NVD や CVE、ほか複数の脅威フィードを束ね、RCE など高リスクな事象を深く追える一覧です。CVSS と EPSS を組み合わせ、Exploit 参照や PoC の有無から悪用しやすさを追跡します。ベンダー修正や緩和策の文脈とあわせて優先度を決め、対応サイクルを短く保ちつつ重要資産を守る支援をします。
Assigner（CNA／発行元）：[email protected] この条件を外す
| CVE | 説明 | CVSS 最大値 | EPSS（%） | 公開 | 更新 |
|---|---|---|---|---|---|
| CVE-2026-57092 | Use after free in Windows VMSwitch allows an authorized attacker to elevate privileges over a network. | 9.9 | 0.99% | 2026-07-14 | 2026-07-17 |
| CVE-2026-56190 | Use of uninitialized resource in Windows RDP allows an unauthorized attacker to execute code over a network. | 9.8 | 0.93% | 2026-07-14 | 2026-07-15 |
| CVE-2026-56188 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Server Network driver allows an unauthorized attacker to execute code over a network. | 9.8 | 1.00% | 2026-07-14 | 2026-07-14 |
| CVE-2026-56159 | Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network. | 9.8 | 0.85% | 2026-07-14 | 2026-07-15 |
| CVE-2026-55944 | Deserialization of untrusted data in Microsoft Dynamics NAV allows an unauthorized attacker to execute code over a network. | 9.8 | 1.31% | 2026-07-14 | 2026-07-14 |
| CVE-2026-55040 | Weak authentication in Microsoft Office SharePoint allows an unauthorized attacker to bypass a security feature over a network. | 9.1 | 0.68% | 2026-07-14 | 2026-07-15 |
| CVE-2026-55010 | Heap-based buffer overflow in Minecraft Bedrock Dedicated Server allows an unauthorized attacker to execute code over a network. | 9.8 | 0.76% | 2026-07-14 | 2026-07-14 |
| CVE-2026-50518 | Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network. | 9.8 | 7.36% | 2026-07-14 | 2026-07-15 |
| CVE-2026-50447 | Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over a network. | 9.8 | 0.93% | 2026-07-14 | 2026-07-15 |
| CVE-2026-50380 | Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network. | 9.6 | 0.62% | 2026-07-14 | 2026-07-15 |
| CVE-2026-58644 KEV | Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network. | 9.8 | 1.47% | 2026-07-14 | 2026-07-17 |
| CVE-2026-55008 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network. | 9.6 | 0.73% | 2026-07-14 | 2026-07-15 |
| CVE-2026-54990 | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | 9.8 | 0.67% | 2026-07-14 | 2026-07-15 |
| CVE-2026-50522 | Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network. | 9.8 | 20.35% | 2026-07-14 | 2026-07-15 |
| CVE-2026-49798 | Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges locally. | 9.3 | 2.29% | 2026-07-14 | 2026-07-16 |
| CVE-2026-49172 | Heap-based buffer overflow in Windows FTP Service allows an unauthorized attacker to execute code over a network. | 9.8 | 0.67% | 2026-07-14 | 2026-07-14 |
| CVE-2026-48561 | Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to execute code over a network. | 9.6 | 0.75% | 2026-07-14 | 2026-07-16 |
| CVE-2026-42990 | Heap-based buffer overflow in SQL Server ODBC driver allows an unauthorized attacker to execute code over a network. | 9.8 | 0.67% | 2026-07-14 | 2026-07-16 |
| CVE-2026-47646 | Improper neutralization of input during web page generation ('cross-site scripting') in Dynamics 365 Customer Voice allows an unauthorized attacker to perform spoofing over a network. | 9.3 | 0.27% | 2026-07-08 | 2026-07-09 |
| CVE-2026-58289 | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | 9.0 | 0.44% | 2026-07-03 | 2026-07-07 |