slug: microsoft
Explanation
Microsoftは Windows、Office、Azure、Active Directory などを提供する世界最大のソフトウェア企業のひとつです。
企業の業務システムの大半が Microsoft 製品で動いているため、Microsoft製品の脆弱性は常に最重要監視対象です。
毎月第2火曜日 (Patch Tuesday) に脆弱性修正がまとめて配信されます。
Example
PrintNightmare (CVE-2021-34527): Windows印刷スプーラの脆弱性で、世界中の企業ネットワークが一時的に印刷機能を停止せざるを得なくなった。
Related tags
Vulnerabilities tagged with this 8,562
- Medium 6.5 Vulnerability in Azure Monitor Agent CVE-2026-42830
- High 7.8 Vulnerability in Windows DWM Core Library CVE-2026-42896
- Medium 4.4 Vulnerability in M365 Copilot CVE-2026-41100
- Critical 9.8 Vulnerability in Microsoft Windows DNS CVE-2026-41096
- High 7.4 Vulnerability in Microsoft Edge CVE-2026-41107
- Critical 9.8 Vulnerability in Windows Netlogon CVE-2026-41089
- Critical 9.1 Vulnerability in Microsoft Confluence Saml Sso CVE-2026-41103
- High 7.8 Use-After-Free in Data Deduplication Vulnerability in Data Deduplication (CVE-2026-41095). Successful exploitation can lead to full system takeover. CVE-2026-41095
- Medium 6.7 Vulnerability in Windows Secure Boot CVE-2026-41097
- High 8.8 Code Injection in Microsoft Data Formulator CVE-2026-41094
- Medium 6.2 Vulnerability in Microsoft 365 Copilot CVE-2026-41614
- High 7.1 Vulnerability in Microsoft Powerpoint CVE-2026-41102
- High 7.1 Vulnerability in Microsoft Word CVE-2026-41101
- High 7.8 Vulnerability in Azure Connected Machine Agent CVE-2026-40381
- High 8.8 Vulnerability in Microsoft Windows 10 1607 CVE-2026-40403
- Medium 6.5 Information Disclosure in Power Automate Vulnerability in Power Automate (CVE-2026-40374). Confidential information can be exposed externally. CVE-2026-40374
- High 7.8 Vulnerability in Windows Remote Desktop CVE-2026-40398
- High 7.5 Vulnerability in Windows TCP/IP CVE-2026-40405
- High 7.8 Vulnerability in Windows Common Log File System Driver CVE-2026-40407
- High 7.8 Vulnerability in Windows TCP/IP CVE-2026-40399
- Critical 9.3 Information Disclosure in Azure Entra ID Vulnerability in Azure Entra ID (CVE-2026-40379). Confidential information can be exposed externally. CVE-2026-40379
- High 7.8 Use-After-Free in Windows Telephony Service Vulnerability in Windows Telephony Service (CVE-2026-40382). Successful exploitation can lead to full system takeover. CVE-2026-40382
- High 7.8 Vulnerability in Windows Common Log File System Driver CVE-2026-40397
- Medium 6.2 Vulnerability in Volume Manager Extension Driver CVE-2026-40380
- High 7.8 Vulnerability in Windows Cryptographic Services CVE-2026-40377
- Critical 9.3 Use-After-Free in Windows Hyper-V Vulnerability in Windows Hyper-V (CVE-2026-40402). Successful exploitation can lead to full system takeover. CVE-2026-40402
- High 7.1 Vulnerability in Windows TCP/IP CVE-2026-40401
- High 7.5 Use-After-Free in Windows TCP/IP Vulnerability in Windows TCP/IP (CVE-2026-40406). Confidential information can be exposed externally. CVE-2026-40406
- High 7.8 Use-After-Free in Windows Kernel-Mode Drivers Vulnerability in Windows Kernel-Mode Drivers (CVE-2026-40408). Successful exploitation can lead to full system takeover. CVE-2026-40408
- Medium 4.3 Vulnerability in Microsoft Office CVE-2026-40421