Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 19, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
3951 7.8 重要
Local
マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows 11 26h1
Microsoft Windows Server 2025
Microsoft Windows 11 24h2
Microsoft Wind…
Windows 記憶域スペース コントローラーの特権昇格の脆弱性 CWE-191
整数アンダーフロー
CVE-2026-27907 2026-04-24 11:32 2026-04-14 Show GitHub Exploit DB Packet Storm
3952 7 重要
Local
マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft …
Windows TDI 翻訳ドライバー (tdx.sys) の特権昇格の脆弱性 CWE-416
解放済みメモリの使用
CVE-2026-27908 2026-04-24 11:32 2026-04-14 Show GitHub Exploit DB Packet Storm
3953 7.8 重要
Local
マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft …
Windows Search サービスの特権の昇格の脆弱性 CWE-416
解放済みメモリの使用
CVE-2026-27909 2026-04-24 11:32 2026-04-14 Show GitHub Exploit DB Packet Storm
3954 7.8 重要
Local
マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft …
Windows インストーラーの特権の昇格の脆弱性 CWE-280
権限管理不備
CVE-2026-27910 2026-04-24 11:32 2026-04-14 Show GitHub Exploit DB Packet Storm
3955 7.8 重要
Local
マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft …
Windows ユーザー インターフェイス コアの特権昇格の脆弱性 CWE-362
CWE-416
CVE-2026-27911 2026-04-24 11:32 2026-04-14 Show GitHub Exploit DB Packet Storm
3956 8 重要
Adjacent
マイクロソフト Microsoft Windows Server 2016
Microsoft Windows Server 2025
Microsoft Windows Server 2019
Microsoft Windows Server 2022
Microso…
Windows Kerberos の特権の昇格の脆弱性 CWE-285
不適切な認可
CVE-2026-27912 2026-04-24 11:32 2026-04-14 Show GitHub Exploit DB Packet Storm
3957 7.7 重要
Local
マイクロソフト Microsoft Windows Server 2019
Microsoft Windows Server 2022
Microsoft Windows Server 2012
Microsoft Windows Server 2016
Windows BitLocker セキュリティ機能バイパスの脆弱性 CWE-20
不適切な入力確認
CVE-2026-27913 2026-04-24 11:32 2026-04-14 Show GitHub Exploit DB Packet Storm
3958 7.8 重要
Local
マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft …
Microsoft 管理コンソールの特権昇格の脆弱性 CWE-284
不適切なアクセス制御
CVE-2026-27914 2026-04-24 11:32 2026-04-14 Show GitHub Exploit DB Packet Storm
3959 7.8 重要
Local
マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft …
Windows UPnP Device Host の特権の昇格の脆弱性 CWE-416
解放済みメモリの使用
CVE-2026-27915 2026-04-24 11:32 2026-04-14 Show GitHub Exploit DB Packet Storm
3960 7.8 重要
Local
マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft …
Windows UPnP Device Host の特権の昇格の脆弱性 CWE-416
解放済みメモリの使用
CVE-2026-27916 2026-04-24 11:32 2026-04-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
781 8.8 HIGH
Network
- - Use after free in Blink in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Critical) CWE-416
 Use After Free
CVE-2026-8518 2026-05-15 06:19 2026-05-15 Show GitHub Exploit DB Packet Storm
782 7.5 HIGH
Adjacent
- - Use after free in Tab Groups in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code via malicious network traffic. (Chromium security severity: Critical) CWE-416
 Use After Free
CVE-2026-8521 2026-05-15 06:19 2026-05-15 Show GitHub Exploit DB Packet Storm
783 8.8 HIGH
Network
- - Use after free in Downloads in Google Chrome on Mac prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical) CWE-416
 Use After Free
CVE-2026-8522 2026-05-15 06:19 2026-05-15 Show GitHub Exploit DB Packet Storm
784 8.8 HIGH
Network
- - Heap buffer overflow in Codecs in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted video file. (Chromium security severity: Hig… CWE-122
Heap-based Buffer Overflow
CVE-2026-8529 2026-05-15 06:19 2026-05-15 Show GitHub Exploit DB Packet Storm
785 8.8 HIGH
Network
- - Integer overflow in XML in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High) CWE-472
 External Control of Assumed-Immutable Web Parameter
CVE-2026-8532 2026-05-15 06:19 2026-05-15 Show GitHub Exploit DB Packet Storm
786 8.8 HIGH
Network
- - Type Confusion in V8 in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High) CWE-843
Type Confusion
CVE-2026-8540 2026-05-15 06:19 2026-05-15 Show GitHub Exploit DB Packet Storm
787 8.8 HIGH
Network
- - Use after free in Media in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High) CWE-416
 Use After Free
CVE-2026-8544 2026-05-15 06:19 2026-05-15 Show GitHub Exploit DB Packet Storm
788 7.5 HIGH
Network
- - Insufficient policy enforcement in Passwords in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via… CWE-862
 Missing Authorization
CVE-2026-8547 2026-05-15 06:19 2026-05-15 Show GitHub Exploit DB Packet Storm
789 8.8 HIGH
Network
- - Use after free in Media in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High) CWE-416
 Use After Free
CVE-2026-8549 2026-05-15 06:19 2026-05-15 Show GitHub Exploit DB Packet Storm
790 8.8 HIGH
Network
- - Use after free in Downloads in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page… CWE-416
 Use After Free
CVE-2026-8551 2026-05-15 06:19 2026-05-15 Show GitHub Exploit DB Packet Storm