{ "schemaVersion": "1.0", "publisher": "脆弱性ナビ", "origin": "https://zeijaku.ittrip.xyz", "terms": [ { "name": "CVE Program", "url": "https://www.cve.org/legal/termsofuse", "notice": "CVE content is used subject to the CVE Program Terms of Use. CVE is a trademark of The MITRE Corporation.", "licenseText": "CVE content: Copyright The MITRE Corporation. CVE is a trademark of The MITRE Corporation.\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nDisclaimers: ALL DOCUMENTS AND THE INFORMATION CONTAINED THEREIN PROVIDED BY MITRE ARE PROVIDED ON AN \"AS IS\" BASIS AND THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE MITRE CORPORATION, ITS BOARD OF TRUSTEES, OFFICERS, AGENTS, AND EMPLOYEES, DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION THEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE." }, { "name": "NIST NVD", "url": "https://nvd.nist.gov/general/faq", "notice": "This product uses data from the NVD API but is not endorsed or certified by the NVD." }, { "name": "JVN", "url": "https://jvn.jp/contact/index.html", "notice": "出典：JVN（JPCERT/CC・IPA）。原文は各レコードの参照先を確認してください。" }, { "name": "CISA KEV", "url": "https://github.com/cisagov/kev-data", "notice": "Known Exploited Vulnerabilities catalog, CISA. CC0." } ], "records": [ { "id": "CVE-2015-2426", "aliases": [], "title": "Microsoft Windows：コード実行", "summary": "Microsoft Windowsにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "product": "Microsoft Windows", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-2426", "label": "CISA KEV（悪用確認）" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-2426", "label": "CISAが示す関連情報" } ], "publishedAt": "2022-03-28T00:00:00.000Z", "modifiedAt": "2022-03-28T00:00:00.000Z", "fetchedAt": "2026-10-23T01:17:50.760Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles specially crafted OpenType fonts.", "sourceTitle": "Microsoft Windows Adobe Type Manager Library Remote Code Execution Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply updates per vendor instructions.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2022-03-28T00:00:00.000Z", "fetchedAt": "2026-10-23T01:17:50.760Z", "state": "published" } ] }, { "id": "CVE-2016-0040", "aliases": [], "title": "Microsoft Windows：権限の奪取", "summary": "Microsoft Windowsに権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "本来与えられていない権限で、操作される可能性があります。", "product": "Microsoft Windows", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-0040", "label": "CISA KEV（悪用確認）" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0040", "label": "CISAが示す関連情報" } ], "publishedAt": "2022-03-28T00:00:00.000Z", "modifiedAt": "2022-03-28T00:00:00.000Z", "fetchedAt": "2026-10-23T01:17:50.760Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "The kernel in Microsoft Windows allows local users to gain privileges via a crafted application.", "sourceTitle": "Microsoft Windows Kernel Privilege Escalation Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply updates per vendor instructions.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2022-03-28T00:00:00.000Z", "fetchedAt": "2026-10-23T01:17:50.760Z", "state": "published" } ] }, { "id": "CVE-2016-7200", "aliases": [], "title": "Microsoft Edge：サービス停止", "summary": "Microsoft Edgeにサービス停止に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "処理の停止や過大な負荷により、サービスを利用できなくなる可能性があります。", "product": "Microsoft Edge", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-7200", "label": "CISA KEV（悪用確認）" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-7200", "label": "CISAが示す関連情報" } ], "publishedAt": "2022-03-28T00:00:00.000Z", "modifiedAt": "2022-03-28T00:00:00.000Z", "fetchedAt": "2026-10-23T01:17:50.760Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute remote code or cause a denial of service (memory corruption) via a crafted web site.", "sourceTitle": "Microsoft Edge Memory Corruption Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply updates per vendor instructions.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2022-03-28T00:00:00.000Z", "fetchedAt": "2026-10-23T01:17:50.760Z", "state": "published" } ] }, { "id": "CVE-2016-7201", "aliases": [], "title": "Microsoft Edge：サービス停止", "summary": "Microsoft Edgeにサービス停止に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "処理の停止や過大な負荷により、サービスを利用できなくなる可能性があります。", "product": "Microsoft Edge", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-7201", "label": "CISA KEV（悪用確認）" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-7201", "label": "CISAが示す関連情報" } ], "publishedAt": "2022-03-28T00:00:00.000Z", "modifiedAt": "2022-03-28T00:00:00.000Z", "fetchedAt": "2026-10-23T01:17:50.760Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute remote code or cause a denial of service (memory corruption) via a crafted web site.", "sourceTitle": "Microsoft Edge Memory Corruption Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply updates per vendor instructions.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2022-03-28T00:00:00.000Z", "fetchedAt": "2026-10-23T01:17:50.760Z", "state": "published" } ] }, { "id": "CVE-2017-0037", "aliases": [], "title": "Microsoft Edge and Internet Explorer：コード実行", "summary": "Microsoft Edge and Internet Explorerにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "product": "Microsoft Edge and Internet Explorer", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-0037", "label": "CISA KEV（悪用確認）" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-0037", "label": "CISAが示す関連情報" } ], "publishedAt": "2022-03-28T00:00:00.000Z", "modifiedAt": "2022-03-28T00:00:00.000Z", "fetchedAt": "2026-10-23T01:17:50.760Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "Microsoft Edge and Internet Explorer have a type confusion vulnerability in mshtml.dll, which allows remote code execution.", "sourceTitle": "Microsoft Edge and Internet Explorer Type Confusion Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply updates per vendor instructions.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2022-03-28T00:00:00.000Z", "fetchedAt": "2026-10-23T01:17:50.760Z", "state": "published" } ] }, { "id": "CVE-2017-0213", "aliases": [], "title": "Microsoft Windows：権限の奪取", "summary": "Microsoft Windowsに権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "本来与えられていない権限で、操作される可能性があります。", "product": "Microsoft Windows", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-0213", "label": "CISA KEV（悪用確認）" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-0213", "label": "CISAが示す関連情報" } ], "publishedAt": "2022-03-28T00:00:00.000Z", "modifiedAt": "2022-03-28T00:00:00.000Z", "fetchedAt": "2026-10-23T01:17:50.760Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "Microsoft Windows COM Aggregate Marshaler allows for privilege escalation when an attacker runs a specially crafted application.", "sourceTitle": "Microsoft Windows Privilege Escalation Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply updates per vendor instructions.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2022-03-28T00:00:00.000Z", "fetchedAt": "2026-10-23T01:17:50.760Z", "state": "published" } ] }, { "id": "CVE-2018-8440", "aliases": [], "title": "Microsoft Windows：権限の奪取", "summary": "Microsoft Windowsに権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "本来与えられていない権限で、操作される可能性があります。", "product": "Microsoft Windows", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-8440", "label": "CISA KEV（悪用確認）" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-8440", "label": "CISAが示す関連情報" } ], "publishedAt": "2022-03-28T00:00:00.000Z", "modifiedAt": "2022-03-28T00:00:00.000Z", "fetchedAt": "2026-10-23T01:17:50.760Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC).", "sourceTitle": "Microsoft Windows Privilege Escalation Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply updates per vendor instructions.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2022-03-28T00:00:00.000Z", "fetchedAt": "2026-10-23T01:17:50.760Z", "state": "published" } ] }, { "id": "CVE-2021-34486", "aliases": [], "title": "Microsoft Windows：権限の奪取", "summary": "Microsoft Windowsに権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "本来与えられていない権限で、操作される可能性があります。", "product": "Microsoft Windows", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-34486", "label": "CISA KEV（悪用確認）" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-34486", "label": "CISAが示す関連情報" } ], "publishedAt": "2022-03-28T00:00:00.000Z", "modifiedAt": "2022-03-28T00:00:00.000Z", "fetchedAt": "2026-10-23T01:17:50.760Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "Microsoft Windows Event Tracing contains an unspecified vulnerability which can allow for privilege escalation.", "sourceTitle": "Microsoft Windows Event Tracing Privilege Escalation Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply updates per vendor instructions.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2022-03-28T00:00:00.000Z", "fetchedAt": "2026-10-23T01:17:50.760Z", "state": "published" } ] }, { "id": "CVE-2021-38646", "aliases": [], "title": "Microsoft Office：コード実行", "summary": "Microsoft Officeにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "product": "Microsoft Office", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-38646", "label": "CISA KEV（悪用確認）" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-38646", "label": "CISAが示す関連情報" } ], "publishedAt": "2022-03-28T00:00:00.000Z", "modifiedAt": "2022-03-28T00:00:00.000Z", "fetchedAt": "2026-10-23T01:17:50.760Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "Microsoft Office Access Connectivity Engine contains an unspecified vulnerability which can allow for remote code execution.", "sourceTitle": "Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply updates per vendor instructions.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2022-03-28T00:00:00.000Z", "fetchedAt": "2026-10-23T01:17:50.760Z", "state": "published" } ] }, { "id": "CVE-2014-6332", "aliases": [], "title": "Microsoft Windows：コード実行", "summary": "Microsoft Windowsにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "product": "Microsoft Windows", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-6332", "label": "CISA KEV（悪用確認）" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-6332", "label": "CISAが示す関連情報" } ], "publishedAt": "2022-03-25T00:00:00.000Z", "modifiedAt": "2022-03-25T00:00:00.000Z", "fetchedAt": "2026-10-23T01:17:50.760Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "OleAut32.dll in OLE in Microsoft Windows allows remote attackers to remotely execute code via a crafted web site.", "sourceTitle": "Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply updates per vendor instructions.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2022-03-25T00:00:00.000Z", "fetchedAt": "2026-10-23T01:17:50.760Z", "state": "published" } ] }, { "id": "CVE-2017-0146", "aliases": [], "title": "Microsoft Windows：コード実行", "summary": "Microsoft Windowsにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "product": "Microsoft Windows", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-0146", "label": "CISA KEV（悪用確認）" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-0146", "label": "CISAが示す関連情報" } ], "publishedAt": "2022-03-25T00:00:00.000Z", "modifiedAt": "2022-03-25T00:00:00.000Z", "fetchedAt": "2026-10-23T01:17:50.760Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "The SMBv1 server in Microsoft Windows allows remote attackers to perform remote code execution.", "sourceTitle": "Microsoft Windows SMB Remote Code Execution Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply updates per vendor instructions.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2022-03-25T00:00:00.000Z", "fetchedAt": "2026-10-23T01:17:50.760Z", "state": "published" } ] }, { "id": "CVE-2018-8414", "aliases": [], "title": "Microsoft Windows：コード実行", "summary": "Microsoft Windowsにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "product": "Microsoft Windows", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-8414", "label": "CISA KEV（悪用確認）" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-8414", "label": "CISAが示す関連情報" } ], "publishedAt": "2022-03-25T00:00:00.000Z", "modifiedAt": "2022-03-25T00:00:00.000Z", "fetchedAt": "2026-10-23T01:17:50.760Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths.", "sourceTitle": "Microsoft Windows Shell Remote Code Execution Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply updates per vendor instructions.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2022-03-25T00:00:00.000Z", "fetchedAt": "2026-10-23T01:17:50.760Z", "state": "published" } ] }, { "id": "CVE-2022-21999", "aliases": [], "title": "Microsoft Windows：権限の奪取", "summary": "Microsoft Windowsに権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "本来与えられていない権限で、操作される可能性があります。", "product": "Microsoft Windows", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-21999", "label": "CISA KEV（悪用確認）" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-21999", "label": "CISAが示す関連情報" } ], "publishedAt": "2022-03-25T00:00:00.000Z", "modifiedAt": "2022-03-25T00:00:00.000Z", "fetchedAt": "2026-10-23T01:17:50.760Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "Microsoft Windows Print Spooler contains an unspecified vulnerability which can allow for privilege escalation.", "sourceTitle": "Microsoft Windows Print Spooler Privilege Escalation Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply updates per vendor instructions.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2022-03-25T00:00:00.000Z", "fetchedAt": "2026-10-23T01:17:50.760Z", "state": "published" } ] }, { "id": "CVE-2015-2546", "aliases": [], "title": "Microsoft Win32k：脆弱性情報", "summary": "Microsoft Win32kに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "product": "Microsoft Win32k", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-2546", "label": "CISA KEV（悪用確認）" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-2546", "label": "CISAが示す関連情報" } ], "publishedAt": "2022-03-15T00:00:00.000Z", "modifiedAt": "2022-03-15T00:00:00.000Z", "fetchedAt": "2026-10-23T01:17:50.760Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "The kernel-mode driver in Microsoft Windows OS and Server allows local users to gain privileges via a crafted application.", "sourceTitle": "Microsoft Win32k Memory Corruption Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply updates per vendor instructions.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2022-03-15T00:00:00.000Z", "fetchedAt": "2026-10-23T01:17:50.760Z", "state": "published" } ] }, { "id": "CVE-2016-3309", "aliases": [], "title": "Microsoft Windows：権限の奪取", "summary": "Microsoft Windowsに権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "本来与えられていない権限で、操作される可能性があります。", "product": "Microsoft Windows", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-3309", "label": "CISA KEV（悪用確認）" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-3309", "label": "CISAが示す関連情報" } ], "publishedAt": "2022-03-15T00:00:00.000Z", "modifiedAt": "2022-03-15T00:00:00.000Z", "fetchedAt": "2026-10-23T01:17:50.760Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "A privilege escalation vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode.", "sourceTitle": "Microsoft Windows Kernel Privilege Escalation Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply updates per vendor instructions.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2022-03-15T00:00:00.000Z", "fetchedAt": "2026-10-23T01:17:50.760Z", "state": "published" } ] }, { "id": "CVE-2017-0101", "aliases": [], "title": "Microsoft Windows：権限の奪取", "summary": "Microsoft Windowsに権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "本来与えられていない権限で、操作される可能性があります。", "product": "Microsoft Windows", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-0101", "label": "CISA KEV（悪用確認）" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-0101", "label": "CISAが示す関連情報" } ], "publishedAt": "2022-03-15T00:00:00.000Z", "modifiedAt": "2022-03-15T00:00:00.000Z", "fetchedAt": "2026-10-23T01:17:50.760Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "A privilege escalation vulnerability exists when the Windows Transaction Manager improperly handles objects in memory.", "sourceTitle": "Microsoft Windows Transaction Manager Privilege Escalation Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply updates per vendor instructions.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2022-03-15T00:00:00.000Z", "fetchedAt": "2026-10-23T01:17:50.760Z", "state": "published" } ] }, { "id": "CVE-2018-8120", "aliases": [], "title": "Microsoft Win32k：権限の奪取", "summary": "Microsoft Win32kに権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "本来与えられていない権限で、操作される可能性があります。", "product": "Microsoft Win32k", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-8120", "label": "CISA KEV（悪用確認）" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-8120", "label": "CISAが示す関連情報" } ], "publishedAt": "2022-03-15T00:00:00.000Z", "modifiedAt": "2022-03-15T00:00:00.000Z", "fetchedAt": "2026-10-23T01:17:50.760Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory.", "sourceTitle": "Microsoft Win32k Privilege Escalation Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply updates per vendor instructions.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2022-03-15T00:00:00.000Z", "fetchedAt": "2026-10-23T01:17:50.760Z", "state": "published" } ] }, { "id": "CVE-2019-0543", "aliases": [], "title": "Microsoft Windows：権限の奪取", "summary": "Microsoft Windowsに権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "本来与えられていない権限で、操作される可能性があります。", "product": "Microsoft Windows", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0543", "label": "CISA KEV（悪用確認）" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0543", "label": "CISAが示す関連情報" } ], "publishedAt": "2022-03-15T00:00:00.000Z", "modifiedAt": "2022-03-15T00:00:00.000Z", "fetchedAt": "2026-10-23T01:17:50.760Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "A privilege escalation vulnerability exists when Windows improperly handles authentication requests. An attacker who successfully exploited this vulnerability could run processes in an elevated context.", "sourceTitle": "Microsoft Windows Privilege Escalation Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply updates per vendor instructions.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2022-03-15T00:00:00.000Z", "fetchedAt": "2026-10-23T01:17:50.760Z", "state": "published" } ] }, { "id": "CVE-2019-0841", "aliases": [], "title": "Microsoft Windows：権限の奪取", "summary": "Microsoft Windowsに権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "本来与えられていない権限で、操作される可能性があります。", "product": "Microsoft Windows", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0841", "label": "CISA KEV（悪用確認）" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0841", "label": "CISAが示す関連情報" } ], "publishedAt": "2022-03-15T00:00:00.000Z", "modifiedAt": "2022-03-15T00:00:00.000Z", "fetchedAt": "2026-10-23T01:17:50.760Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context.", "sourceTitle": "Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply updates per vendor instructions.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2022-03-15T00:00:00.000Z", "fetchedAt": "2026-10-23T01:17:50.760Z", "state": "published" } ] }, { "id": "CVE-2019-1064", "aliases": [], "title": "Microsoft Windows：権限の奪取", "summary": "Microsoft Windowsに権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。", "risk": "本来与えられていない権限で、操作される可能性があります。", "product": "Microsoft Windows", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "実際の悪用が確認されています。まず利用中の製品と対象条件を照合してください。", "公式の修正・緩和策を優先して確認し、更新計画を進めてください。", "影響を受ける環境は、管理者とともに不正アクセスの痕跡も確認してください。" ], "references": [ { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-1064", "label": "CISA KEV（悪用確認）" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-1064", "label": "CISAが示す関連情報" } ], "publishedAt": "2022-03-15T00:00:00.000Z", "modifiedAt": "2022-03-15T00:00:00.000Z", "fetchedAt": "2026-10-23T01:17:50.760Z", "exploitStatus": "confirmed", "sources": [ "CISA KEV" ], "originalText": "A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context.", "sourceTitle": "Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability", "summaryMethod": "原文の語句に基づく定型要約。条件や例外は原文を確認してください。", "state": "published", "sourceAction": "Apply updates per vendor instructions.", "sourceSnapshots": [ { "source": "CISA KEV", "modifiedAt": "2022-03-15T00:00:00.000Z", "fetchedAt": "2026-10-23T01:17:50.760Z", "state": "published" } ] } ], "total": 274, "limit": 20, "offset": 160, "filters": { "product": "windows", "type": "all", "q": "", "page": 9 }, "pagination": { "page": 9, "pageSize": 20, "totalPages": 14 }, "sources": [ { "name": "JVN", "status": "ok", "lastSuccess": "2026-10-23T01:17:50.760Z", "lastAttempt": "2026-10-23T01:17:50.760Z", "error": null, "recordCount": 20, "coverage": "JVNの新着・更新RSS。取得した記事を蓄積。JVN iPediaは含みません。", "cursor": null, "freshness": "fresh", "stale": false }, { "name": "PHP Security", "status": "error", "lastSuccess": "2026-10-22T22:18:00.744Z", "lastAttempt": "2026-10-23T01:17:50.760Z", "error": "GitHub API取得上限に到達 (2026-10-23T01:56:27.000Z以降に再取得)", "recordCount": 66, "coverage": "PHP開発元の公開アドバイザリ。公開日が新しい順とは限らない直近100件を取得し蓄積。", "cursor": null, "freshness": "stale", "stale": true }, { "name": "CISA KEV", "status": "ok", "lastSuccess": "2026-10-23T01:17:50.760Z", "lastAttempt": "2026-10-23T01:17:50.760Z", "error": null, "recordCount": 1754, "coverage": "CISAの公式GitHubミラーにある悪用確認済み一覧全件。掲載日はKEV追加日。", "cursor": null, "freshness": "fresh", "stale": false }, { "name": "NVD", "status": "ok", "lastSuccess": "2026-10-23T01:17:50.760Z", "lastAttempt": "2026-10-23T01:17:50.760Z", "error": null, "recordCount": 0, "coverage": "WordPressを含む脆弱性。初回は公開7日分、以降は全製品の変更分からWordPressと保存済みIDを追跡。停止後は最後に確認できた時刻から最大7日幅・500件ずつ再開し、残りは次回取得。 今回: 2026-10-23T00:02:50.236Z 〜 2026-10-23T01:17:50.760Z、全製品の変更 9/9件まで確認、対象0件反映。", "cursor": null, "freshness": "fresh", "stale": false }, { "name": "CVE", "status": "ok", "lastSuccess": "2026-10-23T01:17:50.760Z", "lastAttempt": "2026-10-23T01:17:50.760Z", "error": null, "recordCount": 6, "coverage": "取得したPHP/JVN情報のうち、公開日が新しい最大6件のCVE公式レコードで条件を補足。 PHP公式ニュース経由で候補補足（先頭20項目から2件）。GitHub全件代替ではない。CVE取得は既存候補と合わせ最大6件。", "cursor": null, "freshness": "fresh", "stale": false } ] }