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。",
            "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html",
            "kind": "general_definition"
          }
        ]
      }
    },
    {
      "id": "CVE-2021-27059",
      "aliases": [],
      "title": "Microsoft Office 2010 Service Pack 2 / Microsoft Office 2013 Service Pack 1 / Microsoft Office 2016：コード実行",
      "summary": "Microsoft Office のリモートコード実行脆弱性です。",
      "risk": "攻撃者がリモートでコードを実行できる可能性があります。",
      "product": "Microsoft Office 2010 Service Pack 2 / Microsoft Office 2013 Service Pack 1 / Microsoft Office 2016",
      "category": "windows",
      "component": "package",
      "severity": "high",
      "cvss": 7.6,
      "cvssVersion": "3.1",
      "cvssSource": "microsoft",
      "cvssVector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C",
      "affected": [
        {
          "product": "Microsoft Office 2010 Service Pack 2",
          "range": ">= 13.0.0.0 / < 14.0.7266.5000（環境: 32-bit Systems / x64-based Systems）"
        },
        {
          "product": "Microsoft Office 2013 Service Pack 1",
          "range": ">= 15.0.0 / < publication（環境: 32-bit Systems / ARM64-based Systems / x64-based Systems）"
        },
        {
          "product": "Microsoft Office 2016",
          "range": ">= 16.0.0 / < 16.0.5134.1000（環境: 32-bit Systems / x64-based Systems）"
        }
      ],
      "fixed": [],
      "steps": [
        "ベンダーの指示に従ってアップデートを適用する。",
        "「CVE-2021-27059」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
        "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。"
      ],
      "references": [
        {
          "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27059.json",
          "label": "CVE：microsoft"
        },
        {
          "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-27059",
          "label": "CISA KEV（悪用確認）"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-27059",
          "label": "CVE公式レコード"
        },
        {
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-27059",
          "label": "Microsoft Office Remote Code Execution Vulnerability"
        },
        {
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-27059",
          "label": "CISAが示す関連情報"
        },
        {
          "url": "https://www.first.org/cvss/v3.1/specification-document",
          "label": "FIRST公式：CVSS 3.1の条件の定義"
        },
        {
          "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
          "label": "CISA：ソフトウェア更新の基本"
        }
      ],
      "publishedAt": "2021-03-11T15:49:00.000Z",
      "modifiedAt": "2026-08-19T16:30:47.069Z",
      "fetchedAt": "2026-10-23T02:43:16.209Z",
      "exploitStatus": "confirmed",
      "sources": [
        "CVE",
        "CISA KEV"
      ],
      "originalText": "",
      "sourceTitle": "Microsoft Office Remote Code Execution Vulnerability",
      "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。",
      "state": "published",
      "affectedDetails": [
        {
          "vendor": "Microsoft",
          "product": "Microsoft Office 2010 Service Pack 2",
          "platforms": [
            "32-bit Systems",
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "13.0.0.0",
              "lessThan": "14.0.7266.5000",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Office 2013 Service Pack 1",
          "platforms": [
            "32-bit Systems",
            "ARM64-based Systems",
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.0.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Office 2016",
          "platforms": [
            "32-bit Systems",
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "16.0.0",
              "lessThan": "16.0.5134.1000",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        }
      ],
      "configurationNotes": "対象環境・機能: 32-bit Systems / x64-based Systems / ARM64-based Systems。製品バージョンだけでなく、原文の利用条件を照合してください。",
      "officialEvidence": {
        "schemaVersion": "1.0",
        "id": "CVE-2021-27059",
        "sourceType": "CVE",
        "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27059.json",
        "fetchedAt": "2026-10-23T02:43:16.209Z",
        "publishedAt": "2021-03-11T15:49:00.000Z",
        "modifiedAt": "2026-08-19T16:30:47.069Z",
        "state": "published",
        "provider": "microsoft",
        "title": "Microsoft Office Remote Code Execution Vulnerability",
        "descriptions": [
          {
            "lang": "en-US",
            "value": "Microsoft Office Remote Code Execution Vulnerability",
            "sourcePath": "/containers/cna/descriptions/0/value"
          }
        ],
        "affected": [
          {
            "vendor": "Microsoft",
            "product": "Microsoft Office 2010 Service Pack 2",
            "sourcePath": "/containers/cna/affected/0",
            "platforms": [
              "32-bit Systems",
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/0/versions/0",
                "version": "13.0.0.0",
                "lessThan": "14.0.7266.5000",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Office 2013 Service Pack 1",
            "sourcePath": "/containers/cna/affected/1",
            "platforms": [
              "32-bit Systems",
              "ARM64-based Systems",
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/1/versions/0",
                "version": "15.0.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Office 2016",
            "sourcePath": "/containers/cna/affected/2",
            "platforms": [
              "32-bit Systems",
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/2/versions/0",
                "version": "16.0.0",
                "lessThan": "16.0.5134.1000",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          }
        ],
        "solutions": [],
        "workarounds": [],
        "exploits": [],
        "rejectedReasons": [],
        "problemTypes": [
          {
            "cweId": "",
            "lang": "en-US",
            "description": "Remote Code Execution",
            "sourcePath": "/containers/cna/problemTypes/0/descriptions/0"
          }
        ],
        "metrics": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "baseScore": 7.6,
            "baseSeverity": "HIGH",
            "provider": "microsoft",
            "sourcePath": "/containers/cna/metrics/0/cvssV3_1"
          }
        ],
        "references": [
          {
            "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-27059",
            "label": "Microsoft Office Remote Code Execution Vulnerability",
            "tags": [
              "vendor-advisory",
              "patch"
            ],
            "provider": "microsoft",
            "sourcePath": "/containers/cna/references/0"
          },
          {
            "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27059",
            "label": "CVE",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/0"
          },
          {
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-27059",
            "label": "CISA-ADP",
            "tags": [
              "government-resource"
            ],
            "provider": "CISA-ADP",
            "sourcePath": "/containers/adp/1/references/0"
          }
        ],
        "snippets": [
          {
            "evidenceId": "official:/containers/cna/affected/0",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27059.json",
            "sourcePath": "/containers/cna/affected/0",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Office 2010 Service Pack 2\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"13.0.0.0\",\"lessThan\":\"14.0.7266.5000\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27059.json",
            "sourcePath": "/containers/cna/affected/1",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Office 2013 Service Pack 1\",\"platforms\":[\"32-bit Systems\",\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"15.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/2",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27059.json",
            "sourcePath": "/containers/cna/affected/2",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Office 2016\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"16.0.0\",\"lessThan\":\"16.0.5134.1000\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/descriptions/0/value",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27059.json",
            "sourcePath": "/containers/cna/descriptions/0/value",
            "text": "Microsoft Office Remote Code Execution Vulnerability",
            "truncated": false,
            "representation": "source_excerpt"
          },
          {
            "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27059.json",
            "sourcePath": "/containers/cna/problemTypes/0/descriptions/0",
            "text": "{\"description\":\"Remote Code Execution\",\"lang\":\"en-US\",\"type\":\"Impact\"}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27059.json",
            "sourcePath": "/containers/cna/metrics/0/cvssV3_1",
            "text": "{\"version\":\"3.1\",\"baseSeverity\":\"HIGH\",\"baseScore\":7.6,\"vectorString\":\"CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C\"}",
            "truncated": false,
            "representation": "source_json"
          }
        ],
        "limits": {
          "completeness": "official_record",
          "truncatedFields": [],
          "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。"
        }
      },
      "sourceSnapshots": [
        {
          "source": "CVE",
          "modifiedAt": "2026-08-19T16:30:47.069Z",
          "fetchedAt": "2026-10-23T02:43:16.209Z",
          "state": "published"
        },
        {
          "source": "CISA KEV",
          "modifiedAt": "2021-11-03T00:00:00.000Z",
          "fetchedAt": "2026-10-23T02:17:50.489Z",
          "state": "published"
        }
      ],
      "sourceAction": "Apply updates per vendor instructions.",
      "sourceSummary": "Microsoft Office 2010 Service Pack 2 / Microsoft Office 2013 Service Pack 1 / Microsoft Office 2016にコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。",
      "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。",
      "guidance": {
        "schemaVersion": "1.0",
        "method": "automatic",
        "reviewedAt": null,
        "reviewState": "current",
        "generatedAt": "2026-10-23T03:50:05.937Z",
        "generatorVersion": "2026-10-23.3",
        "sourceFingerprint": "f3e228c9e4310029d3d83d263a4d5039c1d7835cbaca8b664c571fa68a547190",
        "sourceModifiedAt": "2026-08-19T16:30:47.069Z",
        "model": "@cf/openai/gpt-oss-120b",
        "verificationMethod": "exact_source_excerpt_and_independent_semantic_check",
        "summary": "Microsoft Office のリモートコード実行脆弱性です。",
        "risk": "攻撃者がリモートでコードを実行できる可能性があります。",
        "summaryEvidenceIds": [
          "E1",
          "E2"
        ],
        "riskEvidenceIds": [
          "E3"
        ],
        "applicability": [
          {
            "text": "Microsoft Office 2010 Service Pack 2（32 ビットおよび x64 ベースシステム）で、バージョン 13.0.0.0 から 14.0.7266.5000 未満が影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27059.json"
            ],
            "evidenceIds": [
              "E4",
              "E2"
            ]
          },
          {
            "text": "Microsoft Office 2013 Service Pack 1（32 ビット、ARM64、x64 ベースシステム）で、バージョン 15.0.0 から公開までが影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27059.json"
            ],
            "evidenceIds": [
              "E5",
              "E2"
            ]
          },
          {
            "text": "Microsoft Office 2016（32 ビットおよび x64 ベースシステム）で、バージョン 16.0.0 から 16.0.5134.1000 未満が影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27059.json"
            ],
            "evidenceIds": [
              "E6",
              "E2"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Office 2010 Service Pack 2。影響ありとして記載：13.0.0.0以上、14.0.7266.5000未満。対象の環境：32-bit Systems、x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27059.json"
            ],
            "evidenceIds": [
              "E4"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Office 2013 Service Pack 1。影響ありとして記載：15.0.0以上、publication未満。対象の環境：32-bit Systems、ARM64-based Systems、x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27059.json"
            ],
            "evidenceIds": [
              "E5"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Office 2016。影響ありとして記載：16.0.0以上、16.0.5134.1000未満。対象の環境：32-bit Systems、x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27059.json"
            ],
            "evidenceIds": [
              "E6"
            ]
          },
          {
            "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。",
            "kind": "fact",
            "sourceUrls": [
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-27059"
            ],
            "evidenceIds": [
              "E8"
            ]
          }
        ],
        "versionChecks": [
          {
            "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27059.json"
            ],
            "evidenceIds": [
              "E4"
            ]
          },
          {
            "text": "「Microsoft Office 2010 Service Pack 2 / Microsoft Office 2013 Service Pack 1 / Microsoft Office 2016」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
              "https://www.cve.org/CVERecord?id=CVE-2021-27059",
              "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-27059",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-27059",
              "https://nvd.nist.gov/vuln/detail/CVE-2021-27059"
            ]
          }
        ],
        "actions": [
          {
            "text": "ベンダーの指示に従ってアップデートを適用する。",
            "kind": "fix",
            "sourceUrls": [
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-27059"
            ],
            "evidenceIds": [
              "E7"
            ]
          },
          {
            "text": "「CVE-2021-27059」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cve.org/CVERecord?id=CVE-2021-27059",
              "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-27059",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-27059",
              "https://nvd.nist.gov/vuln/detail/CVE-2021-27059"
            ]
          },
          {
            "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
              "https://www.cve.org/CVERecord?id=CVE-2021-27059",
              "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-27059",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-27059",
              "https://nvd.nist.gov/vuln/detail/CVE-2021-27059"
            ]
          }
        ],
        "temporaryMitigations": [
          {
            "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cve.org/CVERecord?id=CVE-2021-27059",
              "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-27059",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-27059",
              "https://nvd.nist.gov/vuln/detail/CVE-2021-27059"
            ]
          }
        ],
        "verification": [
          {
            "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。",
            "kind": "procedure",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27059.json"
            ],
            "evidenceIds": [
              "E4"
            ]
          },
          {
            "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
              "https://www.cve.org/CVERecord?id=CVE-2021-27059",
              "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-27059",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-27059",
              "https://nvd.nist.gov/vuln/detail/CVE-2021-27059"
            ]
          }
        ],
        "unknowns": [
          "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。",
          "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。"
        ],
        "sources": [
          {
            "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27059.json",
            "label": "CVE：microsoft"
          },
          {
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-27059",
            "label": "CISA KEV（悪用確認）"
          },
          {
            "url": "https://www.cve.org/CVERecord?id=CVE-2021-27059",
            "label": "CVE公式レコード"
          },
          {
            "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-27059",
            "label": "Microsoft Office Remote Code Execution Vulnerability"
          },
          {
            "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-27059",
            "label": "CISAが示す関連情報"
          },
          {
            "url": "https://www.first.org/cvss/v3.1/specification-document",
            "label": "FIRST公式：CVSS 3.1の条件の定義"
          },
          {
            "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
            "label": "CISA：ソフトウェア更新の基本"
          }
        ],
        "evidence": [
          {
            "id": "E1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27059.json",
            "sourceField": "/containers/cna/descriptions/0/value",
            "excerpt": "Microsoft Office Remote Code Execution Vulnerability",
            "language": "en-US",
            "representation": "source_excerpt"
          },
          {
            "id": "E2",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27059.json",
            "sourceField": "/containers/cna/title",
            "excerpt": "Microsoft Office Remote Code Execution Vulnerability",
            "language": null
          },
          {
            "id": "E3",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27059.json",
            "sourceField": "/containers/cna/problemTypes/0/descriptions/0",
            "excerpt": "{\"description\":\"Remote Code Execution\",\"lang\":\"en-US\",\"type\":\"Impact\"}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E4",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27059.json",
            "sourceField": "/containers/cna/affected/0",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Office 2010 Service Pack 2\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"13.0.0.0\",\"lessThan\":\"14.0.7266.5000\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E5",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27059.json",
            "sourceField": "/containers/cna/affected/1",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Office 2013 Service Pack 1\",\"platforms\":[\"32-bit Systems\",\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"15.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E6",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27059.json",
            "sourceField": "/containers/cna/affected/2",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Office 2016\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"16.0.0\",\"lessThan\":\"16.0.5134.1000\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E7",
            "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-27059",
            "sourceField": "/sourceAction",
            "excerpt": "Apply updates per vendor instructions.",
            "language": null
          },
          {
            "id": "E8",
            "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-27059",
            "sourceField": "/exploitStatus",
            "excerpt": "{\"id\":\"CVE-2021-27059\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}",
            "language": "en",
            "representation": "normalized_feed_field"
          }
        ],
        "supportRequest": "件名：CVE-2021-27059（Microsoft Office 2010 Service Pack 2 / Microsoft Office 2013 Service Pack 1 / Microsoft Office 2016）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Microsoft Office 2010 Service Pack 2（32 ビットおよび x64 ベースシステム）で、バージョン 13.0.0.0 から 14.0.7266.5000 未満が影響を受けます。\n・Microsoft Office 2013 Service Pack 1（32 ビット、ARM64、x64 ベースシステム）で、バージョン 15.0.0 から公開までが影響を受けます。\n・Microsoft Office 2016（32 ビットおよび x64 ベースシステム）で、バージョン 16.0.0 から 16.0.5134.1000 未満が影響を受けます。\n・公式の対象表：Microsoft / Microsoft Office 2010 Service Pack 2。影響ありとして記載：13.0.0.0以上、14.0.7266.5000未満。対象の環境：32-bit Systems、x64-based Systems\n・公式の対象表：Microsoft / Microsoft Office 2013 Service Pack 1。影響ありとして記載：15.0.0以上、publication未満。対象の環境：32-bit Systems、ARM64-based Systems、x64-based Systems\n・公式の対象表：Microsoft / Microsoft Office 2016。影響ありとして記載：16.0.0以上、16.0.5134.1000未満。対象の環境：32-bit Systems、x64-based Systems\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2021-27059",
        "publicationCheckVersion": "2026-10-23.1",
        "sourceNotices": [],
        "automation": {
          "status": "ready",
          "lastAttempt": "2026-10-23T03:50:05.937Z",
          "lastSuccess": "2026-10-23T03:50:05.937Z",
          "sourceCheckedAt": "2026-10-23T02:43:16.209Z",
          "errorCode": null
        },
        "glossary": [
          {
            "term": "任意のコード実行",
            "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。",
            "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html",
            "kind": "general_definition"
          }
        ]
      }
    },
    {
      "id": "CVE-2021-27065",
      "aliases": [],
      "title": "Microsoft Exchange Server 2013 Cumulative Update 21 / Microsoft Exchange Server 2013 Cumulative Update 22 / Microsoft Exchange Server 2013 Cumulative Update 23 / Microsoft Exchange Server 2013 Service Pack 1 / Microsoft Exchange Server 2016 Cumulativ：コード実行",
      "summary": "Microsoft Exchange Server のリモートコード実行脆弱性です。",
      "risk": "攻撃者がサーバー上で任意のコードを実行できる可能性があります。",
      "product": "Microsoft Exchange Server 2013 Cumulative Update 21 / Microsoft Exchange Server 2013 Cumulative Update 22 / Microsoft Exchange Server 2013 Cumulative Update 23 / Microsoft Exchange Server 2013 Service Pack 1 / Microsoft Exchange Server 2016 Cumulativ",
      "category": "windows",
      "component": "package",
      "severity": "high",
      "cvss": 7.8,
      "cvssVersion": "3.1",
      "cvssSource": "microsoft",
      "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C",
      "affected": [
        {
          "product": "Microsoft Exchange Server 2013 Cumulative Update 21",
          "range": ">= 15.00.0 / < 15.00.1395.012（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2013 Cumulative Update 22",
          "range": ">= 15.00.0 / < 15.00.1473.006（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2013 Cumulative Update 23",
          "range": ">= 15.00.0 / < 15.00.1497.012（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2013 Service Pack 1",
          "range": ">= 15.00.0 / < 15.00.0847.064（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2016 Cumulative Update 10",
          "range": ">= 15.01.0 / < 15.01.1531.012（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2016 Cumulative Update 11",
          "range": ">= 15.01.0 / < 15.01.1591.018（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2016 Cumulative Update 12",
          "range": ">= 15.01.0 / < 15.01.1713.010（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2016 Cumulative Update 13",
          "range": ">= 15.01.0 / < 15.01.1779.008（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2016 Cumulative Update 14",
          "range": ">= 15.01.0 / < 15.01.1847.012（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2016 Cumulative Update 15",
          "range": ">= 15.01.0 / < 15.01.1913.012（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2016 Cumulative Update 16",
          "range": ">= 15.01.0 / < 15.01.1979.008（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2016 Cumulative Update 17",
          "range": ">= 15.01.0 / < 15.01.2044.013（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2016 Cumulative Update 18",
          "range": ">= 15.01.0 / < 15.01.2106.013（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2016 Cumulative Update 19",
          "range": ">= 15.01.0 / < 15.01.2176.009（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2016 Cumulative Update 8",
          "range": ">= 15.01.0 / < 15.01.1415.010（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2016 Cumulative Update 9",
          "range": ">= 15.01.0 / < 15.01.1466.016（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2019",
          "range": ">= 15.02.0 / < 15.02.0221.018（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2019 Cumulative Update 1",
          "range": ">= 15.02.0 / < 15.01.1979.006（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2019 Cumulative Update 2",
          "range": ">= 15.02.0 / < 15.02.0397.011（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2019 Cumulative Update 3",
          "range": ">= 15.02.0 / < 15.02.0464.015（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2019 Cumulative Update 4",
          "range": ">= 15.02.0 / < 15.02.0659.012（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2019 Cumulative Update 5",
          "range": ">= 15.02.0 / < 15.02.0595.008（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2019 Cumulative Update 6",
          "range": ">= 15.02.0 / < 15.02.0529.013（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2019 Cumulative Update 7",
          "range": ">= 15.02.0 / < 15.02.0721.013（環境: x64-based Systems）"
        },
        {
          "product": "Microsoft Exchange Server 2019 Cumulative Update 8",
          "range": ">= 15.02.0 / < 15.02.0792.010（環境: x64-based Systems）"
        }
      ],
      "fixed": [],
      "steps": [
        "ベンダーの指示に従って更新を適用する。",
        "「CVE-2021-27065」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
        "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。"
      ],
      "references": [
        {
          "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json",
          "label": "CVE：microsoft"
        },
        {
          "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-27065",
          "label": "CISA KEV（悪用確認）"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-27065",
          "label": "CVE公式レコード"
        },
        {
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-27065",
          "label": "Microsoft Exchange Server Remote Code Execution Vulnerability"
        },
        {
          "url": "https://www.cisa.gov/news-events/directives/ed-21-02-mitigate-microsoft-exchange-premises-product-vulnerabilities",
          "label": "CISAが示す関連情報"
        },
        {
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-27065",
          "label": "CISAが示す関連情報"
        },
        {
          "url": "https://www.first.org/cvss/v3.1/specification-document",
          "label": "FIRST公式：CVSS 3.1の条件の定義"
        },
        {
          "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
          "label": "CISA：ソフトウェア更新の基本"
        }
      ],
      "publishedAt": "2021-03-02T23:55:28.000Z",
      "modifiedAt": "2026-10-01T20:13:32.360Z",
      "fetchedAt": "2026-10-23T02:43:16.213Z",
      "exploitStatus": "confirmed",
      "sources": [
        "CVE",
        "CISA KEV"
      ],
      "originalText": "",
      "sourceTitle": "Microsoft Exchange Server Remote Code Execution Vulnerability",
      "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。",
      "state": "published",
      "affectedDetails": [
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2013 Cumulative Update 21",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.00.0",
              "lessThan": "15.00.1395.012",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2013 Cumulative Update 22",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.00.0",
              "lessThan": "15.00.1473.006",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2013 Cumulative Update 23",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.00.0",
              "lessThan": "15.00.1497.012",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2013 Service Pack 1",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.00.0",
              "lessThan": "15.00.0847.064",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2016 Cumulative Update 10",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.01.0",
              "lessThan": "15.01.1531.012",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2016 Cumulative Update 11",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.01.0",
              "lessThan": "15.01.1591.018",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2016 Cumulative Update 12",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.01.0",
              "lessThan": "15.01.1713.010",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2016 Cumulative Update 13",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.01.0",
              "lessThan": "15.01.1779.008",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2016 Cumulative Update 14",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.01.0",
              "lessThan": "15.01.1847.012",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2016 Cumulative Update 15",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.01.0",
              "lessThan": "15.01.1913.012",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2016 Cumulative Update 16",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.01.0",
              "lessThan": "15.01.1979.008",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2016 Cumulative Update 17",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.01.0",
              "lessThan": "15.01.2044.013",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2016 Cumulative Update 18",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.01.0",
              "lessThan": "15.01.2106.013",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2016 Cumulative Update 19",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.01.0",
              "lessThan": "15.01.2176.009",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2016 Cumulative Update 8",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.01.0",
              "lessThan": "15.01.1415.010",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2016 Cumulative Update 9",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.01.0",
              "lessThan": "15.01.1466.016",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2019",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.02.0",
              "lessThan": "15.02.0221.018",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2019 Cumulative Update 1",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.02.0",
              "lessThan": "15.01.1979.006",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2019 Cumulative Update 2",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.02.0",
              "lessThan": "15.02.0397.011",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2019 Cumulative Update 3",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.02.0",
              "lessThan": "15.02.0464.015",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2019 Cumulative Update 4",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.02.0",
              "lessThan": "15.02.0659.012",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2019 Cumulative Update 5",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.02.0",
              "lessThan": "15.02.0595.008",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2019 Cumulative Update 6",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.02.0",
              "lessThan": "15.02.0529.013",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2019 Cumulative Update 7",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.02.0",
              "lessThan": "15.02.0721.013",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Exchange Server 2019 Cumulative Update 8",
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "15.02.0",
              "lessThan": "15.02.0792.010",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        }
      ],
      "configurationNotes": "対象環境・機能: x64-based Systems。製品バージョンだけでなく、原文の利用条件を照合してください。",
      "officialEvidence": {
        "schemaVersion": "1.0",
        "id": "CVE-2021-27065",
        "sourceType": "CVE",
        "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json",
        "fetchedAt": "2026-10-23T02:43:16.213Z",
        "publishedAt": "2021-03-02T23:55:28.000Z",
        "modifiedAt": "2026-10-01T20:13:32.360Z",
        "state": "published",
        "provider": "microsoft",
        "title": "Microsoft Exchange Server Remote Code Execution Vulnerability",
        "descriptions": [
          {
            "lang": "en-US",
            "value": "Microsoft Exchange Server Remote Code Execution Vulnerability",
            "sourcePath": "/containers/cna/descriptions/0/value"
          }
        ],
        "affected": [
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2013 Cumulative Update 21",
            "sourcePath": "/containers/cna/affected/0",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/0/versions/0",
                "version": "15.00.0",
                "lessThan": "15.00.1395.012",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2013 Cumulative Update 22",
            "sourcePath": "/containers/cna/affected/1",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/1/versions/0",
                "version": "15.00.0",
                "lessThan": "15.00.1473.006",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2013 Cumulative Update 23",
            "sourcePath": "/containers/cna/affected/2",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/2/versions/0",
                "version": "15.00.0",
                "lessThan": "15.00.1497.012",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2013 Service Pack 1",
            "sourcePath": "/containers/cna/affected/3",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/3/versions/0",
                "version": "15.00.0",
                "lessThan": "15.00.0847.064",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2016 Cumulative Update 10",
            "sourcePath": "/containers/cna/affected/4",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/4/versions/0",
                "version": "15.01.0",
                "lessThan": "15.01.1531.012",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2016 Cumulative Update 11",
            "sourcePath": "/containers/cna/affected/5",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/5/versions/0",
                "version": "15.01.0",
                "lessThan": "15.01.1591.018",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2016 Cumulative Update 12",
            "sourcePath": "/containers/cna/affected/6",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/6/versions/0",
                "version": "15.01.0",
                "lessThan": "15.01.1713.010",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2016 Cumulative Update 13",
            "sourcePath": "/containers/cna/affected/7",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/7/versions/0",
                "version": "15.01.0",
                "lessThan": "15.01.1779.008",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2016 Cumulative Update 14",
            "sourcePath": "/containers/cna/affected/8",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/8/versions/0",
                "version": "15.01.0",
                "lessThan": "15.01.1847.012",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2016 Cumulative Update 15",
            "sourcePath": "/containers/cna/affected/9",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/9/versions/0",
                "version": "15.01.0",
                "lessThan": "15.01.1913.012",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2016 Cumulative Update 16",
            "sourcePath": "/containers/cna/affected/10",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/10/versions/0",
                "version": "15.01.0",
                "lessThan": "15.01.1979.008",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2016 Cumulative Update 17",
            "sourcePath": "/containers/cna/affected/11",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/11/versions/0",
                "version": "15.01.0",
                "lessThan": "15.01.2044.013",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2016 Cumulative Update 18",
            "sourcePath": "/containers/cna/affected/12",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/12/versions/0",
                "version": "15.01.0",
                "lessThan": "15.01.2106.013",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2016 Cumulative Update 19",
            "sourcePath": "/containers/cna/affected/13",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/13/versions/0",
                "version": "15.01.0",
                "lessThan": "15.01.2176.009",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2016 Cumulative Update 8",
            "sourcePath": "/containers/cna/affected/14",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/14/versions/0",
                "version": "15.01.0",
                "lessThan": "15.01.1415.010",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2016 Cumulative Update 9",
            "sourcePath": "/containers/cna/affected/15",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/15/versions/0",
                "version": "15.01.0",
                "lessThan": "15.01.1466.016",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2019",
            "sourcePath": "/containers/cna/affected/16",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/16/versions/0",
                "version": "15.02.0",
                "lessThan": "15.02.0221.018",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2019 Cumulative Update 1",
            "sourcePath": "/containers/cna/affected/17",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/17/versions/0",
                "version": "15.02.0",
                "lessThan": "15.01.1979.006",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2019 Cumulative Update 2",
            "sourcePath": "/containers/cna/affected/18",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/18/versions/0",
                "version": "15.02.0",
                "lessThan": "15.02.0397.011",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2019 Cumulative Update 3",
            "sourcePath": "/containers/cna/affected/19",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/19/versions/0",
                "version": "15.02.0",
                "lessThan": "15.02.0464.015",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2019 Cumulative Update 4",
            "sourcePath": "/containers/cna/affected/20",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/20/versions/0",
                "version": "15.02.0",
                "lessThan": "15.02.0659.012",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2019 Cumulative Update 5",
            "sourcePath": "/containers/cna/affected/21",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/21/versions/0",
                "version": "15.02.0",
                "lessThan": "15.02.0595.008",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2019 Cumulative Update 6",
            "sourcePath": "/containers/cna/affected/22",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/22/versions/0",
                "version": "15.02.0",
                "lessThan": "15.02.0529.013",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2019 Cumulative Update 7",
            "sourcePath": "/containers/cna/affected/23",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/23/versions/0",
                "version": "15.02.0",
                "lessThan": "15.02.0721.013",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Microsoft Exchange Server 2019 Cumulative Update 8",
            "sourcePath": "/containers/cna/affected/24",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/24/versions/0",
                "version": "15.02.0",
                "lessThan": "15.02.0792.010",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          }
        ],
        "solutions": [],
        "workarounds": [],
        "exploits": [],
        "rejectedReasons": [],
        "problemTypes": [
          {
            "cweId": "",
            "lang": "en-US",
            "description": "Remote Code Execution",
            "sourcePath": "/containers/cna/problemTypes/0/descriptions/0"
          }
        ],
        "metrics": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "provider": "microsoft",
            "sourcePath": "/containers/cna/metrics/0/cvssV3_1"
          }
        ],
        "references": [
          {
            "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-27065",
            "label": "Microsoft Exchange Server Remote Code Execution Vulnerability",
            "tags": [
              "vendor-advisory",
              "patch"
            ],
            "provider": "microsoft",
            "sourcePath": "/containers/cna/references/0"
          },
          {
            "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27065",
            "label": "CVE",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/0"
          },
          {
            "url": "http://packetstormsecurity.com/files/161938/Microsoft-Exchange-ProxyLogon-Remote-Code-Execution.html",
            "label": "CVE",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/1"
          },
          {
            "url": "http://packetstormsecurity.com/files/162736/Microsoft-Exchange-ProxyLogon-Collector.html",
            "label": "CVE",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/2"
          },
          {
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-27065",
            "label": "CISA-ADP",
            "tags": [
              "government-resource"
            ],
            "provider": "CISA-ADP",
            "sourcePath": "/containers/adp/1/references/0"
          }
        ],
        "snippets": [
          {
            "evidenceId": "official:/containers/cna/affected/0",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json",
            "sourcePath": "/containers/cna/affected/0",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2013 Cumulative Update 21\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.00.0\",\"lessThan\":\"15.00.1395.012\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json",
            "sourcePath": "/containers/cna/affected/1",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2013 Cumulative Update 22\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.00.0\",\"lessThan\":\"15.00.1473.006\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/2",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json",
            "sourcePath": "/containers/cna/affected/2",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2013 Cumulative Update 23\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.00.0\",\"lessThan\":\"15.00.1497.012\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/3",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json",
            "sourcePath": "/containers/cna/affected/3",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2013 Service Pack 1\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.00.0\",\"lessThan\":\"15.00.0847.064\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/4",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json",
            "sourcePath": "/containers/cna/affected/4",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 10\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.1531.012\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/5",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json",
            "sourcePath": "/containers/cna/affected/5",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 11\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.1591.018\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/6",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json",
            "sourcePath": "/containers/cna/affected/6",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 12\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.1713.010\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/7",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json",
            "sourcePath": "/containers/cna/affected/7",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 13\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.1779.008\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/8",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json",
            "sourcePath": "/containers/cna/affected/8",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 14\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.1847.012\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/9",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json",
            "sourcePath": "/containers/cna/affected/9",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 15\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.1913.012\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/10",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json",
            "sourcePath": "/containers/cna/affected/10",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 16\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.1979.008\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/11",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json",
            "sourcePath": "/containers/cna/affected/11",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 17\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.2044.013\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/12",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json",
            "sourcePath": "/containers/cna/affected/12",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 18\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.2106.013\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/13",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json",
            "sourcePath": "/containers/cna/affected/13",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 19\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.2176.009\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/14",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json",
            "sourcePath": "/containers/cna/affected/14",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 8\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.1415.010\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/15",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json",
            "sourcePath": "/containers/cna/affected/15",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 9\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.1466.016\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/16",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json",
            "sourcePath": "/containers/cna/affected/16",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2019\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.02.0\",\"lessThan\":\"15.02.0221.018\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/17",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json",
            "sourcePath": "/containers/cna/affected/17",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2019 Cumulative Update 1\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.02.0\",\"lessThan\":\"15.01.1979.006\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/18",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json",
            "sourcePath": "/containers/cna/affected/18",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2019 Cumulative Update 2\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.02.0\",\"lessThan\":\"15.02.0397.011\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/19",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json",
            "sourcePath": "/containers/cna/affected/19",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2019 Cumulative Update 3\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.02.0\",\"lessThan\":\"15.02.0464.015\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/20",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json",
            "sourcePath": "/containers/cna/affected/20",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2019 Cumulative Update 4\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.02.0\",\"lessThan\":\"15.02.0659.012\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/21",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json",
            "sourcePath": "/containers/cna/affected/21",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2019 Cumulative Update 5\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.02.0\",\"lessThan\":\"15.02.0595.008\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/22",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json",
            "sourcePath": "/containers/cna/affected/22",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2019 Cumulative Update 6\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.02.0\",\"lessThan\":\"15.02.0529.013\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/23",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json",
            "sourcePath": "/containers/cna/affected/23",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2019 Cumulative Update 7\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.02.0\",\"lessThan\":\"15.02.0721.013\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/24",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json",
            "sourcePath": "/containers/cna/affected/24",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2019 Cumulative Update 8\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.02.0\",\"lessThan\":\"15.02.0792.010\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/descriptions/0/value",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json",
            "sourcePath": "/containers/cna/descriptions/0/value",
            "text": "Microsoft Exchange Server Remote Code Execution Vulnerability",
            "truncated": false,
            "representation": "source_excerpt"
          },
          {
            "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json",
            "sourcePath": "/containers/cna/problemTypes/0/descriptions/0",
            "text": "{\"description\":\"Remote Code Execution\",\"lang\":\"en-US\",\"type\":\"Impact\"}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json",
            "sourcePath": "/containers/cna/metrics/0/cvssV3_1",
            "text": "{\"version\":\"3.1\",\"baseSeverity\":\"HIGH\",\"baseScore\":7.8,\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C\"}",
            "truncated": false,
            "representation": "source_json"
          }
        ],
        "limits": {
          "completeness": "official_record",
          "truncatedFields": [],
          "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。"
        }
      },
      "sourceSnapshots": [
        {
          "source": "CVE",
          "modifiedAt": "2026-10-01T20:13:32.360Z",
          "fetchedAt": "2026-10-23T02:43:16.213Z",
          "state": "published"
        },
        {
          "source": "CISA KEV",
          "modifiedAt": "2021-11-03T00:00:00.000Z",
          "fetchedAt": "2026-10-23T02:17:50.489Z",
          "state": "published"
        }
      ],
      "sourceAction": "Apply updates per vendor instructions.",
      "sourceSummary": "Microsoft Exchange Server 2013 Cumulative Update 21 / Microsoft Exchange Server 2013 Cumulative Update 22 / Microsoft Exchange Server 2013 Cumulative Update 23 / Microsoft Exchange Server 2013 Service Pack 1 / Microsoft Exchange Server 2016 Cumulativにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。",
      "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。",
      "guidance": {
        "schemaVersion": "1.0",
        "method": "automatic",
        "reviewedAt": null,
        "reviewState": "current",
        "generatedAt": "2026-10-23T03:50:07.502Z",
        "generatorVersion": "2026-10-23.3",
        "sourceFingerprint": "beb0375e616540577be08daf735afff2b8fb2bc7e71456170b257cd261c4e870",
        "sourceModifiedAt": "2026-10-01T20:13:32.360Z",
        "model": "@cf/openai/gpt-oss-120b",
        "verificationMethod": "exact_source_excerpt_and_independent_semantic_check",
        "summary": "Microsoft Exchange Server のリモートコード実行脆弱性です。",
        "risk": "攻撃者がサーバー上で任意のコードを実行できる可能性があります。",
        "summaryEvidenceIds": [
          "E1"
        ],
        "riskEvidenceIds": [
          "E2"
        ],
        "applicability": [
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2013 Cumulative Update 21。影響ありとして記載：15.00.0以上、15.00.1395.012未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2013 Cumulative Update 22。影響ありとして記載：15.00.0以上、15.00.1473.006未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json"
            ],
            "evidenceIds": [
              "E4"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2013 Cumulative Update 23。影響ありとして記載：15.00.0以上、15.00.1497.012未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json"
            ],
            "evidenceIds": [
              "E5"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2013 Service Pack 1。影響ありとして記載：15.00.0以上、15.00.0847.064未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json"
            ],
            "evidenceIds": [
              "E6"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 10。影響ありとして記載：15.01.0以上、15.01.1531.012未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json"
            ],
            "evidenceIds": [
              "E7"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 11。影響ありとして記載：15.01.0以上、15.01.1591.018未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json"
            ],
            "evidenceIds": [
              "E8"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 12。影響ありとして記載：15.01.0以上、15.01.1713.010未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json"
            ],
            "evidenceIds": [
              "E9"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 13。影響ありとして記載：15.01.0以上、15.01.1779.008未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json"
            ],
            "evidenceIds": [
              "E10"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 14。影響ありとして記載：15.01.0以上、15.01.1847.012未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json"
            ],
            "evidenceIds": [
              "E11"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 15。影響ありとして記載：15.01.0以上、15.01.1913.012未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json"
            ],
            "evidenceIds": [
              "E12"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 16。影響ありとして記載：15.01.0以上、15.01.1979.008未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json"
            ],
            "evidenceIds": [
              "E13"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 17。影響ありとして記載：15.01.0以上、15.01.2044.013未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json"
            ],
            "evidenceIds": [
              "E14"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 18。影響ありとして記載：15.01.0以上、15.01.2106.013未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json"
            ],
            "evidenceIds": [
              "E15"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 19。影響ありとして記載：15.01.0以上、15.01.2176.009未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json"
            ],
            "evidenceIds": [
              "E16"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 8。影響ありとして記載：15.01.0以上、15.01.1415.010未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json"
            ],
            "evidenceIds": [
              "E17"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 9。影響ありとして記載：15.01.0以上、15.01.1466.016未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json"
            ],
            "evidenceIds": [
              "E18"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2019。影響ありとして記載：15.02.0以上、15.02.0221.018未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json"
            ],
            "evidenceIds": [
              "E19"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2019 Cumulative Update 1。影響ありとして記載：15.02.0以上、15.01.1979.006未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json"
            ],
            "evidenceIds": [
              "E20"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2019 Cumulative Update 2。影響ありとして記載：15.02.0以上、15.02.0397.011未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json"
            ],
            "evidenceIds": [
              "E21"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2019 Cumulative Update 3。影響ありとして記載：15.02.0以上、15.02.0464.015未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json"
            ],
            "evidenceIds": [
              "E22"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2019 Cumulative Update 4。影響ありとして記載：15.02.0以上、15.02.0659.012未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json"
            ],
            "evidenceIds": [
              "E23"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2019 Cumulative Update 5。影響ありとして記載：15.02.0以上、15.02.0595.008未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json"
            ],
            "evidenceIds": [
              "E24"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2019 Cumulative Update 6。影響ありとして記載：15.02.0以上、15.02.0529.013未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json"
            ],
            "evidenceIds": [
              "E25"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2019 Cumulative Update 7。影響ありとして記載：15.02.0以上、15.02.0721.013未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json"
            ],
            "evidenceIds": [
              "E26"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2019 Cumulative Update 8。影響ありとして記載：15.02.0以上、15.02.0792.010未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json"
            ],
            "evidenceIds": [
              "E27"
            ]
          },
          {
            "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。",
            "kind": "fact",
            "sourceUrls": [
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-27065"
            ],
            "evidenceIds": [
              "E29"
            ]
          }
        ],
        "versionChecks": [
          {
            "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "「Microsoft Exchange Server 2013 Cumulative Update 21 / Microsoft Exchange Server 2013 Cumulative Update 22 / Microsoft Exchange Server 2013 Cumulative Update 23 / Microsoft Exchange Server 2013 Service Pack 1 / Microsoft Exchange Server 2016 Cumulativ」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
              "https://www.cve.org/CVERecord?id=CVE-2021-27065",
              "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-27065",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-27065",
              "https://www.cisa.gov/news-events/directives/ed-21-02-mitigate-microsoft-exchange-premises-product-vulnerabilities",
              "https://nvd.nist.gov/vuln/detail/CVE-2021-27065"
            ]
          }
        ],
        "actions": [
          {
            "text": "ベンダーの指示に従って更新を適用する。",
            "kind": "fix",
            "sourceUrls": [
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-27065"
            ],
            "evidenceIds": [
              "E28"
            ]
          },
          {
            "text": "「CVE-2021-27065」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cve.org/CVERecord?id=CVE-2021-27065",
              "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-27065",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-27065",
              "https://www.cisa.gov/news-events/directives/ed-21-02-mitigate-microsoft-exchange-premises-product-vulnerabilities",
              "https://nvd.nist.gov/vuln/detail/CVE-2021-27065"
            ]
          },
          {
            "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
              "https://www.cve.org/CVERecord?id=CVE-2021-27065",
              "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-27065",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-27065",
              "https://www.cisa.gov/news-events/directives/ed-21-02-mitigate-microsoft-exchange-premises-product-vulnerabilities",
              "https://nvd.nist.gov/vuln/detail/CVE-2021-27065"
            ]
          }
        ],
        "temporaryMitigations": [
          {
            "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cve.org/CVERecord?id=CVE-2021-27065",
              "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-27065",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-27065",
              "https://www.cisa.gov/news-events/directives/ed-21-02-mitigate-microsoft-exchange-premises-product-vulnerabilities",
              "https://nvd.nist.gov/vuln/detail/CVE-2021-27065"
            ]
          }
        ],
        "verification": [
          {
            "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。",
            "kind": "procedure",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json"
            ],
            "evidenceIds": [
              "E3"
            ]
          },
          {
            "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
              "https://www.cve.org/CVERecord?id=CVE-2021-27065",
              "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-27065",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-27065",
              "https://www.cisa.gov/news-events/directives/ed-21-02-mitigate-microsoft-exchange-premises-product-vulnerabilities",
              "https://nvd.nist.gov/vuln/detail/CVE-2021-27065"
            ]
          }
        ],
        "unknowns": [
          "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。",
          "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。"
        ],
        "sources": [
          {
            "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json",
            "label": "CVE：microsoft"
          },
          {
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-27065",
            "label": "CISA KEV（悪用確認）"
          },
          {
            "url": "https://www.cve.org/CVERecord?id=CVE-2021-27065",
            "label": "CVE公式レコード"
          },
          {
            "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-27065",
            "label": "Microsoft Exchange Server Remote Code Execution Vulnerability"
          },
          {
            "url": "https://www.cisa.gov/news-events/directives/ed-21-02-mitigate-microsoft-exchange-premises-product-vulnerabilities",
            "label": "CISAが示す関連情報"
          },
          {
            "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-27065",
            "label": "CISAが示す関連情報"
          },
          {
            "url": "https://www.first.org/cvss/v3.1/specification-document",
            "label": "FIRST公式：CVSS 3.1の条件の定義"
          },
          {
            "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf",
            "label": "CISA：ソフトウェア更新の基本"
          }
        ],
        "evidence": [
          {
            "id": "E1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json",
            "sourceField": "/containers/cna/title",
            "excerpt": "Microsoft Exchange Server Remote Code Execution Vulnerability",
            "language": null
          },
          {
            "id": "E2",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json",
            "sourceField": "/containers/cna/problemTypes/0/descriptions/0",
            "excerpt": "{\"description\":\"Remote Code Execution\",\"lang\":\"en-US\",\"type\":\"Impact\"}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E3",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json",
            "sourceField": "/containers/cna/affected/0",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2013 Cumulative Update 21\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.00.0\",\"lessThan\":\"15.00.1395.012\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E4",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json",
            "sourceField": "/containers/cna/affected/1",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2013 Cumulative Update 22\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.00.0\",\"lessThan\":\"15.00.1473.006\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E5",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json",
            "sourceField": "/containers/cna/affected/2",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2013 Cumulative Update 23\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.00.0\",\"lessThan\":\"15.00.1497.012\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E6",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json",
            "sourceField": "/containers/cna/affected/3",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2013 Service Pack 1\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.00.0\",\"lessThan\":\"15.00.0847.064\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E7",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json",
            "sourceField": "/containers/cna/affected/4",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 10\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.1531.012\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E8",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json",
            "sourceField": "/containers/cna/affected/5",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 11\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.1591.018\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E9",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json",
            "sourceField": "/containers/cna/affected/6",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 12\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.1713.010\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E10",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json",
            "sourceField": "/containers/cna/affected/7",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 13\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.1779.008\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E11",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json",
            "sourceField": "/containers/cna/affected/8",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 14\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.1847.012\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E12",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json",
            "sourceField": "/containers/cna/affected/9",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 15\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.1913.012\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E13",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json",
            "sourceField": "/containers/cna/affected/10",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 16\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.1979.008\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E14",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json",
            "sourceField": "/containers/cna/affected/11",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 17\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.2044.013\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E15",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json",
            "sourceField": "/containers/cna/affected/12",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 18\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.2106.013\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E16",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json",
            "sourceField": "/containers/cna/affected/13",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 19\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.2176.009\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E17",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json",
            "sourceField": "/containers/cna/affected/14",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 8\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.1415.010\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E18",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json",
            "sourceField": "/containers/cna/affected/15",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 9\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.1466.016\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E19",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json",
            "sourceField": "/containers/cna/affected/16",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2019\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.02.0\",\"lessThan\":\"15.02.0221.018\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E20",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json",
            "sourceField": "/containers/cna/affected/17",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2019 Cumulative Update 1\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.02.0\",\"lessThan\":\"15.01.1979.006\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E21",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json",
            "sourceField": "/containers/cna/affected/18",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2019 Cumulative Update 2\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.02.0\",\"lessThan\":\"15.02.0397.011\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E22",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json",
            "sourceField": "/containers/cna/affected/19",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2019 Cumulative Update 3\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.02.0\",\"lessThan\":\"15.02.0464.015\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E23",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json",
            "sourceField": "/containers/cna/affected/20",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2019 Cumulative Update 4\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.02.0\",\"lessThan\":\"15.02.0659.012\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E24",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json",
            "sourceField": "/containers/cna/affected/21",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2019 Cumulative Update 5\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.02.0\",\"lessThan\":\"15.02.0595.008\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E25",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json",
            "sourceField": "/containers/cna/affected/22",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2019 Cumulative Update 6\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.02.0\",\"lessThan\":\"15.02.0529.013\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E26",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json",
            "sourceField": "/containers/cna/affected/23",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2019 Cumulative Update 7\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.02.0\",\"lessThan\":\"15.02.0721.013\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E27",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/27xxx/CVE-2021-27065.json",
            "sourceField": "/containers/cna/affected/24",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2019 Cumulative Update 8\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.02.0\",\"lessThan\":\"15.02.0792.010\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E28",
            "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-27065",
            "sourceField": "/sourceAction",
            "excerpt": "Apply updates per vendor instructions.",
            "language": null
          },
          {
            "id": "E29",
            "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-27065",
            "sourceField": "/exploitStatus",
            "excerpt": "{\"id\":\"CVE-2021-27065\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}",
            "language": "en",
            "representation": "normalized_feed_field"
          }
        ],
        "supportRequest": "件名：CVE-2021-27065（Microsoft Exchange Server 2013 Cumulative Update 21 / Microsoft Exchange Server 2013 Cumulative Update 22 / Microsoft Exchange Server 2013 Cumulative Update 23 / Microsoft Exchange Server 2013 Service Pack 1 / Microsoft Exchange Server 2016 Cumulativ）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・公式の対象表：Microsoft / Microsoft Exchange Server 2013 Cumulative Update 21。影響ありとして記載：15.00.0以上、15.00.1395.012未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2013 Cumulative Update 22。影響ありとして記載：15.00.0以上、15.00.1473.006未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2013 Cumulative Update 23。影響ありとして記載：15.00.0以上、15.00.1497.012未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2013 Service Pack 1。影響ありとして記載：15.00.0以上、15.00.0847.064未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 10。影響ありとして記載：15.01.0以上、15.01.1531.012未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 11。影響ありとして記載：15.01.0以上、15.01.1591.018未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 12。影響ありとして記載：15.01.0以上、15.01.1713.010未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 13。影響ありとして記載：15.01.0以上、15.01.1779.008未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 14。影響ありとして記載：15.01.0以上、15.01.1847.012未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 15。影響ありとして記載：15.01.0以上、15.01.1913.012未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 16。影響ありとして記載：15.01.0以上、15.01.1979.008未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 17。影響ありとして記載：15.01.0以上、15.01.2044.013未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 18。影響ありとして記載：15.01.0以上、15.01.2106.013未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 19。影響ありとして記載：15.01.0以上、15.01.2176.009未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 8。影響ありとして記載：15.01.0以上、15.01.1415.010未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 9。影響ありとして記載：15.01.0以上、15.01.1466.016未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2019。影響ありとして記載：15.02.0以上、15.02.0221.018未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2019 Cumulative Update 1。影響ありとして記載：15.02.0以上、15.01.1979.006未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2019 Cumulative Update 2。影響ありとして記載：15.02.0以上、15.02.0397.011未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2019 Cumulative Update 3。影響ありとして記載：15.02.0以上、15.02.0464.015未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2019 Cumulative Update 4。影響ありとして記載：15.02.0以上、15.02.0659.012未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2019 Cumulative Update 5。影響ありとして記載：15.02.0以上、15.02.0595.008未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2019 Cumulative Update 6。影響ありとして記載：15.02.0以上、15.02.0529.013未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2019 Cumulative Update 7。影響ありとして記載：15.02.0以上、15.02.0721.013未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2019 Cumulative Update 8。影響ありとして記載：15.02.0以上、15.02.0792.010未満。対象の環境：x64-based Systems\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2021-27065",
        "publicationCheckVersion": "2026-10-23.1",
        "sourceNotices": [],
        "automation": {
          "status": "ready",
          "lastAttempt": "2026-10-23T03:50:07.502Z",
          "lastSuccess": "2026-10-23T03:50:07.502Z",
          "sourceCheckedAt": "2026-10-23T02:43:16.213Z",
          "errorCode": null
        },
        "glossary": [
          {
            "term": "任意のコード実行",
            "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。",
            "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html",
            "kind": "general_definition"
          }
        ]
      }
    },
    {
      "id": "CVE-2021-28310",
      "aliases": [],
      "title": "Windows 10 Version 1803 / Windows 10 Version 1809 / Windows Server 2019 / Windows Server 2019 (Server Core installation) / Windows 10 Version 1909 / Windows Server, version 1909 (Server Core installation) / Windows 10 Version 2004 / Windows Server ve：権限の奪取",
      "summary": "Win32k の特権昇格脆弱性です。",
      "risk": "攻撃者が特権を昇格させ、システム上で管理者権限の操作を実行できる可能性があります。",
      "product": "Windows 10 Version 1803 / Windows 10 Version 1809 / Windows Server 2019 / Windows Server 2019 (Server Core installation) / Windows 10 Version 1909 / Windows Server, version 1909 (Server Core installation) / Windows 10 Version 2004 / Windows Server ve",
      "category": "windows",
      "component": "package",
      "severity": "high",
      "cvss": 7.8,
      "cvssVersion": "3.1",
      "cvssSource": "microsoft",
      "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C",
      "affected": [
        {
          "product": "Windows 10 Version 1803",
          "range": ">= 10.0.0 / < publication（環境: 32-bit Systems / x64-based Systems / ARM64-based Systems）"
        },
        {
          "product": "Windows 10 Version 1809",
          "range": ">= 10.0.0 / < publication（環境: 32-bit Systems / x64-based Systems / ARM64-based Systems）"
        },
        {
          "product": "Windows Server 2019",
          "range": ">= 10.0.0 / < publication（環境: x64-based Systems）"
        },
        {
          "product": "Windows Server 2019 (Server Core installation)",
          "range": ">= 10.0.0 / < publication（環境: x64-based Systems）"
        },
        {
          "product": "Windows 10 Version 1909",
          "range": ">= 10.0.0 / < publication（環境: 32-bit Systems / x64-based Systems / ARM64-based Systems）"
        },
        {
          "product": "Windows Server, version 1909 (Server Core installation)",
          "range": ">= 10.0.0 / < publication（環境: x64-based Systems）"
        },
        {
          "product": "Windows 10 Version 2004",
          "range": ">= 10.0.0 / < publication（環境: 32-bit Systems / ARM64-based Systems / x64-based Systems）"
        },
        {
          "product": "Windows Server version 2004",
          "range": ">= 10.0.0 / < publication（環境: x64-based Systems）"
        },
        {
          "product": "Windows 10 Version 20H2",
          "range": ">= 10.0.0 / < publication（環境: 32-bit Systems / ARM64-based Systems）"
        },
        {
          "product": "Windows Server version 20H2",
          "range": ">= 10.0.0 / < publication（環境: x64-based Systems）"
        }
      ],
      "fixed": [],
      "steps": [
        "ベンダーの指示に従って更新を適用してください。",
        "「CVE-2021-28310」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
        "Windows 11は「設定」→「Windows Update」→「更新プログラムのチェック」を開き、提供された更新を適用します。再起動を求められたら完了させます。会社管理のPC、Windows Server、サポート外の版は管理担当者に適用する修正番号と配布予定を確認してください。"
      ],
      "references": [
        {
          "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/28xxx/CVE-2021-28310.json",
          "label": "CVE：microsoft"
        },
        {
          "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-28310",
          "label": "CISA KEV（悪用確認）"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-28310",
          "label": "CVE公式レコード"
        },
        {
          "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28310",
          "label": "CVE掲載の参考情報"
        },
        {
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-28310",
          "label": "CISAが示す関連情報"
        },
        {
          "url": "https://www.first.org/cvss/v3.1/specification-document",
          "label": "FIRST公式：CVSS 3.1の条件の定義"
        },
        {
          "url": "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device",
          "label": "Microsoft公式：Windowsの情報を調べる"
        },
        {
          "url": "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates",
          "label": "Microsoft公式：Windows Updateの操作"
        }
      ],
      "publishedAt": "2021-04-13T19:32:47.000Z",
      "modifiedAt": "2025-10-21T23:25:49.229Z",
      "fetchedAt": "2026-10-23T02:43:16.517Z",
      "exploitStatus": "confirmed",
      "sources": [
        "CVE",
        "CISA KEV"
      ],
      "originalText": "",
      "sourceTitle": "Win32k Elevation of Privilege Vulnerability",
      "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。",
      "state": "published",
      "affectedDetails": [
        {
          "vendor": "Microsoft",
          "product": "Windows 10 Version 1803",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "cpe:2.3:o:microsoft:windows_10_1803:*:*:*:*:*:*:x64:*",
            "cpe:2.3:o:microsoft:windows_10_1803:*:*:*:*:*:*:arm64:*"
          ],
          "platforms": [
            "32-bit Systems",
            "x64-based Systems",
            "ARM64-based Systems"
          ],
          "versions": [
            {
              "version": "10.0.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows 10 Version 1809",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:arm64:*"
          ],
          "platforms": [
            "32-bit Systems",
            "x64-based Systems",
            "ARM64-based Systems"
          ],
          "versions": [
            {
              "version": "10.0.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows Server 2019",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*"
          ],
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "10.0.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows Server 2019 (Server Core installation)",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*"
          ],
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "10.0.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows 10 Version 1909",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_10_1909:*:*:*:*:*:*:x86:*",
            "cpe:2.3:o:microsoft:windows_10_1909:*:*:*:*:*:*:x64:*",
            "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*"
          ],
          "platforms": [
            "32-bit Systems",
            "x64-based Systems",
            "ARM64-based Systems"
          ],
          "versions": [
            {
              "version": "10.0.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows Server, version 1909 (Server Core installation)",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_server_1909:*:*:*:*:*:*:*:*"
          ],
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "10.0.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows 10 Version 2004",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*"
          ],
          "platforms": [
            "32-bit Systems",
            "ARM64-based Systems",
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "10.0.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows Server version 2004",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_server_2004:*:*:*:*:*:*:*:*"
          ],
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "10.0.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows 10 Version 20H2",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_10_20H2:*:*:*:*:*:*:x86:*",
            "cpe:2.3:o:microsoft:windows_10_20H2:*:*:*:*:*:*:arm64:*"
          ],
          "platforms": [
            "32-bit Systems",
            "ARM64-based Systems"
          ],
          "versions": [
            {
              "version": "10.0.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows Server version 20H2",
          "cpes": [
            "cpe:2.3:o:microsoft:windows_server_20H2:*:*:*:*:*:*:*:*"
          ],
          "platforms": [
            "x64-based Systems"
          ],
          "versions": [
            {
              "version": "10.0.0",
              "lessThan": "publication",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        }
      ],
      "configurationNotes": "対象環境・機能: 32-bit Systems / x64-based Systems / ARM64-based Systems。製品バージョンだけでなく、原文の利用条件を照合してください。",
      "officialEvidence": {
        "schemaVersion": "1.0",
        "id": "CVE-2021-28310",
        "sourceType": "CVE",
        "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/28xxx/CVE-2021-28310.json",
        "fetchedAt": "2026-10-23T02:43:16.517Z",
        "publishedAt": "2021-04-13T19:32:47.000Z",
        "modifiedAt": "2025-10-21T23:25:49.229Z",
        "state": "published",
        "provider": "microsoft",
        "title": "Win32k Elevation of Privilege Vulnerability",
        "descriptions": [
          {
            "lang": "en-US",
            "value": "Win32k Elevation of Privilege Vulnerability",
            "sourcePath": "/containers/cna/descriptions/0/value"
          }
        ],
        "affected": [
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 1803",
            "sourcePath": "/containers/cna/affected/0",
            "platforms": [
              "32-bit Systems",
              "x64-based Systems",
              "ARM64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
              "cpe:2.3:o:microsoft:windows_10_1803:*:*:*:*:*:*:x64:*",
              "cpe:2.3:o:microsoft:windows_10_1803:*:*:*:*:*:*:arm64:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/0/versions/0",
                "version": "10.0.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 1809",
            "sourcePath": "/containers/cna/affected/1",
            "platforms": [
              "32-bit Systems",
              "x64-based Systems",
              "ARM64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
              "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
              "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:arm64:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/1/versions/0",
                "version": "10.0.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server 2019",
            "sourcePath": "/containers/cna/affected/2",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/2/versions/0",
                "version": "10.0.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server 2019 (Server Core installation)",
            "sourcePath": "/containers/cna/affected/3",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/3/versions/0",
                "version": "10.0.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 1909",
            "sourcePath": "/containers/cna/affected/4",
            "platforms": [
              "32-bit Systems",
              "x64-based Systems",
              "ARM64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_10_1909:*:*:*:*:*:*:x86:*",
              "cpe:2.3:o:microsoft:windows_10_1909:*:*:*:*:*:*:x64:*",
              "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/4/versions/0",
                "version": "10.0.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server, version 1909 (Server Core installation)",
            "sourcePath": "/containers/cna/affected/5",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_server_1909:*:*:*:*:*:*:*:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/5/versions/0",
                "version": "10.0.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 2004",
            "sourcePath": "/containers/cna/affected/6",
            "platforms": [
              "32-bit Systems",
              "ARM64-based Systems",
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/6/versions/0",
                "version": "10.0.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server version 2004",
            "sourcePath": "/containers/cna/affected/7",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_server_2004:*:*:*:*:*:*:*:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/7/versions/0",
                "version": "10.0.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows 10 Version 20H2",
            "sourcePath": "/containers/cna/affected/8",
            "platforms": [
              "32-bit Systems",
              "ARM64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_10_20H2:*:*:*:*:*:*:x86:*",
              "cpe:2.3:o:microsoft:windows_10_20H2:*:*:*:*:*:*:arm64:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/8/versions/0",
                "version": "10.0.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          },
          {
            "vendor": "Microsoft",
            "product": "Windows Server version 20H2",
            "sourcePath": "/containers/cna/affected/9",
            "platforms": [
              "x64-based Systems"
            ],
            "modules": [],
            "programFiles": [],
            "cpes": [
              "cpe:2.3:o:microsoft:windows_server_20H2:*:*:*:*:*:*:*:*"
            ],
            "programRoutines": [],
            "versions": [
              {
                "sourcePath": "/containers/cna/affected/9/versions/0",
                "version": "10.0.0",
                "lessThan": "publication",
                "versionType": "custom",
                "status": "affected"
              }
            ]
          }
        ],
        "solutions": [],
        "workarounds": [],
        "exploits": [],
        "rejectedReasons": [],
        "problemTypes": [
          {
            "cweId": "",
            "lang": "en-US",
            "description": "Elevation of Privilege",
            "sourcePath": "/containers/cna/problemTypes/0/descriptions/0"
          }
        ],
        "metrics": [
          {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "provider": "microsoft",
            "sourcePath": "/containers/cna/metrics/0/cvssV3_1"
          }
        ],
        "references": [
          {
            "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28310",
            "label": "CVE",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "provider": "CVE",
            "sourcePath": "/containers/adp/0/references/0"
          },
          {
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-28310",
            "label": "CISA-ADP",
            "tags": [
              "government-resource"
            ],
            "provider": "CISA-ADP",
            "sourcePath": "/containers/adp/1/references/0"
          }
        ],
        "snippets": [
          {
            "evidenceId": "official:/containers/cna/affected/0",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/28xxx/CVE-2021-28310.json",
            "sourcePath": "/containers/cna/affected/0",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1803\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*\",\"cpe:2.3:o:microsoft:windows_10_1803:*:*:*:*:*:*:x64:*\",\"cpe:2.3:o:microsoft:windows_10_1803:*:*:*:*:*:*:arm64:*\"],\"platforms\":[\"32-bit Systems\",\"x64-based Systems\",\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/28xxx/CVE-2021-28310.json",
            "sourcePath": "/containers/cna/affected/1",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1809\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*\",\"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*\",\"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:arm64:*\"],\"platforms\":[\"32-bit Systems\",\"x64-based Systems\",\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/2",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/28xxx/CVE-2021-28310.json",
            "sourcePath": "/containers/cna/affected/2",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2019\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/3",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/28xxx/CVE-2021-28310.json",
            "sourcePath": "/containers/cna/affected/3",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2019 (Server Core installation)\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/4",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/28xxx/CVE-2021-28310.json",
            "sourcePath": "/containers/cna/affected/4",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1909\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_10_1909:*:*:*:*:*:*:x86:*\",\"cpe:2.3:o:microsoft:windows_10_1909:*:*:*:*:*:*:x64:*\",\"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*\"],\"platforms\":[\"32-bit Systems\",\"x64-based Systems\",\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/5",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/28xxx/CVE-2021-28310.json",
            "sourcePath": "/containers/cna/affected/5",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server, version 1909 (Server Core installation)\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_1909:*:*:*:*:*:*:*:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/6",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/28xxx/CVE-2021-28310.json",
            "sourcePath": "/containers/cna/affected/6",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 2004\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*\"],\"platforms\":[\"32-bit Systems\",\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/7",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/28xxx/CVE-2021-28310.json",
            "sourcePath": "/containers/cna/affected/7",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server version 2004\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2004:*:*:*:*:*:*:*:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/8",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/28xxx/CVE-2021-28310.json",
            "sourcePath": "/containers/cna/affected/8",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 20H2\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_10_20H2:*:*:*:*:*:*:x86:*\",\"cpe:2.3:o:microsoft:windows_10_20H2:*:*:*:*:*:*:arm64:*\"],\"platforms\":[\"32-bit Systems\",\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/affected/9",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/28xxx/CVE-2021-28310.json",
            "sourcePath": "/containers/cna/affected/9",
            "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server version 20H2\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_20H2:*:*:*:*:*:*:*:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/descriptions/0/value",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/28xxx/CVE-2021-28310.json",
            "sourcePath": "/containers/cna/descriptions/0/value",
            "text": "Win32k Elevation of Privilege Vulnerability",
            "truncated": false,
            "representation": "source_excerpt"
          },
          {
            "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/28xxx/CVE-2021-28310.json",
            "sourcePath": "/containers/cna/problemTypes/0/descriptions/0",
            "text": "{\"description\":\"Elevation of Privilege\",\"lang\":\"en-US\",\"type\":\"Impact\"}",
            "truncated": false,
            "representation": "source_json"
          },
          {
            "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/28xxx/CVE-2021-28310.json",
            "sourcePath": "/containers/cna/metrics/0/cvssV3_1",
            "text": "{\"version\":\"3.1\",\"baseSeverity\":\"HIGH\",\"baseScore\":7.8,\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C\"}",
            "truncated": false,
            "representation": "source_json"
          }
        ],
        "limits": {
          "completeness": "official_record",
          "truncatedFields": [],
          "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。"
        }
      },
      "sourceSnapshots": [
        {
          "source": "CVE",
          "modifiedAt": "2025-10-21T23:25:49.229Z",
          "fetchedAt": "2026-10-23T02:43:16.517Z",
          "state": "published"
        },
        {
          "source": "CISA KEV",
          "modifiedAt": "2021-11-03T00:00:00.000Z",
          "fetchedAt": "2026-10-23T02:17:50.489Z",
          "state": "published"
        }
      ],
      "sourceAction": "Apply updates per vendor instructions.",
      "sourceSummary": "Windows 10 Version 1803 / Windows 10 Version 1809 / Windows Server 2019 / Windows Server 2019 (Server Core installation) / Windows 10 Version 1909 / Windows Server, version 1909 (Server Core installation) / Windows 10 Version 2004 / Windows Server veに権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。",
      "sourceRisk": "本来与えられていない権限で、操作される可能性があります。",
      "guidance": {
        "schemaVersion": "1.0",
        "method": "automatic",
        "reviewedAt": null,
        "reviewState": "current",
        "generatedAt": "2026-10-23T03:50:18.774Z",
        "generatorVersion": "2026-10-23.3",
        "sourceFingerprint": "df6a5ddf26b4387b817057f0defc489b4d6b9f1782c8447671402fd2e4b99456",
        "sourceModifiedAt": "2025-10-21T23:25:49.229Z",
        "model": "@cf/openai/gpt-oss-120b",
        "verificationMethod": "exact_source_excerpt_and_independent_semantic_check",
        "summary": "Win32k の特権昇格脆弱性です。",
        "risk": "攻撃者が特権を昇格させ、システム上で管理者権限の操作を実行できる可能性があります。",
        "summaryEvidenceIds": [
          "E1",
          "E2"
        ],
        "riskEvidenceIds": [
          "E3"
        ],
        "applicability": [
          {
            "text": "Windows 10 Version 1803 の 32 ビット、x64、ARM64 システムが影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/28xxx/CVE-2021-28310.json"
            ],
            "evidenceIds": [
              "E4",
              "E2"
            ]
          },
          {
            "text": "Windows 10 Version 1809 の x86、x64、ARM64 システムが影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/28xxx/CVE-2021-28310.json"
            ],
            "evidenceIds": [
              "E5",
              "E2"
            ]
          },
          {
            "text": "Windows Server 2019 の x64 システムが影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/28xxx/CVE-2021-28310.json"
            ],
            "evidenceIds": [
              "E6",
              "E2"
            ]
          },
          {
            "text": "Windows Server 2019 (Server Core インストール) の x64 システムが影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/28xxx/CVE-2021-28310.json"
            ],
            "evidenceIds": [
              "E7",
              "E2"
            ]
          },
          {
            "text": "Windows 10 Version 1909 の 32 ビット、x64、ARM64 システムが影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/28xxx/CVE-2021-28310.json"
            ],
            "evidenceIds": [
              "E8",
              "E2"
            ]
          },
          {
            "text": "Windows Server, version 1909 (Server Core インストール) の x64 システムが影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/28xxx/CVE-2021-28310.json"
            ],
            "evidenceIds": [
              "E9",
              "E2"
            ]
          },
          {
            "text": "Windows 10 Version 2004 の 32 ビット、x64、ARM64 システムが影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/28xxx/CVE-2021-28310.json"
            ],
            "evidenceIds": [
              "E10",
              "E2"
            ]
          },
          {
            "text": "Windows Server version 2004 の x64 システムが影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/28xxx/CVE-2021-28310.json"
            ],
            "evidenceIds": [
              "E11",
              "E2"
            ]
          },
          {
            "text": "Windows 10 Version 20H2 の 32 ビット、ARM64 システムが影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/28xxx/CVE-2021-28310.json"
            ],
            "evidenceIds": [
              "E12",
              "E2"
            ]
          },
          {
            "text": "Windows Server version 20H2 の x64 システムが影響を受けます。",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/28xxx/CVE-2021-28310.json"
            ],
            "evidenceIds": [
              "E13",
              "E2"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 1803。影響ありとして記載：10.0.0以上、publication未満。対象の環境：32-bit Systems、x64-based Systems、ARM64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/28xxx/CVE-2021-28310.json"
            ],
            "evidenceIds": [
              "E4"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 1809。影響ありとして記載：10.0.0以上、publication未満。対象の環境：32-bit Systems、x64-based Systems、ARM64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/28xxx/CVE-2021-28310.json"
            ],
            "evidenceIds": [
              "E5"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server 2019。影響ありとして記載：10.0.0以上、publication未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/28xxx/CVE-2021-28310.json"
            ],
            "evidenceIds": [
              "E6"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server 2019 (Server Core installation)。影響ありとして記載：10.0.0以上、publication未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/28xxx/CVE-2021-28310.json"
            ],
            "evidenceIds": [
              "E7"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 1909。影響ありとして記載：10.0.0以上、publication未満。対象の環境：32-bit Systems、x64-based Systems、ARM64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/28xxx/CVE-2021-28310.json"
            ],
            "evidenceIds": [
              "E8"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server, version 1909 (Server Core installation)。影響ありとして記載：10.0.0以上、publication未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/28xxx/CVE-2021-28310.json"
            ],
            "evidenceIds": [
              "E9"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 2004。影響ありとして記載：10.0.0以上、publication未満。対象の環境：32-bit Systems、ARM64-based Systems、x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/28xxx/CVE-2021-28310.json"
            ],
            "evidenceIds": [
              "E10"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server version 2004。影響ありとして記載：10.0.0以上、publication未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/28xxx/CVE-2021-28310.json"
            ],
            "evidenceIds": [
              "E11"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows 10 Version 20H2。影響ありとして記載：10.0.0以上、publication未満。対象の環境：32-bit Systems、ARM64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/28xxx/CVE-2021-28310.json"
            ],
            "evidenceIds": [
              "E12"
            ]
          },
          {
            "text": "公式の対象表：Microsoft / Windows Server version 20H2。影響ありとして記載：10.0.0以上、publication未満。対象の環境：x64-based Systems",
            "kind": "fact",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/28xxx/CVE-2021-28310.json"
            ],
            "evidenceIds": [
              "E13"
            ]
          },
          {
            "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。",
            "kind": "fact",
            "sourceUrls": [
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-28310"
            ],
            "evidenceIds": [
              "E15"
            ]
          }
        ],
        "versionChecks": [
          {
            "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/28xxx/CVE-2021-28310.json"
            ],
            "evidenceIds": [
              "E4"
            ]
          },
          {
            "text": "「スタート」→「設定」→「システム」→「バージョン情報」を開き、Windowsのエディション・バージョン・OSビルドを控えます。会社のPCやサーバーは、この情報とCVE番号を管理担当者へ渡してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device"
            ]
          }
        ],
        "actions": [
          {
            "text": "ベンダーの指示に従って更新を適用してください。",
            "kind": "fix",
            "sourceUrls": [
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-28310"
            ],
            "evidenceIds": [
              "E14"
            ]
          },
          {
            "text": "「CVE-2021-28310」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://www.cve.org/CVERecord?id=CVE-2021-28310",
              "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28310",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-28310",
              "https://nvd.nist.gov/vuln/detail/CVE-2021-28310"
            ]
          },
          {
            "text": "Windows 11は「設定」→「Windows Update」→「更新プログラムのチェック」を開き、提供された更新を適用します。再起動を求められたら完了させます。会社管理のPC、Windows Server、サポート外の版は管理担当者に適用する修正番号と配布予定を確認してください。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates"
            ]
          }
        ],
        "temporaryMitigations": [
          {
            "text": "すぐ更新できない場合は、CVE番号、Windowsの版、業務で必要な機能を管理担当者に伝え、修正までの利用方法と更新予定を決めてください。すべてのWindowsの問題に同じ回避策が使えるわけではありません。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates",
              "https://www.cve.org/CVERecord?id=CVE-2021-28310",
              "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28310",
              "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-28310",
              "https://nvd.nist.gov/vuln/detail/CVE-2021-28310"
            ]
          }
        ],
        "verification": [
          {
            "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。",
            "kind": "procedure",
            "sourceUrls": [
              "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/28xxx/CVE-2021-28310.json"
            ],
            "evidenceIds": [
              "E4"
            ]
          },
          {
            "text": "再起動後にWindows Updateを開き直して失敗・再起動待ちがないか確認し、管理担当者にこのCVEに対応する修正の適用結果を確認してもらってください。「最新の状態」と出ても、別製品の更新やサポート外の版の修正を保証するものではありません。",
            "kind": "procedure",
            "sourceUrls": [
              "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates"
            ]
          }
        ],
        "unknowns": [
          "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。",
          "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。"
        ],
        "sources": [
          {
            "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/28xxx/CVE-2021-28310.json",
            "label": "CVE：microsoft"
          },
          {
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-28310",
            "label": "CISA KEV（悪用確認）"
          },
          {
            "url": "https://www.cve.org/CVERecord?id=CVE-2021-28310",
            "label": "CVE公式レコード"
          },
          {
            "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28310",
            "label": "CVE掲載の参考情報"
          },
          {
            "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-28310",
            "label": "CISAが示す関連情報"
          },
          {
            "url": "https://www.first.org/cvss/v3.1/specification-document",
            "label": "FIRST公式：CVSS 3.1の条件の定義"
          },
          {
            "url": "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device",
            "label": "Microsoft公式：Windowsの情報を調べる"
          },
          {
            "url": "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates",
            "label": "Microsoft公式：Windows Updateの操作"
          }
        ],
        "evidence": [
          {
            "id": "E1",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/28xxx/CVE-2021-28310.json",
            "sourceField": "/containers/cna/descriptions/0/value",
            "excerpt": "Win32k Elevation of Privilege Vulnerability",
            "language": "en-US",
            "representation": "source_excerpt"
          },
          {
            "id": "E2",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/28xxx/CVE-2021-28310.json",
            "sourceField": "/containers/cna/title",
            "excerpt": "Win32k Elevation of Privilege Vulnerability",
            "language": null
          },
          {
            "id": "E3",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/28xxx/CVE-2021-28310.json",
            "sourceField": "/containers/cna/problemTypes/0/descriptions/0",
            "excerpt": "{\"description\":\"Elevation of Privilege\",\"lang\":\"en-US\",\"type\":\"Impact\"}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E4",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/28xxx/CVE-2021-28310.json",
            "sourceField": "/containers/cna/affected/0",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1803\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*\",\"cpe:2.3:o:microsoft:windows_10_1803:*:*:*:*:*:*:x64:*\",\"cpe:2.3:o:microsoft:windows_10_1803:*:*:*:*:*:*:arm64:*\"],\"platforms\":[\"32-bit Systems\",\"x64-based Systems\",\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E5",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/28xxx/CVE-2021-28310.json",
            "sourceField": "/containers/cna/affected/1",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1809\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*\",\"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*\",\"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:arm64:*\"],\"platforms\":[\"32-bit Systems\",\"x64-based Systems\",\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E6",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/28xxx/CVE-2021-28310.json",
            "sourceField": "/containers/cna/affected/2",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2019\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E7",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/28xxx/CVE-2021-28310.json",
            "sourceField": "/containers/cna/affected/3",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2019 (Server Core installation)\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E8",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/28xxx/CVE-2021-28310.json",
            "sourceField": "/containers/cna/affected/4",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1909\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_10_1909:*:*:*:*:*:*:x86:*\",\"cpe:2.3:o:microsoft:windows_10_1909:*:*:*:*:*:*:x64:*\",\"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*\"],\"platforms\":[\"32-bit Systems\",\"x64-based Systems\",\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E9",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/28xxx/CVE-2021-28310.json",
            "sourceField": "/containers/cna/affected/5",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server, version 1909 (Server Core installation)\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_1909:*:*:*:*:*:*:*:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E10",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/28xxx/CVE-2021-28310.json",
            "sourceField": "/containers/cna/affected/6",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 2004\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*\"],\"platforms\":[\"32-bit Systems\",\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E11",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/28xxx/CVE-2021-28310.json",
            "sourceField": "/containers/cna/affected/7",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server version 2004\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_2004:*:*:*:*:*:*:*:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E12",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/28xxx/CVE-2021-28310.json",
            "sourceField": "/containers/cna/affected/8",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 20H2\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_10_20H2:*:*:*:*:*:*:x86:*\",\"cpe:2.3:o:microsoft:windows_10_20H2:*:*:*:*:*:*:arm64:*\"],\"platforms\":[\"32-bit Systems\",\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E13",
            "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/28xxx/CVE-2021-28310.json",
            "sourceField": "/containers/cna/affected/9",
            "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server version 20H2\",\"cpes\":[\"cpe:2.3:o:microsoft:windows_server_20H2:*:*:*:*:*:*:*:*\"],\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"publication\",\"versionType\":\"custom\",\"status\":\"affected\"}]}",
            "language": null,
            "representation": "source_json"
          },
          {
            "id": "E14",
            "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-28310",
            "sourceField": "/sourceAction",
            "excerpt": "Apply updates per vendor instructions.",
            "language": null
          },
          {
            "id": "E15",
            "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-28310",
            "sourceField": "/exploitStatus",
            "excerpt": "{\"id\":\"CVE-2021-28310\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}",
            "language": "en",
            "representation": "normalized_feed_field"
          }
        ],
        "supportRequest": "件名：CVE-2021-28310（Windows 10 Version 1803 / Windows 10 Version 1809 / Windows Server 2019 / Windows Server 2019 (Server Core installation) / Windows 10 Version 1909 / Windows Server, version 1909 (Server Core installation) / Windows 10 Version 2004 / Windows Server ve）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Windows 10 Version 1803 の 32 ビット、x64、ARM64 システムが影響を受けます。\n・Windows 10 Version 1809 の x86、x64、ARM64 システムが影響を受けます。\n・Windows Server 2019 の x64 システムが影響を受けます。\n・Windows Server 2019 (Server Core インストール) の x64 システムが影響を受けます。\n・Windows 10 Version 1909 の 32 ビット、x64、ARM64 システムが影響を受けます。\n・Windows Server, version 1909 (Server Core インストール) の x64 システムが影響を受けます。\n・Windows 10 Version 2004 の 32 ビット、x64、ARM64 システムが影響を受けます。\n・Windows Server version 2004 の x64 システムが影響を受けます。\n・Windows 10 Version 20H2 の 32 ビット、ARM64 システムが影響を受けます。\n・Windows Server version 20H2 の x64 システムが影響を受けます。\n・公式の対象表：Microsoft / Windows 10 Version 1803。影響ありとして記載：10.0.0以上、publication未満。対象の環境：32-bit Systems、x64-based Systems、ARM64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 1809。影響ありとして記載：10.0.0以上、publication未満。対象の環境：32-bit Systems、x64-based Systems、ARM64-based Systems\n・公式の対象表：Microsoft / Windows Server 2019。影響ありとして記載：10.0.0以上、publication未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2019 (Server Core installation)。影響ありとして記載：10.0.0以上、publication未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 1909。影響ありとして記載：10.0.0以上、publication未満。対象の環境：32-bit Systems、x64-based Systems、ARM64-based Systems\n・公式の対象表：Microsoft / Windows Server, version 1909 (Server Core installation)。影響ありとして記載：10.0.0以上、publication未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 2004。影響ありとして記載：10.0.0以上、publication未満。対象の環境：32-bit Systems、ARM64-based Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows Server version 2004。影響ありとして記載：10.0.0以上、publication未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 20H2。影響ありとして記載：10.0.0以上、publication未満。対象の環境：32-bit Systems、ARM64-based Systems\n・公式の対象表：Microsoft / Windows Server version 20H2。影響ありとして記載：10.0.0以上、publication未満。対象の環境：x64-based Systems\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2021-28310",
        "publicationCheckVersion": "2026-10-23.1",
        "sourceNotices": [],
        "automation": {
          "status": "ready",
          "lastAttempt": "2026-10-23T03:50:18.774Z",
          "lastSuccess": "2026-10-23T03:50:18.774Z",
          "sourceCheckedAt": "2026-10-23T02:43:16.517Z",
          "errorCode": null
        },
        "glossary": []
      }
    }
  ],
  "total": 274,
  "limit": 20,
  "offset": 240,
  "filters": {
    "product": "windows",
    "type": "all",
    "q": "",
    "page": 13
  },
  "pagination": {
    "page": 13,
    "pageSize": 20,
    "totalPages": 14
  },
  "sources": [
    {
      "name": "JVN",
      "status": "ok",
      "lastSuccess": "2026-10-23T06:17:49.165Z",
      "lastAttempt": "2026-10-23T06:17:49.165Z",
      "error": null,
      "recordCount": 20,
      "coverage": "JVNの新着・更新RSS。取得した記事を蓄積。JVN iPediaは含みません。",
      "cursor": null,
      "freshness": "fresh",
      "stale": false
    },
    {
      "name": "PHP Security",
      "status": "ok",
      "lastSuccess": "2026-10-23T06:17:49.165Z",
      "lastAttempt": "2026-10-23T06:17:49.165Z",
      "error": null,
      "recordCount": 66,
      "coverage": "PHP開発元の公開アドバイザリ。公開日が新しい順とは限らない直近100件を取得し蓄積。",
      "cursor": null,
      "freshness": "fresh",
      "stale": false
    },
    {
      "name": "CISA KEV",
      "status": "ok",
      "lastSuccess": "2026-10-23T06:17:49.165Z",
      "lastAttempt": "2026-10-23T06:17:49.165Z",
      "error": null,
      "recordCount": 1754,
      "coverage": "CISAの公式GitHubミラーにある悪用確認済み一覧全件。掲載日はKEV追加日。",
      "cursor": null,
      "freshness": "fresh",
      "stale": false
    },
    {
      "name": "NVD",
      "status": "ok",
      "lastSuccess": "2026-10-23T06:17:49.165Z",
      "lastAttempt": "2026-10-23T06:17:49.165Z",
      "error": null,
      "recordCount": 22,
      "coverage": "WordPressを含む脆弱性。初回は公開7日分、以降は全製品の変更分からWordPressと保存済みIDを追跡。停止後は最後に確認できた時刻から最大7日幅・500件ずつ再開し、残りは次回取得。 今回: 2026-10-23T05:02:49.729Z 〜 2026-10-23T06:17:49.165Z、全製品の変更 39/39件まで確認、対象22件反映。",
      "cursor": null,
      "freshness": "fresh",
      "stale": false
    },
    {
      "name": "CVE",
      "status": "ok",
      "lastSuccess": "2026-10-23T06:17:49.165Z",
      "lastAttempt": "2026-10-23T06:17:49.165Z",
      "error": null,
      "recordCount": 6,
      "coverage": "取得したPHP/JVN情報のうち、公開日が新しい最大6件のCVE公式レコードで条件を補足。",
      "cursor": null,
      "freshness": "fresh",
      "stale": false
    }
  ]
}