Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 8, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
3161 9.8 緊急
Network
マイクロソフト Microsoft Entra ID Azure Entra ID に存在する特権昇格の脆弱性 CWE-285
不適切な認可
CVE-2026-24305 2026-02-5 15:44 2026-01-22 Show GitHub Exploit DB Packet Storm
3162 8.1 重要
Network
International Color Consortium (ICC) iccDEV International Color Consortium (ICC)のiccDEVにおける複数の脆弱性 CWE-122
CWE-125
CWE-170
CVE-2026-24852 2026-02-5 15:44 2026-01-28 Show GitHub Exploit DB Packet Storm
3163 7.8 重要
Local
International Color Consortium (ICC) iccDEV International Color Consortium (ICC)のiccDEVにおける複数の脆弱性 CWE-20
CWE-681
CWE-704
CVE-2026-24856 2026-02-5 15:43 2026-01-28 Show GitHub Exploit DB Packet Storm
3164 - - Ubia Ubox Ubia 製 Ubox における認証情報の不十分な保護の脆弱性 CWE-522
認証情報の不十分な保護
CVE-2025-12636 2026-02-5 14:33 2025-11-7 Show GitHub Exploit DB Packet Storm
3165 4.5 警告
Network
Hitachi Energy Relion 670 ファームウェア
Relion 650 ファームウェア
Hitachi Energy 製 Relion 670、650 および SAM600-IO Series におけるデータの信頼性確認が不十分な脆弱性 CWE-345
データの信頼性についての不十分な検証
CVE-2022-3864 2026-02-5 14:30 2023-03-10 Show GitHub Exploit DB Packet Storm
3166 7.5 重要
Network
Hitachi Energy Relion 670 ファームウェア
Relion 650 ファームウェア
Hitachi Energy 製 IEC 61850 MMS-Server におけるリソースの不適切なシャットダウンまたはリリースの脆弱性 CWE-404
リソースの不適切なシャットダウンおよびリリース
CVE-2022-3353 2026-02-5 14:29 2023-03-31 Show GitHub Exploit DB Packet Storm
3167 4.7 警告
Network
web2py web2py web2pyにおけるオープンリダイレクトの脆弱性 CWE-Other
その他
CVE-2026-25198 2026-02-5 14:03 2026-02-5 Show GitHub Exploit DB Packet Storm
3168 - - RISS SRL MOMA Seismic Station RISS SRL製MOMA Seismic Stationにおける重要な機能に対する認証の欠如の脆弱性 CWE-306
重要な機能に対する認証の欠如 解説
CVE-2026-1632 2026-02-5 12:32 2026-02-4 Show GitHub Exploit DB Packet Storm
3169 - - Avation Avation Light Engine Pro Avation Light Engine Proにおける重要な機能に対する認証の欠如の脆弱性 CWE-306
重要な機能に対する認証の欠如 解説
CVE-2026-1341 2026-02-5 12:32 2026-02-4 Show GitHub Exploit DB Packet Storm
3170 7.5 重要
Network
Shenzhen Tenda Technology Co.,Ltd. D151
D301
Shenzhen Tenda Technology Co.,Ltd.のD151等の複数製品における重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説
CVE-2021-47802 2026-02-4 18:42 2026-01-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
461 8.3 HIGH
Network
google chrome Use after free in Aura in Google Chrome on Windows prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML… New CWE-416
 Use After Free
CVE-2026-7911 2026-05-7 08:40 2026-05-7 Show GitHub Exploit DB Packet Storm
462 4.2 MEDIUM
Network
google chrome Integer overflow in GPU in Google Chrome on Android prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to perform arbitrary read/write via a crafted HTML page. … New CWE-472
 External Control of Assumed-Immutable Web Parameter
CVE-2026-7912 2026-05-7 08:40 2026-05-7 Show GitHub Exploit DB Packet Storm
463 7.8 HIGH
Local
google chrome Insufficient policy enforcement in DevTools in Google Chrome on Android prior to 148.0.7778.96 allowed a local attacker to perform privilege escalation via a malicious file. (Chromium security severi… New CWE-693
 Protection Mechanism Failure
CVE-2026-7913 2026-05-7 08:40 2026-05-7 Show GitHub Exploit DB Packet Storm
464 8.3 HIGH
Network
google chrome Type Confusion in Accessibility in Google Chrome on Windows prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a cra… New CWE-843
Type Confusion
CVE-2026-7914 2026-05-7 08:40 2026-05-7 Show GitHub Exploit DB Packet Storm
465 4.3 MEDIUM
Network
google chrome Insufficient data validation in DevTools in Google Chrome on Android prior to 148.0.7778.96 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security sev… New NVD-CWE-noinfo
CVE-2026-7915 2026-05-7 08:40 2026-05-7 Show GitHub Exploit DB Packet Storm
466 8.3 HIGH
Network
google chrome Insufficient data validation in InterestGroups in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a… New NVD-CWE-noinfo
CVE-2026-7916 2026-05-7 08:39 2026-05-7 Show GitHub Exploit DB Packet Storm
467 8.3 HIGH
Network
google chrome Use after free in Fullscreen in Google Chrome on Windows prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafte… New CWE-416
 Use After Free
CVE-2026-7917 2026-05-7 08:39 2026-05-7 Show GitHub Exploit DB Packet Storm
468 8.3 HIGH
Network
google chrome Use after free in GPU in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chro… New CWE-416
 Use After Free
CVE-2026-7918 2026-05-7 08:39 2026-05-7 Show GitHub Exploit DB Packet Storm
469 8.3 HIGH
Network
google chrome Use after free in Aura in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chr… New CWE-416
 Use After Free
CVE-2026-7919 2026-05-7 08:38 2026-05-7 Show GitHub Exploit DB Packet Storm
470 8.3 HIGH
Network
google chrome Use after free in Skia in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chr… New CWE-416
 Use After Free
CVE-2026-7920 2026-05-7 08:38 2026-05-7 Show GitHub Exploit DB Packet Storm