Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 23, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
6131 6.5 警告
Network
フォーティネット FortiSOAR フォーティネットのFortiSOARにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2026-22573 2026-05-8 12:08 2026-04-14 Show GitHub Exploit DB Packet Storm
6132 6.5 警告
Network
フォーティネット FortiSOAR フォーティネットのFortiSOARにおける複数の脆弱性 CWE-257
CWE-522
CVE-2026-22574 2026-05-8 12:08 2026-04-14 Show GitHub Exploit DB Packet Storm
6133 6.5 警告
Network
フォーティネット FortiSOAR フォーティネットのFortiSOARにおける複数の脆弱性 CWE-257
CWE-522
CVE-2026-22576 2026-05-8 12:08 2026-04-14 Show GitHub Exploit DB Packet Storm
6134 8.8 重要
Network
redis Redis Redis Ltd.のRedisにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用
CVE-2026-23479 2026-05-8 12:08 2026-05-5 Show GitHub Exploit DB Packet Storm
6135 8.1 重要
Network
redis Redis Redis Ltd.のRedisにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用
CVE-2026-23631 2026-05-8 12:08 2026-05-5 Show GitHub Exploit DB Packet Storm
6136 6.5 警告
Network
マイクロソフト Microsoft Visual Studio Code CoPilot Chat Extension GitHub Copilot と Visual Studio Code の情報漏えいの脆弱性 CWE-77
コマンドインジェクション
CVE-2026-23653 2026-05-8 12:08 2026-04-14 Show GitHub Exploit DB Packet Storm
6137 8.1 重要
Network
フォーティネット FortiSOAR フォーティネットのFortiSOARにおける複数の脆弱性 CWE-287
CWE-862
CVE-2026-23708 2026-05-8 12:08 2026-04-14 Show GitHub Exploit DB Packet Storm
6138 8.8 重要
Network
redis Redis Redis Ltd.のRedisにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-122
ヒープオーバーフロー
CVE-2026-25243 2026-05-8 12:08 2026-05-5 Show GitHub Exploit DB Packet Storm
6139 7.8 重要
Local
クアルコム X2000094 ファームウェア
XG101002 ファームウェア
Snapdragon AR1 Gen 1 ファームウェア
WSA8835 ファームウェア
XG101032 ファームウェア
WSA8830 ファームウェア
fastconnect 7800&nb…
クアルコムのCologne ファームウェア等の複数製品における複数の脆弱性 CWE-749
CWE-787
CVE-2026-25266 2026-05-8 12:08 2026-05-4 Show GitHub Exploit DB Packet Storm
6140 9.8 緊急
Network
クアルコム QCA7005 ファームウェア クアルコムのQCA7005 ファームウェアにおける不正な認証に関する脆弱性 CWE-863
不正な認証
CVE-2026-25293 2026-05-8 12:08 2026-05-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 23, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1721 5.3 MEDIUM
Network
google chrome Out of bounds read in Media in Google Chrome on ChromeOS prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from pr… CWE-472
 External Control of Assumed-Immutable Web Parameter
CVE-2026-11669 2026-06-11 01:16 2026-06-9 Show GitHub Exploit DB Packet Storm
1722 8.3 HIGH
Network
google chrome Heap buffer overflow in GPU in Google Chrome on Android prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafte… CWE-787
 Out-of-bounds Write
CVE-2026-11672 2026-06-11 01:15 2026-06-9 Show GitHub Exploit DB Packet Storm
1723 5.4 MEDIUM
Network
microsoft sharepoint_server Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. CWE-79
Cross-site Scripting
CVE-2026-47637 2026-06-11 01:14 2026-06-10 Show GitHub Exploit DB Packet Storm
1724 5.4 MEDIUM
Network
microsoft sharepoint_server Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. CWE-79
Cross-site Scripting
CVE-2026-47638 2026-06-11 01:07 2026-06-10 Show GitHub Exploit DB Packet Storm
1725 5.4 MEDIUM
Network
microsoft sharepoint_server Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. CWE-79
Cross-site Scripting
CVE-2026-47639 2026-06-11 01:06 2026-06-10 Show GitHub Exploit DB Packet Storm
1726 5.4 MEDIUM
Network
microsoft sharepoint_server Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. CWE-79
Cross-site Scripting
CVE-2026-47640 2026-06-11 01:01 2026-06-10 Show GitHub Exploit DB Packet Storm
1727 5.4 MEDIUM
Network
microsoft sharepoint_server Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. CWE-20
NVD-CWE-noinfo
 Improper Input Validation 
CVE-2026-47641 2026-06-11 00:59 2026-06-10 Show GitHub Exploit DB Packet Storm
1728 8.3 HIGH
Network
google chrome Insufficient validation of untrusted input in Dawn in Google Chrome on Linux and ChromeOS prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially per… CWE-20
NVD-CWE-noinfo
 Improper Input Validation 
CVE-2026-11676 2026-06-11 00:32 2026-06-9 Show GitHub Exploit DB Packet Storm
1729 8.8 HIGH
Network
google chrome Use after free in Ozone in Google Chrome on Linux prior to 149.0.7827.103 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) CWE-416
 Use After Free
CVE-2026-11681 2026-06-11 00:32 2026-06-9 Show GitHub Exploit DB Packet Storm
1730 7.8 HIGH
Local
microsoft windows_10_1607
windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2012
windows_server_2016
w…
Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally. CWE-122
Heap-based Buffer Overflow
CVE-2026-48574 2026-06-11 00:32 2026-06-10 Show GitHub Exploit DB Packet Storm