Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
200841	7.2	危険	マイクロソフト	-	複数の Microsoft Windows 製品のリモートデスクトッププロトコルの実装における任意のコードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2016-0036	2016-02-17 11:16	2016-02-9	Show	GitHub Exploit DB Packet Storm

200842	5	警告	マイクロソフト	-	Microsoft .NET Framework におけるサービス運用妨害 (DoS) の脆弱性	CWE-94 コード・インジェクション	CVE-2016-0033	2016-02-17 11:16	2016-02-9	Show	GitHub Exploit DB Packet Storm

200843	4.3	警告	マイクロソフト	-	Microsoft SharePoint Foundation 2013 の SharePoint Server におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2016-0039	2016-02-17 11:10	2016-02-9	Show	GitHub Exploit DB Packet Storm

200844	9.3	危険	マイクロソフト	-	複数の Microsoft Office 製品におけるクロスサイトスクリプティングの脆弱性	CWE-119 バッファエラー	CVE-2016-0022	2016-02-17 11:04	2016-02-9	Show	GitHub Exploit DB Packet Storm

200845	7.2	危険	マイクロソフト	-	複数の Microsoft 製品における権限昇格の脆弱性	CWE-Other その他	CVE-2016-0041	2016-02-17 10:57	2016-02-9	Show	GitHub Exploit DB Packet Storm

200846	5	警告	マイクロソフト	-	Microsoft Windows Server 2008 および 2012 のネットワークポリシーサーバーにおけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2016-0050	2016-02-17 10:39	2016-02-9	Show	GitHub Exploit DB Packet Storm

200847	5	警告	マイクロソフト	-	Microsoft Windows Server 2012 の Active Directory フェデレーションサービスのフォームベース認証の実装におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2016-0037	2016-02-17 10:38	2016-02-9	Show	GitHub Exploit DB Packet Storm

200848	4	警告	MySQL AB オラクル	-	MySQL におけるサービス運用妨害 (mysqld のクラッシュ) の脆弱性	CWE-399 リソース管理の問題	CVE-2012-2749	2016-02-16 18:08	2012-08-17	Show	GitHub Exploit DB Packet Storm

200849	10	危険	オラクル	-	Oracle Java SE における任意のコードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-3174	2016-02-16 18:07	2013-01-14	Show	GitHub Exploit DB Packet Storm

200850	3.5	注意	MySQL AB オラクル	-	Oracle MySQL における Server Types の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-1548	2016-02-16 17:56	2013-04-16	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 24, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
881	7.8	HIGH Local	-	-	Buffer over-read in Windows Projected File System allows an authorized attacker to elevate privileges locally.	CWE-126 Buffer Over-read	CVE-2026-26184	2026-04-18 00:10	2026-04-15	Show	GitHub Exploit DB Packet Storm

882	4.4	MEDIUM Local	-	-	Improper input validation in Windows Hello allows an authorized attacker to bypass a security feature locally.	CWE-20 Improper Input Validation	CVE-2026-27906	2026-04-18 00:10	2026-04-15	Show	GitHub Exploit DB Packet Storm

883	7.8	HIGH Local	-	-	Integer underflow (wrap or wraparound) in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.	CWE-191 Integer Underflow (Wrap or Wraparound)	CVE-2026-27907	2026-04-18 00:10	2026-04-15	Show	GitHub Exploit DB Packet Storm

884	7.0	HIGH Local	-	-	Use after free in Windows TDI Translation Driver (tdx.sys) allows an authorized attacker to elevate privileges locally.	CWE-416 Use After Free	CVE-2026-27908	2026-04-18 00:10	2026-04-15	Show	GitHub Exploit DB Packet Storm

885	7.8	HIGH Local	-	-	Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.	CWE-416 Use After Free	CVE-2026-27909	2026-04-18 00:10	2026-04-15	Show	GitHub Exploit DB Packet Storm

886	7.8	HIGH Local	-	-	Improper handling of insufficient permissions or privileges in Windows Installer allows an authorized attacker to elevate privileges locally.	CWE-280 Improper Handling of Insufficient Permissions or Privileges	CVE-2026-27910	2026-04-18 00:10	2026-04-15	Show	GitHub Exploit DB Packet Storm

887	7.8	HIGH Local	-	-	Concurrent execution using shared resource with improper synchronization ('race condition') in Windows User Interface Core allows an authorized attacker to elevate privileges locally.	CWE-362 CWE-416 Race Condition Use After Free	CVE-2026-27911	2026-04-18 00:10	2026-04-15	Show	GitHub Exploit DB Packet Storm

888	8.0	HIGH Adjacent	-	-	Improper authorization in Windows Kerberos allows an authorized attacker to elevate privileges over an adjacent network.	CWE-285 Improper Authorization	CVE-2026-27912	2026-04-18 00:10	2026-04-15	Show	GitHub Exploit DB Packet Storm

889	7.7	HIGH Local	-	-	Improper input validation in Windows BitLocker allows an unauthorized attacker to bypass a security feature locally.	CWE-20 Improper Input Validation	CVE-2026-27913	2026-04-18 00:10	2026-04-15	Show	GitHub Exploit DB Packet Storm

890	7.8	HIGH Local	-	-	Improper access control in Microsoft Management Console allows an authorized attacker to elevate privileges locally.	CWE-284 Improper Access Control	CVE-2026-27914	2026-04-18 00:10	2026-04-15	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed