CVE 検索
公開されているすべての CVE とオープンソースのセキュリティアドバイザリ（NVD、OSV、GitHub）を、CVSS、EPSS、実際に悪用されているか（CISA KEV）とともに掲載しています。数時間ごとに更新されます。スキャンでは、検出した技術とこれらを照合します。
公開されているすべての CVE とオープンソースのセキュリティアドバイザリ（NVD、OSV、GitHub）を、CVSS、EPSS、実際に悪用されているか（CISA KEV）とともに掲載しています。数時間ごとに更新されます。スキャンでは、検出した技術とこれらを照合します。
| CVE-2025-59501 | 中4.8 | Authentication bypass by spoofing in Microsoft Configuration Manager allows an authorized attacker to perform spoofing over an adjacent network. | 31/10/2025 |
| CVE-2025-59497 | 中4.7 | Time-of-check time-of-use (toctou) race condition in Microsoft Defender for Linux allows an authorized attacker to deny service locally. | 14/10/2025 |
| CVE-2025-59494 | 高7.8 | Improper access control in Azure Monitor Agent allows an authorized attacker to elevate privileges locally. | 14/10/2025 |
| CVE-2025-59288 | 中5.3 | Improper verification of cryptographic signature in Github: Playwright allows an unauthorized attacker to perform spoofing over an adjacent network. | 14/10/2025 |
| CVE-2025-59285 | 高7.0 | Deserialization of untrusted data in Azure Monitor Agent allows an authorized attacker to elevate privileges locally. | 14/10/2025 |
| CVE-2025-59281 | 高7.8 | Improper link resolution before file access ('link following') in XBox Gaming Services allows an authorized attacker to elevate privileges locally. | 14/10/2025 |
| CVE-2025-59250 | 高8.1 | Improper input validation in JDBC Driver for SQL Server allows an unauthorized attacker to perform spoofing over a network. | 14/10/2025 |
| CVE-2025-59249 | 高8.8 | Weak authentication in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network. | 14/10/2025 |
| CVE-2025-59248 | 高7.5 | Improper input validation in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network. | 14/10/2025 |
| CVE-2025-59243 | 高7.8 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 14/10/2025 |
| CVE-2025-59238 | 高7.8 | Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally. | 14/10/2025 |
| CVE-2025-59237 | 高8.8 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 14/10/2025 |
| CVE-2025-59236 | 高7.8 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 14/10/2025 |
| CVE-2025-59235 | 高7.1 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. | 14/10/2025 |
| CVE-2025-59234 | 高7.8 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. | 14/10/2025 |
| CVE-2025-59233 | 高7.8 | Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 14/10/2025 |