slug: microsoft
Explanation
Microsoftは Windows、Office、Azure、Active Directory などを提供する世界最大のソフトウェア企業のひとつです。
企業の業務システムの大半が Microsoft 製品で動いているため、Microsoft製品の脆弱性は常に最重要監視対象です。
毎月第2火曜日 (Patch Tuesday) に脆弱性修正がまとめて配信されます。
Example
PrintNightmare (CVE-2021-34527): Windows印刷スプーラの脆弱性で、世界中の企業ネットワークが一時的に印刷機能を停止せざるを得なくなった。
Related tags
Vulnerabilities tagged with this 8,562
- Medium 6.5 Information Disclosure in Windows Shell Vulnerability in Windows Shell (CVE-2026-42907). Confidential information can be exposed externally. CVE-2026-42907
- High 7.0 Use-After-Free in Microsoft Windows 10 1607 Vulnerability in Microsoft Windows 10 1607 (CVE-2026-42911). Successful exploitation can lead to full system takeover. CVE-2026-42911
- High 7.8 Use-After-Free in Windows DWM Core Library Vulnerability in Windows DWM Core Library (CVE-2026-42905). Successful exploitation can lead to full system takeover. CVE-2026-42905
- Medium 5.3 Out-of-Bounds Read in Windows Kerberos Vulnerability in Windows Kerberos (CVE-2026-42914). Risk of unauthorized operations or information disclosure. CVE-2026-42914
- Medium 5.5 Vulnerability in Windows TCP/IP CVE-2026-42915
- High 7.8 Vulnerability in Windows Administrator Protection CVE-2026-42829
- High 8.1 Vulnerability in Microsoft Teams CVE-2026-42835
- High 7.8 Vulnerability in Windows Projected File System Filter Driver CVE-2026-42828
- High 7.0 Vulnerability in Function Discovery Service CVE-2026-42836
- High 7.8 Out-of-Bounds Read in Windows Projected File System Filter Driver Vulnerability in Windows Projected File System Filter Driver (CVE-2026-42837). Successful exploitation can lead to full system takeover. CVE-2026-42837
- High 7.0 Vulnerability in Microsoft Windows DNS CVE-2026-41108
- High 8.4 Cross-Site Scripting (XSS) in Azure Stack Edge Cross-site scripting in Azure Stack Edge (CVE-2026-41098). Successful exploitation can lead to full system takeover. CVE-2026-41098
- High 8.8 Vulnerability in Microsoft Dynamics CVE-2026-40371
- High 7.5 Vulnerability in Visual Studio Code CVE-2026-40376
- High 7.0 Use-After-Free in Microsoft Windows 10 1607 Vulnerability in Microsoft Windows 10 1607 (CVE-2026-34335). Successful exploitation can lead to full system takeover. CVE-2026-34335
- High 7.8 Vulnerability in Microsoft Kinect CVE-2026-41092
- High 7.8 Vulnerability in Windows Universal Disk Format File System Driver CVE-2026-40404
- High 7.8 Vulnerability in Windows Universal Disk Format File System Driver CVE-2026-40409
- Critical 9.8 Unsafe Deserialization in Nuance PowerScribe Vulnerability in Nuance PowerScribe (CVE-2026-26142). Successful exploitation can lead to full system takeover. CVE-2026-26142
- Medium 5.4 Cross-Site Scripting (XSS) in Microsoft Sharepoint Server Cross-site scripting in Microsoft Sharepoint Server (CVE-2026-33113). Risk of unauthorized operations or information disclosure. CVE-2026-33113
- High 8.8 Path Traversal in Microsoft Azure Kubernetes Service CVE-2026-32193
- High 7.8 Vulnerability in Windows Attestation CVE-2026-33828
- High 7.8 Vulnerability in Microsoft PC Manager CVE-2026-50512
- High 7.8 Vulnerability in Microsoft PC Manager CVE-2026-50511
- High 7.8 Out-of-Bounds Write in Adobe macOS CVE-2026-48293
- High 7.8 Out-of-Bounds Write in Adobe macOS CVE-2026-34706
- High 7.8 Vulnerability in Adobe macOS CVE-2026-34707
- High 7.8 Vulnerability in Adobe macOS CVE-2026-34708
- High 7.8 Vulnerability in Adobe macOS CVE-2026-34702
- Medium 5.5 Vulnerability in Adobe macOS CVE-2026-34703