June 2026
8,314 CVEs published, +13% on May 2026 and 2.1× June 2025. CISA added 23 to KEV.
2026 month by month
- Critical
- 91413% of the 7,187 with a CVSS score
- Added to CISA KEV
- 2315 of this month's CVEs are in KEV, listed a median 2 days after publication
- Vendors
- 1,9527,510 products
- Top weakness
- XSSCWE-79 · 663 CVEs
Who drove it
Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.
- 1GoogleChrome, Android, Google Chrome1,0951072+1
- 2LinuxLinux, Linux Kernel51440none−1
- 3MicrosoftWindows 11 26h1, Windows 11 Version 26h1, Windows Server 202526519none—
- 4OracleWebcenter Content, Oracle Webcenter Content, Enterprise Manager Base Platform2431231+35
- 5AdobeExperience Manager, Adobe Experience Manager, Acrobat Reader14512none+12
- 6Red HatRed Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 101322none—
- 7Apache Software FoundationApache Airflow, Apache Activemq, Apache HTTP Server12121none—
- 8ApacheAirflow, Activemq, HTTP Server11019none+2
- 9PyPIPraisonai, Praisonaiagents, Picklescan980none+22
- 10npmOpenclaw, Praisonai, Network-ai890none−2
- 11IBMWebsphere Application Server, Langflow Oss, Watsonx.data Intelligence7516none+9
- 12SpringSpring Framework, Spring Web Services, Spring Security720nonenew
- 13CapgoCapgo, Cli611nonenew
- 14OpenclawOpenclaw611none−3
- 15ThemerexLine Agency, Luxmed | Medicine & Healthcare Doctor WordPress Theme, Maxinet585nonenew
- 16Сообщество Свободного Программного ОбеспеченияDebian Gnu/linux, Xwayland, Gpac555none−12
- 17ApplemacOS, iPhone OS, iOS and iPadOS521none−12
- 18MozillaFirefox, Thunderbird, Firefox For IOS509none+6
- 19SourcecodesterClass and Exam Timetabling System, Pharmacy Sales and Inventory System, Inventory System490none+16
- 20VMwareSpring Framework, Spring Security, Spring Data Rest440none+137
- 21ItsourcecodeHospital Management System, Fees Management System, Online Hotel Management System430none+63
- 22ImagemagickImagemagick410nonenew
- 23DellPowerflex Manager, Powerflex, Wyse Management Suite381none+31
- 24JenkinsJenkins, Jenkins Assembla Plugin, Jenkins Contrast Continuous Application Security Plugin360none+68
- 25GoGithub.com/klever-io/klever-go, Github.com/gohugoio/hugo, Github.com/go-chi/chi/v5/middleware350none+4
Severity
How this month's CVEs score on CVSS; 1,127 have no score yet. Severity is not exploitation.
- Critical914
- High3,202
- Medium2,813
- Low258
Breakouts
Vendors with at least three times their own 12-month median.
New in the top 100
Not in the top 100 in any of the 24 months before.
What kind of weakness
Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.
- CWE-79XSS663
- CWE-416Use After Free436
- CWE-89SQL Injection406
- CWE-862Missing Authorization389
- CWE-284Improper Access Control371
- CWE-20Improper Input Validation367
- CWE-22Path Traversal317
- CWE-125Out-of-bounds Read214
- CWE-200Information Exposure186
- CWE-502Deserialization185
- CWE-306Missing Auth for Critical Function184
- CWE-78OS Command Injection182
- CWE-639Auth Bypass via User Key174
- CWE-74Injection172
- CWE-918SSRF171
- CWE-787Out-of-bounds Write169
- CWE-863Incorrect Authorization162
- CWE-94Code Injection153
- CWE-400Resource Consumption146
- CWE-121130
Where it landed
The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.
- OSS Libraries1,51317% of sector-tagged CVEs
- Web & CMS Plugins1,47616% of sector-tagged CVEs
- Consumer Software1,40115% of sector-tagged CVEs
- Operating Systems1,20113% of sector-tagged CVEs
- Enterprise Software93410% of sector-tagged CVEs
- Cloud & SaaS4024% of sector-tagged CVEs
- Networking Infrastructure3834% of sector-tagged CVEs
- 8 smaller sectors1,648
- Not yet classified203
Which weakness, where
The top weakness classes against the vendors and the sectors that carried them.
The lighter the cell, the more CVEs. Point at one to read it.
| By vendor | 79XSS | 416Use After Free | 89SQL Injection | 862Missing Authorization | 20Improper Input Validation | 284Improper Access Control | 22Path Traversal | 125Out-of-bounds Read | 502Deserialization | 787Out-of-bounds Write |
|---|---|---|---|---|---|---|---|---|---|---|
| 15 | 268 | 2 | 15 | 219 | 43 | 3 | 60 | 33 | ||
| Linux | 85 | 7 | 42 | 30 | ||||||
| Oracle Corporation | 3 | 1 | 159 | 1 | ||||||
| Oracle | 3 | 1 | 159 | 1 | ||||||
| Microsoft Corp | 21 | 51 | 1 | 15 | 9 | 3 | 22 | 3 | 14 | |
| Microsoft | 24 | 47 | 2 | 6 | 8 | 3 | 21 | 3 | 12 | |
| Adobe | 60 | 13 | 11 | 1 | 5 | 9 | 10 | |||
| Red Hat | 3 | 7 | 3 | 1 | 4 | 15 | 6 | |||
| Apache Software Foundation | 4 | 2 | 2 | 3 | 9 | 5 | 2 | 6 | ||
| Adobe Systems Inc. | 58 | 11 | 8 | 1 | 2 | 4 | 7 | |||
| PyPI | 5 | 1 | 6 | 3 | 1 | 21 | 1 | 10 | 1 | |
| Apache | 4 | 2 | 2 | 3 | 9 | 3 | 2 | 6 |
In the news
The CVEs security news mentioned most in June 2026.
- CVE-2026-35273Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment Management). Supported versions that are affected are 8.61 and 8.62. Easily explo...239.8
- CVE-2026-20245Cisco Catalyst SD-WAN Controller Authenticated Privilege Escalation Vulnerability197.8
- CVE-2026-45586Windows Collaborative Translation Framework (CTFMON) Elevation of Privilege Vulnerability197.8
- CVE-2026-20230Cisco Unified Communications Manager Server-Side Request Forgery Vulnerability158.6
- CVE-2026-45585Windows BitLocker Security Feature Bypass Vulnerability156.8
- CVE-2026-50507Windows BitLocker Security Feature Bypass Vulnerability156.8
- CVE-2026-33825Microsoft Defender Elevation of Privilege Vulnerability147.8
- CVE-2026-41091Microsoft Defender Elevation of Privilege Vulnerability137.8
- CVE-2026-50751User Authentication Bypass in VPN Remote Access and Mobile Access139.3
- CVE-2026-10520An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated user to achieve root-level remote code execution1210.0
- CVE-2026-49160HTTP.sys Denial of Service Vulnerability127.5
- CVE-2026-20253Unauthenticated Arbitrary File Creation and Truncation in a PostgreSQL Sidecar Service Endpoint in Splunk Enterprise119.8
CVEs published in June 2026
289 vulnerabilities from this month that were exploited in the wild (CISA KEV), covered in the news, explained on cve.tools or searched for. Known-exploited first, then by CVSS. Showing 101–200.
- CVE-2026-45504Microsoft Exchange Server Elevation of Privilege Vulnerability8.8
- CVE-2026-45648Windows Active Directory Domain Services Remote Code Execution Vulnerability8.8
- CVE-2026-47162Vim: Vimscript Code Injection in netrw NetrwBookHistSave() via crafted directory name8.8
- CVE-2026-47289Remote Desktop Client Remote Code Execution Vulnerability8.8
- CVE-2026-47653Remote Desktop Client Remote Code Execution Vulnerability8.8
- CVE-2026-48095GHSL-2026-140_7-Zip: 7-Zip has a heap buffer overflow via NTFS compressed stream buffer under-allocation8.8
- CVE-2026-48307ColdFusion | Cross-site Scripting (Reflected XSS) (CWE-79)8.8
- CVE-2026-8461Heap out-of-bounds write via odd slice_height in FFmpeg MagicYUV decoder8.8
- CVE-2026-9787Quest NetVault Backup NVBULogDaemon Command Injection Remote Code Execution Vulnerability8.8
- CVE-2026-10086Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab8.7
- CVE-2026-12053Insertion of Sensitive Information into Log File in GitLab8.6
- CVE-2026-58049FFmpeg - Out-of-Bounds Write in RASC Decoder decode_dlta()8.6
- CVE-2026-54312n8n: Microsoft SQL Node Prototype Pollution8.5
- CVE-2026-26422clash-verge-service-ipc before 2.3.0 has a world-reachable IPC endpoint, leading to local privilege escalation.8.4
- CVE-2026-45456Microsoft Outlook and Word Remote Code Execution Vulnerability8.4
- CVE-2026-45458Microsoft Outlook and Word Remote Code Execution Vulnerability8.4
- CVE-2026-45461Microsoft Office Remote Code Execution Vulnerability8.4
- CVE-2026-45463Microsoft Office Remote Code Execution Vulnerability8.4
- CVE-2026-45472Microsoft Office Remote Code Execution Vulnerability8.4
- CVE-2026-45482Microsoft Visual Studio Code CoPilot Chat Security Feature Bypass Vulnerability8.4
- CVE-2026-45607Windows Hyper-V Remote Code Execution Vulnerability8.4
- CVE-2026-45641Windows Hyper-V Remote Code Execution Vulnerability8.4
- CVE-2026-12008Use after free in DigitalCredentials in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafte...8.3
- CVE-2026-12009Insufficient validation of untrusted input in Accessibility in Google Chrome on Mac prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform...8.3
- CVE-2026-12019Heap buffer overflow in Codecs in Google Chrome on Linux and ChromeOS prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox esc...8.3
- CVE-2017-20258Joomla! Component RPC Responsive Portfolio 1.6.1 SQL Injection8.2
- CVE-2017-20276Joomla! Component SIMGenealogy 2.1.5 SQL Injection8.2
- CVE-2026-45476Microsoft Azure Network Adapter Elevation of Privilege Vulnerability8.2
- CVE-2026-10795UpdraftPlus: WP Backup & Migration Plugin <= 1.26.4 - Unauthenticated Authentication Bypass via UpdraftCentral udrpc8.1
- CVE-2026-11311NGINX Gateway Fabric vulnerability8.1
- CVE-2026-35019NetComm NF20MESH < R6B032 Hardcoded AES Key Authentication Bypass8.1
- CVE-2026-42055NGINX ngx_http_proxy_v2_module and ngx_http_grpc_module vulnerability8.1
- CVE-2026-42530NGINX Open-Source ngx_http_v3_module vulnerability8.1
- CVE-2026-42835Microsoft Teams for Android Information Disclosure Vulnerability8.1
- CVE-2026-42987Windows Deployment Services (WDS) Remote Code Execution8.1
- CVE-2026-43735The issue was addressed with improved checks. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watch...8.1
- CVE-2026-45503Microsoft Exchange Server Information Disclosure Vulnerability8.1
- CVE-2026-45635Windows UPnP Device Host Remote Code Execution Vulnerability8.1
- CVE-2026-50107NGINX Gateway Fabric vulnerability8.1
- CVE-2026-52845Caddy: FastCGI header normalization bypass in `forward_auth copy_headers`8.1
- CVE-2026-54513jackson-databind: Array subtype allowlist bypass in BasicPolymorphicTypeValidator (allowIfSubTypeIsArray)8.1
- CVE-2026-55200libssh2 - Out-of-Bounds Write via Unchecked packet_length in transport.c8.1
- CVE-2026-10712Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab8.0
- CVE-2026-11400Privilege Escalation in AWS Advanced JDBC Wrapper for Amazon Aurora PostgreSQL8.0
- CVE-2026-47298Microsoft SharePoint Server Remote Code Execution Vulnerability8.0
- CVE-2026-45588Secure Boot Security Feature Bypass Vulnerability7.9
- CVE-2026-47656Windows Boot Manager Security Feature Bypass Vulnerability7.9
- CVE-2026-48568Secure Boot Security Feature Bypass Vulnerability7.9
- CVE-2026-48575Secure Boot Security Feature Bypass Vulnerability7.9
- CVE-2026-0100In Load of LoadedArsc.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. Us...7.8
- CVE-2026-11332Ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution7.8
- CVE-2026-12957Arbitrary Code Execution in Language Servers for AWS7.8
- CVE-2026-12958Arbitrary file write in Language Servers for AWS7.8
- CVE-2026-2049GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8
- CVE-2026-40404Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability7.8
- CVE-2026-41092Microsoft Kinect Elevation of Privilege Vulnerability7.8
- CVE-2026-42829Windows Administrator Protection Secure Feature Bypass Vulnerability7.8
- CVE-2026-42902Microsoft PowerToys Elevation of Privilege Vulnerability7.8
- CVE-2026-42905Windows DWM Core Library Elevation of Privilege Vulnerability7.8
- CVE-2026-42910Windows Hotpatch Monitoring Service Elevation of Privilege Vulnerability7.8
- CVE-2026-42916NT OS Kernel Elevation of Privilege Vulnerability7.8
- CVE-2026-42980NT OS Kernel Elevation of Privilege Vulnerability7.8
- CVE-2026-42989Winlogon Elevation of Privilege Vulnerability7.8
- CVE-2026-42991Windows Push Notifications Elevation of Privilege Vulnerability7.8
- CVE-2026-43724The issue was addressed with improved input sanitization. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe...7.8
- CVE-2026-44803Windows Graphics Component Remote Code Execution Vulnerability7.8
- CVE-2026-44812Windows Graphics Component Remote Code Execution Vulnerability7.8
- CVE-2026-44817Microsoft Excel Remote Code Execution Vulnerability7.8
- CVE-2026-45486Microsoft Word Remote Code Execution Vulnerability7.8
- CVE-2026-45487Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability7.8
- CVE-2026-45490.NET SDK Elevation of Privilege Vulnerability7.8
- CVE-2026-45586Windows Collaborative Translation Framework (CTFMON) Elevation of Privilege Vulnerability7.8
- CVE-2026-45592Windows Internet (wininet.dll) Elevation of Privilege Vulnerability7.8
- CVE-2026-45600Windows Kernel-Mode Driver Elevation of Privilege Vulnerability7.8
- CVE-2026-45605Windows Bluetooth Service Elevation of Privilege Vulnerability7.8
- CVE-2026-45636Windows NTFS Remote Code Execution Vulnerability7.8
- CVE-2026-45637Microsoft DWM Core Library Elevation of Privilege Vulnerability7.8
- CVE-2026-45658Windows BitLocker Security Feature Bypass Vulnerability7.8
- CVE-2026-47292Visual Studio Code MSSQL Extension Remote Code Execution Vulnerability7.8
- CVE-2026-47955Acrobat Reader | Use After Free (CWE-416)7.8
- CVE-2026-47965Acrobat Reader | Out-of-bounds Write (CWE-787)7.8
- CVE-2026-48574Windows Media Remote Code Execution Vulnerability7.8
- CVE-2026-48583Windows Kernel Elevation of Privilege Vulnerability7.8
- CVE-2026-50261Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in syncchangecounter()7.8
- CVE-2026-50656Microsoft Defender Elevation of Privilege Vulnerability7.8
- CVE-2026-53264net/sched: act_api: use RCU with deferred freeing for action lifecycle7.8
- CVE-2026-41003Unencoded HTML Outputs in Spring Security May Allow Cross-Site Scripting7.6
- CVE-2025-71330image-size 2.0.2 Denial of Service via Malformed ICNS Image Parsing7.5
- CVE-2026-10816Arbitrary File Read (Unauthenticated)7.5
- CVE-2026-13474Denial of service via malformed HTTP/2 requests7.5
- CVE-2026-14164Libarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack()7.5
- CVE-2026-20190Cisco Identity Services Engine Information Disclosure Vulnerability7.5
- CVE-2026-3018Newsletters <= 4.13 - Unauthenticated SQL Injection via wpmlsubscriber_id Parameter7.5
- CVE-2026-40376Visual Studio Code Elevation of Privilege Vulnerability7.5
- CVE-2026-41523vLLM: Security Check Bypass via assert Statement in Activation Function Loading Allows Arbitrary Code Execution7.5
- CVE-2026-41842Spring Framework Denial of Service via Versioned Resources in Spring MVC and WebFlux7.5
- CVE-2026-42542TDengine has an integer underflow in uvConnMayGetUserInfo() allows unauthenticated remote crash (DoS)7.5
- CVE-2026-42909Remote Desktop Client Remote Code Execution Vulnerability7.5
- CVE-2026-42992Remote Desktop Client Remote Code Execution Vulnerability7.5
- CVE-2026-42993Remote Desktop Client Remote Code Execution Vulnerability7.5