{ "schemaVersion": "1.0", "publisher": "脆弱性ナビ", "origin": "https://zeijaku.ittrip.xyz", "terms": [ { "name": "CVE Program", "url": "https://www.cve.org/legal/termsofuse", "notice": "CVE content is used subject to the CVE Program Terms of Use. CVE is a trademark of The MITRE Corporation.", "licenseText": "CVE content: Copyright The MITRE Corporation. CVE is a trademark of The MITRE Corporation.\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nDisclaimers: ALL DOCUMENTS AND THE INFORMATION CONTAINED THEREIN PROVIDED BY MITRE ARE PROVIDED ON AN \"AS IS\" BASIS AND THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE MITRE CORPORATION, ITS BOARD OF TRUSTEES, OFFICERS, AGENTS, AND EMPLOYEES, DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION THEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE." }, { "name": "NIST NVD", "url": "https://nvd.nist.gov/general/faq", "notice": "This product uses data from the NVD API but is not endorsed or certified by the NVD." }, { "name": "JVN", "url": "https://jvn.jp/contact/index.html", "notice": "出典：JVN（JPCERT/CC・IPA）。原文は各レコードの参照先を確認してください。" }, { "name": "CISA KEV", "url": "https://github.com/cisagov/kev-data", "notice": "Known Exploited Vulnerabilities catalog, CISA. CC0." } ], "records": [ { "id": "CVE-2024-38080", "aliases": [], "title": "Microsoft Windows：権限の奪取", "summary": "Microsoft Windowsに権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "本来与えられていない権限で、操作される可能性があります。", "product": "Microsoft Windows", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-38080", "label": "CISA KEV（悪用確認）" }, { "url": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-38080", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-38080", "label": "CISAが示す関連情報" } ], "publishedAt": "2024-07-09T00:00:00.000Z", "modifiedAt": "2024-07-09T00:00:00.000Z", "fetchedAt": "2026-10-22T22:18:00.744Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "Microsoft Windows Hyper-V contains a privilege escalation vulnerability that allows a local attacker with user permissions to gain SYSTEM privileges.", "sourceTitle": "Microsoft Windows Hyper-V Privilege Escalation Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2024-07-09T00:00:00.000Z", "fetchedAt": "2026-10-22T22:18:00.744Z", "state": "published" } ] }, { "id": "CVE-2024-38112", "aliases": [], "title": "Microsoft Windows：脆弱性情報", "summary": "Microsoft Windowsに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "product": "Microsoft Windows", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-38112", "label": "CISA KEV（悪用確認）" }, { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38112", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-38112", "label": "CISAが示す関連情報" } ], "publishedAt": "2024-07-09T00:00:00.000Z", "modifiedAt": "2024-07-09T00:00:00.000Z", "fetchedAt": "2026-10-22T22:18:00.744Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "Microsoft Windows MSHTML Platform contains a spoofing vulnerability that has a high impact to confidentiality, integrity, and availability.", "sourceTitle": "Microsoft Windows MSHTML Platform Spoofing Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2024-07-09T00:00:00.000Z", "fetchedAt": "2026-10-22T22:18:00.744Z", "state": "published" } ] }, { "id": "CVE-2024-26169", "aliases": [], "title": "Microsoft Windows：脆弱性情報", "summary": "Microsoft Windowsに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "product": "Microsoft Windows", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-26169", "label": "CISA KEV（悪用確認）" }, { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26169", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-26169", "label": "CISAが示す関連情報" } ], "publishedAt": "2024-06-13T00:00:00.000Z", "modifiedAt": "2024-06-13T00:00:00.000Z", "fetchedAt": "2026-10-22T22:18:00.744Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "Microsoft Windows Error Reporting Service contains an improper privilege management vulnerability that allows a local attacker with user permissions to gain SYSTEM privileges.", "sourceTitle": "Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2024-06-13T00:00:00.000Z", "fetchedAt": "2026-10-22T22:18:00.744Z", "state": "published" } ] }, { "id": "CVE-2024-30040", "aliases": [], "title": "Microsoft Windows：脆弱性情報", "summary": "Microsoft Windowsに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "product": "Microsoft Windows", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-30040", "label": "CISA KEV（悪用確認）" }, { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30040", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-30040", "label": "CISAが示す関連情報" } ], "publishedAt": "2024-05-14T00:00:00.000Z", "modifiedAt": "2024-05-14T00:00:00.000Z", "fetchedAt": "2026-10-22T22:18:00.744Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "Microsoft Windows MSHTML Platform contains an unspecified vulnerability that allows for a security feature bypass.", "sourceTitle": "Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2024-05-14T00:00:00.000Z", "fetchedAt": "2026-10-22T22:18:00.744Z", "state": "published" } ] }, { "id": "CVE-2022-38028", "aliases": [], "title": "Microsoft Windows：権限の奪取", "summary": "Microsoft Windowsに権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "本来与えられていない権限で、操作される可能性があります。", "product": "Microsoft Windows", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-38028", "label": "CISA KEV（悪用確認）" }, { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-38028", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-38028", "label": "CISAが示す関連情報" } ], "publishedAt": "2024-04-23T00:00:00.000Z", "modifiedAt": "2024-04-23T00:00:00.000Z", "fetchedAt": "2026-10-22T22:18:00.744Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "Microsoft Windows Print Spooler service contains a privilege escalation vulnerability. An attacker may modify a JavaScript constraints file and execute it with SYSTEM-level permissions.", "sourceTitle": "Microsoft Windows Print Spooler Privilege Escalation Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2024-04-23T00:00:00.000Z", "fetchedAt": "2026-10-22T22:18:00.744Z", "state": "published" } ] }, { "id": "CVE-2023-24955", "aliases": [], "title": "Microsoft SharePoint Server：脆弱性情報", "summary": "Microsoft SharePoint Serverに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "product": "Microsoft SharePoint Server", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-24955", "label": "CISA KEV（悪用確認）" }, { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24955", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-24955", "label": "CISAが示す関連情報" } ], "publishedAt": "2024-03-26T00:00:00.000Z", "modifiedAt": "2024-03-26T00:00:00.000Z", "fetchedAt": "2026-10-22T22:18:00.744Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "Microsoft SharePoint Server contains a code injection vulnerability that allows an authenticated attacker with Site Owner privileges to execute code remotely.", "sourceTitle": "Microsoft SharePoint Server Code Injection Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2024-03-26T00:00:00.000Z", "fetchedAt": "2026-10-22T22:18:00.744Z", "state": "published" } ] }, { "id": "CVE-2024-21338", "aliases": [], "title": "Microsoft Windows：権限の奪取", "summary": "Microsoft Windowsに権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "本来与えられていない権限で、操作される可能性があります。", "product": "Microsoft Windows", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-21338", "label": "CISA KEV（悪用確認）" }, { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21338", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21338", "label": "CISAが示す関連情報" } ], "publishedAt": "2024-03-04T00:00:00.000Z", "modifiedAt": "2024-03-04T00:00:00.000Z", "fetchedAt": "2026-10-22T22:18:00.744Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "Microsoft Windows Kernel contains an exposed IOCTL with insufficient access control vulnerability within the IOCTL (input and output control) dispatcher in appid.sys that allows a local attacker to achieve privilege escalation.", "sourceTitle": "Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2024-03-04T00:00:00.000Z", "fetchedAt": "2026-10-22T22:18:00.744Z", "state": "published" } ] }, { "id": "CVE-2024-21410", "aliases": [], "title": "Microsoft Exchange Server：権限の奪取", "summary": "Microsoft Exchange Serverに権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "本来与えられていない権限で、操作される可能性があります。", "product": "Microsoft Exchange Server", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-21410", "label": "CISA KEV（悪用確認）" }, { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21410", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21410", "label": "CISAが示す関連情報" } ], "publishedAt": "2024-02-15T00:00:00.000Z", "modifiedAt": "2024-02-15T00:00:00.000Z", "fetchedAt": "2026-10-22T22:18:00.744Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation.", "sourceTitle": "Microsoft Exchange Server Privilege Escalation Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2024-02-15T00:00:00.000Z", "fetchedAt": "2026-10-22T22:18:00.744Z", "state": "published" } ] }, { "id": "CVE-2024-21351", "aliases": [], "title": "Microsoft Windows：脆弱性情報", "summary": "Microsoft Windowsに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "product": "Microsoft Windows", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-21351", "label": "CISA KEV（悪用確認）" }, { "url": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-21351", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21351", "label": "CISAが示す関連情報" } ], "publishedAt": "2024-02-13T00:00:00.000Z", "modifiedAt": "2024-02-13T00:00:00.000Z", "fetchedAt": "2026-10-22T22:18:00.744Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "Microsoft Windows SmartScreen contains a security feature bypass vulnerability that allows an attacker to bypass the SmartScreen user experience and inject code to potentially gain code execution, which could lead to some data exposure, lack of system availability, or both.", "sourceTitle": "Microsoft Windows SmartScreen Security Feature Bypass Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2024-02-13T00:00:00.000Z", "fetchedAt": "2026-10-22T22:18:00.744Z", "state": "published" } ] }, { "id": "CVE-2024-21412", "aliases": [], "title": "Microsoft Windows：脆弱性情報", "summary": "Microsoft Windowsに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "product": "Microsoft Windows", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-21412", "label": "CISA KEV（悪用確認）" }, { "url": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-21412", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21412", "label": "CISAが示す関連情報" } ], "publishedAt": "2024-02-13T00:00:00.000Z", "modifiedAt": "2024-02-13T00:00:00.000Z", "fetchedAt": "2026-10-22T22:18:00.744Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "Microsoft Windows Internet Shortcut Files contains an unspecified vulnerability that allows for a security feature bypass.", "sourceTitle": "Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2024-02-13T00:00:00.000Z", "fetchedAt": "2026-10-22T22:18:00.744Z", "state": "published" } ] }, { "id": "CVE-2023-29357", "aliases": [], "title": "Microsoft SharePoint Server：権限の奪取", "summary": "Microsoft SharePoint Serverに権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "本来与えられていない権限で、操作される可能性があります。", "product": "Microsoft SharePoint Server", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-29357", "label": "CISA KEV（悪用確認）" }, { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29357", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-29357", "label": "CISAが示す関連情報" } ], "publishedAt": "2024-01-10T00:00:00.000Z", "modifiedAt": "2024-01-10T00:00:00.000Z", "fetchedAt": "2026-10-22T22:18:00.744Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "Microsoft SharePoint Server contains an unspecified vulnerability that allows an unauthenticated attacker, who has gained access to spoofed JWT authentication tokens, to use them for executing a network attack. This attack bypasses authentication, enabling the attacker to gain administrator privileges.", "sourceTitle": "Microsoft SharePoint Server Privilege Escalation Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2024-01-10T00:00:00.000Z", "fetchedAt": "2026-10-22T22:18:00.744Z", "state": "published" } ] }, { "id": "CVE-2023-36584", "aliases": [], "title": "Microsoft Windows：脆弱性情報", "summary": "Microsoft Windowsに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "product": "Microsoft Windows", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-36584", "label": "CISA KEV（悪用確認）" }, { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36584", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-36584", "label": "CISAが示す関連情報" } ], "publishedAt": "2023-11-16T00:00:00.000Z", "modifiedAt": "2023-11-16T00:00:00.000Z", "fetchedAt": "2026-10-22T22:18:00.744Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "Microsoft Windows Mark of the Web (MOTW) contains a security feature bypass vulnerability resulting in a limited loss of integrity and availability of security features.", "sourceTitle": "Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2023-11-16T00:00:00.000Z", "fetchedAt": "2026-10-22T22:18:00.744Z", "state": "published" } ] }, { "id": "CVE-2023-36025", "aliases": [], "title": "Microsoft Windows：脆弱性情報", "summary": "Microsoft Windowsに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "product": "Microsoft Windows", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-36025", "label": "CISA KEV（悪用確認）" }, { "url": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-36025", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-36025", "label": "CISAが示す関連情報" } ], "publishedAt": "2023-11-14T00:00:00.000Z", "modifiedAt": "2023-11-14T00:00:00.000Z", "fetchedAt": "2026-10-22T22:18:00.744Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "Microsoft Windows SmartScreen contains a security feature bypass vulnerability that could allow an attacker to bypass Windows Defender SmartScreen checks and their associated prompts.", "sourceTitle": "Microsoft Windows SmartScreen Security Feature Bypass Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2023-11-14T00:00:00.000Z", "fetchedAt": "2026-10-22T22:18:00.744Z", "state": "published" } ] }, { "id": "CVE-2023-36033", "aliases": [], "title": "Microsoft Windows：権限の奪取", "summary": "Microsoft Windowsに権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "本来与えられていない権限で、操作される可能性があります。", "product": "Microsoft Windows", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-36033", "label": "CISA KEV（悪用確認）" }, { "url": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-36033", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-36033", "label": "CISAが示す関連情報" } ], "publishedAt": "2023-11-14T00:00:00.000Z", "modifiedAt": "2023-11-14T00:00:00.000Z", "fetchedAt": "2026-10-22T22:18:00.744Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "Microsoft Windows Desktop Window Manager (DWM) Core Library contains an unspecified vulnerability that allows for privilege escalation.", "sourceTitle": "Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2023-11-14T00:00:00.000Z", "fetchedAt": "2026-10-22T22:18:00.744Z", "state": "published" } ] }, { "id": "CVE-2023-36036", "aliases": [], "title": "Microsoft Windows：権限の奪取", "summary": "Microsoft Windowsに権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "本来与えられていない権限で、操作される可能性があります。", "product": "Microsoft Windows", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-36036", "label": "CISA KEV（悪用確認）" }, { "url": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-36036", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-36036", "label": "CISAが示す関連情報" } ], "publishedAt": "2023-11-14T00:00:00.000Z", "modifiedAt": "2023-11-14T00:00:00.000Z", "fetchedAt": "2026-10-22T22:18:00.744Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "Microsoft Windows Cloud Files Mini Filter Driver contains a privilege escalation vulnerability that could allow an attacker to gain SYSTEM privileges.", "sourceTitle": "Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2023-11-14T00:00:00.000Z", "fetchedAt": "2026-10-22T22:18:00.744Z", "state": "published" } ] }, { "id": "CVE-2023-28229", "aliases": [], "title": "Microsoft Windows CNG Key Isolation Service：権限の奪取", "summary": "Microsoft Windows CNG Key Isolation Serviceに権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "本来与えられていない権限で、操作される可能性があります。", "product": "Microsoft Windows CNG Key Isolation Service", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-28229", "label": "CISA KEV（悪用確認）" }, { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28229", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-28229", "label": "CISAが示す関連情報" } ], "publishedAt": "2023-10-04T00:00:00.000Z", "modifiedAt": "2023-10-04T00:00:00.000Z", "fetchedAt": "2026-10-22T22:18:00.744Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "Microsoft Windows Cryptographic Next Generation (CNG) Key Isolation Service contains an unspecified vulnerability that allows an attacker to gain specific limited SYSTEM privileges.", "sourceTitle": "Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2023-10-04T00:00:00.000Z", "fetchedAt": "2026-10-22T22:18:00.744Z", "state": "published" } ] }, { "id": "CVE-2023-36884", "aliases": [], "title": "Microsoft Windows：コード実行", "summary": "Microsoft Windowsにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "product": "Microsoft Windows", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-36884", "label": "CISA KEV（悪用確認）" }, { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36884", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-36884", "label": "CISAが示す関連情報" } ], "publishedAt": "2023-07-17T00:00:00.000Z", "modifiedAt": "2023-07-17T00:00:00.000Z", "fetchedAt": "2026-10-22T22:18:00.744Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "Microsoft Windows Search contains an unspecified vulnerability that could allow an attacker to evade Mark of the Web (MOTW) defenses via a specially crafted malicious file, leading to remote code execution.", "sourceTitle": "Microsoft Windows Search Remote Code Execution Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2023-07-17T00:00:00.000Z", "fetchedAt": "2026-10-22T22:18:00.744Z", "state": "published" } ] }, { "id": "CVE-2023-32046", "aliases": [], "title": "Microsoft Windows：権限の奪取", "summary": "Microsoft Windowsに権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "本来与えられていない権限で、操作される可能性があります。", "product": "Microsoft Windows", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-32046", "label": "CISA KEV（悪用確認）" }, { "url": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-32046", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-32046", "label": "CISAが示す関連情報" } ], "publishedAt": "2023-07-11T00:00:00.000Z", "modifiedAt": "2023-07-11T00:00:00.000Z", "fetchedAt": "2026-10-22T22:18:00.744Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "Microsoft Windows MSHTML Platform contains an unspecified vulnerability that allows for privilege escalation.", "sourceTitle": "Microsoft Windows MSHTML Platform Privilege Escalation Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2023-07-11T00:00:00.000Z", "fetchedAt": "2026-10-22T22:18:00.744Z", "state": "published" } ] }, { "id": "CVE-2023-32049", "aliases": [], "title": "Microsoft Windows：脆弱性情報", "summary": "Microsoft Windowsに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "product": "Microsoft Windows", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-32049", "label": "CISA KEV（悪用確認）" }, { "url": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-32049", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-32049", "label": "CISAが示す関連情報" } ], "publishedAt": "2023-07-11T00:00:00.000Z", "modifiedAt": "2023-07-11T00:00:00.000Z", "fetchedAt": "2026-10-22T22:18:00.744Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "Microsoft Windows Defender SmartScreen contains a security feature bypass vulnerability that allows an attacker to bypass the Open File - Security Warning prompt.", "sourceTitle": "Microsoft Windows Defender SmartScreen Security Feature Bypass Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2023-07-11T00:00:00.000Z", "fetchedAt": "2026-10-22T22:18:00.744Z", "state": "published" } ] }, { "id": "CVE-2023-35311", "aliases": [], "title": "Microsoft Outlook：脆弱性情報", "summary": "Microsoft Outlookに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "product": "Microsoft Outlook", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-35311", "label": "CISA KEV（悪用確認）" }, { "url": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-35311", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-35311", "label": "CISAが示す関連情報" } ], "publishedAt": "2023-07-11T00:00:00.000Z", "modifiedAt": "2023-07-11T00:00:00.000Z", "fetchedAt": "2026-10-22T22:18:00.744Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "Microsoft Outlook contains a security feature bypass vulnerability that allows an attacker to bypass the Microsoft Outlook Security Notice prompt.", "sourceTitle": "Microsoft Outlook Security Feature Bypass Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2023-07-11T00:00:00.000Z", "fetchedAt": "2026-10-22T22:18:00.744Z", "state": "published" } ] } ], "total": 274, "limit": 20, "offset": 80, "filters": { "product": "windows", "type": "all", "q": "", "page": 5 }, "pagination": { "page": 5, "pageSize": 20, "totalPages": 14 }, "sources": [ { "name": "JVN", "status": "ok", "lastSuccess": "2026-10-22T22:18:00.744Z", "lastAttempt": "2026-10-22T22:18:00.744Z", "error": null, "recordCount": 20, "coverage": "JVNの新着・更新RSS。取得した記事を蓄積。JVN iPediaは含みません。", "cursor": null, "freshness": "fresh", "stale": false }, { "name": "PHP Security", "status": "ok", "lastSuccess": "2026-10-22T22:18:00.744Z", "lastAttempt": "2026-10-22T22:18:00.744Z", "error": null, "recordCount": 66, "coverage": "PHP開発元の公開アドバイザリ。公開日が新しい順とは限らない直近100件を取得し蓄積。", "cursor": null, "freshness": "fresh", "stale": false }, { "name": "CISA KEV", "status": "ok", "lastSuccess": "2026-10-22T22:18:00.744Z", "lastAttempt": "2026-10-22T22:18:00.744Z", "error": null, "recordCount": 1754, "coverage": "CISAの公式GitHubミラーにある悪用確認済み一覧全件。掲載日はKEV追加日。", "cursor": null, "freshness": "fresh", "stale": false }, { "name": "NVD", "status": "ok", "lastSuccess": "2026-10-22T22:18:00.744Z", "lastAttempt": "2026-10-22T22:18:00.744Z", "error": null, "recordCount": 11, "coverage": "WordPressを含む脆弱性。初回は公開7日分、以降は全製品の変更分からWordPressと保存済みIDを追跡。停止後は最後に確認できた時刻から最大7日幅・500件ずつ再開し、残りは次回取得。 今回: 2026-10-22T21:17:13.942Z 〜 2026-10-22T22:18:00.744Z、全製品の変更 373/373件まで確認、対象11件反映。", "cursor": null, "freshness": "fresh", "stale": false }, { "name": "CVE", "status": "ok", "lastSuccess": "2026-10-22T22:18:00.744Z", "lastAttempt": "2026-10-22T22:18:00.744Z", "error": null, "recordCount": 6, "coverage": "取得したPHP/JVN情報のうち、公開日が新しい最大6件のCVE公式レコードで条件を補足。", "cursor": null, "freshness": "fresh", "stale": false } ] }