slug: microsoft
Explanation
Microsoftは Windows、Office、Azure、Active Directory などを提供する世界最大のソフトウェア企業のひとつです。
企業の業務システムの大半が Microsoft 製品で動いているため、Microsoft製品の脆弱性は常に最重要監視対象です。
毎月第2火曜日 (Patch Tuesday) に脆弱性修正がまとめて配信されます。
Example
PrintNightmare (CVE-2021-34527): Windows印刷スプーラの脆弱性で、世界中の企業ネットワークが一時的に印刷機能を停止せざるを得なくなった。
Related tags
Vulnerabilities tagged with this 8,562
- High 7.8 Command Injection in Apple macOS CVE-2026-35558
- Medium 6.5 Out-of-Bounds Write in Apple macOS CVE-2026-35559
- Critical 10.0 SSRF (Server-Side Request Forgery) in Microsoft Bing SSRF in Microsoft Bing (CVE-2026-32186). Successful exploitation can lead to full system takeover. CVE-2026-32186
- Critical 9.6 Path Traversal in Apple macOS CVE-2026-28373
- High 7.3 Vulnerability in Microsoft Windows CVE-2025-7024
- Critical 10.0 Vulnerability in Microsoft Azure Kubernetes Service CVE-2026-33105
- Critical 10.0 SSRF (Server-Side Request Forgery) in Azure Databricks SSRF in Azure Databricks (CVE-2026-33107). Successful exploitation can lead to full system takeover. CVE-2026-33107
- Critical 9.6 SSRF (Server-Side Request Forgery) in Azure Custom Locations Resource Provider SSRF in Azure Custom Locations Resource Provider (CVE-2026-26135). Confidential information can be exposed externally. CVE-2026-26135
- High 8.6 Authentication Bypass in Azure SRE Agent CVE-2026-32173
- Critical 9.1 Vulnerability in Azure MCP Server CVE-2026-32211
- Critical 10.0 Vulnerability in Azure AI Foundry CVE-2026-32213
- Medium 5.9 Vulnerability in Ibm Windows CVE-2025-13916
- High 8.8 Vulnerability in Google Chrome CVE-2026-5272
- Medium 6.3 Use-After-Free in Google Chrome Vulnerability in Google Chrome (CVE-2026-5273). Risk of unauthorized operations or information disclosure. CVE-2026-5273
- Exploited High 8.8 Use-After-Free in Google Dawn Vulnerability in Google Dawn (CVE-2026-5281). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited. CVE-2026-5281
- Medium 6.5 XXE (XML External Entity) in XML Notepad Vulnerability in XML Notepad (CVE-2026-34401). Confidential information can be exposed externally. CVE-2026-34401
- High 7.8 Vulnerability in Microsoft Windows CVE-2026-2123
- High 7.8 Vulnerability in Microsoft Windows CVE-2026-22561
- High 7.8 Use-After-Free in Adobe macOS Vulnerability in Adobe macOS (CVE-2026-27309). Successful exploitation can lead to full system takeover. CVE-2026-27309
- High 8.8 Vulnerability in Google Chrome CVE-2026-4447
- Exploited High Unsafe Deserialization in Microsoft SharePoint Vulnerability in Microsoft SharePoint (CVE-2026-20963). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited. CVE-2026-20963
- Medium 5.5 Out-of-Bounds Read in Adobe Windows Vulnerability in Adobe Windows (CVE-2026-27270). Confidential information can be exposed externally. CVE-2026-27270
- High 7.8 Vulnerability in Adobe Windows CVE-2026-27271
- High 7.8 Out-of-Bounds Write in Adobe Windows CVE-2026-27272
- High 8.6 Vulnerability in Adobe Windows CVE-2026-21333
- High 7.8 Out-of-Bounds Write in Adobe Windows CVE-2026-21362
- High 7.8 Vulnerability in Adobe Windows CVE-2026-27267
- Medium 5.5 Out-of-Bounds Read in Adobe Windows Vulnerability in Adobe Windows (CVE-2026-27268). Confidential information can be exposed externally. CVE-2026-27268
- Medium 5.5 Vulnerability in Adobe macOS CVE-2026-27221
- High 7.8 Use-After-Free in Adobe macOS Vulnerability in Adobe macOS (CVE-2026-27278). Successful exploitation can lead to full system takeover. CVE-2026-27278