Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 15, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3091	7.8	重要 Local	マイクロソフト	Microsoft Windows Server 2019 Microsoft Windows 10 1607 Microsoft Windows Server 2016 Microsoft Windows 11 23h2 Microsoft …	リモートデスクトップライセンスサービスの特権昇格の脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-26160	2026-04-27 10:51	2026-04-14	Show	GitHub Exploit DB Packet Storm

3092	7.8	重要 Local	マイクロソフト	Microsoft Windows Server 2019 Microsoft Windows 11 23h2 Microsoft Windows 11 26h1 Microsoft Windows 10 1809 Microsoft Wind…	Windows Sensor Data Service の特権昇格の脆弱性	CWE-20 CWE-822	CVE-2026-26161	2026-04-27 10:51	2026-04-14	Show	GitHub Exploit DB Packet Storm

3093	7.8	重要 Local	マイクロソフト	Microsoft Windows Server 2019 Microsoft Windows 10 1607 Microsoft Windows Server 2016 Microsoft Windows 11 23h2 Microsoft …	Windows OLE の特権の昇格の脆弱性	CWE-843 型の取り違え	CVE-2026-26162	2026-04-27 10:51	2026-04-14	Show	GitHub Exploit DB Packet Storm

3094	7.8	重要 Local	マイクロソフト	Microsoft Windows Server 2019 Microsoft Windows 10 1607 Microsoft Windows Server 2016 Microsoft Windows 11 23h2 Microsoft …	Windows カーネルの特権の昇格の脆弱性	CWE-415 二重解放	CVE-2026-26163	2026-04-27 10:51	2026-04-14	Show	GitHub Exploit DB Packet Storm

3095	7	重要 Local	マイクロソフト	Microsoft Windows 11 23h2 Microsoft Windows 11 26h1 Microsoft Windows Server 2025 Microsoft Windows 11 24h2 Microsoft Wind…	Windows シェルの特権の昇格の脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-26165	2026-04-27 10:51	2026-04-14	Show	GitHub Exploit DB Packet Storm

3096	7	重要 Local	マイクロソフト	Microsoft Windows 11 23h2 Microsoft Windows 11 26h1 Microsoft Windows Server 2025 Microsoft Windows 11 24h2 Microsoft Wind…	Windows シェルの特権の昇格の脆弱性	CWE-415 二重解放	CVE-2026-26166	2026-04-27 10:51	2026-04-14	Show	GitHub Exploit DB Packet Storm

3097	7.8	重要 Local	マイクロソフト	Microsoft Windows Server 2019 Microsoft Windows 10 1607 Microsoft Windows Server 2016 Microsoft Windows 11 23h2 Microsoft …	Windows プッシュ通知の特権昇格の脆弱性	CWE-362 CWE-416	CVE-2026-26167	2026-04-27 10:51	2026-04-14	Show	GitHub Exploit DB Packet Storm

3098	7.8	重要 Local	マイクロソフト	Microsoft Windows Server 2019 Microsoft Windows 10 1607 Microsoft Windows Server 2016 Microsoft Windows 11 23h2 Microsoft …	WinSock 用 Windows Ancillary Function Driver の特権の昇格の脆弱性	CWE-362 CWE-416	CVE-2026-26168	2026-04-27 10:51	2026-04-14	Show	GitHub Exploit DB Packet Storm

3099	6.1	警告 Local	マイクロソフト	Microsoft Windows Server 2019 Microsoft Windows 10 1607 Microsoft Windows Server 2016 Microsoft Windows 11 23h2 Microsoft …	Windows カーネルメモリの情報漏えいの脆弱性	CWE-126 バッファオーバーリード	CVE-2026-26169	2026-04-27 10:51	2026-04-14	Show	GitHub Exploit DB Packet Storm

3100	7.8	重要 Local	マイクロソフト	Microsoft Windows Server 2019 Microsoft Windows 10 1607 Microsoft Windows Server 2016 Microsoft Windows 11 23h2 Microsoft …	PowerShell の特権の昇格の脆弱性	CWE-20 不適切な入力確認	CVE-2026-26170	2026-04-27 10:51	2026-04-14	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1181	6.2	MEDIUM Local	-	-	CAI Content Credentials versions 0.78.2, 0.7.0 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could explo… New	CWE-400 Uncontrolled Resource Consumption	CVE-2026-34678	2026-05-13 23:49	2026-05-13	Show	GitHub Exploit DB Packet Storm

1182	6.2	MEDIUM Local	-	-	CAI Content Credentials versions 0.78.2, 0.7.0 and earlier are affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit … New	CWE-20 Improper Input Validation	CVE-2026-34679	2026-05-13 23:49	2026-05-13	Show	GitHub Exploit DB Packet Storm

1183	6.2	MEDIUM Local	-	-	CAI Content Credentials versions 0.78.2, 0.7.0 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exp… New	CWE-190 Integer Overflow or Wraparound	CVE-2026-34680	2026-05-13 23:49	2026-05-13	Show	GitHub Exploit DB Packet Storm

1184	3.4	LOW Network	-	-	Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier [NEEDS REVIEW: impact mismatch — ticket says 'Arbitrary file system write', CIA triad derives 'Sec… New	CWE-20 Improper Input Validation	CVE-2026-34685	2026-05-13 23:49	2026-05-13	Show	GitHub Exploit DB Packet Storm

1185	6.2	MEDIUM Local	-	-	CAI Content Credentials versions 0.78.2, 0.7.0 and earlier are affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit … New	CWE-20 Improper Input Validation	CVE-2026-34688	2026-05-13 23:49	2026-05-13	Show	GitHub Exploit DB Packet Storm

1186	-		-	-	Improper enforcement of the LFENCE serialization property may allow an attacker to bypass speculation barriers and potentially disclose sensitive information, potentially resulting in loss of confide… New	CWE-693 Protection Mechanism Failure	CVE-2024-36315	2026-05-13 23:49	2026-05-13	Show	GitHub Exploit DB Packet Storm

1187	-		-	-	Missing lock bit protection for NBIO registers could allow a local admin-privileged attacker to modify MMIO routing configurations, potentially resulting in loss of SEV-SNP guest integrity. New	CWE-1233 Security-Sensitive Hardware Controls with Missing Lock Bit Protection	CVE-2025-61971	2026-05-13 23:49	2026-05-13	Show	GitHub Exploit DB Packet Storm

1188	-		-	-	Missing lock bit protection for NBIO registers could allow a local admin-privileged attacker to gain arbitrary System Management Network (SMN) access, potentially resulting in arbitrary code executio… New	CWE-1233 Security-Sensitive Hardware Controls with Missing Lock Bit Protection	CVE-2025-61972	2026-05-13 23:49	2026-05-13	Show	GitHub Exploit DB Packet Storm

1189	-		-	-	A heap-based buffer overflow in the ionic cloud driver for VMware ESXi could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution. New	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2025-62623	2026-05-13 23:49	2026-05-13	Show	GitHub Exploit DB Packet Storm

1190	-		-	-	A heap-based buffer overflow in the ionic cloud driver for VMware ESXi could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution. New	CWE-122 Heap-based Buffer Overflow	CVE-2025-62624	2026-05-13 23:49	2026-05-13	Show	GitHub Exploit DB Packet Storm