{ "schemaVersion": "1.0", "publisher": "脆弱性ナビ", "origin": "https://zeijaku.ittrip.xyz", "terms": [ { "name": "CVE Program", "url": "https://www.cve.org/legal/termsofuse", "notice": "CVE content is used subject to the CVE Program Terms of Use. CVE is a trademark of The MITRE Corporation.", "licenseText": "CVE content: Copyright The MITRE Corporation. CVE is a trademark of The MITRE Corporation.\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nDisclaimers: ALL DOCUMENTS AND THE INFORMATION CONTAINED THEREIN PROVIDED BY MITRE ARE PROVIDED ON AN \"AS IS\" BASIS AND THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE MITRE CORPORATION, ITS BOARD OF TRUSTEES, OFFICERS, AGENTS, AND EMPLOYEES, DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION THEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE." }, { "name": "NIST NVD", "url": "https://nvd.nist.gov/general/faq", "notice": "This product uses data from the NVD API but is not endorsed or certified by the NVD." }, { "name": "JVN", "url": "https://jvn.jp/contact/index.html", "notice": "出典：JVN（JPCERT/CC・IPA）。原文は各レコードの参照先を確認してください。" }, { "name": "CISA KEV", "url": "https://github.com/cisagov/kev-data", "notice": "Known Exploited Vulnerabilities catalog, CISA. CC0." } ], "records": [ { "id": "CVE-2026-20133", "aliases": [], "title": "Cisco Catalyst SD-WAN Manager：情報の漏えい", "summary": "Cisco Catalyst SD-WAN ソフトウェアの脆弱性により、認証されていないリモート攻撃者がファイルシステムの制限が不十分なため、影響を受けたシステム上の機密情報を閲覧できる可能性があります。また、netadmin 権限を持つ認証済みの攻撃者が対象システムの vshell にアクセスすると、基盤となるオペレーティングシステム上の機密情報を読み取ることができます。", "risk": "攻撃者がシステム上の機密情報を閲覧できる可能性があります。", "product": "Cisco Catalyst SD-WAN Manager", "category": "other", "component": "package", "severity": "medium", "cvss": 6.5, "cvssVersion": "3.1", "cvssSource": "cisco", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "affected": [ { "product": "Cisco Catalyst SD-WAN Manager", "range": "17.2.6" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "17.2.7" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "17.2.8" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "17.2.9" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "17.2.10" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "17.2.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "17.2.5" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.3.1.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.3.3.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.3.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.3.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.3.5" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.3.7" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.3.8" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.3.6.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.3.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.3.0" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.4.0.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.4.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.4.302" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.4.303" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.4.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.4.5" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.4.0" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.4.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.4.6" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "19.2.0" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "19.2.097" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "19.2.099" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "19.2.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "19.2.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "19.2.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "19.2.31" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "19.2.929" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "19.2.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.1.1.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.1.12" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.1.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.1.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.1.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "19.3.0" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "19.1.0" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "18.2.0" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.2.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.3.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.4.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.4.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.5" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.6" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.7" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.7.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.4.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.5.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.7.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.3.8" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.4.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.4.1.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.4.1.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.4.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.4.2.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.4.2.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.4.2.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.5.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.5.1.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.5.1.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.1.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.2.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.2.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.3.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.5" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.5.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.5.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.1.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.3.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.4.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.5.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.5.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.3.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.4.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.3.0.45" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.3.0.46" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.3.0.47" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.3.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.4.0.21" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.5.1.10" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.5.1.11" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.5.1.7" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.5.1.9" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.5.2.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.5.5" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.5.2.8" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.5.1.13" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.6" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.7" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.6.8" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.7.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.7.1.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.7.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.8.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.2.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.3.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.2.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.3.0.12" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.3.0.16" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.3.0.17" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.3.0.18" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.3.0.20" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.3.0.21" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.3.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.3.2_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.4_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.3.0.23" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.4.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.5" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.5.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.5.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.6" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.5.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.7" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.7.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.9.8" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.10.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.10.1.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.10.1.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.11.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.11.1.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.11.1.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.1_LI_Images" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.3.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.4.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.5" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.5.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.5.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.12.6" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.13.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.14.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.15.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.15.2" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.15.3" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.15.3.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.15.4" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.15.4.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.16.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.18.1" }, { "product": "Cisco Catalyst SD-WAN Manager", "range": "20.18.2" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20133.json", "label": "CVE：cisco" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20133", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-20133", "label": "CVE公式レコード" }, { "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-authbp-qwCX8D4v", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/ed-26-03-mitigate-vulnerabilities-cisco-sd-wan-systems", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/supplemental-direction-ed-26-03-hunt-and-hardening-guidance-cisco-sd-wan-systems", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-20133", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2026-02-25T16:13:56.017Z", "modifiedAt": "2026-04-22T15:31:56.704Z", "fetchedAt": "2026-10-23T02:43:47.321Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "A vulnerability in Cisco Catalyst SD-WAN Software could allow an unauthenticated, remote attacker to view sensitive information on an affected system.\r\n\r This vulnerability is due to insufficient file system restrictions. An authenticated attacker with netadmin privileges could exploit this vulnerability by accessing the vshell of an affected system. A successful exploit could allow the attacker to read sensitive information on the underlying operating system.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Cisco", "product": "Cisco Catalyst SD-WAN Manager", "versions": [ { "version": "17.2.6", "status": "affected" }, { "version": "17.2.7", "status": "affected" }, { "version": "17.2.8", "status": "affected" }, { "version": "17.2.9", "status": "affected" }, { "version": "17.2.10", "status": "affected" }, { "version": "17.2.4", "status": "affected" }, { "version": "17.2.5", "status": "affected" }, { "version": "18.3.1.1", "status": "affected" }, { "version": "18.3.3.1", "status": "affected" }, { "version": "18.3.3", "status": "affected" }, { "version": "18.3.4", "status": "affected" }, { "version": "18.3.5", "status": "affected" }, { "version": "18.3.7", "status": "affected" }, { "version": "18.3.8", "status": "affected" }, { "version": "18.3.6.1", "status": "affected" }, { "version": "18.3.1", "status": "affected" }, { "version": "18.3.0", "status": "affected" }, { "version": "18.4.0.1", "status": "affected" }, { "version": "18.4.3", "status": "affected" }, { "version": "18.4.302", "status": "affected" }, { "version": "18.4.303", "status": "affected" }, { "version": "18.4.4", "status": "affected" }, { "version": "18.4.5", "status": "affected" }, { "version": "18.4.0", "status": "affected" }, { "version": "18.4.1", "status": "affected" }, { "version": "18.4.6", "status": "affected" }, { "version": "19.2.0", "status": "affected" }, { "version": "19.2.097", "status": "affected" }, { "version": "19.2.099", "status": "affected" }, { "version": "19.2.1", "status": "affected" }, { "version": "19.2.2", "status": "affected" }, { "version": "19.2.3", "status": "affected" }, { "version": "19.2.31", "status": "affected" }, { "version": "19.2.929", "status": "affected" }, { "version": "19.2.4", "status": "affected" }, { "version": "20.1.1.1", "status": "affected" }, { "version": "20.1.12", "status": "affected" }, { "version": "20.1.1", "status": "affected" }, { "version": "20.1.2", "status": "affected" }, { "version": "20.1.3", "status": "affected" }, { "version": "19.3.0", "status": "affected" }, { "version": "19.1.0", "status": "affected" }, { "version": "18.2.0", "status": "affected" }, { "version": "20.3.1", "status": "affected" }, { "version": "20.3.2", "status": "affected" }, { "version": "20.3.2.1", "status": "affected" }, { "version": "20.3.3", "status": "affected" }, { "version": "20.3.3.1", "status": "affected" }, { "version": "20.3.4", "status": "affected" }, { "version": "20.3.4.1", "status": "affected" }, { "version": "20.3.4.2", "status": "affected" }, { "version": "20.3.5", "status": "affected" }, { "version": "20.3.6", "status": "affected" }, { "version": "20.3.7", "status": "affected" }, { "version": "20.3.7.1", "status": "affected" }, { "version": "20.3.4.3", "status": "affected" }, { "version": "20.3.5.1", "status": "affected" }, { "version": "20.3.7.2", "status": "affected" }, { "version": "20.3.8", "status": "affected" }, { "version": "20.4.1", "status": "affected" }, { "version": "20.4.1.1", "status": "affected" }, { "version": "20.4.1.2", "status": "affected" }, { "version": "20.4.2", "status": "affected" }, { "version": "20.4.2.2", "status": "affected" }, { "version": "20.4.2.1", "status": "affected" }, { "version": "20.4.2.3", "status": "affected" }, { "version": "20.5.1", "status": "affected" }, { "version": "20.5.1.2", "status": "affected" }, { "version": "20.5.1.1", "status": "affected" }, { "version": "20.6.1", "status": "affected" }, { "version": "20.6.1.1", "status": "affected" }, { "version": "20.6.2.1", "status": "affected" }, { "version": "20.6.2.2", "status": "affected" }, { "version": "20.6.2", "status": "affected" }, { "version": "20.6.3", "status": "affected" }, { "version": "20.6.3.1", "status": "affected" }, { "version": "20.6.4", "status": "affected" }, { "version": "20.6.5", "status": "affected" }, { "version": "20.6.5.1", "status": "affected" }, { "version": "20.6.5.3", "status": "affected" }, { "version": "20.6.1.2", "status": "affected" }, { "version": "20.6.3.2", "status": "affected" }, { "version": "20.6.4.1", "status": "affected" }, { "version": "20.6.5.2", "status": "affected" }, { "version": "20.6.5.4", "status": "affected" }, { "version": "20.6.3.3", "status": "affected" }, { "version": "20.6.4.2", "status": "affected" }, { "version": "20.6.3.0.45", "status": "affected" }, { "version": "20.6.3.0.46", "status": "affected" }, { "version": "20.6.3.0.47", "status": "affected" }, { "version": "20.6.3.4", "status": "affected" }, { "version": "20.6.4.0.21", "status": "affected" }, { "version": "20.6.5.1.10", "status": "affected" }, { "version": "20.6.5.1.11", "status": "affected" }, { "version": "20.6.5.1.7", "status": "affected" }, { "version": "20.6.5.1.9", "status": "affected" }, { "version": "20.6.5.2.4", "status": "affected" }, { "version": "20.6.5.5", "status": "affected" }, { "version": "20.6.5.2.8", "status": "affected" }, { "version": "20.6.5.1.13", "status": "affected" }, { "version": "20.6.6", "status": "affected" }, { "version": "20.6.7", "status": "affected" }, { "version": "20.6.8", "status": "affected" }, { "version": "20.7.1", "status": "affected" }, { "version": "20.7.1.1", "status": "affected" }, { "version": "20.7.2", "status": "affected" }, { "version": "20.8.1", "status": "affected" }, { "version": "20.9.1", "status": "affected" }, { "version": "20.9.2", "status": "affected" }, { "version": "20.9.2.1", "status": "affected" }, { "version": "20.9.3", "status": "affected" }, { "version": "20.9.3.1", "status": "affected" }, { "version": "20.9.2.3", "status": "affected" }, { "version": "20.9.3.0.12", "status": "affected" }, { "version": "20.9.3.0.16", "status": "affected" }, { "version": "20.9.3.0.17", "status": "affected" }, { "version": "20.9.3.0.18", "status": "affected" }, { "version": "20.9.3.0.20", "status": "affected" }, { "version": "20.9.3.0.21", "status": "affected" }, { "version": "20.9.3.2", "status": "affected" }, { "version": "20.9.3.2_LI_Images", "status": "affected" }, { "version": "20.9.4", "status": "affected" }, { "version": "20.9.4_LI_Images", "status": "affected" }, { "version": "20.9.3.0.23", "status": "affected" }, { "version": "20.9.4.1", "status": "affected" }, { "version": "20.9.5", "status": "affected" }, { "version": "20.9.5.1", "status": "affected" }, { "version": "20.9.5.2", "status": "affected" }, { "version": "20.9.6", "status": "affected" }, { "version": "20.9.5.3", "status": "affected" }, { "version": "20.9.7", "status": "affected" }, { "version": "20.9.7.1", "status": "affected" }, { "version": "20.9.8", "status": "affected" }, { "version": "20.10.1", "status": "affected" }, { "version": "20.10.1.1", "status": "affected" }, { "version": "20.10.1.2", "status": "affected" }, { "version": "20.11.1", "status": "affected" }, { "version": "20.11.1.1", "status": "affected" }, { "version": "20.11.1.2", "status": "affected" }, { "version": "20.12.1", "status": "affected" }, { "version": "20.12.1_LI_Images", "status": "affected" }, { "version": "20.12.2", "status": "affected" }, { "version": "20.12.3", "status": "affected" }, { "version": "20.12.3.1", "status": "affected" }, { "version": "20.12.4", "status": "affected" }, { "version": "20.12.4.1", "status": "affected" }, { "version": "20.12.5", "status": "affected" }, { "version": "20.12.5.1", "status": "affected" }, { "version": "20.12.5.2", "status": "affected" }, { "version": "20.12.6", "status": "affected" }, { "version": "20.13.1", "status": "affected" }, { "version": "20.14.1", "status": "affected" }, { "version": "20.15.1", "status": "affected" }, { "version": "20.15.2", "status": "affected" }, { "version": "20.15.3", "status": "affected" }, { "version": "20.15.3.1", "status": "affected" }, { "version": "20.15.4", "status": "affected" }, { "version": "20.15.4.1", "status": "affected" }, { "version": "20.16.1", "status": "affected" }, { "version": "20.18.1", "status": "affected" }, { "version": "20.18.2", "status": "affected" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-20133", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20133.json", "fetchedAt": "2026-10-23T02:43:47.321Z", "publishedAt": "2026-02-25T16:13:56.017Z", "modifiedAt": "2026-04-22T15:31:56.704Z", "state": "published", "provider": "cisco", "title": "", "descriptions": [ { "lang": "en", "value": "A vulnerability in Cisco Catalyst SD-WAN Software could allow an unauthenticated, remote attacker to view sensitive information on an affected system.\r\n\r This vulnerability is due to insufficient file system restrictions. An authenticated attacker with netadmin privileges could exploit this vulnerability by accessing the vshell of an affected system. A successful exploit could allow the attacker to read sensitive information on the underlying operating system.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "Cisco", "product": "Cisco Catalyst SD-WAN Manager", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "17.2.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": "17.2.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/2", "version": "17.2.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/3", "version": "17.2.9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/4", "version": "17.2.10", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/5", "version": "17.2.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/6", "version": "17.2.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/7", "version": "18.3.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/8", "version": "18.3.3.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/9", "version": "18.3.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/10", "version": "18.3.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/11", "version": "18.3.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/12", "version": "18.3.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/13", "version": "18.3.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/14", "version": "18.3.6.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/15", "version": "18.3.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/16", "version": "18.3.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/17", "version": "18.4.0.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/18", "version": "18.4.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/19", "version": "18.4.302", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/20", "version": "18.4.303", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/21", "version": "18.4.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/22", "version": "18.4.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/23", "version": "18.4.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/24", "version": "18.4.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/25", "version": "18.4.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/26", "version": "19.2.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/27", "version": "19.2.097", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/28", "version": "19.2.099", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/29", "version": "19.2.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/30", "version": "19.2.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/31", "version": "19.2.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/32", "version": "19.2.31", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/33", "version": "19.2.929", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/34", "version": "19.2.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/35", "version": "20.1.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/36", "version": "20.1.12", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/37", "version": "20.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/38", "version": "20.1.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/39", "version": "20.1.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/40", "version": "19.3.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/41", "version": "19.1.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/42", "version": "18.2.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/43", "version": "20.3.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/44", "version": "20.3.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/45", "version": "20.3.2.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/46", "version": "20.3.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/47", "version": "20.3.3.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/48", "version": "20.3.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/49", "version": "20.3.4.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/50", "version": "20.3.4.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/51", "version": "20.3.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/52", "version": "20.3.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/53", "version": "20.3.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/54", "version": "20.3.7.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/55", "version": "20.3.4.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/56", "version": "20.3.5.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/57", "version": "20.3.7.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/58", "version": "20.3.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/59", "version": "20.4.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/60", "version": "20.4.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/61", "version": "20.4.1.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/62", "version": "20.4.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/63", "version": "20.4.2.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/64", "version": "20.4.2.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/65", "version": "20.4.2.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/66", "version": "20.5.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/67", "version": "20.5.1.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/68", "version": "20.5.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/69", "version": "20.6.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/70", "version": "20.6.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/71", "version": "20.6.2.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/72", "version": "20.6.2.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/73", "version": "20.6.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/74", "version": "20.6.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/75", "version": "20.6.3.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/76", "version": "20.6.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/77", "version": "20.6.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/78", "version": "20.6.5.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/79", "version": "20.6.5.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/80", "version": "20.6.1.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/81", "version": "20.6.3.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/82", "version": "20.6.4.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/83", "version": "20.6.5.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/84", "version": "20.6.5.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/85", "version": "20.6.3.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/86", "version": "20.6.4.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/87", "version": "20.6.3.0.45", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/88", "version": "20.6.3.0.46", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/89", "version": "20.6.3.0.47", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/90", "version": "20.6.3.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/91", "version": "20.6.4.0.21", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/92", "version": "20.6.5.1.10", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/93", "version": "20.6.5.1.11", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/94", "version": "20.6.5.1.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/95", "version": "20.6.5.1.9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/96", "version": "20.6.5.2.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/97", "version": "20.6.5.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/98", "version": "20.6.5.2.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/99", "version": "20.6.5.1.13", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/100", "version": "20.6.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/101", "version": "20.6.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/102", "version": "20.6.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/103", "version": "20.7.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/104", "version": "20.7.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/105", "version": "20.7.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/106", "version": "20.8.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/107", "version": "20.9.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/108", "version": "20.9.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/109", "version": "20.9.2.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/110", "version": "20.9.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/111", "version": "20.9.3.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/112", "version": "20.9.2.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/113", "version": "20.9.3.0.12", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/114", "version": "20.9.3.0.16", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/115", "version": "20.9.3.0.17", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/116", "version": "20.9.3.0.18", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/117", "version": "20.9.3.0.20", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/118", "version": "20.9.3.0.21", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/119", "version": "20.9.3.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/120", "version": "20.9.3.2_LI_Images", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/121", "version": "20.9.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/122", "version": "20.9.4_LI_Images", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/123", "version": "20.9.3.0.23", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/124", "version": "20.9.4.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/125", "version": "20.9.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/126", "version": "20.9.5.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/127", "version": "20.9.5.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/128", "version": "20.9.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/129", "version": "20.9.5.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/130", "version": "20.9.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/131", "version": "20.9.7.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/132", "version": "20.9.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/133", "version": "20.10.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/134", "version": "20.10.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/135", "version": "20.10.1.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/136", "version": "20.11.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/137", "version": "20.11.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/138", "version": "20.11.1.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/139", "version": "20.12.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/140", "version": "20.12.1_LI_Images", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/141", "version": "20.12.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/142", "version": "20.12.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/143", "version": "20.12.3.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/144", "version": "20.12.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/145", "version": "20.12.4.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/146", "version": "20.12.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/147", "version": "20.12.5.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/148", "version": "20.12.5.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/149", "version": "20.12.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/150", "version": "20.13.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/151", "version": "20.14.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/152", "version": "20.15.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/153", "version": "20.15.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/154", "version": "20.15.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/155", "version": "20.15.3.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/156", "version": "20.15.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/157", "version": "20.15.4.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/158", "version": "20.16.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/159", "version": "20.18.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/160", "version": "20.18.2", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [ { "lang": "en", "value": "In April 2026, the Cisco PSIRT became aware of active exploitation of the vulnerability that is described in CVE-2026-20133. Cisco strongly recommends that customers upgrade to a fixed software release to remediate these vulnerabilities.", "sourcePath": "/containers/cna/exploits/0/value" } ], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-200", "lang": "en", "description": "Exposure of Sensitive Information to an Unauthorized Actor", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "baseScore": 6.5, "baseSeverity": "MEDIUM", "provider": "cisco", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-authbp-qwCX8D4v", "label": "cisco-sa-sdwan-authbp-qwCX8D4v", "tags": [], "provider": "cisco", "sourcePath": "/containers/cna/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-20133", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20133.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Cisco\",\"product\":\"Cisco Catalyst SD-WAN Manager\",\"versions\":[{\"version\":\"17.2.6\",\"status\":\"affected\"},{\"version\":\"17.2.7\",\"status\":\"affected\"},{\"version\":\"17.2.8\",\"status\":\"affected\"},{\"version\":\"17.2.9\",\"status\":\"affected\"},{\"version\":\"17.2.10\",\"status\":\"affected\"},{\"version\":\"17.2.4\",\"status\":\"affected\"},{\"version\":\"17.2.5\",\"status\":\"affected\"},{\"version\":\"18.3.1.1\",\"status\":\"affected\"},{\"version\":\"18.3.3.1\",\"status\":\"affected\"},{\"version\":\"18.3.3\",\"status\":\"affected\"},{\"version\":\"18.3.4\",\"status\":\"affected\"},{\"version\":\"18.3.5\",\"status\":\"affected\"},{\"version\":\"18.3.7\",\"status\":\"affected\"},{\"version\":\"18.3.8\",\"status\":\"affected\"},{\"version\":\"18.3.6.1\",\"status\":\"affected\"},{\"version\":\"18.3.1\",\"status\":\"affected\"},{\"version\":\"18.3.0\",\"status\":\"affected\"},{\"version\":\"18.4.0.1\",\"status\":\"affected\"},{\"version\":\"18.4.3\",\"status\":\"affected\"},{\"version\":\"18.4.302\",\"status\":\"affected\"},{\"version\":\"18.4.303\",\"status\":\"affected\"},{\"version\":\"18.4.4\",\"status\":\"affected\"},{\"version\":\"18.4.5\",\"status\":\"affected\"},{\"version\":\"18.4.0\",\"status\":\"affected\"},{\"version\":\"18.4.1\",\"status\":\"affected\"},{\"version\":\"18.4.6\",\"status\":\"affected\"},{\"version\":\"19.2.0\",\"status\":\"affected\"},{\"version\":\"19.2.097\",\"status\":\"affected\"},{\"version\":\"19.2.099\",\"status\":\"affected\"},{\"version\":\"19.2.1\",\"status\":\"affected\"},{\"version\":\"19.2.2\",\"status\":\"affected\"},{\"version\":\"19.2.3\",\"status\":\"affected\"},{\"version\":\"19.2.31\",\"status\":\"affected\"},{\"version\":\"19.2.929\",\"status\":\"affected\"},{\"version\":\"19.2.4\",\"status\":\"affected\"},{\"version\":\"20.1.1.1\",\"status\":\"affected\"},{\"version\":\"20.1.12\",\"status\":\"affected\"},{\"version\":\"20.1.1\",\"status\":\"affected\"},{\"version\":\"20.1.2\",\"status\":\"affected\"},{\"version\":\"20.1.3\",\"status\":\"affected\"},{\"version\":\"19.3.0\",\"status\":\"affected\"},{\"version\":\"19.1.0\",\"status\":\"affected\"},{\"version\":\"18.2.0\",\"status\":\"affected\"},{\"version\":\"20.3.1\",\"status\":\"affected\"},{\"version\":\"20.3.2\",\"status\":\"affected\"},{\"version\":\"20.3.2.1\",\"status\":\"affected\"},{\"version\":\"20.3.3\",\"status\":\"affected\"},{\"version\":\"20.3.3.1\",\"status\":\"affected\"},{\"version\":\"20.3.4\",\"status\":\"affected\"},{\"version\":\"20.3.4.1\",\"status\":\"affected\"},{\"version\":\"20.3.4.2\",\"status\":\"affected\"},{\"version\":\"20.3.5\",\"status\":\"affected\"},{\"version\":\"20.3.6\",\"status\":\"affected\"},{\"version\":\"20.3.7\",\"status\":\"affected\"},{\"version\":\"20.3.7.1\",\"status\":\"affected\"},{\"version\":\"20.3.4.3\",\"status\":\"affected\"},{\"version\":\"20.3.5.1\",\"status\":\"affected\"},{\"version\":\"20.3.7.2\",\"status\":\"affected\"},{\"version\":\"20.3.8\",\"status\":\"affected\"},{\"version\":\"20.4.1\",\"status\":\"affected\"},{\"version\":\"20.4.1.1\",\"status\":\"affected\"},{\"version\":\"20.4.1.2\",\"status\":\"affected\"},{\"version\":\"20.4.2\",\"status\":\"affected\"},{\"version\":\"20.4.2.2\",\"status\":\"affected\"},{\"version\":\"20.4.2.1\",\"status\":\"affected\"},{\"version\":\"20.4.2.3\",\"status\":\"affected\"},{\"version\":\"20.5.1\",\"status\":\"affected\"},{\"version\":\"20.5.1.2\",\"status\":\"affected\"},{\"version\":\"20.5.1.1\",\"status\":\"affected\"},{\"version\":\"20.6.1\",\"status\":\"affected\"},{\"version\":\"20.6.1.1\",\"status\":\"affected\"},{\"version\":\"20.6.2.1\",\"status\":\"affected\"},{\"version\":\"20.6.2.2\",\"status\":\"affected\"},{\"version\":\"20.6.2\",\"status\":\"affected\"},{\"version\":\"20.6.3\",\"status\":\"affected\"},{\"version\":\"20.6.3.1\",\"status\":\"affected\"},{\"version\":\"20.6.4\",\"status\":\"affected\"},{\"version\":\"20.6.5\",\"status\":\"affected\"},{\"version\":\"20.6.5.1\",\"status\":\"affected\"},{\"version\":\"20.6.5.3\",\"status\":\"affected\"},{\"version\":\"20.6.1.2\",\"status\":\"affected\"},{\"version\":\"20.6.3.2\",\"status\":\"affected\"},{\"version\":\"20.6.4.1\",\"status\":\"affected\"},{\"version\":\"20.6.5.2\",\"status\":\"affected\"},{\"version\":\"20.6.5.4\",\"status\":\"affected\"},{\"version\":\"20.6.3.3\",\"status\":\"affected\"},{\"version\":\"20.6.4.2\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.45\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.46\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.47\",\"status\":\"affected\"},{\"version\":\"20.6.3.4\",\"status\":\"affected\"},{\"version\":\"20.6.4.0.21\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.10\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.11\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.7\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.9\",\"status\":\"affected\"},{\"version\":\"20.6.5.2.4\",\"status\":\"affected\"},{\"version\":\"20.6.5.5\",\"status\":\"affected\"},{\"version\":\"20.6.5.2.8\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.13\",\"status\":\"affected\"},{\"version\":\"20.6.6\",\"status\":\"affected\"},{\"version\":\"20.6.7\",\"status\":\"affected\"},{\"version\":\"20.6.8\",\"status\":\"affected\"},{\"version\":\"20.7.1\",\"status\":\"affected\"},{\"version\":\"20.7.1.1\",\"status\":\"affected\"},{\"version\":\"20.7.2\",\"status\":\"affected\"},{\"version\":\"20.8.1\",\"status\":\"affected\"},{\"version\":\"20.9.1\",\"status\":\"affected\"},{\"version\":\"20.9.2\",\"status\":\"affected\"},{\"version\":\"20.9.2.1\",\"status\":\"affected\"},{\"version\":\"20.9.3\",\"status\":\"affected\"},{\"version\":\"20.9.3.1\",\"status\":\"affected\"},{\"version\":\"20.9.2.3\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.12\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.16\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.17\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.18\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.20\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.21\",\"status\":\"affected\"},{\"version\":\"20.9.3.2\",\"status\":\"affected\"},{\"version\":\"20.9.3.2_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.4\",\"status\":\"affected\"},{\"version\":\"20.9.4_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.23\",\"status\":\"affected\"},{\"version\":\"20.9.4.1\",\"status\":\"affected\"},{\"version\":\"20.9.5\",\"status\":\"affected\"},{\"version\":\"20.9.5.1\",\"status\":\"affected\"},{\"version\":\"20.9.5.2\",\"status\":\"affected\"},{\"version\":\"20.9.6\",\"status\":\"affected\"},{\"version\":\"20.9.5.3\",\"status\":\"affected\"},{\"version\":\"20.9.7\",\"status\":\"affected\"},{\"version\":\"20.9.7.1\",\"status\":\"affected\"},{\"version\":\"20.9.8\",\"status\":\"affected\"},{\"version\":\"20.10.1\",\"status\":\"affected\"},{\"version\":\"20.10.1.1\",\"status\":\"affected\"},{\"version\":\"20.10.1.2\",\"status\":\"affected\"},{\"version\":\"20.11.1\",\"status\":\"affected\"},{\"version\":\"20.11.1.1\",\"status\":\"affected\"},{\"version\":\"20.11.1.2\",\"status\":\"affected\"},{\"version\":\"20.12.1\",\"status\":\"affected\"},{\"version\":\"20.12.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.2\",\"status\":\"affected\"},{\"version\":\"20.12.3\",\"status\":\"affected\"},{\"version\":\"20.12.3.1\",\"status\":\"affected\"},{\"version\":\"20.12.4\",\"status\":\"affected\"},{\"version\":\"20.12.4.1\",\"status\":\"affected\"},{\"version\":\"20.12.5\",\"status\":\"affected\"},{\"version\":\"20.12.5.1\",\"status\":\"affected\"},{\"version\":\"20.12.5.2\",\"status\":\"affected\"},{\"version\":\"20.12.6\",\"status\":\"affected\"},{\"version\":\"20.13.1\",\"status\":\"affected\"},{\"version\":\"20.14.1\",\"status\":\"affected\"},{\"version\":\"20.15.1\",\"status\":\"affected\"},{\"version\":\"20.15.2\",\"status\":\"affected\"},{\"version\":\"20.15.3\",\"status\":\"affected\"},{\"version\":\"20.15.3.1\",\"status\":\"affected\"},{\"version\":\"20.15.4\",\"status\":\"affected\"},{\"version\":\"20.15.4.1\",\"status\":\"affected\"},{\"version\":\"20.16.1\",\"status\":\"affected\"},{\"version\":\"20.18.1\",\"status\":\"affected\"},{\"version\":\"20.18.2\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20133.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "A vulnerability in Cisco Catalyst SD-WAN Software could allow an unauthenticated, remote attacker to view sensitive information on an affected system.\r\n\r This vulnerability is due to insufficient file system restrictions. An authenticated attacker with netadmin privileges could exploit this vulnerability by accessing the vshell of an affected system. A successful exploit could allow the attacker to read sensitive information on the underlying operating system.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/exploits/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20133.json", "sourcePath": "/containers/cna/exploits/0/value", "text": "In April 2026, the Cisco PSIRT became aware of active exploitation of the vulnerability that is described in CVE-2026-20133. Cisco strongly recommends that customers upgrade to a fixed software release to remediate these vulnerabilities.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20133.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"description\":\"Exposure of Sensitive Information to an Unauthorized Actor\",\"type\":\"cwe\",\"cweId\":\"CWE-200\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20133.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N\",\"baseScore\":6.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-04-22T15:31:56.704Z", "fetchedAt": "2026-10-23T02:43:47.321Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-04-20T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Please adhere to CISA’s guidelines to assess exposure and mitigate risks associated with Cisco SD-WAN devices as outlines in CISA’s Emergency Directive 26-03 (URL listed below in Notes) and CISA’s “Hunt & Hardening Guidance for Cisco SD-WAN Devices (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.", "sourceSummary": "Cisco Catalyst SD-WAN Managerに情報の漏えいに関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "本来公開しない情報を読み取られる可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:24:11.703Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "e51a4a2b05d8ce60a3d507c1641d31ec4e33fcad37f9e47a5932c98d643b9c1d", "sourceModifiedAt": "2026-04-22T15:31:56.704Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Cisco Catalyst SD-WAN ソフトウェアの脆弱性により、認証されていないリモート攻撃者がファイルシステムの制限が不十分なため、影響を受けたシステム上の機密情報を閲覧できる可能性があります。また、netadmin 権限を持つ認証済みの攻撃者が対象システムの vshell にアクセスすると、基盤となるオペレーティングシステム上の機密情報を読み取ることができます。", "risk": "攻撃者がシステム上の機密情報を閲覧できる可能性があります。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "認証されていないリモート攻撃者がこの脆弱性を利用できる。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20133.json" ], "evidenceIds": [ "E1" ] }, { "text": "netadmin 権限を持つ認証済みの攻撃者が vshell にアクセスすることでこの脆弱性を利用できる。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20133.json" ], "evidenceIds": [ "E1" ] }, { "text": "公式の対象表：Cisco / Cisco Catalyst SD-WAN Manager。影響ありとして記載：17.2.6。影響ありとして記載：17.2.7。影響ありとして記載：17.2.8。影響ありとして記載：17.2.9。影響ありとして記載：17.2.10。影響ありとして記載：17.2.4。影響ありとして記載：17.2.5。影響ありとして記載：18.3.1.1。影響ありとして記載：18.3.3.1。影響ありとして記載：18.3.3。影響ありとして記載：18.3.4。影響ありとして記載：18.3.5。影響ありとして記載：18.3.7。影響ありとして記載：18.3.8。影響ありとして記載：18.3.6.1。影響ありとして記載：18.3.1。影響ありとして記載：18.3.0。影響ありとして記載：18.4.0.1。影響ありとして記載：18.4.3。影響ありとして記載：18.4.302。影響ありとして記載：18.4.303。影響ありとして記載：18.4.4。影響ありとして記載：18.4.5。影響ありとして記載：18.4.0。影響ありとして記載：18.4.1。影響ありとして記載：18.4.6。影響ありとして記載：19.2.0。影響ありとして記載：19.2.097。影響ありとして記載：19.2.099。影響ありとして記載：19.2.1。影響ありとして記載：19.2.2。影響ありとして記載：19.2.3。影響ありとして記載：19.2.31。影響ありとして記載：19.2.929。影響ありとして記載：19.2.4。影響ありとして記載：20.1.1.1。影響ありとして記載：20.1.12。影響ありとして記載：20.1.1。影響ありとして記載：20.1.2。影響ありとして記載：20.1.3。影響ありとして記載：19.3.0。影響ありとして記載：19.1.0。影響ありとして記載：18.2.0。影響ありとして記載：20.3.1。影響ありとして記載：20.3.2。影響ありとして記載：20.3.2.1。影響ありとして記載：20.3.3。影響ありとして記載：20.3.3.1。影響ありとして記載：20.3.4。影響ありとして記載：20.3.4.1。影響ありとして記載：20.3.4.2。影響ありとして記載：20.3.5。影響ありとして記載：20.3.6。影響ありとして記載：20.3.7。影響ありとして記載：20.3.7.1。影響ありとして記載：20.3.4.3。影響ありとして記載：20.3.5.1。影響ありとして記載：20.3.7.2。影響ありとして記載：20.3.8。影響ありとして記載：20.4.1。影響ありとして記載：20.4.1.1。影響ありとして記載：20.4.1.2。影響ありとして記載：20.4.2。影響ありとして記載：20.4.2.2。影響ありとして記載：20.4.2.1。影響ありとして記載：20.4.2.3。影響ありとして記載：20.5.1。影響ありとして記載：20.5.1.2。影響ありとして記載：20.5.1.1。影響ありとして記載：20.6.1。影響ありとして記載：20.6.1.1。影響ありとして記載：20.6.2.1。影響ありとして記載：20.6.2.2。影響ありとして記載：20.6.2。影響ありとして記載：20.6.3。影響ありとして記載：20.6.3.1。影響ありとして記載：20.6.4。影響ありとして記載：20.6.5。影響ありとして記載：20.6.5.1。影響ありとして記載：20.6.5.3。影響ありとして記載：20.6.1.2。影響ありとして記載：20.6.3.2。影響ありとして記載：20.6.4.1。影響ありとして記載：20.6.5.2。影響ありとして記載：20.6.5.4。影響ありとして記載：20.6.3.3。影響ありとして記載：20.6.4.2。影響ありとして記載：20.6.3.0.45。影響ありとして記載：20.6.3.0.46。影響ありとして記載：20.6.3.0.47。影響ありとして記載：20.6.3.4。影響ありとして記載：20.6.4.0.21。影響ありとして記載：20.6.5.1.10。影響ありとして記載：20.6.5.1.11。影響ありとして記載：20.6.5.1.7。影響ありとして記載：20.6.5.1.9。影響ありとして記載：20.6.5.2.4。影響ありとして記載：20.6.5.5。影響ありとして記載：20.6.5.2.8。影響ありとして記載：20.6.5.1.13。影響ありとして記載：20.6.6。影響ありとして記載：20.6.7。影響ありとして記載：20.6.8。影響ありとして記載：20.7.1。影響ありとして記載：20.7.1.1。影響ありとして記載：20.7.2。影響ありとして記載：20.8.1。影響ありとして記載：20.9.1。影響ありとして記載：20.9.2。影響ありとして記載：20.9.2.1。影響ありとして記載：20.9.3。影響ありとして記載：20.9.3.1。影響ありとして記載：20.9.2.3。影響ありとして記載：20.9.3.0.12。影響ありとして記載：20.9.3.0.16。影響ありとして記載：20.9.3.0.17。影響ありとして記載：20.9.3.0.18。影響ありとして記載：20.9.3.0.20。影響ありとして記載：20.9.3.0.21。影響ありとして記載：20.9.3.2。影響ありとして記載：20.9.3.2_LI_Images。影響ありとして記載：20.9.4。影響ありとして記載：20.9.4_LI_Images。影響ありとして記載：20.9.3.0.23。影響ありとして記載：20.9.4.1。影響ありとして記載：20.9.5。影響ありとして記載：20.9.5.1。影響ありとして記載：20.9.5.2。影響ありとして記載：20.9.6。影響ありとして記載：20.9.5.3。影響ありとして記載：20.9.7。影響ありとして記載：20.9.7.1。影響ありとして記載：20.9.8。影響ありとして記載：20.10.1。影響ありとして記載：20.10.1.1。影響ありとして記載：20.10.1.2。影響ありとして記載：20.11.1。影響ありとして記載：20.11.1.1。影響ありとして記載：20.11.1.2。影響ありとして記載：20.12.1。影響ありとして記載：20.12.1_LI_Images。影響ありとして記載：20.12.2。影響ありとして記載：20.12.3。影響ありとして記載：20.12.3.1。影響ありとして記載：20.12.4。影響ありとして記載：20.12.4.1。影響ありとして記載：20.12.5。影響ありとして記載：20.12.5.1。影響ありとして記載：20.12.5.2。影響ありとして記載：20.12.6。影響ありとして記載：20.13.1。影響ありとして記載：20.14.1。影響ありとして記載：20.15.1。影響ありとして記載：20.15.2。影響ありとして記載：20.15.3。影響ありとして記載：20.15.3.1。影響ありとして記載：20.15.4。影響ありとして記載：20.15.4.1。影響ありとして記載：20.16.1。影響ありとして記載：20.18.1。影響ありとして記載：20.18.2。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20133.json" ], "evidenceIds": [ "E2" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20133" ], "evidenceIds": [ "E3" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20133.json" ], "evidenceIds": [ "E2" ] }, { "text": "「Cisco Catalyst SD-WAN Manager」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-20133", "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-authbp-qwCX8D4v", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20133", "https://www.cisa.gov/news-events/directives/ed-26-03-mitigate-vulnerabilities-cisco-sd-wan-systems", "https://www.cisa.gov/news-events/directives/supplemental-direction-ed-26-03-hunt-and-hardening-guidance-cisco-sd-wan-systems", "https://nvd.nist.gov/vuln/detail/CVE-2026-20133" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20133.json" ], "evidenceIds": [ "E2" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2026-20133", "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-authbp-qwCX8D4v", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20133", "https://www.cisa.gov/news-events/directives/ed-26-03-mitigate-vulnerabilities-cisco-sd-wan-systems", "https://www.cisa.gov/news-events/directives/supplemental-direction-ed-26-03-hunt-and-hardening-guidance-cisco-sd-wan-systems", "https://nvd.nist.gov/vuln/detail/CVE-2026-20133" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20133.json" ], "evidenceIds": [ "E2" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-20133", "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-authbp-qwCX8D4v", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20133", "https://www.cisa.gov/news-events/directives/ed-26-03-mitigate-vulnerabilities-cisco-sd-wan-systems", "https://www.cisa.gov/news-events/directives/supplemental-direction-ed-26-03-hunt-and-hardening-guidance-cisco-sd-wan-systems", "https://nvd.nist.gov/vuln/detail/CVE-2026-20133" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20133.json", "label": "CVE：cisco" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20133", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-20133", "label": "CVE公式レコード" }, { "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-authbp-qwCX8D4v", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/ed-26-03-mitigate-vulnerabilities-cisco-sd-wan-systems", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/supplemental-direction-ed-26-03-hunt-and-hardening-guidance-cisco-sd-wan-systems", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-20133", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20133.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "A vulnerability in Cisco Catalyst SD-WAN Software could allow an unauthenticated, remote attacker to view sensitive information on an affected system.\r\n\r This vulnerability is due to insufficient file system restrictions. An authenticated attacker with netadmin privileges could exploit this vulnerability by accessing the vshell of an affected system. A successful exploit could allow the attacker to read sensitive information on the underlying operating system.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20133.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Cisco\",\"product\":\"Cisco Catalyst SD-WAN Manager\",\"versions\":[{\"version\":\"17.2.6\",\"status\":\"affected\"},{\"version\":\"17.2.7\",\"status\":\"affected\"},{\"version\":\"17.2.8\",\"status\":\"affected\"},{\"version\":\"17.2.9\",\"status\":\"affected\"},{\"version\":\"17.2.10\",\"status\":\"affected\"},{\"version\":\"17.2.4\",\"status\":\"affected\"},{\"version\":\"17.2.5\",\"status\":\"affected\"},{\"version\":\"18.3.1.1\",\"status\":\"affected\"},{\"version\":\"18.3.3.1\",\"status\":\"affected\"},{\"version\":\"18.3.3\",\"status\":\"affected\"},{\"version\":\"18.3.4\",\"status\":\"affected\"},{\"version\":\"18.3.5\",\"status\":\"affected\"},{\"version\":\"18.3.7\",\"status\":\"affected\"},{\"version\":\"18.3.8\",\"status\":\"affected\"},{\"version\":\"18.3.6.1\",\"status\":\"affected\"},{\"version\":\"18.3.1\",\"status\":\"affected\"},{\"version\":\"18.3.0\",\"status\":\"affected\"},{\"version\":\"18.4.0.1\",\"status\":\"affected\"},{\"version\":\"18.4.3\",\"status\":\"affected\"},{\"version\":\"18.4.302\",\"status\":\"affected\"},{\"version\":\"18.4.303\",\"status\":\"affected\"},{\"version\":\"18.4.4\",\"status\":\"affected\"},{\"version\":\"18.4.5\",\"status\":\"affected\"},{\"version\":\"18.4.0\",\"status\":\"affected\"},{\"version\":\"18.4.1\",\"status\":\"affected\"},{\"version\":\"18.4.6\",\"status\":\"affected\"},{\"version\":\"19.2.0\",\"status\":\"affected\"},{\"version\":\"19.2.097\",\"status\":\"affected\"},{\"version\":\"19.2.099\",\"status\":\"affected\"},{\"version\":\"19.2.1\",\"status\":\"affected\"},{\"version\":\"19.2.2\",\"status\":\"affected\"},{\"version\":\"19.2.3\",\"status\":\"affected\"},{\"version\":\"19.2.31\",\"status\":\"affected\"},{\"version\":\"19.2.929\",\"status\":\"affected\"},{\"version\":\"19.2.4\",\"status\":\"affected\"},{\"version\":\"20.1.1.1\",\"status\":\"affected\"},{\"version\":\"20.1.12\",\"status\":\"affected\"},{\"version\":\"20.1.1\",\"status\":\"affected\"},{\"version\":\"20.1.2\",\"status\":\"affected\"},{\"version\":\"20.1.3\",\"status\":\"affected\"},{\"version\":\"19.3.0\",\"status\":\"affected\"},{\"version\":\"19.1.0\",\"status\":\"affected\"},{\"version\":\"18.2.0\",\"status\":\"affected\"},{\"version\":\"20.3.1\",\"status\":\"affected\"},{\"version\":\"20.3.2\",\"status\":\"affected\"},{\"version\":\"20.3.2.1\",\"status\":\"affected\"},{\"version\":\"20.3.3\",\"status\":\"affected\"},{\"version\":\"20.3.3.1\",\"status\":\"affected\"},{\"version\":\"20.3.4\",\"status\":\"affected\"},{\"version\":\"20.3.4.1\",\"status\":\"affected\"},{\"version\":\"20.3.4.2\",\"status\":\"affected\"},{\"version\":\"20.3.5\",\"status\":\"affected\"},{\"version\":\"20.3.6\",\"status\":\"affected\"},{\"version\":\"20.3.7\",\"status\":\"affected\"},{\"version\":\"20.3.7.1\",\"status\":\"affected\"},{\"version\":\"20.3.4.3\",\"status\":\"affected\"},{\"version\":\"20.3.5.1\",\"status\":\"affected\"},{\"version\":\"20.3.7.2\",\"status\":\"affected\"},{\"version\":\"20.3.8\",\"status\":\"affected\"},{\"version\":\"20.4.1\",\"status\":\"affected\"},{\"version\":\"20.4.1.1\",\"status\":\"affected\"},{\"version\":\"20.4.1.2\",\"status\":\"affected\"},{\"version\":\"20.4.2\",\"status\":\"affected\"},{\"version\":\"20.4.2.2\",\"status\":\"affected\"},{\"version\":\"20.4.2.1\",\"status\":\"affected\"},{\"version\":\"20.4.2.3\",\"status\":\"affected\"},{\"version\":\"20.5.1\",\"status\":\"affected\"},{\"version\":\"20.5.1.2\",\"status\":\"affected\"},{\"version\":\"20.5.1.1\",\"status\":\"affected\"},{\"version\":\"20.6.1\",\"status\":\"affected\"},{\"version\":\"20.6.1.1\",\"status\":\"affected\"},{\"version\":\"20.6.2.1\",\"status\":\"affected\"},{\"version\":\"20.6.2.2\",\"status\":\"affected\"},{\"version\":\"20.6.2\",\"status\":\"affected\"},{\"version\":\"20.6.3\",\"status\":\"affected\"},{\"version\":\"20.6.3.1\",\"status\":\"affected\"},{\"version\":\"20.6.4\",\"status\":\"affected\"},{\"version\":\"20.6.5\",\"status\":\"affected\"},{\"version\":\"20.6.5.1\",\"status\":\"affected\"},{\"version\":\"20.6.5.3\",\"status\":\"affected\"},{\"version\":\"20.6.1.2\",\"status\":\"affected\"},{\"version\":\"20.6.3.2\",\"status\":\"affected\"},{\"version\":\"20.6.4.1\",\"status\":\"affected\"},{\"version\":\"20.6.5.2\",\"status\":\"affected\"},{\"version\":\"20.6.5.4\",\"status\":\"affected\"},{\"version\":\"20.6.3.3\",\"status\":\"affected\"},{\"version\":\"20.6.4.2\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.45\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.46\",\"status\":\"affected\"},{\"version\":\"20.6.3.0.47\",\"status\":\"affected\"},{\"version\":\"20.6.3.4\",\"status\":\"affected\"},{\"version\":\"20.6.4.0.21\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.10\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.11\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.7\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.9\",\"status\":\"affected\"},{\"version\":\"20.6.5.2.4\",\"status\":\"affected\"},{\"version\":\"20.6.5.5\",\"status\":\"affected\"},{\"version\":\"20.6.5.2.8\",\"status\":\"affected\"},{\"version\":\"20.6.5.1.13\",\"status\":\"affected\"},{\"version\":\"20.6.6\",\"status\":\"affected\"},{\"version\":\"20.6.7\",\"status\":\"affected\"},{\"version\":\"20.6.8\",\"status\":\"affected\"},{\"version\":\"20.7.1\",\"status\":\"affected\"},{\"version\":\"20.7.1.1\",\"status\":\"affected\"},{\"version\":\"20.7.2\",\"status\":\"affected\"},{\"version\":\"20.8.1\",\"status\":\"affected\"},{\"version\":\"20.9.1\",\"status\":\"affected\"},{\"version\":\"20.9.2\",\"status\":\"affected\"},{\"version\":\"20.9.2.1\",\"status\":\"affected\"},{\"version\":\"20.9.3\",\"status\":\"affected\"},{\"version\":\"20.9.3.1\",\"status\":\"affected\"},{\"version\":\"20.9.2.3\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.12\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.16\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.17\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.18\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.20\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.21\",\"status\":\"affected\"},{\"version\":\"20.9.3.2\",\"status\":\"affected\"},{\"version\":\"20.9.3.2_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.4\",\"status\":\"affected\"},{\"version\":\"20.9.4_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.9.3.0.23\",\"status\":\"affected\"},{\"version\":\"20.9.4.1\",\"status\":\"affected\"},{\"version\":\"20.9.5\",\"status\":\"affected\"},{\"version\":\"20.9.5.1\",\"status\":\"affected\"},{\"version\":\"20.9.5.2\",\"status\":\"affected\"},{\"version\":\"20.9.6\",\"status\":\"affected\"},{\"version\":\"20.9.5.3\",\"status\":\"affected\"},{\"version\":\"20.9.7\",\"status\":\"affected\"},{\"version\":\"20.9.7.1\",\"status\":\"affected\"},{\"version\":\"20.9.8\",\"status\":\"affected\"},{\"version\":\"20.10.1\",\"status\":\"affected\"},{\"version\":\"20.10.1.1\",\"status\":\"affected\"},{\"version\":\"20.10.1.2\",\"status\":\"affected\"},{\"version\":\"20.11.1\",\"status\":\"affected\"},{\"version\":\"20.11.1.1\",\"status\":\"affected\"},{\"version\":\"20.11.1.2\",\"status\":\"affected\"},{\"version\":\"20.12.1\",\"status\":\"affected\"},{\"version\":\"20.12.1_LI_Images\",\"status\":\"affected\"},{\"version\":\"20.12.2\",\"status\":\"affected\"},{\"version\":\"20.12.3\",\"status\":\"affected\"},{\"version\":\"20.12.3.1\",\"status\":\"affected\"},{\"version\":\"20.12.4\",\"status\":\"affected\"},{\"version\":\"20.12.4.1\",\"status\":\"affected\"},{\"version\":\"20.12.5\",\"status\":\"affected\"},{\"version\":\"20.12.5.1\",\"status\":\"affected\"},{\"version\":\"20.12.5.2\",\"status\":\"affected\"},{\"version\":\"20.12.6\",\"status\":\"affected\"},{\"version\":\"20.13.1\",\"status\":\"affected\"},{\"version\":\"20.14.1\",\"status\":\"affected\"},{\"version\":\"20.15.1\",\"status\":\"affected\"},{\"version\":\"20.15.2\",\"status\":\"affected\"},{\"version\":\"20.15.3\",\"status\":\"affected\"},{\"version\":\"20.15.3.1\",\"status\":\"affected\"},{\"version\":\"20.15.4\",\"status\":\"affected\"},{\"version\":\"20.15.4.1\",\"status\":\"affected\"},{\"version\":\"20.16.1\",\"status\":\"affected\"},{\"version\":\"20.18.1\",\"status\":\"affected\"},{\"version\":\"20.18.2\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E3", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20133", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2026-20133\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2026-20133（Cisco Catalyst SD-WAN Manager）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・認証されていないリモート攻撃者がこの脆弱性を利用できる。\n・netadmin 権限を持つ認証済みの攻撃者が vshell にアクセスすることでこの脆弱性を利用できる。\n・公式の対象表：Cisco / Cisco Catalyst SD-WAN Manager。影響ありとして記載：17.2.6。影響ありとして記載：17.2.7。影響ありとして記載：17.2.8。影響ありとして記載：17.2.9。影響ありとして記載：17.2.10。影響ありとして記載：17.2.4。影響ありとして記載：17.2.5。影響ありとして記載：18.3.1.1。影響ありとして記載：18.3.3.1。影響ありとして記載：18.3.3。影響ありとして記載：18.3.4。影響ありとして記載：18.3.5。影響ありとして記載：18.3.7。影響ありとして記載：18.3.8。影響ありとして記載：18.3.6.1。影響ありとして記載：18.3.1。影響ありとして記載：18.3.0。影響ありとして記載：18.4.0.1。影響ありとして記載：18.4.3。影響ありとして記載：18.4.302。影響ありとして記載：18.4.303。影響ありとして記載：18.4.4。影響ありとして記載：18.4.5。影響ありとして記載：18.4.0。影響ありとして記載：18.4.1。影響ありとして記載：18.4.6。影響ありとして記載：19.2.0。影響ありとして記載：19.2.097。影響ありとして記載：19.2.099。影響ありとして記載：19.2.1。影響ありとして記載：19.2.2。影響ありとして記載：19.2.3。影響ありとして記載：19.2.31。影響ありとして記載：19.2.929。影響ありとして記載：19.2.4。影響ありとして記載：20.1.1.1。影響ありとして記載：20.1.12。影響ありとして記載：20.1.1。影響ありとして記載：20.1.2。影響ありとして記載：20.1.3。影響ありとして記載：19.3.0。影響ありとして記載：19.1.0。影響ありとして記載：18.2.0。影響ありとして記載：20.3.1。影響ありとして記載：20.3.2。影響ありとして記載：20.3.2.1。影響ありとして記載：20.3.3。影響ありとして記載：20.3.3.1。影響ありとして記載：20.3.4。影響ありとして記載：20.3.4.1。影響ありとして記載：20.3.4.2。影響ありとして記載：20.3.5。影響ありとして記載：20.3.6。影響ありとして記載：20.3.7。影響ありとして記載：20.3.7.1。影響ありとして記載：20.3.4.3。影響ありとして記載：20.3.5.1。影響ありとして記載：20.3.7.2。影響ありとして記載：20.3.8。影響ありとして記載：20.4.1。影響ありとして記載：20.4.1.1。影響ありとして記載：20.4.1.2。影響ありとして記載：20.4.2。影響ありとして記載：20.4.2.2。影響ありとして記載：20.4.2.1。影響ありとして記載：20.4.2.3。影響ありとして記載：20.5.1。影響ありとして記載：20.5.1.2。影響ありとして記載：20.5.1.1。影響ありとして記載：20.6.1。影響ありとして記載：20.6.1.1。影響ありとして記載：20.6.2.1。影響ありとして記載：20.6.2.2。影響ありとして記載：20.6.2。影響ありとして記載：20.6.3。影響ありとして記載：20.6.3.1。影響ありとして記載：20.6.4。影響ありとして記載：20.6.5。影響ありとして記載：20.6.5.1。影響ありとして記載：20.6.5.3。影響ありとして記載：20.6.1.2。影響ありとして記載：20.6.3.2。影響ありとして記載：20.6.4.1。影響ありとして記載：20.6.5.2。影響ありとして記載：20.6.5.4。影響ありとして記載：20.6.3.3。影響ありとして記載：20.6.4.2。影響ありとして記載：20.6.3.0.45。影響ありとして記載：20.6.3.0.46。影響ありとして記載：20.6.3.0.47。影響ありとして記載：20.6.3.4。影響ありとして記載：20.6.4.0.21。影響ありとして記載：20.6.5.1.10。影響ありとして記載：20.6.5.1.11。影響ありとして記載：20.6.5.1.7。影響ありとして記載：20.6.5.1.9。影響ありとして記載：20.6.5.2.4。影響ありとして記載：20.6.5.5。影響ありとして記載：20.6.5.2.8。影響ありとして記載：20.6.5.1.13。影響ありとして記載：20.6.6。影響ありとして記載：20.6.7。影響ありとして記載：20.6.8。影響ありとして記載：20.7.1。影響ありとして記載：20.7.1.1。影響ありとして記載：20.7.2。影響ありとして記載：20.8.1。影響ありとして記載：20.9.1。影響ありとして記載：20.9.2。影響ありとして記載：20.9.2.1。影響ありとして記載：20.9.3。影響ありとして記載：20.9.3.1。影響ありとして記載：20.9.2.3。影響ありとして記載：20.9.3.0.12。影響ありとして記載：20.9.3.0.16。影響ありとして記載：20.9.3.0.17。影響ありとして記載：20.9.3.0.18。影響ありとして記載：20.9.3.0.20。影響ありとして記載：20.9.3.0.21。影響ありとして記載：20.9.3.2。影響ありとして記載：20.9.3.2_LI_Images。影響ありとして記載：20.9.4。影響ありとして記載：20.9.4_LI_Images。影響ありとして記載：20.9.3.0.23。影響ありとして記載：20.9.4.1。影響ありとして記載：20.9.5。影響ありとして記載：20.9.5.1。影響ありとして記載：20.9.5.2。影響ありとして記載：20.9.6。影響ありとして記載：20.9.5.3。影響ありとして記載：20.9.7。影響ありとして記載：20.9.7.1。影響ありとして記載：20.9.8。影響ありとして記載：20.10.1。影響ありとして記載：20.10.1.1。影響ありとして記載：20.10.1.2。影響ありとして記載：20.11.1。影響ありとして記載：20.11.1.1。影響ありとして記載：20.11.1.2。影響ありとして記載：20.12.1。影響ありとして記載：20.12.1_LI_Images。影響ありとして記載：20.12.2。影響ありとして記載：20.12.3。影響ありとして記載：20.12.3.1。影響ありとして記載：20.12.4。影響ありとして記載：20.12.4.1。影響ありとして記載：20.12.5。影響ありとして記載：20.12.5.1。影響ありとして記載：20.12.5.2。影響ありとして記載：20.12.6。影響ありとして記載：20.13.1。影響ありとして記載：20.14.1。影響ありとして記載：20.15.1。影響ありとして記載：20.15.2。影響ありとして記載：20.15.3。影響ありとして記載：20.15.3.1。影響ありとして記載：20.15.4。影響ありとして記載：20.15.4.1。影響ありとして記載：20.16.1。影響ありとして記載：20.18.1。影響ありとして記載：20.18.2。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-20133", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:24:11.703Z", "lastSuccess": "2026-10-23T03:24:11.703Z", "sourceCheckedAt": "2026-10-23T02:43:47.321Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2026-34197", "aliases": [], "title": "Apache ActiveMQ Broker / Apache ActiveMQ All / Apache ActiveMQ：コード実行", "summary": "認証されたユーザーが Jolokia の MBean を通じてリモートコード実行（RCE）を行える脆弱性です。Apache ActiveMQ Classic は Web コンソールの /api/jolokia/ で Jolokia JMX‑HTTP ブリッジを公開しており、デフォルトのアクセスポリシーはすべての ActiveMQ MBean（org.apache.activemq:*）に対して exec 操作を許可しています。攻撃者は認証された状態で、特別に作成した discovery URI を使い、VM トランスポートの brokerConfig パラメータにリモートの Spring XML アプリケーションコンテキストをロードさせます。Spring の ResourceXmlApplicationContext がすべてのシングルトン Bean をインスタンス化した後に BrokerService が設定を検証するため、Runtime.exec() などの Bean ファクトリメソッドを通じてブローカーの JVM 上で任意のコードが実行されます。", "risk": "攻撃者がブローカーの JVM 上で任意のコードを実行できるため、サーバー全体が制御される可能性があります。", "product": "Apache ActiveMQ Broker / Apache ActiveMQ All / Apache ActiveMQ", "category": "other", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": "apache", "cvssVector": null, "affected": [ { "product": "Apache ActiveMQ Broker", "range": "< 5.19.4" }, { "product": "Apache ActiveMQ Broker", "range": ">= 6.0.0 / < 6.2.3" }, { "product": "Apache ActiveMQ All", "range": "< 5.19.4" }, { "product": "Apache ActiveMQ All", "range": ">= 6.0.0 / < 6.2.3" }, { "product": "Apache ActiveMQ", "range": "< 5.19.4" }, { "product": "Apache ActiveMQ", "range": ">= 6.0.0 / < 6.2.3" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34197.json", "label": "CVE：apache" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-34197", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-34197", "label": "CVE公式レコード" }, { "url": "https://activemq.apache.org/security-advisories.data/CVE-2026-34197-announcement.txt", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34197", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2026-04-07T07:50:10.958Z", "modifiedAt": "2026-08-17T12:05:05.421Z", "fetchedAt": "2026-10-23T02:43:48.423Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "Improper Input Validation, Improper Control of Generation of Code ('Code Injection') vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ.\n\nApache ActiveMQ Classic exposes the Jolokia JMX-HTTP bridge at /api/jolokia/ on the web console. The default Jolokia access policy permits exec operations on all ActiveMQ MBeans (org.apache.activemq:*), including\nBrokerService.addNetworkConnector(String) and BrokerService.addConnector(String).\n\nAn authenticated attacker can invoke these operations with a crafted discovery URI that triggers the VM transport's brokerConfig parameter to load a remote Spring XML application context using ResourceXmlApplicationContext.\nBecause Spring's ResourceXmlApplicationContext instantiates all singleton beans before the BrokerService validates the configuration, arbitrary code execution occurs on the broker's JVM through bean factory methods such as Runtime.exec().\n\n\n\nThis issue affects Apache ActiveMQ Broker: before 5.19.4, from 6.0.0 before 6.2.3; Apache ActiveMQ All: before 5.19.4, from 6.0.0 before 6.2.3; Apache ActiveMQ: before 5.19.4, from 6.0.0 before 6.2.3.\n\n\n\nUsers are recommended to upgrade to version 5.19.4 or 6.2.3, which fixes the issue", "sourceTitle": "Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Authenticated users could perform RCE via Jolokia MBeans", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "collectionURL": "https://repo.maven.apache.org/maven2", "defaultStatus": "unaffected", "packageName": "org.apache.activemq:activemq-broker", "product": "Apache ActiveMQ Broker", "vendor": "Apache Software Foundation", "versions": [ { "lessThan": "5.19.4", "status": "affected", "version": "0", "versionType": "semver" }, { "lessThan": "6.2.3", "status": "affected", "version": "6.0.0", "versionType": "semver" } ] }, { "collectionURL": "https://repo.maven.apache.org/maven2", "defaultStatus": "unaffected", "packageName": "org.apache.activemq:activemq-all", "product": "Apache ActiveMQ All", "vendor": "Apache Software Foundation", "versions": [ { "lessThan": "5.19.4", "status": "affected", "version": "0", "versionType": "semver" }, { "lessThan": "6.2.3", "status": "affected", "version": "6.0.0", "versionType": "semver" } ] }, { "collectionURL": "https://repo.maven.apache.org/maven2", "defaultStatus": "unaffected", "packageName": "org.apache.activemq:apache-activemq", "product": "Apache ActiveMQ", "vendor": "Apache Software Foundation", "versions": [ { "lessThan": "5.19.4", "status": "affected", "version": "0", "versionType": "semver" }, { "lessThan": "6.2.3", "status": "affected", "version": "6.0.0", "versionType": "semver" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-34197", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34197.json", "fetchedAt": "2026-10-23T02:43:48.423Z", "publishedAt": "2026-04-07T07:50:10.958Z", "modifiedAt": "2026-08-17T12:05:05.421Z", "state": "published", "provider": "apache", "title": "Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Authenticated users could perform RCE via Jolokia MBeans", "descriptions": [ { "lang": "en", "value": "Improper Input Validation, Improper Control of Generation of Code ('Code Injection') vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ.\n\nApache ActiveMQ Classic exposes the Jolokia JMX-HTTP bridge at /api/jolokia/ on the web console. The default Jolokia access policy permits exec operations on all ActiveMQ MBeans (org.apache.activemq:*), including\nBrokerService.addNetworkConnector(String) and BrokerService.addConnector(String).\n\nAn authenticated attacker can invoke these operations with a crafted discovery URI that triggers the VM transport's brokerConfig parameter to load a remote Spring XML application context using ResourceXmlApplicationContext.\nBecause Spring's ResourceXmlApplicationContext instantiates all singleton beans before the BrokerService validates the configuration, arbitrary code execution occurs on the broker's JVM through bean factory methods such as Runtime.exec().\n\n\n\nThis issue affects Apache ActiveMQ Broker: before 5.19.4, from 6.0.0 before 6.2.3; Apache ActiveMQ All: before 5.19.4, from 6.0.0 before 6.2.3; Apache ActiveMQ: before 5.19.4, from 6.0.0 before 6.2.3.\n\n\n\nUsers are recommended to upgrade to version 5.19.4 or 6.2.3, which fixes the issue", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "Apache Software Foundation", "product": "Apache ActiveMQ Broker", "sourcePath": "/containers/cna/affected/0", "packageName": "org.apache.activemq:activemq-broker", "collectionURL": "https://repo.maven.apache.org/maven2", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "0", "lessThan": "5.19.4", "versionType": "semver", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": "6.0.0", "lessThan": "6.2.3", "versionType": "semver", "status": "affected" } ] }, { "vendor": "Apache Software Foundation", "product": "Apache ActiveMQ All", "sourcePath": "/containers/cna/affected/1", "packageName": "org.apache.activemq:activemq-all", "collectionURL": "https://repo.maven.apache.org/maven2", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/1/versions/0", "version": "0", "lessThan": "5.19.4", "versionType": "semver", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/1", "version": "6.0.0", "lessThan": "6.2.3", "versionType": "semver", "status": "affected" } ] }, { "vendor": "Apache Software Foundation", "product": "Apache ActiveMQ", "sourcePath": "/containers/cna/affected/2", "packageName": "org.apache.activemq:apache-activemq", "collectionURL": "https://repo.maven.apache.org/maven2", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/2/versions/0", "version": "0", "lessThan": "5.19.4", "versionType": "semver", "status": "affected" }, { "sourcePath": "/containers/cna/affected/2/versions/1", "version": "6.0.0", "lessThan": "6.2.3", "versionType": "semver", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-20", "lang": "en", "description": "CWE-20 Improper Input Validation", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" }, { "cweId": "CWE-94", "lang": "en", "description": "CWE-94 Improper Control of Generation of Code ('Code Injection')", "sourcePath": "/containers/cna/problemTypes/1/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 8.8, "baseSeverity": "HIGH", "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1" }, { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 8.8, "baseSeverity": "HIGH", "provider": "redhat-SADP", "sourcePath": "/containers/adp/2/metrics/1/cvssV3_1" } ], "references": [ { "url": "https://activemq.apache.org/security-advisories.data/CVE-2026-34197-announcement.txt", "label": "apache", "tags": [ "vendor-advisory" ], "provider": "apache", "sourcePath": "/containers/cna/references/0" }, { "url": "http://www.openwall.com/lists/oss-security/2026/04/06/3", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-34197", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/references/0" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-34197", "label": "redhat-SADP", "tags": [ "vdb-entry", "x_refsource_REDHAT" ], "provider": "redhat-SADP", "sourcePath": "/containers/adp/2/references/0" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455869", "label": "RHBZ#2455869", "tags": [ "issue-tracking", "x_refsource_REDHAT" ], "provider": "redhat-SADP", "sourcePath": "/containers/adp/2/references/1" }, { "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34197.json", "label": "redhat-SADP", "tags": [ "x_sadp-csaf-vex" ], "provider": "redhat-SADP", "sourcePath": "/containers/adp/2/references/2" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34197.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"collectionURL\":\"https://repo.maven.apache.org/maven2\",\"defaultStatus\":\"unaffected\",\"packageName\":\"org.apache.activemq:activemq-broker\",\"product\":\"Apache ActiveMQ Broker\",\"vendor\":\"Apache Software Foundation\",\"versions\":[{\"lessThan\":\"5.19.4\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"semver\"},{\"lessThan\":\"6.2.3\",\"status\":\"affected\",\"version\":\"6.0.0\",\"versionType\":\"semver\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34197.json", "sourcePath": "/containers/cna/affected/1", "text": "{\"collectionURL\":\"https://repo.maven.apache.org/maven2\",\"defaultStatus\":\"unaffected\",\"packageName\":\"org.apache.activemq:activemq-all\",\"product\":\"Apache ActiveMQ All\",\"vendor\":\"Apache Software Foundation\",\"versions\":[{\"lessThan\":\"5.19.4\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"semver\"},{\"lessThan\":\"6.2.3\",\"status\":\"affected\",\"version\":\"6.0.0\",\"versionType\":\"semver\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34197.json", "sourcePath": "/containers/cna/affected/2", "text": "{\"collectionURL\":\"https://repo.maven.apache.org/maven2\",\"defaultStatus\":\"unaffected\",\"packageName\":\"org.apache.activemq:apache-activemq\",\"product\":\"Apache ActiveMQ\",\"vendor\":\"Apache Software Foundation\",\"versions\":[{\"lessThan\":\"5.19.4\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"semver\"},{\"lessThan\":\"6.2.3\",\"status\":\"affected\",\"version\":\"6.0.0\",\"versionType\":\"semver\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34197.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Improper Input Validation, Improper Control of Generation of Code ('Code Injection') vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ.\n\nApache ActiveMQ Classic exposes the Jolokia JMX-HTTP bridge at /api/jolokia/ on the web console. The default Jolokia access policy permits exec operations on all ActiveMQ MBeans (org.apache.activemq:*), including\nBrokerService.addNetworkConnector(String) and BrokerService.addConnector(String).\n\nAn authenticated attacker can invoke these operations with a crafted discovery URI that triggers the VM transport's brokerConfig parameter to load a remote Spring XML application context using ResourceXmlApplicationContext.\nBecause Spring's ResourceXmlApplicationContext instantiates all singleton beans before the BrokerService validates the configuration, arbitrary code execution occurs on the broker's JVM through bean factory methods such as Runtime.exec().\n\n\n\nThis issue affects Apache ActiveMQ Broker: before 5.19.4, from 6.0.0 before 6.2.3; Apache ActiveMQ All: before 5.19.4, from 6.0.0 before 6.2.3; Apache ActiveMQ: before 5.19.4, from 6.0.0 before 6.2.3.\n\n\n\nUsers are recommended to upgrade to version 5.19.4 or 6.2.3, which fixes the issue", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34197.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"cweId\":\"CWE-20\",\"description\":\"CWE-20 Improper Input Validation\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/problemTypes/1/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34197.json", "sourcePath": "/containers/cna/problemTypes/1/descriptions/0", "text": "{\"cweId\":\"CWE-94\",\"description\":\"CWE-94 Improper Control of Generation of Code ('Code Injection')\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/1/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34197.json", "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1", "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":8.8,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"NONE\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"LOW\",\"confidentialityImpact\":\"HIGH\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/2/metrics/1/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34197.json", "sourcePath": "/containers/adp/2/metrics/1/cvssV3_1", "text": "{\"attackComplexity\":\"LOW\",\"attackVector\":\"NETWORK\",\"availabilityImpact\":\"HIGH\",\"baseScore\":8.8,\"baseSeverity\":\"HIGH\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"privilegesRequired\":\"LOW\",\"scope\":\"UNCHANGED\",\"userInteraction\":\"NONE\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"version\":\"3.1\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-08-17T12:05:05.421Z", "fetchedAt": "2026-10-23T02:43:48.423Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-04-16T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "Apache ActiveMQ Broker / Apache ActiveMQ All / Apache ActiveMQにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:24:12.202Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "ea90f893edbbc0f3d057612373425a79e4467285be6601ef047fba073181c21e", "sourceModifiedAt": "2026-08-17T12:05:05.421Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "認証されたユーザーが Jolokia の MBean を通じてリモートコード実行（RCE）を行える脆弱性です。Apache ActiveMQ Classic は Web コンソールの /api/jolokia/ で Jolokia JMX‑HTTP ブリッジを公開しており、デフォルトのアクセスポリシーはすべての ActiveMQ MBean（org.apache.activemq:*）に対して exec 操作を許可しています。攻撃者は認証された状態で、特別に作成した discovery URI を使い、VM トランスポートの brokerConfig パラメータにリモートの Spring XML アプリケーションコンテキストをロードさせます。Spring の ResourceXmlApplicationContext がすべてのシングルトン Bean をインスタンス化した後に BrokerService が設定を検証するため、Runtime.exec() などの Bean ファクトリメソッドを通じてブローカーの JVM 上で任意のコードが実行されます。", "risk": "攻撃者がブローカーの JVM 上で任意のコードを実行できるため、サーバー全体が制御される可能性があります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "Apache ActiveMQ Broker はバージョン 5.19.4 未満、または 6.0.0 以上 6.2.3 未満で影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34197.json" ], "evidenceIds": [ "E3", "E1", "E2" ] }, { "text": "Apache ActiveMQ All はバージョン 5.19.4 未満、または 6.0.0 以上 6.2.3 未満で影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34197.json" ], "evidenceIds": [ "E4", "E1", "E2" ] }, { "text": "Apache ActiveMQ（全体）はバージョン 5.19.4 未満、または 6.0.0 以上 6.2.3 未満で影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34197.json" ], "evidenceIds": [ "E5", "E1", "E2" ] }, { "text": "公式の対象表：Apache Software Foundation / Apache ActiveMQ Broker。影響ありとして記載：5.19.4未満の版。影響ありとして記載：6.0.0以上、6.2.3未満。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34197.json" ], "evidenceIds": [ "E3" ] }, { "text": "公式の対象表：Apache Software Foundation / Apache ActiveMQ All。影響ありとして記載：5.19.4未満の版。影響ありとして記載：6.0.0以上、6.2.3未満。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34197.json" ], "evidenceIds": [ "E4" ] }, { "text": "公式の対象表：Apache Software Foundation / Apache ActiveMQ。影響ありとして記載：5.19.4未満の版。影響ありとして記載：6.0.0以上、6.2.3未満。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34197.json" ], "evidenceIds": [ "E5" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-34197" ], "evidenceIds": [ "E6" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34197.json" ], "evidenceIds": [ "E3" ] }, { "text": "「Apache ActiveMQ Broker / Apache ActiveMQ All / Apache ActiveMQ」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-34197", "https://activemq.apache.org/security-advisories.data/CVE-2026-34197-announcement.txt", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-34197", "https://nvd.nist.gov/vuln/detail/CVE-2026-34197" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34197.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2026-34197", "https://activemq.apache.org/security-advisories.data/CVE-2026-34197-announcement.txt", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-34197", "https://nvd.nist.gov/vuln/detail/CVE-2026-34197" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34197.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-34197", "https://activemq.apache.org/security-advisories.data/CVE-2026-34197-announcement.txt", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-34197", "https://nvd.nist.gov/vuln/detail/CVE-2026-34197" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34197.json", "label": "CVE：apache" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-34197", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-34197", "label": "CVE公式レコード" }, { "url": "https://activemq.apache.org/security-advisories.data/CVE-2026-34197-announcement.txt", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34197", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34197.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Improper Input Validation, Improper Control of Generation of Code ('Code Injection') vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ.\n\nApache ActiveMQ Classic exposes the Jolokia JMX-HTTP bridge at /api/jolokia/ on the web console. The default Jolokia access policy permits exec operations on all ActiveMQ MBeans (org.apache.activemq:*), including\nBrokerService.addNetworkConnector(String) and BrokerService.addConnector(String).\n\nAn authenticated attacker can invoke these operations with a crafted discovery URI that triggers the VM transport's brokerConfig parameter to load a remote Spring XML application context using ResourceXmlApplicationContext.\nBecause Spring's ResourceXmlApplicationContext instantiates all singleton beans before the BrokerService validates the configuration, arbitrary code execution occurs on the broker's JVM through bean factory methods such as Runtime.exec().\n\n\n\nThis issue affects Apache ActiveMQ Broker: before 5.19.4, from 6.0.0 before 6.2.3; Apache ActiveMQ All: before 5.19.4, from 6.0.0 before 6.2.3; Apache ActiveMQ: before 5.19.4, from 6.0.0 before 6.2.3.\n\n\n\nUsers are recommended to upgrade to version 5.19.4 or 6.2.3, which fixes the issue", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34197.json", "sourceField": "/containers/cna/title", "excerpt": "Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Authenticated users could perform RCE via Jolokia MBeans", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34197.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"collectionURL\":\"https://repo.maven.apache.org/maven2\",\"defaultStatus\":\"unaffected\",\"packageName\":\"org.apache.activemq:activemq-broker\",\"product\":\"Apache ActiveMQ Broker\",\"vendor\":\"Apache Software Foundation\",\"versions\":[{\"lessThan\":\"5.19.4\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"semver\"},{\"lessThan\":\"6.2.3\",\"status\":\"affected\",\"version\":\"6.0.0\",\"versionType\":\"semver\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34197.json", "sourceField": "/containers/cna/affected/1", "excerpt": "{\"collectionURL\":\"https://repo.maven.apache.org/maven2\",\"defaultStatus\":\"unaffected\",\"packageName\":\"org.apache.activemq:activemq-all\",\"product\":\"Apache ActiveMQ All\",\"vendor\":\"Apache Software Foundation\",\"versions\":[{\"lessThan\":\"5.19.4\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"semver\"},{\"lessThan\":\"6.2.3\",\"status\":\"affected\",\"version\":\"6.0.0\",\"versionType\":\"semver\"}]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34197.json", "sourceField": "/containers/cna/affected/2", "excerpt": "{\"collectionURL\":\"https://repo.maven.apache.org/maven2\",\"defaultStatus\":\"unaffected\",\"packageName\":\"org.apache.activemq:apache-activemq\",\"product\":\"Apache ActiveMQ\",\"vendor\":\"Apache Software Foundation\",\"versions\":[{\"lessThan\":\"5.19.4\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"semver\"},{\"lessThan\":\"6.2.3\",\"status\":\"affected\",\"version\":\"6.0.0\",\"versionType\":\"semver\"}]}", "language": null, "representation": "source_json" }, { "id": "E6", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-34197", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2026-34197\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2026-34197（Apache ActiveMQ Broker / Apache ActiveMQ All / Apache ActiveMQ）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Apache ActiveMQ Broker はバージョン 5.19.4 未満、または 6.0.0 以上 6.2.3 未満で影響を受けます。\n・Apache ActiveMQ All はバージョン 5.19.4 未満、または 6.0.0 以上 6.2.3 未満で影響を受けます。\n・Apache ActiveMQ（全体）はバージョン 5.19.4 未満、または 6.0.0 以上 6.2.3 未満で影響を受けます。\n・公式の対象表：Apache Software Foundation / Apache ActiveMQ Broker。影響ありとして記載：5.19.4未満の版。影響ありとして記載：6.0.0以上、6.2.3未満。\n・公式の対象表：Apache Software Foundation / Apache ActiveMQ All。影響ありとして記載：5.19.4未満の版。影響ありとして記載：6.0.0以上、6.2.3未満。\n・公式の対象表：Apache Software Foundation / Apache ActiveMQ。影響ありとして記載：5.19.4未満の版。影響ありとして記載：6.0.0以上、6.2.3未満。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-34197", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:24:12.202Z", "lastSuccess": "2026-10-23T03:24:12.202Z", "sourceCheckedAt": "2026-10-23T02:43:48.423Z", "errorCode": null }, "glossary": [ { "term": "任意のコード実行", "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。", "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html", "kind": "general_definition" } ] } }, { "id": "CVE-2009-0238", "aliases": [], "title": "n/a：コード実行", "summary": "Microsoft Office Excel 2000 SP3、2002 SP3、2003 SP3、2007 SP1、Excel Viewer 2003 Gold と SP3、Excel Viewer、Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1、そして Mac 用 Microsoft Office 2004 と 2008 の Excel が、細工された Excel 文書により無効なオブジェクトへのアクセスを試みさせることで、リモートの攻撃者が任意のコードを実行できる脆弱性があります。この脆弱性は 2009 年 2 月に Trojan.Mdropper.AC によって実際に悪用されました。", "risk": "攻撃者が任意のコードを実行できるため、被害者のコンピュータ上で不正なプログラムが動作し、情報漏洩やシステム破壊などの被害が生じる可能性があります。", "product": "Microsoft Office", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": "microsoft", "cvssVector": null, "affected": [ { "product": "n/a", "range": "n/a" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2009/0xxx/CVE-2009-0238.json", "label": "CVE：microsoft" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2009-0238", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2009-0238", "label": "CVE公式レコード" }, { "url": "http://www.microsoft.com/technet/security/advisory/968272.mspx", "label": "CVE掲載の参考情報" }, { "url": "http://www.vupen.com/english/advisories/2009/1023", "label": "ADV-2009-1023" }, { "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/48875", "label": "ms-excel-unspecified-code-execution(48875)" }, { "url": "http://www.us-cert.gov/cas/techalerts/TA09-104A.html", "label": "TA09-104A" }, { "url": "http://www.securityfocus.com/bid/33870", "label": "33870" }, { "url": "http://www.symantec.com/business/security_response/writeup.jsp?docid=2009-022310-4202-99", "label": "CVE掲載の参考情報" }, { "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-009", "label": "MS09-009" }, { "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5968", "label": "oval:org.mitre.oval:def:5968" }, { "url": "http://isc.sans.org/diary.html?storyid=5923", "label": "CVE掲載の参考情報" }, { "url": "http://securitytracker.com/id?1021744", "label": "1021744" }, { "url": "https://learn.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-009", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-0238", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2009-02-25T16:00:00.000Z", "modifiedAt": "2026-04-15T03:58:09.636Z", "fetchedAt": "2026-10-23T02:42:53.467Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP3, and 2007 SP1; Excel Viewer 2003 Gold and SP3; Excel Viewer; Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1; and Excel in Microsoft Office 2004 and 2008 for Mac allow remote attackers to execute arbitrary code via a crafted Excel document that triggers an access attempt on an invalid object, as exploited in the wild in February 2009 by Trojan.Mdropper.AC.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "product": "n/a", "vendor": "n/a", "versions": [ { "status": "affected", "version": "n/a" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2009-0238", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2009/0xxx/CVE-2009-0238.json", "fetchedAt": "2026-10-23T02:42:53.467Z", "publishedAt": "2009-02-25T16:00:00.000Z", "modifiedAt": "2026-04-15T03:58:09.636Z", "state": "published", "provider": "microsoft", "title": "", "descriptions": [ { "lang": "en", "value": "Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP3, and 2007 SP1; Excel Viewer 2003 Gold and SP3; Excel Viewer; Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1; and Excel in Microsoft Office 2004 and 2008 for Mac allow remote attackers to execute arbitrary code via a crafted Excel document that triggers an access attempt on an invalid object, as exploited in the wild in February 2009 by Trojan.Mdropper.AC.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "n/a", "product": "n/a", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "n/a", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "n/a", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 8.8, "baseSeverity": "HIGH", "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1" } ], "references": [ { "url": "http://www.microsoft.com/technet/security/advisory/968272.mspx", "label": "CVE", "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/0" }, { "url": "http://www.vupen.com/english/advisories/2009/1023", "label": "ADV-2009-1023", "tags": [ "vdb-entry", "x_refsource_VUPEN", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/1" }, { "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/48875", "label": "ms-excel-unspecified-code-execution(48875)", "tags": [ "vdb-entry", "x_refsource_XF", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/2" }, { "url": "http://www.us-cert.gov/cas/techalerts/TA09-104A.html", "label": "TA09-104A", "tags": [ "third-party-advisory", "x_refsource_CERT", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/3" }, { "url": "http://www.securityfocus.com/bid/33870", "label": "33870", "tags": [ "vdb-entry", "x_refsource_BID", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/4" }, { "url": "http://www.symantec.com/business/security_response/writeup.jsp?docid=2009-022310-4202-99", "label": "CVE", "tags": [ "x_refsource_MISC", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/5" }, { "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-009", "label": "MS09-009", "tags": [ "vendor-advisory", "x_refsource_MS", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/6" }, { "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5968", "label": "oval:org.mitre.oval:def:5968", "tags": [ "vdb-entry", "signature", "x_refsource_OVAL", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/7" }, { "url": "http://isc.sans.org/diary.html?storyid=5923", "label": "CVE", "tags": [ "x_refsource_MISC", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/8" }, { "url": "http://securitytracker.com/id?1021744", "label": "1021744", "tags": [ "vdb-entry", "x_refsource_SECTRACK", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/9" }, { "url": "http://blogs.zdnet.com/security/?p=2658", "label": "CVE", "tags": [ "x_refsource_MISC", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/10" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2009-0238", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2009/0xxx/CVE-2009-0238.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"product\":\"n/a\",\"vendor\":\"n/a\",\"versions\":[{\"status\":\"affected\",\"version\":\"n/a\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2009/0xxx/CVE-2009-0238.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP3, and 2007 SP1; Excel Viewer 2003 Gold and SP3; Excel Viewer; Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1; and Excel in Microsoft Office 2004 and 2008 for Mac allow remote attackers to execute arbitrary code via a crafted Excel document that triggers an access attempt on an invalid object, as exploited in the wild in February 2009 by Trojan.Mdropper.AC.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2009/0xxx/CVE-2009-0238.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"description\":\"n/a\",\"lang\":\"en\",\"type\":\"text\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/1/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2009/0xxx/CVE-2009-0238.json", "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1", "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":8.8,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"REQUIRED\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"confidentialityImpact\":\"HIGH\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-04-15T03:58:09.636Z", "fetchedAt": "2026-10-23T02:42:53.467Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-04-14T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "n/aにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:24:13.299Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "bcaa5894770c5dd026f021e4d101f9208c3abe39e2627abac779bc63a757fc01", "sourceModifiedAt": "2026-04-15T03:58:09.636Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Microsoft Office Excel 2000 SP3、2002 SP3、2003 SP3、2007 SP1、Excel Viewer 2003 Gold と SP3、Excel Viewer、Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1、そして Mac 用 Microsoft Office 2004 と 2008 の Excel が、細工された Excel 文書により無効なオブジェクトへのアクセスを試みさせることで、リモートの攻撃者が任意のコードを実行できる脆弱性があります。この脆弱性は 2009 年 2 月に Trojan.Mdropper.AC によって実際に悪用されました。", "risk": "攻撃者が任意のコードを実行できるため、被害者のコンピュータ上で不正なプログラムが動作し、情報漏洩やシステム破壊などの被害が生じる可能性があります。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E1", "E2" ], "applicability": [ { "text": "Microsoft Office Excel 2000 SP3 が影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2009/0xxx/CVE-2009-0238.json" ], "evidenceIds": [ "E1" ] }, { "text": "Microsoft Office Excel 2002 SP3 が影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2009/0xxx/CVE-2009-0238.json" ], "evidenceIds": [ "E1" ] }, { "text": "Microsoft Office Excel 2003 SP3 が影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2009/0xxx/CVE-2009-0238.json" ], "evidenceIds": [ "E1" ] }, { "text": "Microsoft Office Excel 2007 SP1 が影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2009/0xxx/CVE-2009-0238.json" ], "evidenceIds": [ "E1" ] }, { "text": "Excel Viewer 2003 Gold が影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2009/0xxx/CVE-2009-0238.json" ], "evidenceIds": [ "E1" ] }, { "text": "Excel Viewer 2003 SP3 が影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2009/0xxx/CVE-2009-0238.json" ], "evidenceIds": [ "E1" ] }, { "text": "Excel Viewer が影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2009/0xxx/CVE-2009-0238.json" ], "evidenceIds": [ "E1" ] }, { "text": "Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 が影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2009/0xxx/CVE-2009-0238.json" ], "evidenceIds": [ "E1" ] }, { "text": "Microsoft Office 2004 for Mac の Excel が影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2009/0xxx/CVE-2009-0238.json" ], "evidenceIds": [ "E1" ] }, { "text": "Microsoft Office 2008 for Mac の Excel が影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2009/0xxx/CVE-2009-0238.json" ], "evidenceIds": [ "E1" ] }, { "text": "公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2009/0xxx/CVE-2009-0238.json" ], "evidenceIds": [ "E3" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2009-0238" ], "evidenceIds": [ "E2" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2009/0xxx/CVE-2009-0238.json" ], "evidenceIds": [ "E3" ] }, { "text": "「Microsoft Office」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2009-0238", "http://www.microsoft.com/technet/security/advisory/968272.mspx", "http://www.vupen.com/english/advisories/2009/1023", "https://exchange.xforce.ibmcloud.com/vulnerabilities/48875", "http://www.us-cert.gov/cas/techalerts/TA09-104A.html", "http://www.securityfocus.com/bid/33870", "http://www.symantec.com/business/security_response/writeup.jsp?docid=2009-022310-4202-99", "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-009", "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5968", "http://isc.sans.org/diary.html?storyid=5923", "http://securitytracker.com/id?1021744", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2009-0238", "https://learn.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-009", "https://nvd.nist.gov/vuln/detail/CVE-2009-0238" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2009/0xxx/CVE-2009-0238.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2009-0238", "http://www.microsoft.com/technet/security/advisory/968272.mspx", "http://www.vupen.com/english/advisories/2009/1023", "https://exchange.xforce.ibmcloud.com/vulnerabilities/48875", "http://www.us-cert.gov/cas/techalerts/TA09-104A.html", "http://www.securityfocus.com/bid/33870", "http://www.symantec.com/business/security_response/writeup.jsp?docid=2009-022310-4202-99", "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-009", "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5968", "http://isc.sans.org/diary.html?storyid=5923", "http://securitytracker.com/id?1021744", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2009-0238", "https://learn.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-009", "https://nvd.nist.gov/vuln/detail/CVE-2009-0238" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2009/0xxx/CVE-2009-0238.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2009-0238", "http://www.microsoft.com/technet/security/advisory/968272.mspx", "http://www.vupen.com/english/advisories/2009/1023", "https://exchange.xforce.ibmcloud.com/vulnerabilities/48875", "http://www.us-cert.gov/cas/techalerts/TA09-104A.html", "http://www.securityfocus.com/bid/33870", "http://www.symantec.com/business/security_response/writeup.jsp?docid=2009-022310-4202-99", "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-009", "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5968", "http://isc.sans.org/diary.html?storyid=5923", "http://securitytracker.com/id?1021744", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2009-0238", "https://learn.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-009", "https://nvd.nist.gov/vuln/detail/CVE-2009-0238" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2009/0xxx/CVE-2009-0238.json", "label": "CVE：microsoft" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2009-0238", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2009-0238", "label": "CVE公式レコード" }, { "url": "http://www.microsoft.com/technet/security/advisory/968272.mspx", "label": "CVE掲載の参考情報" }, { "url": "http://www.vupen.com/english/advisories/2009/1023", "label": "ADV-2009-1023" }, { "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/48875", "label": "ms-excel-unspecified-code-execution(48875)" }, { "url": "http://www.us-cert.gov/cas/techalerts/TA09-104A.html", "label": "TA09-104A" }, { "url": "http://www.securityfocus.com/bid/33870", "label": "33870" }, { "url": "http://www.symantec.com/business/security_response/writeup.jsp?docid=2009-022310-4202-99", "label": "CVE掲載の参考情報" }, { "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-009", "label": "MS09-009" }, { "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5968", "label": "oval:org.mitre.oval:def:5968" }, { "url": "http://isc.sans.org/diary.html?storyid=5923", "label": "CVE掲載の参考情報" }, { "url": "http://securitytracker.com/id?1021744", "label": "1021744" }, { "url": "https://learn.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-009", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-0238", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2009/0xxx/CVE-2009-0238.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP3, and 2007 SP1; Excel Viewer 2003 Gold and SP3; Excel Viewer; Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1; and Excel in Microsoft Office 2004 and 2008 for Mac allow remote attackers to execute arbitrary code via a crafted Excel document that triggers an access attempt on an invalid object, as exploited in the wild in February 2009 by Trojan.Mdropper.AC.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2009-0238", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2009-0238\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2009/0xxx/CVE-2009-0238.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"product\":\"n/a\",\"vendor\":\"n/a\",\"versions\":[{\"status\":\"affected\",\"version\":\"n/a\"}]}", "language": null, "representation": "source_json" } ], "supportRequest": "件名：CVE-2009-0238（Microsoft Office）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Microsoft Office Excel 2000 SP3 が影響を受けます。\n・Microsoft Office Excel 2002 SP3 が影響を受けます。\n・Microsoft Office Excel 2003 SP3 が影響を受けます。\n・Microsoft Office Excel 2007 SP1 が影響を受けます。\n・Excel Viewer 2003 Gold が影響を受けます。\n・Excel Viewer 2003 SP3 が影響を受けます。\n・Excel Viewer が影響を受けます。\n・Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 が影響を受けます。\n・Microsoft Office 2004 for Mac の Excel が影響を受けます。\n・Microsoft Office 2008 for Mac の Excel が影響を受けます。\n・公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2009-0238", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:24:13.299Z", "lastSuccess": "2026-10-23T03:24:13.299Z", "sourceCheckedAt": "2026-10-23T02:42:53.467Z", "errorCode": null }, "glossary": [ { "term": "任意のコード実行", "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。", "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html", "kind": "general_definition" } ] } }, { "id": "CVE-2026-32201", "aliases": [], "title": "Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition：脆弱性情報", "summary": "Microsoft SharePoint Server における入力検証不備により、未認可の攻撃者がネットワーク上でなりすましを行える可能性があります。", "risk": "攻撃者がネットワーク上でなりすましを行える可能性がある。", "product": "Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition", "category": "windows", "component": "package", "severity": "medium", "cvss": 6.5, "cvssVersion": "3.1", "cvssSource": "microsoft", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:F/RL:O/RC:C", "affected": [ { "product": "Microsoft SharePoint Enterprise Server 2016", "range": ">= 16.0.0 / < 16.0.5548.1003（環境: x64-based Systems）" }, { "product": "Microsoft SharePoint Server 2019", "range": ">= 16.0.0 / < 16.0.10417.20114（環境: x64-based Systems）" }, { "product": "Microsoft SharePoint Server Subscription Edition", "range": ">= 16.0.0 / < 16.0.19725.20210（環境: x64-based Systems）" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32201.json", "label": "CVE：microsoft" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-32201", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-32201", "label": "CVE公式レコード" }, { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32201", "label": "Microsoft SharePoint Server Spoofing Vulnerability" }, { "url": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-32201", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32201", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2026-04-14T16:58:36.981Z", "modifiedAt": "2026-10-15T15:53:37.451Z", "fetchedAt": "2026-10-23T02:43:48.261Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "", "sourceTitle": "Microsoft SharePoint Server Spoofing Vulnerability", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Microsoft", "product": "Microsoft SharePoint Enterprise Server 2016", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "16.0.0", "lessThan": "16.0.5548.1003", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Microsoft SharePoint Server 2019", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "16.0.0", "lessThan": "16.0.10417.20114", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Microsoft SharePoint Server Subscription Edition", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "16.0.0", "lessThan": "16.0.19725.20210", "versionType": "custom", "status": "affected" } ] } ], "configurationNotes": "対象環境・機能: x64-based Systems。製品バージョンだけでなく、原文の利用条件を照合してください。", "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-32201", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32201.json", "fetchedAt": "2026-10-23T02:43:48.261Z", "publishedAt": "2026-04-14T16:58:36.981Z", "modifiedAt": "2026-10-15T15:53:37.451Z", "state": "published", "provider": "microsoft", "title": "Microsoft SharePoint Server Spoofing Vulnerability", "descriptions": [ { "lang": "en-US", "value": "Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "Microsoft", "product": "Microsoft SharePoint Enterprise Server 2016", "sourcePath": "/containers/cna/affected/0", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "16.0.0", "lessThan": "16.0.5548.1003", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Microsoft SharePoint Server 2019", "sourcePath": "/containers/cna/affected/1", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/1/versions/0", "version": "16.0.0", "lessThan": "16.0.10417.20114", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Microsoft SharePoint Server Subscription Edition", "sourcePath": "/containers/cna/affected/2", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/2/versions/0", "version": "16.0.0", "lessThan": "16.0.19725.20210", "versionType": "custom", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-20", "lang": "en-US", "description": "CWE-20: Improper Input Validation", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:F/RL:O/RC:C", "baseScore": 6.5, "baseSeverity": "MEDIUM", "provider": "microsoft", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32201", "label": "Microsoft SharePoint Server Spoofing Vulnerability", "tags": [ "vendor-advisory", "patch" ], "provider": "microsoft", "sourcePath": "/containers/cna/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-32201", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32201.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft SharePoint Enterprise Server 2016\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"16.0.0\",\"lessThan\":\"16.0.5548.1003\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32201.json", "sourcePath": "/containers/cna/affected/1", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft SharePoint Server 2019\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"16.0.0\",\"lessThan\":\"16.0.10417.20114\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32201.json", "sourcePath": "/containers/cna/affected/2", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft SharePoint Server Subscription Edition\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"16.0.0\",\"lessThan\":\"16.0.19725.20210\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32201.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32201.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"description\":\"CWE-20: Improper Input Validation\",\"lang\":\"en-US\",\"type\":\"CWE\",\"cweId\":\"CWE-20\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32201.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"baseSeverity\":\"MEDIUM\",\"baseScore\":6.5,\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:F/RL:O/RC:C\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-10-15T15:53:37.451Z", "fetchedAt": "2026-10-23T02:43:48.261Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-04-14T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Editionに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:24:14.689Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "e0cddcb28290242567e42aa8aef8062770b651ec7061c07e120c586b80521f41", "sourceModifiedAt": "2026-10-15T15:53:37.451Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Microsoft SharePoint Server における入力検証不備により、未認可の攻撃者がネットワーク上でなりすましを行える可能性があります。", "risk": "攻撃者がネットワーク上でなりすましを行える可能性がある。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "Microsoft SharePoint Enterprise Server 2016（x64）で、バージョン 16.0.0 以上 16.0.5548.1003 未満は影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32201.json" ], "evidenceIds": [ "E3", "E2" ] }, { "text": "Microsoft SharePoint Server 2019（x64）で、バージョン 16.0.0 以上 16.0.10417.20114 未満は影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32201.json" ], "evidenceIds": [ "E4", "E2" ] }, { "text": "Microsoft SharePoint Server Subscription Edition（x64）で、バージョン 16.0.0 以上 16.0.19725.20210 未満は影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32201.json" ], "evidenceIds": [ "E5", "E2" ] }, { "text": "公式の対象表：Microsoft / Microsoft SharePoint Enterprise Server 2016。影響ありとして記載：16.0.0以上、16.0.5548.1003未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32201.json" ], "evidenceIds": [ "E3" ] }, { "text": "公式の対象表：Microsoft / Microsoft SharePoint Server 2019。影響ありとして記載：16.0.0以上、16.0.10417.20114未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32201.json" ], "evidenceIds": [ "E4" ] }, { "text": "公式の対象表：Microsoft / Microsoft SharePoint Server Subscription Edition。影響ありとして記載：16.0.0以上、16.0.19725.20210未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32201.json" ], "evidenceIds": [ "E5" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-32201" ], "evidenceIds": [ "E6" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32201.json" ], "evidenceIds": [ "E3" ] }, { "text": "「Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-32201", "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32201", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-32201", "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-32201", "https://nvd.nist.gov/vuln/detail/CVE-2026-32201" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32201.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2026-32201", "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32201", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-32201", "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-32201", "https://nvd.nist.gov/vuln/detail/CVE-2026-32201" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32201.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-32201", "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32201", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-32201", "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-32201", "https://nvd.nist.gov/vuln/detail/CVE-2026-32201" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32201.json", "label": "CVE：microsoft" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-32201", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-32201", "label": "CVE公式レコード" }, { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32201", "label": "Microsoft SharePoint Server Spoofing Vulnerability" }, { "url": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-32201", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32201", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32201.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.", "language": "en-US", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32201.json", "sourceField": "/containers/cna/title", "excerpt": "Microsoft SharePoint Server Spoofing Vulnerability", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32201.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft SharePoint Enterprise Server 2016\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"16.0.0\",\"lessThan\":\"16.0.5548.1003\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32201.json", "sourceField": "/containers/cna/affected/1", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft SharePoint Server 2019\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"16.0.0\",\"lessThan\":\"16.0.10417.20114\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32201.json", "sourceField": "/containers/cna/affected/2", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft SharePoint Server Subscription Edition\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"16.0.0\",\"lessThan\":\"16.0.19725.20210\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E6", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-32201", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2026-32201\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2026-32201（Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Microsoft SharePoint Enterprise Server 2016（x64）で、バージョン 16.0.0 以上 16.0.5548.1003 未満は影響を受けます。\n・Microsoft SharePoint Server 2019（x64）で、バージョン 16.0.0 以上 16.0.10417.20114 未満は影響を受けます。\n・Microsoft SharePoint Server Subscription Edition（x64）で、バージョン 16.0.0 以上 16.0.19725.20210 未満は影響を受けます。\n・公式の対象表：Microsoft / Microsoft SharePoint Enterprise Server 2016。影響ありとして記載：16.0.0以上、16.0.5548.1003未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft SharePoint Server 2019。影響ありとして記載：16.0.0以上、16.0.10417.20114未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft SharePoint Server Subscription Edition。影響ありとして記載：16.0.0以上、16.0.19725.20210未満。対象の環境：x64-based Systems\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-32201", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:24:14.689Z", "lastSuccess": "2026-10-23T03:24:14.689Z", "sourceCheckedAt": "2026-10-23T02:43:48.261Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2012-1854", "aliases": [], "title": "n/a：脆弱性情報", "summary": "Microsoft Office 2003 SP3、2007 SP2・SP3、2010 Gold・SP1、Microsoft Visual Basic for Applications (VBA) および Summit Microsoft Visual Basic for Applications SDK の VBE6.dll に、信頼できない検索パスの脆弱性があります。ローカルユーザーが現在の作業ディレクトリにトロイの木馬 DLL を置くことで特権を取得でき、2012年7月に実際に悪用されました。", "risk": "ローカルユーザーが悪意のある DLL を利用して特権を取得できる可能性があります。", "product": "Microsoft Visual Basic for Applications (VBA)", "category": "other", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": "microsoft", "cvssVector": null, "affected": [ { "product": "n/a", "range": "n/a" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2012/1xxx/CVE-2012-1854.json", "label": "CVE：microsoft" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-1854", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2012-1854", "label": "CVE公式レコード" }, { "url": "http://www.us-cert.gov/cas/techalerts/TA12-192A.html", "label": "TA12-192A" }, { "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14950", "label": "oval:org.mitre.oval:def:14950" }, { "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-046", "label": "MS12-046" }, { "url": "https://learn.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-046", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-1854", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2012-07-10T21:00:00.000Z", "modifiedAt": "2026-04-14T03:55:29.134Z", "fetchedAt": "2026-10-23T02:42:55.178Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "Untrusted search path vulnerability in VBE6.dll in Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Microsoft Visual Basic for Applications (VBA); and Summit Microsoft Visual Basic for Applications SDK allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .docx file, aka \"Visual Basic for Applications Insecure Library Loading Vulnerability,\" as exploited in the wild in July 2012.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "product": "n/a", "vendor": "n/a", "versions": [ { "status": "affected", "version": "n/a" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2012-1854", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2012/1xxx/CVE-2012-1854.json", "fetchedAt": "2026-10-23T02:42:55.178Z", "publishedAt": "2012-07-10T21:00:00.000Z", "modifiedAt": "2026-04-14T03:55:29.134Z", "state": "published", "provider": "microsoft", "title": "", "descriptions": [ { "lang": "en", "value": "Untrusted search path vulnerability in VBE6.dll in Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Microsoft Visual Basic for Applications (VBA); and Summit Microsoft Visual Basic for Applications SDK allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .docx file, aka \"Visual Basic for Applications Insecure Library Loading Vulnerability,\" as exploited in the wild in July 2012.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "n/a", "product": "n/a", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "n/a", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "n/a", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1" } ], "references": [ { "url": "http://www.us-cert.gov/cas/techalerts/TA12-192A.html", "label": "TA12-192A", "tags": [ "third-party-advisory", "x_refsource_CERT", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14950", "label": "oval:org.mitre.oval:def:14950", "tags": [ "vdb-entry", "signature", "x_refsource_OVAL", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/1" }, { "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-046", "label": "MS12-046", "tags": [ "vendor-advisory", "x_refsource_MS", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/2" }, { "url": "https://learn.microsoft.com/en-us/security-updates/SecurityBulletins/2012/ms12-046", "label": "CISA-ADP", "tags": [ "vendor-advisory" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2012-1854", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/references/1" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2012/1xxx/CVE-2012-1854.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"product\":\"n/a\",\"vendor\":\"n/a\",\"versions\":[{\"status\":\"affected\",\"version\":\"n/a\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2012/1xxx/CVE-2012-1854.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Untrusted search path vulnerability in VBE6.dll in Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Microsoft Visual Basic for Applications (VBA); and Summit Microsoft Visual Basic for Applications SDK allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .docx file, aka \"Visual Basic for Applications Insecure Library Loading Vulnerability,\" as exploited in the wild in July 2012.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2012/1xxx/CVE-2012-1854.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"description\":\"n/a\",\"lang\":\"en\",\"type\":\"text\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/1/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2012/1xxx/CVE-2012-1854.json", "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1", "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":7.8,\"attackVector\":\"LOCAL\",\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"REQUIRED\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"confidentialityImpact\":\"HIGH\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-04-14T03:55:29.134Z", "fetchedAt": "2026-10-23T02:42:55.178Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-04-13T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "n/aに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:24:16.650Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "0b56d12f91cfc515e4cac6e2bb8d0458c8264f84bce32957074b43059ee7b4ce", "sourceModifiedAt": "2026-04-14T03:55:29.134Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Microsoft Office 2003 SP3、2007 SP2・SP3、2010 Gold・SP1、Microsoft Visual Basic for Applications (VBA) および Summit Microsoft Visual Basic for Applications SDK の VBE6.dll に、信頼できない検索パスの脆弱性があります。ローカルユーザーが現在の作業ディレクトリにトロイの木馬 DLL を置くことで特権を取得でき、2012年7月に実際に悪用されました。", "risk": "ローカルユーザーが悪意のある DLL を利用して特権を取得できる可能性があります。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E1", "E2" ], "applicability": [ { "text": "ローカルユーザーが対象です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2012/1xxx/CVE-2012-1854.json" ], "evidenceIds": [ "E1" ] }, { "text": "攻撃には、.docx ファイルが存在するディレクトリの現在の作業ディレクトリに、トロイの木馬 DLL を配置する必要があります。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2012/1xxx/CVE-2012-1854.json" ], "evidenceIds": [ "E1" ] }, { "text": "影響を受ける製品は、Microsoft Office 2003 SP3、2007 SP2・SP3、2010 Gold・SP1、Microsoft Visual Basic for Applications (VBA)、および Summit Microsoft Visual Basic for Applications SDK です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2012/1xxx/CVE-2012-1854.json" ], "evidenceIds": [ "E1" ] }, { "text": "公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2012/1xxx/CVE-2012-1854.json" ], "evidenceIds": [ "E3" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-1854" ], "evidenceIds": [ "E2" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2012/1xxx/CVE-2012-1854.json" ], "evidenceIds": [ "E3" ] }, { "text": "「Microsoft Visual Basic for Applications (VBA)」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2012-1854", "http://www.us-cert.gov/cas/techalerts/TA12-192A.html", "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14950", "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-046", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-1854", "https://learn.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-046", "https://nvd.nist.gov/vuln/detail/CVE-2012-1854" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2012/1xxx/CVE-2012-1854.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2012-1854", "http://www.us-cert.gov/cas/techalerts/TA12-192A.html", "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14950", "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-046", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-1854", "https://learn.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-046", "https://nvd.nist.gov/vuln/detail/CVE-2012-1854" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2012/1xxx/CVE-2012-1854.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2012-1854", "http://www.us-cert.gov/cas/techalerts/TA12-192A.html", "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14950", "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-046", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-1854", "https://learn.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-046", "https://nvd.nist.gov/vuln/detail/CVE-2012-1854" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2012/1xxx/CVE-2012-1854.json", "label": "CVE：microsoft" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-1854", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2012-1854", "label": "CVE公式レコード" }, { "url": "http://www.us-cert.gov/cas/techalerts/TA12-192A.html", "label": "TA12-192A" }, { "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14950", "label": "oval:org.mitre.oval:def:14950" }, { "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-046", "label": "MS12-046" }, { "url": "https://learn.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-046", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-1854", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2012/1xxx/CVE-2012-1854.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Untrusted search path vulnerability in VBE6.dll in Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Microsoft Visual Basic for Applications (VBA); and Summit Microsoft Visual Basic for Applications SDK allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .docx file, aka \"Visual Basic for Applications Insecure Library Loading Vulnerability,\" as exploited in the wild in July 2012.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-1854", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2012-1854\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2012/1xxx/CVE-2012-1854.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"product\":\"n/a\",\"vendor\":\"n/a\",\"versions\":[{\"status\":\"affected\",\"version\":\"n/a\"}]}", "language": null, "representation": "source_json" } ], "supportRequest": "件名：CVE-2012-1854（Microsoft Visual Basic for Applications (VBA)）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・ローカルユーザーが対象です。\n・攻撃には、.docx ファイルが存在するディレクトリの現在の作業ディレクトリに、トロイの木馬 DLL を配置する必要があります。\n・影響を受ける製品は、Microsoft Office 2003 SP3、2007 SP2・SP3、2010 Gold・SP1、Microsoft Visual Basic for Applications (VBA)、および Summit Microsoft Visual Basic for Applications SDK です。\n・公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2012-1854", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:24:16.650Z", "lastSuccess": "2026-10-23T03:24:16.650Z", "sourceCheckedAt": "2026-10-23T02:42:55.178Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2020-9715", "aliases": [], "title": "Adobe Acrobat and Reader：コード実行", "summary": "Adobe Acrobat と Reader の特定バージョンに、メモリ解放後にオブジェクトが再利用される use‑after‑free の脆弱性があります。この脆弱性が成功すると、攻撃者が任意のコードを実行できる可能性があります。", "risk": "この脆弱性が悪用されると、攻撃者が任意のコードを実行できるようになる恐れがあります。", "product": "Adobe Acrobat and Reader", "category": "other", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": "adobe", "cvssVector": null, "affected": [ { "product": "Adobe Acrobat and Reader", "range": "2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier versions" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/9xxx/CVE-2020-9715.json", "label": "CVE：adobe" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-9715", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2020-9715", "label": "CVE公式レコード" }, { "url": "https://www.zerodayinitiative.com/advisories/ZDI-20-991/", "label": "CVE掲載の参考情報" }, { "url": "https://helpx.adobe.com/security/products/acrobat/apsb20-48.html", "label": "CISAが示す関連情報" }, { "url": "https://blog.exodusintel.com/2021/04/20/analysis-of-a-use-after-free-vulnerability-in-adobe-acrobat-reader-dc/", "label": "CVE掲載の参考情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-9715", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2020-08-19T00:00:00.000Z", "modifiedAt": "2026-04-13T22:20:25.649Z", "fetchedAt": "2026-10-23T02:43:13.615Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier have an use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution .", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Adobe", "product": "Adobe Acrobat and Reader", "versions": [ { "version": "2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier versions", "status": "affected" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2020-9715", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/9xxx/CVE-2020-9715.json", "fetchedAt": "2026-10-23T02:43:13.615Z", "publishedAt": "2020-08-19T00:00:00.000Z", "modifiedAt": "2026-04-13T22:20:25.649Z", "state": "published", "provider": "adobe", "title": "", "descriptions": [ { "lang": "en", "value": "Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier have an use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution .", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "Adobe", "product": "Adobe Acrobat and Reader", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier versions", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "Use-after-free", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://www.zerodayinitiative.com/advisories/ZDI-20-991/", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://helpx.adobe.com/security/products/acrobat/apsb20-48.html", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/1" }, { "url": "https://blog.exodusintel.com/2021/04/20/analysis-of-a-use-after-free-vulnerability-in-adobe-acrobat-reader-dc/", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/2" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-9715", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/9xxx/CVE-2020-9715.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Adobe\",\"product\":\"Adobe Acrobat and Reader\",\"versions\":[{\"version\":\"2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier versions\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/9xxx/CVE-2020-9715.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier have an use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution .", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/9xxx/CVE-2020-9715.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"type\":\"text\",\"lang\":\"en\",\"description\":\"Use-after-free \"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/1/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/9xxx/CVE-2020-9715.json", "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1", "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":7.8,\"attackVector\":\"LOCAL\",\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"REQUIRED\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"confidentialityImpact\":\"HIGH\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-04-13T22:20:25.649Z", "fetchedAt": "2026-10-23T02:43:13.615Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-04-13T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "Adobe Acrobat and Readerにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:24:16.772Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "b62e693b4b1454516feff93e6e02ce1af2ab21c57c762d1a471310e6aaf3e623", "sourceModifiedAt": "2026-04-13T22:20:25.649Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Adobe Acrobat と Reader の特定バージョンに、メモリ解放後にオブジェクトが再利用される use‑after‑free の脆弱性があります。この脆弱性が成功すると、攻撃者が任意のコードを実行できる可能性があります。", "risk": "この脆弱性が悪用されると、攻撃者が任意のコードを実行できるようになる恐れがあります。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "Adobe Acrobat と Reader のバージョン 2020.009.20074 以前が影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/9xxx/CVE-2020-9715.json" ], "evidenceIds": [ "E2" ] }, { "text": "Adobe Acrobat と Reader のバージョン 2020.001.30002 が影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/9xxx/CVE-2020-9715.json" ], "evidenceIds": [ "E2" ] }, { "text": "Adobe Acrobat と Reader のバージョン 2017.011.30171 以前が影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/9xxx/CVE-2020-9715.json" ], "evidenceIds": [ "E2" ] }, { "text": "Adobe Acrobat と Reader のバージョン 2015.006.30523 以前が影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/9xxx/CVE-2020-9715.json" ], "evidenceIds": [ "E2" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-9715" ], "evidenceIds": [ "E3" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/9xxx/CVE-2020-9715.json" ], "evidenceIds": [ "E2" ] }, { "text": "「Adobe Acrobat and Reader」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2020-9715", "https://www.zerodayinitiative.com/advisories/ZDI-20-991/", "https://helpx.adobe.com/security/products/acrobat/apsb20-48.html", "https://blog.exodusintel.com/2021/04/20/analysis-of-a-use-after-free-vulnerability-in-adobe-acrobat-reader-dc/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-9715", "https://nvd.nist.gov/vuln/detail/CVE-2020-9715" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/9xxx/CVE-2020-9715.json" ], "evidenceIds": [ "E2" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2020-9715", "https://www.zerodayinitiative.com/advisories/ZDI-20-991/", "https://helpx.adobe.com/security/products/acrobat/apsb20-48.html", "https://blog.exodusintel.com/2021/04/20/analysis-of-a-use-after-free-vulnerability-in-adobe-acrobat-reader-dc/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-9715", "https://nvd.nist.gov/vuln/detail/CVE-2020-9715" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/9xxx/CVE-2020-9715.json" ], "evidenceIds": [ "E2" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2020-9715", "https://www.zerodayinitiative.com/advisories/ZDI-20-991/", "https://helpx.adobe.com/security/products/acrobat/apsb20-48.html", "https://blog.exodusintel.com/2021/04/20/analysis-of-a-use-after-free-vulnerability-in-adobe-acrobat-reader-dc/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-9715", "https://nvd.nist.gov/vuln/detail/CVE-2020-9715" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/9xxx/CVE-2020-9715.json", "label": "CVE：adobe" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-9715", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2020-9715", "label": "CVE公式レコード" }, { "url": "https://www.zerodayinitiative.com/advisories/ZDI-20-991/", "label": "CVE掲載の参考情報" }, { "url": "https://helpx.adobe.com/security/products/acrobat/apsb20-48.html", "label": "CISAが示す関連情報" }, { "url": "https://blog.exodusintel.com/2021/04/20/analysis-of-a-use-after-free-vulnerability-in-adobe-acrobat-reader-dc/", "label": "CVE掲載の参考情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-9715", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/9xxx/CVE-2020-9715.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier have an use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution .", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/9xxx/CVE-2020-9715.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Adobe\",\"product\":\"Adobe Acrobat and Reader\",\"versions\":[{\"version\":\"2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier versions\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E3", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-9715", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2020-9715\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2020-9715（Adobe Acrobat and Reader）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Adobe Acrobat と Reader のバージョン 2020.009.20074 以前が影響を受けます。\n・Adobe Acrobat と Reader のバージョン 2020.001.30002 が影響を受けます。\n・Adobe Acrobat と Reader のバージョン 2017.011.30171 以前が影響を受けます。\n・Adobe Acrobat と Reader のバージョン 2015.006.30523 以前が影響を受けます。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2020-9715", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:24:16.772Z", "lastSuccess": "2026-10-23T03:24:16.772Z", "sourceCheckedAt": "2026-10-23T02:43:13.615Z", "errorCode": null }, "glossary": [ { "term": "任意のコード実行", "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。", "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html", "kind": "general_definition" } ] } }, { "id": "CVE-2023-21529", "aliases": [], "title": "Microsoft Exchange Server 2013 Cumulative Update 23 / Microsoft Exchange Server 2016 Cumulative Update 23 / Microsoft Exchange Server 2019 Cumulative Update 11 / Microsoft Exchange Server 2019 Cumulative Update 12：コード実行", "summary": "Microsoft Exchange Server のリモートコード実行脆弱性", "risk": "攻撃者がリモートでコードを実行させられる可能性がある", "product": "Microsoft Exchange Server 2013 Cumulative Update 23 / Microsoft Exchange Server 2016 Cumulative Update 23 / Microsoft Exchange Server 2019 Cumulative Update 11 / Microsoft Exchange Server 2019 Cumulative Update 12", "category": "windows", "component": "package", "severity": "high", "cvss": 8.8, "cvssVersion": "3.1", "cvssSource": "microsoft", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "affected": [ { "product": "Microsoft Exchange Server 2013 Cumulative Update 23", "range": ">= 15.00.0 / < 15.00.1497.047（環境: x64-based Systems）" }, { "product": "Microsoft Exchange Server 2016 Cumulative Update 23", "range": ">= 15.01.0 / < 15.01.2507.021（環境: x64-based Systems）" }, { "product": "Microsoft Exchange Server 2019 Cumulative Update 11", "range": ">= 15.02.0 / < 15.02.0986.041（環境: x64-based Systems）" }, { "product": "Microsoft Exchange Server 2019 Cumulative Update 12", "range": ">= 15.02.0 / < 15.02.1118.025（環境: x64-based Systems）" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/21xxx/CVE-2023-21529.json", "label": "CVE：microsoft" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-21529", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-21529", "label": "CVE公式レコード" }, { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21529", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-21529", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2023-02-14T19:33:00.590Z", "modifiedAt": "2026-08-19T16:26:33.854Z", "fetchedAt": "2026-10-23T02:43:25.250Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "", "sourceTitle": "Microsoft Exchange Server Remote Code Execution Vulnerability", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Microsoft", "product": "Microsoft Exchange Server 2013 Cumulative Update 23", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "15.00.0", "lessThan": "15.00.1497.047", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Microsoft Exchange Server 2016 Cumulative Update 23", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "15.01.0", "lessThan": "15.01.2507.021", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Microsoft Exchange Server 2019 Cumulative Update 11", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "15.02.0", "lessThan": "15.02.0986.041", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Microsoft Exchange Server 2019 Cumulative Update 12", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "15.02.0", "lessThan": "15.02.1118.025", "versionType": "custom", "status": "affected" } ] } ], "configurationNotes": "対象環境・機能: x64-based Systems。製品バージョンだけでなく、原文の利用条件を照合してください。", "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2023-21529", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/21xxx/CVE-2023-21529.json", "fetchedAt": "2026-10-23T02:43:25.250Z", "publishedAt": "2023-02-14T19:33:00.590Z", "modifiedAt": "2026-08-19T16:26:33.854Z", "state": "published", "provider": "microsoft", "title": "Microsoft Exchange Server Remote Code Execution Vulnerability", "descriptions": [ { "lang": "en-US", "value": "Microsoft Exchange Server Remote Code Execution Vulnerability", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "Microsoft", "product": "Microsoft Exchange Server 2013 Cumulative Update 23", "sourcePath": "/containers/cna/affected/0", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "15.00.0", "lessThan": "15.00.1497.047", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Microsoft Exchange Server 2016 Cumulative Update 23", "sourcePath": "/containers/cna/affected/1", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/1/versions/0", "version": "15.01.0", "lessThan": "15.01.2507.021", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Microsoft Exchange Server 2019 Cumulative Update 11", "sourcePath": "/containers/cna/affected/2", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/2/versions/0", "version": "15.02.0", "lessThan": "15.02.0986.041", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Microsoft Exchange Server 2019 Cumulative Update 12", "sourcePath": "/containers/cna/affected/3", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/3/versions/0", "version": "15.02.0", "lessThan": "15.02.1118.025", "versionType": "custom", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-502", "lang": "en-US", "description": "CWE-502: Deserialization of Untrusted Data", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "baseScore": 8.8, "baseSeverity": "HIGH", "provider": "microsoft", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21529", "label": "Microsoft Exchange Server Remote Code Execution Vulnerability", "tags": [ "vendor-advisory", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://www.microsoft.com/en-us/security/blog/2026/04/06/storm-1175-focuses-gaze-on-vulnerable-web-facing-assets-in-high-tempo-medusa-ransomware-operations/", "label": "CISA-ADP", "tags": [ "vendor-advisory" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-21529", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/references/1" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/21xxx/CVE-2023-21529.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2013 Cumulative Update 23\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.00.0\",\"lessThan\":\"15.00.1497.047\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/21xxx/CVE-2023-21529.json", "sourcePath": "/containers/cna/affected/1", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 23\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.2507.021\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/21xxx/CVE-2023-21529.json", "sourcePath": "/containers/cna/affected/2", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2019 Cumulative Update 11\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.02.0\",\"lessThan\":\"15.02.0986.041\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/21xxx/CVE-2023-21529.json", "sourcePath": "/containers/cna/affected/3", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2019 Cumulative Update 12\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.02.0\",\"lessThan\":\"15.02.1118.025\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/21xxx/CVE-2023-21529.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Microsoft Exchange Server Remote Code Execution Vulnerability", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/21xxx/CVE-2023-21529.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"description\":\"CWE-502: Deserialization of Untrusted Data\",\"lang\":\"en-US\",\"type\":\"CWE\",\"cweId\":\"CWE-502\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/21xxx/CVE-2023-21529.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"baseSeverity\":\"HIGH\",\"baseScore\":8.8,\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-08-19T16:26:33.854Z", "fetchedAt": "2026-10-23T02:43:25.250Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-04-13T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "Microsoft Exchange Server 2013 Cumulative Update 23 / Microsoft Exchange Server 2016 Cumulative Update 23 / Microsoft Exchange Server 2019 Cumulative Update 11 / Microsoft Exchange Server 2019 Cumulative Update 12にコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:24:18.301Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "c040ec07885137c2d814a7e24749808b08ac6d5c4edc4889fc743f3ef22e471d", "sourceModifiedAt": "2026-08-19T16:26:33.854Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Microsoft Exchange Server のリモートコード実行脆弱性", "risk": "攻撃者がリモートでコードを実行させられる可能性がある", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "Microsoft Exchange Server 2013 Cumulative Update 23（バージョン 15.00.0 以上、15.00.1497.047 未満）が影響を受ける（x64 系システム）", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/21xxx/CVE-2023-21529.json" ], "evidenceIds": [ "E2", "E1" ] }, { "text": "Microsoft Exchange Server 2016 Cumulative Update 23（バージョン 15.01.0 以上、15.01.2507.021 未満）が影響を受ける（x64 系システム）", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/21xxx/CVE-2023-21529.json" ], "evidenceIds": [ "E3", "E1" ] }, { "text": "Microsoft Exchange Server 2019 Cumulative Update 11（バージョン 15.02.0 以上、15.02.0986.041 未満）が影響を受ける（x64 系システム）", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/21xxx/CVE-2023-21529.json" ], "evidenceIds": [ "E4", "E1" ] }, { "text": "Microsoft Exchange Server 2019 Cumulative Update 12（バージョン 15.02.0 以上、15.02.1118.025 未満）が影響を受ける（x64 系システム）", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/21xxx/CVE-2023-21529.json" ], "evidenceIds": [ "E5", "E1" ] }, { "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2013 Cumulative Update 23。影響ありとして記載：15.00.0以上、15.00.1497.047未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/21xxx/CVE-2023-21529.json" ], "evidenceIds": [ "E2" ] }, { "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 23。影響ありとして記載：15.01.0以上、15.01.2507.021未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/21xxx/CVE-2023-21529.json" ], "evidenceIds": [ "E3" ] }, { "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2019 Cumulative Update 11。影響ありとして記載：15.02.0以上、15.02.0986.041未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/21xxx/CVE-2023-21529.json" ], "evidenceIds": [ "E4" ] }, { "text": "公式の対象表：Microsoft / Microsoft Exchange Server 2019 Cumulative Update 12。影響ありとして記載：15.02.0以上、15.02.1118.025未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/21xxx/CVE-2023-21529.json" ], "evidenceIds": [ "E5" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-21529" ], "evidenceIds": [ "E6" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/21xxx/CVE-2023-21529.json" ], "evidenceIds": [ "E2" ] }, { "text": "「Microsoft Exchange Server 2013 Cumulative Update 23 / Microsoft Exchange Server 2016 Cumulative Update 23 / Microsoft Exchange Server 2019 Cumulative Update 11 / Microsoft Exchange Server 2019 Cumulative Update 12」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-21529", "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21529", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-21529", "https://nvd.nist.gov/vuln/detail/CVE-2023-21529" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/21xxx/CVE-2023-21529.json" ], "evidenceIds": [ "E2" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2023-21529", "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21529", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-21529", "https://nvd.nist.gov/vuln/detail/CVE-2023-21529" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/21xxx/CVE-2023-21529.json" ], "evidenceIds": [ "E2" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-21529", "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21529", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-21529", "https://nvd.nist.gov/vuln/detail/CVE-2023-21529" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/21xxx/CVE-2023-21529.json", "label": "CVE：microsoft" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-21529", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-21529", "label": "CVE公式レコード" }, { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21529", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-21529", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/21xxx/CVE-2023-21529.json", "sourceField": "/containers/cna/title", "excerpt": "Microsoft Exchange Server Remote Code Execution Vulnerability", "language": null }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/21xxx/CVE-2023-21529.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2013 Cumulative Update 23\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.00.0\",\"lessThan\":\"15.00.1497.047\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/21xxx/CVE-2023-21529.json", "sourceField": "/containers/cna/affected/1", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2016 Cumulative Update 23\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.01.0\",\"lessThan\":\"15.01.2507.021\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/21xxx/CVE-2023-21529.json", "sourceField": "/containers/cna/affected/2", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2019 Cumulative Update 11\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.02.0\",\"lessThan\":\"15.02.0986.041\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/21xxx/CVE-2023-21529.json", "sourceField": "/containers/cna/affected/3", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Exchange Server 2019 Cumulative Update 12\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"15.02.0\",\"lessThan\":\"15.02.1118.025\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E6", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-21529", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2023-21529\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2023-21529（Microsoft Exchange Server 2013 Cumulative Update 23 / Microsoft Exchange Server 2016 Cumulative Update 23 / Microsoft Exchange Server 2019 Cumulative Update 11 / Microsoft Exchange Server 2019 Cumulative Update 12）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Microsoft Exchange Server 2013 Cumulative Update 23（バージョン 15.00.0 以上、15.00.1497.047 未満）が影響を受ける（x64 系システム）\n・Microsoft Exchange Server 2016 Cumulative Update 23（バージョン 15.01.0 以上、15.01.2507.021 未満）が影響を受ける（x64 系システム）\n・Microsoft Exchange Server 2019 Cumulative Update 11（バージョン 15.02.0 以上、15.02.0986.041 未満）が影響を受ける（x64 系システム）\n・Microsoft Exchange Server 2019 Cumulative Update 12（バージョン 15.02.0 以上、15.02.1118.025 未満）が影響を受ける（x64 系システム）\n・公式の対象表：Microsoft / Microsoft Exchange Server 2013 Cumulative Update 23。影響ありとして記載：15.00.0以上、15.00.1497.047未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2016 Cumulative Update 23。影響ありとして記載：15.01.0以上、15.01.2507.021未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2019 Cumulative Update 11。影響ありとして記載：15.02.0以上、15.02.0986.041未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft Exchange Server 2019 Cumulative Update 12。影響ありとして記載：15.02.0以上、15.02.1118.025未満。対象の環境：x64-based Systems\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2023-21529", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:24:18.301Z", "lastSuccess": "2026-10-23T03:24:18.301Z", "sourceCheckedAt": "2026-10-23T02:43:25.250Z", "errorCode": null }, "glossary": [ { "term": "任意のコード実行", "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。", "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html", "kind": "general_definition" } ] } }, { "id": "CVE-2023-36424", "aliases": [], "title": "Windows 11 version 22H3 / Windows Server 2022, 23H2 Edition (Server Core installation) / Windows 11 Version 23H2 / Windows 10 Version 1809 / Windows Server 2019 / Windows Server 2019 (Server Core installation) / Windows Server 2022 / Windows 11 versi：権限の奪取", "summary": "Windows の Common Log File System ドライバーにおいて、攻撃者が特権レベルを上げられる脆弱性が存在します。", "risk": "攻撃者が特権レベルを上げられる可能性があります。", "product": "Windows 11 version 22H3 / Windows Server 2022, 23H2 Edition (Server Core installation) / Windows 11 Version 23H2 / Windows 10 Version 1809 / Windows Server 2019 / Windows Server 2019 (Server Core installation) / Windows Server 2022 / Windows 11 versi", "category": "windows", "component": "package", "severity": "high", "cvss": 7.8, "cvssVersion": "3.1", "cvssSource": "microsoft", "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "affected": [ { "product": "Windows 11 version 22H3", "range": ">= 10.0.22631.0 / < 10.0.22631.2715（環境: ARM64-based Systems）" }, { "product": "Windows Server 2022, 23H2 Edition (Server Core installation)", "range": ">= 10.0.25398.0 / < 10.0.25398.531（環境: x64-based Systems）" }, { "product": "Windows 11 Version 23H2", "range": ">= 10.0.22631.0 / < 10.0.22631.2715（環境: x64-based Systems）" }, { "product": "Windows 10 Version 1809", "range": ">= 10.0.17763.0 / < 10.0.17763.5122（環境: 32-bit Systems / x64-based Systems）" }, { "product": "Windows 10 Version 1809", "range": ">= 10.0.0 / < 10.0.17763.5122（環境: ARM64-based Systems）" }, { "product": "Windows Server 2019", "range": ">= 10.0.17763.0 / < 10.0.17763.5122（環境: x64-based Systems）" }, { "product": "Windows Server 2019 (Server Core installation)", "range": ">= 10.0.17763.0 / < 10.0.17763.5122（環境: x64-based Systems）" }, { "product": "Windows Server 2022", "range": ">= 10.0.20348.0 / < 10.0.20348.2113（環境: x64-based Systems）" }, { "product": "Windows 11 version 21H2", "range": ">= 10.0.0 / < 10.0.22000.2600（環境: x64-based Systems / ARM64-based Systems）" }, { "product": "Windows 10 Version 21H2", "range": ">= 10.0.19043.0 / < 10.0.19043.3693（環境: 32-bit Systems / ARM64-based Systems / x64-based Systems）" }, { "product": "Windows 11 version 22H2", "range": ">= 10.0.22621.0 / < 10.0.22621.2715（環境: ARM64-based Systems / x64-based Systems）" }, { "product": "Windows 10 Version 22H2", "range": ">= 10.0.19045.0 / < 10.0.19045.3693（環境: x64-based Systems / ARM64-based Systems / 32-bit Systems）" }, { "product": "Windows 10 Version 1507", "range": ">= 10.0.10240.0 / < 10.0.10240.20308（環境: 32-bit Systems / x64-based Systems）" }, { "product": "Windows 10 Version 1607", "range": ">= 10.0.14393.0 / < 10.0.14393.6452（環境: 32-bit Systems / x64-based Systems）" }, { "product": "Windows Server 2016", "range": ">= 10.0.14393.0 / < 10.0.14393.6452（環境: x64-based Systems）" }, { "product": "Windows Server 2016 (Server Core installation)", "range": ">= 10.0.14393.0 / < 10.0.14393.6452（環境: x64-based Systems）" }, { "product": "Windows Server 2008 Service Pack 2", "range": ">= 6.0.6003.0 / < 6.0.6003.22367（環境: 32-bit Systems）" }, { "product": "Windows Server 2008 Service Pack 2 (Server Core installation)", "range": ">= 6.0.6003.0 / < 6.0.6003.22367（環境: 32-bit Systems / x64-based Systems）" }, { "product": "Windows Server 2008 Service Pack 2", "range": ">= 6.0.6003.0 / < 6.0.6003.22367（環境: x64-based Systems）" }, { "product": "Windows Server 2008 R2 Service Pack 1", "range": ">= 6.1.7601.0 / < 6.1.7601.26816（環境: x64-based Systems）" }, { "product": "Windows Server 2008 R2 Service Pack 1 (Server Core installation)", "range": ">= 6.1.7601.0 / < 6.1.7601.26816（環境: x64-based Systems）" }, { "product": "Windows Server 2012", "range": ">= 6.2.9200.0 / < 6.2.9200.24569（環境: x64-based Systems）" }, { "product": "Windows Server 2012 (Server Core installation)", "range": ">= 6.2.9200.0 / < 6.2.9200.24569（環境: x64-based Systems）" }, { "product": "Windows Server 2012 R2", "range": ">= 6.3.9600.0 / < 6.3.9600.21668（環境: x64-based Systems）" }, { "product": "Windows Server 2012 R2 (Server Core installation)", "range": ">= 6.3.9600.0 / < 6.3.9600.21668（環境: x64-based Systems）" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json", "label": "CVE：microsoft" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-36424", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-36424", "label": "CVE公式レコード" }, { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36424", "label": "Windows Common Log File System Driver Elevation of Privilege Vulnerability" }, { "url": "https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2023-36424", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-36424", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device", "label": "Microsoft公式：Windowsの情報を調べる" }, { "url": "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates", "label": "Microsoft公式：Windows Updateの操作" } ], "publishedAt": "2023-11-14T17:57:08.919Z", "modifiedAt": "2026-04-14T03:55:25.577Z", "fetchedAt": "2026-10-23T02:43:27.490Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "", "sourceTitle": "Windows Common Log File System Driver Elevation of Privilege Vulnerability", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Microsoft", "product": "Windows 11 version 22H3", "platforms": [ "ARM64-based Systems" ], "versions": [ { "version": "10.0.22631.0", "lessThan": "10.0.22631.2715", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2022, 23H2 Edition (Server Core installation)", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.25398.0", "lessThan": "10.0.25398.531", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 Version 23H2", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.22631.0", "lessThan": "10.0.22631.2715", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 1809", "platforms": [ "32-bit Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.17763.0", "lessThan": "10.0.17763.5122", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 1809", "platforms": [ "ARM64-based Systems" ], "versions": [ { "version": "10.0.0", "lessThan": "10.0.17763.5122", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2019", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.17763.0", "lessThan": "10.0.17763.5122", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2019 (Server Core installation)", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.17763.0", "lessThan": "10.0.17763.5122", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2022", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.20348.0", "lessThan": "10.0.20348.2113", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 version 21H2", "platforms": [ "x64-based Systems", "ARM64-based Systems" ], "versions": [ { "version": "10.0.0", "lessThan": "10.0.22000.2600", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "platforms": [ "32-bit Systems", "ARM64-based Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.19043.0", "lessThan": "10.0.19043.3693", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 version 22H2", "platforms": [ "ARM64-based Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.22621.0", "lessThan": "10.0.22621.2715", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 22H2", "platforms": [ "x64-based Systems", "ARM64-based Systems", "32-bit Systems" ], "versions": [ { "version": "10.0.19045.0", "lessThan": "10.0.19045.3693", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 1507", "platforms": [ "32-bit Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.10240.0", "lessThan": "10.0.10240.20308", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 1607", "platforms": [ "32-bit Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.14393.0", "lessThan": "10.0.14393.6452", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2016", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.14393.0", "lessThan": "10.0.14393.6452", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2016 (Server Core installation)", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.14393.0", "lessThan": "10.0.14393.6452", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2008 Service Pack 2", "platforms": [ "32-bit Systems" ], "versions": [ { "version": "6.0.6003.0", "lessThan": "6.0.6003.22367", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2008 Service Pack 2 (Server Core installation)", "platforms": [ "32-bit Systems", "x64-based Systems" ], "versions": [ { "version": "6.0.6003.0", "lessThan": "6.0.6003.22367", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2008 Service Pack 2", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "6.0.6003.0", "lessThan": "6.0.6003.22367", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2008 R2 Service Pack 1", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "6.1.7601.0", "lessThan": "6.1.7601.26816", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2008 R2 Service Pack 1 (Server Core installation)", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "6.1.7601.0", "lessThan": "6.1.7601.26816", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2012", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "6.2.9200.0", "lessThan": "6.2.9200.24569", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2012 (Server Core installation)", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "6.2.9200.0", "lessThan": "6.2.9200.24569", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2012 R2", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "6.3.9600.0", "lessThan": "6.3.9600.21668", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2012 R2 (Server Core installation)", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "6.3.9600.0", "lessThan": "6.3.9600.21668", "versionType": "custom", "status": "affected" } ] } ], "configurationNotes": "対象環境・機能: ARM64-based Systems / x64-based Systems / 32-bit Systems。製品バージョンだけでなく、原文の利用条件を照合してください。", "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2023-36424", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json", "fetchedAt": "2026-10-23T02:43:27.490Z", "publishedAt": "2023-11-14T17:57:08.919Z", "modifiedAt": "2026-04-14T03:55:25.577Z", "state": "published", "provider": "microsoft", "title": "Windows Common Log File System Driver Elevation of Privilege Vulnerability", "descriptions": [ { "lang": "en-US", "value": "Windows Common Log File System Driver Elevation of Privilege Vulnerability", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "Microsoft", "product": "Windows 11 version 22H3", "sourcePath": "/containers/cna/affected/0", "platforms": [ "ARM64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "10.0.22631.0", "lessThan": "10.0.22631.2715", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2022, 23H2 Edition (Server Core installation)", "sourcePath": "/containers/cna/affected/1", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/1/versions/0", "version": "10.0.25398.0", "lessThan": "10.0.25398.531", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 Version 23H2", "sourcePath": "/containers/cna/affected/2", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/2/versions/0", "version": "10.0.22631.0", "lessThan": "10.0.22631.2715", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 1809", "sourcePath": "/containers/cna/affected/3", "platforms": [ "32-bit Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/3/versions/0", "version": "10.0.17763.0", "lessThan": "10.0.17763.5122", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 1809", "sourcePath": "/containers/cna/affected/4", "platforms": [ "ARM64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/4/versions/0", "version": "10.0.0", "lessThan": "10.0.17763.5122", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2019", "sourcePath": "/containers/cna/affected/5", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/5/versions/0", "version": "10.0.17763.0", "lessThan": "10.0.17763.5122", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2019 (Server Core installation)", "sourcePath": "/containers/cna/affected/6", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/6/versions/0", "version": "10.0.17763.0", "lessThan": "10.0.17763.5122", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2022", "sourcePath": "/containers/cna/affected/7", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/7/versions/0", "version": "10.0.20348.0", "lessThan": "10.0.20348.2113", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 version 21H2", "sourcePath": "/containers/cna/affected/8", "platforms": [ "x64-based Systems", "ARM64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/8/versions/0", "version": "10.0.0", "lessThan": "10.0.22000.2600", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "sourcePath": "/containers/cna/affected/9", "platforms": [ "32-bit Systems", "ARM64-based Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/9/versions/0", "version": "10.0.19043.0", "lessThan": "10.0.19043.3693", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 version 22H2", "sourcePath": "/containers/cna/affected/10", "platforms": [ "ARM64-based Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/10/versions/0", "version": "10.0.22621.0", "lessThan": "10.0.22621.2715", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 22H2", "sourcePath": "/containers/cna/affected/11", "platforms": [ "x64-based Systems", "ARM64-based Systems", "32-bit Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/11/versions/0", "version": "10.0.19045.0", "lessThan": "10.0.19045.3693", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 1507", "sourcePath": "/containers/cna/affected/12", "platforms": [ "32-bit Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/12/versions/0", "version": "10.0.10240.0", "lessThan": "10.0.10240.20308", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 1607", "sourcePath": "/containers/cna/affected/13", "platforms": [ "32-bit Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/13/versions/0", "version": "10.0.14393.0", "lessThan": "10.0.14393.6452", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2016", "sourcePath": "/containers/cna/affected/14", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/14/versions/0", "version": "10.0.14393.0", "lessThan": "10.0.14393.6452", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2016 (Server Core installation)", "sourcePath": "/containers/cna/affected/15", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/15/versions/0", "version": "10.0.14393.0", "lessThan": "10.0.14393.6452", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2008 Service Pack 2", "sourcePath": "/containers/cna/affected/16", "platforms": [ "32-bit Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/16/versions/0", "version": "6.0.6003.0", "lessThan": "6.0.6003.22367", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2008 Service Pack 2 (Server Core installation)", "sourcePath": "/containers/cna/affected/17", "platforms": [ "32-bit Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/17/versions/0", "version": "6.0.6003.0", "lessThan": "6.0.6003.22367", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2008 Service Pack 2", "sourcePath": "/containers/cna/affected/18", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/18/versions/0", "version": "6.0.6003.0", "lessThan": "6.0.6003.22367", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2008 R2 Service Pack 1", "sourcePath": "/containers/cna/affected/19", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/19/versions/0", "version": "6.1.7601.0", "lessThan": "6.1.7601.26816", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2008 R2 Service Pack 1 (Server Core installation)", "sourcePath": "/containers/cna/affected/20", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/20/versions/0", "version": "6.1.7601.0", "lessThan": "6.1.7601.26816", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2012", "sourcePath": "/containers/cna/affected/21", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/21/versions/0", "version": "6.2.9200.0", "lessThan": "6.2.9200.24569", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2012 (Server Core installation)", "sourcePath": "/containers/cna/affected/22", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/22/versions/0", "version": "6.2.9200.0", "lessThan": "6.2.9200.24569", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2012 R2", "sourcePath": "/containers/cna/affected/23", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/23/versions/0", "version": "6.3.9600.0", "lessThan": "6.3.9600.21668", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2012 R2 (Server Core installation)", "sourcePath": "/containers/cna/affected/24", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/24/versions/0", "version": "6.3.9600.0", "lessThan": "6.3.9600.21668", "versionType": "custom", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-125", "lang": "en-US", "description": "CWE-125: Out-of-bounds Read", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "baseScore": 7.8, "baseSeverity": "HIGH", "provider": "microsoft", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36424", "label": "Windows Common Log File System Driver Elevation of Privilege Vulnerability", "tags": [ "vendor-advisory", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-36424", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 version 22H3\",\"platforms\":[\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.22631.0\",\"lessThan\":\"10.0.22631.2715\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json", "sourcePath": "/containers/cna/affected/1", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2022, 23H2 Edition (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.25398.0\",\"lessThan\":\"10.0.25398.531\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json", "sourcePath": "/containers/cna/affected/2", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 Version 23H2\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.22631.0\",\"lessThan\":\"10.0.22631.2715\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json", "sourcePath": "/containers/cna/affected/3", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1809\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.5122\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json", "sourcePath": "/containers/cna/affected/4", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1809\",\"platforms\":[\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"10.0.17763.5122\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json", "sourcePath": "/containers/cna/affected/5", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2019\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.5122\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/6", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json", "sourcePath": "/containers/cna/affected/6", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2019 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.5122\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/7", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json", "sourcePath": "/containers/cna/affected/7", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2022\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.20348.0\",\"lessThan\":\"10.0.20348.2113\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/8", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json", "sourcePath": "/containers/cna/affected/8", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 version 21H2\",\"platforms\":[\"x64-based Systems\",\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"10.0.22000.2600\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/9", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json", "sourcePath": "/containers/cna/affected/9", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 21H2\",\"platforms\":[\"32-bit Systems\",\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.19043.0\",\"lessThan\":\"10.0.19043.3693\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/10", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json", "sourcePath": "/containers/cna/affected/10", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 version 22H2\",\"platforms\":[\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.22621.0\",\"lessThan\":\"10.0.22621.2715\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/11", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json", "sourcePath": "/containers/cna/affected/11", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 22H2\",\"platforms\":[\"x64-based Systems\",\"ARM64-based Systems\",\"32-bit Systems\"],\"versions\":[{\"version\":\"10.0.19045.0\",\"lessThan\":\"10.0.19045.3693\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/12", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json", "sourcePath": "/containers/cna/affected/12", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1507\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.10240.0\",\"lessThan\":\"10.0.10240.20308\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/13", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json", "sourcePath": "/containers/cna/affected/13", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1607\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"10.0.14393.6452\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/14", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json", "sourcePath": "/containers/cna/affected/14", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2016\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"10.0.14393.6452\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/15", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json", "sourcePath": "/containers/cna/affected/15", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2016 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"10.0.14393.6452\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/16", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json", "sourcePath": "/containers/cna/affected/16", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2008 Service Pack 2\",\"platforms\":[\"32-bit Systems\"],\"versions\":[{\"version\":\"6.0.6003.0\",\"lessThan\":\"6.0.6003.22367\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/17", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json", "sourcePath": "/containers/cna/affected/17", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2008 Service Pack 2 (Server Core installation)\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"6.0.6003.0\",\"lessThan\":\"6.0.6003.22367\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/18", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json", "sourcePath": "/containers/cna/affected/18", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2008 Service Pack 2\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.0.6003.0\",\"lessThan\":\"6.0.6003.22367\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/19", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json", "sourcePath": "/containers/cna/affected/19", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2008 R2 Service Pack 1\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.1.7601.0\",\"lessThan\":\"6.1.7601.26816\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/20", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json", "sourcePath": "/containers/cna/affected/20", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2008 R2 Service Pack 1 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.1.7601.0\",\"lessThan\":\"6.1.7601.26816\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/21", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json", "sourcePath": "/containers/cna/affected/21", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.2.9200.0\",\"lessThan\":\"6.2.9200.24569\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/22", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json", "sourcePath": "/containers/cna/affected/22", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.2.9200.0\",\"lessThan\":\"6.2.9200.24569\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/23", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json", "sourcePath": "/containers/cna/affected/23", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012 R2\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.3.9600.0\",\"lessThan\":\"6.3.9600.21668\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/24", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json", "sourcePath": "/containers/cna/affected/24", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012 R2 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.3.9600.0\",\"lessThan\":\"6.3.9600.21668\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Windows Common Log File System Driver Elevation of Privilege Vulnerability", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"description\":\"CWE-125: Out-of-bounds Read\",\"lang\":\"en-US\",\"type\":\"CWE\",\"cweId\":\"CWE-125\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"baseSeverity\":\"HIGH\",\"baseScore\":7.8,\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-04-14T03:55:25.577Z", "fetchedAt": "2026-10-23T02:43:27.490Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-04-13T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "Windows 11 version 22H3 / Windows Server 2022, 23H2 Edition (Server Core installation) / Windows 11 Version 23H2 / Windows 10 Version 1809 / Windows Server 2019 / Windows Server 2019 (Server Core installation) / Windows Server 2022 / Windows 11 versiに権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "本来与えられていない権限で、操作される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:24:18.813Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "44e9fde6e58c220bc8fd3493d04277b71e4690ce4cd41aefed76554d8b30e47e", "sourceModifiedAt": "2026-04-14T03:55:25.577Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Windows の Common Log File System ドライバーにおいて、攻撃者が特権レベルを上げられる脆弱性が存在します。", "risk": "攻撃者が特権レベルを上げられる可能性があります。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "Windows 11 version 22H3（ARM64 系統） のビルド 10.0.22631.0 以上 10.0.22631.2715 未満が影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json" ], "evidenceIds": [ "E2", "E1" ] }, { "text": "Windows Server 2022, 23H2 Edition（Server Core インストール、x64 系統） のビルド 10.0.25398.0 以上 10.0.25398.531 未満が影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json" ], "evidenceIds": [ "E3", "E1" ] }, { "text": "Windows 11 Version 23H2（x64 系統） のビルド 10.0.22631.0 以上 10.0.22631.2715 未満が影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json" ], "evidenceIds": [ "E4", "E1" ] }, { "text": "Windows 10 Version 1809（32 ビット・x64 系統） のビルド 10.0.17763.0 以上 10.0.17763.5122 未満が影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json" ], "evidenceIds": [ "E5", "E1" ] }, { "text": "Windows 10 Version 1809（ARM64 系統） のビルド 10.0.0 以上 10.0.17763.5122 未満が影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json" ], "evidenceIds": [ "E6", "E1" ] }, { "text": "Windows Server 2019（x64 系統） のビルド 10.0.17763.0 以上 10.0.17763.5122 未満が影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json" ], "evidenceIds": [ "E7", "E1" ] }, { "text": "Windows Server 2019（Server Core インストール、x64 系統） のビルド 10.0.17763.0 以上 10.0.17763.5122 未満が影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json" ], "evidenceIds": [ "E8", "E1" ] }, { "text": "Windows Server 2022（x64 系統） のビルド 10.0.20348.0 以上 10.0.20348.2113 未満が影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json" ], "evidenceIds": [ "E9", "E1" ] }, { "text": "Windows 11 version 21H2（x64・ARM64 系統） のビルド 10.0.0 以上 10.0.22000.2600 未満が影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json" ], "evidenceIds": [ "E10", "E1" ] }, { "text": "Windows 10 Version 21H2（32 ビット・ARM64・x64 系統） のビルド 10.0.19043.0 以上 10.0.19043.3693 未満が影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json" ], "evidenceIds": [ "E11", "E1" ] }, { "text": "Windows 11 version 22H2（ARM64・x64 系統） のビルド 10.0.22621.0 以上 10.0.22621.2715 未満が影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json" ], "evidenceIds": [ "E12", "E1" ] }, { "text": "Windows 10 Version 22H2（32 ビット・x64・ARM64 系統） のビルド 10.0.19045.0 以上 10.0.19045.3693 未満が影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json" ], "evidenceIds": [ "E13", "E1" ] }, { "text": "公式の対象表：Microsoft / Windows 11 version 22H3。影響ありとして記載：10.0.22631.0以上、10.0.22631.2715未満。対象の環境：ARM64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json" ], "evidenceIds": [ "E2" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2022, 23H2 Edition (Server Core installation)。影響ありとして記載：10.0.25398.0以上、10.0.25398.531未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json" ], "evidenceIds": [ "E3" ] }, { "text": "公式の対象表：Microsoft / Windows 11 Version 23H2。影響ありとして記載：10.0.22631.0以上、10.0.22631.2715未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json" ], "evidenceIds": [ "E4" ] }, { "text": "公式の対象表：Microsoft / Windows 10 Version 1809。影響ありとして記載：10.0.17763.0以上、10.0.17763.5122未満。対象の環境：32-bit Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json" ], "evidenceIds": [ "E5" ] }, { "text": "公式の対象表：Microsoft / Windows 10 Version 1809。影響ありとして記載：10.0.0以上、10.0.17763.5122未満。対象の環境：ARM64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json" ], "evidenceIds": [ "E6" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2019。影響ありとして記載：10.0.17763.0以上、10.0.17763.5122未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json" ], "evidenceIds": [ "E7" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2019 (Server Core installation)。影響ありとして記載：10.0.17763.0以上、10.0.17763.5122未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json" ], "evidenceIds": [ "E8" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2022。影響ありとして記載：10.0.20348.0以上、10.0.20348.2113未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json" ], "evidenceIds": [ "E9" ] }, { "text": "公式の対象表：Microsoft / Windows 11 version 21H2。影響ありとして記載：10.0.0以上、10.0.22000.2600未満。対象の環境：x64-based Systems、ARM64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json" ], "evidenceIds": [ "E10" ] }, { "text": "公式の対象表：Microsoft / Windows 10 Version 21H2。影響ありとして記載：10.0.19043.0以上、10.0.19043.3693未満。対象の環境：32-bit Systems、ARM64-based Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json" ], "evidenceIds": [ "E11" ] }, { "text": "公式の対象表：Microsoft / Windows 11 version 22H2。影響ありとして記載：10.0.22621.0以上、10.0.22621.2715未満。対象の環境：ARM64-based Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json" ], "evidenceIds": [ "E12" ] }, { "text": "公式の対象表：Microsoft / Windows 10 Version 22H2。影響ありとして記載：10.0.19045.0以上、10.0.19045.3693未満。対象の環境：x64-based Systems、ARM64-based Systems、32-bit Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json" ], "evidenceIds": [ "E13" ] }, { "text": "公式の対象表：Microsoft / Windows 10 Version 1507。影響ありとして記載：10.0.10240.0以上、10.0.10240.20308未満。対象の環境：32-bit Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json" ], "evidenceIds": [ "E14" ] }, { "text": "公式の対象表：Microsoft / Windows 10 Version 1607。影響ありとして記載：10.0.14393.0以上、10.0.14393.6452未満。対象の環境：32-bit Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json" ], "evidenceIds": [ "E15" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2016。影響ありとして記載：10.0.14393.0以上、10.0.14393.6452未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json" ], "evidenceIds": [ "E16" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2016 (Server Core installation)。影響ありとして記載：10.0.14393.0以上、10.0.14393.6452未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json" ], "evidenceIds": [ "E17" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2008 Service Pack 2。影響ありとして記載：6.0.6003.0以上、6.0.6003.22367未満。対象の環境：32-bit Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json" ], "evidenceIds": [ "E18" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2008 Service Pack 2 (Server Core installation)。影響ありとして記載：6.0.6003.0以上、6.0.6003.22367未満。対象の環境：32-bit Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json" ], "evidenceIds": [ "E19" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2008 Service Pack 2。影響ありとして記載：6.0.6003.0以上、6.0.6003.22367未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json" ], "evidenceIds": [ "E20" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2008 R2 Service Pack 1。影響ありとして記載：6.1.7601.0以上、6.1.7601.26816未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json" ], "evidenceIds": [ "E21" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2008 R2 Service Pack 1 (Server Core installation)。影響ありとして記載：6.1.7601.0以上、6.1.7601.26816未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json" ], "evidenceIds": [ "E22" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2012。影響ありとして記載：6.2.9200.0以上、6.2.9200.24569未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json" ], "evidenceIds": [ "E23" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2012 (Server Core installation)。影響ありとして記載：6.2.9200.0以上、6.2.9200.24569未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json" ], "evidenceIds": [ "E24" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2012 R2。影響ありとして記載：6.3.9600.0以上、6.3.9600.21668未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json" ], "evidenceIds": [ "E25" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2012 R2 (Server Core installation)。影響ありとして記載：6.3.9600.0以上、6.3.9600.21668未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json" ], "evidenceIds": [ "E26" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-36424" ], "evidenceIds": [ "E27" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json" ], "evidenceIds": [ "E2" ] }, { "text": "「スタート」→「設定」→「システム」→「バージョン情報」を開き、Windowsのエディション・バージョン・OSビルドを控えます。会社のPCやサーバーは、この情報とCVE番号を管理担当者へ渡してください。", "kind": "procedure", "sourceUrls": [ "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json" ], "evidenceIds": [ "E2" ] } ], "temporaryMitigations": [ { "text": "すぐ更新できない場合は、CVE番号、Windowsの版、業務で必要な機能を管理担当者に伝え、修正までの利用方法と更新予定を決めてください。すべてのWindowsの問題に同じ回避策が使えるわけではありません。", "kind": "procedure", "sourceUrls": [ "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates", "https://www.cve.org/CVERecord?id=CVE-2023-36424", "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36424", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-36424", "https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2023-36424", "https://nvd.nist.gov/vuln/detail/CVE-2023-36424" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json" ], "evidenceIds": [ "E2" ] }, { "text": "再起動後にWindows Updateを開き直して失敗・再起動待ちがないか確認し、管理担当者にこのCVEに対応する修正の適用結果を確認してもらってください。「最新の状態」と出ても、別製品の更新やサポート外の版の修正を保証するものではありません。", "kind": "procedure", "sourceUrls": [ "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json", "label": "CVE：microsoft" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-36424", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-36424", "label": "CVE公式レコード" }, { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36424", "label": "Windows Common Log File System Driver Elevation of Privilege Vulnerability" }, { "url": "https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2023-36424", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-36424", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device", "label": "Microsoft公式：Windowsの情報を調べる" }, { "url": "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates", "label": "Microsoft公式：Windows Updateの操作" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json", "sourceField": "/containers/cna/title", "excerpt": "Windows Common Log File System Driver Elevation of Privilege Vulnerability", "language": null }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 version 22H3\",\"platforms\":[\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.22631.0\",\"lessThan\":\"10.0.22631.2715\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json", "sourceField": "/containers/cna/affected/1", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2022, 23H2 Edition (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.25398.0\",\"lessThan\":\"10.0.25398.531\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json", "sourceField": "/containers/cna/affected/2", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 Version 23H2\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.22631.0\",\"lessThan\":\"10.0.22631.2715\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json", "sourceField": "/containers/cna/affected/3", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1809\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.5122\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E6", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json", "sourceField": "/containers/cna/affected/4", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1809\",\"platforms\":[\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"10.0.17763.5122\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E7", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json", "sourceField": "/containers/cna/affected/5", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2019\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.5122\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E8", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json", "sourceField": "/containers/cna/affected/6", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2019 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.5122\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E9", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json", "sourceField": "/containers/cna/affected/7", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2022\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.20348.0\",\"lessThan\":\"10.0.20348.2113\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E10", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json", "sourceField": "/containers/cna/affected/8", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 version 21H2\",\"platforms\":[\"x64-based Systems\",\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"10.0.22000.2600\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E11", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json", "sourceField": "/containers/cna/affected/9", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 21H2\",\"platforms\":[\"32-bit Systems\",\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.19043.0\",\"lessThan\":\"10.0.19043.3693\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E12", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json", "sourceField": "/containers/cna/affected/10", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 version 22H2\",\"platforms\":[\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.22621.0\",\"lessThan\":\"10.0.22621.2715\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E13", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json", "sourceField": "/containers/cna/affected/11", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 22H2\",\"platforms\":[\"x64-based Systems\",\"ARM64-based Systems\",\"32-bit Systems\"],\"versions\":[{\"version\":\"10.0.19045.0\",\"lessThan\":\"10.0.19045.3693\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E14", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json", "sourceField": "/containers/cna/affected/12", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1507\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.10240.0\",\"lessThan\":\"10.0.10240.20308\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E15", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json", "sourceField": "/containers/cna/affected/13", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1607\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"10.0.14393.6452\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E16", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json", "sourceField": "/containers/cna/affected/14", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2016\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"10.0.14393.6452\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E17", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json", "sourceField": "/containers/cna/affected/15", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2016 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"10.0.14393.6452\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E18", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json", "sourceField": "/containers/cna/affected/16", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2008 Service Pack 2\",\"platforms\":[\"32-bit Systems\"],\"versions\":[{\"version\":\"6.0.6003.0\",\"lessThan\":\"6.0.6003.22367\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E19", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json", "sourceField": "/containers/cna/affected/17", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2008 Service Pack 2 (Server Core installation)\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"6.0.6003.0\",\"lessThan\":\"6.0.6003.22367\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E20", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json", "sourceField": "/containers/cna/affected/18", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2008 Service Pack 2\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.0.6003.0\",\"lessThan\":\"6.0.6003.22367\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E21", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json", "sourceField": "/containers/cna/affected/19", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2008 R2 Service Pack 1\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.1.7601.0\",\"lessThan\":\"6.1.7601.26816\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E22", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json", "sourceField": "/containers/cna/affected/20", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2008 R2 Service Pack 1 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.1.7601.0\",\"lessThan\":\"6.1.7601.26816\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E23", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json", "sourceField": "/containers/cna/affected/21", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.2.9200.0\",\"lessThan\":\"6.2.9200.24569\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E24", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json", "sourceField": "/containers/cna/affected/22", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.2.9200.0\",\"lessThan\":\"6.2.9200.24569\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E25", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json", "sourceField": "/containers/cna/affected/23", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012 R2\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.3.9600.0\",\"lessThan\":\"6.3.9600.21668\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E26", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/36xxx/CVE-2023-36424.json", "sourceField": "/containers/cna/affected/24", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012 R2 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.3.9600.0\",\"lessThan\":\"6.3.9600.21668\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E27", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-36424", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2023-36424\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2023-36424（Windows 11 version 22H3 / Windows Server 2022, 23H2 Edition (Server Core installation) / Windows 11 Version 23H2 / Windows 10 Version 1809 / Windows Server 2019 / Windows Server 2019 (Server Core installation) / Windows Server 2022 / Windows 11 versi）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Windows 11 version 22H3（ARM64 系統） のビルド 10.0.22631.0 以上 10.0.22631.2715 未満が影響を受けます。\n・Windows Server 2022, 23H2 Edition（Server Core インストール、x64 系統） のビルド 10.0.25398.0 以上 10.0.25398.531 未満が影響を受けます。\n・Windows 11 Version 23H2（x64 系統） のビルド 10.0.22631.0 以上 10.0.22631.2715 未満が影響を受けます。\n・Windows 10 Version 1809（32 ビット・x64 系統） のビルド 10.0.17763.0 以上 10.0.17763.5122 未満が影響を受けます。\n・Windows 10 Version 1809（ARM64 系統） のビルド 10.0.0 以上 10.0.17763.5122 未満が影響を受けます。\n・Windows Server 2019（x64 系統） のビルド 10.0.17763.0 以上 10.0.17763.5122 未満が影響を受けます。\n・Windows Server 2019（Server Core インストール、x64 系統） のビルド 10.0.17763.0 以上 10.0.17763.5122 未満が影響を受けます。\n・Windows Server 2022（x64 系統） のビルド 10.0.20348.0 以上 10.0.20348.2113 未満が影響を受けます。\n・Windows 11 version 21H2（x64・ARM64 系統） のビルド 10.0.0 以上 10.0.22000.2600 未満が影響を受けます。\n・Windows 10 Version 21H2（32 ビット・ARM64・x64 系統） のビルド 10.0.19043.0 以上 10.0.19043.3693 未満が影響を受けます。\n・Windows 11 version 22H2（ARM64・x64 系統） のビルド 10.0.22621.0 以上 10.0.22621.2715 未満が影響を受けます。\n・Windows 10 Version 22H2（32 ビット・x64・ARM64 系統） のビルド 10.0.19045.0 以上 10.0.19045.3693 未満が影響を受けます。\n・公式の対象表：Microsoft / Windows 11 version 22H3。影響ありとして記載：10.0.22631.0以上、10.0.22631.2715未満。対象の環境：ARM64-based Systems\n・公式の対象表：Microsoft / Windows Server 2022, 23H2 Edition (Server Core installation)。影響ありとして記載：10.0.25398.0以上、10.0.25398.531未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows 11 Version 23H2。影響ありとして記載：10.0.22631.0以上、10.0.22631.2715未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 1809。影響ありとして記載：10.0.17763.0以上、10.0.17763.5122未満。対象の環境：32-bit Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 1809。影響ありとして記載：10.0.0以上、10.0.17763.5122未満。対象の環境：ARM64-based Systems\n・公式の対象表：Microsoft / Windows Server 2019。影響ありとして記載：10.0.17763.0以上、10.0.17763.5122未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2019 (Server Core installation)。影響ありとして記載：10.0.17763.0以上、10.0.17763.5122未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2022。影響ありとして記載：10.0.20348.0以上、10.0.20348.2113未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows 11 version 21H2。影響ありとして記載：10.0.0以上、10.0.22000.2600未満。対象の環境：x64-based Systems、ARM64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 21H2。影響ありとして記載：10.0.19043.0以上、10.0.19043.3693未満。対象の環境：32-bit Systems、ARM64-based Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 11 version 22H2。影響ありとして記載：10.0.22621.0以上、10.0.22621.2715未満。対象の環境：ARM64-based Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 22H2。影響ありとして記載：10.0.19045.0以上、10.0.19045.3693未満。対象の環境：x64-based Systems、ARM64-based Systems、32-bit Systems\n・公式の対象表：Microsoft / Windows 10 Version 1507。影響ありとして記載：10.0.10240.0以上、10.0.10240.20308未満。対象の環境：32-bit Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 1607。影響ありとして記載：10.0.14393.0以上、10.0.14393.6452未満。対象の環境：32-bit Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2016。影響ありとして記載：10.0.14393.0以上、10.0.14393.6452未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2016 (Server Core installation)。影響ありとして記載：10.0.14393.0以上、10.0.14393.6452未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2008 Service Pack 2。影響ありとして記載：6.0.6003.0以上、6.0.6003.22367未満。対象の環境：32-bit Systems\n・公式の対象表：Microsoft / Windows Server 2008 Service Pack 2 (Server Core installation)。影響ありとして記載：6.0.6003.0以上、6.0.6003.22367未満。対象の環境：32-bit Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2008 Service Pack 2。影響ありとして記載：6.0.6003.0以上、6.0.6003.22367未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2008 R2 Service Pack 1。影響ありとして記載：6.1.7601.0以上、6.1.7601.26816未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2008 R2 Service Pack 1 (Server Core installation)。影響ありとして記載：6.1.7601.0以上、6.1.7601.26816未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2012。影響ありとして記載：6.2.9200.0以上、6.2.9200.24569未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2012 (Server Core installation)。影響ありとして記載：6.2.9200.0以上、6.2.9200.24569未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2012 R2。影響ありとして記載：6.3.9600.0以上、6.3.9600.21668未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2012 R2 (Server Core installation)。影響ありとして記載：6.3.9600.0以上、6.3.9600.21668未満。対象の環境：x64-based Systems\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2023-36424", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:24:18.813Z", "lastSuccess": "2026-10-23T03:24:18.813Z", "sourceCheckedAt": "2026-10-23T02:43:27.490Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2025-60710", "aliases": [], "title": "Windows 11 Version 24H2 / Windows 11 Version 25H2 / Windows Server 2025 / Windows Server 2025 (Server Core installation)：権限の奪取", "summary": "Host Process for Windows Tasks におけるファイルアクセス前のリンク解決（'リンクフォロー'）が不適切であるため、認可された攻撃者がローカルで権限を昇格させることができます。", "risk": "認可された攻撃者がローカルで権限を昇格させることができる。", "product": "Windows 11 Version 24H2 / Windows 11 Version 25H2 / Windows Server 2025 / Windows Server 2025 (Server Core installation)", "category": "windows", "component": "package", "severity": "high", "cvss": 7.8, "cvssVersion": "3.1", "cvssSource": "microsoft", "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "affected": [ { "product": "Windows 11 Version 24H2", "range": ">= 10.0.26100.0 / < 10.0.26100.7462（環境: ARM64-based Systems / x64-based Systems）" }, { "product": "Windows 11 Version 25H2", "range": ">= 10.0.26200.0 / < 10.0.26200.7462" }, { "product": "Windows Server 2025", "range": ">= 10.0.26100.0 / < 10.0.26100.7462（環境: x64-based Systems）" }, { "product": "Windows Server 2025 (Server Core installation)", "range": ">= 10.0.26100.0 / < 10.0.26100.7462（環境: x64-based Systems）" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/60xxx/CVE-2025-60710.json", "label": "CVE：microsoft" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-60710", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-60710", "label": "CVE公式レコード" }, { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60710", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-60710", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device", "label": "Microsoft公式：Windowsの情報を調べる" }, { "url": "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates", "label": "Microsoft公式：Windows Updateの操作" } ], "publishedAt": "2025-11-11T17:59:25.479Z", "modifiedAt": "2026-08-15T03:55:27.827Z", "fetchedAt": "2026-10-23T02:43:39.671Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "", "sourceTitle": "Host Process for Windows Tasks Elevation of Privilege Vulnerability", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Microsoft", "product": "Windows 11 Version 24H2", "platforms": [ "ARM64-based Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.26100.0", "lessThan": "10.0.26100.7462", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 Version 25H2", "versions": [ { "version": "10.0.26200.0", "lessThan": "10.0.26200.7462", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2025", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.26100.0", "lessThan": "10.0.26100.7462", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2025 (Server Core installation)", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.26100.0", "lessThan": "10.0.26100.7462", "versionType": "custom", "status": "affected" } ] } ], "configurationNotes": "対象環境・機能: ARM64-based Systems / x64-based Systems。製品バージョンだけでなく、原文の利用条件を照合してください。", "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2025-60710", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/60xxx/CVE-2025-60710.json", "fetchedAt": "2026-10-23T02:43:39.671Z", "publishedAt": "2025-11-11T17:59:25.479Z", "modifiedAt": "2026-08-15T03:55:27.827Z", "state": "published", "provider": "microsoft", "title": "Host Process for Windows Tasks Elevation of Privilege Vulnerability", "descriptions": [ { "lang": "en-US", "value": "Improper link resolution before file access ('link following') in Host Process for Windows Tasks allows an authorized attacker to elevate privileges locally.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "Microsoft", "product": "Windows 11 Version 24H2", "sourcePath": "/containers/cna/affected/0", "platforms": [ "ARM64-based Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "10.0.26100.0", "lessThan": "10.0.26100.7462", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 Version 25H2", "sourcePath": "/containers/cna/affected/1", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/1/versions/0", "version": "10.0.26200.0", "lessThan": "10.0.26200.7462", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2025", "sourcePath": "/containers/cna/affected/2", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/2/versions/0", "version": "10.0.26100.0", "lessThan": "10.0.26100.7462", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2025 (Server Core installation)", "sourcePath": "/containers/cna/affected/3", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/3/versions/0", "version": "10.0.26100.0", "lessThan": "10.0.26100.7462", "versionType": "custom", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-59", "lang": "en-US", "description": "CWE-59: Improper Link Resolution Before File Access ('Link Following')", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "baseScore": 7.8, "baseSeverity": "HIGH", "provider": "microsoft", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60710", "label": "Host Process for Windows Tasks Elevation of Privilege Vulnerability", "tags": [ "vendor-advisory", "patch" ], "provider": "microsoft", "sourcePath": "/containers/cna/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-60710", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://www.vicarius.io/vsociety/posts/cve-2025-60710-detection-script-eop-vulnerability-in-host-process-for-windows-tasks", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/0" }, { "url": "https://www.vicarius.io/vsociety/posts/cve-2025-60710-mitigation-script-eop-vulnerability-in-host-process-for-windows-tasks", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/1" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/60xxx/CVE-2025-60710.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 Version 24H2\",\"platforms\":[\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.26100.0\",\"lessThan\":\"10.0.26100.7462\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/60xxx/CVE-2025-60710.json", "sourcePath": "/containers/cna/affected/1", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 Version 25H2\",\"versions\":[{\"version\":\"10.0.26200.0\",\"lessThan\":\"10.0.26200.7462\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/60xxx/CVE-2025-60710.json", "sourcePath": "/containers/cna/affected/2", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2025\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.26100.0\",\"lessThan\":\"10.0.26100.7462\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/60xxx/CVE-2025-60710.json", "sourcePath": "/containers/cna/affected/3", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2025 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.26100.0\",\"lessThan\":\"10.0.26100.7462\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/60xxx/CVE-2025-60710.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Improper link resolution before file access ('link following') in Host Process for Windows Tasks allows an authorized attacker to elevate privileges locally.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/60xxx/CVE-2025-60710.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"description\":\"CWE-59: Improper Link Resolution Before File Access ('Link Following')\",\"lang\":\"en-US\",\"type\":\"CWE\",\"cweId\":\"CWE-59\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/60xxx/CVE-2025-60710.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"baseSeverity\":\"HIGH\",\"baseScore\":7.8,\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-08-15T03:55:27.827Z", "fetchedAt": "2026-10-23T02:43:39.671Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-04-13T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "Windows 11 Version 24H2 / Windows 11 Version 25H2 / Windows Server 2025 / Windows Server 2025 (Server Core installation)に権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "本来与えられていない権限で、操作される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:24:19.487Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "cb4a1d1789d07504533bee795ff4c9108dc165bee423c1865fb73e1f998d0f9a", "sourceModifiedAt": "2026-08-15T03:55:27.827Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Host Process for Windows Tasks におけるファイルアクセス前のリンク解決（'リンクフォロー'）が不適切であるため、認可された攻撃者がローカルで権限を昇格させることができます。", "risk": "認可された攻撃者がローカルで権限を昇格させることができる。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "Windows 11 Version 24H2 の ARM64 ベースおよび x64 ベースのシステムで、バージョン 10.0.26100.0 以上 10.0.26100.7462 未満が影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/60xxx/CVE-2025-60710.json" ], "evidenceIds": [ "E3", "E2" ] }, { "text": "Windows 11 Version 25H2 で、バージョン 10.0.26200.0 以上 10.0.26200.7462 未満が影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/60xxx/CVE-2025-60710.json" ], "evidenceIds": [ "E4", "E2" ] }, { "text": "Windows Server 2025 の x64 ベースシステムで、バージョン 10.0.26100.0 以上 10.0.26100.7462 未満が影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/60xxx/CVE-2025-60710.json" ], "evidenceIds": [ "E5", "E2" ] }, { "text": "Windows Server 2025 (Server Core インストール) の x64 ベースシステムで、バージョン 10.0.26100.0 以上 10.0.26100.7462 未満が影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/60xxx/CVE-2025-60710.json" ], "evidenceIds": [ "E6", "E2" ] }, { "text": "公式の対象表：Microsoft / Windows 11 Version 24H2。影響ありとして記載：10.0.26100.0以上、10.0.26100.7462未満。対象の環境：ARM64-based Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/60xxx/CVE-2025-60710.json" ], "evidenceIds": [ "E3" ] }, { "text": "公式の対象表：Microsoft / Windows 11 Version 25H2。影響ありとして記載：10.0.26200.0以上、10.0.26200.7462未満。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/60xxx/CVE-2025-60710.json" ], "evidenceIds": [ "E4" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2025。影響ありとして記載：10.0.26100.0以上、10.0.26100.7462未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/60xxx/CVE-2025-60710.json" ], "evidenceIds": [ "E5" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2025 (Server Core installation)。影響ありとして記載：10.0.26100.0以上、10.0.26100.7462未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/60xxx/CVE-2025-60710.json" ], "evidenceIds": [ "E6" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-60710" ], "evidenceIds": [ "E7" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/60xxx/CVE-2025-60710.json" ], "evidenceIds": [ "E3" ] }, { "text": "「スタート」→「設定」→「システム」→「バージョン情報」を開き、Windowsのエディション・バージョン・OSビルドを控えます。会社のPCやサーバーは、この情報とCVE番号を管理担当者へ渡してください。", "kind": "procedure", "sourceUrls": [ "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/60xxx/CVE-2025-60710.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "すぐ更新できない場合は、CVE番号、Windowsの版、業務で必要な機能を管理担当者に伝え、修正までの利用方法と更新予定を決めてください。すべてのWindowsの問題に同じ回避策が使えるわけではありません。", "kind": "procedure", "sourceUrls": [ "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates", "https://www.cve.org/CVERecord?id=CVE-2025-60710", "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60710", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-60710", "https://nvd.nist.gov/vuln/detail/CVE-2025-60710" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/60xxx/CVE-2025-60710.json" ], "evidenceIds": [ "E3" ] }, { "text": "再起動後にWindows Updateを開き直して失敗・再起動待ちがないか確認し、管理担当者にこのCVEに対応する修正の適用結果を確認してもらってください。「最新の状態」と出ても、別製品の更新やサポート外の版の修正を保証するものではありません。", "kind": "procedure", "sourceUrls": [ "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/60xxx/CVE-2025-60710.json", "label": "CVE：microsoft" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-60710", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-60710", "label": "CVE公式レコード" }, { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60710", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-60710", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device", "label": "Microsoft公式：Windowsの情報を調べる" }, { "url": "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates", "label": "Microsoft公式：Windows Updateの操作" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/60xxx/CVE-2025-60710.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Improper link resolution before file access ('link following') in Host Process for Windows Tasks allows an authorized attacker to elevate privileges locally.", "language": "en-US", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/60xxx/CVE-2025-60710.json", "sourceField": "/containers/cna/title", "excerpt": "Host Process for Windows Tasks Elevation of Privilege Vulnerability", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/60xxx/CVE-2025-60710.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 Version 24H2\",\"platforms\":[\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.26100.0\",\"lessThan\":\"10.0.26100.7462\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/60xxx/CVE-2025-60710.json", "sourceField": "/containers/cna/affected/1", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 Version 25H2\",\"versions\":[{\"version\":\"10.0.26200.0\",\"lessThan\":\"10.0.26200.7462\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/60xxx/CVE-2025-60710.json", "sourceField": "/containers/cna/affected/2", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2025\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.26100.0\",\"lessThan\":\"10.0.26100.7462\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E6", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/60xxx/CVE-2025-60710.json", "sourceField": "/containers/cna/affected/3", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2025 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.26100.0\",\"lessThan\":\"10.0.26100.7462\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E7", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-60710", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2025-60710\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2025-60710（Windows 11 Version 24H2 / Windows 11 Version 25H2 / Windows Server 2025 / Windows Server 2025 (Server Core installation)）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Windows 11 Version 24H2 の ARM64 ベースおよび x64 ベースのシステムで、バージョン 10.0.26100.0 以上 10.0.26100.7462 未満が影響を受けます。\n・Windows 11 Version 25H2 で、バージョン 10.0.26200.0 以上 10.0.26200.7462 未満が影響を受けます。\n・Windows Server 2025 の x64 ベースシステムで、バージョン 10.0.26100.0 以上 10.0.26100.7462 未満が影響を受けます。\n・Windows Server 2025 (Server Core インストール) の x64 ベースシステムで、バージョン 10.0.26100.0 以上 10.0.26100.7462 未満が影響を受けます。\n・公式の対象表：Microsoft / Windows 11 Version 24H2。影響ありとして記載：10.0.26100.0以上、10.0.26100.7462未満。対象の環境：ARM64-based Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 11 Version 25H2。影響ありとして記載：10.0.26200.0以上、10.0.26200.7462未満。\n・公式の対象表：Microsoft / Windows Server 2025。影響ありとして記載：10.0.26100.0以上、10.0.26100.7462未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2025 (Server Core installation)。影響ありとして記載：10.0.26100.0以上、10.0.26100.7462未満。対象の環境：x64-based Systems\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2025-60710", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:24:19.487Z", "lastSuccess": "2026-10-23T03:24:19.487Z", "sourceCheckedAt": "2026-10-23T02:43:39.671Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2026-21643", "aliases": [], "title": "FortiClientEMS：データベースへの不正操作", "summary": "FortiClientEMS 7.4.4 において、SQL コマンドで使用される特別な要素が適切に無効化されていない（SQL インジェクション）脆弱性があり、認証されていない攻撃者が特別に細工した HTTP リクエストを送ることで、許可されていないコードやコマンドを実行できる可能性があります。", "risk": "攻撃者が不正なコードやコマンドを実行できる可能性がある。", "product": "FortiClientEMS", "category": "other", "component": "package", "severity": "critical", "cvss": 9.1, "cvssVersion": "3.1", "cvssSource": "fortinet", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C", "affected": [ { "product": "FortiClientEMS", "range": "7.4.4" } ], "fixed": [], "steps": [ "公式の対策欄では、次の対応は公開予定の版について示されています。入手できることを前提にせず、現在の提供状況と適用時期を管理担当者・提供元に確認してください。公開された場合の対応：FortiClientEMS をバージョン 8.0.0 以上、またはバージョン 7.4.5 以上にアップグレードする。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/21xxx/CVE-2026-21643.json", "label": "CVE：fortinet" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-21643", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-21643", "label": "CVE公式レコード" }, { "url": "https://fortiguard.fortinet.com/psirt/FG-IR-25-1142", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-21643", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2026-02-06T08:24:43.877Z", "modifiedAt": "2026-04-14T03:55:26.806Z", "fetchedAt": "2026-10-23T02:43:47.865Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiClientEMS 7.4.4 may allow an unauthenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Fortinet", "product": "FortiClientEMS", "cpes": [ "cpe:2.3:a:fortinet:forticlientems:7.4.4:*:*:*:*:*:*:*" ], "defaultStatus": "unaffected", "versions": [ { "version": "7.4.4", "status": "affected" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-21643", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/21xxx/CVE-2026-21643.json", "fetchedAt": "2026-10-23T02:43:47.865Z", "publishedAt": "2026-02-06T08:24:43.877Z", "modifiedAt": "2026-04-14T03:55:26.806Z", "state": "published", "provider": "fortinet", "title": "", "descriptions": [ { "lang": "en", "value": "An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiClientEMS 7.4.4 may allow an unauthenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "Fortinet", "product": "FortiClientEMS", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [ "cpe:2.3:a:fortinet:forticlientems:7.4.4:*:*:*:*:*:*:*" ], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "7.4.4", "status": "affected" } ] } ], "solutions": [ { "lang": "en", "value": "Upgrade to upcoming FortiClientEMS version 8.0.0 or above\nUpgrade to FortiClientEMS version 7.4.5 or above", "sourcePath": "/containers/cna/solutions/0/value" } ], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-89", "lang": "en", "description": "Execute unauthorized code or commands", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C", "baseScore": 9.1, "baseSeverity": "CRITICAL", "provider": "fortinet", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://fortiguard.fortinet.com/psirt/FG-IR-25-1142", "label": "https://fortiguard.fortinet.com/psirt/FG-IR-25-1142", "tags": [], "provider": "fortinet", "sourcePath": "/containers/cna/references/0" }, { "url": "https://github.com/0xBlackash/CVE-2026-21643/blob/main/cve-2026-21643.py", "label": "CISA-ADP", "tags": [ "exploit" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-21643", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/1" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/21xxx/CVE-2026-21643.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Fortinet\",\"product\":\"FortiClientEMS\",\"cpes\":[\"cpe:2.3:a:fortinet:forticlientems:7.4.4:*:*:*:*:*:*:*\"],\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"7.4.4\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/21xxx/CVE-2026-21643.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiClientEMS 7.4.4 may allow an unauthenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/solutions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/21xxx/CVE-2026-21643.json", "sourcePath": "/containers/cna/solutions/0/value", "text": "Upgrade to upcoming FortiClientEMS version 8.0.0 or above\nUpgrade to FortiClientEMS version 7.4.5 or above", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/21xxx/CVE-2026-21643.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"cweId\":\"CWE-89\",\"description\":\"Execute unauthorized code or commands\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/21xxx/CVE-2026-21643.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"attackComplexity\":\"LOW\",\"attackVector\":\"NETWORK\",\"availabilityImpact\":\"HIGH\",\"baseScore\":9.1,\"baseSeverity\":\"CRITICAL\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"scope\":\"UNCHANGED\",\"userInteraction\":\"NONE\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-04-14T03:55:26.806Z", "fetchedAt": "2026-10-23T02:43:47.865Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-04-13T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "FortiClientEMSにデータベースへの不正操作に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "データベースに不正な命令を送られ、情報の閲覧や変更につながる可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:24:20.099Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "531c9ff1f205707868e12885cf995e33433f7ef5f2a6007826b3e6ee397b1040", "sourceModifiedAt": "2026-04-14T03:55:26.806Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "FortiClientEMS 7.4.4 において、SQL コマンドで使用される特別な要素が適切に無効化されていない（SQL インジェクション）脆弱性があり、認証されていない攻撃者が特別に細工した HTTP リクエストを送ることで、許可されていないコードやコマンドを実行できる可能性があります。", "risk": "攻撃者が不正なコードやコマンドを実行できる可能性がある。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E1", "E2" ], "applicability": [ { "text": "FortiClientEMS バージョン 7.4.4 が影響を受ける。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/21xxx/CVE-2026-21643.json" ], "evidenceIds": [ "E3" ] }, { "text": "認証されていない攻撃者が細工した HTTP リクエストを送信することで、上記のコード実行が可能になる。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/21xxx/CVE-2026-21643.json" ], "evidenceIds": [ "E1" ] }, { "text": "公式の対象表：Fortinet / FortiClientEMS。影響ありとして記載：7.4.4。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/21xxx/CVE-2026-21643.json" ], "evidenceIds": [ "E3" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-21643" ], "evidenceIds": [ "E5" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/21xxx/CVE-2026-21643.json" ], "evidenceIds": [ "E3" ] }, { "text": "「FortiClientEMS」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-21643", "https://fortiguard.fortinet.com/psirt/FG-IR-25-1142", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-21643", "https://nvd.nist.gov/vuln/detail/CVE-2026-21643" ] } ], "actions": [ { "text": "公式の対策欄では、次の対応は公開予定の版について示されています。入手できることを前提にせず、現在の提供状況と適用時期を管理担当者・提供元に確認してください。公開された場合の対応：FortiClientEMS をバージョン 8.0.0 以上、またはバージョン 7.4.5 以上にアップグレードする。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/21xxx/CVE-2026-21643.json" ], "evidenceIds": [ "E4" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2026-21643", "https://fortiguard.fortinet.com/psirt/FG-IR-25-1142", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-21643", "https://nvd.nist.gov/vuln/detail/CVE-2026-21643" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/21xxx/CVE-2026-21643.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-21643", "https://fortiguard.fortinet.com/psirt/FG-IR-25-1142", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-21643", "https://nvd.nist.gov/vuln/detail/CVE-2026-21643" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/21xxx/CVE-2026-21643.json", "label": "CVE：fortinet" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-21643", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-21643", "label": "CVE公式レコード" }, { "url": "https://fortiguard.fortinet.com/psirt/FG-IR-25-1142", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-21643", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/21xxx/CVE-2026-21643.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiClientEMS 7.4.4 may allow an unauthenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/21xxx/CVE-2026-21643.json", "sourceField": "/containers/cna/problemTypes/0/descriptions/0", "excerpt": "{\"lang\":\"en\",\"cweId\":\"CWE-89\",\"description\":\"Execute unauthorized code or commands\",\"type\":\"CWE\"}", "language": null, "representation": "source_json" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/21xxx/CVE-2026-21643.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Fortinet\",\"product\":\"FortiClientEMS\",\"cpes\":[\"cpe:2.3:a:fortinet:forticlientems:7.4.4:*:*:*:*:*:*:*\"],\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"7.4.4\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/21xxx/CVE-2026-21643.json", "sourceField": "/containers/cna/solutions/0/value", "excerpt": "Upgrade to upcoming FortiClientEMS version 8.0.0 or above\nUpgrade to FortiClientEMS version 7.4.5 or above", "language": "en", "representation": "source_excerpt" }, { "id": "E5", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-21643", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2026-21643\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2026-21643（FortiClientEMS）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・FortiClientEMS バージョン 7.4.4 が影響を受ける。\n・認証されていない攻撃者が細工した HTTP リクエストを送信することで、上記のコード実行が可能になる。\n・公式の対象表：Fortinet / FortiClientEMS。影響ありとして記載：7.4.4。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-21643\n\n公式資料で追加確認が必要な点：\n・公式情報では 8.0.0 が公開予定または未リリースとして記載されています。", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [ { "code": "planned_release", "text": "公式情報では 8.0.0 が公開予定または未リリースとして記載されています。", "evidenceIds": [ "E4" ] } ], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:24:20.099Z", "lastSuccess": "2026-10-23T03:24:20.099Z", "sourceCheckedAt": "2026-10-23T02:43:47.865Z", "errorCode": null }, "glossary": [ { "term": "SQLインジェクション", "meaning": "入力した値がデータベースへの命令として扱われ、意図しない問い合わせや操作をされる問題です。読み取り・書き換えなど、可能なことは脆弱性ごとに異なります。", "sourceUrl": "https://cwe.mitre.org/data/definitions/89.html", "kind": "general_definition" } ] } }, { "id": "CVE-2026-34621", "aliases": [], "title": "Acrobat DC / Acrobat Reader DC / Acrobat 2024：コード実行", "summary": "Acrobat Reader バージョン 24.001.30356、26.001.21367 以前は、オブジェクトプロトタイプ属性の不適切な制御による変更（Prototype Pollution）という脆弱性があり、現在のユーザーのコンテキストで任意のコードを実行できる可能性があります。攻撃の実行には、被害者が悪意のあるファイルを開くというユーザー操作が必要です。", "risk": "任意のコードが現在のユーザー権限で実行される可能性がある。", "product": "Acrobat DC / Acrobat Reader DC / Acrobat 2024", "category": "other", "component": "package", "severity": "high", "cvss": 8.6, "cvssVersion": "3.1", "cvssSource": "adobe", "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "affected": [ { "product": "Acrobat DC", "range": "<= 26.001.21367" }, { "product": "Acrobat Reader DC", "range": "<= 26.001.21367" }, { "product": "Acrobat 2024", "range": "<= 24.001.30356" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34621.json", "label": "CVE：adobe" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-34621", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-34621", "label": "CVE公式レコード" }, { "url": "https://helpx.adobe.com/security/products/acrobat/apsb26-43.html", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34621", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2026-04-11T06:45:43.512Z", "modifiedAt": "2026-08-27T22:15:48.961Z", "fetchedAt": "2026-10-23T02:43:48.469Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "Acrobat Reader versions 24.001.30356, 26.001.21367 and earlier are affected by an Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.", "sourceTitle": "Acrobat Reader | Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (CWE-1321)", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "defaultStatus": "unaffected", "product": "Acrobat DC", "vendor": "Adobe", "versions": [ { "lessThanOrEqual": "26.001.21367", "status": "affected", "version": "0", "versionType": "custom" }, { "status": "unaffected", "version": "26.001.21411", "versionType": "custom" } ] }, { "defaultStatus": "unaffected", "product": "Acrobat Reader DC", "vendor": "Adobe", "versions": [ { "lessThanOrEqual": "26.001.21367", "status": "affected", "version": "0", "versionType": "custom" }, { "status": "unaffected", "version": "26.001.21411", "versionType": "custom" } ] }, { "defaultStatus": "unaffected", "product": "Acrobat 2024", "vendor": "Adobe", "versions": [ { "lessThanOrEqual": "24.001.30356", "status": "affected", "version": "0", "versionType": "custom" }, { "status": "unaffected", "version": "24.001.30362 (Win), 24.001.30360 (Mac)", "versionType": "custom" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-34621", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34621.json", "fetchedAt": "2026-10-23T02:43:48.469Z", "publishedAt": "2026-04-11T06:45:43.512Z", "modifiedAt": "2026-08-27T22:15:48.961Z", "state": "published", "provider": "adobe", "title": "Acrobat Reader | Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (CWE-1321)", "descriptions": [ { "lang": "en", "value": "Acrobat Reader versions 24.001.30356, 26.001.21367 and earlier are affected by an Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "Adobe", "product": "Acrobat DC", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "0", "lessThanOrEqual": "26.001.21367", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": "26.001.21411", "versionType": "custom", "status": "unaffected" } ] }, { "vendor": "Adobe", "product": "Acrobat Reader DC", "sourcePath": "/containers/cna/affected/1", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/1/versions/0", "version": "0", "lessThanOrEqual": "26.001.21367", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/1", "version": "26.001.21411", "versionType": "custom", "status": "unaffected" } ] }, { "vendor": "Adobe", "product": "Acrobat 2024", "sourcePath": "/containers/cna/affected/2", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/2/versions/0", "version": "0", "lessThanOrEqual": "24.001.30356", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/2/versions/1", "version": "24.001.30362 (Win), 24.001.30360 (Mac)", "versionType": "custom", "status": "unaffected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-1321", "lang": "en", "description": "Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (CWE-1321)", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "baseScore": 8.6, "baseSeverity": "HIGH", "provider": "adobe", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://helpx.adobe.com/security/products/acrobat/apsb26-43.html", "label": "adobe", "tags": [ "vendor-advisory" ], "provider": "adobe", "sourcePath": "/containers/cna/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-34621", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34621.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"defaultStatus\":\"unaffected\",\"product\":\"Acrobat DC\",\"vendor\":\"Adobe\",\"versions\":[{\"lessThanOrEqual\":\"26.001.21367\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"},{\"status\":\"unaffected\",\"version\":\"26.001.21411\",\"versionType\":\"custom\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34621.json", "sourcePath": "/containers/cna/affected/1", "text": "{\"defaultStatus\":\"unaffected\",\"product\":\"Acrobat Reader DC\",\"vendor\":\"Adobe\",\"versions\":[{\"lessThanOrEqual\":\"26.001.21367\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"},{\"status\":\"unaffected\",\"version\":\"26.001.21411\",\"versionType\":\"custom\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34621.json", "sourcePath": "/containers/cna/affected/2", "text": "{\"defaultStatus\":\"unaffected\",\"product\":\"Acrobat 2024\",\"vendor\":\"Adobe\",\"versions\":[{\"lessThanOrEqual\":\"24.001.30356\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"},{\"status\":\"unaffected\",\"version\":\"24.001.30362 (Win), 24.001.30360 (Mac)\",\"versionType\":\"custom\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34621.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Acrobat Reader versions 24.001.30356, 26.001.21367 and earlier are affected by an Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34621.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"cweId\":\"CWE-1321\",\"description\":\"Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (CWE-1321)\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34621.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"attackComplexity\":\"LOW\",\"attackVector\":\"LOCAL\",\"availabilityImpact\":\"HIGH\",\"availabilityRequirement\":\"NOT_DEFINED\",\"baseScore\":8.6,\"baseSeverity\":\"HIGH\",\"confidentialityImpact\":\"HIGH\",\"confidentialityRequirement\":\"NOT_DEFINED\",\"environmentalScore\":8.6,\"environmentalSeverity\":\"HIGH\",\"exploitCodeMaturity\":\"NOT_DEFINED\",\"integrityImpact\":\"HIGH\",\"integrityRequirement\":\"NOT_DEFINED\",\"modifiedAttackComplexity\":\"LOW\",\"modifiedAttackVector\":\"LOCAL\",\"modifiedAvailabilityImpact\":\"HIGH\",\"modifiedConfidentialityImpact\":\"HIGH\",\"modifiedIntegrityImpact\":\"HIGH\",\"modifiedPrivilegesRequired\":\"NONE\",\"modifiedScope\":\"CHANGED\",\"modifiedUserInteraction\":\"REQUIRED\",\"privilegesRequired\":\"NONE\",\"remediationLevel\":\"NOT_DEFINED\",\"reportConfidence\":\"NOT_DEFINED\",\"scope\":\"CHANGED\",\"temporalScore\":8.6,\"temporalSeverity\":\"HIGH\",\"userInteraction\":\"REQUIRED\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H\",\"version\":\"3.1\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-08-27T22:15:48.961Z", "fetchedAt": "2026-10-23T02:43:48.469Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-04-13T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "Acrobat DC / Acrobat Reader DC / Acrobat 2024にコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:24:20.591Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "7454dcc8b6bd0fffcf5bbee856f46f45610fbb2e7581146f61483618f0b84817", "sourceModifiedAt": "2026-08-27T22:15:48.961Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Acrobat Reader バージョン 24.001.30356、26.001.21367 以前は、オブジェクトプロトタイプ属性の不適切な制御による変更（Prototype Pollution）という脆弱性があり、現在のユーザーのコンテキストで任意のコードを実行できる可能性があります。攻撃の実行には、被害者が悪意のあるファイルを開くというユーザー操作が必要です。", "risk": "任意のコードが現在のユーザー権限で実行される可能性がある。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "Acrobat DC のバージョンが 26.001.21367 以下（0 を含む）で影響を受ける。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34621.json" ], "evidenceIds": [ "E3", "E2" ] }, { "text": "Acrobat Reader DC のバージョンが 26.001.21367 以下（0 を含む）で影響を受ける。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34621.json" ], "evidenceIds": [ "E4", "E2" ] }, { "text": "Acrobat 2024 のバージョンが 24.001.30356 以下（0 を含む）で影響を受ける。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34621.json" ], "evidenceIds": [ "E5", "E2" ] }, { "text": "攻撃を実行するには、被害者が悪意のあるファイルを開く必要がある。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34621.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "公式の対象表：Adobe / Acrobat DC。影響ありとして記載：26.001.21367以下の版。影響なしとして記載：26.001.21411。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34621.json" ], "evidenceIds": [ "E3" ] }, { "text": "公式の対象表：Adobe / Acrobat Reader DC。影響ありとして記載：26.001.21367以下の版。影響なしとして記載：26.001.21411。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34621.json" ], "evidenceIds": [ "E4" ] }, { "text": "公式の対象表：Adobe / Acrobat 2024。影響ありとして記載：24.001.30356以下の版。影響なしとして記載：24.001.30362 (Win), 24.001.30360 (Mac)。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34621.json" ], "evidenceIds": [ "E5" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-34621" ], "evidenceIds": [ "E6" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34621.json" ], "evidenceIds": [ "E3" ] }, { "text": "「Acrobat DC / Acrobat Reader DC / Acrobat 2024」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-34621", "https://helpx.adobe.com/security/products/acrobat/apsb26-43.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-34621", "https://nvd.nist.gov/vuln/detail/CVE-2026-34621" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34621.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2026-34621", "https://helpx.adobe.com/security/products/acrobat/apsb26-43.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-34621", "https://nvd.nist.gov/vuln/detail/CVE-2026-34621" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34621.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-34621", "https://helpx.adobe.com/security/products/acrobat/apsb26-43.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-34621", "https://nvd.nist.gov/vuln/detail/CVE-2026-34621" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34621.json", "label": "CVE：adobe" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-34621", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-34621", "label": "CVE公式レコード" }, { "url": "https://helpx.adobe.com/security/products/acrobat/apsb26-43.html", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34621", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34621.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Acrobat Reader versions 24.001.30356, 26.001.21367 and earlier are affected by an Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34621.json", "sourceField": "/containers/cna/title", "excerpt": "Acrobat Reader | Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (CWE-1321)", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34621.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"defaultStatus\":\"unaffected\",\"product\":\"Acrobat DC\",\"vendor\":\"Adobe\",\"versions\":[{\"lessThanOrEqual\":\"26.001.21367\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"},{\"status\":\"unaffected\",\"version\":\"26.001.21411\",\"versionType\":\"custom\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34621.json", "sourceField": "/containers/cna/affected/1", "excerpt": "{\"defaultStatus\":\"unaffected\",\"product\":\"Acrobat Reader DC\",\"vendor\":\"Adobe\",\"versions\":[{\"lessThanOrEqual\":\"26.001.21367\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"},{\"status\":\"unaffected\",\"version\":\"26.001.21411\",\"versionType\":\"custom\"}]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34621.json", "sourceField": "/containers/cna/affected/2", "excerpt": "{\"defaultStatus\":\"unaffected\",\"product\":\"Acrobat 2024\",\"vendor\":\"Adobe\",\"versions\":[{\"lessThanOrEqual\":\"24.001.30356\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"},{\"status\":\"unaffected\",\"version\":\"24.001.30362 (Win), 24.001.30360 (Mac)\",\"versionType\":\"custom\"}]}", "language": null, "representation": "source_json" }, { "id": "E6", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-34621", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2026-34621\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2026-34621（Acrobat DC / Acrobat Reader DC / Acrobat 2024）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Acrobat DC のバージョンが 26.001.21367 以下（0 を含む）で影響を受ける。\n・Acrobat Reader DC のバージョンが 26.001.21367 以下（0 を含む）で影響を受ける。\n・Acrobat 2024 のバージョンが 24.001.30356 以下（0 を含む）で影響を受ける。\n・攻撃を実行するには、被害者が悪意のあるファイルを開く必要がある。\n・公式の対象表：Adobe / Acrobat DC。影響ありとして記載：26.001.21367以下の版。影響なしとして記載：26.001.21411。\n・公式の対象表：Adobe / Acrobat Reader DC。影響ありとして記載：26.001.21367以下の版。影響なしとして記載：26.001.21411。\n・公式の対象表：Adobe / Acrobat 2024。影響ありとして記載：24.001.30356以下の版。影響なしとして記載：24.001.30362 (Win), 24.001.30360 (Mac)。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-34621", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:24:20.591Z", "lastSuccess": "2026-10-23T03:24:20.591Z", "sourceCheckedAt": "2026-10-23T02:43:48.469Z", "errorCode": null }, "glossary": [ { "term": "任意のコード実行", "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。", "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html", "kind": "general_definition" } ] } }, { "id": "CVE-2026-1340", "aliases": [], "title": "Endpoint Manager Mobile：コード実行", "summary": "Ivanti Endpoint Manager Mobile にコードインジェクションの脆弱性があり、攻撃者は認証なしでリモートコード実行を行うことができる。", "risk": "攻撃者が認証なしでサーバーや機器に任意のコードを実行させられる可能性がある。", "product": "Endpoint Manager Mobile", "category": "other", "component": "package", "severity": "critical", "cvss": 9.8, "cvssVersion": "3.1", "cvssSource": "ivanti", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "affected": [ { "product": "Endpoint Manager Mobile", "range": "原典の既定状態: 影響あり。個別指定外の版は例外・条件を原文で確認してください。" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/1xxx/CVE-2026-1340.json", "label": "CVE：ivanti" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-1340", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-1340", "label": "CVE公式レコード" }, { "url": "https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Endpoint-Manager-Mobile-EPMM-CVE-2026-1281-CVE-2026-1340", "label": "CVE掲載の参考情報" }, { "url": "https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Endpoint-Manager-Mobile-EPMM-CVE-2026-1281-CVE-2026-1340?language=en_US", "label": "CISAが示す関連情報" }, { "url": "https://support.mobileiron.com/mi/vsp/AB1786671/ivanti-security-update-1761642-1.1.0S-5.noarch.rpm", "label": "CISAが示す関連情報" }, { "url": "https://support.mobileiron.com/mi/vsp/AB1786671/ivanti-security-update-1761642-1.1.0L-5.noarch.rpm", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-1340", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2026-01-29T21:33:11.768Z", "modifiedAt": "2026-04-09T03:55:54.081Z", "fetchedAt": "2026-10-23T02:43:46.125Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "A code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated remote code execution.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "defaultStatus": "affected", "product": "Endpoint Manager Mobile", "vendor": "Ivanti", "versions": [ { "status": "unaffected", "version": "12.x.1.x RPM", "versionType": "custom" }, { "status": "unaffected", "version": "12.x.0.x RPM", "versionType": "custom" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-1340", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/1xxx/CVE-2026-1340.json", "fetchedAt": "2026-10-23T02:43:46.125Z", "publishedAt": "2026-01-29T21:33:11.768Z", "modifiedAt": "2026-04-09T03:55:54.081Z", "state": "published", "provider": "ivanti", "title": "", "descriptions": [ { "lang": "en", "value": "A code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated remote code execution.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "Ivanti", "product": "Endpoint Manager Mobile", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "affected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "12.x.1.x RPM", "versionType": "custom", "status": "unaffected" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": "12.x.0.x RPM", "versionType": "custom", "status": "unaffected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-94", "lang": "en", "description": "CWE-94 Improper Control of Generation of Code ('Code Injection')", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL", "provider": "ivanti", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Endpoint-Manager-Mobile-EPMM-CVE-2026-1281-CVE-2026-1340", "label": "ivanti", "tags": [], "provider": "ivanti", "sourcePath": "/containers/cna/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-1340", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/1xxx/CVE-2026-1340.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"defaultStatus\":\"affected\",\"product\":\"Endpoint Manager Mobile\",\"vendor\":\"Ivanti\",\"versions\":[{\"status\":\"unaffected\",\"version\":\"12.x.1.x RPM\",\"versionType\":\"custom\"},{\"status\":\"unaffected\",\"version\":\"12.x.0.x RPM\",\"versionType\":\"custom\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/1xxx/CVE-2026-1340.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "A code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated remote code execution.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/1xxx/CVE-2026-1340.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"cweId\":\"CWE-94\",\"description\":\"CWE-94 Improper Control of Generation of Code ('Code Injection')\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/1xxx/CVE-2026-1340.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"attackComplexity\":\"LOW\",\"attackVector\":\"NETWORK\",\"availabilityImpact\":\"HIGH\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"scope\":\"UNCHANGED\",\"userInteraction\":\"NONE\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"version\":\"3.1\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-04-09T03:55:54.081Z", "fetchedAt": "2026-10-23T02:43:46.125Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-04-08T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "Endpoint Manager Mobileにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:24:21.909Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "c86e3a74195c9bad5c489ace69704e133635eac370664612b869e01cd3bffd03", "sourceModifiedAt": "2026-04-09T03:55:54.081Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Ivanti Endpoint Manager Mobile にコードインジェクションの脆弱性があり、攻撃者は認証なしでリモートコード実行を行うことができる。", "risk": "攻撃者が認証なしでサーバーや機器に任意のコードを実行させられる可能性がある。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "Endpoint Manager Mobile のバージョンで、12.x.1.x RPM および 12.x.0.x RPM は影響なしとされており、これらを除くすべてのバージョンが影響を受ける。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/1xxx/CVE-2026-1340.json" ], "evidenceIds": [ "E2" ] }, { "text": "公式の対象表：Ivanti / Endpoint Manager Mobile。影響なしとして記載：12.x.1.x RPM。影響なしとして記載：12.x.0.x RPM。個別に例外が記されていない版も、原資料では影響ありとされています。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/1xxx/CVE-2026-1340.json" ], "evidenceIds": [ "E2" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-1340" ], "evidenceIds": [ "E3" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/1xxx/CVE-2026-1340.json" ], "evidenceIds": [ "E2" ] }, { "text": "「Endpoint Manager Mobile」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-1340", "https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Endpoint-Manager-Mobile-EPMM-CVE-2026-1281-CVE-2026-1340", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-1340", "https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Endpoint-Manager-Mobile-EPMM-CVE-2026-1281-CVE-2026-1340?language=en_US", "https://support.mobileiron.com/mi/vsp/AB1786671/ivanti-security-update-1761642-1.1.0S-5.noarch.rpm", "https://support.mobileiron.com/mi/vsp/AB1786671/ivanti-security-update-1761642-1.1.0L-5.noarch.rpm", "https://nvd.nist.gov/vuln/detail/CVE-2026-1340" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/1xxx/CVE-2026-1340.json" ], "evidenceIds": [ "E2" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2026-1340", "https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Endpoint-Manager-Mobile-EPMM-CVE-2026-1281-CVE-2026-1340", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-1340", "https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Endpoint-Manager-Mobile-EPMM-CVE-2026-1281-CVE-2026-1340?language=en_US", "https://support.mobileiron.com/mi/vsp/AB1786671/ivanti-security-update-1761642-1.1.0S-5.noarch.rpm", "https://support.mobileiron.com/mi/vsp/AB1786671/ivanti-security-update-1761642-1.1.0L-5.noarch.rpm", "https://nvd.nist.gov/vuln/detail/CVE-2026-1340" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/1xxx/CVE-2026-1340.json" ], "evidenceIds": [ "E2" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-1340", "https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Endpoint-Manager-Mobile-EPMM-CVE-2026-1281-CVE-2026-1340", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-1340", "https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Endpoint-Manager-Mobile-EPMM-CVE-2026-1281-CVE-2026-1340?language=en_US", "https://support.mobileiron.com/mi/vsp/AB1786671/ivanti-security-update-1761642-1.1.0S-5.noarch.rpm", "https://support.mobileiron.com/mi/vsp/AB1786671/ivanti-security-update-1761642-1.1.0L-5.noarch.rpm", "https://nvd.nist.gov/vuln/detail/CVE-2026-1340" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/1xxx/CVE-2026-1340.json", "label": "CVE：ivanti" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-1340", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-1340", "label": "CVE公式レコード" }, { "url": "https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Endpoint-Manager-Mobile-EPMM-CVE-2026-1281-CVE-2026-1340", "label": "CVE掲載の参考情報" }, { "url": "https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Endpoint-Manager-Mobile-EPMM-CVE-2026-1281-CVE-2026-1340?language=en_US", "label": "CISAが示す関連情報" }, { "url": "https://support.mobileiron.com/mi/vsp/AB1786671/ivanti-security-update-1761642-1.1.0S-5.noarch.rpm", "label": "CISAが示す関連情報" }, { "url": "https://support.mobileiron.com/mi/vsp/AB1786671/ivanti-security-update-1761642-1.1.0L-5.noarch.rpm", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-1340", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/1xxx/CVE-2026-1340.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "A code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated remote code execution.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/1xxx/CVE-2026-1340.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"defaultStatus\":\"affected\",\"product\":\"Endpoint Manager Mobile\",\"vendor\":\"Ivanti\",\"versions\":[{\"status\":\"unaffected\",\"version\":\"12.x.1.x RPM\",\"versionType\":\"custom\"},{\"status\":\"unaffected\",\"version\":\"12.x.0.x RPM\",\"versionType\":\"custom\"}]}", "language": null, "representation": "source_json" }, { "id": "E3", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-1340", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2026-1340\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2026-1340（Endpoint Manager Mobile）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Endpoint Manager Mobile のバージョンで、12.x.1.x RPM および 12.x.0.x RPM は影響なしとされており、これらを除くすべてのバージョンが影響を受ける。\n・公式の対象表：Ivanti / Endpoint Manager Mobile。影響なしとして記載：12.x.1.x RPM。影響なしとして記載：12.x.0.x RPM。個別に例外が記されていない版も、原資料では影響ありとされています。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-1340", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:24:21.909Z", "lastSuccess": "2026-10-23T03:24:21.909Z", "sourceCheckedAt": "2026-10-23T02:43:46.125Z", "errorCode": null }, "glossary": [ { "term": "任意のコード実行", "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。", "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html", "kind": "general_definition" } ] } }, { "id": "CVE-2026-35616", "aliases": [], "title": "FortiClientEMS：脆弱性情報", "summary": "Fortinet FortiClientEMS 7.4.5 から 7.4.6 の間に、適切でないアクセス制御の脆弱性があり、認証されていない攻撃者が細工したリクエストを送ることで、許可されていないコードやコマンドを実行できる可能性があります。", "risk": "攻撃者が許可されていないコードやコマンドを実行できる可能性がある。", "product": "FortiClientEMS", "category": "other", "component": "package", "severity": "critical", "cvss": 9.1, "cvssVersion": "3.1", "cvssSource": "fortinet", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C", "affected": [ { "product": "FortiClientEMS", "range": ">= 7.4.5 / <= 7.4.6" } ], "fixed": [], "steps": [ "公式の対策欄では、次の対応は公開予定の版について示されています。入手できることを前提にせず、現在の提供状況と適用時期を管理担当者・提供元に確認してください。公開された場合の対応：FortiClientEMS をバージョン 7.4.7 以上、または 8.0.0 以上にアップグレードする。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/35xxx/CVE-2026-35616.json", "label": "CVE：fortinet" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-35616", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-35616", "label": "CVE公式レコード" }, { "url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-099", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35616", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2026-04-04T00:38:35.828Z", "modifiedAt": "2026-07-08T12:52:00.780Z", "fetchedAt": "2026-10-23T02:43:48.655Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "A improper access control vulnerability in Fortinet FortiClientEMS 7.4.5 through 7.4.6 may allow an unauthenticated attacker to execute unauthorized code or commands via crafted requests.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Fortinet", "product": "FortiClientEMS", "cpes": [ "cpe:2.3:a:fortinet:forticlientems:7.4.6:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:forticlientems:7.4.5:*:*:*:*:*:*:*" ], "defaultStatus": "unaffected", "versions": [ { "versionType": "semver", "version": "7.4.5", "lessThanOrEqual": "7.4.6", "status": "affected" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-35616", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/35xxx/CVE-2026-35616.json", "fetchedAt": "2026-10-23T02:43:48.655Z", "publishedAt": "2026-04-04T00:38:35.828Z", "modifiedAt": "2026-07-08T12:52:00.780Z", "state": "published", "provider": "fortinet", "title": "", "descriptions": [ { "lang": "en", "value": "A improper access control vulnerability in Fortinet FortiClientEMS 7.4.5 through 7.4.6 may allow an unauthenticated attacker to execute unauthorized code or commands via crafted requests.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "Fortinet", "product": "FortiClientEMS", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [ "cpe:2.3:a:fortinet:forticlientems:7.4.6:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:forticlientems:7.4.5:*:*:*:*:*:*:*" ], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "7.4.5", "lessThanOrEqual": "7.4.6", "versionType": "semver", "status": "affected" } ] } ], "solutions": [ { "lang": "en", "value": "Upgrade to upcoming FortiClientEMS version 8.0.0 or above\nUpgrade to FortiClientEMS version 7.4.7 or above", "sourcePath": "/containers/cna/solutions/0/value" } ], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-284", "lang": "en", "description": "Escalation of privilege", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C", "baseScore": 9.1, "baseSeverity": "CRITICAL", "provider": "fortinet", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-099", "label": "https://fortiguard.fortinet.com/psirt/FG-IR-26-099", "tags": [], "provider": "fortinet", "sourcePath": "/containers/cna/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-35616", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/35xxx/CVE-2026-35616.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Fortinet\",\"product\":\"FortiClientEMS\",\"cpes\":[\"cpe:2.3:a:fortinet:forticlientems:7.4.6:*:*:*:*:*:*:*\",\"cpe:2.3:a:fortinet:forticlientems:7.4.5:*:*:*:*:*:*:*\"],\"defaultStatus\":\"unaffected\",\"versions\":[{\"versionType\":\"semver\",\"version\":\"7.4.5\",\"lessThanOrEqual\":\"7.4.6\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/35xxx/CVE-2026-35616.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "A improper access control vulnerability in Fortinet FortiClientEMS 7.4.5 through 7.4.6 may allow an unauthenticated attacker to execute unauthorized code or commands via crafted requests.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/solutions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/35xxx/CVE-2026-35616.json", "sourcePath": "/containers/cna/solutions/0/value", "text": "Upgrade to upcoming FortiClientEMS version 8.0.0 or above\nUpgrade to FortiClientEMS version 7.4.7 or above", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/35xxx/CVE-2026-35616.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"cweId\":\"CWE-284\",\"description\":\"Escalation of privilege\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/35xxx/CVE-2026-35616.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"attackComplexity\":\"LOW\",\"attackVector\":\"NETWORK\",\"availabilityImpact\":\"HIGH\",\"baseScore\":9.1,\"baseSeverity\":\"CRITICAL\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"scope\":\"UNCHANGED\",\"userInteraction\":\"NONE\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-07-08T12:52:00.780Z", "fetchedAt": "2026-10-23T02:43:48.655Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-04-06T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "FortiClientEMSに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:24:22.802Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "89561ef6463c26a0b524cdb91e145e0338d7e31742c7c1f315febb9719aeaf3a", "sourceModifiedAt": "2026-07-08T12:52:00.780Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Fortinet FortiClientEMS 7.4.5 から 7.4.6 の間に、適切でないアクセス制御の脆弱性があり、認証されていない攻撃者が細工したリクエストを送ることで、許可されていないコードやコマンドを実行できる可能性があります。", "risk": "攻撃者が許可されていないコードやコマンドを実行できる可能性がある。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "FortiClientEMS バージョン 7.4.5 から 7.4.6（両方含む）において、認証されていない攻撃者が細工したリクエストを送信できる環境で脆弱性が存在する。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/35xxx/CVE-2026-35616.json" ], "evidenceIds": [ "E2", "E1" ] }, { "text": "公式の対象表：Fortinet / FortiClientEMS。影響ありとして記載：7.4.5以上、7.4.6以下。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/35xxx/CVE-2026-35616.json" ], "evidenceIds": [ "E2" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-35616" ], "evidenceIds": [ "E4" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/35xxx/CVE-2026-35616.json" ], "evidenceIds": [ "E2" ] }, { "text": "「FortiClientEMS」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-35616", "https://fortiguard.fortinet.com/psirt/FG-IR-26-099", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-35616", "https://nvd.nist.gov/vuln/detail/CVE-2026-35616" ] } ], "actions": [ { "text": "公式の対策欄では、次の対応は公開予定の版について示されています。入手できることを前提にせず、現在の提供状況と適用時期を管理担当者・提供元に確認してください。公開された場合の対応：FortiClientEMS をバージョン 7.4.7 以上、または 8.0.0 以上にアップグレードする。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/35xxx/CVE-2026-35616.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2026-35616", "https://fortiguard.fortinet.com/psirt/FG-IR-26-099", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-35616", "https://nvd.nist.gov/vuln/detail/CVE-2026-35616" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/35xxx/CVE-2026-35616.json" ], "evidenceIds": [ "E2" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-35616", "https://fortiguard.fortinet.com/psirt/FG-IR-26-099", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-35616", "https://nvd.nist.gov/vuln/detail/CVE-2026-35616" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/35xxx/CVE-2026-35616.json", "label": "CVE：fortinet" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-35616", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-35616", "label": "CVE公式レコード" }, { "url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-099", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35616", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/35xxx/CVE-2026-35616.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "A improper access control vulnerability in Fortinet FortiClientEMS 7.4.5 through 7.4.6 may allow an unauthenticated attacker to execute unauthorized code or commands via crafted requests.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/35xxx/CVE-2026-35616.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Fortinet\",\"product\":\"FortiClientEMS\",\"cpes\":[\"cpe:2.3:a:fortinet:forticlientems:7.4.6:*:*:*:*:*:*:*\",\"cpe:2.3:a:fortinet:forticlientems:7.4.5:*:*:*:*:*:*:*\"],\"defaultStatus\":\"unaffected\",\"versions\":[{\"versionType\":\"semver\",\"version\":\"7.4.5\",\"lessThanOrEqual\":\"7.4.6\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/35xxx/CVE-2026-35616.json", "sourceField": "/containers/cna/solutions/0/value", "excerpt": "Upgrade to upcoming FortiClientEMS version 8.0.0 or above\nUpgrade to FortiClientEMS version 7.4.7 or above", "language": "en", "representation": "source_excerpt" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-35616", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2026-35616\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2026-35616（FortiClientEMS）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・FortiClientEMS バージョン 7.4.5 から 7.4.6（両方含む）において、認証されていない攻撃者が細工したリクエストを送信できる環境で脆弱性が存在する。\n・公式の対象表：Fortinet / FortiClientEMS。影響ありとして記載：7.4.5以上、7.4.6以下。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-35616\n\n公式資料で追加確認が必要な点：\n・公式情報では 8.0.0 が公開予定または未リリースとして記載されています。", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [ { "code": "planned_release", "text": "公式情報では 8.0.0 が公開予定または未リリースとして記載されています。", "evidenceIds": [ "E3" ] } ], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:24:22.802Z", "lastSuccess": "2026-10-23T03:24:22.802Z", "sourceCheckedAt": "2026-10-23T02:43:48.655Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2026-3502", "aliases": [], "title": "TrueConf Client：コード実行", "summary": "TrueConf Client はアプリケーションの更新コードをダウンロードし、検証を行わずに適用します。更新配信経路を操作できる攻撃者は、改ざんされた更新ペイロードに差し替えることができます。ペイロードがアップデーターによって実行またはインストールされると、更新プロセスまたはユーザーの権限で任意のコードを実行させられる可能性があります。", "risk": "攻撃者が改ざんした更新を実行させられるため、更新プロセスやユーザーの権限で任意のコードが実行される恐れがあります。", "product": "TrueConf Client", "category": "other", "component": "package", "severity": "high", "cvss": 7.8, "cvssVersion": "3.1", "cvssSource": "checkpoint", "cvssVector": "CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:L", "affected": [ { "product": "TrueConf Client", "range": "TrueConf Client versions 8.1.0 through 8.5.2" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/3xxx/CVE-2026-3502.json", "label": "CVE：checkpoint" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-3502", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-3502", "label": "CVE公式レコード" }, { "url": "https://trueconf.com/blog/update/trueconf-8-5", "label": "CISAが示す関連情報" }, { "url": "https://trueconf.com/downloads/windows.html", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-3502", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2026-03-30T18:05:42.806Z", "modifiedAt": "2026-04-03T03:55:23.638Z", "fetchedAt": "2026-10-23T02:43:48.606Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "TrueConf Client downloads application update code and applies it without performing verification. An attacker who is able to influence the update delivery path can substitute a tampered update payload. If the payload is executed or installed by the updater, this may result in arbitrary code execution in the context of the updating process or user.", "sourceTitle": "TrueConf Client Update Integrity Verification Bypass", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "product": "TrueConf Client", "vendor": "TrueConf", "versions": [ { "status": "affected", "version": "TrueConf Client versions 8.1.0 through 8.5.2" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-3502", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/3xxx/CVE-2026-3502.json", "fetchedAt": "2026-10-23T02:43:48.606Z", "publishedAt": "2026-03-30T18:05:42.806Z", "modifiedAt": "2026-04-03T03:55:23.638Z", "state": "published", "provider": "checkpoint", "title": "TrueConf Client Update Integrity Verification Bypass", "descriptions": [ { "lang": "en", "value": "TrueConf Client downloads application update code and applies it without performing verification. An attacker who is able to influence the update delivery path can substitute a tampered update payload. If the payload is executed or installed by the updater, this may result in arbitrary code execution in the context of the updating process or user.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "TrueConf", "product": "TrueConf Client", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "TrueConf Client versions 8.1.0 through 8.5.2", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-494", "lang": "en", "description": "CWE-494: Download of Code Without Integrity Check.", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:L", "baseScore": 7.8, "baseSeverity": "HIGH", "provider": "checkpoint", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://trueconf.com/blog/update/trueconf-8-5", "label": "checkpoint", "tags": [], "provider": "checkpoint", "sourcePath": "/containers/cna/references/0" }, { "url": "https://research.checkpoint.com/2026/operation-truechaos-0-day-exploitation-against-southeast-asian-government-targets/", "label": "CISA-ADP", "tags": [ "third-party-advisory" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-3502", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/1" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/3xxx/CVE-2026-3502.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"product\":\"TrueConf Client\",\"vendor\":\"TrueConf\",\"versions\":[{\"status\":\"affected\",\"version\":\"TrueConf Client versions 8.1.0 through 8.5.2\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/3xxx/CVE-2026-3502.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "TrueConf Client downloads application update code and applies it without performing verification. An attacker who is able to influence the update delivery path can substitute a tampered update payload. If the payload is executed or installed by the updater, this may result in arbitrary code execution in the context of the updating process or user.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/3xxx/CVE-2026-3502.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"cweId\":\"CWE-494\",\"description\":\"CWE-494: Download of Code Without Integrity Check.\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/3xxx/CVE-2026-3502.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"attackVector\":\"ADJACENT_NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"HIGH\",\"userInteraction\":\"REQUIRED\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"LOW\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:L\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-04-03T03:55:23.638Z", "fetchedAt": "2026-10-23T02:43:48.606Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-04-02T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "TrueConf Clientにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:24:22.967Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "73a0aa6a71932dfacfbfc0beb1343d1b1d4f5548f7fdfd7401718dd5c942f6dc", "sourceModifiedAt": "2026-04-03T03:55:23.638Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "TrueConf Client はアプリケーションの更新コードをダウンロードし、検証を行わずに適用します。更新配信経路を操作できる攻撃者は、改ざんされた更新ペイロードに差し替えることができます。ペイロードがアップデーターによって実行またはインストールされると、更新プロセスまたはユーザーの権限で任意のコードを実行させられる可能性があります。", "risk": "攻撃者が改ざんした更新を実行させられるため、更新プロセスやユーザーの権限で任意のコードが実行される恐れがあります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "TrueConf Client バージョン 8.1.0 から 8.5.2 までが影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/3xxx/CVE-2026-3502.json" ], "evidenceIds": [ "E3", "E2" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-3502" ], "evidenceIds": [ "E4" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/3xxx/CVE-2026-3502.json" ], "evidenceIds": [ "E3" ] }, { "text": "「TrueConf Client」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-3502", "https://trueconf.com/blog/update/trueconf-8-5", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-3502", "https://trueconf.com/downloads/windows.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-3502" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/3xxx/CVE-2026-3502.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2026-3502", "https://trueconf.com/blog/update/trueconf-8-5", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-3502", "https://trueconf.com/downloads/windows.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-3502" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/3xxx/CVE-2026-3502.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-3502", "https://trueconf.com/blog/update/trueconf-8-5", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-3502", "https://trueconf.com/downloads/windows.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-3502" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/3xxx/CVE-2026-3502.json", "label": "CVE：checkpoint" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-3502", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-3502", "label": "CVE公式レコード" }, { "url": "https://trueconf.com/blog/update/trueconf-8-5", "label": "CISAが示す関連情報" }, { "url": "https://trueconf.com/downloads/windows.html", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-3502", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/3xxx/CVE-2026-3502.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "TrueConf Client downloads application update code and applies it without performing verification. An attacker who is able to influence the update delivery path can substitute a tampered update payload. If the payload is executed or installed by the updater, this may result in arbitrary code execution in the context of the updating process or user.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/3xxx/CVE-2026-3502.json", "sourceField": "/containers/cna/title", "excerpt": "TrueConf Client Update Integrity Verification Bypass", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/3xxx/CVE-2026-3502.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"product\":\"TrueConf Client\",\"vendor\":\"TrueConf\",\"versions\":[{\"status\":\"affected\",\"version\":\"TrueConf Client versions 8.1.0 through 8.5.2\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-3502", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2026-3502\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2026-3502（TrueConf Client）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・TrueConf Client バージョン 8.1.0 から 8.5.2 までが影響を受けます。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-3502", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:24:22.967Z", "lastSuccess": "2026-10-23T03:24:22.967Z", "sourceCheckedAt": "2026-10-23T02:43:48.606Z", "errorCode": null }, "glossary": [ { "term": "任意のコード実行", "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。", "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html", "kind": "general_definition" } ] } }, { "id": "CVE-2026-5281", "aliases": [], "title": "Chrome：コード実行", "summary": "Google Chrome の Dawn コンポーネントにおける Use after free の脆弱性は、バージョン 146.0.7680.178 未満で存在し、レンダラープロセスが攻撃者に侵害されている場合、細工した HTML ページを通じて任意のコードを実行させることができる。", "risk": "攻撃者が任意のコードを実行できる可能性がある。", "product": "Chrome", "category": "other", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": "Chrome", "cvssVector": null, "affected": [ { "product": "Chrome", "range": ">= 146.0.7680.178 / < 146.0.7680.178" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/5xxx/CVE-2026-5281.json", "label": "CVE：Chrome" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-5281", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-5281", "label": "CVE公式レコード" }, { "url": "https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_31.html", "label": "CISAが示す関連情報" }, { "url": "https://issues.chromium.org/issues/491518608", "label": "CVE掲載の参考情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5281", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2026-04-01T04:41:32.723Z", "modifiedAt": "2026-04-02T03:55:36.436Z", "fetchedAt": "2026-10-23T02:43:49.377Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Google", "product": "Chrome", "versions": [ { "version": "146.0.7680.178", "status": "affected", "lessThan": "146.0.7680.178", "versionType": "custom" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-5281", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/5xxx/CVE-2026-5281.json", "fetchedAt": "2026-10-23T02:43:49.377Z", "publishedAt": "2026-04-01T04:41:32.723Z", "modifiedAt": "2026-04-02T03:55:36.436Z", "state": "published", "provider": "Chrome", "title": "", "descriptions": [ { "lang": "en", "value": "Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "Google", "product": "Chrome", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "146.0.7680.178", "lessThan": "146.0.7680.178", "versionType": "custom", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-416", "lang": "en", "description": "Use after free", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 8.8, "baseSeverity": "HIGH", "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_31.html", "label": "Chrome", "tags": [], "provider": "Chrome", "sourcePath": "/containers/cna/references/0" }, { "url": "https://issues.chromium.org/issues/491518608", "label": "Chrome", "tags": [], "provider": "Chrome", "sourcePath": "/containers/cna/references/1" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-5281", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/5xxx/CVE-2026-5281.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Google\",\"product\":\"Chrome\",\"versions\":[{\"version\":\"146.0.7680.178\",\"status\":\"affected\",\"lessThan\":\"146.0.7680.178\",\"versionType\":\"custom\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/5xxx/CVE-2026-5281.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/5xxx/CVE-2026-5281.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"description\":\"Use after free\",\"cweId\":\"CWE-416\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/0/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/5xxx/CVE-2026-5281.json", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1", "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":8.8,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"REQUIRED\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"confidentialityImpact\":\"HIGH\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-04-02T03:55:36.436Z", "fetchedAt": "2026-10-23T02:43:49.377Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-04-01T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "Chromeにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:24:23.162Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "58f29b7ea20ffc106698f2b7e19a92ac32a14a01d1dc1e050b12574bbe074029", "sourceModifiedAt": "2026-04-02T03:55:36.436Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Google Chrome の Dawn コンポーネントにおける Use after free の脆弱性は、バージョン 146.0.7680.178 未満で存在し、レンダラープロセスが攻撃者に侵害されている場合、細工した HTML ページを通じて任意のコードを実行させることができる。", "risk": "攻撃者が任意のコードを実行できる可能性がある。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "影響を受けるのは Chrome バージョン 146.0.7680.178 未満である。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/5xxx/CVE-2026-5281.json" ], "evidenceIds": [ "E2" ] }, { "text": "攻撃者がレンダラープロセスをすでに侵害していることが前提条件である。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/5xxx/CVE-2026-5281.json" ], "evidenceIds": [ "E1" ] }, { "text": "細工した HTML ページを閲覧させる必要がある。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/5xxx/CVE-2026-5281.json" ], "evidenceIds": [ "E1" ] }, { "text": "公式の対象表：Google / Chrome。影響ありとして記載：対象表の開始値と上限がどちらも146.0.7680.178で、上限条件は「未満」です。この表だけでは範囲を確定できないため、説明文の対象範囲も照合してください。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/5xxx/CVE-2026-5281.json" ], "evidenceIds": [ "E2" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-5281" ], "evidenceIds": [ "E3" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/5xxx/CVE-2026-5281.json" ], "evidenceIds": [ "E2" ] }, { "text": "「Chrome」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-5281", "https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_31.html", "https://issues.chromium.org/issues/491518608", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-5281", "https://nvd.nist.gov/vuln/detail/CVE-2026-5281" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/5xxx/CVE-2026-5281.json" ], "evidenceIds": [ "E2" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2026-5281", "https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_31.html", "https://issues.chromium.org/issues/491518608", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-5281", "https://nvd.nist.gov/vuln/detail/CVE-2026-5281" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/5xxx/CVE-2026-5281.json" ], "evidenceIds": [ "E2" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-5281", "https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_31.html", "https://issues.chromium.org/issues/491518608", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-5281", "https://nvd.nist.gov/vuln/detail/CVE-2026-5281" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/5xxx/CVE-2026-5281.json", "label": "CVE：Chrome" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-5281", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-5281", "label": "CVE公式レコード" }, { "url": "https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_31.html", "label": "CISAが示す関連情報" }, { "url": "https://issues.chromium.org/issues/491518608", "label": "CVE掲載の参考情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5281", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/5xxx/CVE-2026-5281.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/5xxx/CVE-2026-5281.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Google\",\"product\":\"Chrome\",\"versions\":[{\"version\":\"146.0.7680.178\",\"status\":\"affected\",\"lessThan\":\"146.0.7680.178\",\"versionType\":\"custom\"}]}", "language": null, "representation": "source_json" }, { "id": "E3", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-5281", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2026-5281\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2026-5281（Chrome）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・影響を受けるのは Chrome バージョン 146.0.7680.178 未満である。\n・攻撃者がレンダラープロセスをすでに侵害していることが前提条件である。\n・細工した HTML ページを閲覧させる必要がある。\n・公式の対象表：Google / Chrome。影響ありとして記載：対象表の開始値と上限がどちらも146.0.7680.178で、上限条件は「未満」です。この表だけでは範囲を確定できないため、説明文の対象範囲も照合してください。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-5281", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:24:23.162Z", "lastSuccess": "2026-10-23T03:24:23.162Z", "sourceCheckedAt": "2026-10-23T02:43:49.377Z", "errorCode": null }, "glossary": [ { "term": "任意のコード実行", "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。", "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html", "kind": "general_definition" } ] } }, { "id": "CVE-2026-3055", "aliases": [], "title": "ADC / Gateway：脆弱性情報", "summary": "NetScaler ADC および NetScaler Gateway が SAML IDP として構成されている場合に、入力検証が不十分でメモリの読み取りが範囲外になる可能性があります。", "risk": "メモリの範囲外読み取りが発生する可能性があります。", "product": "ADC / Gateway", "category": "other", "component": "package", "severity": "critical", "cvss": 9.3, "cvssVersion": "4.0", "cvssSource": "NetScaler", "cvssVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L", "affected": [ { "product": "ADC", "range": ">= 14.1 / < 66.59" }, { "product": "ADC", "range": ">= 13.1 / < 62.23" }, { "product": "ADC", "range": ">= 13.1 FIPS and NDcPP / < 37.262" }, { "product": "Gateway", "range": ">= 14.1 / < 66.59" }, { "product": "Gateway", "range": ">= 13.1 / < 62.23" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/3xxx/CVE-2026-3055.json", "label": "CVE：NetScaler" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-3055", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-3055", "label": "CVE公式レコード" }, { "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696300", "label": "CVE掲載の参考情報" }, { "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696300&articleURL=NetScaler_ADC_and_NetScaler_Gateway_Security_Bulletin_for_CVE_2026_3055_and_CVE_2026_4368", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-3055", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v4.0/specification-document", "label": "FIRST公式：CVSS 4.0の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2026-03-23T20:21:27.107Z", "modifiedAt": "2026-03-31T03:55:32.569Z", "fetchedAt": "2026-10-23T02:43:48.230Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "Insufficient input validation in NetScaler ADC and NetScaler Gateway when configured as a SAML IDP leading to memory overread", "sourceTitle": "Insufficient input validation leading to memory overread", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "defaultStatus": "unaffected", "product": "ADC", "vendor": "NetScaler", "versions": [ { "lessThan": "66.59", "status": "affected", "version": "14.1", "versionType": "patch" }, { "lessThan": "62.23", "status": "affected", "version": "13.1", "versionType": "patch" }, { "lessThan": "37.262", "status": "affected", "version": "13.1 FIPS and NDcPP", "versionType": "patch" } ] }, { "defaultStatus": "unaffected", "product": "Gateway", "vendor": "NetScaler", "versions": [ { "lessThan": "66.59", "status": "affected", "version": "14.1", "versionType": "patch" }, { "lessThan": "62.23", "status": "affected", "version": "13.1", "versionType": "patch" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-3055", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/3xxx/CVE-2026-3055.json", "fetchedAt": "2026-10-23T02:43:48.230Z", "publishedAt": "2026-03-23T20:21:27.107Z", "modifiedAt": "2026-03-31T03:55:32.569Z", "state": "published", "provider": "NetScaler", "title": "Insufficient input validation leading to memory overread", "descriptions": [ { "lang": "en", "value": "Insufficient input validation in NetScaler ADC and NetScaler Gateway when configured as a SAML IDP leading to memory overread", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "NetScaler", "product": "ADC", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "14.1", "lessThan": "66.59", "versionType": "patch", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": "13.1", "lessThan": "62.23", "versionType": "patch", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/2", "version": "13.1 FIPS and NDcPP", "lessThan": "37.262", "versionType": "patch", "status": "affected" } ] }, { "vendor": "NetScaler", "product": "Gateway", "sourcePath": "/containers/cna/affected/1", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/1/versions/0", "version": "14.1", "lessThan": "66.59", "versionType": "patch", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/1", "version": "13.1", "lessThan": "62.23", "versionType": "patch", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-125", "lang": "en", "description": "CWE-125 Out-of-bounds Read", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "4.0", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L", "baseScore": 9.3, "baseSeverity": "CRITICAL", "provider": "NetScaler", "sourcePath": "/containers/cna/metrics/0/cvssV4_0" } ], "references": [ { "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696300", "label": "NetScaler", "tags": [], "provider": "NetScaler", "sourcePath": "/containers/cna/references/0" }, { "url": "https://labs.watchtowr.com/please-we-beg-just-one-weekend-free-of-appliances-citrix-netscaler-cve-2026-3055-memory-overread-part-2/", "label": "CISA-ADP", "tags": [ "third-party-advisory" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-3055", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/1" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/3xxx/CVE-2026-3055.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"defaultStatus\":\"unaffected\",\"product\":\"ADC\",\"vendor\":\"NetScaler\",\"versions\":[{\"lessThan\":\"66.59\",\"status\":\"affected\",\"version\":\"14.1\",\"versionType\":\"patch\"},{\"lessThan\":\"62.23\",\"status\":\"affected\",\"version\":\"13.1\",\"versionType\":\"patch\"},{\"lessThan\":\"37.262\",\"status\":\"affected\",\"version\":\"13.1 FIPS and NDcPP\",\"versionType\":\"patch\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/3xxx/CVE-2026-3055.json", "sourcePath": "/containers/cna/affected/1", "text": "{\"defaultStatus\":\"unaffected\",\"product\":\"Gateway\",\"vendor\":\"NetScaler\",\"versions\":[{\"lessThan\":\"66.59\",\"status\":\"affected\",\"version\":\"14.1\",\"versionType\":\"patch\"},{\"lessThan\":\"62.23\",\"status\":\"affected\",\"version\":\"13.1\",\"versionType\":\"patch\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/3xxx/CVE-2026-3055.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Insufficient input validation in NetScaler ADC and NetScaler Gateway when configured as a SAML IDP leading to memory overread", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/3xxx/CVE-2026-3055.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"cweId\":\"CWE-125\",\"description\":\"CWE-125 Out-of-bounds Read\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV4_0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/3xxx/CVE-2026-3055.json", "sourcePath": "/containers/cna/metrics/0/cvssV4_0", "text": "{\"Automatable\":\"NOT_DEFINED\",\"Recovery\":\"NOT_DEFINED\",\"Safety\":\"NOT_DEFINED\",\"attackComplexity\":\"LOW\",\"attackRequirements\":\"NONE\",\"attackVector\":\"NETWORK\",\"baseScore\":9.3,\"baseSeverity\":\"CRITICAL\",\"exploitMaturity\":\"NOT_DEFINED\",\"privilegesRequired\":\"NONE\",\"providerUrgency\":\"NOT_DEFINED\",\"subAvailabilityImpact\":\"LOW\",\"subConfidentialityImpact\":\"LOW\",\"subIntegrityImpact\":\"LOW\",\"userInteraction\":\"NONE\",\"valueDensity\":\"NOT_DEFINED\",\"vectorString\":\"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L\",\"version\":\"4.0\",\"vulnAvailabilityImpact\":\"HIGH\",\"vulnConfidentialityImpact\":\"HIGH\",\"vulnIntegrityImpact\":\"HIGH\",\"vulnerabilityResponseEffort\":\"NOT_DEFINED\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-03-31T03:55:32.569Z", "fetchedAt": "2026-10-23T02:43:48.230Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-03-30T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "ADC / Gatewayに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:24:23.311Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "fe9ffebed9e99503b8dc439c039493385fd3050847d4ffd5de0c5ee3fab3e172", "sourceModifiedAt": "2026-03-31T03:55:32.569Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "NetScaler ADC および NetScaler Gateway が SAML IDP として構成されている場合に、入力検証が不十分でメモリの読み取りが範囲外になる可能性があります。", "risk": "メモリの範囲外読み取りが発生する可能性があります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "NetScaler ADC が SAML IDP として構成されている場合に影響があります。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/3xxx/CVE-2026-3055.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "NetScaler Gateway が SAML IDP として構成されている場合に影響があります。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/3xxx/CVE-2026-3055.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "ADC のバージョン 14.1 で、バージョンが 66.59 未満の場合は影響があります。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/3xxx/CVE-2026-3055.json" ], "evidenceIds": [ "E3", "E2" ] }, { "text": "ADC のバージョン 13.1 で、バージョンが 62.23 未満の場合は影響があります。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/3xxx/CVE-2026-3055.json" ], "evidenceIds": [ "E3", "E2" ] }, { "text": "ADC のバージョン 13.1 FIPS および NDcPP で、バージョンが 37.262 未満の場合は影響があります。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/3xxx/CVE-2026-3055.json" ], "evidenceIds": [ "E3", "E2" ] }, { "text": "Gateway のバージョン 14.1 で、バージョンが 66.59 未満の場合は影響があります。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/3xxx/CVE-2026-3055.json" ], "evidenceIds": [ "E4", "E2" ] }, { "text": "Gateway のバージョン 13.1 で、バージョンが 62.23 未満の場合は影響があります。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/3xxx/CVE-2026-3055.json" ], "evidenceIds": [ "E4", "E2" ] }, { "text": "公式の対象表：NetScaler / ADC。影響ありとして記載：14.1以上、66.59未満。影響ありとして記載：13.1以上、62.23未満。影響ありとして記載：13.1 FIPS and NDcPP以上、37.262未満。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/3xxx/CVE-2026-3055.json" ], "evidenceIds": [ "E3" ] }, { "text": "公式の対象表：NetScaler / Gateway。影響ありとして記載：14.1以上、66.59未満。影響ありとして記載：13.1以上、62.23未満。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/3xxx/CVE-2026-3055.json" ], "evidenceIds": [ "E4" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-3055" ], "evidenceIds": [ "E5" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/3xxx/CVE-2026-3055.json" ], "evidenceIds": [ "E3" ] }, { "text": "「ADC / Gateway」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-3055", "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696300", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-3055", "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696300&articleURL=NetScaler_ADC_and_NetScaler_Gateway_Security_Bulletin_for_CVE_2026_3055_and_CVE_2026_4368", "https://nvd.nist.gov/vuln/detail/CVE-2026-3055" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/3xxx/CVE-2026-3055.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2026-3055", "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696300", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-3055", "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696300&articleURL=NetScaler_ADC_and_NetScaler_Gateway_Security_Bulletin_for_CVE_2026_3055_and_CVE_2026_4368", "https://nvd.nist.gov/vuln/detail/CVE-2026-3055" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/3xxx/CVE-2026-3055.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-3055", "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696300", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-3055", "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696300&articleURL=NetScaler_ADC_and_NetScaler_Gateway_Security_Bulletin_for_CVE_2026_3055_and_CVE_2026_4368", "https://nvd.nist.gov/vuln/detail/CVE-2026-3055" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/3xxx/CVE-2026-3055.json", "label": "CVE：NetScaler" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-3055", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-3055", "label": "CVE公式レコード" }, { "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696300", "label": "CVE掲載の参考情報" }, { "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696300&articleURL=NetScaler_ADC_and_NetScaler_Gateway_Security_Bulletin_for_CVE_2026_3055_and_CVE_2026_4368", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-3055", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v4.0/specification-document", "label": "FIRST公式：CVSS 4.0の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/3xxx/CVE-2026-3055.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Insufficient input validation in NetScaler ADC and NetScaler Gateway when configured as a SAML IDP leading to memory overread", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/3xxx/CVE-2026-3055.json", "sourceField": "/containers/cna/title", "excerpt": "Insufficient input validation leading to memory overread", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/3xxx/CVE-2026-3055.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"defaultStatus\":\"unaffected\",\"product\":\"ADC\",\"vendor\":\"NetScaler\",\"versions\":[{\"lessThan\":\"66.59\",\"status\":\"affected\",\"version\":\"14.1\",\"versionType\":\"patch\"},{\"lessThan\":\"62.23\",\"status\":\"affected\",\"version\":\"13.1\",\"versionType\":\"patch\"},{\"lessThan\":\"37.262\",\"status\":\"affected\",\"version\":\"13.1 FIPS and NDcPP\",\"versionType\":\"patch\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/3xxx/CVE-2026-3055.json", "sourceField": "/containers/cna/affected/1", "excerpt": "{\"defaultStatus\":\"unaffected\",\"product\":\"Gateway\",\"vendor\":\"NetScaler\",\"versions\":[{\"lessThan\":\"66.59\",\"status\":\"affected\",\"version\":\"14.1\",\"versionType\":\"patch\"},{\"lessThan\":\"62.23\",\"status\":\"affected\",\"version\":\"13.1\",\"versionType\":\"patch\"}]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-3055", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2026-3055\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2026-3055（ADC / Gateway）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・NetScaler ADC が SAML IDP として構成されている場合に影響があります。\n・NetScaler Gateway が SAML IDP として構成されている場合に影響があります。\n・ADC のバージョン 14.1 で、バージョンが 66.59 未満の場合は影響があります。\n・ADC のバージョン 13.1 で、バージョンが 62.23 未満の場合は影響があります。\n・ADC のバージョン 13.1 FIPS および NDcPP で、バージョンが 37.262 未満の場合は影響があります。\n・Gateway のバージョン 14.1 で、バージョンが 66.59 未満の場合は影響があります。\n・Gateway のバージョン 13.1 で、バージョンが 62.23 未満の場合は影響があります。\n・公式の対象表：NetScaler / ADC。影響ありとして記載：14.1以上、66.59未満。影響ありとして記載：13.1以上、62.23未満。影響ありとして記載：13.1 FIPS and NDcPP以上、37.262未満。\n・公式の対象表：NetScaler / Gateway。影響ありとして記載：14.1以上、66.59未満。影響ありとして記載：13.1以上、62.23未満。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-3055", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:24:23.311Z", "lastSuccess": "2026-10-23T03:24:23.311Z", "sourceCheckedAt": "2026-10-23T02:43:48.230Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2025-53521", "aliases": [], "title": "BIG-IP：コード実行", "summary": "BIG‑IP APM のアクセスポリシーが仮想サーバーに設定されている場合、特定の悪意あるトラフィックによりリモートコード実行（RCE）が可能になる。なお、技術サポートが終了した（EoTS）バージョンは評価対象外である。", "risk": "攻撃者がサーバー上で任意のコードを実行できる可能性がある。", "product": "BIG-IP", "category": "other", "component": "package", "severity": "critical", "cvss": 9.8, "cvssVersion": "3.1", "cvssSource": "f5", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "affected": [ { "product": "BIG-IP", "range": ">= 17.5.0 / < 17.5.1.3（機能: APM）" }, { "product": "BIG-IP", "range": ">= 17.1.0 / < 17.1.3（機能: APM）" }, { "product": "BIG-IP", "range": ">= 16.1.0 / < 16.1.6.1（機能: APM）" }, { "product": "BIG-IP", "range": ">= 15.1.0 / < 15.1.10.8（機能: APM）" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/53xxx/CVE-2025-53521.json", "label": "CVE：f5" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-53521", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-53521", "label": "CVE公式レコード" }, { "url": "https://my.f5.com/manage/s/article/K000156741", "label": "CISAが示す関連情報" }, { "url": "https://my.f5.com/manage/s/article/K000160486", "label": "CISAが示す関連情報" }, { "url": "https://my.f5.com/manage/s/article/K11438344", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-53521", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2025-10-15T13:55:52.694Z", "modifiedAt": "2026-03-31T16:04:27.360Z", "fetchedAt": "2026-10-23T02:43:39.046Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "When a BIG-IP APM access policy is configured on a virtual server, specific malicious traffic can lead to Remote Code Execution (RCE).  \n\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated.", "sourceTitle": "BigIP APM Vulnerability", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "F5", "product": "BIG-IP", "modules": [ "APM" ], "versions": [ { "status": "affected", "version": "17.5.0", "lessThan": "17.5.1.3", "versionType": "custom" }, { "status": "affected", "version": "17.1.0", "lessThan": "17.1.3", "versionType": "custom" }, { "status": "affected", "version": "16.1.0", "lessThan": "16.1.6.1", "versionType": "custom" }, { "status": "affected", "version": "15.1.0", "lessThan": "15.1.10.8", "versionType": "custom" } ], "defaultStatus": "unknown" } ], "configurationNotes": "対象環境・機能: APM。製品バージョンだけでなく、原文の利用条件を照合してください。", "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2025-53521", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/53xxx/CVE-2025-53521.json", "fetchedAt": "2026-10-23T02:43:39.046Z", "publishedAt": "2025-10-15T13:55:52.694Z", "modifiedAt": "2026-03-31T16:04:27.360Z", "state": "published", "provider": "f5", "title": "BigIP APM Vulnerability", "descriptions": [ { "lang": "en", "value": "When a BIG-IP APM access policy is configured on a virtual server, specific malicious traffic can lead to Remote Code Execution (RCE).  \n\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "F5", "product": "BIG-IP", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unknown", "platforms": [], "modules": [ "APM" ], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "17.5.0", "lessThan": "17.5.1.3", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": "17.1.0", "lessThan": "17.1.3", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/2", "version": "16.1.0", "lessThan": "16.1.6.1", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/3", "version": "15.1.0", "lessThan": "15.1.10.8", "versionType": "custom", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-121", "lang": "en", "description": "CWE-121 Stack-based Buffer Overflow", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL", "provider": "f5", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" }, { "version": "4.0", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "baseScore": 9.3, "baseSeverity": "CRITICAL", "provider": "f5", "sourcePath": "/containers/cna/metrics/1/cvssV4_0" } ], "references": [ { "url": "https://my.f5.com/manage/s/article/K000156741", "label": "f5", "tags": [ "vendor-advisory" ], "provider": "f5", "sourcePath": "/containers/cna/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-53521", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/53xxx/CVE-2025-53521.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"F5\",\"product\":\"BIG-IP\",\"modules\":[\"APM\"],\"versions\":[{\"status\":\"affected\",\"version\":\"17.5.0\",\"lessThan\":\"17.5.1.3\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"17.1.0\",\"lessThan\":\"17.1.3\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"16.1.0\",\"lessThan\":\"16.1.6.1\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"15.1.0\",\"lessThan\":\"15.1.10.8\",\"versionType\":\"custom\"}],\"defaultStatus\":\"unknown\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/53xxx/CVE-2025-53521.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "When a BIG-IP APM access policy is configured on a virtual server, specific malicious traffic can lead to Remote Code Execution (RCE).  \n\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/53xxx/CVE-2025-53521.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"cweId\":\"CWE-121\",\"description\":\"CWE-121 Stack-based Buffer Overflow\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/53xxx/CVE-2025-53521.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\",\"baseSeverity\":\"CRITICAL\",\"baseScore\":9.8,\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/1/cvssV4_0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/53xxx/CVE-2025-53521.json", "sourcePath": "/containers/cna/metrics/1/cvssV4_0", "text": "{\"version\":\"4.0\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"attackRequirements\":\"NONE\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"vulnConfidentialityImpact\":\"HIGH\",\"subConfidentialityImpact\":\"NONE\",\"vulnIntegrityImpact\":\"HIGH\",\"subIntegrityImpact\":\"NONE\",\"vulnAvailabilityImpact\":\"HIGH\",\"subAvailabilityImpact\":\"NONE\",\"Safety\":\"NOT_DEFINED\",\"Automatable\":\"NOT_DEFINED\",\"Recovery\":\"NOT_DEFINED\",\"valueDensity\":\"NOT_DEFINED\",\"vulnerabilityResponseEffort\":\"NOT_DEFINED\",\"providerUrgency\":\"NOT_DEFINED\",\"baseSeverity\":\"CRITICAL\",\"baseScore\":9.3,\"vectorString\":\"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-03-31T16:04:27.360Z", "fetchedAt": "2026-10-23T02:43:39.046Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-03-27T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "BIG-IPにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:24:24.124Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "ba46e87c51ca191e14cfca54a8f890911327d0360569a410d062300a6832d584", "sourceModifiedAt": "2026-03-31T16:04:27.360Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "BIG‑IP APM のアクセスポリシーが仮想サーバーに設定されている場合、特定の悪意あるトラフィックによりリモートコード実行（RCE）が可能になる。なお、技術サポートが終了した（EoTS）バージョンは評価対象外である。", "risk": "攻撃者がサーバー上で任意のコードを実行できる可能性がある。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "BIG‑IP の APM モジュールでアクセスポリシーが仮想サーバーに設定されていることが前提条件である。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/53xxx/CVE-2025-53521.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "技術サポートが終了したバージョンは評価対象外である。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/53xxx/CVE-2025-53521.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "公式の対象表：F5 / BIG-IP。影響ありとして記載：17.5.0以上、17.5.1.3未満。影響ありとして記載：17.1.0以上、17.1.3未満。影響ありとして記載：16.1.0以上、16.1.6.1未満。影響ありとして記載：15.1.0以上、15.1.10.8未満。対象の機能：APM。個別に記されていない版の影響は、原資料でも未確定です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/53xxx/CVE-2025-53521.json" ], "evidenceIds": [ "E3" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-53521" ], "evidenceIds": [ "E4" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/53xxx/CVE-2025-53521.json" ], "evidenceIds": [ "E3" ] }, { "text": "「BIG-IP」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2025-53521", "https://my.f5.com/manage/s/article/K000156741", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-53521", "https://my.f5.com/manage/s/article/K000160486", "https://my.f5.com/manage/s/article/K11438344", "https://nvd.nist.gov/vuln/detail/CVE-2025-53521" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/53xxx/CVE-2025-53521.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2025-53521", "https://my.f5.com/manage/s/article/K000156741", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-53521", "https://my.f5.com/manage/s/article/K000160486", "https://my.f5.com/manage/s/article/K11438344", "https://nvd.nist.gov/vuln/detail/CVE-2025-53521" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/53xxx/CVE-2025-53521.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2025-53521", "https://my.f5.com/manage/s/article/K000156741", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-53521", "https://my.f5.com/manage/s/article/K000160486", "https://my.f5.com/manage/s/article/K11438344", "https://nvd.nist.gov/vuln/detail/CVE-2025-53521" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/53xxx/CVE-2025-53521.json", "label": "CVE：f5" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-53521", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-53521", "label": "CVE公式レコード" }, { "url": "https://my.f5.com/manage/s/article/K000156741", "label": "CISAが示す関連情報" }, { "url": "https://my.f5.com/manage/s/article/K000160486", "label": "CISAが示す関連情報" }, { "url": "https://my.f5.com/manage/s/article/K11438344", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-53521", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/53xxx/CVE-2025-53521.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "When a BIG-IP APM access policy is configured on a virtual server, specific malicious traffic can lead to Remote Code Execution (RCE).  \n\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/53xxx/CVE-2025-53521.json", "sourceField": "/containers/cna/title", "excerpt": "BigIP APM Vulnerability", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/53xxx/CVE-2025-53521.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"F5\",\"product\":\"BIG-IP\",\"modules\":[\"APM\"],\"versions\":[{\"status\":\"affected\",\"version\":\"17.5.0\",\"lessThan\":\"17.5.1.3\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"17.1.0\",\"lessThan\":\"17.1.3\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"16.1.0\",\"lessThan\":\"16.1.6.1\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"15.1.0\",\"lessThan\":\"15.1.10.8\",\"versionType\":\"custom\"}],\"defaultStatus\":\"unknown\"}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-53521", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2025-53521\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2025-53521（BIG-IP）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・BIG‑IP の APM モジュールでアクセスポリシーが仮想サーバーに設定されていることが前提条件である。\n・技術サポートが終了したバージョンは評価対象外である。\n・公式の対象表：F5 / BIG-IP。影響ありとして記載：17.5.0以上、17.5.1.3未満。影響ありとして記載：17.1.0以上、17.1.3未満。影響ありとして記載：16.1.0以上、16.1.6.1未満。影響ありとして記載：15.1.0以上、15.1.10.8未満。対象の機能：APM。個別に記されていない版の影響は、原資料でも未確定です。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2025-53521", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:24:24.124Z", "lastSuccess": "2026-10-23T03:24:24.124Z", "sourceCheckedAt": "2026-10-23T02:43:39.046Z", "errorCode": null }, "glossary": [ { "term": "任意のコード実行", "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。", "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html", "kind": "general_definition" } ] } }, { "id": "CVE-2026-33634", "aliases": [], "title": "setup-trivy / trivy-action / trivy / LiteLLM / telnyx：脆弱性情報", "summary": "Trivy はセキュリティスキャナです。2026年3月19日、脅威アクターが侵害された認証情報を使って、悪意のある Trivy バイナリ v0.69.4 を公開し、`aquasecurity/trivy-action` の 77 個のバージョンタグのうち 76 個をクレデンシャルを盗むマルウェアに強制プッシュし、`aquasecurity/setup-trivy` の 7 個のタグすべてを悪意あるコミットに置き換えました。このインシデントは 2026年2月下旬に始まったサプライチェーン攻撃の継続です。3月1日の最初の開示後に認証情報のローテーションが行われましたが、すべて同時に無効化されたわけではなく、ローテーション期間（数日間）中に有効なトークンで新たに回転したシークレットが漏洩する可能性があり、攻撃者はそれを利用して 3月19日の攻撃を実行できました。影響を受けたコンポーネントは、`aquasecurity/trivy` の Go / コンテナイメージ バージョン 0.69.4、`aquasecurity/trivy-action` の GitHub Action バージョン 0.0.1 から 0.34.2（76/77）、`aquasecurity/setup-trivy` の GitHub Action バージョン 0.2.0 から 0.2.6（安全なコミットで再作成された 0.2.6 を除く）です。安全と確認されたバージョンは Trivy バイナリ 0.69.2・0.69.3、trivy-action 0.35.0、setup‑trivy 0.2.6 です。もし影響を受けたバージョンが環境で実行された可能性がある場合、すべてのシークレットは漏洩したとみなして直ちにローテーションしてください。自組織が Trivy v0.69.4 を取得または実行したか確認し、影響を受けたアーティファクトはすぐに削除します。`aquasecurity/trivy-action` や `aquasecurity/setup-trivy` を使用しているワークフローをすべて見直し、バージョンタグではなく不変のコミット SHA を指定して固定してください。2026年3月19〜20日のワークフロー実行ログを確認し、改ざんの痕跡がないかチェックします。また、組織内に `tpcp-docs` というリポジトリが存在するか確認し、存在すればフォールバックの情報漏洩が発生した可能性があります。", "risk": "攻撃者がシークレットを取得できる可能性があり、機密情報が漏洩する恐れがあります。", "product": "setup-trivy / trivy-action / trivy / LiteLLM / telnyx", "category": "other", "component": "package", "severity": "critical", "cvss": 9.4, "cvssVersion": "4.0", "cvssSource": "GitHub_M", "cvssVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H", "affected": [ { "product": "setup-trivy", "range": "< 0.2.6" }, { "product": "trivy-action", "range": "< 0.35.0" }, { "product": "trivy", "range": "= 0.69.4" }, { "product": "LiteLLM", "range": ">= 1.82.7, <= 1.82.8" }, { "product": "telnyx", "range": ">= 4.87.1, <= 4.87.2" } ], "fixed": [], "steps": [ "2026年3月19日から20日のワークフロー実行ログを確認し、改ざんの痕跡がないかチェックしてください。", "組織内に `tpcp-docs` というリポジトリが存在するか確認し、存在すれば情報漏洩が発生した可能性があります。", "「CVE-2026-33634」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33634.json", "label": "CVE：GitHub_M" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-33634", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-33634", "label": "CVE公式レコード" }, { "url": "https://github.com/aquasecurity/trivy/security/advisories/GHSA-69fq-xp46-6x23", "label": "https://github.com/aquasecurity/trivy/security/advisories/GHSA-69fq-xp46-6x23" }, { "url": "https://github.com/team-telnyx/telnyx-python/security/advisories/GHSA-955r-262c-33jc", "label": "https://github.com/team-telnyx/telnyx-python/security/advisories/GHSA-955r-262c-33jc" }, { "url": "https://github.com/BerriAI/litellm/issues/24518", "label": "https://github.com/BerriAI/litellm/issues/24518" }, { "url": "https://docs.litellm.ai/blog/security-update-march-2026", "label": "https://docs.litellm.ai/blog/security-update-march-2026" }, { "url": "https://futuresearch.ai/blog/litellm-pypi-supply-chain-attack", "label": "https://futuresearch.ai/blog/litellm-pypi-supply-chain-attack" }, { "url": "https://github.com/aquasecurity/trivy/discussions/10425", "label": "https://github.com/aquasecurity/trivy/discussions/10425" }, { "url": "https://github.com/pypa/advisory-database/tree/main/vulns/litellm/PYSEC-2026-2.yaml", "label": "https://github.com/pypa/advisory-database/tree/main/vulns/litellm/PYSEC-2026-2.yaml" }, { "url": "https://inspector.pypi.io/project/litellm/1.82.7/packages/79/5f/b6998d42c6ccd32d36e12661f2734602e72a576d52a51f4245aef0b20b4d/litellm-1.82.7-py3-none-any.whl/litellm/proxy/proxy_server.py#line.130", "label": "https://inspector.pypi.io/project/litellm/1.82.7/packages/79/5f/b6998d42c6ccd32d36e12661f2734602e72a576d52a51f4245aef0b2" }, { "url": "https://inspector.pypi.io/project/litellm/1.82.8/packages/f6/2c/731b614e6cee0bca1e010a36fd381fba69ee836fe3cb6753ba23ef2b9601/litellm-1.82.8.tar.gz/litellm-1.82.8/litellm_init.pth#line.1", "label": "https://inspector.pypi.io/project/litellm/1.82.8/packages/f6/2c/731b614e6cee0bca1e010a36fd381fba69ee836fe3cb6753ba23ef2b" }, { "url": "https://www.wiz.io/blog/teampcp-attack-kics-github-action", "label": "https://www.wiz.io/blog/teampcp-attack-kics-github-action" }, { "url": "https://github.com/advisories/GHSA-69fq-xp46-6x23", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33634", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v4.0/specification-document", "label": "FIRST公式：CVSS 4.0の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2026-03-23T21:47:29.636Z", "modifiedAt": "2026-03-30T14:40:28.027Z", "fetchedAt": "2026-10-23T02:43:48.357Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "Trivy is a security scanner. On March 19, 2026, a threat actor used compromised credentials to publish a malicious Trivy v0.69.4 release, force-push 76 of 77 version tags in `aquasecurity/trivy-action` to credential-stealing malware, and replace all 7 tags in `aquasecurity/setup-trivy` with malicious commits. This incident is a continuation of the supply chain attack that began in late February 2026. Following the initial disclosure on March 1, credential rotation was performed but was not atomic (not all credentials were revoked simultaneously). The attacker could have use a valid token to exfiltrate newly rotated secrets during the rotation window (which lasted a few days). This could have allowed the attacker to retain access and execute the March 19 attack. Affected components include the `aquasecurity/trivy` Go / Container image version 0.69.4, the `aquasecurity/trivy-action` GitHub Action versions 0.0.1 – 0.34.2 (76/77), and the`aquasecurity/setup-trivy` GitHub Action versions 0.2.0 – 0.2.6, prior to the recreation of 0.2.6 with a safe commit. Known safe versions include versions 0.69.2 and 0.69.3 of the Trivy binary, version 0.35.0 of trivy-action, and version 0.2.6 of setup-trivy. Additionally, take other mitigations to ensure the safety of secrets. If there is any possibility that a compromised version ran in one's environment, all secrets accessible to affected pipelines must be treated as exposed and rotated immediately. Check whether one's organization pulled or executed Trivy v0.69.4 from any source. Remove any affected artifacts immediately. Review all workflows using `aquasecurity/trivy-action` or `aquasecurity/setup-trivy`. Those who referenced a version tag rather than a full commit SHA should check workflow run logs from March 19–20, 2026 for signs of compromise. Look for repositories named `tpcp-docs` in one's GitHub organization. The presence of such a repository may indicate that the fallback exfiltration mechanism was triggered and secrets were successfully stolen. Pin GitHub Actions to full, immutable commit SHA hashes, don't use mutable version tags.", "sourceTitle": "Trivy ecosystem supply chain briefly compromised", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "aquasecurity", "product": "setup-trivy", "versions": [ { "version": "< 0.2.6", "status": "affected" } ] }, { "vendor": "aquasecurity", "product": "trivy-action", "versions": [ { "version": "< 0.35.0", "status": "affected" } ] }, { "vendor": "aquasecurity", "product": "trivy", "versions": [ { "version": "= 0.69.4", "status": "affected" } ] }, { "vendor": "BerriAI", "product": "LiteLLM", "versions": [ { "version": ">= 1.82.7, <= 1.82.8", "status": "affected" } ] }, { "vendor": "team-telnyx", "product": "telnyx", "versions": [ { "version": ">= 4.87.1, <= 4.87.2", "status": "affected" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-33634", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33634.json", "fetchedAt": "2026-10-23T02:43:48.357Z", "publishedAt": "2026-03-23T21:47:29.636Z", "modifiedAt": "2026-03-30T14:40:28.027Z", "state": "published", "provider": "GitHub_M", "title": "Trivy ecosystem supply chain briefly compromised", "descriptions": [ { "lang": "en", "value": "Trivy is a security scanner. On March 19, 2026, a threat actor used compromised credentials to publish a malicious Trivy v0.69.4 release, force-push 76 of 77 version tags in `aquasecurity/trivy-action` to credential-stealing malware, and replace all 7 tags in `aquasecurity/setup-trivy` with malicious commits. This incident is a continuation of the supply chain attack that began in late February 2026. Following the initial disclosure on March 1, credential rotation was performed but was not atomic (not all credentials were revoked simultaneously). The attacker could have use a valid token to exfiltrate newly rotated secrets during the rotation window (which lasted a few days). This could have allowed the attacker to retain access and execute the March 19 attack. Affected components include the `aquasecurity/trivy` Go / Container image version 0.69.4, the `aquasecurity/trivy-action` GitHub Action versions 0.0.1 – 0.34.2 (76/77), and the`aquasecurity/setup-trivy` GitHub Action versions 0.2.0 – 0.2.6, prior to the recreation of 0.2.6 with a safe commit. Known safe versions include versions 0.69.2 and 0.69.3 of the Trivy binary, version 0.35.0 of trivy-action, and version 0.2.6 of setup-trivy. Additionally, take other mitigations to ensure the safety of secrets. If there is any possibility that a compromised version ran in one's environment, all secrets accessible to affected pipelines must be treated as exposed and rotated immediately. Check whether one's organization pulled or executed Trivy v0.69.4 from any source. Remove any affected artifacts immediately. Review all workflows using `aquasecurity/trivy-action` or `aquasecurity/setup-trivy`. Those who referenced a version tag rather than a full commit SHA should check workflow run logs from March 19–20, 2026 for signs of compromise. Look for repositories named `tpcp-docs` in one's GitHub organization. The presence of such a repository may indicate that the fallback exfiltration mechanism was triggered and secrets were successfully stolen. Pin GitHub Actions to full, immutable commit SHA hashes, don't use mutable version tags.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "aquasecurity", "product": "setup-trivy", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "< 0.2.6", "status": "affected" } ] }, { "vendor": "aquasecurity", "product": "trivy-action", "sourcePath": "/containers/cna/affected/1", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/1/versions/0", "version": "< 0.35.0", "status": "affected" } ] }, { "vendor": "aquasecurity", "product": "trivy", "sourcePath": "/containers/cna/affected/2", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/2/versions/0", "version": "= 0.69.4", "status": "affected" } ] }, { "vendor": "BerriAI", "product": "LiteLLM", "sourcePath": "/containers/cna/affected/3", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/3/versions/0", "version": ">= 1.82.7, <= 1.82.8", "status": "affected" } ] }, { "vendor": "team-telnyx", "product": "telnyx", "sourcePath": "/containers/cna/affected/4", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/4/versions/0", "version": ">= 4.87.1, <= 4.87.2", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-506", "lang": "en", "description": "CWE-506: Embedded Malicious Code", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "4.0", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H", "baseScore": 9.4, "baseSeverity": "CRITICAL", "provider": "GitHub_M", "sourcePath": "/containers/cna/metrics/0/cvssV4_0" } ], "references": [ { "url": "https://github.com/aquasecurity/trivy/security/advisories/GHSA-69fq-xp46-6x23", "label": "https://github.com/aquasecurity/trivy/security/advisories/GHSA-69fq-xp46-6x23", "tags": [ "x_refsource_CONFIRM" ], "provider": "GitHub_M", "sourcePath": "/containers/cna/references/0" }, { "url": "https://github.com/team-telnyx/telnyx-python/security/advisories/GHSA-955r-262c-33jc", "label": "https://github.com/team-telnyx/telnyx-python/security/advisories/GHSA-955r-262c-33jc", "tags": [ "x_refsource_MISC" ], "provider": "GitHub_M", "sourcePath": "/containers/cna/references/1" }, { "url": "https://github.com/BerriAI/litellm/issues/24518", "label": "https://github.com/BerriAI/litellm/issues/24518", "tags": [ "x_refsource_MISC" ], "provider": "GitHub_M", "sourcePath": "/containers/cna/references/2" }, { "url": "https://docs.litellm.ai/blog/security-update-march-2026", "label": "https://docs.litellm.ai/blog/security-update-march-2026", "tags": [ "x_refsource_MISC" ], "provider": "GitHub_M", "sourcePath": "/containers/cna/references/3" }, { "url": "https://futuresearch.ai/blog/litellm-pypi-supply-chain-attack", "label": "https://futuresearch.ai/blog/litellm-pypi-supply-chain-attack", "tags": [ "x_refsource_MISC" ], "provider": "GitHub_M", "sourcePath": "/containers/cna/references/4" }, { "url": "https://github.com/aquasecurity/trivy/discussions/10425", "label": "https://github.com/aquasecurity/trivy/discussions/10425", "tags": [ "x_refsource_MISC" ], "provider": "GitHub_M", "sourcePath": "/containers/cna/references/5" }, { "url": "https://github.com/pypa/advisory-database/tree/main/vulns/litellm/PYSEC-2026-2.yaml", "label": "https://github.com/pypa/advisory-database/tree/main/vulns/litellm/PYSEC-2026-2.yaml", "tags": [ "x_refsource_MISC" ], "provider": "GitHub_M", "sourcePath": "/containers/cna/references/6" }, { "url": "https://inspector.pypi.io/project/litellm/1.82.7/packages/79/5f/b6998d42c6ccd32d36e12661f2734602e72a576d52a51f4245aef0b20b4d/litellm-1.82.7-py3-none-any.whl/litellm/proxy/proxy_server.py#line.130", "label": "https://inspector.pypi.io/project/litellm/1.82.7/packages/79/5f/b6998d42c6ccd32d36e12661f2734602e72a576d52a51f4245aef0b20b4d/litellm-1.82.7-py3-none-any.whl/litellm/proxy/proxy_server.py#line.130", "tags": [ "x_refsource_MISC" ], "provider": "GitHub_M", "sourcePath": "/containers/cna/references/7" }, { "url": "https://inspector.pypi.io/project/litellm/1.82.8/packages/f6/2c/731b614e6cee0bca1e010a36fd381fba69ee836fe3cb6753ba23ef2b9601/litellm-1.82.8.tar.gz/litellm-1.82.8/litellm_init.pth#line.1", "label": "https://inspector.pypi.io/project/litellm/1.82.8/packages/f6/2c/731b614e6cee0bca1e010a36fd381fba69ee836fe3cb6753ba23ef2b9601/litellm-1.82.8.tar.gz/litellm-1.82.8/litellm_init.pth#line.1", "tags": [ "x_refsource_MISC" ], "provider": "GitHub_M", "sourcePath": "/containers/cna/references/8" }, { "url": "https://www.wiz.io/blog/teampcp-attack-kics-github-action", "label": "https://www.wiz.io/blog/teampcp-attack-kics-github-action", "tags": [ "x_refsource_MISC" ], "provider": "GitHub_M", "sourcePath": "/containers/cna/references/9" }, { "url": "https://rosesecurity.dev/2026/03/20/typosquatting-trivy.html", "label": "CISA-ADP", "tags": [ "exploit" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://www.microsoft.com/en-us/security/blog/2026/03/24/detecting-investigating-defending-against-trivy-supply-chain-compromise/", "label": "CISA-ADP", "tags": [ "third-party-advisory" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/1" }, { "url": "https://github.com/BerriAI/litellm/issues/24518#issuecomment-4127436387", "label": "CISA-ADP", "tags": [ "third-party-advisory" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/2" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-33634", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/3" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33634.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"aquasecurity\",\"product\":\"setup-trivy\",\"versions\":[{\"version\":\"< 0.2.6\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33634.json", "sourcePath": "/containers/cna/affected/1", "text": "{\"vendor\":\"aquasecurity\",\"product\":\"trivy-action\",\"versions\":[{\"version\":\"< 0.35.0\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33634.json", "sourcePath": "/containers/cna/affected/2", "text": "{\"vendor\":\"aquasecurity\",\"product\":\"trivy\",\"versions\":[{\"version\":\"= 0.69.4\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33634.json", "sourcePath": "/containers/cna/affected/3", "text": "{\"vendor\":\"BerriAI\",\"product\":\"LiteLLM\",\"versions\":[{\"version\":\">= 1.82.7, <= 1.82.8\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33634.json", "sourcePath": "/containers/cna/affected/4", "text": "{\"vendor\":\"team-telnyx\",\"product\":\"telnyx\",\"versions\":[{\"version\":\">= 4.87.1, <= 4.87.2\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33634.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Trivy is a security scanner. On March 19, 2026, a threat actor used compromised credentials to publish a malicious Trivy v0.69.4 release, force-push 76 of 77 version tags in `aquasecurity/trivy-action` to credential-stealing malware, and replace all 7 tags in `aquasecurity/setup-trivy` with malicious commits. This incident is a continuation of the supply chain attack that began in late February 2026. Following the initial disclosure on March 1, credential rotation was performed but was not atomic (not all credentials were revoked simultaneously). The attacker could have use a valid token to exfiltrate newly rotated secrets during the rotation window (which lasted a few days). This could have allowed the attacker to retain access and execute the March 19 attack. Affected components include the `aquasecurity/trivy` Go / Container image version 0.69.4, the `aquasecurity/trivy-action` GitHub Action versions 0.0.1 – 0.34.2 (76/77), and the`aquasecurity/setup-trivy` GitHub Action versions 0.2.0 – 0.2.6, prior to the recreation of 0.2.6 with a safe commit. Known safe versions include versions 0.69.2 and 0.69.3 of the Trivy binary, version 0.35.0 of trivy-action, and version 0.2.6 of setup-trivy. Additionally, take other mitigations to ensure the safety of secrets. If there is any possibility that a compromised version ran in one's environment, all secrets accessible to affected pipelines must be treated as exposed and rotated immediately. Check whether one's organization pulled or executed Trivy v0.69.4 from any source. Remove any affected artifacts immediately. Review all workflows using `aquasecurity/trivy-action` or `aquasecurity/setup-trivy`. Those who referenced a version tag rather than a full commit SHA should check workflow run logs from March 19–20, 2026 for signs of compromise. Look for repositories named `tpcp-docs` in one's GitHub organization. The presence of such a repository may indicate that the fallback exfiltration mechanism was triggered and secrets were successfully stolen. Pin GitHub Actions to full, immutable commit SHA hashes, don't use mutable version tags.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33634.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"cweId\":\"CWE-506\",\"lang\":\"en\",\"description\":\"CWE-506: Embedded Malicious Code\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV4_0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33634.json", "sourcePath": "/containers/cna/metrics/0/cvssV4_0", "text": "{\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"attackRequirements\":\"NONE\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"vulnConfidentialityImpact\":\"HIGH\",\"vulnIntegrityImpact\":\"HIGH\",\"vulnAvailabilityImpact\":\"HIGH\",\"subConfidentialityImpact\":\"HIGH\",\"subIntegrityImpact\":\"HIGH\",\"subAvailabilityImpact\":\"HIGH\",\"baseScore\":9.4,\"baseSeverity\":\"CRITICAL\",\"vectorString\":\"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H\",\"version\":\"4.0\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-03-30T14:40:28.027Z", "fetchedAt": "2026-10-23T02:43:48.357Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-03-26T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "setup-trivy / trivy-action / trivy / LiteLLM / telnyxに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:24:24.195Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "4df66b40215c4dff2114c150a6847c3f2baf19f175726f89037c6a5819532c8c", "sourceModifiedAt": "2026-03-30T14:40:28.027Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Trivy はセキュリティスキャナです。2026年3月19日、脅威アクターが侵害された認証情報を使って、悪意のある Trivy バイナリ v0.69.4 を公開し、`aquasecurity/trivy-action` の 77 個のバージョンタグのうち 76 個をクレデンシャルを盗むマルウェアに強制プッシュし、`aquasecurity/setup-trivy` の 7 個のタグすべてを悪意あるコミットに置き換えました。このインシデントは 2026年2月下旬に始まったサプライチェーン攻撃の継続です。3月1日の最初の開示後に認証情報のローテーションが行われましたが、すべて同時に無効化されたわけではなく、ローテーション期間（数日間）中に有効なトークンで新たに回転したシークレットが漏洩する可能性があり、攻撃者はそれを利用して 3月19日の攻撃を実行できました。影響を受けたコンポーネントは、`aquasecurity/trivy` の Go / コンテナイメージ バージョン 0.69.4、`aquasecurity/trivy-action` の GitHub Action バージョン 0.0.1 から 0.34.2（76/77）、`aquasecurity/setup-trivy` の GitHub Action バージョン 0.2.0 から 0.2.6（安全なコミットで再作成された 0.2.6 を除く）です。安全と確認されたバージョンは Trivy バイナリ 0.69.2・0.69.3、trivy-action 0.35.0、setup‑trivy 0.2.6 です。もし影響を受けたバージョンが環境で実行された可能性がある場合、すべてのシークレットは漏洩したとみなして直ちにローテーションしてください。自組織が Trivy v0.69.4 を取得または実行したか確認し、影響を受けたアーティファクトはすぐに削除します。`aquasecurity/trivy-action` や `aquasecurity/setup-trivy` を使用しているワークフローをすべて見直し、バージョンタグではなく不変のコミット SHA を指定して固定してください。2026年3月19〜20日のワークフロー実行ログを確認し、改ざんの痕跡がないかチェックします。また、組織内に `tpcp-docs` というリポジトリが存在するか確認し、存在すればフォールバックの情報漏洩が発生した可能性があります。", "risk": "攻撃者がシークレットを取得できる可能性があり、機密情報が漏洩する恐れがあります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "aquasecurity/setup-trivy のバージョンが 0.2.6 未満は影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33634.json" ], "evidenceIds": [ "E3", "E2" ] }, { "text": "aquasecurity/trivy-action のバージョンが 0.35.0 未満は影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33634.json" ], "evidenceIds": [ "E4", "E2" ] }, { "text": "aquasecurity/trivy のバージョンが 0.69.4 は影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33634.json" ], "evidenceIds": [ "E5", "E2" ] }, { "text": "BerriAI の LiteLLM のバージョンが 1.82.7 以上 1.82.8 以下は影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33634.json" ], "evidenceIds": [ "E6", "E2" ] }, { "text": "team-telnyx の telnyx のバージョンが 4.87.1 以上 4.87.2 以下は影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33634.json" ], "evidenceIds": [ "E7", "E2" ] }, { "text": "公式の対象表：aquasecurity / setup-trivy。影響ありとして記載：< 0.2.6。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33634.json" ], "evidenceIds": [ "E3" ] }, { "text": "公式の対象表：aquasecurity / trivy-action。影響ありとして記載：< 0.35.0。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33634.json" ], "evidenceIds": [ "E4" ] }, { "text": "公式の対象表：aquasecurity / trivy。影響ありとして記載：= 0.69.4。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33634.json" ], "evidenceIds": [ "E5" ] }, { "text": "公式の対象表：BerriAI / LiteLLM。影響ありとして記載：>= 1.82.7, <= 1.82.8。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33634.json" ], "evidenceIds": [ "E6" ] }, { "text": "公式の対象表：team-telnyx / telnyx。影響ありとして記載：>= 4.87.1, <= 4.87.2。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33634.json" ], "evidenceIds": [ "E7" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-33634" ], "evidenceIds": [ "E8" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33634.json" ], "evidenceIds": [ "E3" ] }, { "text": "「setup-trivy / trivy-action / trivy / LiteLLM / telnyx」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-33634", "https://github.com/aquasecurity/trivy/security/advisories/GHSA-69fq-xp46-6x23", "https://github.com/team-telnyx/telnyx-python/security/advisories/GHSA-955r-262c-33jc", "https://github.com/BerriAI/litellm/issues/24518", "https://docs.litellm.ai/blog/security-update-march-2026", "https://futuresearch.ai/blog/litellm-pypi-supply-chain-attack", "https://github.com/aquasecurity/trivy/discussions/10425", "https://github.com/pypa/advisory-database/tree/main/vulns/litellm/PYSEC-2026-2.yaml", "https://inspector.pypi.io/project/litellm/1.82.7/packages/79/5f/b6998d42c6ccd32d36e12661f2734602e72a576d52a51f4245aef0b20b4d/litellm-1.82.7-py3-none-any.whl/litellm/proxy/proxy_server.py#line.130", "https://inspector.pypi.io/project/litellm/1.82.8/packages/f6/2c/731b614e6cee0bca1e010a36fd381fba69ee836fe3cb6753ba23ef2b9601/litellm-1.82.8.tar.gz/litellm-1.82.8/litellm_init.pth#line.1", "https://www.wiz.io/blog/teampcp-attack-kics-github-action", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-33634", "https://github.com/advisories/GHSA-69fq-xp46-6x23", "https://nvd.nist.gov/vuln/detail/CVE-2026-33634" ] } ], "actions": [ { "text": "2026年3月19日から20日のワークフロー実行ログを確認し、改ざんの痕跡がないかチェックしてください。", "kind": "check", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33634.json" ], "evidenceIds": [ "E1" ] }, { "text": "組織内に `tpcp-docs` というリポジトリが存在するか確認し、存在すれば情報漏洩が発生した可能性があります。", "kind": "check", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33634.json" ], "evidenceIds": [ "E1" ] }, { "text": "「CVE-2026-33634」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2026-33634", "https://github.com/aquasecurity/trivy/security/advisories/GHSA-69fq-xp46-6x23", "https://github.com/team-telnyx/telnyx-python/security/advisories/GHSA-955r-262c-33jc", "https://github.com/BerriAI/litellm/issues/24518", "https://docs.litellm.ai/blog/security-update-march-2026", "https://futuresearch.ai/blog/litellm-pypi-supply-chain-attack", "https://github.com/aquasecurity/trivy/discussions/10425", "https://github.com/pypa/advisory-database/tree/main/vulns/litellm/PYSEC-2026-2.yaml", "https://inspector.pypi.io/project/litellm/1.82.7/packages/79/5f/b6998d42c6ccd32d36e12661f2734602e72a576d52a51f4245aef0b20b4d/litellm-1.82.7-py3-none-any.whl/litellm/proxy/proxy_server.py#line.130", "https://inspector.pypi.io/project/litellm/1.82.8/packages/f6/2c/731b614e6cee0bca1e010a36fd381fba69ee836fe3cb6753ba23ef2b9601/litellm-1.82.8.tar.gz/litellm-1.82.8/litellm_init.pth#line.1", "https://www.wiz.io/blog/teampcp-attack-kics-github-action", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-33634", "https://github.com/advisories/GHSA-69fq-xp46-6x23", "https://nvd.nist.gov/vuln/detail/CVE-2026-33634" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-33634", "https://github.com/aquasecurity/trivy/security/advisories/GHSA-69fq-xp46-6x23", "https://github.com/team-telnyx/telnyx-python/security/advisories/GHSA-955r-262c-33jc", "https://github.com/BerriAI/litellm/issues/24518", "https://docs.litellm.ai/blog/security-update-march-2026", "https://futuresearch.ai/blog/litellm-pypi-supply-chain-attack", "https://github.com/aquasecurity/trivy/discussions/10425", "https://github.com/pypa/advisory-database/tree/main/vulns/litellm/PYSEC-2026-2.yaml", "https://inspector.pypi.io/project/litellm/1.82.7/packages/79/5f/b6998d42c6ccd32d36e12661f2734602e72a576d52a51f4245aef0b20b4d/litellm-1.82.7-py3-none-any.whl/litellm/proxy/proxy_server.py#line.130", "https://inspector.pypi.io/project/litellm/1.82.8/packages/f6/2c/731b614e6cee0bca1e010a36fd381fba69ee836fe3cb6753ba23ef2b9601/litellm-1.82.8.tar.gz/litellm-1.82.8/litellm_init.pth#line.1", "https://www.wiz.io/blog/teampcp-attack-kics-github-action", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-33634", "https://github.com/advisories/GHSA-69fq-xp46-6x23", "https://nvd.nist.gov/vuln/detail/CVE-2026-33634" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2026-33634", "https://github.com/aquasecurity/trivy/security/advisories/GHSA-69fq-xp46-6x23", "https://github.com/team-telnyx/telnyx-python/security/advisories/GHSA-955r-262c-33jc", "https://github.com/BerriAI/litellm/issues/24518", "https://docs.litellm.ai/blog/security-update-march-2026", "https://futuresearch.ai/blog/litellm-pypi-supply-chain-attack", "https://github.com/aquasecurity/trivy/discussions/10425", "https://github.com/pypa/advisory-database/tree/main/vulns/litellm/PYSEC-2026-2.yaml", "https://inspector.pypi.io/project/litellm/1.82.7/packages/79/5f/b6998d42c6ccd32d36e12661f2734602e72a576d52a51f4245aef0b20b4d/litellm-1.82.7-py3-none-any.whl/litellm/proxy/proxy_server.py#line.130", "https://inspector.pypi.io/project/litellm/1.82.8/packages/f6/2c/731b614e6cee0bca1e010a36fd381fba69ee836fe3cb6753ba23ef2b9601/litellm-1.82.8.tar.gz/litellm-1.82.8/litellm_init.pth#line.1", "https://www.wiz.io/blog/teampcp-attack-kics-github-action", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-33634", "https://github.com/advisories/GHSA-69fq-xp46-6x23", "https://nvd.nist.gov/vuln/detail/CVE-2026-33634" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33634.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-33634", "https://github.com/aquasecurity/trivy/security/advisories/GHSA-69fq-xp46-6x23", "https://github.com/team-telnyx/telnyx-python/security/advisories/GHSA-955r-262c-33jc", "https://github.com/BerriAI/litellm/issues/24518", "https://docs.litellm.ai/blog/security-update-march-2026", "https://futuresearch.ai/blog/litellm-pypi-supply-chain-attack", "https://github.com/aquasecurity/trivy/discussions/10425", "https://github.com/pypa/advisory-database/tree/main/vulns/litellm/PYSEC-2026-2.yaml", "https://inspector.pypi.io/project/litellm/1.82.7/packages/79/5f/b6998d42c6ccd32d36e12661f2734602e72a576d52a51f4245aef0b20b4d/litellm-1.82.7-py3-none-any.whl/litellm/proxy/proxy_server.py#line.130", "https://inspector.pypi.io/project/litellm/1.82.8/packages/f6/2c/731b614e6cee0bca1e010a36fd381fba69ee836fe3cb6753ba23ef2b9601/litellm-1.82.8.tar.gz/litellm-1.82.8/litellm_init.pth#line.1", "https://www.wiz.io/blog/teampcp-attack-kics-github-action", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-33634", "https://github.com/advisories/GHSA-69fq-xp46-6x23", "https://nvd.nist.gov/vuln/detail/CVE-2026-33634" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33634.json", "label": "CVE：GitHub_M" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-33634", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-33634", "label": "CVE公式レコード" }, { "url": "https://github.com/aquasecurity/trivy/security/advisories/GHSA-69fq-xp46-6x23", "label": "https://github.com/aquasecurity/trivy/security/advisories/GHSA-69fq-xp46-6x23" }, { "url": "https://github.com/team-telnyx/telnyx-python/security/advisories/GHSA-955r-262c-33jc", "label": "https://github.com/team-telnyx/telnyx-python/security/advisories/GHSA-955r-262c-33jc" }, { "url": "https://github.com/BerriAI/litellm/issues/24518", "label": "https://github.com/BerriAI/litellm/issues/24518" }, { "url": "https://docs.litellm.ai/blog/security-update-march-2026", "label": "https://docs.litellm.ai/blog/security-update-march-2026" }, { "url": "https://futuresearch.ai/blog/litellm-pypi-supply-chain-attack", "label": "https://futuresearch.ai/blog/litellm-pypi-supply-chain-attack" }, { "url": "https://github.com/aquasecurity/trivy/discussions/10425", "label": "https://github.com/aquasecurity/trivy/discussions/10425" }, { "url": "https://github.com/pypa/advisory-database/tree/main/vulns/litellm/PYSEC-2026-2.yaml", "label": "https://github.com/pypa/advisory-database/tree/main/vulns/litellm/PYSEC-2026-2.yaml" }, { "url": "https://inspector.pypi.io/project/litellm/1.82.7/packages/79/5f/b6998d42c6ccd32d36e12661f2734602e72a576d52a51f4245aef0b20b4d/litellm-1.82.7-py3-none-any.whl/litellm/proxy/proxy_server.py#line.130", "label": "https://inspector.pypi.io/project/litellm/1.82.7/packages/79/5f/b6998d42c6ccd32d36e12661f2734602e72a576d52a51f4245aef0b2" }, { "url": "https://inspector.pypi.io/project/litellm/1.82.8/packages/f6/2c/731b614e6cee0bca1e010a36fd381fba69ee836fe3cb6753ba23ef2b9601/litellm-1.82.8.tar.gz/litellm-1.82.8/litellm_init.pth#line.1", "label": "https://inspector.pypi.io/project/litellm/1.82.8/packages/f6/2c/731b614e6cee0bca1e010a36fd381fba69ee836fe3cb6753ba23ef2b" }, { "url": "https://www.wiz.io/blog/teampcp-attack-kics-github-action", "label": "https://www.wiz.io/blog/teampcp-attack-kics-github-action" }, { "url": "https://github.com/advisories/GHSA-69fq-xp46-6x23", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33634", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v4.0/specification-document", "label": "FIRST公式：CVSS 4.0の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33634.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Trivy is a security scanner. On March 19, 2026, a threat actor used compromised credentials to publish a malicious Trivy v0.69.4 release, force-push 76 of 77 version tags in `aquasecurity/trivy-action` to credential-stealing malware, and replace all 7 tags in `aquasecurity/setup-trivy` with malicious commits. This incident is a continuation of the supply chain attack that began in late February 2026. Following the initial disclosure on March 1, credential rotation was performed but was not atomic (not all credentials were revoked simultaneously). The attacker could have use a valid token to exfiltrate newly rotated secrets during the rotation window (which lasted a few days). This could have allowed the attacker to retain access and execute the March 19 attack. Affected components include the `aquasecurity/trivy` Go / Container image version 0.69.4, the `aquasecurity/trivy-action` GitHub Action versions 0.0.1 – 0.34.2 (76/77), and the`aquasecurity/setup-trivy` GitHub Action versions 0.2.0 – 0.2.6, prior to the recreation of 0.2.6 with a safe commit. Known safe versions include versions 0.69.2 and 0.69.3 of the Trivy binary, version 0.35.0 of trivy-action, and version 0.2.6 of setup-trivy. Additionally, take other mitigations to ensure the safety of secrets. If there is any possibility that a compromised version ran in one's environment, all secrets accessible to affected pipelines must be treated as exposed and rotated immediately. Check whether one's organization pulled or executed Trivy v0.69.4 from any source. Remove any affected artifacts immediately. Review all workflows using `aquasecurity/trivy-action` or `aquasecurity/setup-trivy`. Those who referenced a version tag rather than a full commit SHA should check workflow run logs from March 19–20, 2026 for signs of compromise. Look for repositories named `tpcp-docs` in one's GitHub organization. The presence of such a repository may indicate that the fallback exfiltration mechanism was triggered and secrets were successfully stolen. Pin GitHub Actions to full, immutable commit SHA hashes, don't use mutable version tags.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33634.json", "sourceField": "/containers/cna/title", "excerpt": "Trivy ecosystem supply chain briefly compromised", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33634.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"aquasecurity\",\"product\":\"setup-trivy\",\"versions\":[{\"version\":\"< 0.2.6\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33634.json", "sourceField": "/containers/cna/affected/1", "excerpt": "{\"vendor\":\"aquasecurity\",\"product\":\"trivy-action\",\"versions\":[{\"version\":\"< 0.35.0\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33634.json", "sourceField": "/containers/cna/affected/2", "excerpt": "{\"vendor\":\"aquasecurity\",\"product\":\"trivy\",\"versions\":[{\"version\":\"= 0.69.4\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E6", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33634.json", "sourceField": "/containers/cna/affected/3", "excerpt": "{\"vendor\":\"BerriAI\",\"product\":\"LiteLLM\",\"versions\":[{\"version\":\">= 1.82.7, <= 1.82.8\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E7", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33634.json", "sourceField": "/containers/cna/affected/4", "excerpt": "{\"vendor\":\"team-telnyx\",\"product\":\"telnyx\",\"versions\":[{\"version\":\">= 4.87.1, <= 4.87.2\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E8", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-33634", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2026-33634\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2026-33634（setup-trivy / trivy-action / trivy / LiteLLM / telnyx）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・aquasecurity/setup-trivy のバージョンが 0.2.6 未満は影響を受けます。\n・aquasecurity/trivy-action のバージョンが 0.35.0 未満は影響を受けます。\n・aquasecurity/trivy のバージョンが 0.69.4 は影響を受けます。\n・BerriAI の LiteLLM のバージョンが 1.82.7 以上 1.82.8 以下は影響を受けます。\n・team-telnyx の telnyx のバージョンが 4.87.1 以上 4.87.2 以下は影響を受けます。\n・公式の対象表：aquasecurity / setup-trivy。影響ありとして記載：< 0.2.6。\n・公式の対象表：aquasecurity / trivy-action。影響ありとして記載：< 0.35.0。\n・公式の対象表：aquasecurity / trivy。影響ありとして記載：= 0.69.4。\n・公式の対象表：BerriAI / LiteLLM。影響ありとして記載：>= 1.82.7, <= 1.82.8。\n・公式の対象表：team-telnyx / telnyx。影響ありとして記載：>= 4.87.1, <= 4.87.2。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-33634", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:24:24.195Z", "lastSuccess": "2026-10-23T03:24:24.195Z", "sourceCheckedAt": "2026-10-23T02:43:48.357Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2026-33017", "aliases": [], "title": "langflow：コード実行", "summary": "Langflow のバージョン 1.9.0 未満において、POST /api/v1/build_public_tmp/{flow_id}/flow エンドポイントは認証なしで public flow を構築できるが、オプションの data パラメータで攻撃者が任意の Python コードを含むフロー情報を送信でき、サンドボックスなしで exec() に渡されるため、認証されていないリモートコード実行が可能になる。1.9.0 で修正された。", "risk": "攻撃者がサーバー上で任意のコードを実行できる可能性がある。", "product": "langflow", "category": "other", "component": "package", "severity": "critical", "cvss": 9.3, "cvssVersion": "4.0", "cvssSource": "GitHub_M", "cvssVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L", "affected": [ { "product": "langflow", "range": "< 1.9.0" } ], "fixed": [], "steps": [ "バージョン 1.9.0 にアップデートすることで修正されている。", "「CVE-2026-33017」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33017.json", "label": "CVE：GitHub_M" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-33017", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-33017", "label": "CVE公式レコード" }, { "url": "https://github.com/langflow-ai/langflow/security/advisories/GHSA-vwmf-pq79-vjvx", "label": "CISAが示す関連情報" }, { "url": "https://github.com/langflow-ai/langflow/commit/73b6612e3ef25fdae0a752d75b0fabd47328d4f0", "label": "https://github.com/langflow-ai/langflow/commit/73b6612e3ef25fdae0a752d75b0fabd47328d4f0" }, { "url": "https://github.com/advisories/GHSA-rvqx-wpfh-mfx7", "label": "https://github.com/advisories/GHSA-rvqx-wpfh-mfx7" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33017", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v4.0/specification-document", "label": "FIRST公式：CVSS 4.0の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2026-03-20T04:52:52.885Z", "modifiedAt": "2026-05-21T19:54:41.184Z", "fetchedAt": "2026-10-23T02:43:48.326Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "Langflow is a tool for building and deploying AI-powered agents and workflows. In versions prior to 1.9.0, the POST /api/v1/build_public_tmp/{flow_id}/flow endpoint allows building public flows without requiring authentication. When the optional data parameter is supplied, the endpoint uses attacker-controlled flow data (containing arbitrary Python code in node definitions) instead of the stored flow data from the database. This code is passed to exec() with zero sandboxing, resulting in unauthenticated remote code execution. This is distinct from CVE-2025-3248, which fixed /api/v1/validate/code by adding authentication. The build_public_tmp endpoint is designed to be unauthenticated (for public flows) but incorrectly accepts attacker-supplied flow data containing arbitrary executable code. This issue has been fixed in version 1.9.0.", "sourceTitle": "Langflow has Unauthenticated Remote Code Execution via Public Flow Build Endpoint", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "langflow-ai", "product": "langflow", "versions": [ { "version": "< 1.9.0", "status": "affected" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2026-33017", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33017.json", "fetchedAt": "2026-10-23T02:43:48.326Z", "publishedAt": "2026-03-20T04:52:52.885Z", "modifiedAt": "2026-05-21T19:54:41.184Z", "state": "published", "provider": "GitHub_M", "title": "Langflow has Unauthenticated Remote Code Execution via Public Flow Build Endpoint", "descriptions": [ { "lang": "en", "value": "Langflow is a tool for building and deploying AI-powered agents and workflows. In versions prior to 1.9.0, the POST /api/v1/build_public_tmp/{flow_id}/flow endpoint allows building public flows without requiring authentication. When the optional data parameter is supplied, the endpoint uses attacker-controlled flow data (containing arbitrary Python code in node definitions) instead of the stored flow data from the database. This code is passed to exec() with zero sandboxing, resulting in unauthenticated remote code execution. This is distinct from CVE-2025-3248, which fixed /api/v1/validate/code by adding authentication. The build_public_tmp endpoint is designed to be unauthenticated (for public flows) but incorrectly accepts attacker-supplied flow data containing arbitrary executable code. This issue has been fixed in version 1.9.0.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "langflow-ai", "product": "langflow", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "< 1.9.0", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-94", "lang": "en", "description": "CWE-94: Improper Control of Generation of Code ('Code Injection')", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" }, { "cweId": "CWE-95", "lang": "en", "description": "CWE-95: Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')", "sourcePath": "/containers/cna/problemTypes/1/descriptions/0" }, { "cweId": "CWE-306", "lang": "en", "description": "CWE-306: Missing Authentication for Critical Function", "sourcePath": "/containers/cna/problemTypes/2/descriptions/0" } ], "metrics": [ { "version": "4.0", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L", "baseScore": 9.3, "baseSeverity": "CRITICAL", "provider": "GitHub_M", "sourcePath": "/containers/cna/metrics/0/cvssV4_0" } ], "references": [ { "url": "https://github.com/langflow-ai/langflow/security/advisories/GHSA-vwmf-pq79-vjvx", "label": "https://github.com/langflow-ai/langflow/security/advisories/GHSA-vwmf-pq79-vjvx", "tags": [ "x_refsource_CONFIRM" ], "provider": "GitHub_M", "sourcePath": "/containers/cna/references/0" }, { "url": "https://github.com/langflow-ai/langflow/commit/73b6612e3ef25fdae0a752d75b0fabd47328d4f0", "label": "https://github.com/langflow-ai/langflow/commit/73b6612e3ef25fdae0a752d75b0fabd47328d4f0", "tags": [ "x_refsource_MISC" ], "provider": "GitHub_M", "sourcePath": "/containers/cna/references/1" }, { "url": "https://github.com/advisories/GHSA-rvqx-wpfh-mfx7", "label": "https://github.com/advisories/GHSA-rvqx-wpfh-mfx7", "tags": [ "x_refsource_MISC" ], "provider": "GitHub_M", "sourcePath": "/containers/cna/references/2" }, { "url": "https://www.sysdig.com/blog/cve-2026-33017-how-attackers-compromised-langflow-ai-pipelines-in-20-hours", "label": "CISA-ADP", "tags": [ "third-party-advisory" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://medium.com/@aviral23/cve-2026-33017-how-i-found-an-unauthenticated-rce-in-langflow-by-reading-the-code-they-already-dc96cdce5896", "label": "CISA-ADP", "tags": [ "exploit" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/1" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-33017", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/2" }, { "url": "https://github.com/langflow-ai/langflow/releases/tag/1.8.2", "label": "CISA-ADP", "tags": [ "patch" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/3" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33017.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"langflow-ai\",\"product\":\"langflow\",\"versions\":[{\"version\":\"< 1.9.0\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33017.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Langflow is a tool for building and deploying AI-powered agents and workflows. In versions prior to 1.9.0, the POST /api/v1/build_public_tmp/{flow_id}/flow endpoint allows building public flows without requiring authentication. When the optional data parameter is supplied, the endpoint uses attacker-controlled flow data (containing arbitrary Python code in node definitions) instead of the stored flow data from the database. This code is passed to exec() with zero sandboxing, resulting in unauthenticated remote code execution. This is distinct from CVE-2025-3248, which fixed /api/v1/validate/code by adding authentication. The build_public_tmp endpoint is designed to be unauthenticated (for public flows) but incorrectly accepts attacker-supplied flow data containing arbitrary executable code. This issue has been fixed in version 1.9.0.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33017.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"cweId\":\"CWE-94\",\"lang\":\"en\",\"description\":\"CWE-94: Improper Control of Generation of Code ('Code Injection')\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/problemTypes/1/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33017.json", "sourcePath": "/containers/cna/problemTypes/1/descriptions/0", "text": "{\"cweId\":\"CWE-95\",\"lang\":\"en\",\"description\":\"CWE-95: Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/problemTypes/2/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33017.json", "sourcePath": "/containers/cna/problemTypes/2/descriptions/0", "text": "{\"cweId\":\"CWE-306\",\"lang\":\"en\",\"description\":\"CWE-306: Missing Authentication for Critical Function\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV4_0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33017.json", "sourcePath": "/containers/cna/metrics/0/cvssV4_0", "text": "{\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"attackRequirements\":\"NONE\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"vulnConfidentialityImpact\":\"HIGH\",\"vulnIntegrityImpact\":\"HIGH\",\"vulnAvailabilityImpact\":\"HIGH\",\"subConfidentialityImpact\":\"LOW\",\"subIntegrityImpact\":\"LOW\",\"subAvailabilityImpact\":\"LOW\",\"baseScore\":9.3,\"baseSeverity\":\"CRITICAL\",\"vectorString\":\"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L\",\"version\":\"4.0\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-05-21T19:54:41.184Z", "fetchedAt": "2026-10-23T02:43:48.326Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-03-25T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "langflowにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:24:25.884Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "82f4b31162f52dbf8330ce4ff405c83b8fec244773a63ca96d252ad4aa9116e7", "sourceModifiedAt": "2026-05-21T19:54:41.184Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Langflow のバージョン 1.9.0 未満において、POST /api/v1/build_public_tmp/{flow_id}/flow エンドポイントは認証なしで public flow を構築できるが、オプションの data パラメータで攻撃者が任意の Python コードを含むフロー情報を送信でき、サンドボックスなしで exec() に渡されるため、認証されていないリモートコード実行が可能になる。1.9.0 で修正された。", "risk": "攻撃者がサーバー上で任意のコードを実行できる可能性がある。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "Langflow のバージョン 1.9.0 未満で、POST /api/v1/build_public_tmp/{flow_id}/flow エンドポイントは認証を要求しない。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33017.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "このエンドポイントは public flow の構築を目的としている。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33017.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "リクエストにオプションの data パラメータを含めると、データベースに保存されたフロー情報の代わりに、攻撃者が提供したフロー情報が使用される。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33017.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "攻撃者が提供したフロー情報には、ノード定義に任意の Python コードが含められる。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33017.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "そのコードはサンドボックスなしで exec() に渡され、サーバー上で実行される。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33017.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "結果として、認証されていない状態でリモートコード実行が可能になる。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33017.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "この問題は CVE-2025-3248 とは別で、/api/v1/validate/code の認証追加とは無関係である。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33017.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "対象は vendor langflow-ai の product langflow。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33017.json" ], "evidenceIds": [ "E3", "E2" ] }, { "text": "影響を受けるバージョンは < 1.9.0 である。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33017.json" ], "evidenceIds": [ "E3", "E2" ] }, { "text": "CISA はこの脆弱性が実際に悪用されたと報告している。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-33017", "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33017.json" ], "evidenceIds": [ "E4", "E2" ] }, { "text": "公式の対象表：langflow-ai / langflow。影響ありとして記載：< 1.9.0。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33017.json" ], "evidenceIds": [ "E3" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-33017" ], "evidenceIds": [ "E4" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33017.json" ], "evidenceIds": [ "E3" ] }, { "text": "「langflow」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-33017", "https://github.com/langflow-ai/langflow/security/advisories/GHSA-vwmf-pq79-vjvx", "https://github.com/langflow-ai/langflow/commit/73b6612e3ef25fdae0a752d75b0fabd47328d4f0", "https://github.com/advisories/GHSA-rvqx-wpfh-mfx7", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-33017", "https://nvd.nist.gov/vuln/detail/CVE-2026-33017" ] } ], "actions": [ { "text": "バージョン 1.9.0 にアップデートすることで修正されている。", "kind": "fix", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33017.json" ], "evidenceIds": [ "E1" ] }, { "text": "「CVE-2026-33017」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2026-33017", "https://github.com/langflow-ai/langflow/security/advisories/GHSA-vwmf-pq79-vjvx", "https://github.com/langflow-ai/langflow/commit/73b6612e3ef25fdae0a752d75b0fabd47328d4f0", "https://github.com/advisories/GHSA-rvqx-wpfh-mfx7", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-33017", "https://nvd.nist.gov/vuln/detail/CVE-2026-33017" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-33017", "https://github.com/langflow-ai/langflow/security/advisories/GHSA-vwmf-pq79-vjvx", "https://github.com/langflow-ai/langflow/commit/73b6612e3ef25fdae0a752d75b0fabd47328d4f0", "https://github.com/advisories/GHSA-rvqx-wpfh-mfx7", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-33017", "https://nvd.nist.gov/vuln/detail/CVE-2026-33017" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2026-33017", "https://github.com/langflow-ai/langflow/security/advisories/GHSA-vwmf-pq79-vjvx", "https://github.com/langflow-ai/langflow/commit/73b6612e3ef25fdae0a752d75b0fabd47328d4f0", "https://github.com/advisories/GHSA-rvqx-wpfh-mfx7", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-33017", "https://nvd.nist.gov/vuln/detail/CVE-2026-33017" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33017.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2026-33017", "https://github.com/langflow-ai/langflow/security/advisories/GHSA-vwmf-pq79-vjvx", "https://github.com/langflow-ai/langflow/commit/73b6612e3ef25fdae0a752d75b0fabd47328d4f0", "https://github.com/advisories/GHSA-rvqx-wpfh-mfx7", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-33017", "https://nvd.nist.gov/vuln/detail/CVE-2026-33017" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33017.json", "label": "CVE：GitHub_M" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-33017", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2026-33017", "label": "CVE公式レコード" }, { "url": "https://github.com/langflow-ai/langflow/security/advisories/GHSA-vwmf-pq79-vjvx", "label": "CISAが示す関連情報" }, { "url": "https://github.com/langflow-ai/langflow/commit/73b6612e3ef25fdae0a752d75b0fabd47328d4f0", "label": "https://github.com/langflow-ai/langflow/commit/73b6612e3ef25fdae0a752d75b0fabd47328d4f0" }, { "url": "https://github.com/advisories/GHSA-rvqx-wpfh-mfx7", "label": "https://github.com/advisories/GHSA-rvqx-wpfh-mfx7" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33017", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v4.0/specification-document", "label": "FIRST公式：CVSS 4.0の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33017.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Langflow is a tool for building and deploying AI-powered agents and workflows. In versions prior to 1.9.0, the POST /api/v1/build_public_tmp/{flow_id}/flow endpoint allows building public flows without requiring authentication. When the optional data parameter is supplied, the endpoint uses attacker-controlled flow data (containing arbitrary Python code in node definitions) instead of the stored flow data from the database. This code is passed to exec() with zero sandboxing, resulting in unauthenticated remote code execution. This is distinct from CVE-2025-3248, which fixed /api/v1/validate/code by adding authentication. The build_public_tmp endpoint is designed to be unauthenticated (for public flows) but incorrectly accepts attacker-supplied flow data containing arbitrary executable code. This issue has been fixed in version 1.9.0.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33017.json", "sourceField": "/containers/cna/title", "excerpt": "Langflow has Unauthenticated Remote Code Execution via Public Flow Build Endpoint", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33017.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"langflow-ai\",\"product\":\"langflow\",\"versions\":[{\"version\":\"< 1.9.0\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-33017", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2026-33017\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2026-33017（langflow）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Langflow のバージョン 1.9.0 未満で、POST /api/v1/build_public_tmp/{flow_id}/flow エンドポイントは認証を要求しない。\n・このエンドポイントは public flow の構築を目的としている。\n・リクエストにオプションの data パラメータを含めると、データベースに保存されたフロー情報の代わりに、攻撃者が提供したフロー情報が使用される。\n・攻撃者が提供したフロー情報には、ノード定義に任意の Python コードが含められる。\n・そのコードはサンドボックスなしで exec() に渡され、サーバー上で実行される。\n・結果として、認証されていない状態でリモートコード実行が可能になる。\n・この問題は CVE-2025-3248 とは別で、/api/v1/validate/code の認証追加とは無関係である。\n・対象は vendor langflow-ai の product langflow。\n・影響を受けるバージョンは < 1.9.0 である。\n・CISA はこの脆弱性が実際に悪用されたと報告している。\n・公式の対象表：langflow-ai / langflow。影響ありとして記載：< 1.9.0。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2026-33017", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:24:25.884Z", "lastSuccess": "2026-10-23T03:24:25.884Z", "sourceCheckedAt": "2026-10-23T02:43:48.326Z", "errorCode": null }, "glossary": [ { "term": "POST", "meaning": "フォームなどのデータを、相手のサーバーへ送るための通信方法です。この言葉だけで、情報漏えいや設定変更が起きたと判断するものではありません。", "sourceUrl": "https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Methods/POST", "kind": "general_definition" }, { "term": "任意のコード実行", "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。", "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html", "kind": "general_definition" } ] } }, { "id": "CVE-2025-31277", "aliases": [], "title": "Safari / iOS and iPadOS / macOS / tvOS / visionOS / watchOS：脆弱性情報", "summary": "この問題はメモリ処理の改善により対処されました。Safari 18.6、iOS 18.6、iPadOS 18.6、macOS Sequoia 15.6、tvOS 18.6、visionOS 2.6、watchOS 11.6で修正されています。悪意のある作成されたウェブコンテンツを処理すると、メモリ破損が発生する可能性があります。", "risk": "悪意のある作成されたウェブコンテンツを処理すると、メモリが破損する恐れがあります。", "product": "Safari / iOS and iPadOS / macOS / tvOS / visionOS / watchOS", "category": "other", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": "apple", "cvssVector": null, "affected": [ { "product": "Safari", "range": "< 18.6" }, { "product": "iOS and iPadOS", "range": "< 18.6" }, { "product": "macOS", "range": "< 15.6" }, { "product": "tvOS", "range": "< 18.6" }, { "product": "visionOS", "range": "< 2.6" }, { "product": "watchOS", "range": "< 11.6" } ], "fixed": [], "steps": [ "Safari 18.6、iOS 18.6、iPadOS 18.6、macOS Sequoia 15.6、tvOS 18.6、visionOS 2.6、watchOS 11.6で修正されています。", "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/31xxx/CVE-2025-31277.json", "label": "CVE：apple" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-31277", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-31277", "label": "CVE公式レコード" }, { "url": "https://support.apple.com/en-us/124147", "label": "CISAが示す関連情報" }, { "url": "https://support.apple.com/en-us/124149", "label": "CISAが示す関連情報" }, { "url": "https://support.apple.com/en-us/124152", "label": "CISAが示す関連情報" }, { "url": "https://support.apple.com/en-us/124153", "label": "CISAが示す関連情報" }, { "url": "https://support.apple.com/en-us/124154", "label": "CVE掲載の参考情報" }, { "url": "https://support.apple.com/en-us/124155", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2025-07-29T23:29:31.341Z", "modifiedAt": "2026-09-21T19:09:17.711Z", "fetchedAt": "2026-10-23T02:43:37.515Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to memory corruption.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Apple", "product": "Safari", "versions": [ { "version": "0", "status": "affected", "lessThan": "18.6", "versionType": "custom" } ] }, { "vendor": "Apple", "product": "iOS and iPadOS", "versions": [ { "version": "0", "status": "affected", "lessThan": "18.6", "versionType": "custom" } ] }, { "vendor": "Apple", "product": "macOS", "versions": [ { "version": "0", "status": "affected", "lessThan": "15.6", "versionType": "custom" } ] }, { "vendor": "Apple", "product": "tvOS", "versions": [ { "version": "0", "status": "affected", "lessThan": "18.6", "versionType": "custom" } ] }, { "vendor": "Apple", "product": "visionOS", "versions": [ { "version": "0", "status": "affected", "lessThan": "2.6", "versionType": "custom" } ] }, { "vendor": "Apple", "product": "watchOS", "versions": [ { "version": "0", "status": "affected", "lessThan": "11.6", "versionType": "custom" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2025-31277", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/31xxx/CVE-2025-31277.json", "fetchedAt": "2026-10-23T02:43:37.515Z", "publishedAt": "2025-07-29T23:29:31.341Z", "modifiedAt": "2026-09-21T19:09:17.711Z", "state": "published", "provider": "apple", "title": "", "descriptions": [ { "lang": "en", "value": "The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to memory corruption.", "sourcePath": "/containers/cna/descriptions/0/value" } ], "affected": [ { "vendor": "Apple", "product": "Safari", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "0", "lessThan": "18.6", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Apple", "product": "iOS and iPadOS", "sourcePath": "/containers/cna/affected/1", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/1/versions/0", "version": "0", "lessThan": "18.6", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Apple", "product": "macOS", "sourcePath": "/containers/cna/affected/2", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/2/versions/0", "version": "0", "lessThan": "15.6", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Apple", "product": "tvOS", "sourcePath": "/containers/cna/affected/3", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/3/versions/0", "version": "0", "lessThan": "18.6", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Apple", "product": "visionOS", "sourcePath": "/containers/cna/affected/4", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/4/versions/0", "version": "0", "lessThan": "2.6", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Apple", "product": "watchOS", "sourcePath": "/containers/cna/affected/5", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/5/versions/0", "version": "0", "lessThan": "11.6", "versionType": "custom", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "Processing maliciously crafted web content may lead to memory corruption", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 8.8, "baseSeverity": "HIGH", "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1" }, { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 8.8, "baseSeverity": "HIGH", "provider": "redhat-SADP", "sourcePath": "/containers/adp/2/metrics/1/cvssV3_1" } ], "references": [ { "url": "https://support.apple.com/en-us/124147", "label": "apple", "tags": [], "provider": "apple", "sourcePath": "/containers/cna/references/0" }, { "url": "https://support.apple.com/en-us/124149", "label": "apple", "tags": [], "provider": "apple", "sourcePath": "/containers/cna/references/1" }, { "url": "https://support.apple.com/en-us/124152", "label": "apple", "tags": [], "provider": "apple", "sourcePath": "/containers/cna/references/2" }, { "url": "https://support.apple.com/en-us/124153", "label": "apple", "tags": [], "provider": "apple", "sourcePath": "/containers/cna/references/3" }, { "url": "https://support.apple.com/en-us/124154", "label": "apple", "tags": [], "provider": "apple", "sourcePath": "/containers/cna/references/4" }, { "url": "https://support.apple.com/en-us/124155", "label": "apple", "tags": [], "provider": "apple", "sourcePath": "/containers/cna/references/5" }, { "url": "https://cloud.google.com/blog/topics/threat-intelligence/darksword-ios-exploit-chain/", "label": "CISA-ADP", "tags": [ "third-party-advisory" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-31277", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/1" }, { "url": "http://seclists.org/fulldisclosure/2025/Aug/0", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/0" }, { "url": "http://seclists.org/fulldisclosure/2025/Jul/36", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/1" }, { "url": "http://seclists.org/fulldisclosure/2025/Jul/32", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/2" }, { "url": "http://seclists.org/fulldisclosure/2025/Jul/30", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/3" }, { "url": "https://access.redhat.com/security/cve/CVE-2025-31277", "label": "redhat-SADP", "tags": [ "vdb-entry", "x_refsource_REDHAT" ], "provider": "redhat-SADP", "sourcePath": "/containers/adp/2/references/0" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448780", "label": "RHBZ#2448780", "tags": [ "issue-tracking", "x_refsource_REDHAT" ], "provider": "redhat-SADP", "sourcePath": "/containers/adp/2/references/1" }, { "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-31277.json", "label": "redhat-SADP", "tags": [ "x_sadp-csaf-vex" ], "provider": "redhat-SADP", "sourcePath": "/containers/adp/2/references/2" }, { "url": "https://access.redhat.com/errata/RHSA-2025:19352", "label": "redhat-SADP", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "provider": "redhat-SADP", "sourcePath": "/containers/adp/2/references/3" }, { "url": "https://access.redhat.com/errata/RHSA-2025:17802", "label": "redhat-SADP", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "provider": "redhat-SADP", "sourcePath": "/containers/adp/2/references/4" }, { "url": "https://access.redhat.com/errata/RHSA-2025:19157", "label": "redhat-SADP", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "provider": "redhat-SADP", "sourcePath": "/containers/adp/2/references/5" }, { "url": "https://access.redhat.com/errata/RHSA-2025:19165", "label": "redhat-SADP", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "provider": "redhat-SADP", "sourcePath": "/containers/adp/2/references/6" }, { "url": "https://access.redhat.com/errata/RHSA-2025:19109", "label": "redhat-SADP", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "provider": "redhat-SADP", "sourcePath": "/containers/adp/2/references/7" }, { "url": "https://access.redhat.com/errata/RHSA-2025:17807", "label": "redhat-SADP", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "provider": "redhat-SADP", "sourcePath": "/containers/adp/2/references/8" }, { "url": "https://access.redhat.com/errata/RHSA-2025:17643", "label": "redhat-SADP", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "provider": "redhat-SADP", "sourcePath": "/containers/adp/2/references/9" }, { "url": "https://access.redhat.com/errata/RHSA-2025:17743", "label": "redhat-SADP", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "provider": "redhat-SADP", "sourcePath": "/containers/adp/2/references/10" }, { "url": "https://access.redhat.com/errata/RHSA-2025:17741", "label": "redhat-SADP", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "provider": "redhat-SADP", "sourcePath": "/containers/adp/2/references/11" }, { "url": "https://access.redhat.com/errata/RHSA-2025:18097", "label": "redhat-SADP", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "provider": "redhat-SADP", "sourcePath": "/containers/adp/2/references/12" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/31xxx/CVE-2025-31277.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Apple\",\"product\":\"Safari\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"18.6\",\"versionType\":\"custom\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/31xxx/CVE-2025-31277.json", "sourcePath": "/containers/cna/affected/1", "text": "{\"vendor\":\"Apple\",\"product\":\"iOS and iPadOS\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"18.6\",\"versionType\":\"custom\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/31xxx/CVE-2025-31277.json", "sourcePath": "/containers/cna/affected/2", "text": "{\"vendor\":\"Apple\",\"product\":\"macOS\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"15.6\",\"versionType\":\"custom\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/31xxx/CVE-2025-31277.json", "sourcePath": "/containers/cna/affected/3", "text": "{\"vendor\":\"Apple\",\"product\":\"tvOS\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"18.6\",\"versionType\":\"custom\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/31xxx/CVE-2025-31277.json", "sourcePath": "/containers/cna/affected/4", "text": "{\"vendor\":\"Apple\",\"product\":\"visionOS\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"2.6\",\"versionType\":\"custom\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/31xxx/CVE-2025-31277.json", "sourcePath": "/containers/cna/affected/5", "text": "{\"vendor\":\"Apple\",\"product\":\"watchOS\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"11.6\",\"versionType\":\"custom\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/31xxx/CVE-2025-31277.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to memory corruption.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/31xxx/CVE-2025-31277.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"description\":\"Processing maliciously crafted web content may lead to memory corruption\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/0/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/31xxx/CVE-2025-31277.json", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1", "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":8.8,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"REQUIRED\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"confidentialityImpact\":\"HIGH\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/2/metrics/1/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/31xxx/CVE-2025-31277.json", "sourcePath": "/containers/adp/2/metrics/1/cvssV3_1", "text": "{\"attackComplexity\":\"LOW\",\"attackVector\":\"NETWORK\",\"availabilityImpact\":\"HIGH\",\"baseScore\":8.8,\"baseSeverity\":\"HIGH\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"scope\":\"UNCHANGED\",\"userInteraction\":\"REQUIRED\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"version\":\"3.1\"}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。" } }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-09-21T19:09:17.711Z", "fetchedAt": "2026-10-23T02:43:37.515Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2026-03-20T00:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "Safari / iOS and iPadOS / macOS / tvOS / visionOS / watchOSに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:24:27.462Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "05a2b449f4e3fe211fda3e5e67b2859396d95c16d758e501a0f90d1182492c2f", "sourceModifiedAt": "2026-09-21T19:09:17.711Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "この問題はメモリ処理の改善により対処されました。Safari 18.6、iOS 18.6、iPadOS 18.6、macOS Sequoia 15.6、tvOS 18.6、visionOS 2.6、watchOS 11.6で修正されています。悪意のある作成されたウェブコンテンツを処理すると、メモリ破損が発生する可能性があります。", "risk": "悪意のある作成されたウェブコンテンツを処理すると、メモリが破損する恐れがあります。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E2" ], "applicability": [ { "text": "Safari はバージョン 18.6 未満が影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/31xxx/CVE-2025-31277.json" ], "evidenceIds": [ "E3" ] }, { "text": "iOS および iPadOS はバージョン 18.6 未満が影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/31xxx/CVE-2025-31277.json" ], "evidenceIds": [ "E4" ] }, { "text": "macOS はバージョン 15.6 未満が影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/31xxx/CVE-2025-31277.json" ], "evidenceIds": [ "E5" ] }, { "text": "tvOS はバージョン 18.6 未満が影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/31xxx/CVE-2025-31277.json" ], "evidenceIds": [ "E6" ] }, { "text": "visionOS はバージョン 2.6 未満が影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/31xxx/CVE-2025-31277.json" ], "evidenceIds": [ "E7" ] }, { "text": "watchOS はバージョン 11.6 未満が影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/31xxx/CVE-2025-31277.json" ], "evidenceIds": [ "E8" ] }, { "text": "公式の対象表：Apple / Safari。影響ありとして記載：18.6未満の版。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/31xxx/CVE-2025-31277.json" ], "evidenceIds": [ "E3" ] }, { "text": "公式の対象表：Apple / iOS and iPadOS。影響ありとして記載：18.6未満の版。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/31xxx/CVE-2025-31277.json" ], "evidenceIds": [ "E4" ] }, { "text": "公式の対象表：Apple / macOS。影響ありとして記載：15.6未満の版。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/31xxx/CVE-2025-31277.json" ], "evidenceIds": [ "E5" ] }, { "text": "公式の対象表：Apple / tvOS。影響ありとして記載：18.6未満の版。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/31xxx/CVE-2025-31277.json" ], "evidenceIds": [ "E6" ] }, { "text": "公式の対象表：Apple / visionOS。影響ありとして記載：2.6未満の版。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/31xxx/CVE-2025-31277.json" ], "evidenceIds": [ "E7" ] }, { "text": "公式の対象表：Apple / watchOS。影響ありとして記載：11.6未満の版。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/31xxx/CVE-2025-31277.json" ], "evidenceIds": [ "E8" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-31277" ], "evidenceIds": [ "E9" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/31xxx/CVE-2025-31277.json" ], "evidenceIds": [ "E3" ] }, { "text": "「Safari / iOS and iPadOS / macOS / tvOS / visionOS / watchOS」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2025-31277", "https://support.apple.com/en-us/124147", "https://support.apple.com/en-us/124149", "https://support.apple.com/en-us/124152", "https://support.apple.com/en-us/124153", "https://support.apple.com/en-us/124154", "https://support.apple.com/en-us/124155", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-31277" ] } ], "actions": [ { "text": "Safari 18.6、iOS 18.6、iPadOS 18.6、macOS Sequoia 15.6、tvOS 18.6、visionOS 2.6、watchOS 11.6で修正されています。", "kind": "fix", "evidenceIds": [ "E1" ], "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/31xxx/CVE-2025-31277.json" ] }, { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/31xxx/CVE-2025-31277.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2025-31277", "https://support.apple.com/en-us/124147", "https://support.apple.com/en-us/124149", "https://support.apple.com/en-us/124152", "https://support.apple.com/en-us/124153", "https://support.apple.com/en-us/124154", "https://support.apple.com/en-us/124155", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-31277" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/31xxx/CVE-2025-31277.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2025-31277", "https://support.apple.com/en-us/124147", "https://support.apple.com/en-us/124149", "https://support.apple.com/en-us/124152", "https://support.apple.com/en-us/124153", "https://support.apple.com/en-us/124154", "https://support.apple.com/en-us/124155", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-31277" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/31xxx/CVE-2025-31277.json", "label": "CVE：apple" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-31277", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-31277", "label": "CVE公式レコード" }, { "url": "https://support.apple.com/en-us/124147", "label": "CISAが示す関連情報" }, { "url": "https://support.apple.com/en-us/124149", "label": "CISAが示す関連情報" }, { "url": "https://support.apple.com/en-us/124152", "label": "CISAが示す関連情報" }, { "url": "https://support.apple.com/en-us/124153", "label": "CISAが示す関連情報" }, { "url": "https://support.apple.com/en-us/124154", "label": "CVE掲載の参考情報" }, { "url": "https://support.apple.com/en-us/124155", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/31xxx/CVE-2025-31277.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to memory corruption.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/31xxx/CVE-2025-31277.json", "sourceField": "/containers/cna/problemTypes/0/descriptions/0", "excerpt": "{\"lang\":\"en\",\"description\":\"Processing maliciously crafted web content may lead to memory corruption\"}", "language": null, "representation": "source_json" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/31xxx/CVE-2025-31277.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Apple\",\"product\":\"Safari\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"18.6\",\"versionType\":\"custom\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/31xxx/CVE-2025-31277.json", "sourceField": "/containers/cna/affected/1", "excerpt": "{\"vendor\":\"Apple\",\"product\":\"iOS and iPadOS\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"18.6\",\"versionType\":\"custom\"}]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/31xxx/CVE-2025-31277.json", "sourceField": "/containers/cna/affected/2", "excerpt": "{\"vendor\":\"Apple\",\"product\":\"macOS\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"15.6\",\"versionType\":\"custom\"}]}", "language": null, "representation": "source_json" }, { "id": "E6", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/31xxx/CVE-2025-31277.json", "sourceField": "/containers/cna/affected/3", "excerpt": "{\"vendor\":\"Apple\",\"product\":\"tvOS\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"18.6\",\"versionType\":\"custom\"}]}", "language": null, "representation": "source_json" }, { "id": "E7", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/31xxx/CVE-2025-31277.json", "sourceField": "/containers/cna/affected/4", "excerpt": "{\"vendor\":\"Apple\",\"product\":\"visionOS\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"2.6\",\"versionType\":\"custom\"}]}", "language": null, "representation": "source_json" }, { "id": "E8", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/31xxx/CVE-2025-31277.json", "sourceField": "/containers/cna/affected/5", "excerpt": "{\"vendor\":\"Apple\",\"product\":\"watchOS\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"11.6\",\"versionType\":\"custom\"}]}", "language": null, "representation": "source_json" }, { "id": "E9", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-31277", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2025-31277\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2025-31277（Safari / iOS and iPadOS / macOS / tvOS / visionOS / watchOS）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Safari はバージョン 18.6 未満が影響を受けます。\n・iOS および iPadOS はバージョン 18.6 未満が影響を受けます。\n・macOS はバージョン 15.6 未満が影響を受けます。\n・tvOS はバージョン 18.6 未満が影響を受けます。\n・visionOS はバージョン 2.6 未満が影響を受けます。\n・watchOS はバージョン 11.6 未満が影響を受けます。\n・公式の対象表：Apple / Safari。影響ありとして記載：18.6未満の版。\n・公式の対象表：Apple / iOS and iPadOS。影響ありとして記載：18.6未満の版。\n・公式の対象表：Apple / macOS。影響ありとして記載：15.6未満の版。\n・公式の対象表：Apple / tvOS。影響ありとして記載：18.6未満の版。\n・公式の対象表：Apple / visionOS。影響ありとして記載：2.6未満の版。\n・公式の対象表：Apple / watchOS。影響ありとして記載：11.6未満の版。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2025-31277", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-23T03:24:27.462Z", "lastSuccess": "2026-10-23T03:24:27.462Z", "sourceCheckedAt": "2026-10-23T02:43:37.515Z", "errorCode": null }, "glossary": [] } } ], "total": 2206, "limit": 20, "offset": 600, "filters": { "product": "all", "type": "all", "q": "", "page": 31 }, "pagination": { "page": 31, "pageSize": 20, "totalPages": 111 }, "sources": [ { "name": "JVN", "status": "ok", "lastSuccess": "2026-10-23T23:22:48.551Z", "lastAttempt": "2026-10-23T23:22:48.551Z", "error": null, "recordCount": 20, "coverage": "JVNの新着・更新RSS。取得した記事を蓄積。JVN iPediaは含みません。", "cursor": null, "freshness": "fresh", "stale": false }, { "name": "PHP Security", "status": "ok", "lastSuccess": "2026-10-23T23:22:48.551Z", "lastAttempt": "2026-10-23T23:22:48.551Z", "error": null, "recordCount": 66, "coverage": "PHP開発元の公開アドバイザリ。公開日が新しい順とは限らない直近100件を取得し蓄積。", "cursor": null, "freshness": "fresh", "stale": false }, { "name": "CISA KEV", "status": "ok", "lastSuccess": "2026-10-23T23:22:48.551Z", "lastAttempt": "2026-10-23T23:22:48.551Z", "error": null, "recordCount": 1756, "coverage": "CISAの公式GitHubミラーにある悪用確認済み一覧全件。掲載日はKEV追加日。", "cursor": null, "freshness": "fresh", "stale": false }, { "name": "NVD", "status": "partial", "lastSuccess": "2026-10-23T19:17:50.573Z", "lastAttempt": "2026-10-23T23:22:48.551Z", "error": "未確認のページ・期間は次回の定期取得で続きから反映します。", "recordCount": 1, "coverage": "WordPressを含む脆弱性。初回は公開7日分、以降は全製品の変更分からWordPressと保存済みIDを追跡。停止後は最後に確認できた時刻から最大7日幅・500件ずつ再開し、残りは次回取得。 今回: 2026-10-23T19:02:50.573Z 〜 2026-10-23T21:17:50.096Z、全製品の変更 1500/2161件まで確認、対象1件反映。", "cursor": { "start": "2026-10-23T19:02:50.573Z", "end": "2026-10-23T21:17:50.096Z", "kind": "modified", "index": 1500 }, "freshness": "stale", "stale": true }, { "name": "CVE", "status": "ok", "lastSuccess": "2026-10-23T23:22:48.551Z", "lastAttempt": "2026-10-23T23:22:48.551Z", "error": null, "recordCount": 6, "coverage": "取得したPHP/JVN情報のうち、公開日が新しい最大6件のCVE公式レコードで条件を補足。", "cursor": null, "freshness": "fresh", "stale": false } ] }