Microsoft 脆弱性

タイムライン

タイプ

製品

Microsoft Windows4979
Microsoft Internet Explorer1234
Microsoft Edge950
Microsoft Office487
Microsoft ChakraCore207

修復

Official Fix9521
Temporary Fix1
Workaround24
Unavailable72
Not Defined382

悪用可能性

High178
Functional86
Proof-of-Concept1610
Unproven3073
Not Defined5053

アクセスベクター

Not Defined0
Physical63
Local1655
Adjacent206
Network8076

認証

Not Defined0
High362
Low4052
None5586

ユーザー操作

Not Defined0
Required4181
None5819

C3BM Index

CVSSv3 Base

≤10
≤20
≤317
≤4185
≤51153
≤61651
≤72440
≤82773
≤91257
≤10524

CVSSv3 Temp

≤10
≤20
≤351
≤4312
≤51504
≤62284
≤72898
≤82040
≤9596
≤10315

VulDB

≤10
≤23
≤3127
≤4517
≤51336
≤61081
≤73313
≤81806
≤91270
≤10547

NVD

≤10
≤20
≤310
≤450
≤5320
≤6778
≤7465
≤82329
≤9553
≤10118

CNA

≤11
≤20
≤34
≤416
≤595
≤6185
≤7392
≤8869
≤9337
≤1053

ベンダー

≤10
≤20
≤317
≤462
≤5860
≤6683
≤7954
≤82438
≤9627
≤10111

Research

≤10
≤20
≤30
≤40
≤50
≤61
≤70
≤81
≤91
≤100

0dayエクスプロイト

<1k9
<2k11
<5k194
<10k695
<25k2373
<50k2936
<100k3182
≥100k600

本日のエクスプロイト

<1k3844
<2k651
<5k1371
<10k1891
<25k2185
<50k48
<100k10
≥100k0

闇ツールの市場規模

🔴 CTI アクティビティ

Affected Products (416): .NET (39), .NET Core (23), .NET Core SDK (1), .NET Education Bundle SDK Install Tool (1), .NET Framework (136), .NET Install Tool for Extension Authors (1), 3D Builder (20), 3D Viewer (10), 4K Wireless Display Adapter (1), 365 Apps for Enterprise (24), @azure-ms-rest-nodeauth (1), ADAL.NET (1), ADAM (1), ASP.NET (10), ASP.NET Core (27), ASP.NET Core MVC (2), ASP.NET MVC (1), ASP .NET SignalR (1), AV1 Video Extension (6), Access (10), Accessibility Insights (1), Accessibility Insights for Web (1), Active Directory Federation Services (1), Anti-cross Site Scripting Library (1), App Installer (1), Application Inspector (1), Arc Cluster Extension (1), Authentication Library (1), Authenticator (1), AutoUpdate for Mac (1), Azure (3), Azure AD (1), Azure AD B2C (1), Azure AD Connect (1), Azure AI Search (1), Azure API Management Service (1), Azure ARC (1), Azure Active Directory (1), Azure Active Directory B2C (1), Azure Active Directory Connect (2), Azure Active Directory Passport (1), Azure App Service (3), Azure App Service on Azure Stack Hub (1), Azure Arc-Enabled Servers (1), Azure Arc-enabled Kubernetes Cluster (1), Azure Arc Jumpstart (1), Azure Automation (3), Azure Automation State Configuration (1), Azure Automation Update Management (2), Azure Bastion (1), Azure Batch (1), Azure CLI (2), Azure Cognitive Search (1), Azure Command-Line Interface (1), Azure Compute Gallery (1), Azure Connected Machine Agent (2), Azure Container Instance (1), Azure Container Registry (1), Azure CycleCloud (4), Azure Data Box Gateway (1), Azure Data Explorer (1), Azure Data Studio (1), Azure DevOps Server (37), Azure Diagnostics (1), Azure Digital Twins Explorer (1), Azure EFLOW (1), Azure File Sync (1), Azure Front Door (1), Azure Function Apps (1), Azure Functions (2), Azure Guest Configuration (1), Azure HDInsights (8), Azure Identity Library for .NET (1), Azure Identity SDK (1), Azure Identity SDK for .NET (1), Azure IoT CLI Extension (1), Azure IoT Edge (2), Azure IoT SDK (1), Azure Kubernetes Service (5), Azure Kubernetes Service Confidential Container (1), Azure Kubernetes Service Confidential Containers (3), Azure Linux Guest Agent (1), Azure Logic Apps (2), Azure Machine Learning (2), Azure Machine Learning SDK (1), Azure Machine Learning Service (1), Azure Migrate (2), Azure Monitor Agent (1), Azure Network Watcher VM Extension (2), Azure On-Premises Data Gateway (1), Azure Open Management Infrastructure (5), Azure Pack Rollup (1), Azure Pipelines Agent (1), Azure Private 5G Core (1), Azure RTOS (6), Azure RTOS GUIX (1), Azure RTOS GUIX Studio (2), Azure RTOS USBX (2), Azure Real Time Operating System GUIX Studio (8), Azure Resource Manager (1), Azure SDK (1), Azure SDK for .NET (1), Azure SDK for Java (1), Azure SSH Keypairs (1), Azure Security Center (2), Azure Sentinel (2), Azure Service Connector (1), Azure Service Fabric (5), Azure Service Fabric Explorer (1), Azure Site Recovery (3), Azure Site Recovery VMWare to Azure (80), Azure Sphere (30), Azure Spring Cloud (1), Azure Stack (1), Azure Stack Edge (2), Azure Stack Hub (2), Azure StorSimple 8000 (1), Azure Storage Blobs Client Library (2), Azure Storage Mover Agent (1), Azure setup-kubectl (1), Bing (1), Bing Search (2), BizTalk ESB Toolkit (1), Bond (1), Bot Framework SDK (2), Business Productivity Servers (1), C SDK for Azure IoT (2), ChakraCore (207), Chakra Core (5), Chess Titan (1), Clarity (1), Clarity Plugin (1), Common Data Model SDK (1), Common Utilities (1), Compiled HTML Help (1), Container Monitoring Solution (2), Data.OData (1), Data Access Components (2), Defender (1), Defender Antimalware Platform (1), Defender Security Intelligence Updates (2), Defender for Endpoint (4), Defender for Endpoint for Windows (1), Defender for IoT (19), Desktop Client for Mac (1), Diagnostics Troubleshooting Wizard (1), Directx (1), Dynamics (1), Dynamics 365 (69), Dynamics 365 BC On Premise (2), Dynamics 365 Business Central (11), Dynamics 365 Commerce (1), Dynamics 365 Customer Engagement (2), Dynamics 365 Field Service (1), Dynamics 365 Unified Service Desk (1), Dynamics 365 for Finance (2), Dynamics 365 for Finance and Operations (6), Dynamics 365 on-premises (1), Dynamics AX (2), Dynamics CRM (4), Dynamics GP (7), Dynamics NAV (8), Edge (950), Endpoint Configuration Manager (1), Endpoint Protection (1), Enhanced Mitigation Experience Toolkit EMET (1), Enterprise Library (1), Entra Jira Single-Sign-On Plugin (1), Excel (182), Excel 2010 SP2 (1), Exchange (14), Exchange Server (150), Expression Design (1), FAST ESP (1), FSLogix (1), File Checksum Integrity Verifier (1), Forefront Endpoint Protection (6), Forefront Security for Exchange Server (1), Forefront Threat Management Gateway (1), Forefront Unified Access Gateway (12), FrontPage (1), GitHub Pull Requests and Issues Extension (1), Groove (1), HEIF Image Extension (2), HEVC Video Extensions (42), HTML Help Workshop (1), HoloLens 1 (1), Host Integration Server (2), Host Integration Server 2020 (1), Hub Device Client SDK for Azure IoT (1), Hyper-V (13), IIS (22), ISA Server (3), Identity Linux Broker (1), Identity Manager (1), Identity Model (1), Infopath (2), Internet Explorer (1234), Internet Security And Acceleration Server (1), Intune Company Portal (1), Intune Management Extension (2), Intune Portal (1), JScript (1), Jarvis (1), Java SDK for Azure IoT (2), Jupyter Extension for Visual Studio Code (2), Kubernetes Tools (1), Log Analytics Agent (2), Lync (21), Lync Server (12), Lync for Mac (1), MPEG-2 Video Extension (1), MSRT (1), Mail Client (1), Malicious Software Removal Tool (2), Malware Protection Engine (15), Maven for Java Extension (1), Media Format Runtime (1), Media Player (2), Microsoft Dynamics 365 (1), Microsoft Malware Protection Platform (1), Microsoft OLE DB Provider for DB2 V7 (1), Money (1), Mono (1), Mono Framework (1), NET Framework (1), Network Watcher Agent Virtual Machine Extension for Linux (1), Nokia Asha 501 (1), NuGet (3), ODBC Driver (20), ODBC Driver for SQL Server (5), OLE DB (1), OLE DB Driver (29), OLE DB Driver for SQL Server (1), Office (487), Office 365 (4), Office 365 ProPlus (1), Office App (1), Office Compability Pack (1), Office Compatibility Pack (11), Office Converter Pack (1), Office Excel (4), Office LTSC (4), Office Online Server (11), Office Picture Manager (1), Office SharePoint Server (1), Office Web Apps (10), Office Web Apps Server (8), Office Word Viewer (2), Office for Mac 2011 (1), On-Prem Data Gateway (1), On-Premises Data Gateway (1), OneDrive (13), OneNote (7), Open Enclave SDK (3), Open Management Infrastructure (2), Open XML File Format Converter (1), Operations (2), Operations Management Suite Agent (1), Outlook (58), Outlook.com (1), Outlook Express (1), Outlook Web Access (1), Outlook Web App (1), Package Manager Configurations (1), Paint 3D (6), PandocUpload (1), Passport-SAML (1), Photos (1), Power Apps (2), Power Automate (1), Power BI (1), PowerBI-Client JS SDK (1), Power BI Report Server (6), Power Platform (2), PowerPoint (52), PowerPoint Viewer (1), PowerShell (2), PowerShell Core (1), PowerShell Editor Services (1), PowerShell Extension for Visual Studio Code (1), PowerShellGet (1), Powerpoint (1), Print 3D (1), Printer Metadata Troubleshooter Tool (1), Project (5), Project Server (3), Publisher (16), Publisher 2003 (9), Python Extension for Visual Studio Code (1), Quantum Development Kit for Visual Studio Code (1), RMS Sharing for Mac (1), RTOS GUIX (3), Raw Image Extension (14), Remote Desktop (1), Remote Desktop Connection Client (1), Remote Desktop Connection Manager (1), Remote Desktop For Mac (1), Research JavaScript Cryptography Library (2), Rome SDK (2), SCS Add-on (1), SQL Server (79), SQL Server 2017 Reporting Services (1), SQL Server 2019 Reporting Services (1), SQL Server Backend for Django (1), SQL Server Management Studio (6), Security Essentials (9), Security Essentials Antimalware Engine (2), Send Customer Voice survey from Dynamics 365 (1), Send Customer Voice survey from Dynamics 365 App (1), Service Fabric (1), SharePoint (64), SharePoint Enterprise Server (132), SharePoint Foundation (62), SharePoint Server (205), SharePoint Services (1), Sharepoint (6), Silverlight (17), Skype (15), Skype Extension (1), Skype for Android (1), Skype for Business (15), Skype for Business Server (14), Skype for Consumer (1), Snip & Sketch (1), Snipping Tool (1), Software for Open Networking in the Cloud (1), Sterling Connect Direct (1), Surface Hub (1), Surface Pro (1), SysInternals Sysmon (1), Sysinternals Process Monitor (1), Sysinternals PsExec (1), System Center (1), System Center Endpoint Protection (8), System Center Operations Manager (10), System Center Virtual Machine Manager (1), Systems Management Server (1), Team Foundation Server (23), Teams (10), Teams Admin Center (1), Tech Companion (1), VBScript (1), VISIO (1), VP9 Video Extensions (7), Virtual PC (2), Virtual Server (1), Visio (23), Visio Viewer (6), Visual C++ (1), Visual C++ Redistributable (1), Visual Studio (142), Visual Studio Code (45), Visual Studio Code Live Share Extension (1), Visual Studio Code Remote Containers Extension (1), Visual Studio Code WSL Extension (1), Visual Studio Community (1), Visual Studio Team Foundation Server (1), WMI Administrative Tools (1), Web Media Extensions (1), WebP Image Extension (1), Whale Communication IAG (1), Windows (4979), Windows 10 Update Assistant (2), Windows Admin Center (2), Windows Azure Sdk (1), Windows Defender (9), Windows Defender Antimalware Platform (2), Windows Embedded (1), Windows Essentials (1), Windows Host Compute (1), Windows Live Messenger (3), Windows Live Movie Maker (1), Windows Live OneCare (1), Windows Media Center (2), Windows Media Center TV Pack (1), Windows Media Encoder (1), Windows Media Format Runtime (1), Windows Media Player (11), Windows Mobile (1), Windows Modern Mail (1), Windows Movie Maker (2), Windows Phone (2), Windows Search (1), Windows Server (1), Windows Subsystem for Linux (1), Windows Sysmon (1), Windows Upgrade Assistant (1), Wireless Desktop 2000 (1), Wireless Display Adapter V2 (1), Wireless Keyboard (2), Word (99), Word 2003 (1), WordPad (1), Word Viewer (3), Works (2), XML Core Services (7), Xamarin.Forms (1), Xbox Gaming Services (1), Xbox Live (1), Xerte (1), YARP (2), Yammer (1), YourPhone App (1), az functionapp config appsettings delete (1), az functionapp config appsettings set (1), az logicapp config appsettings delete (1), az logicapp config appsettings set (1), az staticwebapp appsettings delete (1), az staticwebapp appsettings set (1), az webapp config appsettings delete (1), az webapp config appsettings set (1), msgraph-sdk-php (1), msgraph-sdk-php-core (1), typed-rest-client (1), workspace-tools (1)

Link to Vendor Website: https://www.microsoft.com/

公開済みBaseTemp脆弱性Prod修復EPSSCTICVE
2024年04月18日5.45.3Microsoft Edge 情報の漏洩Web BrowserNot DefinedOfficial Fix0.000000.72CVE-2024-29987
2024年04月18日4.84.7Microsoft Edge 情報の漏洩Web BrowserNot DefinedOfficial Fix0.000000.67CVE-2024-29986
2024年04月16日3.53.4Microsoft Azure Site Recovery ASR Service 情報の漏洩Cloud SoftwareNot DefinedOfficial Fix0.000000.04
2024年04月09日8.87.7Microsoft Azure CycleCloud 特権昇格Cloud SoftwareUnprovenOfficial Fix0.000430.04CVE-2024-29993
2024年04月09日4.44.2Microsoft Azure Identity Library for .NET 情報の漏洩Cloud SoftwareNot DefinedOfficial Fix0.000430.00CVE-2024-29992
2024年04月09日9.08.1Microsoft Azure Kubernetes Service Confidential Containers 特権昇格Cloud SoftwareProof-of-ConceptOfficial Fix0.000430.04CVE-2024-29990
2024年04月09日7.36.4Microsoft Azure Monitor Agent 特権昇格Cloud SoftwareUnprovenOfficial Fix0.000430.04CVE-2024-29989
2024年04月09日8.88.2Microsoft Windows SmartScreen Prompt 特権昇格Operating SystemFunctionalOfficial Fix0.000650.17CVE-2024-29988
2024年04月09日8.87.7Microsoft OLE DB Driver/SQL Server メモリ破損Database SoftwareUnprovenOfficial Fix0.000430.05CVE-2024-29985
2024年04月09日8.87.7Microsoft OLE DB Driver/SQL Server メモリ破損Database SoftwareUnprovenOfficial Fix0.000430.00CVE-2024-29984
2024年04月09日8.87.7Microsoft OLE DB Driver/SQL Server メモリ破損Database SoftwareUnprovenOfficial Fix0.000430.04CVE-2024-29983
2024年04月09日8.87.7Microsoft OLE DB Driver/SQL Server メモリ破損Database SoftwareUnprovenOfficial Fix0.000430.06CVE-2024-29982
2024年04月09日7.26.3Microsoft Windows Distributed File System 競合状態Operating SystemUnprovenOfficial Fix0.000430.06CVE-2024-29066
2024年04月09日5.85.1Microsoft Windows Hyper-V サービス拒否Operating SystemUnprovenOfficial Fix0.000430.04CVE-2024-29064
2024年04月09日6.35.7Microsoft Azure AI Search 弱い認証Cloud SoftwareProof-of-ConceptOfficial Fix0.000430.04CVE-2024-29063
2024年04月09日7.16.2Microsoft Windows Secure Boot 競合状態Operating SystemUnprovenOfficial Fix0.000430.03CVE-2024-29062
2024年04月09日7.86.8Microsoft Windows Secure Boot メモリ破損Operating SystemUnprovenOfficial Fix0.000430.04CVE-2024-29061
2024年04月09日4.33.8Microsoft Windows Authentication 弱い暗号化Operating SystemUnprovenOfficial Fix0.000430.00CVE-2024-29056
2024年04月09日7.26.3Microsoft Defender for IoT 特権昇格未知UnprovenOfficial Fix0.000430.04CVE-2024-29055
2024年04月09日7.26.3Microsoft Defender for IoT 特権昇格未知UnprovenOfficial Fix0.000430.00CVE-2024-29054
2024年04月09日8.37.2Microsoft Defender for IoT Local Privilege Escalation未知UnprovenOfficial Fix0.000430.06CVE-2024-29053
2024年04月09日7.86.8Microsoft Windows Storage 特権昇格Operating SystemUnprovenOfficial Fix0.000430.04CVE-2024-29052
2024年04月09日8.17.0Microsoft Windows Cryptographic Services Local Privilege EscalationOperating SystemUnprovenOfficial Fix0.000430.02CVE-2024-29050
2024年04月09日8.87.7Microsoft OLE DB Driver/SQL Server メモリ破損Database SoftwareUnprovenOfficial Fix0.000430.03CVE-2024-29048
2024年04月09日8.87.7Microsoft SQL Server メモリ破損Database SoftwareUnprovenOfficial Fix0.000430.00CVE-2024-29047
2024年04月09日8.87.7Microsoft OLE DB Driver/SQL Server メモリ破損Database SoftwareUnprovenOfficial Fix0.000430.06CVE-2024-29046
2024年04月09日7.56.5Microsoft OLE DB Driver/SQL Server メモリ破損Database SoftwareUnprovenOfficial Fix0.000430.05CVE-2024-29045
2024年04月09日8.87.7Microsoft OLE DB Driver/SQL Server メモリ破損Database SoftwareUnprovenOfficial Fix0.000430.04CVE-2024-29044
2024年04月09日8.87.7Microsoft ODBC Driver/SQL Server メモリ破損Database SoftwareUnprovenOfficial Fix0.000430.00CVE-2024-29043
2024年04月09日8.87.7Microsoft OLE DB Driver/SQL Server メモリ破損Database SoftwareUnprovenOfficial Fix0.000430.40CVE-2024-28945
2024年04月09日8.87.7Microsoft OLE DB Driver/SQL Server Remote Code ExecutionDatabase SoftwareUnprovenOfficial Fix0.000430.06CVE-2024-28944
2024年04月09日8.87.7Microsoft ODBC Driver/SQL Server メモリ破損Database SoftwareUnprovenOfficial Fix0.000430.04CVE-2024-28943
2024年04月09日8.87.7Microsoft OLE DB Driver/SQL Server メモリ破損Database SoftwareUnprovenOfficial Fix0.000430.00CVE-2024-28942
2024年04月09日8.87.7Microsoft ODBC Driver/SQL Server メモリ破損Database SoftwareUnprovenOfficial Fix0.000430.03CVE-2024-28941
2024年04月09日8.87.7Microsoft OLE DB Driver/SQL Server メモリ破損Database SoftwareUnprovenOfficial Fix0.000430.06CVE-2024-28940
2024年04月09日6.55.7Microsoft OLE DB Driver/SQL Server 情報の漏洩Database SoftwareUnprovenOfficial Fix0.000430.50CVE-2024-28939
2024年04月09日8.87.7Microsoft ODBC Driver/SQL Server/Visual Studio 情報の漏洩Programming Tool SoftwareUnprovenOfficial Fix0.000430.04CVE-2024-28938
2024年04月09日8.87.7Microsoft ODBC Driver/SQL Server/Visual Studio メモリ破損Programming Tool SoftwareUnprovenOfficial Fix0.000430.00CVE-2024-28937
2024年04月09日8.87.7Microsoft ODBC Driver/SQL Server/Visual Studio メモリ破損Programming Tool SoftwareUnprovenOfficial Fix0.000430.07CVE-2024-28936
2024年04月09日8.87.7Microsoft ODBC Driver/SQL Server/Visual Studio メモリ破損Programming Tool SoftwareUnprovenOfficial Fix0.000430.03CVE-2024-28935
2024年04月09日8.87.7Microsoft ODBC Driver/SQL Server/Visual Studio メモリ破損Programming Tool SoftwareUnprovenOfficial Fix0.000430.00CVE-2024-28934
2024年04月09日8.87.7Microsoft ODBC Driver/SQL Server/Visual Studio メモリ破損Programming Tool SoftwareUnprovenOfficial Fix0.000430.06CVE-2024-28933
2024年04月09日8.87.7Microsoft ODBC Driver/SQL Server/Visual Studio メモリ破損Programming Tool SoftwareUnprovenOfficial Fix0.000430.04CVE-2024-28932
2024年04月09日8.87.7Microsoft ODBC Driver/SQL Server/Visual Studio メモリ破損Programming Tool SoftwareUnprovenOfficial Fix0.000430.00CVE-2024-28931
2024年04月09日8.87.7Microsoft ODBC Driver/SQL Server/Visual Studio メモリ破損Programming Tool SoftwareUnprovenOfficial Fix0.000430.00CVE-2024-28930
2024年04月09日8.87.7Microsoft ODBC Driver/SQL Server/Visual Studio メモリ破損Programming Tool SoftwareUnprovenOfficial Fix0.000430.08CVE-2024-28929
2024年04月09日8.87.7Microsoft OLE DB Driver/SQL Server メモリ破損Database SoftwareUnprovenOfficial Fix0.000430.00CVE-2024-28927
2024年04月09日8.87.7Microsoft OLE DB Driver/SQL Server メモリ破損Database SoftwareUnprovenOfficial Fix0.000430.00CVE-2024-28926
2024年04月09日8.07.0Microsoft Windows Secure Boot メモリ破損Operating SystemUnprovenOfficial Fix0.000430.03CVE-2024-28925
2024年04月09日6.75.8Microsoft Windows Secure Boot メモリ破損Operating SystemUnprovenOfficial Fix0.000430.00CVE-2024-28924

9950 非表示のエントリあり

Do you want to use VulDB in your project?

Use the official API to access entries easily!