slug: microsoft
Explanation
Microsoftは Windows、Office、Azure、Active Directory などを提供する世界最大のソフトウェア企業のひとつです。
企業の業務システムの大半が Microsoft 製品で動いているため、Microsoft製品の脆弱性は常に最重要監視対象です。
毎月第2火曜日 (Patch Tuesday) に脆弱性修正がまとめて配信されます。
Example
PrintNightmare (CVE-2021-34527): Windows印刷スプーラの脆弱性で、世界中の企業ネットワークが一時的に印刷機能を停止せざるを得なくなった。
Related tags
Vulnerabilities tagged with this 8,563
- High 7.8 Vulnerability in Windows Common Log File System Driver CVE-2026-20820
- Medium 6.2 Information Disclosure in Windows Remote Procedure Call Vulnerability in Windows Remote Procedure Call (CVE-2026-20821). Confidential information can be exposed externally. CVE-2026-20821
- High 7.8 Use-After-Free in Microsoft Graphics Component Vulnerability in Microsoft Graphics Component (CVE-2026-20822). Successful exploitation can lead to full system takeover. CVE-2026-20822
- Medium 5.5 Information Disclosure in Windows File Explorer Vulnerability in Windows File Explorer (CVE-2026-20823). Confidential information can be exposed externally. CVE-2026-20823
- Medium 5.5 Vulnerability in Windows Remote Assistance CVE-2026-20824
- Medium 4.4 Vulnerability in Windows Hyper-V CVE-2026-20825
- High 7.8 Vulnerability in Windows Error Reporting CVE-2026-20817
- High 7.0 Vulnerability in Graphics Kernel CVE-2026-20814
- High 7.0 Vulnerability in Capability Access Management Service CVE-2026-20815
- High 7.8 Vulnerability in Windows Installer CVE-2026-20816
- Medium 5.5 Vulnerability in Microsoft Windows 11 23H2 CVE-2026-20819
- High 7.0 Vulnerability in Printer Association Object CVE-2026-20808
- High 7.8 Vulnerability in Windows Kernel Memory CVE-2026-20809
- High 7.8 Vulnerability in Microsoft Windows 11 23H2 CVE-2026-20811
- Medium 6.5 Vulnerability in Microsoft Windows 10 1607 CVE-2026-20812
- High 7.2 Vulnerability in SQL Server CVE-2026-20803
- High 7.7 Vulnerability in Windows Hello CVE-2026-20804
- Exploited Medium 5.5 Information Disclosure in Microsoft Windows Vulnerability in Microsoft Windows (CVE-2026-20805). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited. CVE-2026-20805
- High 7.5 Vulnerability in Microsoft Apex Central CVE-2025-69259
- High 7.5 Vulnerability in Microsoft Apex Central CVE-2025-69260
- Critical 9.8 Vulnerability in Microsoft Apex Central CVE-2025-69258
- Medium 5.5 Vulnerability in Microsoft Edge CVE-2025-62224
- Exploited High Code Injection in Microsoft Office CVE-2009-0556
- Medium 6.1 Cross-Site Scripting (XSS) in Linux Windows Cross-site scripting in Linux Windows (CVE-2025-67709). Risk of unauthorized operations or information disclosure. CVE-2025-67709
- Medium 6.1 Cross-Site Scripting (XSS) in Linux Windows Cross-site scripting in Linux Windows (CVE-2025-67710). Risk of unauthorized operations or information disclosure. CVE-2025-67710
- Medium 6.1 Cross-Site Scripting (XSS) in Linux Windows Cross-site scripting in Linux Windows (CVE-2025-67711). Risk of unauthorized operations or information disclosure. CVE-2025-67711
- Medium 6.1 Cross-Site Scripting (XSS) in Linux Windows Cross-site scripting in Linux Windows (CVE-2025-67704). Risk of unauthorized operations or information disclosure. CVE-2025-67704
- Medium 6.1 Cross-Site Scripting (XSS) in Linux Windows Cross-site scripting in Linux Windows (CVE-2025-67705). Risk of unauthorized operations or information disclosure. CVE-2025-67705
- Medium 5.6 Unrestricted File Upload in Linux Windows Vulnerability in Linux Windows (CVE-2025-67706). Risk of unauthorized operations or information disclosure. CVE-2025-67706
- Medium 5.6 Unrestricted File Upload in Linux Windows Vulnerability in Linux Windows (CVE-2025-67707). Risk of unauthorized operations or information disclosure. CVE-2025-67707