Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
4151 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける古典的バッファオーバーフローの脆弱性 CWE-120
古典的バッファオーバーフロー 		CVE-2026-31623 2026-04-30 11:04 2026-04-24 Show GitHub Exploit DB Packet Storm
4152 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 CWE-noinfo
情報不足 		CVE-2026-31624 2026-04-30 11:04 2026-04-24 Show GitHub Exploit DB Packet Storm
4153 6.1 警告
Network 		マイクロソフト Windows Admin Center Windows Admin Center のなりすましの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-32196 2026-04-30 11:03 2026-04-14 Show GitHub Exploit DB Packet Storm
4154 7.8 重要
Local 		マイクロソフト Microsoft Office Online Server
Office Long Term Servicing Channel (LTSC)
Microsoft 365 Apps
Microsoft Office
Microsoft Excel 		Microsoft Excel のリモートでコードが実行される脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-32197 2026-04-30 11:03 2026-04-14 Show GitHub Exploit DB Packet Storm
4155 7.8 重要
Local 		マイクロソフト Microsoft Office Online Server
Office Long Term Servicing Channel (LTSC)
Microsoft 365 Apps
Microsoft Office
Microsoft Excel 		Microsoft Excel のリモートでコードが実行される脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-32198 2026-04-30 11:03 2026-04-14 Show GitHub Exploit DB Packet Storm
4156 7.8 重要
Local 		マイクロソフト Microsoft Office Online Server
Office Long Term Servicing Channel (LTSC)
Microsoft 365 Apps
Microsoft Office
Microsoft Excel 		Microsoft Excel のリモートでコードが実行される脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-32199 2026-04-30 11:03 2026-04-14 Show GitHub Exploit DB Packet Storm
4157 7.8 重要
Local 		マイクロソフト Microsoft 365 Apps
Office Long Term Servicing Channel (LTSC)
Microsoft PowerPoint
Microsoft Office 		Microsoft PowerPoint のリモートでコードが実行される脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-32200 2026-04-30 11:03 2026-04-14 Show GitHub Exploit DB Packet Storm
4158 7.8 重要
Local 		デル Alienware Command Center デルのAlienware Command Centerにおける最小権限の違反に関する脆弱性 CWE-272
最小権限の違反 		CVE-2026-32655 2026-04-30 11:03 2026-04-27 Show GitHub Exploit DB Packet Storm
4159 2.7 低
Network 		GitHub Enterprise Server GitHubのEnterprise Serverにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避 		CVE-2026-3307 2026-04-30 11:03 2026-04-21 Show GitHub Exploit DB Packet Storm
4160 5.5 警告
Local 		マイクロソフト Microsoft Dynamics 365 Microsoft Dynamics 365 の(オンプレミス) で、情報漏えいの脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-33103 2026-04-30 11:03 2026-04-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
121 7.5 HIGH
Network 		google chrome Use after free in TabStrip in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a craft… Update CWE-416
 Use After Free 		CVE-2026-9954 2026-06-2 03:29 2026-05-29 Show GitHub Exploit DB Packet Storm
122 4.3 MEDIUM
Network 		google chrome Inappropriate implementation in iOS in Google Chrome on iOS prior to 148.0.7778.216 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High) Update CWE-200
Information Exposure 		CVE-2026-9955 2026-06-2 03:29 2026-05-29 Show GitHub Exploit DB Packet Storm
123 8.8 HIGH
Network 		google chrome Use after free in PDFium in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: High) Update CWE-416
 Use After Free 		CVE-2026-9958 2026-06-2 03:28 2026-05-29 Show GitHub Exploit DB Packet Storm
124 5.4 MEDIUM
Network 		google chrome Inappropriate implementation in iOS in Google Chrome on iOS prior to 148.0.7778.216 allowed a remote attacker who convinced a user to engage in specific UI gestures to inject arbitrary scripts or HTM… Update CWE-79
Cross-site Scripting 		CVE-2026-9971 2026-06-2 03:27 2026-05-29 Show GitHub Exploit DB Packet Storm
125 8.3 HIGH
Network 		google chrome Uninitialized Use in Gamepad in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted H… Update CWE-457
 Use of Uninitialized Variable 		CVE-2026-9972 2026-06-2 03:27 2026-05-29 Show GitHub Exploit DB Packet Storm
126 8.3 HIGH
Network 		google chrome Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape… Update CWE-20
NVD-CWE-noinfo
 Improper Input Validation  		CVE-2026-9982 2026-06-2 03:27 2026-05-29 Show GitHub Exploit DB Packet Storm
127 8.3 HIGH
Network 		google chrome Insufficient validation of untrusted input in WebShare in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a … Update CWE-20
NVD-CWE-noinfo
 Improper Input Validation  		CVE-2026-9977 2026-06-2 03:26 2026-05-29 Show GitHub Exploit DB Packet Storm
128 7.5 HIGH
Network 		- - Vanetza is an open-source implementation of the ETSI C-ITS protocol suite. In 26.02 and earlier, a denial-of-service vulnerability was identified in the ASN.1/OER parsing pipeline of Vanetza. When pr… Update CWE-248
 Uncaught Exception 		CVE-2026-43988 2026-06-2 03:26 2026-05-27 Show GitHub Exploit DB Packet Storm
129 6.5 MEDIUM
Network 		- - Frappe HR is an open-source human resources management solution (HRMS). Prior to 16.5.0, authenticated employees could access other employees’ leave details due to improper authorization checks. This… Update CWE-863
 Incorrect Authorization 		CVE-2026-45081 2026-06-2 03:26 2026-05-28 Show GitHub Exploit DB Packet Storm
130 7.5 HIGH
Network 		- - bird-lg-go is a BIRD looking glass in Go. Prior to 1.4.5, the apiHandler (and similarly webHandlerTelegramBot) processes user-provided JSON payloads by directly using json.NewDecoder(r.Body).Decode(&… Update CWE-400
 Uncontrolled Resource Consumption 		CVE-2026-45047 2026-06-2 03:26 2026-05-28 Show GitHub Exploit DB Packet Storm