Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 12, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
71 5.4 警告
Network
マイクロソフト Microsoft SharePoint Server Microsoft SharePoint Server のなりすましの脆弱性 New CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-45468 2026-06-12 14:50 2026-06-9 Show GitHub Exploit DB Packet Storm
72 7 重要
Local
マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows 11 26h1
Microsoft Windows 11 24h2
Microsoft Wind…
Windows プログラム互換性アシスタント サービスの特権昇格の脆弱性 New CWE-367
Time-of-check Time-of-use (TOCTOU) 競合状態
CVE-2026-45487 2026-06-12 14:50 2026-06-9 Show GitHub Exploit DB Packet Storm
73 7.5 重要
Network
Espressif Systems ESP-IDF Espressif SystemsのESP-IDFにおけるNULL ポインタデリファレンスに関する脆弱性 New CWE-476
NULL ポインタデリファレンス
CVE-2026-45541 2026-06-12 14:50 2026-06-10 Show GitHub Exploit DB Packet Storm
74 7.1 重要
Adjacent
Espressif Systems ESP-IDF Espressif SystemsのESP-IDFにおけるヒープベースのバッファオーバーフローの脆弱性 New CWE-122
ヒープオーバーフロー
CVE-2026-45542 2026-06-12 14:50 2026-06-10 Show GitHub Exploit DB Packet Storm
75 7.8 重要
Local
マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft&n…
Windows Collaborative Translation Framework (CTFMON) の特権昇格の脆弱性 New CWE-59
リンク解釈の問題
CVE-2026-45586 2026-06-12 14:50 2026-06-9 Show GitHub Exploit DB Packet Storm
76 7.9 重要
Local
マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft&n…
セキュア ブートのセキュリティ機能のバイパスの脆弱性 New CWE-693
保護メカニズムの不具合
CVE-2026-45588 2026-06-12 14:50 2026-06-9 Show GitHub Exploit DB Packet Storm
77 7.8 重要
Local
マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft&n…
Windows インターネット (wininet.dll) の特権昇格の脆弱性 New CWE-190
CWE-416
CVE-2026-45592 2026-06-12 14:50 2026-06-9 Show GitHub Exploit DB Packet Storm
78 7.8 重要
Local
マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2019
Microsoft Windows 11 26h1
Microsoft …
Windows SDK の特権の昇格の脆弱性 New CWE-190
CWE-416
CVE-2026-45593 2026-06-12 14:50 2026-06-9 Show GitHub Exploit DB Packet Storm
79 5.5 警告
Local
マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft&n…
Windows アプリケーション ID (AppID) の情報漏えいの脆弱性 New CWE-200
情報漏えい
CVE-2026-45594 2026-06-12 14:50 2026-06-9 Show GitHub Exploit DB Packet Storm
80 5.4 警告
Network
マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft&n…
Windows Mark Of The Web セキュリティ機能のバイパスの脆弱性 New CWE-693
保護メカニズムの不具合
CVE-2026-45595 2026-06-12 14:50 2026-06-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 12, 2026, 4:20 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1731 6.5 MEDIUM
Network
google chrome Insufficient validation of untrusted input in WebUI in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted … CWE-20
 Improper Input Validation 
CVE-2026-11105 2026-06-8 23:45 2026-06-5 Show GitHub Exploit DB Packet Storm
1732 6.5 MEDIUM
Network
google chrome Inappropriate implementation in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium) CWE-352
 Origin Validation Error
CVE-2026-11106 2026-06-8 23:45 2026-06-5 Show GitHub Exploit DB Packet Storm
1733 4.3 MEDIUM
Network
google chrome Inappropriate implementation in Downloads in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) CWE-451
 User Interface (UI) Misrepresentation of Critical Information
CVE-2026-11107 2026-06-8 23:45 2026-06-5 Show GitHub Exploit DB Packet Storm
1734 8.8 HIGH
Network
google chrome Inappropriate implementation in NFC in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to perform privilege escalation via a crafted HTML page. (Chromium security severity: … CWE-269
 Improper Privilege Management
CVE-2026-11108 2026-06-8 23:44 2026-06-5 Show GitHub Exploit DB Packet Storm
1735 6.5 MEDIUM
Network
google chrome Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium) CWE-457
 Use of Uninitialized Variable
CVE-2026-11109 2026-06-8 23:44 2026-06-5 Show GitHub Exploit DB Packet Storm
1736 6.5 MEDIUM
Network
google chrome Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium) CWE-457
 Use of Uninitialized Variable
CVE-2026-11110 2026-06-8 23:44 2026-06-5 Show GitHub Exploit DB Packet Storm
1737 8.1 HIGH
Network
google chrome Out of bounds read in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium) CWE-125
Out-of-bounds Read
CVE-2026-11111 2026-06-8 23:44 2026-06-5 Show GitHub Exploit DB Packet Storm
1738 4.3 MEDIUM
Network
google chrome Uninitialized Use in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium) CWE-457
 Use of Uninitialized Variable
CVE-2026-11159 2026-06-8 23:40 2026-06-5 Show GitHub Exploit DB Packet Storm
1739 6.5 MEDIUM
Network
google chrome Out of bounds read in Input in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromi… CWE-125
Out-of-bounds Read
CVE-2026-11160 2026-06-8 23:39 2026-06-5 Show GitHub Exploit DB Packet Storm
1740 4.3 MEDIUM
Network
google chrome Inappropriate implementation in DataTransfer in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium) CWE-346
 Origin Validation Error
CVE-2026-11161 2026-06-8 23:39 2026-06-5 Show GitHub Exploit DB Packet Storm