Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 27, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1751 7.1 重要
Adjacent 		Espressif Systems ESP-IDF Espressif SystemsのESP-IDFにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-122
ヒープオーバーフロー 		CVE-2026-45542 2026-06-12 14:50 2026-06-10 Show GitHub Exploit DB Packet Storm
1752 7.8 重要
Local 		マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft&n… 		Windows Collaborative Translation Framework (CTFMON) の特権昇格の脆弱性 CWE-59
リンク解釈の問題 		CVE-2026-45586 2026-06-12 14:50 2026-06-9 Show GitHub Exploit DB Packet Storm
1753 7.9 重要
Local 		マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft&n… 		セキュア ブートのセキュリティ機能のバイパスの脆弱性 CWE-693
保護メカニズムの不具合 		CVE-2026-45588 2026-06-12 14:50 2026-06-9 Show GitHub Exploit DB Packet Storm
1754 7.8 重要
Local 		マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft&n… 		Windows インターネット (wininet.dll) の特権昇格の脆弱性 CWE-190
CWE-416
CVE-2026-45592 2026-06-12 14:50 2026-06-9 Show GitHub Exploit DB Packet Storm
1755 7.8 重要
Local 		マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2019
Microsoft Windows 11 26h1
Microsoft … 		Windows SDK の特権の昇格の脆弱性 CWE-190
CWE-416
CVE-2026-45593 2026-06-12 14:50 2026-06-9 Show GitHub Exploit DB Packet Storm
1756 5.5 警告
Local 		マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft&n… 		Windows アプリケーション ID (AppID) の情報漏えいの脆弱性 CWE-200
情報漏えい 		CVE-2026-45594 2026-06-12 14:50 2026-06-9 Show GitHub Exploit DB Packet Storm
1757 5.4 警告
Network 		マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft&n… 		Windows Mark Of The Web セキュリティ機能のバイパスの脆弱性 CWE-693
保護メカニズムの不具合 		CVE-2026-45595 2026-06-12 14:50 2026-06-9 Show GitHub Exploit DB Packet Storm
1758 7 重要
Local 		マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft&n… 		WinSock 用 Windows Ancillary Function Driver の特権の昇格の脆弱性 CWE-362
CWE-416
CVE-2026-45596 2026-06-12 14:50 2026-06-9 Show GitHub Exploit DB Packet Storm
1759 7 重要
Local 		マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows 11 26h1
Microsoft Windows 11 24h2
Microsoft Wind… 		Windows UI オートメーション マネージャー (uiamanager.dll) の特権昇格の脆弱性 CWE-362
競合状態 		CVE-2026-45597 2026-06-12 14:50 2026-06-9 Show GitHub Exploit DB Packet Storm
1760 7 重要
Local 		マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft&n… 		WinSock 用 Windows Ancillary Function Driver の特権の昇格の脆弱性 CWE-362
競合状態 		CVE-2026-45598 2026-06-12 14:50 2026-06-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 28, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
4221 4.3 MEDIUM
Network 		google chrome Inappropriate implementation in MediaCapture in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: … CWE-20
 Improper Input Validation  		CVE-2026-11685 2026-06-9 23:51 2026-06-9 Show GitHub Exploit DB Packet Storm
4222 3.1 LOW
Network 		google chrome Insufficient policy enforcement in Network in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the utility process to leak cross-origin data via a crafted HTML page… CWE-693
 Protection Mechanism Failure 		CVE-2026-11684 2026-06-9 23:51 2026-06-9 Show GitHub Exploit DB Packet Storm
4223 8.3 HIGH
Network 		google chrome Use after free in Tracing in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. … CWE-416
 Use After Free 		CVE-2026-11700 2026-06-9 23:51 2026-06-9 Show GitHub Exploit DB Packet Storm
4224 8.8 HIGH
Network 		google chrome Use after free in Bluetooth in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) CWE-416
 Use After Free 		CVE-2026-11699 2026-06-9 23:51 2026-06-9 Show GitHub Exploit DB Packet Storm
4225 9.6 CRITICAL
Network 		google chrome Insufficient validation of untrusted input in UI in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security… CWE-20
 Improper Input Validation  		CVE-2026-11697 2026-06-9 23:51 2026-06-9 Show GitHub Exploit DB Packet Storm
4226 5.3 MEDIUM
Network 		google chrome Uninitialized Use in Video in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from proc… CWE-457
 Use of Uninitialized Variable 		CVE-2026-11696 2026-06-9 23:51 2026-06-9 Show GitHub Exploit DB Packet Storm
4227 4.3 MEDIUM
Network 		google chrome Inappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High) CWE-693
 Protection Mechanism Failure 		CVE-2026-11695 2026-06-9 23:50 2026-06-9 Show GitHub Exploit DB Packet Storm
4228 8.8 HIGH
Network 		google chrome Use after free in Bluetooth in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) CWE-416
 Use After Free 		CVE-2026-11698 2026-06-9 23:50 2026-06-9 Show GitHub Exploit DB Packet Storm
4229 5.3 MEDIUM
Network 		checkmk checkmk Incorrect authorization in the User Messages dashboard widget in Checkmk <2.5.0p5 causes the message-fetching endpoints to return the dashboard creator's messages rather than the viewer's, allowing a… CWE-863
 Incorrect Authorization 		CVE-2026-7765 2026-06-9 23:49 2026-06-8 Show GitHub Exploit DB Packet Storm
4230 5.4 MEDIUM
Network 		checkmk checkmk Improper neutralization of HTML-encoded characters in the URL validation function in Checkmk <2.5.0p5, <2.4.0p31, <2.3.0p48, and all 2.2.0 versions allows an authenticated user to bypass URL validati… CWE-79
Cross-site Scripting 		CVE-2026-8833 2026-06-9 23:49 2026-06-8 Show GitHub Exploit DB Packet Storm