CVE 検索
公開されているすべての CVE とオープンソースのセキュリティアドバイザリ(NVD、OSV、GitHub)を、CVSS、EPSS、実際に悪用されているか(CISA KEV)とともに掲載しています。数時間ごとに更新されます。スキャンでは、検出した技術とこれらを照合します。
公開されているすべての CVE とオープンソースのセキュリティアドバイザリ(NVD、OSV、GitHub)を、CVSS、EPSS、実際に悪用されているか(CISA KEV)とともに掲載しています。数時間ごとに更新されます。スキャンでは、検出した技術とこれらを照合します。
Improper access control in Microsoft Office allows an unauthorized attacker to perform spoofing locally. |
| 12/05/2026 |
| CVE-2026-41101 | 中5.5 | Improper access control in Microsoft Office Word allows an authorized attacker to perform spoofing locally. | 12/05/2026 |
| CVE-2026-40421 | 中4.3 | Files or directories accessible to external parties in Microsoft Office Word allows an unauthorized attacker to disclose information locally. | 12/05/2026 |
| CVE-2026-40367 | 高8.4 | Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 12/05/2026 |
| CVE-2026-40366 | 高8.4 | Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 12/05/2026 |
| CVE-2026-40364 | 高8.4 | Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 12/05/2026 |
| CVE-2026-40361 | 高8.4 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. | 12/05/2026 |
| CVE-2026-35440 | 中5.5 | Files or directories accessible to external parties in Microsoft Office Word allows an unauthorized attacker to disclose information locally. | 12/05/2026 |
| CVE-2026-26133 | 高7.1 | AI command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network. | 16/03/2026 |
| CVE-2026-21511 | 高7.5 | Deserialization of untrusted data in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network. | 10/02/2026 |
| CVE-2026-20948 | 高7.8 | Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 13/01/2026 |
| CVE-2025-62562 | 高7.8 | Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code locally. | 09/12/2025 |
| CVE-2025-62559 | 高7.8 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 09/12/2025 |
| CVE-2025-62558 | 高7.8 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 09/12/2025 |
| CVE-2025-62555 | 高7.0 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 09/12/2025 |
| CVE-2025-59222 | 高7.8 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 14/10/2025 |