CVE 検索
公開されているすべての CVE とオープンソースのセキュリティアドバイザリ(NVD、OSV、GitHub)を、CVSS、EPSS、実際に悪用されているか(CISA KEV)とともに掲載しています。数時間ごとに更新されます。スキャンでは、検出した技術とこれらを照合します。
公開されているすべての CVE とオープンソースのセキュリティアドバイザリ(NVD、OSV、GitHub)を、CVSS、EPSS、実際に悪用されているか(CISA KEV)とともに掲載しています。数時間ごとに更新されます。スキャンでは、検出した技術とこれらを照合します。
| CVE-2025-30381 |
| 高7.8 |
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| 13/05/2025 |
| CVE-2025-30379 | 高7.8 | Release of invalid pointer or reference in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 13/05/2025 |
| CVE-2025-30378 | 高7.0 | Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally. | 13/05/2025 |
| CVE-2025-30377 | 高7.8 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. | 13/05/2025 |
| CVE-2025-30376 | 高7.8 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 13/05/2025 |
| CVE-2025-30375 | 高7.8 | Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 13/05/2025 |
| CVE-2025-29979 | 高7.8 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 13/05/2025 |
| CVE-2025-29978 | 高7.8 | Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally. | 13/05/2025 |
| CVE-2025-29977 | 高7.8 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 13/05/2025 |
| CVE-2025-29976 | 高7.8 | Improper privilege management in Microsoft Office SharePoint allows an authorized attacker to elevate privileges locally. | 13/05/2025 |
| CVE-2025-29975 | 高7.8 | Improper link resolution before file access ('link following') in Microsoft PC Manager allows an authorized attacker to elevate privileges locally. | 13/05/2025 |
| CVE-2025-29973 | 高7.0 | Improper access control in Azure File Sync allows an authorized attacker to elevate privileges locally. | 13/05/2025 |
| CVE-2025-29966 | 高8.8 | Heap-based buffer overflow in Windows Remote Desktop allows an unauthorized attacker to execute code over a network. | 13/05/2025 |
| CVE-2025-29826 | 高8.8 | Improper handling of insufficient permissions or privileges in Microsoft Dataverse allows an authorized attacker to elevate privileges over a network. | 13/05/2025 |
| CVE-2025-27488 | 中6.7 | Use of hard-coded credentials in Windows Hardware Lab Kit allows an authorized attacker to elevate privileges locally. | 13/05/2025 |
| CVE-2025-26684 | 中6.7 | External control of file name or path in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally. | 13/05/2025 |