CVEs published in June 2026
8,400 vulnerabilities, 981 critical, 27 exploited.
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 morecrypto: af_alg - Cap AEAD AD length to 0x800000005.5 Medium
- linux, linux kernel +1 morenet: ena: PHC: Fix potential use-after-free in get_timestamp7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenetfilter: nft_ct: fix missing expect put in obj eval5.5 Medium
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 moreKVM: Reject wrapped offset in kvm_reset_dirty_gfn()7.8 High
- linux, linux kernel +1 moreKVM: s390: pci: fix GAIT table indexing due to double-scaling pointer arithmetic8.8 High
- linux, linux kernel +1 moresmb/client: fix possible infinite loop and oob read in symlink_data()8.1 High
- linux, linux kernel +1 moredrm: Replace old pointer to new idr5.5 Medium
- linux, linux kernel +1 moredrm/ttm: Fix ttm_bo_swapout() infinite LRU walk on swapout failure5.5 Medium
- linux, linux kernel +1 moreALSA: usb-audio: Bound MIDI 2.0 endpoint descriptor scans5.5 Medium
- linux, linux kernel +1 moreALSA: usb-audio: Bound MIDI endpoint descriptor scans5.5 Medium
- linux, linux kernel +1 moreceph: fix a buffer leak in __ceph_setxattr()7.8 High
- linux, linux kernel +1 moreceph: fix BUG_ON in __ceph_build_xattrs_blob() due to stale blob size5.5 Medium
- linux, linux kernel +1 moreceph: put folios not suitable for writeback7.5 High
- linux, linux kernel +1 morevirt: sev-guest: Do not use host-controlled page order in cleanup path7.8 High
- linux, linux kernel +1 morelibceph: Fix potential out-of-bounds access in osdmap_decode()9.1 Critical
- linux, linux kernel +1 morelibceph: Fix potential null-ptr-deref in decode_choose_args()7.5 High
- linux, linux kernel +1 morelibceph: Fix potential out-of-bounds access in __ceph_x_decrypt()7.5 High
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 morelibceph: Fix potential out-of-bounds access in crush_decode()9.8 Critical
- linux, linux kernel +1 morelibceph: handle rbtree insertion error in decode_choose_args()7.5 High
- linux, linux kernel +1 moreiommu/vt-d: Fix oops due to out of scope access7.1 High
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 moreiommu: Fix WARN_ON in __iommu_group_set_domain_nofail() due to reset8.8 High
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 moredrm/xe/dma-buf: handle empty bo and UAF races7.8 High
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 moredrm/xe/dma-buf: fix UAF with retry loop7.8 High
- linux, linux kernel +1 moredrm/ttm: Fix ttm_bo_shrink() infinite LRU walk on backup failure5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morei2c: dev: prevent integer overflow in I2C_TIMEOUT ioctl5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morenet: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morefs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling7.5 High
- linux, linux kernel +1 moreRevert "wireguard: device: enable threaded NAPI"7.5 High
- mailerupUnauthenticated self-registration in MailerUp allows access to stored email data8.8 High
- frappe frameworkFrappe Framework 17.0.0-dev - Stored XSS in Tree View node label rendering4.8 Medium
- frappe frameworkFrappe Framework 17.0.0-dev - Stored XSS in Number Card filter fields rendering4.6 Medium
- frappe frameworkFrappe Framework 17.0.0-dev - Stored XSS via eval in Number Card filters_config4.6 Medium
- frappe frameworkFrappe Framework 17.0.0-dev - Stored XSS in Notifications Events color rendering4.8 Medium
- frappe frameworkFrappe Framework 17.0.0-dev - Stored XSS in Multi Select Dialog result rendering4.8 Medium
- frappe frameworkFrappe Framework 17.0.0-dev - Stored XSS in Form Dashboard headline rendering4.6 Medium
- feast-dev feast, red hat openshift ai (rhoai), openshift ai 3.4 +2 moreFeast < 0.63.0 Unauthenticated RCE via ApplyFeatureView gRPC Deserialization9.3 Critical
- frappe frameworkFrappe Framework 17.0.0-dev - Reflected/Stored XSS in File View breadcrumbs rendering4.6 Medium
- frappe frameworkFrappe Framework 17.0.0-dev - Stored XSS in Desktop Icon label rendering4.8 Medium
- frappe frameworkFrappe Framework 17.0.0-dev - Reflected DOM XSS in dashboard-view breadcrumb rendering5.1 Medium
- marlinfirmware marlinMarlin Firmware 2.1.2.7 Out-of-Bounds Write via M421 G-code Handler8.3 High
- frappe frameworkFrappe Framework 17.0.0-dev - Stored XSS in frappe.get_avatar image rendering4.6 Medium
- frappe frameworkFrappe Framework 17.0.0-dev - Stored XSS in Auto Repeat dashboard schedule rendering4.6 Medium
- frappe frameworkFrappe Framework 17.0.0-dev - Stored XSS in Audit Trail template rendering4.6 Medium
- payara serverPayara Server Full has a Cross-Site Request Forgery vulnerability7.3 High
- microfocus access managerMissing Authorization Vulnerability in OpenText Access Manager6.3 Medium
- microfocus access managerReflected Cross-Site Scripting vulnerability in OpenText Access Manager8.2 High
- proftpdProFTPD ACL Bypass via /proc/self/root Path Prefix in RNFR8.6 High
- jenkins zowe zdevops, jenkins project zowe zdevops plugin +1 moreJenkins Zowe zDevOps Plugin has a missing permission check4.2 Medium
- jenkins zowe zdevops, jenkins project zowe zdevops plugin +1 moreJenkins Zowe zDevOps Plugin has a CSRF vulnerability4.2 Medium
- jenkins assembla, jenkins project assembla plugin +1 moreJenkins Assembla Plugin has a cross-site request forgery (CSRF) vulnerability5.4 Medium
- Show moreLoading…