{ "schemaVersion": "1.0", "publisher": "脆弱性ナビ", "origin": "https://zeijaku.ittrip.xyz", "terms": [ { "name": "CVE Program", "url": "https://www.cve.org/legal/termsofuse", "notice": "CVE content is used subject to the CVE Program Terms of Use. CVE is a trademark of The MITRE Corporation.", "licenseText": "CVE content: Copyright The MITRE Corporation. CVE is a trademark of The MITRE Corporation.\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nDisclaimers: ALL DOCUMENTS AND THE INFORMATION CONTAINED THEREIN PROVIDED BY MITRE ARE PROVIDED ON AN \"AS IS\" BASIS AND THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE MITRE CORPORATION, ITS BOARD OF TRUSTEES, OFFICERS, AGENTS, AND EMPLOYEES, DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION THEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE." }, { "name": "NIST NVD", "url": "https://nvd.nist.gov/general/faq", "notice": "This product uses data from the NVD API but is not endorsed or certified by the NVD." }, { "name": "JVN", "url": "https://jvn.jp/contact/index.html", "notice": "出典：JVN（JPCERT/CC・IPA）。原文は各レコードの参照先を確認してください。" }, { "name": "CISA KEV", "url": "https://github.com/cisagov/kev-data", "notice": "Known Exploited Vulnerabilities catalog, CISA. CC0." } ], "records": [ { "id": "CVE-2022-41082", "aliases": [], "title": "Microsoft Exchange Server：コード実行", "summary": "Microsoft Exchange Serverにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "product": "Microsoft Exchange Server", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-41082", "label": "CISA KEV（悪用確認）" }, { "url": "https://msrc-blog.microsoft.com/2022/09/29/customer-guidance-for-reported-zero-day-vulnerabilities-in-microsoft-exchange-server/", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-41082", "label": "CISAが示す関連情報" } ], "publishedAt": "2022-09-30T00:00:00.000Z", "modifiedAt": "2022-09-30T00:00:00.000Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "Microsoft Exchange Server contains an unspecified vulnerability that allows for authenticated remote code execution. Dubbed \"ProxyNotShell,\" this vulnerability is chainable with CVE-2022-41040 which allows for the remote code execution.", "sourceTitle": "Microsoft Exchange Server Remote Code Execution Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply updates per vendor instructions.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2022-09-30T00:00:00.000Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "state": "published" } ] }, { "id": "CVE-2010-2568", "aliases": [], "title": "Microsoft Windows：コード実行", "summary": "Microsoft Windowsにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "product": "Microsoft Windows", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2010-2568", "label": "CISA KEV（悪用確認）" }, { "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-046", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-2568", "label": "CISAが示す関連情報" } ], "publishedAt": "2022-09-15T00:00:00.000Z", "modifiedAt": "2022-09-15T00:00:00.000Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "Microsoft Windows incorrectly parses shortcuts in such a way that malicious code may be executed when the operating system displays the icon of a malicious shortcut file. An attacker who successfully exploited this vulnerability could execute code as the logged-on user.", "sourceTitle": "Microsoft Windows Remote Code Execution Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply updates per vendor instructions.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2022-09-15T00:00:00.000Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "state": "published" } ] }, { "id": "CVE-2022-37969", "aliases": [], "title": "Microsoft Windows：権限の奪取", "summary": "Microsoft Windowsに権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "本来与えられていない権限で、操作される可能性があります。", "product": "Microsoft Windows", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-37969", "label": "CISA KEV（悪用確認）" }, { "url": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-37969", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-37969", "label": "CISAが示す関連情報" } ], "publishedAt": "2022-09-14T00:00:00.000Z", "modifiedAt": "2022-09-14T00:00:00.000Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "Microsoft Windows Common Log File System (CLFS) driver contains an unspecified vulnerability that allows for privilege escalation.", "sourceTitle": "Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply updates per vendor instructions.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2022-09-14T00:00:00.000Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "state": "published" } ] }, { "id": "CVE-2022-21971", "aliases": [], "title": "Microsoft Windows：コード実行", "summary": "Microsoft Windowsにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "product": "Microsoft Windows", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-21971", "label": "CISA KEV（悪用確認）" }, { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21971", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-21971", "label": "CISAが示す関連情報" } ], "publishedAt": "2022-08-18T00:00:00.000Z", "modifiedAt": "2022-08-18T00:00:00.000Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "Microsoft Windows Runtime contains an unspecified vulnerability that allows for remote code execution.", "sourceTitle": "Microsoft Windows Runtime Remote Code Execution Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply updates per vendor instructions.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2022-08-18T00:00:00.000Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "state": "published" } ] }, { "id": "CVE-2022-34713", "aliases": [], "title": "Microsoft Windows：コード実行", "summary": "Microsoft Windowsにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "product": "Microsoft Windows", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-34713", "label": "CISA KEV（悪用確認）" }, { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34713", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-34713", "label": "CISAが示す関連情報" } ], "publishedAt": "2022-08-09T00:00:00.000Z", "modifiedAt": "2022-08-09T00:00:00.000Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "A remote code execution vulnerability exists when Microsoft Windows MSDT is called using the URL protocol from a calling application.", "sourceTitle": "Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply updates per vendor instructions.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2022-08-09T00:00:00.000Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "state": "published" } ] }, { "id": "CVE-2022-22047", "aliases": [], "title": "Microsoft Windows：権限の奪取", "summary": "Microsoft Windowsに権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "本来与えられていない権限で、操作される可能性があります。", "product": "Microsoft Windows", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-22047", "label": "CISA KEV（悪用確認）" }, { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22047", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22047", "label": "CISAが示す関連情報" } ], "publishedAt": "2022-07-12T00:00:00.000Z", "modifiedAt": "2022-07-12T00:00:00.000Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "Microsoft Windows CSRSS contains an unspecified vulnerability that allows for privilege escalation to SYSTEM privileges.", "sourceTitle": "Microsoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply updates per vendor instructions.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2022-07-12T00:00:00.000Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "state": "published" } ] }, { "id": "CVE-2022-26925", "aliases": [], "title": "Microsoft Windows：脆弱性情報", "summary": "Microsoft Windowsに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "product": "Microsoft Windows", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-26925", "label": "CISA KEV（悪用確認）" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-26925", "label": "CISAが示す関連情報" } ], "publishedAt": "2022-07-01T00:00:00.000Z", "modifiedAt": "2022-07-01T00:00:00.000Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "Microsoft Windows Local Security Authority (LSA) contains a spoofing vulnerability where an attacker can coerce the domain controller to authenticate to the attacker using NTLM.", "sourceTitle": "Microsoft Windows LSA Spoofing Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply remediation actions outlined in CISA guidance [https://www.cisa.gov/guidance-applying-june-microsoft-patch].", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2022-07-01T00:00:00.000Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "state": "published" } ] }, { "id": "CVE-2022-30190", "aliases": [], "title": "Microsoft Windows：コード実行", "summary": "Microsoft Windowsにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "product": "Microsoft Windows", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-30190", "label": "CISA KEV（悪用確認）" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-30190", "label": "CISAが示す関連情報" } ], "publishedAt": "2022-06-14T00:00:00.000Z", "modifiedAt": "2022-06-14T00:00:00.000Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run code with the privileges of the calling application.", "sourceTitle": "Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply updates per vendor instructions.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2022-06-14T00:00:00.000Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "state": "published" } ] }, { "id": "CVE-2009-0557", "aliases": [], "title": "Microsoft Office：脆弱性情報", "summary": "Microsoft Officeに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "product": "Microsoft Office", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2009-0557", "label": "CISA KEV（悪用確認）" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-0557", "label": "CISAが示す関連情報" } ], "publishedAt": "2022-06-08T00:00:00.000Z", "modifiedAt": "2022-06-08T00:00:00.000Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "Microsoft Office contains an object record corruption vulnerability that allows remote attackers to execute code via a crafted Excel file with a malformed record object.", "sourceTitle": "Microsoft Office Object Record Corruption Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply updates per vendor instructions.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2022-06-08T00:00:00.000Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "state": "published" } ] }, { "id": "CVE-2009-0563", "aliases": [], "title": "Microsoft Office：脆弱性情報", "summary": "Microsoft Officeに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "product": "Microsoft Office", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2009-0563", "label": "CISA KEV（悪用確認）" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-0563", "label": "CISAが示す関連情報" } ], "publishedAt": "2022-06-08T00:00:00.000Z", "modifiedAt": "2022-06-08T00:00:00.000Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "Microsoft Office contains a buffer overflow vulnerability that allows remote attackers to execute code via a Word document with a crafted tag containing an invalid length field.", "sourceTitle": "Microsoft Office Buffer Overflow Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply updates per vendor instructions.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2022-06-08T00:00:00.000Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "state": "published" } ] }, { "id": "CVE-2012-0151", "aliases": [], "title": "Microsoft Windows：コード実行", "summary": "Microsoft Windowsにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "product": "Microsoft Windows", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-0151", "label": "CISA KEV（悪用確認）" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-0151", "label": "CISAが示す関連情報" } ], "publishedAt": "2022-06-08T00:00:00.000Z", "modifiedAt": "2022-06-08T00:00:00.000Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "The Authenticode Signature Verification function in Microsoft Windows (WinVerifyTrust) does not properly validate the digest of a signed portable executable (PE) file, which allows user-assisted remote attackers to execute code.", "sourceTitle": "Microsoft Windows Authenticode Signature Verification Remote Code Execution Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply updates per vendor instructions.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2022-06-08T00:00:00.000Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "state": "published" } ] }, { "id": "CVE-2013-1331", "aliases": [], "title": "Microsoft Office：脆弱性情報", "summary": "Microsoft Officeに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "product": "Microsoft Office", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-1331", "label": "CISA KEV（悪用確認）" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-1331", "label": "CISAが示す関連情報" } ], "publishedAt": "2022-06-08T00:00:00.000Z", "modifiedAt": "2022-06-08T00:00:00.000Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "Microsoft Office contains a buffer overflow vulnerability that allows remote attackers to execute code via crafted PNG data in an Office document.", "sourceTitle": "Microsoft Office Buffer Overflow Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply updates per vendor instructions.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2022-06-08T00:00:00.000Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "state": "published" } ] }, { "id": "CVE-2014-4148", "aliases": [], "title": "Microsoft Windows：コード実行", "summary": "Microsoft Windowsにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "product": "Microsoft Windows", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-4148", "label": "CISA KEV（悪用確認）" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-4148", "label": "CISAが示す関連情報" } ], "publishedAt": "2022-05-25T00:00:00.000Z", "modifiedAt": "2022-05-25T00:00:00.000Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "A remote code execution vulnerability exists when the Windows kernel-mode driver improperly handles TrueType fonts.", "sourceTitle": "Microsoft Windows Remote Code Execution Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply updates per vendor instructions.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2022-05-25T00:00:00.000Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "state": "published" } ] }, { "id": "CVE-2015-0016", "aliases": [], "title": "Microsoft Windows：ファイルへの不正アクセス", "summary": "Microsoft Windowsにファイルへの不正アクセスに関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "許可していない場所のファイルにアクセスされる可能性があります。", "product": "Microsoft Windows", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-0016", "label": "CISA KEV（悪用確認）" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0016", "label": "CISAが示す関連情報" } ], "publishedAt": "2022-05-25T00:00:00.000Z", "modifiedAt": "2022-05-25T00:00:00.000Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "Directory traversal vulnerability in the TS WebProxy (TSWbPrxy) component in Microsoft Windows allows remote attackers to escalate privileges.", "sourceTitle": "Microsoft Windows TS WebProxy Directory Traversal Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply updates per vendor instructions.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2022-05-25T00:00:00.000Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "state": "published" } ] }, { "id": "CVE-2015-1671", "aliases": [], "title": "Microsoft Windows：コード実行", "summary": "Microsoft Windowsにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "product": "Microsoft Windows", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-1671", "label": "CISA KEV（悪用確認）" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-1671", "label": "CISAが示す関連情報" } ], "publishedAt": "2022-05-25T00:00:00.000Z", "modifiedAt": "2022-05-25T00:00:00.000Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "A remote code execution vulnerability exists when components of Windows, .NET Framework, Office, Lync, and Silverlight fail to properly handle TrueType fonts.", "sourceTitle": "Microsoft Windows Remote Code Execution Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply updates per vendor instructions.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2022-05-25T00:00:00.000Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "state": "published" } ] }, { "id": "CVE-2015-1769", "aliases": [], "title": "Microsoft Windows：権限の奪取", "summary": "Microsoft Windowsに権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "本来与えられていない権限で、操作される可能性があります。", "product": "Microsoft Windows", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-1769", "label": "CISA KEV（悪用確認）" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-1769", "label": "CISAが示す関連情報" } ], "publishedAt": "2022-05-25T00:00:00.000Z", "modifiedAt": "2022-05-25T00:00:00.000Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "A privilege escalation vulnerability exists when the Windows Mount Manager component improperly processes symbolic links.", "sourceTitle": "Microsoft Windows Mount Manager Privilege Escalation Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply updates per vendor instructions.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2022-05-25T00:00:00.000Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "state": "published" } ] }, { "id": "CVE-2015-2360", "aliases": [], "title": "Microsoft Win32k：権限の奪取", "summary": "Microsoft Win32kに権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "本来与えられていない権限で、操作される可能性があります。", "product": "Microsoft Win32k", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-2360", "label": "CISA KEV（悪用確認）" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-2360", "label": "CISAが示す関連情報" } ], "publishedAt": "2022-05-25T00:00:00.000Z", "modifiedAt": "2022-05-25T00:00:00.000Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "Win32k.sys in the kernel-mode drivers in Microsoft Windows allows local users to gain privileges or cause denial-of-service (DoS).", "sourceTitle": "Microsoft Win32k Privilege Escalation Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply updates per vendor instructions.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2022-05-25T00:00:00.000Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "state": "published" } ] }, { "id": "CVE-2015-6175", "aliases": [], "title": "Microsoft Windows：権限の奪取", "summary": "Microsoft Windowsに権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "本来与えられていない権限で、操作される可能性があります。", "product": "Microsoft Windows", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-6175", "label": "CISA KEV（悪用確認）" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-6175", "label": "CISAが示す関連情報" } ], "publishedAt": "2022-05-25T00:00:00.000Z", "modifiedAt": "2022-05-25T00:00:00.000Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "The kernel in Microsoft Windows contains a vulnerability that allows local users to gain privileges via a crafted application.", "sourceTitle": "Microsoft Windows Kernel Privilege Escalation Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply updates per vendor instructions.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2022-05-25T00:00:00.000Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "state": "published" } ] }, { "id": "CVE-2016-3393", "aliases": [], "title": "Microsoft Windows：コード実行", "summary": "Microsoft Windowsにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "product": "Microsoft Windows", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-3393", "label": "CISA KEV（悪用確認）" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-3393", "label": "CISAが示す関連情報" } ], "publishedAt": "2022-05-25T00:00:00.000Z", "modifiedAt": "2022-05-25T00:00:00.000Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "A remote code execution vulnerability exists due to the way the Windows GDI component handles objects in the memory. An attacker who successfully exploits this vulnerability could take control of the affected system.", "sourceTitle": "Microsoft Windows Graphics Device Interface (GDI) Remote Code Execution Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply updates per vendor instructions.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2022-05-25T00:00:00.000Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "state": "published" } ] }, { "id": "CVE-2016-7256", "aliases": [], "title": "Microsoft Windows：コード実行", "summary": "Microsoft Windowsにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "product": "Microsoft Windows", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-7256", "label": "CISA KEV（悪用確認）" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-7256", "label": "CISAが示す関連情報" } ], "publishedAt": "2022-05-25T00:00:00.000Z", "modifiedAt": "2022-05-25T00:00:00.000Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploits this vulnerability could take control of the affected system.", "sourceTitle": "Microsoft Windows Open Type Font Remote Code Execution Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply updates per vendor instructions.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2022-05-25T00:00:00.000Z", "fetchedAt": "2026-10-22T23:17:50.374Z", "state": "published" } ] } ], "total": 274, "limit": 20, "offset": 120, "filters": { "product": "windows", "type": "all", "q": "", "page": 7 }, "pagination": { "page": 7, "pageSize": 20, "totalPages": 14 }, "sources": [ { "name": "JVN", "status": "ok", "lastSuccess": "2026-10-22T23:17:50.374Z", "lastAttempt": "2026-10-22T23:17:50.374Z", "error": null, "recordCount": 20, "coverage": "JVNの新着・更新RSS。取得した記事を蓄積。JVN iPediaは含みません。", "cursor": null, "freshness": "fresh", "stale": false }, { "name": "PHP Security", "status": "error", "lastSuccess": "2026-10-22T22:18:00.744Z", "lastAttempt": "2026-10-22T23:17:50.374Z", "error": "GitHub API取得上限に到達 (2026-10-22T23:24:04.000Z以降に再取得)", "recordCount": 66, "coverage": "PHP開発元の公開アドバイザリ。公開日が新しい順とは限らない直近100件を取得し蓄積。", "cursor": null, "freshness": "fresh", "stale": false }, { "name": "CISA KEV", "status": "ok", "lastSuccess": "2026-10-22T23:17:50.374Z", "lastAttempt": "2026-10-22T23:17:50.374Z", "error": null, "recordCount": 1754, "coverage": "CISAの公式GitHubミラーにある悪用確認済み一覧全件。掲載日はKEV追加日。", "cursor": null, "freshness": "fresh", "stale": false }, { "name": "NVD", "status": "ok", "lastSuccess": "2026-10-22T23:17:50.374Z", "lastAttempt": "2026-10-22T23:17:50.374Z", "error": null, "recordCount": 11, "coverage": "WordPressを含む脆弱性。初回は公開7日分、以降は全製品の変更分からWordPressと保存済みIDを追跡。停止後は最後に確認できた時刻から最大7日幅・500件ずつ再開し、残りは次回取得。 今回: 2026-10-22T22:03:00.744Z 〜 2026-10-22T23:17:50.374Z、全製品の変更 407/407件まで確認、対象11件反映。", "cursor": null, "freshness": "fresh", "stale": false }, { "name": "CVE", "status": "ok", "lastSuccess": "2026-10-22T23:17:50.374Z", "lastAttempt": "2026-10-22T23:17:50.374Z", "error": null, "recordCount": 6, "coverage": "取得したPHP/JVN情報のうち、公開日が新しい最大6件のCVE公式レコードで条件を補足。 PHP公式ニュース経由で候補補足（先頭20項目から2件）。GitHub全件代替ではない。CVE取得は既存候補と合わせ最大6件。", "cursor": null, "freshness": "fresh", "stale": false } ] }