Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 16, 2026, noon
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 3401 | 8.1 |
重要
Network |
マイクロソフト |
Microsoft Windows Server 2025 Microsoft Windows 10 22h2 Microsoft Windows 11 25h2 Microsoft Windows Server 2022 Microsoft … |
Windows TCP/IP のリモートでコードが実行される脆弱性 |
CWE-416
解放済みメモリの使用 |
CVE-2026-40415 | 2026-05-18 11:31 | 2026-05-12 | Show | GitHub Exploit DB Packet Storm |
| 3402 | 4.3 |
警告
Network |
マイクロソフト |
Microsoft Word Microsoft 365 Apps Microsoft Office |
Microsoft Word の情報漏えいの脆弱性 |
CWE-73
ファイル名やパス名の外部制御 |
CVE-2026-40421 | 2026-05-18 11:31 | 2026-05-12 | Show | GitHub Exploit DB Packet Storm |
| 3403 | 8.8 |
重要
Network |
マイクロソフト | Windows Admin Center | Azure potal 上の Windows Admin Center の特権昇格の脆弱性 |
CWE-284
不適切なアクセス制御 |
CVE-2026-41086 | 2026-05-18 11:31 | 2026-05-12 | Show | GitHub Exploit DB Packet Storm |
| 3404 | 7.8 |
重要
Local |
マイクロソフト |
Microsoft Windows Server 2025 Microsoft Windows 11 25h2 Microsoft Windows 10 22h2 Microsoft Windows Server 2022 Microsoft … |
WinSock 用 Windows Ancillary Function Driver の特権の昇格の脆弱性 |
CWE-73
ファイル名やパス名の外部制御 |
CVE-2026-41088 | 2026-05-18 11:31 | 2026-05-12 | Show | GitHub Exploit DB Packet Storm |
| 3405 | 9.8 |
緊急
Network |
マイクロソフト |
Microsoft Windows Server 2025 Microsoft Windows Server 2016 Microsoft Windows Server 2019 Microsoft Windows Server 2012 Microso… |
Windows Netlogon のリモートでコードが実行される脆弱性 |
CWE-121
スタックオーバーフロー |
CVE-2026-41089 | 2026-05-18 11:31 | 2026-05-12 | Show | GitHub Exploit DB Packet Storm |
| 3406 | 7.8 |
重要
Local |
マイクロソフト |
Microsoft Windows Server 2025 Microsoft Windows Server 2016 Microsoft Windows Server 2019 Microsoft Windows Server 2012 Microso… |
Data Deduplication Elevation of Privilege Vulnerability |
CWE-416
解放済みメモリの使用 |
CVE-2026-41095 | 2026-05-18 11:31 | 2026-05-12 | Show | GitHub Exploit DB Packet Storm |
| 3407 | 9.8 |
緊急
Network |
マイクロソフト |
Microsoft Windows Server 2025 Microsoft Windows 11 25h2 Microsoft Windows 11 26h1 Microsoft Windows 11 24h2 Microsoft Wind… |
Windows DNS クライアントのリモートでコードが実行される脆弱性 |
CWE-122
ヒープオーバーフロー |
CVE-2026-41096 | 2026-05-18 11:31 | 2026-05-12 | Show | GitHub Exploit DB Packet Storm |
| 3408 | 6.7 |
警告
Local |
マイクロソフト |
Microsoft Windows Server 2025 Microsoft Windows 10 22h2 Microsoft Windows 11 25h2 Microsoft Windows Server 2022 Microsoft … |
セキュア ブートのセキュリティ機能のバイパスの脆弱性 |
CWE-1329
アップデートができないコンポーネントへの依存 |
CVE-2026-41097 | 2026-05-18 11:31 | 2026-05-12 | Show | GitHub Exploit DB Packet Storm |
| 3409 | 4.4 |
警告
Local |
マイクロソフト | Microsoft 365 Copilot | Android 用の Microsoft 365 Copilot のスプーフィングの脆弱性 |
CWE-284 CWE-Other |
CVE-2026-41100 | 2026-05-18 11:31 | 2026-05-12 | Show | GitHub Exploit DB Packet Storm |
| 3410 | 5.5 |
警告
Local |
マイクロソフト | Microsoft Word | Microsoft Edge for Android のスプーフィングの脆弱性 |
CWE-284 CWE-noinfo |
CVE-2026-41101 | 2026-05-18 11:31 | 2026-05-12 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:June 16, 2026, 4:13 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 3351 | 6.4 |
MEDIUM
Local |
qualcomm |
snapdragon_g1_gen_2_gaming_platform_firmware 5g_fixed_wireless_access_platform_firmware c-v2x_9150_firmware cq7790_firmware cq8725s_firmware sm7435p_firmware sm7525_firmware sm75… |
Memory Corruption when processing IOCTL requests with mismatched API versions due to concurrent modification of user-space buffer. |
CWE-367
Time-of-check Time-of-use (TOCTOU) Race Condition |
CVE-2025-59610 | 2026-06-3 00:28 | 2026-06-2 | Show | GitHub Exploit DB Packet Storm |
| 3352 | 6.7 |
MEDIUM
Local |
qualcomm |
aqt1000_firmware cologne_firmware fastconnect_6200_firmware fastconnect_6700_firmware fastconnect_6800_firmware fastconnect_6900_firmware fastconnect_7800_firmware iqx5121_firmwa… |
Memory corruption in diagnostic services due to absence of input validation |
CWE-787
Out-of-bounds Write |
CVE-2025-59611 | 2026-06-3 00:27 | 2026-06-2 | Show | GitHub Exploit DB Packet Storm |
| 3353 | 6.7 |
MEDIUM
Local |
qualcomm |
cologne_firmware fastconnect_6700_firmware fastconnect_6900_firmware fastconnect_7800_firmware iqx5121_firmware iqx7181_firmware qca0000_firmware qcm5430_firmware qcm6490_firm… |
Memory corruption in windows drivers while sending incorrect trusted application request |
CWE-121
Stack-based Buffer Overflow |
CVE-2025-59612 | 2026-06-3 00:27 | 2026-06-2 | Show | GitHub Exploit DB Packet Storm |
| 3354 | 6.7 |
MEDIUM
Local |
qualcomm |
cologne_firmware fastconnect_6700_firmware fastconnect_6900_firmware fastconnect_7800_firmware iqx5121_firmware iqx7181_firmware qca0000_firmware qcm5430_firmware qcm6490_firm… |
Memory Corruption when output buffer size is smaller than input buffer size during data copying operation. |
CWE-121
Stack-based Buffer Overflow |
CVE-2025-59613 | 2026-06-3 00:26 | 2026-06-2 | Show | GitHub Exploit DB Packet Storm |
| 3355 | 6.7 |
MEDIUM
Local |
qualcomm |
cologne_firmware fastconnect_6900_firmware fastconnect_7800_firmware iqx5121_firmware iqx7181_firmware qca0000_firmware sc8380xp_firmware wcd9378c_firmware wcd9380_firmware
Memory Corruption when sending random number generator command with insufficient output buffer size.
|
CWE-787
|
Out-of-bounds Write
CVE-2025-59614
|
2026-06-3 00:26 |
2026-06-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 3356 | 7.2 |
HIGH
Physics |
qualcomm |
qca6391_firmware qca6564au_firmware qca6574_firmware qca6574a_firmware qca6574au_firmware qca6584au_firmware qca6595_firmware qca6595au_firmware qca6678aq_firmware qca6688a… |
Memory Corruption when processing display command line information due to improper initialization of a variable. |
CWE-121
Stack-based Buffer Overflow |
CVE-2026-24085 | 2026-06-3 00:26 | 2026-06-2 | Show | GitHub Exploit DB Packet Storm |
| 3357 | 7.2 |
HIGH
Physics |
qualcomm |
ar8031_firmware ar8035_firmware cologne_firmware cq7790_firmware cq8725s_firmware qpa1083bd_firmware qpa1086bd_firmware qrb5165n_firmware qru1032_firmware qualcomm_dragonwi… |
Memory corruption while processing fastboot OEM commands. |
CWE-1286
Improper Validation of Syntactic Correctness of Input |
CVE-2026-24087 | 2026-06-3 00:26 | 2026-06-2 | Show | GitHub Exploit DB Packet Storm |
| 3358 | 8.2 |
HIGH
Local |
qualcomm |
ar9380_firmware csr8811_firmware fastconnect_6200_firmware fastconnect_6700_firmware fastconnect_6900_firmware fastconnect_7800_firmware g1_gen_1_firmware g2_gen_1_firmware g3… |
Cryptographic Issue while processing a specific partition which allows unauthorized write access to load a customized bootloader. |
CWE-306
Missing Authentication for Critical Function |
CVE-2026-24088 | 2026-06-3 00:26 | 2026-06-2 | Show | GitHub Exploit DB Packet Storm |
| 3359 | 7.2 |
HIGH
Physics |
qualcomm |
ar8031_firmware ar8035_firmware cologne_firmware cq7790_firmware cq8725s_firmware qmp1000_firmware qmp2001_firmware qpa1083bd_firmware qpa1086bd_firmware qrb5165n_firmware<… |
Memory corruption while processing fastboot commands with invalid input. |
CWE-1286
Improper Validation of Syntactic Correctness of Input |
CVE-2026-24089 | 2026-06-3 00:25 | 2026-06-2 | Show | GitHub Exploit DB Packet Storm |
| 3360 | 7.1 |
HIGH
Local |
qualcomm |
ar8031_firmware ar8035_firmware cologne_firmware cq7790_firmware cq8725s_firmware sm6850_firmware sm7435_firmware sm7435p_firmware sm7525_firmware sm7550_firmware sm7550… |
Cryptographic issue while processing partition table entries allows unauthorized modification of boot flow. |
CWE-306
Missing Authentication for Critical Function |
CVE-2026-24090 | 2026-06-3 00:25 | 2026-06-2 | Show | GitHub Exploit DB Packet Storm |