Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 10, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
133461	5.5	警告 Local	マイクロソフト	Microsoft Windows Server Microsoft Windows Server 2022 Microsoft Windows RT 8.1 Microsoft Windows Server 2012 Microsoft Windows…	複数の Microsoft Windows 製品における情報を公開される脆弱性	CWE-noinfo 情報不足	CVE-2021-36972	2021-09-29 16:12	2021-09-14	Show	GitHub Exploit DB Packet Storm

133462	7.8	重要 Local	マイクロソフト	Microsoft Office Microsoft 365 Apps	Microsoft 365 Apps および Office におけるリモートでコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2021-38646	2021-09-29 16:10	2021-09-14	Show	GitHub Exploit DB Packet Storm

133463	7.8	重要 Local	マイクロソフト	Azure Automation State Configuration Log Analytics Agent Microsoft System Center Azure Diagnostics (LAD) Azure Stack Hub Azure&nb…	複数の Microsoft 製品における権限を昇格される脆弱性	CWE-269 不適切な権限管理	CVE-2021-38645	2021-09-29 16:10	2021-09-14	Show	GitHub Exploit DB Packet Storm

133464	7.8	重要 Local	マイクロソフト	MPEG-2 Video Extension	MPEG-2 Video Extension におけるリモートでコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2021-38644	2021-09-29 16:10	2021-09-14	Show	GitHub Exploit DB Packet Storm

133465	7.8	重要 Local	マイクロソフト	Microsoft Windows Server Microsoft Windows Server 2022 Microsoft Windows RT 8.1 Microsoft Windows Server 2008 Microsoft Windows…	複数の Microsoft Windows 製品における権限を昇格される脆弱性	CWE-269 不適切な権限管理	CVE-2021-38639	2021-09-29 16:10	2021-09-14	Show	GitHub Exploit DB Packet Storm

133466	7.8	重要 Local	マイクロソフト	Microsoft Windows Server Microsoft Windows Server 2022 Microsoft Windows RT 8.1 Microsoft Windows Server 2008 Microsoft Windows…	複数の Microsoft Windows 製品における権限を昇格される脆弱性	CWE-269 不適切な権限管理	CVE-2021-38638	2021-09-29 16:10	2021-09-14	Show	GitHub Exploit DB Packet Storm

133467	5.5	警告 Local	マイクロソフト	Microsoft Windows Server Microsoft Windows Server 2022 Microsoft Windows 10 Microsoft Windows Server 2019	Microsoft Windows 10 および Windows Server における情報を公開される脆弱性	CWE-noinfo 情報不足	CVE-2021-38637	2021-09-29 16:10	2021-09-14	Show	GitHub Exploit DB Packet Storm

133468	5.5	警告 Local	マイクロソフト	Microsoft Windows Server Microsoft Windows Server 2022 Microsoft Windows RT 8.1 Microsoft Windows Server 2008 Microsoft Windows…	複数の Microsoft Windows 製品における情報を公開される脆弱性	CWE-noinfo 情報不足	CVE-2021-38636	2021-09-29 16:10	2021-09-14	Show	GitHub Exploit DB Packet Storm

133469	7.8	重要 Local	マイクロソフト	Microsoft Windows Server Microsoft Windows Server 2022 Microsoft Windows Server 2019 Microsoft Windows Server 2016 Microsoft Wi…	Microsoft Windows 10 および Windows Server における権限を昇格される脆弱性	CWE-269 不適切な権限管理	CVE-2021-38634	2021-09-29 16:10	2021-09-14	Show	GitHub Exploit DB Packet Storm

133470	7.8	重要 Local	マイクロソフト	Microsoft Windows Server Microsoft Windows Server 2022 Microsoft Windows RT 8.1 Microsoft Windows Server 2008 Microsoft Windows…	複数の Microsoft Windows 製品における権限を昇格される脆弱性	CWE-269 不適切な権限管理	CVE-2021-38633	2021-09-29 16:10	2021-09-14	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
231	8.4	HIGH Local	-	-	Improper limitation of a pathname to a restricted directory ('path traversal') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. New	CWE-22 Path Traversal	CVE-2026-45482	2026-06-10 02:17	2026-06-10	Show	GitHub Exploit DB Packet Storm

232	7.3	HIGH Network	-	-	Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. New	CWE-79 Cross-site Scripting	CVE-2026-45481	2026-06-10 02:17	2026-06-10	Show	GitHub Exploit DB Packet Storm

233	4.6	MEDIUM Network	-	-	Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. New	CWE-79 Cross-site Scripting	CVE-2026-45479	2026-06-10 02:17	2026-06-10	Show	GitHub Exploit DB Packet Storm

234	8.2	HIGH Local	-	-	Use after free in Linux MANA Driver allows an authorized attacker to elevate privileges locally. New	CWE-416 Use After Free	CVE-2026-45476	2026-06-10 02:17	2026-06-10	Show	GitHub Exploit DB Packet Storm

235	7.8	HIGH Local	-	-	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. New	CWE-122 Heap-based Buffer Overflow	CVE-2026-45475	2026-06-10 02:17	2026-06-10	Show	GitHub Exploit DB Packet Storm

236	8.4	HIGH Local	-	-	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. New	CWE-416 Use After Free	CVE-2026-45474	2026-06-10 02:17	2026-06-10	Show	GitHub Exploit DB Packet Storm

237	8.4	HIGH Local	-	-	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. New	CWE-416 Use After Free	CVE-2026-45472	2026-06-10 02:17	2026-06-10	Show	GitHub Exploit DB Packet Storm

238	7.8	HIGH Local	-	-	Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally. New	CWE-822 Untrusted Pointer Dereference	CVE-2026-45471	2026-06-10 02:17	2026-06-10	Show	GitHub Exploit DB Packet Storm

239	7.8	HIGH Local	-	-	Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally. New	CWE-122 CWE-191 Heap-based Buffer Overflow Integer Underflow (Wrap or Wraparound)	CVE-2026-45469	2026-06-10 02:17	2026-06-10	Show	GitHub Exploit DB Packet Storm

240	4.6	MEDIUM Network	-	-	Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. New	CWE-79 Cross-site Scripting	CVE-2026-45468	2026-06-10 02:17	2026-06-10	Show	GitHub Exploit DB Packet Storm