Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 16, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
871	8.8	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-11630	2026-06-10 14:31	2026-06-9	Show	GitHub Exploit DB Packet Storm

872	8.3	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-11631	2026-06-10 14:31	2026-06-9	Show	GitHub Exploit DB Packet Storm

873	7.5	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-11632	2026-06-10 14:31	2026-06-9	Show	GitHub Exploit DB Packet Storm

874	8.8	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-11633	2026-06-10 14:31	2026-06-9	Show	GitHub Exploit DB Packet Storm

875	9.6	緊急 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-11634	2026-06-10 14:31	2026-06-9	Show	GitHub Exploit DB Packet Storm

876	8.3	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-11635	2026-06-10 14:31	2026-06-9	Show	GitHub Exploit DB Packet Storm

877	7.5	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-11636	2026-06-10 14:31	2026-06-9	Show	GitHub Exploit DB Packet Storm

878	8.8	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-11637	2026-06-10 14:31	2026-06-9	Show	GitHub Exploit DB Packet Storm

879	9.6	緊急 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-11638	2026-06-10 14:31	2026-06-9	Show	GitHub Exploit DB Packet Storm

880	7.5	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-11639	2026-06-10 14:31	2026-06-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 17, 2026, 4:19 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
3151	7.8	HIGH Local	-	-	In the Linux kernel, the following vulnerability has been resolved: smb: client: reject userspace cifs.spnego descriptions cifs.spnego key descriptions contain authority-bearing fields such as pid,…	CWE-20 Improper Input Validation	CVE-2026-46243	2026-06-5 16:16	2026-06-2	Show	GitHub Exploit DB Packet Storm

3152	7.8	HIGH Local	-	-	In the Linux kernel, the following vulnerability has been resolved: eventpoll: fix ep_remove struct eventpoll / struct file UAF ep_remove() (via ep_remove_file()) cleared file->f_ep under file->f_l…	-	CVE-2026-46242	2026-06-5 16:16	2026-05-30	Show	GitHub Exploit DB Packet Storm

3153	3.3	LOW Local	-	-	HCL BigFix Cloud Lifecycle Management is affected by lack of input validation. This low-level flaw allows unauthorized access and may lead to information exposure.	-	CVE-2025-62338	2026-06-5 14:16	2026-06-4	Show	GitHub Exploit DB Packet Storm

3154	4.1	MEDIUM Network	-	-	Cross Site Scripting vulnerability in MaxSite CMS v.109.2 allows a remote attacker to obtain sensitive information via the Backend page file upload endpoint used by admin_page	CWE-79 Cross-site Scripting	CVE-2026-37700	2026-06-5 11:17	2026-06-4	Show	GitHub Exploit DB Packet Storm

3155	8.1	HIGH Adjacent	-	-	Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 exposes 15 of 18 UPnP IGD actions without authentication on port 1900, including AddPortMapping and GetExternalIPAddress. UPnP is enabl…	CWE-306 Missing Authentication for Critical Function	CVE-2026-36603	2026-06-5 11:17	2026-06-4	Show	GitHub Exploit DB Packet Storm

3156	4.3	MEDIUM Adjacent	-	-	Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 discloses kernel memory layout via the UPnP GetStatusInfo action. An unauthenticated attacker on the adjacent network can obtain a raw …	CWE-200 Information Exposure	CVE-2026-36602	2026-06-5 11:17	2026-06-4	Show	GitHub Exploit DB Packet Storm

3157	7.5	HIGH Network	google	chrome	Type Confusion in V8 in Google Chrome prior to 148.0.7778.216 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code inside a sandbox via a crafted Chrome…	CWE-843 Type Confusion	CVE-2026-10022	2026-06-5 11:16	2026-05-29	Show	GitHub Exploit DB Packet Storm

3158	4.7	MEDIUM Local	linaro	op-tee	OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Prior to version 4.11.0, on many of t…	CWE-347 Improper Verification of Cryptographic Signature	CVE-2026-45614	2026-06-5 09:20	2026-06-4	Show	GitHub Exploit DB Packet Storm

3159	9.8	CRITICAL Network	acer	predator_connect_w6x_firmware	Crafted MQTT messages can trigger command injection, resulting in root-level code execution on the target device.	CWE-77 Command Injection	CVE-2026-49199	2026-06-5 04:44	2026-05-29	Show	GitHub Exploit DB Packet Storm

3160	9.6	CRITICAL Network	huggingface	transformers	A vulnerability in the LightGlue model loading path of huggingface/transformers version 5.2.0 allows an attacker-controlled model repository to execute arbitrary code during model initialization. The…	CWE-829 Inclusion of Functionality from Untrusted Control Sphere	CVE-2026-5241	2026-06-5 03:54	2026-06-3	Show	GitHub Exploit DB Packet Storm