CVE 検索
公開されているすべての CVE とオープンソースのセキュリティアドバイザリ(NVD、OSV、GitHub)を、CVSS、EPSS、実際に悪用されているか(CISA KEV)とともに掲載しています。数時間ごとに更新されます。スキャンでは、検出した技術とこれらを照合します。
公開されているすべての CVE とオープンソースのセキュリティアドバイザリ(NVD、OSV、GitHub)を、CVSS、EPSS、実際に悪用されているか(CISA KEV)とともに掲載しています。数時間ごとに更新されます。スキャンでは、検出した技術とこれらを照合します。
Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| 09/12/2025 |
| CVE-2025-62560 | 高7.8 | Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 09/12/2025 |
| CVE-2025-62559 | 高7.8 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 09/12/2025 |
| CVE-2025-62558 | 高7.8 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 09/12/2025 |
| CVE-2025-62557 | 高7.8 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. | 09/12/2025 |
| CVE-2025-62556 | 高7.8 | Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 09/12/2025 |
| CVE-2025-62555 | 高7.0 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 09/12/2025 |
| CVE-2025-62554 | 高7.8 | Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally. | 09/12/2025 |
| CVE-2025-62553 | 高7.8 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 09/12/2025 |
| CVE-2025-62552 | 高7.8 | Relative path traversal in Microsoft Office Access allows an unauthorized attacker to execute code locally. | 09/12/2025 |
| CVE-2025-62550 | 高8.8 | Out-of-bounds write in Azure Monitor Agent allows an authorized attacker to execute code over a network. | 09/12/2025 |
| CVE-2025-62223 | 中4.3 | User interface (ui) misrepresentation of critical information in Microsoft Edge for iOS allows an unauthorized attacker to perform spoofing over a network. | 05/12/2025 |
| CVE-2025-64660 | 高8.0 | Improper access control in GitHub Copilot and Visual Studio Code allows an authorized attacker to execute code over a network. | 20/11/2025 |
| CVE-2025-62453 | 中5.0 | Improper validation of generative ai output in GitHub Copilot and Visual Studio Code allows an authorized attacker to bypass a security feature locally. | 11/11/2025 |
| CVE-2025-62449 | 中6.8 | Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code CoPilot Chat Extension allows an authorized attacker to bypass a security feature locally. | 11/11/2025 |
| CVE-2025-62222 | 高8.8 | Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code CoPilot Chat Extension allows an unauthorized attacker to execute code over a network. | 11/11/2025 |