1. CVE-2025-62229｜X server
   • https://nvd.nist.gov/vuln/detail/CVE-2025-62229
   • https://www.zerodayinitiative.com/advisories/ZDI-25-973/
   • use after free。ローカルから権限昇格など。
2. CVE-2025-12428｜Chrome
   • https://chromereleases.googleblog.com/2025/10/stable-channel-update-for-desktop_28.html
   • V8におけるType Confusion。
3. CVE-2025-64131｜Jenkins SAML Plugin
   • https://www.jenkins …

むーりー

1. CVE-2025-59287｜Windows Server Update Service
   • https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-59287
   • https://nvd.nist.gov/vuln/detail/CVE-2025-59287
   • https://www.security-next.com/176292
2. CVE-2025-11621｜Vault
   • https://discuss.hashicorp.com/t/hcsec-2025-30-vault-aws-auth-method-authentication-bypass-through-mishandling-of-cache-entries/76709
   • https://nvd.nist.gov/vuln/detail/CVE-2025-11621
3. CVE-2025-62526｜OpenWrt
   • https://openwrt.org …

658

1. CVE-2025-12036｜Chrome
   • https://chromereleases.googleblog.com/2025/10/stable-channel-update-for-desktop_21.html
   • V8の実装に何かしら問題があったらしい。
2. CVE-2025-6965,CVE-2024-52577,CVE-2025-61757｜Oracle Communications Converged Charging System,Oracle GoldenGate Stream Analytics,Oracle Identity Manager REST WebServices
   • https://www.oracle.com/security-alerts/cpuoct2025.html
   • Oracleの定期パッチから日本で使われてそうでリスク高そうなものをChatGPTにピックしてもらった結果。
3. CVE-2025-22167｜Jira Software Data Center
   • https://jira.atlassian.com/browse/JSWSERVER-26552
   • https://nvd …

411

1. CVE-2025-62168｜Squid
   • https://github.com/squid-cache/squid/security/advisories/GHSA-c8cc-phh7-xmxr
   • https://nvd.nist.gov/vuln/detail/CVE-2025-62168
   • https://www.security-next.com/176014
   • 情報漏洩。エラー処理に問題があり認証情報が漏れる可能性が …

673

1. CVE-2025-41254｜Spring Framework STOMP
   • https://spring.io/security/cve-2025-41254/
   • https://nvd.nist.gov/vuln/detail/CVE-2025-41254
   • CSRF。
2. CVE-2025-61955｜F5OS
   • https://my.f5.com/manage/s/article/K000156767
   • https://nvd.nist.gov/vuln/detail/CVE-2025-61955
   • https://my.f5.com/manage/s/article/K000156572
   • https://my.f5.com/manage/s/article …

745 Patch Tuesday。さよならWindows 10。 AdobeはChatGPTにまとめてもらってみたが果たして。

1. CVE-2025-11756｜Chrome
   • https://chromereleases.googleblog.com/2025/10/stable-channel-update-for-desktop_14.html
   • Use after free。
2. CVE-2025-24990｜Windows Agere Modem Driver
   • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24990
   • https://nvd.nist.gov/vuln/detail/CVE-2025-59230
   • https://www …

日頃の脆弱性情報収集で、一部企業がまとめて公開する複数の脆弱性を良い感じにまとめたい。 MicrosoftとかAppleとかAdobeとかSAPとかFortinetとか。HPとかDellとかIBMは頻度が多いのでいったん除外。 試しにChatGPTに頼んでみた結果を残しておく。今回は …

1. CVE-2025-61884｜Oracle E-Business Suite
   • https://www.oracle.com/security-alerts/alert-cve-2025-61884.html
   • https://nvd.nist.gov/vuln/detail/CVE-2025-61884
   • 機密リソースへのアクセス。
2. CVE-2025-59978｜Junos Space
   • https://supportportal.juniper.net/s/article/2025-10-Security-Bulletin-Junos-Space-Multiple-XSS-vulnerabilities-resolved-in-24-1R4-release
   • https://nvd.nist.gov/vuln/detail/CVE-2025-59978
   • Stored XSS。
3. CVE-2025-59957 …

828

1. CVE-2025-25017｜Kibana
   • https://discuss.elastic.co/t/kibana-8-18-8-8-19-4-9-0-7-9-1-4-security-update-esa-2025-16/382450
   • XSS。他にもいくつか(Stored含む)。
2. CVE-2025-11458｜Chrome
   • https://chromereleases.googleblog.com/2025/10/stable-channel-update-for-desktop.html
   • https://www.security-next.com/175455
   • Heap Buffer Overflow。
3. CVE-2023-6215｜HP Sure Start IFD Protection
   • https://support.hp.com/us-en/document/ish_13064666-13064688-16 …

1k+ 毎日やれと...

1. CVE-2025-61882｜Oracle E-Business Suite
   • https://www.oracle.com/security-alerts/alert-cve-2025-61882.html
   • https://nvd.nist.gov/vuln/detail/CVE-2025-61882
   • https://www.security-next.com/175337
   • RCE。
2. CVE-2025-27237｜Zabbix Agent
   • https://support.zabbix.com/browse/ZBX-27061
   • https://nvd.nist.gov/vuln/detail/CVE-2025-27237
   • DLLインジェクション。Windows限定。OpenSSLの構成ファイルに権限の問題があった模様。
3. CVE-2024-58260 …