{ "schemaVersion": "1.0", "publisher": "脆弱性ナビ", "origin": "https://zeijaku.ittrip.xyz", "terms": [ { "name": "CVE Program", "url": "https://www.cve.org/legal/termsofuse", "notice": "CVE content is used subject to the CVE Program Terms of Use. CVE is a trademark of The MITRE Corporation.", "licenseText": "CVE content: Copyright The MITRE Corporation. CVE is a trademark of The MITRE Corporation.\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nDisclaimers: ALL DOCUMENTS AND THE INFORMATION CONTAINED THEREIN PROVIDED BY MITRE ARE PROVIDED ON AN \"AS IS\" BASIS AND THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE MITRE CORPORATION, ITS BOARD OF TRUSTEES, OFFICERS, AGENTS, AND EMPLOYEES, DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION THEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE." }, { "name": "NIST NVD", "url": "https://nvd.nist.gov/general/faq", "notice": "This product uses data from the NVD API but is not endorsed or certified by the NVD." }, { "name": "JVN", "url": "https://jvn.jp/contact/index.html", "notice": "出典：JVN（JPCERT/CC・IPA）。原文は各レコードの参照先を確認してください。" }, { "name": "CISA KEV", "url": "https://github.com/cisagov/kev-data", "notice": "Known Exploited Vulnerabilities catalog, CISA. CC0." } ], "records": [ { "id": "CVE-2023-36874", "aliases": [], "title": "Microsoft Windows：権限の奪取", "summary": "Microsoft Windowsに権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "本来与えられていない権限で、操作される可能性があります。", "product": "Microsoft Windows", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-36874", "label": "CISA KEV（悪用確認）" }, { "url": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-36874", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-36874", "label": "CISAが示す関連情報" } ], "publishedAt": "2023-07-11T00:00:00.000Z", "modifiedAt": "2023-07-11T00:00:00.000Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "Microsoft Windows Error Reporting Service contains an unspecified vulnerability that allows for privilege escalation.", "sourceTitle": "Microsoft Windows Error Reporting Service Privilege Escalation Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2023-07-11T00:00:00.000Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "state": "published" } ] }, { "id": "CVE-2016-0165", "aliases": [], "title": "Microsoft Win32k：権限の奪取", "summary": "Microsoft Win32kに権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "本来与えられていない権限で、操作される可能性があります。", "product": "Microsoft Win32k", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-0165", "label": "CISA KEV（悪用確認）" }, { "url": "https://learn.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-039", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0165", "label": "CISAが示す関連情報" } ], "publishedAt": "2023-06-22T00:00:00.000Z", "modifiedAt": "2023-06-22T00:00:00.000Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.", "sourceTitle": "Microsoft Win32k Privilege Escalation Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply updates per vendor instructions.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2023-06-22T00:00:00.000Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "state": "published" } ] }, { "id": "CVE-2023-29336", "aliases": [], "title": "Microsoft Win32k：権限の奪取", "summary": "Microsoft Win32kに権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "本来与えられていない権限で、操作される可能性があります。", "product": "Microsoft Win32k", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-29336", "label": "CISA KEV（悪用確認）" }, { "url": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-29336", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-29336", "label": "CISAが示す関連情報" } ], "publishedAt": "2023-05-09T00:00:00.000Z", "modifiedAt": "2023-05-09T00:00:00.000Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation up to SYSTEM privileges.", "sourceTitle": "Microsoft Win32K Privilege Escalation Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply updates per vendor instructions.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2023-05-09T00:00:00.000Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "state": "published" } ] }, { "id": "CVE-2023-28252", "aliases": [], "title": "Microsoft Windows：権限の奪取", "summary": "Microsoft Windowsに権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "本来与えられていない権限で、操作される可能性があります。", "product": "Microsoft Windows", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-28252", "label": "CISA KEV（悪用確認）" }, { "url": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-28252", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-28252", "label": "CISAが示す関連情報" } ], "publishedAt": "2023-04-11T00:00:00.000Z", "modifiedAt": "2023-04-11T00:00:00.000Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "Microsoft Windows Common Log File System (CLFS) driver contains an unspecified vulnerability that allows for privilege escalation.", "sourceTitle": "Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply updates per vendor instructions.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2023-04-11T00:00:00.000Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "state": "published" } ] }, { "id": "CVE-2019-1388", "aliases": [], "title": "Microsoft Windows：権限の奪取", "summary": "Microsoft Windowsに権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "本来与えられていない権限で、操作される可能性があります。", "product": "Microsoft Windows", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-1388", "label": "CISA KEV（悪用確認）" }, { "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1388", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-1388", "label": "CISAが示す関連情報" } ], "publishedAt": "2023-04-07T00:00:00.000Z", "modifiedAt": "2023-04-07T00:00:00.000Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "Microsoft Windows Certificate Dialog contains a privilege escalation vulnerability, allowing attackers to run processes in an elevated context.", "sourceTitle": "Microsoft Windows Certificate Dialog Privilege Escalation Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply updates per vendor instructions.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2023-04-07T00:00:00.000Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "state": "published" } ] }, { "id": "CVE-2023-23397", "aliases": [], "title": "Microsoft Office：権限の奪取", "summary": "Microsoft Officeに権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "本来与えられていない権限で、操作される可能性があります。", "product": "Microsoft Office", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-23397", "label": "CISA KEV（悪用確認）" }, { "url": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-23397", "label": "CISAが示す関連情報" }, { "url": "https://msrc.microsoft.com/blog/2023/03/microsoft-mitigates-outlook-elevation-of-privilege-vulnerability/", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-23397", "label": "CISAが示す関連情報" } ], "publishedAt": "2023-03-14T00:00:00.000Z", "modifiedAt": "2023-03-14T00:00:00.000Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "Microsoft Office Outlook contains a privilege escalation vulnerability that allows for a NTLM Relay attack against another service to authenticate as the user.", "sourceTitle": "Microsoft Office Outlook Privilege Escalation Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply updates per vendor instructions.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2023-03-14T00:00:00.000Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "state": "published" } ] }, { "id": "CVE-2023-24880", "aliases": [], "title": "Microsoft Windows：脆弱性情報", "summary": "Microsoft Windowsに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "product": "Microsoft Windows", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-24880", "label": "CISA KEV（悪用確認）" }, { "url": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-24880", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-24880", "label": "CISAが示す関連情報" } ], "publishedAt": "2023-03-14T00:00:00.000Z", "modifiedAt": "2023-03-14T00:00:00.000Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "Microsoft Windows SmartScreen contains a security feature bypass vulnerability that could allow an attacker to evade Mark of the Web (MOTW) defenses via a specially crafted malicious file.", "sourceTitle": "Microsoft Windows SmartScreen Security Feature Bypass Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply updates per vendor instructions.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2023-03-14T00:00:00.000Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "state": "published" } ] }, { "id": "CVE-2023-21715", "aliases": [], "title": "Microsoft Office：脆弱性情報", "summary": "Microsoft Officeに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "product": "Microsoft Office", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-21715", "label": "CISA KEV（悪用確認）" }, { "url": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-21715", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-21715", "label": "CISAが示す関連情報" } ], "publishedAt": "2023-02-14T00:00:00.000Z", "modifiedAt": "2023-02-14T00:00:00.000Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "Microsoft Office Publisher contains a security feature bypass vulnerability that allows for a local, authenticated attack on a targeted system.", "sourceTitle": "Microsoft Office Publisher Security Feature Bypass Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply updates per vendor instructions.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2023-02-14T00:00:00.000Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "state": "published" } ] }, { "id": "CVE-2023-21823", "aliases": [], "title": "Microsoft Windows：権限の奪取", "summary": "Microsoft Windowsに権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "本来与えられていない権限で、操作される可能性があります。", "product": "Microsoft Windows", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-21823", "label": "CISA KEV（悪用確認）" }, { "url": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-21823", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-21823", "label": "CISAが示す関連情報" } ], "publishedAt": "2023-02-14T00:00:00.000Z", "modifiedAt": "2023-02-14T00:00:00.000Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "Microsoft Windows Graphic Component contains an unspecified vulnerability that allows for privilege escalation.", "sourceTitle": "Microsoft Windows Graphic Component Privilege Escalation Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply updates per vendor instructions.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2023-02-14T00:00:00.000Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "state": "published" } ] }, { "id": "CVE-2023-23376", "aliases": [], "title": "Microsoft Windows：権限の奪取", "summary": "Microsoft Windowsに権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "本来与えられていない権限で、操作される可能性があります。", "product": "Microsoft Windows", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-23376", "label": "CISA KEV（悪用確認）" }, { "url": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-23376", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-23376", "label": "CISAが示す関連情報" } ], "publishedAt": "2023-02-14T00:00:00.000Z", "modifiedAt": "2023-02-14T00:00:00.000Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "Microsoft Windows Common Log File System (CLFS) driver contains an unspecified vulnerability that allows for privilege escalation.", "sourceTitle": "Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply updates per vendor instructions.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2023-02-14T00:00:00.000Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "state": "published" } ] }, { "id": "CVE-2015-2291", "aliases": [], "title": "Intel Ethernet Diagnostics Driver for Windows：サービス停止", "summary": "Intel Ethernet Diagnostics Driver for Windowsにサービス停止に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "処理の停止や過大な負荷により、サービスを利用できなくなる可能性があります。", "product": "Intel Ethernet Diagnostics Driver for Windows", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-2291", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00051.html", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-2291", "label": "CISAが示す関連情報" } ], "publishedAt": "2023-02-10T00:00:00.000Z", "modifiedAt": "2023-02-10T00:00:00.000Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "Intel ethernet diagnostics driver for Windows IQVW32.sys and IQVW64.sys contain an unspecified vulnerability that allows for a denial-of-service (DoS).", "sourceTitle": "Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply updates per vendor instructions.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2023-02-10T00:00:00.000Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "state": "published" } ] }, { "id": "CVE-2022-41080", "aliases": [], "title": "Microsoft Exchange Server：権限の奪取", "summary": "Microsoft Exchange Serverに権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "本来与えられていない権限で、操作される可能性があります。", "product": "Microsoft Exchange Server", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-41080", "label": "CISA KEV（悪用確認）" }, { "url": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-41080", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-41080", "label": "CISAが示す関連情報" } ], "publishedAt": "2023-01-10T00:00:00.000Z", "modifiedAt": "2023-01-10T00:00:00.000Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation. This vulnerability is chainable with CVE-2022-41082, which allows for remote code execution.", "sourceTitle": "Microsoft Exchange Server Privilege Escalation Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply updates per vendor instructions.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2023-01-10T00:00:00.000Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "state": "published" } ] }, { "id": "CVE-2023-21674", "aliases": [], "title": "Microsoft Windows：権限の奪取", "summary": "Microsoft Windowsに権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "本来与えられていない権限で、操作される可能性があります。", "product": "Microsoft Windows", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-21674", "label": "CISA KEV（悪用確認）" }, { "url": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-21674", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-21674", "label": "CISAが示す関連情報" } ], "publishedAt": "2023-01-10T00:00:00.000Z", "modifiedAt": "2023-01-10T00:00:00.000Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "Microsoft Windows Advanced Local Procedure Call (ALPC) contains an unspecified vulnerability that allows for privilege escalation.", "sourceTitle": "Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply updates per vendor instructions.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2023-01-10T00:00:00.000Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "state": "published" } ] }, { "id": "CVE-2022-41049", "aliases": [], "title": "Microsoft Windows：脆弱性情報", "summary": "Microsoft Windowsに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "product": "Microsoft Windows", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-41049", "label": "CISA KEV（悪用確認）" }, { "url": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-41049", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-41049", "label": "CISAが示す関連情報" } ], "publishedAt": "2022-11-14T00:00:00.000Z", "modifiedAt": "2022-11-14T00:00:00.000Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "Microsoft Windows Mark of the Web (MOTW) contains a security feature bypass vulnerability resulting in a limited loss of integrity and availability of security features.", "sourceTitle": "Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply updates per vendor instructions.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2022-11-14T00:00:00.000Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "state": "published" } ] }, { "id": "CVE-2022-41073", "aliases": [], "title": "Microsoft Windows：権限の奪取", "summary": "Microsoft Windowsに権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "本来与えられていない権限で、操作される可能性があります。", "product": "Microsoft Windows", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-41073", "label": "CISA KEV（悪用確認）" }, { "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-41073", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-41073", "label": "CISAが示す関連情報" } ], "publishedAt": "2022-11-08T00:00:00.000Z", "modifiedAt": "2022-11-08T00:00:00.000Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "Microsoft Windows Print Spooler contains an unspecified vulnerability that allows an attacker to gain SYSTEM-level privileges.", "sourceTitle": "Microsoft Windows Print Spooler Privilege Escalation Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply updates per vendor instructions.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2022-11-08T00:00:00.000Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "state": "published" } ] }, { "id": "CVE-2022-41091", "aliases": [], "title": "Microsoft Windows：脆弱性情報", "summary": "Microsoft Windowsに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "product": "Microsoft Windows", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-41091", "label": "CISA KEV（悪用確認）" }, { "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-41091", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-41091", "label": "CISAが示す関連情報" } ], "publishedAt": "2022-11-08T00:00:00.000Z", "modifiedAt": "2022-11-08T00:00:00.000Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "Microsoft Windows Mark of the Web (MOTW) contains a security feature bypass vulnerability resulting in a limited loss of integrity and availability of security features.", "sourceTitle": "Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply updates per vendor instructions.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2022-11-08T00:00:00.000Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "state": "published" } ] }, { "id": "CVE-2022-41125", "aliases": [], "title": "Microsoft Windows：権限の奪取", "summary": "Microsoft Windowsに権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "本来与えられていない権限で、操作される可能性があります。", "product": "Microsoft Windows", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-41125", "label": "CISA KEV（悪用確認）" }, { "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-41125", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-41125", "label": "CISAが示す関連情報" } ], "publishedAt": "2022-11-08T00:00:00.000Z", "modifiedAt": "2022-11-08T00:00:00.000Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "Microsoft Windows Cryptographic Next Generation (CNG) Key Isolation Service contains an unspecified vulnerability that allows an attacker to gain SYSTEM-level privileges.", "sourceTitle": "Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply updates per vendor instructions.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2022-11-08T00:00:00.000Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "state": "published" } ] }, { "id": "CVE-2022-41128", "aliases": [], "title": "Microsoft Windows：コード実行", "summary": "Microsoft Windowsにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "product": "Microsoft Windows", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-41128", "label": "CISA KEV（悪用確認）" }, { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41128", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-41128", "label": "CISAが示す関連情報" } ], "publishedAt": "2022-11-08T00:00:00.000Z", "modifiedAt": "2022-11-08T00:00:00.000Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "Microsoft Windows contains an unspecified vulnerability in the JScript9 scripting language which allows for remote code execution.", "sourceTitle": "Microsoft Windows Scripting Languages Remote Code Execution Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply updates per vendor instructions.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2022-11-08T00:00:00.000Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "state": "published" } ] }, { "id": "CVE-2022-41033", "aliases": [], "title": "Microsoft Windows COM+ Event System Service：権限の奪取", "summary": "Microsoft Windows COM+ Event System Serviceに権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "本来与えられていない権限で、操作される可能性があります。", "product": "Microsoft Windows COM+ Event System Service", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-41033", "label": "CISA KEV（悪用確認）" }, { "url": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-41033", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-41033", "label": "CISAが示す関連情報" } ], "publishedAt": "2022-10-11T00:00:00.000Z", "modifiedAt": "2022-10-11T00:00:00.000Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "Microsoft Windows COM+ Event System Service contains an unspecified vulnerability that allows for privilege escalation.", "sourceTitle": "Microsoft Windows COM+ Event System Service Privilege Escalation Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply updates per vendor instructions.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2022-10-11T00:00:00.000Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "state": "published" } ] }, { "id": "CVE-2022-41040", "aliases": [], "title": "Microsoft Exchange Server：コード実行", "summary": "Microsoft Exchange Serverにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "product": "Microsoft Exchange Server", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-41040", "label": "CISA KEV（悪用確認）" }, { "url": "https://msrc-blog.microsoft.com/2022/09/29/customer-guidance-for-reported-zero-day-vulnerabilities-in-microsoft-exchange-server/", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-41040", "label": "CISAが示す関連情報" } ], "publishedAt": "2022-09-30T00:00:00.000Z", "modifiedAt": "2022-09-30T00:00:00.000Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "Microsoft Exchange Server allows for server-side request forgery. Dubbed \"ProxyNotShell,\" this vulnerability is chainable with CVE-2022-41082 which allows for remote code execution.", "sourceTitle": "Microsoft Exchange Server Server-Side Request Forgery Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply updates per vendor instructions.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2022-09-30T00:00:00.000Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "state": "published" } ] } ], "total": 274, "limit": 20, "offset": 100, "filters": { "product": "windows", "type": "all", "q": "", "page": 6 }, "pagination": { "page": 6, "pageSize": 20, "totalPages": 14 }, "sources": [ { "name": "JVN", "status": "ok", "lastSuccess": "2026-10-22T23:17:50.374Z", "lastAttempt": "2026-10-22T23:17:50.374Z", "error": null, "recordCount": 20, "coverage": "JVNの新着・更新RSS。取得した記事を蓄積。JVN iPediaは含みません。", "cursor": null, "freshness": "fresh", "stale": false }, { "name": "PHP Security", "status": "error", "lastSuccess": "2026-10-22T22:18:00.744Z", "lastAttempt": "2026-10-22T23:17:50.374Z", "error": "GitHub API取得上限に到達 (2026-10-22T23:24:04.000Z以降に再取得)", "recordCount": 66, "coverage": "PHP開発元の公開アドバイザリ。公開日が新しい順とは限らない直近100件を取得し蓄積。", "cursor": null, "freshness": "fresh", "stale": false }, { "name": "CISA KEV", "status": "ok", "lastSuccess": "2026-10-22T23:17:50.374Z", "lastAttempt": "2026-10-22T23:17:50.374Z", "error": null, "recordCount": 1754, "coverage": "CISAの公式GitHubミラーにある悪用確認済み一覧全件。掲載日はKEV追加日。", "cursor": null, "freshness": "fresh", "stale": false }, { "name": "NVD", "status": "ok", "lastSuccess": "2026-10-22T23:17:50.374Z", "lastAttempt": "2026-10-22T23:17:50.374Z", "error": null, "recordCount": 11, "coverage": "WordPressを含む脆弱性。初回は公開7日分、以降は全製品の変更分からWordPressと保存済みIDを追跡。停止後は最後に確認できた時刻から最大7日幅・500件ずつ再開し、残りは次回取得。 今回: 2026-10-22T22:03:00.744Z 〜 2026-10-22T23:17:50.374Z、全製品の変更 407/407件まで確認、対象11件反映。", "cursor": null, "freshness": "fresh", "stale": false }, { "name": "CVE", "status": "ok", "lastSuccess": "2026-10-22T23:17:50.374Z", "lastAttempt": "2026-10-22T23:17:50.374Z", "error": null, "recordCount": 6, "coverage": "取得したPHP/JVN情報のうち、公開日が新しい最大6件のCVE公式レコードで条件を補足。 PHP公式ニュース経由で候補補足（先頭20項目から2件）。GitHub全件代替ではない。CVE取得は既存候補と合わせ最大6件。", "cursor": null, "freshness": "fresh", "stale": false } ] }