{ "schemaVersion": "1.0", "publisher": "脆弱性ナビ", "origin": "https://zeijaku.ittrip.xyz", "terms": [ { "name": "CVE Program", "url": "https://www.cve.org/legal/termsofuse", "notice": "CVE content is used subject to the CVE Program Terms of Use. CVE is a trademark of The MITRE Corporation.", "licenseText": "CVE content: Copyright The MITRE Corporation. CVE is a trademark of The MITRE Corporation.\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nDisclaimers: ALL DOCUMENTS AND THE INFORMATION CONTAINED THEREIN PROVIDED BY MITRE ARE PROVIDED ON AN \"AS IS\" BASIS AND THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE MITRE CORPORATION, ITS BOARD OF TRUSTEES, OFFICERS, AGENTS, AND EMPLOYEES, DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION THEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE." }, { "name": "NIST NVD", "url": "https://nvd.nist.gov/general/faq", "notice": "This product uses data from the NVD API but is not endorsed or certified by the NVD." }, { "name": "JVN", "url": "https://jvn.jp/contact/index.html", "notice": "出典：JVN（JPCERT/CC・IPA）。原文は各レコードの参照先を確認してください。" }, { "name": "CISA KEV", "url": "https://github.com/cisagov/kev-data", "notice": "Known Exploited Vulnerabilities catalog, CISA. CC0." } ], "records": [ { "id": "CVE-2017-0005", "aliases": [], "title": "Microsoft Windows：権限の奪取", "summary": "Microsoft Windowsに権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "本来与えられていない権限で、操作される可能性があります。", "product": "Microsoft Windows", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-0005", "label": "CISA KEV（悪用確認）" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-0005", "label": "CISAが示す関連情報" } ], "publishedAt": "2022-05-24T00:00:00.000Z", "modifiedAt": "2022-05-24T00:00:00.000Z", "fetchedAt": "2026-10-23T00:17:50.236Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "The Graphics Device Interface (GDI) in Microsoft Windows allows local users to gain privileges via a crafted application.", "sourceTitle": "Microsoft Windows Graphics Device Interface (GDI) Privilege Escalation Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply updates per vendor instructions.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2022-05-24T00:00:00.000Z", "fetchedAt": "2026-10-23T00:17:50.236Z", "state": "published" } ] }, { "id": "CVE-2017-8543", "aliases": [], "title": "Microsoft Windows：コード実行", "summary": "Microsoft Windowsにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "product": "Microsoft Windows", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-8543", "label": "CISA KEV（悪用確認）" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-8543", "label": "CISAが示す関連情報" } ], "publishedAt": "2022-05-24T00:00:00.000Z", "modifiedAt": "2022-05-24T00:00:00.000Z", "fetchedAt": "2026-10-23T00:17:50.236Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "Microsoft Windows allows an attacker to take control of the affected system when Windows Search fails to handle objects in memory.", "sourceTitle": "Microsoft Windows Search Remote Code Execution Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply updates per vendor instructions.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2022-05-24T00:00:00.000Z", "fetchedAt": "2026-10-23T00:17:50.236Z", "state": "published" } ] }, { "id": "CVE-2018-8611", "aliases": [], "title": "Microsoft Windows：権限の奪取", "summary": "Microsoft Windowsに権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "本来与えられていない権限で、操作される可能性があります。", "product": "Microsoft Windows", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-8611", "label": "CISA KEV（悪用確認）" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-8611", "label": "CISAが示す関連情報" } ], "publishedAt": "2022-05-24T00:00:00.000Z", "modifiedAt": "2022-05-24T00:00:00.000Z", "fetchedAt": "2026-10-23T00:17:50.236Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "A privilege escalation vulnerability exists when the Windows kernel fails to properly handle objects in memory.", "sourceTitle": "Microsoft Windows Kernel Privilege Escalation Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply updates per vendor instructions.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2022-05-24T00:00:00.000Z", "fetchedAt": "2026-10-23T00:17:50.236Z", "state": "published" } ] }, { "id": "CVE-2018-8589", "aliases": [], "title": "Microsoft Win32k：権限の奪取", "summary": "Microsoft Win32kに権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "本来与えられていない権限で、操作される可能性があります。", "product": "Microsoft Win32k", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-8589", "label": "CISA KEV（悪用確認）" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-8589", "label": "CISAが示す関連情報" } ], "publishedAt": "2022-05-23T00:00:00.000Z", "modifiedAt": "2022-05-23T00:00:00.000Z", "fetchedAt": "2026-10-23T00:17:50.236Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "A privilege escalation vulnerability exists when Windows improperly handles calls to Win32k.sys. An attacker who successfully exploited this vulnerability could run remote code in the security context of the local system.", "sourceTitle": "Microsoft Win32k Privilege Escalation Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply updates per vendor instructions.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2022-05-23T00:00:00.000Z", "fetchedAt": "2026-10-23T00:17:50.236Z", "state": "published" } ] }, { "id": "CVE-2019-0703", "aliases": [], "title": "Microsoft Windows：情報の漏えい", "summary": "Microsoft Windowsに情報の漏えいに関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "本来公開しない情報を読み取られる可能性があります。", "product": "Microsoft Windows", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0703", "label": "CISA KEV（悪用確認）" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0703", "label": "CISAが示す関連情報" } ], "publishedAt": "2022-05-23T00:00:00.000Z", "modifiedAt": "2022-05-23T00:00:00.000Z", "fetchedAt": "2026-10-23T00:17:50.236Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, which could lead to information disclosure from the server.", "sourceTitle": "Microsoft Windows SMB Information Disclosure Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply updates per vendor instructions.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2022-05-23T00:00:00.000Z", "fetchedAt": "2026-10-23T00:17:50.236Z", "state": "published" } ] }, { "id": "CVE-2019-0880", "aliases": [], "title": "Microsoft Windows：権限の奪取", "summary": "Microsoft Windowsに権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "本来与えられていない権限で、操作される可能性があります。", "product": "Microsoft Windows", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0880", "label": "CISA KEV（悪用確認）" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0880", "label": "CISAが示す関連情報" } ], "publishedAt": "2022-05-23T00:00:00.000Z", "modifiedAt": "2022-05-23T00:00:00.000Z", "fetchedAt": "2026-10-23T00:17:50.236Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls. An attacker who successfully exploited the vulnerability could elevate privileges on an affected system from low-integrity to medium-integrity.", "sourceTitle": "Microsoft Windows Privilege Escalation Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply updates per vendor instructions.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2022-05-23T00:00:00.000Z", "fetchedAt": "2026-10-23T00:17:50.236Z", "state": "published" } ] }, { "id": "CVE-2019-1130", "aliases": [], "title": "Microsoft Windows：権限の奪取", "summary": "Microsoft Windowsに権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "本来与えられていない権限で、操作される可能性があります。", "product": "Microsoft Windows", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-1130", "label": "CISA KEV（悪用確認）" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-1130", "label": "CISAが示す関連情報" } ], "publishedAt": "2022-05-23T00:00:00.000Z", "modifiedAt": "2022-05-23T00:00:00.000Z", "fetchedAt": "2026-10-23T00:17:50.236Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "A privilege escalation vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links.", "sourceTitle": "Microsoft Windows AppX Deployment Service Privilege Escalation Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply updates per vendor instructions.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2022-05-23T00:00:00.000Z", "fetchedAt": "2026-10-23T00:17:50.236Z", "state": "published" } ] }, { "id": "CVE-2019-1385", "aliases": [], "title": "Microsoft Windows：権限の奪取", "summary": "Microsoft Windowsに権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "本来与えられていない権限で、操作される可能性があります。", "product": "Microsoft Windows", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-1385", "label": "CISA KEV（悪用確認）" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-1385", "label": "CISAが示す関連情報" } ], "publishedAt": "2022-05-23T00:00:00.000Z", "modifiedAt": "2022-05-23T00:00:00.000Z", "fetchedAt": "2026-10-23T00:17:50.236Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "A privilege escalation vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files.", "sourceTitle": "Microsoft Windows AppX Deployment Extensions Privilege Escalation Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply updates per vendor instructions.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2022-05-23T00:00:00.000Z", "fetchedAt": "2026-10-23T00:17:50.236Z", "state": "published" } ] }, { "id": "CVE-2020-1027", "aliases": [], "title": "Microsoft Windows：権限の奪取", "summary": "Microsoft Windowsに権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "本来与えられていない権限で、操作される可能性があります。", "product": "Microsoft Windows", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-1027", "label": "CISA KEV（悪用確認）" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1027", "label": "CISAが示す関連情報" } ], "publishedAt": "2022-05-23T00:00:00.000Z", "modifiedAt": "2022-05-23T00:00:00.000Z", "fetchedAt": "2026-10-23T00:17:50.236Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.", "sourceTitle": "Microsoft Windows Kernel Privilege Escalation Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply updates per vendor instructions.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2022-05-23T00:00:00.000Z", "fetchedAt": "2026-10-23T00:17:50.236Z", "state": "published" } ] }, { "id": "CVE-2014-4113", "aliases": [], "title": "Microsoft Win32k：権限の奪取", "summary": "Microsoft Win32kに権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "本来与えられていない権限で、操作される可能性があります。", "product": "Microsoft Win32k", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-4113", "label": "CISA KEV（悪用確認）" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-4113", "label": "CISAが示す関連情報" } ], "publishedAt": "2022-05-04T00:00:00.000Z", "modifiedAt": "2022-05-04T00:00:00.000Z", "fetchedAt": "2026-10-23T00:17:50.236Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.", "sourceTitle": "Microsoft Win32k Privilege Escalation Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply updates per vendor instructions.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2022-05-04T00:00:00.000Z", "fetchedAt": "2026-10-23T00:17:50.236Z", "state": "published" } ] }, { "id": "CVE-2021-40450", "aliases": [], "title": "Microsoft Win32k：権限の奪取", "summary": "Microsoft Win32kに権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "本来与えられていない権限で、操作される可能性があります。", "product": "Microsoft Win32k", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-40450", "label": "CISA KEV（悪用確認）" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-40450", "label": "CISAが示す関連情報" } ], "publishedAt": "2022-04-25T00:00:00.000Z", "modifiedAt": "2022-04-25T00:00:00.000Z", "fetchedAt": "2026-10-23T00:17:50.236Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.", "sourceTitle": "Microsoft Win32k Privilege Escalation Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply updates per vendor instructions.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2022-04-25T00:00:00.000Z", "fetchedAt": "2026-10-23T00:17:50.236Z", "state": "published" } ] }, { "id": "CVE-2021-41357", "aliases": [], "title": "Microsoft Win32k：権限の奪取", "summary": "Microsoft Win32kに権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "本来与えられていない権限で、操作される可能性があります。", "product": "Microsoft Win32k", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-41357", "label": "CISA KEV（悪用確認）" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41357", "label": "CISAが示す関連情報" } ], "publishedAt": "2022-04-25T00:00:00.000Z", "modifiedAt": "2022-04-25T00:00:00.000Z", "fetchedAt": "2026-10-23T00:17:50.236Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.", "sourceTitle": "Microsoft Win32k Privilege Escalation Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply updates per vendor instructions.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2022-04-25T00:00:00.000Z", "fetchedAt": "2026-10-23T00:17:50.236Z", "state": "published" } ] }, { "id": "CVE-2022-21919", "aliases": [], "title": "Microsoft Windows：権限の奪取", "summary": "Microsoft Windowsに権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "本来与えられていない権限で、操作される可能性があります。", "product": "Microsoft Windows", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-21919", "label": "CISA KEV（悪用確認）" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-21919", "label": "CISAが示す関連情報" } ], "publishedAt": "2022-04-25T00:00:00.000Z", "modifiedAt": "2022-04-25T00:00:00.000Z", "fetchedAt": "2026-10-23T00:17:50.236Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "Microsoft Windows User Profile Service contains an unspecified vulnerability that allows for privilege escalation.", "sourceTitle": "Microsoft Windows User Profile Service Privilege Escalation Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply updates per vendor instructions.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2022-04-25T00:00:00.000Z", "fetchedAt": "2026-10-23T00:17:50.236Z", "state": "published" } ] }, { "id": "CVE-2022-26904", "aliases": [], "title": "Microsoft Windows：権限の奪取", "summary": "Microsoft Windowsに権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "本来与えられていない権限で、操作される可能性があります。", "product": "Microsoft Windows", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-26904", "label": "CISA KEV（悪用確認）" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-26904", "label": "CISAが示す関連情報" } ], "publishedAt": "2022-04-25T00:00:00.000Z", "modifiedAt": "2022-04-25T00:00:00.000Z", "fetchedAt": "2026-10-23T00:17:50.236Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "Microsoft Windows User Profile Service contains an unspecified vulnerability that allows for privilege escalation.", "sourceTitle": "Microsoft Windows User Profile Service Privilege Escalation Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply updates per vendor instructions.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2022-04-25T00:00:00.000Z", "fetchedAt": "2026-10-23T00:17:50.236Z", "state": "published" } ] }, { "id": "CVE-2022-22718", "aliases": [], "title": "Microsoft Windows：権限の奪取", "summary": "Microsoft Windowsに権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "本来与えられていない権限で、操作される可能性があります。", "product": "Microsoft Windows", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-22718", "label": "CISA KEV（悪用確認）" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22718", "label": "CISAが示す関連情報" } ], "publishedAt": "2022-04-19T00:00:00.000Z", "modifiedAt": "2022-04-19T00:00:00.000Z", "fetchedAt": "2026-10-23T00:17:50.236Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "Microsoft Windows Print Spooler contains an unspecified vulnerability which allow for privilege escalation.", "sourceTitle": "Microsoft Windows Print Spooler Privilege Escalation Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply updates per vendor instructions.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2022-04-19T00:00:00.000Z", "fetchedAt": "2026-10-23T00:17:50.236Z", "state": "published" } ] }, { "id": "CVE-2022-24521", "aliases": [], "title": "Microsoft Windows：権限の奪取", "summary": "Microsoft Windowsに権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "本来与えられていない権限で、操作される可能性があります。", "product": "Microsoft Windows", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-24521", "label": "CISA KEV（悪用確認）" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-24521", "label": "CISAが示す関連情報" } ], "publishedAt": "2022-04-13T00:00:00.000Z", "modifiedAt": "2022-04-13T00:00:00.000Z", "fetchedAt": "2026-10-23T00:17:50.236Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "Microsoft Windows Common Log File System (CLFS) Driver contains an unspecified vulnerability that allows for privilege escalation.", "sourceTitle": "Microsoft Windows CLFS Driver Privilege Escalation Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply updates per vendor instructions.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2022-04-13T00:00:00.000Z", "fetchedAt": "2026-10-23T00:17:50.236Z", "state": "published" } ] }, { "id": "CVE-2021-34484", "aliases": [], "title": "Microsoft Windows：権限の奪取", "summary": "Microsoft Windowsに権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "本来与えられていない権限で、操作される可能性があります。", "product": "Microsoft Windows", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-34484", "label": "CISA KEV（悪用確認）" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-34484", "label": "CISAが示す関連情報" } ], "publishedAt": "2022-03-31T00:00:00.000Z", "modifiedAt": "2022-03-31T00:00:00.000Z", "fetchedAt": "2026-10-23T00:17:50.236Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "Microsoft Windows User Profile Service contains an unspecified vulnerability that allows for privilege escalation.", "sourceTitle": "Microsoft Windows User Profile Service Privilege Escalation Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply updates per vendor instructions.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2022-03-31T00:00:00.000Z", "fetchedAt": "2026-10-23T00:17:50.236Z", "state": "published" } ] }, { "id": "CVE-2010-4398", "aliases": [], "title": "Microsoft Windows：脆弱性情報", "summary": "Microsoft Windowsに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "product": "Microsoft Windows", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2010-4398", "label": "CISA KEV（悪用確認）" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-4398", "label": "CISAが示す関連情報" } ], "publishedAt": "2022-03-28T00:00:00.000Z", "modifiedAt": "2022-03-28T00:00:00.000Z", "fetchedAt": "2026-10-23T00:17:50.236Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "Stack-based buffer overflow in the RtlQueryRegistryValues function in win32k.sys in Microsoft Windows allows local users to gain privileges, and bypass the User Account Control (UAC) feature.", "sourceTitle": "Microsoft Windows Kernel Stack-Based Buffer Overflow Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply updates per vendor instructions.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2022-03-28T00:00:00.000Z", "fetchedAt": "2026-10-23T00:17:50.236Z", "state": "published" } ] }, { "id": "CVE-2013-3660", "aliases": [], "title": "Microsoft Win32k：権限の奪取", "summary": "Microsoft Win32kに権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "本来与えられていない権限で、操作される可能性があります。", "product": "Microsoft Win32k", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-3660", "label": "CISA KEV（悪用確認）" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-3660", "label": "CISAが示す関連情報" } ], "publishedAt": "2022-03-28T00:00:00.000Z", "modifiedAt": "2022-03-28T00:00:00.000Z", "fetchedAt": "2026-10-23T00:17:50.236Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft does not properly initialize a pointer for the next object in a certain list, which allows local users to gain privileges.", "sourceTitle": "Microsoft Win32k Privilege Escalation Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply updates per vendor instructions.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2022-03-28T00:00:00.000Z", "fetchedAt": "2026-10-23T00:17:50.236Z", "state": "published" } ] }, { "id": "CVE-2015-1770", "aliases": [], "title": "Microsoft Office：コード実行", "summary": "Microsoft Officeにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "product": "Microsoft Office", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-1770", "label": "CISA KEV（悪用確認）" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-1770", "label": "CISAが示す関連情報" } ], "publishedAt": "2022-03-28T00:00:00.000Z", "modifiedAt": "2022-03-28T00:00:00.000Z", "fetchedAt": "2026-10-23T00:17:50.236Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "Microsoft Office allows remote attackers to execute arbitrary code via a crafted Office document.", "sourceTitle": "Microsoft Office Uninitialized Memory Use Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply updates per vendor instructions.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2022-03-28T00:00:00.000Z", "fetchedAt": "2026-10-23T00:17:50.236Z", "state": "published" } ] } ], "total": 274, "limit": 20, "offset": 140, "filters": { "product": "windows", "type": "all", "q": "", "page": 8 }, "pagination": { "page": 8, "pageSize": 20, "totalPages": 14 }, "sources": [ { "name": "JVN", "status": "ok", "lastSuccess": "2026-10-23T00:17:50.236Z", "lastAttempt": "2026-10-23T00:17:50.236Z", "error": null, "recordCount": 20, "coverage": "JVNの新着・更新RSS。取得した記事を蓄積。JVN iPediaは含みません。", "cursor": null, "freshness": "fresh", "stale": false }, { "name": "PHP Security", "status": "error", "lastSuccess": "2026-10-22T22:18:00.744Z", "lastAttempt": "2026-10-23T00:17:50.236Z", "error": "GitHub API取得上限に到達 (2026-10-23T01:03:59.000Z以降に再取得)", "recordCount": 66, "coverage": "PHP開発元の公開アドバイザリ。公開日が新しい順とは限らない直近100件を取得し蓄積。", "cursor": null, "freshness": "fresh", "stale": false }, { "name": "CISA KEV", "status": "ok", "lastSuccess": "2026-10-23T00:17:50.236Z", "lastAttempt": "2026-10-23T00:17:50.236Z", "error": null, "recordCount": 1754, "coverage": "CISAの公式GitHubミラーにある悪用確認済み一覧全件。掲載日はKEV追加日。", "cursor": null, "freshness": "fresh", "stale": false }, { "name": "NVD", "status": "ok", "lastSuccess": "2026-10-23T00:17:50.236Z", "lastAttempt": "2026-10-23T00:17:50.236Z", "error": null, "recordCount": 0, "coverage": "WordPressを含む脆弱性。初回は公開7日分、以降は全製品の変更分からWordPressと保存済みIDを追跡。停止後は最後に確認できた時刻から最大7日幅・500件ずつ再開し、残りは次回取得。 今回: 2026-10-22T23:02:50.374Z 〜 2026-10-23T00:17:50.236Z、全製品の変更 93/93件まで確認、対象0件反映。", "cursor": null, "freshness": "fresh", "stale": false }, { "name": "CVE", "status": "ok", "lastSuccess": "2026-10-23T00:17:50.236Z", "lastAttempt": "2026-10-23T00:17:50.236Z", "error": null, "recordCount": 6, "coverage": "取得したPHP/JVN情報のうち、公開日が新しい最大6件のCVE公式レコードで条件を補足。 PHP公式ニュース経由で候補補足（先頭20項目から2件）。GitHub全件代替ではない。CVE取得は既存候補と合わせ最大6件。", "cursor": null, "freshness": "fresh", "stale": false } ] }