Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 29, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1201 7.8 重要
Local 		マイクロソフト Microsoft Defender Antimalware Platform Microsoft Defender の特権の昇格の脆弱性 CWE-1220
アクセス制御の不十分な粒度 		CVE-2026-33825 2026-04-21 10:42 2026-04-14 Show GitHub Exploit DB Packet Storm
1202 7.8 重要
Local 		linkingvision RapidVMS linkingvisionのRapidVMSにおけるバッファエラーの脆弱性 CWE-119
バッファエラー 		CVE-2026-33847 2026-04-21 10:42 2026-03-24 Show GitHub Exploit DB Packet Storm
1203 8.8 重要
Network 		linkingvision RapidVMS linkingvisionのRapidVMSにおけるバッファエラーの脆弱性 CWE-119
バッファエラー 		CVE-2026-33848 2026-04-21 10:42 2026-03-24 Show GitHub Exploit DB Packet Storm
1204 8.8 重要
Network 		linkingvision RapidVMS linkingvisionのRapidVMSにおけるバッファエラーの脆弱性 CWE-119
バッファエラー 		CVE-2026-33849 2026-04-21 10:42 2026-03-24 Show GitHub Exploit DB Packet Storm
1205 9.1 緊急
Network 		Hydro System. PHU. Szafraniec M. Control System Hydro System. PHU. Szafraniec M.のControl Systemにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-34184 2026-04-21 10:42 2026-04-9 Show GitHub Exploit DB Packet Storm
1206 8.8 重要
Network 		Hydro System. PHU. Szafraniec M. Control System Hydro System. PHU. Szafraniec M.のControl SystemにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2026-34185 2026-04-21 10:42 2026-04-9 Show GitHub Exploit DB Packet Storm
1207 5.4 警告
Network 		Anthropic PBC Claude SDK for TypeScript (anthropic-ai/sdk) Anthropic PBCのClaude SDK for TypeScript (anthropic-ai/sdk)における複数の脆弱性 CWE-22
CWE-41
CVE-2026-34451 2026-04-21 10:42 2026-03-31 Show GitHub Exploit DB Packet Storm
1208 7.1 重要
Network 		Apache Software Foundation Skywalking MCP Apache Software FoundationのSkywalking MCPにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-34476 2026-04-21 10:42 2026-04-13 Show GitHub Exploit DB Packet Storm
1209 7.1 重要
Network 		lobehub LobeHub lobehubのLobeHubにおける複数の脆弱性 CWE-287
CWE-290
CWE-345
CVE-2026-39411 2026-04-21 10:42 2026-04-8 Show GitHub Exploit DB Packet Storm
1210 6.5 警告
Network 		HKUDS LightRAG HKUDSのLightRAGにおけるデジタル署名の検証に関する脆弱性 CWE-347
デジタル署名の不適切な検証 		CVE-2026-39413 2026-04-21 10:42 2026-04-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
111 8.3 HIGH
Network 		- - Heap buffer overflow in Skia in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML pag… New CWE-122
Heap-based Buffer Overflow 		CVE-2026-7353 2026-04-29 23:16 2026-04-29 Show GitHub Exploit DB Packet Storm
112 3.1 LOW
Network 		- - Race in MHTML in Google Chrome prior to 147.0.7727.138 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension. (Chromium se… New CWE-362
Race Condition 		CVE-2026-7351 2026-04-29 23:16 2026-04-29 Show GitHub Exploit DB Packet Storm
113 7.5 HIGH
Adjacent 		- - Use after free in Cast in Google Chrome prior to 147.0.7727.138 allowed an attacker on the local network segment to execute arbitrary code inside a sandbox via malicious network traffic. (Chromium se… New CWE-416
 Use After Free 		CVE-2026-7349 2026-04-29 23:16 2026-04-29 Show GitHub Exploit DB Packet Storm
114 8.8 HIGH
Network 		- - Use after free in Codecs in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High) New CWE-416
 Use After Free 		CVE-2026-7348 2026-04-29 23:16 2026-04-29 Show GitHub Exploit DB Packet Storm
115 8.3 HIGH
Network 		- - Insufficient validation of untrusted input in Feedback in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox esc… New CWE-20
 Improper Input Validation  		CVE-2026-7345 2026-04-29 23:16 2026-04-29 Show GitHub Exploit DB Packet Storm
116 8.8 HIGH
Network 		- - Use after free in WebView in Google Chrome on Android prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity… New CWE-416
 Use After Free 		CVE-2026-7342 2026-04-29 23:16 2026-04-29 Show GitHub Exploit DB Packet Storm
117 8.8 HIGH
Network 		- - Use after free in WebRTC in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High) New CWE-416
 Use After Free 		CVE-2026-7341 2026-04-29 23:16 2026-04-29 Show GitHub Exploit DB Packet Storm
118 4.3 MEDIUM
Network 		- - Integer overflow in ANGLE in Google Chrome on Windows prior to 147.0.7727.138 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: M… New CWE-472
 External Control of Assumed-Immutable Web Parameter 		CVE-2026-7340 2026-04-29 23:16 2026-04-29 Show GitHub Exploit DB Packet Storm
119 8.8 HIGH
Network 		- - Heap buffer overflow in WebRTC in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) New CWE-122
Heap-based Buffer Overflow 		CVE-2026-7339 2026-04-29 23:16 2026-04-29 Show GitHub Exploit DB Packet Storm
120 7.5 HIGH
Adjacent 		- - Use after free in Cast in Google Chrome prior to 147.0.7727.138 allowed an attacker on the local network segment to potentially exploit heap corruption via malicious network traffic. (Chromium securi… New CWE-416
 Use After Free 		CVE-2026-7338 2026-04-29 23:16 2026-04-29 Show GitHub Exploit DB Packet Storm