新着セキュリティニュース バックナンバー

CVE-2026-70338

Threat Intelligence NVD CVE 危険度: high 緊急度: high

Improper control of generation of code ('code injection') in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally.

CVE-2026-70337

Threat Intelligence NVD CVE 危険度: high 緊急度: high

Relative path traversal in Microsoft PowerShell Core allows an unauthorized attacker to execute code over a network.

CVE-2026-70336

Threat Intelligence NVD CVE 危険度: high 緊急度: high

Improper control of generation of code ('code injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network.

CVE-2026-70335

Threat Intelligence NVD CVE 危険度: high 緊急度: high

Improper neutralization of special elements used in an os command ('os command injection') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to elevate privileges locally.

CVE-2026-70330

Threat Intelligence NVD CVE 危険度: medium 緊急度: medium

Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally.

CVE-2026-70329

Threat Intelligence NVD CVE 危険度: high 緊急度: high

Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

CVE-2026-70328

Threat Intelligence NVD CVE 危険度: medium 緊急度: medium

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

CVE-2026-70327

Threat Intelligence NVD CVE 危険度: medium 緊急度: medium

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

CVE-2026-70326

Threat Intelligence NVD CVE 危険度: high 緊急度: high

Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

CVE-2026-70325

Threat Intelligence NVD CVE 危険度: medium 緊急度: medium

Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.

CVE-2026-70324

Threat Intelligence NVD CVE 危険度: high 緊急度: high

Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

CVE-2026-70323

Threat Intelligence NVD CVE 危険度: medium 緊急度: medium

Improper input validation in Microsoft Office allows an unauthorized attacker to disclose information locally.

CVE-2026-70322

Threat Intelligence NVD CVE 危険度: medium 緊急度: medium

Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.

CVE-2026-70321

Threat Intelligence NVD CVE 危険度: high 緊急度: high

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVE-2026-70320

Threat Intelligence NVD CVE 危険度: medium 緊急度: medium

Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.

CVE-2026-70319

Threat Intelligence NVD CVE 危険度: medium 緊急度: medium

Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

CVE-2026-70318

Threat Intelligence NVD CVE 危険度: medium 緊急度: medium

Improper input validation in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

CVE-2026-70317

Threat Intelligence NVD CVE 危険度: medium 緊急度: medium

Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information locally.

CVE-2026-70316

Threat Intelligence NVD CVE 危険度: medium 緊急度: medium

Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.

CVE-2026-70315

Threat Intelligence NVD CVE 危険度: medium 緊急度: medium

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

CVE-2026-70314

Threat Intelligence NVD CVE 危険度: medium 緊急度: medium

Improper input validation in Microsoft Office allows an unauthorized attacker to disclose information locally.

CVE-2026-70313

Threat Intelligence NVD CVE 危険度: high 緊急度: high

Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.

CVE-2026-70312

Threat Intelligence NVD CVE 危険度: medium 緊急度: medium

Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.

CVE-2026-70311

Threat Intelligence NVD CVE 危険度: high 緊急度: high

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVE-2026-70310

Threat Intelligence NVD CVE 危険度: medium 緊急度: medium

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

CVE-2026-70307

Threat Intelligence NVD CVE 危険度: high 緊急度: high

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

CVE-2026-70306

Threat Intelligence NVD CVE 危険度: high 緊急度: high

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-70304

Threat Intelligence NVD CVE 危険度: medium 緊急度: medium

Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally.

CVE-2026-70130

Threat Intelligence NVD CVE 危険度: high 緊急度: high

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2026-69320

Threat Intelligence NVD CVE 危険度: high 緊急度: high

Improper neutralization of special elements used in an os command ('os command injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network.

CVE-2026-69306

Threat Intelligence NVD CVE 危険度: high 緊急度: high

Not failing securely ('failing open') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-69278

Threat Intelligence NVD CVE 危険度: high 緊急度: high

Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

CVE-2026-69223

Threat Intelligence NVD CVE 危険度: medium 緊急度: medium

Apache Allura's webhooks are vulnerable to Server-Side Request Forgery (SSRF). This issue affects Apache Allura: before 1.19.1. Users are recommended to upgrade to version 1.19.1, which fixes the issue.

• security@apache.org
• af854a3a-2127-422b-91ae-364da2661108

CVE-2026-68821

Threat Intelligence NVD CVE 危険度: high 緊急度: high

Improper privilege management in Windows Package Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-68820

Threat Intelligence NVD CVE 危険度: high 緊急度: high

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

• 134c704f-9b21-4f2e-91b3-4a467353bcc0

CVE-2026-68819

Threat Intelligence NVD CVE 危険度: medium 緊急度: medium

Buffer over-read in Windows Network File System allows an unauthorized attacker to deny service over a network.

CVE-2026-68817

Threat Intelligence NVD CVE 危険度: high 緊急度: high

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-68816

Threat Intelligence NVD CVE 危険度: high 緊急度: high

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-68815

Threat Intelligence NVD CVE 危険度: high 緊急度: high

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-68814

Threat Intelligence NVD CVE 危険度: high 緊急度: high

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-68813

Threat Intelligence NVD CVE 危険度: medium 緊急度: medium

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

CVE-2026-68812

Threat Intelligence NVD CVE 危険度: high 緊急度: high

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-68811

Threat Intelligence NVD CVE 危険度: high 緊急度: high

Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-68810

Threat Intelligence NVD CVE 危険度: high 緊急度: high

Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-68809

Threat Intelligence NVD CVE 危険度: medium 緊急度: medium

Incomplete cleanup in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.

CVE-2026-68808

Threat Intelligence NVD CVE 危険度: medium 緊急度: medium

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

CVE-2026-68807

Threat Intelligence NVD CVE 危険度: high 緊急度: high

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-68806

Threat Intelligence NVD CVE 危険度: high 緊急度: high

Out-of-bounds write in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-68805

Threat Intelligence NVD CVE 危険度: high 緊急度: high

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-68804

Threat Intelligence NVD CVE 危険度: high 緊急度: high

Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code locally.