Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 23, 2026, 12:20 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
701 3.3 低
Local 		マイクロソフト Microsoft Office 2021 Long Term Servicing Channel Edition
Microsoft 365 Apps
Microsoft Office 365
Microsoft Office 2024 … 		Microsoft Word の情報漏えいの脆弱性 New CWE-122
ヒープオーバーフロー 		CVE-2026-45466 2026-06-22 11:36 2026-06-9 Show GitHub Exploit DB Packet Storm
702 7.8 重要
Local 		マイクロソフト Microsoft Office 2021 Long Term Servicing Channel Edition
Microsoft Office 365
Microsoft Office 2024 Long-Term Servicing Ch… 		Microsoft Word のリモートでコードが実行される脆弱性 New CWE-822
信頼性のないポインタデリファレンス 		CVE-2026-45471 2026-06-22 11:36 2026-06-9 Show GitHub Exploit DB Packet Storm
703 8.4 重要
Local 		マイクロソフト Microsoft Office 2021 Long Term Servicing Channel Edition
Microsoft Office 365
Microsoft Office 2024 Long-Term Servicing Ch… 		Microsoft Office のリモート コードが実行される脆弱性 New CWE-416
CWE-787
CVE-2026-45472 2026-06-22 11:36 2026-06-9 Show GitHub Exploit DB Packet Storm
704 9.8 緊急
Network 		サン・マイクロシステムズ JCE Widget Factory LimitedのJCEにおけるアクセス制御に関する脆弱性 New CWE-284
不適切なアクセス制御 		CVE-2026-48907 2026-06-22 11:35 2026-06-5 Show GitHub Exploit DB Packet Storm
705 4.3 警告
Network 		Devolutions Devolutions Server DevolutionsのDevolutions Serverにおける複数の脆弱性 New CWE-284
CWE-882
CVE-2026-11890 2026-06-22 11:35 2026-06-16 Show GitHub Exploit DB Packet Storm
706 4.5 警告
Adjacent 		ネットギア RAXE450 Firmware
R7000 ファームウェア
rax42 ファームウェア
RAX42v2 Firmware
XR1000V2 FIRMWARE
RAX50S FIRMWARE
RAX45 ファームウェア
RAXE500 Firmware
XR1000&n… 		ネットギアのR7000 ファームウェア等の複数製品における入力確認に関する脆弱性 New CWE-20
不適切な入力確認 		CVE-2026-0410 2026-06-22 11:35 2026-06-9 Show GitHub Exploit DB Packet Storm
707 8 重要
Adjacent 		ネットギア RBE970 FIRMWARE
RBR760 ファームウェア
RBS350 ファームウェア
RBR350 ファームウェア
RBS760 Firmware 		ネットギアのRBE970 FIRMWARE等の複数製品における情報漏えいに関する脆弱性 New CWE-200
情報漏えい 		CVE-2026-0411 2026-06-22 11:35 2026-06-9 Show GitHub Exploit DB Packet Storm
708 4.5 警告
Adjacent 		ネットギア R6900P ファームウェア
RAXE450 Firmware
R7960P ファームウェア
R7000 ファームウェア
rax42 ファームウェア
mr80 ファームウェア
MR70 FIRMWARE
MR60 ファームウェア
MS60 ファームウェア 		ネットギアのMR60 ファームウェア等の複数製品における入力確認に関する脆弱性 New CWE-20
CWE-noinfo
CVE-2026-0417 2026-06-22 11:35 2026-06-9 Show GitHub Exploit DB Packet Storm
709 4.5 警告
Adjacent 		ネットギア RBR750 ファームウェア
RAX200 ファームウェア
RAXE450 Firmware
RBRE960 ファームウェア
RBS850 ファームウェア
rax42 ファームウェア
mr80 ファームウェア
MR70 FIRMWARE
RBR840 ファーム… 		ネットギアのCBR750 ファームウェア等の複数製品における複数の脆弱性 New CWE-15
CWE-610
CVE-2026-0418 2026-06-22 11:35 2026-06-9 Show GitHub Exploit DB Packet Storm
710 7.5 重要
Network 		Mozilla Foundation Mozilla Focus
Firefox Klar 		Mozilla FoundationのMozilla Focus等の複数製品におけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-11799 2026-06-22 11:35 2026-06-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 23, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
4131 5.3 MEDIUM
Network 		google chrome Insufficient validation of untrusted input in Media in Google Chrome on ChromeOS prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to obtain potentially sensi… CWE-20
NVD-CWE-noinfo
 Improper Input Validation  		CVE-2026-9985 2026-06-2 03:20 2026-05-29 Show GitHub Exploit DB Packet Storm
4132 6.3 MEDIUM
Network 		google chrome Inappropriate implementation in Media in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to bypass same origin policy via a crafted video file. (Chromium security severity: High) CWE-346
 Origin Validation Error 		CVE-2026-9989 2026-06-2 03:17 2026-05-29 Show GitHub Exploit DB Packet Storm
4133 5.3 MEDIUM
Network 		- - Decoding a paletted BMP file with an out-of-range palette index results in a panic when accessing pixels in the invalid image. - CVE-2026-42500 2026-06-2 03:16 2026-05-30 Show GitHub Exploit DB Packet Storm
4134 7.5 HIGH
Network 		- - The TIFF decoder does not place a limit on the size of PackBits-compressed data. A maliciously-crafted image can exploit this to cause a small image (both in terms of pixel width/height and encoded s… CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2026-46599 2026-06-2 03:16 2026-05-30 Show GitHub Exploit DB Packet Storm
4135 - - - Deserialization of untrusted data vulnerability in QOS.CH Sarl logback logback-core (HardenedObjectInputStream (logback-core) modules) allows Object Injection, albeit heavily restricted. More precis… CWE-502
 Deserialization of Untrusted Data 		CVE-2026-10532 2026-06-2 03:16 2026-06-1 Show GitHub Exploit DB Packet Storm
4136 - - - Sulu is an open-source PHP content management system based on the Symfony framework. Prior to versions 2.6.23 and 3.0.6, the password reset tokenand API key generation uses a weak cryptographical has… CWE-327
 Use of a Broken or Risky Cryptographic Algorithm 		CVE-2026-45701 2026-06-2 03:16 2026-06-2 Show GitHub Exploit DB Packet Storm
4137 7.5 HIGH
Network 		google chrome Use after free in WebAppInstalls in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruptio… CWE-416
 Use After Free 		CVE-2026-9990 2026-06-2 03:15 2026-05-29 Show GitHub Exploit DB Packet Storm
4138 3.1 LOW
Network 		google chrome Inappropriate implementation in Media in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HT… CWE-200
Information Exposure 		CVE-2026-9991 2026-06-2 03:15 2026-05-29 Show GitHub Exploit DB Packet Storm
4139 6.5 MEDIUM
Network 		google chrome Out of bounds read in WebRTC in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromi… CWE-125
Out-of-bounds Read 		CVE-2026-9996 2026-06-2 03:14 2026-05-29 Show GitHub Exploit DB Packet Storm
4140 10.0 CRITICAL
Network 		- - CloudPirates Open Source Helm Charts is a collection of Helm charts. Prior to commit fcf9302, a GitHub Actions workflow (pull-request.yaml) executes attacker-controlled code from fork pull requests i… CWE-94
Code Injection 		CVE-2026-45131 2026-06-2 03:14 2026-06-2 Show GitHub Exploit DB Packet Storm