Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 9, 2026, 4:11 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
2531 7.4 重要
Adjacent
マイクロソフト Microsoft Windows Server 2025
Microsoft Windows 10 22h2
Microsoft Windows 11 25h2
Microsoft Windows Server 2022
Microsoft …
Windows TCP/IP のサービス拒否の脆弱性 CWE-476
NULL ポインタデリファレンス
CVE-2026-40413 2026-05-18 11:31 2026-05-12 Show GitHub Exploit DB Packet Storm
2532 7.4 重要
Adjacent
マイクロソフト Microsoft Windows Server 2025
Microsoft Windows 10 22h2
Microsoft Windows 11 25h2
Microsoft Windows Server 2022
Microsoft …
Windows TCP/IP のサービス拒否の脆弱性 CWE-476
NULL ポインタデリファレンス
CVE-2026-40414 2026-05-18 11:31 2026-05-12 Show GitHub Exploit DB Packet Storm
2533 8.1 重要
Network
マイクロソフト Microsoft Windows Server 2025
Microsoft Windows 10 22h2
Microsoft Windows 11 25h2
Microsoft Windows Server 2022
Microsoft …
Windows TCP/IP のリモートでコードが実行される脆弱性 CWE-416
解放済みメモリの使用
CVE-2026-40415 2026-05-18 11:31 2026-05-12 Show GitHub Exploit DB Packet Storm
2534 4.3 警告
Network
マイクロソフト Microsoft Word
Microsoft 365 Apps
Microsoft Office
Microsoft Word の情報漏えいの脆弱性 CWE-73
ファイル名やパス名の外部制御
CVE-2026-40421 2026-05-18 11:31 2026-05-12 Show GitHub Exploit DB Packet Storm
2535 8.8 重要
Network
マイクロソフト Windows Admin Center Azure potal 上の Windows Admin Center の特権昇格の脆弱性 CWE-284
不適切なアクセス制御
CVE-2026-41086 2026-05-18 11:31 2026-05-12 Show GitHub Exploit DB Packet Storm
2536 7.8 重要
Local
マイクロソフト Microsoft Windows Server 2025
Microsoft Windows 11 25h2
Microsoft Windows 10 22h2
Microsoft Windows Server 2022
Microsoft …
WinSock 用 Windows Ancillary Function Driver の特権の昇格の脆弱性 CWE-73
ファイル名やパス名の外部制御
CVE-2026-41088 2026-05-18 11:31 2026-05-12 Show GitHub Exploit DB Packet Storm
2537 9.8 緊急
Network
マイクロソフト Microsoft Windows Server 2025
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft Windows Server 2012
Microso…
Windows Netlogon のリモートでコードが実行される脆弱性 CWE-121
スタックオーバーフロー
CVE-2026-41089 2026-05-18 11:31 2026-05-12 Show GitHub Exploit DB Packet Storm
2538 7.8 重要
Local
マイクロソフト Microsoft Windows Server 2025
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft Windows Server 2012
Microso…
Data Deduplication Elevation of Privilege Vulnerability CWE-416
解放済みメモリの使用
CVE-2026-41095 2026-05-18 11:31 2026-05-12 Show GitHub Exploit DB Packet Storm
2539 9.8 緊急
Network
マイクロソフト Microsoft Windows Server 2025
Microsoft Windows 11 25h2
Microsoft Windows 11 26h1
Microsoft Windows 11 24h2
Microsoft Wind…
Windows DNS クライアントのリモートでコードが実行される脆弱性 CWE-122
ヒープオーバーフロー
CVE-2026-41096 2026-05-18 11:31 2026-05-12 Show GitHub Exploit DB Packet Storm
2540 6.7 警告
Local
マイクロソフト Microsoft Windows Server 2025
Microsoft Windows 10 22h2
Microsoft Windows 11 25h2
Microsoft Windows Server 2022
Microsoft …
セキュア ブートのセキュリティ機能のバイパスの脆弱性 CWE-1329
アップデートができないコンポーネントへの依存
CVE-2026-41097 2026-05-18 11:31 2026-05-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
311991 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: octeon_ep: Add SKB allocation failures handling in __octep_oq_process_rx() build_skb() returns NULL in case of a memory allocatio… CWE-476
 NULL Pointer Dereference
CVE-2024-50145 2024-11-16 04:50 2024-11-7 Show GitHub Exploit DB Packet Storm
311992 7.8 HIGH
Local
amd ryzen_ai_software Improper input validation in the NPU driver could allow an attacker to supply a specially crafted pointer potentially leading to arbitrary code execution. NVD-CWE-noinfo
CVE-2024-21974 2024-11-16 04:20 2024-11-13 Show GitHub Exploit DB Packet Storm
311993 5.5 MEDIUM
Local
amd ryzen_ai_software Improper validation of user input in the NPU driver could allow an attacker to provide a buffer with unexpected size, potentially leading to system crash. NVD-CWE-noinfo
CVE-2024-21949 2024-11-16 04:20 2024-11-13 Show GitHub Exploit DB Packet Storm
311994 7.8 HIGH
Local
amd ryzen_ai_software Improper input validation in the NPU driver could allow an attacker to supply a specially crafted pointer potentially leading to arbitrary code execution. NVD-CWE-noinfo
CVE-2024-21975 2024-11-16 04:15 2024-11-13 Show GitHub Exploit DB Packet Storm
311995 - - - A heap-based buffer overflow in tsMuxer version nightly-2024-05-12-02-01-18 allows attackers to cause Denial of Service (DoS) and Code Execution via a crafted MOV video file. - CVE-2024-49778 2024-11-16 03:35 2024-11-15 Show GitHub Exploit DB Packet Storm
311996 - - - A heap-based buffer overflow in tsMuxer version nightly-2024-03-14-01-51-12 allows attackers to cause Denial of Service (DoS), Information Disclosure and Code Execution via a crafted MKV video file. - CVE-2024-49777 2024-11-16 03:35 2024-11-15 Show GitHub Exploit DB Packet Storm
311997 - - - A negative-size-param in tsMuxer version nightly-2024-04-05-01-53-02 allows attackers to cause Denial of Service (DoS) via a crafted TS video file. - CVE-2024-49776 2024-11-16 03:35 2024-11-15 Show GitHub Exploit DB Packet Storm
311998 7.2 HIGH
Network
dlink dsl6740c_firmware The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through a specific functio… CWE-78
OS Command 
CVE-2024-11065 2024-11-16 03:22 2024-11-11 Show GitHub Exploit DB Packet Storm
311999 7.2 HIGH
Network
dlink dsl6740c_firmware The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through a specific functio… CWE-78
OS Command 
CVE-2024-11064 2024-11-16 03:22 2024-11-11 Show GitHub Exploit DB Packet Storm
312000 7.2 HIGH
Network
dlink dsl6740c_firmware The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through a specific functio… CWE-78
OS Command 
CVE-2024-11063 2024-11-16 03:21 2024-11-11 Show GitHub Exploit DB Packet Storm