NVD脆弱性情報トップ

検索メニュー表示

ベンダー名
プロダクト・サービス名
タイトル
CVE
CRITICAL
HIGH
MEDIUM
LOW
CWE
公表日降順
更新日降順
表示数

NVD（National Vulnerability Database）で管理されている脆弱性の一覧を検索することが出来ます。
JVN（Japan Vulnerability Note）より先に脆弱性情報が更新される事が多いため、JVNに未記載の脆弱性が更新されている場合があります。

JVN（Japan Vulnerability Note）に関連した脆弱性がある場合は詳細画面で情報を表示します。

CWEで検索する場合は、CWE概要を参照して、CWE番号を確認してください。

CRITICAL
HIGH
MEDIUM
LOW

更新日:2026年6月13日4:20

No	CVSS	レベル攻撃区分	ベンダー名	プロダクト名	タイトル	CWE	CVE	更新日	公表日	影響表示	Exploit PoC 検索
1201	4.7	MEDIUM ローカル	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: coresight: tmc-etr: Fix race condition between sysfs and perf mode When trying to run perf and sysfs mode simultaneously, the WAR…	CWE-362 競合状態	CVE-2026-46272	2026-06-10 04:52	2026-06-4	表示	GitHub Exploit DB Packet Storm

1202	7.8	HIGH ローカル	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: do WoW offloads only on primary link In case of multi-link connection, WCN7850 firmware crashes due to WoW offloads…	NVD-CWE-noinfo	CVE-2026-46271	2026-06-10 04:52	2026-06-4	表示	GitHub Exploit DB Packet Storm

1203	8.4	HIGH ローカル	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: power: supply: rt9455: Fix use-after-free in power_supply_changed() Using the `devm_` variant for requesting IRQ _before_ the `de…	CWE-416 解放済みメモリの使用	CVE-2026-46270	2026-06-10 04:52	2026-06-4	表示	GitHub Exploit DB Packet Storm

1204	5.5	MEDIUM ローカル	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: pinctrl: canaan: k230: Fix NULL pointer dereference when parsing devicetree When probing the k230 pinctrl driver, the kernel trig…	CWE-476 NULL ポインタデリファレンス	CVE-2026-46269	2026-06-10 04:51	2026-06-4	表示	GitHub Exploit DB Packet Storm

1205	5.5	MEDIUM ローカル	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: PCI/P2PDMA: Fix p2pmem_alloc_mmap() warning condition Commit b7e282378773 has already changed the initial page refcount of p2pdma…	NVD-CWE-noinfo	CVE-2026-46268	2026-06-10 04:48	2026-06-4	表示	GitHub Exploit DB Packet Storm

1206	7.8	HIGH ローカル	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: nfc: hci: shdlc: Stop timers and work before freeing context llc_shdlc_deinit() purges SHDLC skb queues and frees the llc_shdlc s…	CWE-416 解放済みメモリの使用	CVE-2026-46267	2026-06-10 04:48	2026-06-4	表示	GitHub Exploit DB Packet Storm

1207	9.1	CRITICAL ネットワーク	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP Yizhou Zhao reported that simply having one RAW socket on protocol IP…	NVD-CWE-noinfo	CVE-2026-46266	2026-06-10 04:47	2026-06-4	表示	GitHub Exploit DB Packet Storm

1208	7.5	HIGH ネットワーク	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix WQ_MEM_RECLAIM warning When sunrpc is used, if a reset triggered, our wq may lead the following trace: workqueue: …	NVD-CWE-noinfo	CVE-2026-46265	2026-06-10 04:46	2026-06-4	表示	GitHub Exploit DB Packet Storm

1209	5.7	MEDIUM 物理	-	-	Dell Client Platform BIOS contains a Weak Encoding for Password vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to Elevation of P…	CWE-261 パスワードの弱い暗号の使用	CVE-2026-40639	2026-06-10 04:30	2026-06-10	表示	GitHub Exploit DB Packet Storm

1210	8.8	HIGH ネットワーク	google	chrome	Out of bounds memory access in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: …	CWE-125 CWE-787 境界外読み取り境界外書き込み	CVE-2026-10941	2026-06-10 04:21	2026-06-5	表示	GitHub Exploit DB Packet Storm

1211	8.8	HIGH ネットワーク	google	chrome	Use after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)	CWE-416 解放済みメモリの使用	CVE-2026-10943	2026-06-10 04:02	2026-06-5	表示	GitHub Exploit DB Packet Storm

1212	8.8	HIGH ネットワーク	google	chrome	Use after free in PDF in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code inside a sandbox via a crafted…	CWE-416 解放済みメモリの使用	CVE-2026-10945	2026-06-10 04:01	2026-06-5	表示	GitHub Exploit DB Packet Storm

1213	4.7	MEDIUM ネットワーク	google	chrome	Insufficient policy enforcement in FoldableAPIs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted H…	CWE-20 不適切な入力確認	CVE-2026-11233	2026-06-10 03:58	2026-06-5	表示	GitHub Exploit DB Packet Storm

1214	4.3	MEDIUM ネットワーク	google	chrome	Inappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)	CWE-451 ユーザインターフェースにおける重要情報の誤った表示	CVE-2026-11294	2026-06-10 03:55	2026-06-5	表示	GitHub Exploit DB Packet Storm

1215	4.3	MEDIUM ネットワーク	google	chrome	Inappropriate implementation in FoldableAPIs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML pag…	CWE-693 保護メカニズムの不具合	CVE-2026-11234	2026-06-10 03:54	2026-06-5	表示	GitHub Exploit DB Packet Storm

1216	7.5	HIGH ネットワーク	google	chrome	Heap buffer overflow in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code inside a sandbox via a…	CWE-122 ヒープオーバーフロー	CVE-2026-10946	2026-06-10 03:53	2026-06-5	表示	GitHub Exploit DB Packet Storm

1217	8.8	HIGH ネットワーク	google	chrome	Use after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)	CWE-416 解放済みメモリの使用	CVE-2026-10947	2026-06-10 03:53	2026-06-5	表示	GitHub Exploit DB Packet Storm

1218	8.8	HIGH ネットワーク	google	chrome	Use after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)	CWE-416 解放済みメモリの使用	CVE-2026-10948	2026-06-10 03:52	2026-06-5	表示	GitHub Exploit DB Packet Storm

1219	8.3	HIGH ネットワーク	google	chrome	Heap buffer overflow in Video in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML pag…	CWE-122 ヒープオーバーフロー	CVE-2026-10949	2026-06-10 03:52	2026-06-5	表示	GitHub Exploit DB Packet Storm

1220	8.8	HIGH ネットワーク	google	chrome	Use after free in Actor in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)	CWE-416 解放済みメモリの使用	CVE-2026-10954	2026-06-10 03:49	2026-06-5	表示	GitHub Exploit DB Packet Storm

1221	8.8	HIGH ネットワーク	google	chrome	Use after free in MimeHandlerView in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Hi…	CWE-416 解放済みメモリの使用	CVE-2026-10956	2026-06-10 03:48	2026-06-5	表示	GitHub Exploit DB Packet Storm

1222	6.3	MEDIUM ネットワーク	google	chrome	Inappropriate implementation in Media Session in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medi…	CWE-346 同一生成元ポリシー違反	CVE-2026-11181	2026-06-10 03:47	2026-06-5	表示	GitHub Exploit DB Packet Storm

1223	8.8	HIGH ネットワーク	google	chrome	Insufficient policy enforcement in Compositing in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox vi…	CWE-20 不適切な入力確認	CVE-2026-11235	2026-06-10 03:44	2026-06-5	表示	GitHub Exploit DB Packet Storm

1224	8.3	HIGH ネットワーク	google	chrome	Insufficient policy enforcement in Web Bluetooth in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via…	CWE-602 サーバ側のセキュリティのクライアント側での実施	CVE-2026-11236	2026-06-10 03:42	2026-06-5	表示	GitHub Exploit DB Packet Storm

1225	8.3	HIGH ネットワーク	google	chrome	Insufficient validation of untrusted input in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTM…	CWE-20 不適切な入力確認	CVE-2026-11237	2026-06-10 03:41	2026-06-5	表示	GitHub Exploit DB Packet Storm

1226	6.5	MEDIUM ネットワーク	google	chrome	Uninitialized Use in ANGLE in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)	CWE-457 初期化されていない変数の使用	CVE-2026-11268	2026-06-10 03:38	2026-06-5	表示	GitHub Exploit DB Packet Storm

1227	8.8	HIGH ネットワーク	google	chrome	Insufficient validation of untrusted input in Reading List in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform p…	CWE-20 不適切な入力確認	CVE-2026-11272	2026-06-10 03:34	2026-06-5	表示	GitHub Exploit DB Packet Storm

1228	4.3	MEDIUM ネットワーク	google	chrome	Inappropriate implementation in DOM Distiller in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security se…	CWE-284 不適切なアクセス制御	CVE-2026-11274	2026-06-10 03:32	2026-06-5	表示	GitHub Exploit DB Packet Storm

1229	9.3	CRITICAL ネットワーク	checkpoint	gaia_os gaia_embedded	A logic flow weakness in Remote Access and Mobile Access certificate validation in deprecated IKEv1 key exchange allows an unauthenticated remote attacker to bypass user authentication and establish …	CWE-287 不適切な認証	CVE-2026-50751	2026-06-10 03:30	2026-06-8	表示	GitHub Exploit DB Packet Storm

1230	4.3	MEDIUM ネットワーク	google	chrome	Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to bypass discretionary access control via a crafted HTML page. (Chromium se…	CWE-284 不適切なアクセス制御	CVE-2026-11277	2026-06-10 03:26	2026-06-5	表示	GitHub Exploit DB Packet Storm

1231	5.8	MEDIUM ネットワーク	-	-	On affected platforms running Arista EOS where a tunnel decapsulation configuration—such as VXLAN (Virtual Extensible LAN), decap-groups, or a GRE (Generic Routing Encapsulation) tunnel interface—is …	CWE-1023 要素の欠如による不完全な比較	CVE-2026-7473	2026-06-10 03:17	2026-06-6	表示	GitHub Exploit DB Packet Storm

1232	8.8	HIGH ネットワーク	-	-	The RemoteControl API methods invite_participants and remind_participants pass a caller-supplied token-ID array into TokenDynamic::findUninvited(), which concatenates the values directly into a tid I…	CWE-89 SQLインジェクション	CVE-2026-50636	2026-06-10 03:17	2026-06-10	表示	GitHub Exploit DB Packet Storm

1233	8.8	HIGH ネットワーク	-	-	LimeSurvey constructs account password-reset links from the client-supplied HTTP Host header without validating it. The optional allowedHosts allowlist that would constrain this is undefined in the d…	CWE-640 パスワードを忘れた場合の脆弱なパスワードリカバリの仕組み	CVE-2026-50635	2026-06-10 03:17	2026-06-10	表示	GitHub Exploit DB Packet Storm

1234	7.8	HIGH ローカル	-	-	Missing authentication for critical function in Microsoft PC Manager allows an authorized attacker to elevate privileges locally.	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-50512	2026-06-10 03:17	2026-06-10	表示	GitHub Exploit DB Packet Storm

1235	7.8	HIGH ローカル	-	-	Improper link resolution before file access ('link following') in Microsoft PC Manager allows an authorized attacker to elevate privileges locally.	CWE-59 リンク解釈の問題	CVE-2026-50511	2026-06-10 03:17	2026-06-10	表示	GitHub Exploit DB Packet Storm

1236	6.5	MEDIUM ネットワーク	-	-	Hermes WebUI before version 0.51.269 contains a profile isolation bypass vulnerability that allows authenticated users to access data belonging to other profiles by querying the session search endpoi…	CWE-862 認証の欠如	CVE-2026-49956	2026-06-10 03:17	2026-06-10	表示	GitHub Exploit DB Packet Storm

1237	8.1	HIGH ネットワーク	-	-	Improper authorization in Microsoft Exchange Server allows an authorized attacker to disclose information over a network.	CWE-285 不適切な認可	CVE-2026-45503	2026-06-10 03:16	2026-06-10	表示	GitHub Exploit DB Packet Storm

1238	6.5	MEDIUM ネットワーク	-	-	Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network.	CWE-918 サーバサイドリクエストフォージェリ	CVE-2026-45501	2026-06-10 03:16	2026-06-10	表示	GitHub Exploit DB Packet Storm

1239	6.3	MEDIUM ローカル	-	-	Dell/Alienware Purchased Apps, versions prior to 1.1.32.0, contain an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker with local access could p…	CWE-59 リンク解釈の問題	CVE-2026-44275	2026-06-10 03:16	2026-06-10	表示	GitHub Exploit DB Packet Storm

1240	6.3	MEDIUM ローカル	-	-	Dell Inventory Collector Client, versions prior to 13.8.0, contain an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker with local access could p…	CWE-1386 Windows ジャンクション / マウントポイントの安全でない操作	CVE-2026-41116	2026-06-10 03:16	2026-06-10	表示	GitHub Exploit DB Packet Storm

1241	-	-	-	-	Unrestricted resource allocation in AMD uProf may be exploitable to consume excessive system resources, potentially leading to a loss of availability.	CWE-770 制限またはスロットリング無しのリソースの割り当て	CVE-2026-28237	2026-06-10 03:16	2026-06-10	表示	GitHub Exploit DB Packet Storm

1242	8.8	HIGH ネットワーク	google	chrome	Out of bounds read and write in V8 in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: …	CWE-125 CWE-787 境界外読み取り境界外書き込み	CVE-2026-11645	2026-06-10 03:16	2026-06-9	表示	GitHub Exploit DB Packet Storm

1243	-	-	-	-	Improper access control in AMD uProf may allow a local attacker with user privileges to write to the kernel-shared memory section, potentially resulting in crash or denial of service.	CWE-497 認可されていない制御領域への重要情報の漏えい	CVE-2026-0466	2026-06-10 03:16	2026-06-10	表示	GitHub Exploit DB Packet Storm

1244	-	-	-	-	Improper access control for register interface in the input-output memory management unit (IOMMU) could allow a privileged attacker to cause non-coherent accesses by the AMD secure processor (ASP) po…	CWE-1262 レジスタインターフェイスの不適切なアクセス制御	CVE-2025-54509	2026-06-10 03:16	2026-06-10	表示	GitHub Exploit DB Packet Storm

1245	8.6	HIGH ネットワーク	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: ibmveth: Disable GSO for packets with small MSS Some physical adapters on Power systems do not support segmentation offload when …	NVD-CWE-noinfo	CVE-2026-46273	2026-06-10 02:31	2026-06-4	表示	GitHub Exploit DB Packet Storm

1246	8.8	HIGH ローカル	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: drm/xe/pf: Fix sysfs initialization In case of devm_add_action_or_reset() failure the provided cleanup action will be run immedia…	CWE-416 解放済みメモリの使用	CVE-2026-46264	2026-06-10 02:26	2026-06-4	表示	GitHub Exploit DB Packet Storm

1247	8.1	HIGH ネットワーク	google	chrome	Inappropriate implementation in Plugins in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (…	CWE-346 同一生成元ポリシー違反	CVE-2026-11693	2026-06-10 02:26	2026-06-9	表示	GitHub Exploit DB Packet Storm

1248	5.4	MEDIUM ネットワーク	google	chrome	Inappropriate implementation in Guest View in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)	CWE-20 NVD-CWE-noinfo 不適切な入力確認	CVE-2026-11701	2026-06-10 02:24	2026-06-9	表示	GitHub Exploit DB Packet Storm

1249	7.5	HIGH ネットワーク	perl	dbi	DBI versions before 1.648 for Perl saved errors in a limited-sized buffer. Error messages that were returned when RaiseError, PrintError or HandleError were set were written to a 200-byte buffer wit…	CWE-787 境界外書き込み	CVE-2026-9698	2026-06-10 02:20	2026-06-9	表示	GitHub Exploit DB Packet Storm

1250	9.8	CRITICAL ネットワーク	-	-	YesWiki is a wiki system written in PHP. Prior to version 4.6.6, an unsafe execution vulnerability exists in the Bazar form field calculator (CalcField.php) of YesWiki. The application attempts to sa…	CWE-94 CWE-1333 コード・インジェクション非効率的な正規表現の複雑さ	CVE-2026-52778	2026-06-10 02:17	2026-06-9	表示	GitHub Exploit DB Packet Storm