Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 18, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
221 8.8 重要
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品における権限管理に関する脆弱性 New CWE-269
不適切な権限管理 		CVE-2026-12289 2026-06-17 15:35 2026-06-16 Show GitHub Exploit DB Packet Storm
222 5.4 警告
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品における複数の脆弱性 New CWE-125
CWE-416
CWE-787
CVE-2026-12298 2026-06-17 15:35 2026-06-16 Show GitHub Exploit DB Packet Storm
223 5.4 警告
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品における型の取り違えに関する脆弱性 New CWE-843
型の取り違え 		CVE-2026-12299 2026-06-17 15:35 2026-06-16 Show GitHub Exploit DB Packet Storm
224 4.3 警告
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品における境界外読み取りに関する脆弱性 New CWE-125
境界外読み取り 		CVE-2026-12303 2026-06-17 15:35 2026-06-16 Show GitHub Exploit DB Packet Storm
225 4.7 警告
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品における複数の脆弱性 New CWE-200
CWE-688
CVE-2026-12311 2026-06-17 15:35 2026-06-16 Show GitHub Exploit DB Packet Storm
226 4.7 警告
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品における権限管理に関する脆弱性 New CWE-269
不適切な権限管理 		CVE-2026-12313 2026-06-17 15:35 2026-06-16 Show GitHub Exploit DB Packet Storm
227 6.5 警告
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品におけるリソースの枯渇に関する脆弱性 New CWE-400
リソースの枯渇 		CVE-2026-12319 2026-06-17 15:35 2026-06-16 Show GitHub Exploit DB Packet Storm
228 4.3 警告
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品における情報漏えいに関する脆弱性 New CWE-200
情報漏えい 		CVE-2026-12320 2026-06-17 15:34 2026-06-16 Show GitHub Exploit DB Packet Storm
229 5.4 警告
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品における常に不適切な制御フローの実装に関する脆弱性 New CWE-670
常に不適切な制御フローの実装 		CVE-2026-12321 2026-06-17 15:34 2026-06-16 Show GitHub Exploit DB Packet Storm
230 5.4 警告
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品におけるレンダリングされたユーザインターフェースレイヤまたはフレームの不適切な制限に関する脆弱性 New CWE-1021
レンダリングされたユーザインターフェースレイヤまたはフレームの不適切な制限 		CVE-2026-12322 2026-06-17 15:34 2026-06-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 18, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
257611 6.1 MEDIUM
Network 		google
redhat
debian 		chrome
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation
debian_linux 		XSS Auditor in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed detection of a blocked iframe load, which allowed a remote attacker to brute force… CWE-79
Cross-site Scripting 		CVE-2017-5045 2024-11-21 12:26 2017-04-25 Show GitHub Exploit DB Packet Storm
257612 6.3 MEDIUM
Network 		google
debian
redhat 		chrome
debian_linux
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation 		Heap buffer overflow in filter processing in Skia in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bound… CWE-787
 Out-of-bounds Write 		CVE-2017-5044 2024-11-21 12:26 2017-04-25 Show GitHub Exploit DB Packet Storm
257613 8.8 HIGH
Network 		google
redhat
debian 		chrome
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation
debian_linux 		Chrome Apps in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac had a use after free bug in GuestView, which allowed a remote attacker to perform an out of bounds memory read via a cra… CWE-416
 Use After Free 		CVE-2017-5043 2024-11-21 12:26 2017-04-25 Show GitHub Exploit DB Packet Storm
257614 5.7 MEDIUM
Adjacent 		google
redhat
debian 		chrome
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation
debian_linux 		Cast in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android sent cookies to sites discovered via SSDP, which allowed an attacker on the local network segment… CWE-311
Missing Encryption of Sensitive Data 		CVE-2017-5042 2024-11-21 12:26 2017-04-25 Show GitHub Exploit DB Packet Storm
257615 4.3 MEDIUM
Network 		google chrome Google Chrome prior to 57.0.2987.100 incorrectly handled back-forward navigation, which allowed a remote attacker to display incorrect information for a site via a crafted HTML page. CWE-20
 Improper Input Validation  		CVE-2017-5041 2024-11-21 12:26 2017-04-25 Show GitHub Exploit DB Packet Storm
257616 4.3 MEDIUM
Network 		google
debian
redhat 		chrome
debian_linux
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation 		V8 in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android was missing a neutering check, which allowed a remote attacker to read values in memory via a craft… NVD-CWE-noinfo
CVE-2017-5040 2024-11-21 12:26 2017-04-25 Show GitHub Exploit DB Packet Storm
257617 7.8 HIGH
Local 		google
debian
redhat 		chrome
debian_linux
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation 		A use after free in PDFium in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to potentially exploit heap corruption via a craf… CWE-416
 Use After Free 		CVE-2017-5039 2024-11-21 12:26 2017-04-25 Show GitHub Exploit DB Packet Storm
257618 6.3 MEDIUM
Network 		google
debian
redhat 		chrome
debian_linux
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation 		Chrome Apps in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac had a use after free bug in GuestView, which allowed a remote attacker to perform an out of bounds memory read via a cra… CWE-416
 Use After Free 		CVE-2017-5038 2024-11-21 12:26 2017-04-25 Show GitHub Exploit DB Packet Storm
257619 7.8 HIGH
Local 		google
debian
redhat 		chrome
debian_linux
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation 		An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory write via a… CWE-190
 Integer Overflow or Wraparound 		CVE-2017-5037 2024-11-21 12:26 2017-04-25 Show GitHub Exploit DB Packet Storm
257620 7.8 HIGH
Local 		google
debian
redhat 		chrome
debian_linux
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation 		A use after free in PDFium in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to have an unspecified impact via a crafted PDF f… CWE-416
 Use After Free 		CVE-2017-5036 2024-11-21 12:26 2017-04-25 Show GitHub Exploit DB Packet Storm