slug: microsoft
Explanation
Microsoftは Windows、Office、Azure、Active Directory などを提供する世界最大のソフトウェア企業のひとつです。
企業の業務システムの大半が Microsoft 製品で動いているため、Microsoft製品の脆弱性は常に最重要監視対象です。
毎月第2火曜日 (Patch Tuesday) に脆弱性修正がまとめて配信されます。
Example
PrintNightmare (CVE-2021-34527): Windows印刷スプーラの脆弱性で、世界中の企業ネットワークが一時的に印刷機能を停止せざるを得なくなった。
Related tags
Vulnerabilities tagged with this 8,562
- High 7.9 Vulnerability in Windows Secure Boot CVE-2026-45588
- High 7.8 Vulnerability in Windows SDK CVE-2026-45593
- Medium 6.5 SSRF (Server-Side Request Forgery) in Microsoft Exchange Server SSRF in Microsoft Exchange Server (CVE-2026-45501). Confidential information can be exposed externally. CVE-2026-45501
- Medium 5.0 SSRF (Server-Side Request Forgery) in Microsoft Exchange Server SSRF in Microsoft Exchange Server (CVE-2026-45502). Risk of unauthorized operations or information disclosure. CVE-2026-45502
- High 7.8 Use-After-Free in Microsoft Office Word Vulnerability in Microsoft Office Word (CVE-2026-45486). Successful exploitation can lead to full system takeover. CVE-2026-45486
- High 8.8 Unsafe Deserialization in Microsoft Sharepoint Server Vulnerability in Microsoft Sharepoint Server (CVE-2026-45484). Successful exploitation can lead to full system takeover. CVE-2026-45484
- Low 3.3 Out-of-Bounds Read in Microsoft Sharepoint Server Vulnerability in Microsoft Sharepoint Server (CVE-2026-45485). Risk of unauthorized operations or information disclosure. CVE-2026-45485
- Medium 6.1 Cross-Site Scripting (XSS) in Microsoft Exchange Server Cross-site scripting in Microsoft Exchange Server (CVE-2026-45500). Risk of unauthorized operations or information disclosure. CVE-2026-45500
- High 8.4 Path Traversal in Microsoft Visual Studio Code CVE-2026-45482
- High 7.8 Vulnerability in dotnet-sdk CVE-2026-45490
- Medium 4.6 Cross-Site Scripting (XSS) in Microsoft Sharepoint Server Cross-site scripting in Microsoft Sharepoint Server (CVE-2026-45483). Risk of unauthorized operations or information disclosure. CVE-2026-45483
- High 7.8 Vulnerability in Program Compatibility Assistant Service CVE-2026-45487
- Low 3.3 Vulnerability in Microsoft Office Excel CVE-2026-45459
- High 8.4 Use-After-Free in Microsoft Office Vulnerability in Microsoft Office (CVE-2026-45461). Successful exploitation can lead to full system takeover. CVE-2026-45461
- High 8.4 Vulnerability in Microsoft Office CVE-2026-45463
- Medium 5.4 Cross-Site Scripting (XSS) in Microsoft Sharepoint Server Cross-site scripting in Microsoft Sharepoint Server (CVE-2026-45465). Risk of unauthorized operations or information disclosure. CVE-2026-45465
- Medium 4.6 Cross-Site Scripting (XSS) in Microsoft Sharepoint Server Cross-site scripting in Microsoft Sharepoint Server (CVE-2026-45468). Risk of unauthorized operations or information disclosure. CVE-2026-45468
- Medium 5.4 Cross-Site Scripting (XSS) in Microsoft Sharepoint Server Cross-site scripting in Microsoft Sharepoint Server (CVE-2026-45464). Risk of unauthorized operations or information disclosure. CVE-2026-45464
- Medium 4.6 Cross-Site Scripting (XSS) in Microsoft Sharepoint Server Cross-site scripting in Microsoft Sharepoint Server (CVE-2026-45462). Risk of unauthorized operations or information disclosure. CVE-2026-45462
- Medium 4.6 Cross-Site Scripting (XSS) in Microsoft Sharepoint Server Cross-site scripting in Microsoft Sharepoint Server (CVE-2026-45467). Risk of unauthorized operations or information disclosure. CVE-2026-45467
- High 7.8 Vulnerability in Microsoft Excel CVE-2026-45469
- Low 3.3 Vulnerability in Microsoft Office Word CVE-2026-45466
- High 8.4 Use-After-Free in Microsoft Office Vulnerability in Microsoft Office (CVE-2026-45472). Successful exploitation can lead to full system takeover. CVE-2026-45472
- Medium 4.6 Cross-Site Scripting (XSS) in Microsoft Sharepoint Server Cross-site scripting in Microsoft Sharepoint Server (CVE-2026-45479). Risk of unauthorized operations or information disclosure. CVE-2026-45479
- High 8.4 Use-After-Free in Microsoft Office Vulnerability in Microsoft Office (CVE-2026-45474). Successful exploitation can lead to full system takeover. CVE-2026-45474
- High 8.2 Use-After-Free in Linux MANA Driver Vulnerability in Linux MANA Driver (CVE-2026-45476). Successful exploitation can lead to full system takeover. CVE-2026-45476
- High 7.3 Cross-Site Scripting (XSS) in Microsoft Sharepoint Server Cross-site scripting in Microsoft Sharepoint Server (CVE-2026-45481). Confidential information can be exposed externally. CVE-2026-45481
- High 7.8 Vulnerability in Microsoft Sharepoint Server CVE-2026-45475
- High 7.8 Vulnerability in Microsoft Sharepoint Server CVE-2026-45471
- High 8.4 Vulnerability in Microsoft Sharepoint Server CVE-2026-45456