最近のKEV情報

KEVとは

KEV（Known Exploited Vulnerabilities）とは、CISA（Cybersecurity and Infrastructure Security Agency）が公開している、既に悪用が確認されている脆弱性のリストです。組織はこのリストを参考にして、重要なセキュリティ対策を優先的に実施することが推奨されています。

本サイトは最新のKEV情報を提供し、過去のKEVファイルとの比較やCVEの詳細情報も確認できるようにすることを目標に作成しています。

30日以内にKEVに登録されたCVE

• CVE-2023-49105:
  ownCloud Improper Authentication Vulnerability
• CVE-2026-53362:
  Linux Kernel Unspecified Vulnerability
• CVE-2026-66384:
  JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability
• CVE-2021-23758:
  Ajax.NET Professional Deserialization of Untrusted Data Vulnerability
• CVE-2015-3246:
  Red Hat Libuser Race Condition Vulnerability
• CVE-2015-5287:
  Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability
• CVE-2022-0995:
  Linux Kernel Out-of-Bounds Write Vulnerability
• CVE-2026-8452:
  Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
• CVE-2019-1068:
  Microsoft SQL Server Remote Code Execution Vulnerability
• CVE-2026-60004:
  Gitea Code Injection Vulnerability
• CVE-2026-21962:
  Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability
• CVE-2026-69836:
  Microsoft Entra ID Deserialization of Untrusted Data Vulnerability
• CVE-2026-73570:
  Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability
• CVE-2026-72530:
  TrueConf Server Code Injection Vulnerability
• CVE-2026-72529:
  TrueConf Server Missing Authentication for Critical Function Vulnerability
• CVE-2026-64849:
  MLflow Server-Side Request Forgery Vulnerability
• CVE-2026-33824:
  Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability
• CVE-2026-59310:
  Broadcom VMware vCenter Path Traversal Vulnerability
• CVE-2026-55040:
  Microsoft SharePoint Weak Authentication Vulnerability
• CVE-2026-65400:
  Apple macOS Improper Authentication Vulnerability
• CVE-2025-62593:
  Ray-Project Ray Code Injection Vulnerability
• CVE-2026-20349:
  Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability
• CVE-2026-68820:
  Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability
• CVE-2026-72898:
  Metabase SQL Injection Vulnerability
• CVE-2026-8037:
  Progress LoadMaster Command Injection Vulnerability
• CVE-2026-63077:
  JetBrains TeamCity Deserialization of Untrusted Data Vulnerability
• CVE-2026-18556:
  N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability
• CVE-2026-34486:
  Apache Tomcat Missing Encryption of Sensitive Data Vulnerability
• CVE-2026-9198:
  IBM Langflow Code Injection Vulnerability
• CVE-2026-18577:
  N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability

リンク