CVE 検索
公開されているすべての CVE とオープンソースのセキュリティアドバイザリ（NVD、OSV、GitHub）を、CVSS、EPSS、実際に悪用されているか（CISA KEV）とともに掲載しています。数時間ごとに更新されます。スキャンでは、検出した技術とこれらを照合します。
公開されているすべての CVE とオープンソースのセキュリティアドバイザリ（NVD、OSV、GitHub）を、CVSS、EPSS、実際に悪用されているか（CISA KEV）とともに掲載しています。数時間ごとに更新されます。スキャンでは、検出した技術とこれらを照合します。
| CVE-2026-55029 |
| 高7.8 |
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| 14/07/2026 |
| CVE-2026-55028 | 中5.5 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. | 14/07/2026 |
| CVE-2026-55027 | 中5.5 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. | 14/07/2026 |
| CVE-2026-55026 | 中5.5 | Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to disclose information locally. | 14/07/2026 |
| CVE-2026-55025 | 高7.8 | Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 14/07/2026 |
| CVE-2026-55024 | 高7.8 | Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 14/07/2026 |
| CVE-2026-55023 | 中5.5 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. | 14/07/2026 |
| CVE-2026-55021 | 高8.7 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | 14/07/2026 |
| CVE-2026-55020 | 中5.4 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | 14/07/2026 |
| CVE-2026-55019 | 中5.4 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | 14/07/2026 |
| CVE-2026-55016 | 中5.4 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | 14/07/2026 |
| CVE-2026-54131 | 高7.8 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 14/07/2026 |
| CVE-2026-54124 | 高7.8 | Integer overflow or wraparound in Windows Terminal allows an unauthorized attacker to execute code locally. | 14/07/2026 |
| CVE-2026-54116 | 中6.5 | Access of resource using incompatible type ('type confusion') in SQL Server allows an authorized attacker to disclose information over a network. | 14/07/2026 |
| CVE-2026-50658 | 高7.0 | Time-of-check time-of-use (toctou) race condition in Microsoft Defender allows an authorized attacker to elevate privileges locally. | 14/07/2026 |
| CVE-2026-50657 | 中5.5 | Exposure of private personal information to an unauthorized actor in Microsoft Defender allows an authorized attacker to disclose information locally. | 14/07/2026 |