CVEs published in June 2026
8,400 vulnerabilities, 981 critical, 27 exploited.
- coollabsio coolifyCoolify: Authenticated Remote Code Execution via Command Injection in Destination Network Management8.8 High
- coollabsio coolifyCoolify: Authenticated Host RCE8.8 High
- coollabsio coolifyCoolify: Unauthenticated Deployment Trigger via Webhook HMAC Bypass with Null Secret7.5 High
- coollabsio coolifyCoolify Cross-Team IDOR: Livewire Components Accept Unscoped server_id and destination_uuid — Deploy to Other Teams' Servers9.6 Critical
- amazon application load balancerHTTP/2 Stream Parser Confusion Body-Inspection Bypass in AWS Application Load Balancer with AWS WAF7.9 High
- amazon cloudfront, aws amazon cloudfront +1 moreHTTP/2 Stream Parser Confusion Body-Inspection Bypass in Amazon CloudFront with AWS WAF7.9 High
- apple ipados, macos, safari +2 more +4 moreThe issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS...6.5 Medium
- apple ipados, macos, safari +5 more +7 moreA cross-origin issue was addressed with improved tracking of security origins. This issue is...6.5 Medium
- apple ipados, macos, safari +5 more +7 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in...6.5 Medium
- apple ipados, macos, tvos +4 more +6 moreThis issue was addressed with improved input validation. This issue is fixed in iOS 26.5.2 and...9.1 Critical
- apple ipados, macos, safari +5 more +7 moreThis issue was addressed through improved state management. This issue is fixed in Safari 26.5.2,...6.5 Medium
- apple ipados, macos, safari +5 more +7 moreThe issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS...6.5 Medium
- apple ipados, macos, safari +4 more +6 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in...6.5 Medium
- apple ipados, macos, safari +5 more +7 moreThe issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS...6.5 Medium
- apple ipados, macos, safari +5 more +7 moreThe issue was addressed with improved checks. This issue is fixed in Safari 26.5.2, iOS 26.5.2...7.1 High
- apple ipados, macos, safari +5 more +7 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in...6.5 Medium
- apple ipados, macos, safari +5 more +7 moreThe issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS...6.5 Medium
- apple ipados, macos, tvos +4 more +6 moreA double free issue was addressed with improved memory management. This issue is fixed in iOS 26...6.5 Medium
- apple ipados, macos, safari +2 more +4 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in...6.5 Medium
- apple ipados, macos, safari +5 more +7 moreA memory corruption issue was addressed with improved memory handling. This issue is fixed in...6.5 Medium
- apple ipados, macos, safari +4 more +6 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in...6.5 Medium
- apple ipados, macos, safari +5 more +7 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in...8.8 High
- apple ipados, macos, tvos +4 more +6 moreThe issue was addressed with improved input sanitization. This issue is fixed in iOS 26.5.2 and...7.8 High
- apple ipados, macos, safari +5 more +7 moreA path handling issue was addressed with improved validation. This issue is fixed in Safari 26.5...6.5 Medium
- apple ipados, macos, safari +5 more +7 moreThe issue was addressed with improved input validation. This issue is fixed in Safari 26.5.2, iOS...4.3 Medium
- apple ipados, macos, safari +5 more +7 moreAn out-of-bounds write issue was addressed with improved input validation. This issue is fixed in...6.5 Medium
- apple ipados, macos, safari +5 more +7 moreThe issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS...6.5 Medium
- apple ipados, macos, safari +5 more +7 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in...5.3 Medium
- apple ipados, macos, safari +5 more +7 moreA type confusion issue was addressed with improved checks. This issue is fixed in Safari 26.5.2,...8.8 High
- apple ipados, macos, safari +5 more +7 moreA permissions issue was addressed with additional restrictions. This issue is fixed in Safari 26...6.5 Medium
- apple ipados, macos, safari +5 more +7 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in...6.5 Medium
- apple ipados, macos, safari +5 more +7 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in...6.5 Medium
- apple ipados, macos, safari +5 more +7 moreThe issue was addressed with improved input validation. This issue is fixed in Safari 26.5.2, iOS...7.1 High
- apple ipados, macos, safari +4 more +6 moreAn out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in...6.5 Medium
- apple ipados, macos, tvos +3 more +5 moreA race condition was addressed with improved state handling. This issue is fixed in iOS 26.5.2...4.7 Medium
- apple ipados, macos, ios and ipados +1 more +3 moreThe issue was addressed with improved input sanitization. This issue is fixed in iOS 26.5.2 and...5.5 Medium
- apple ipados, macos, safari +5 more +7 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in...6.5 Medium
- apple ipados, macos, safari +5 more +7 moreA stack overflow was addressed with improved input validation. This issue is fixed in Safari 26.5...6.5 Medium
- apple ipados, macos, safari +5 more +7 moreAn out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in...6.5 Medium
- apple ipados, macos, safari +5 more +7 moreThe issue was addressed with improved checks. This issue is fixed in Safari 26.5.2, iOS 26.5.2...8.1 High
- apple ipados, macos, tvos +4 more +6 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 26.5.2 and...6.5 Medium
- apple ipados, macos, safari +5 more +7 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in...6.5 Medium
- apple ipados, macos, safari +5 more +7 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in...8.8 High
- gtermars javascript::minifier::xsJavaScript::Minifier::XS versions before 0.16 for Perl leak memory on every call to minify(), allowing unbounded memory growth7.5 High
- gtermars javascript::minifier::xsJavaScript::Minifier::XS versions before 0.16 for Perl crash with a NULL pointer dereference when the first meaningful token of the input is a slash7.5 High
- gtermars css::minifier::xsCSS::Minifier::XS versions before 0.14 for Perl have a memory leak when the entire document is minified away6.5 Medium
- leandrocp mdexAtom-table exhaustion denial-of-service via JSON parse_document in MDEx8.2 High
- leandrocp mdexUnsanitized URL schemes in MDEx Quill Delta output allow javascript: injection (XSS)5.1 Medium
- leandrocp mdex, mdex native +1 moreUncontrolled recursion over deeply nested Markdown crashes the BEAM in mdex6.9 Medium
- leandrocp mdex, mdex native +1 moreUnbounded native memory leak in mdex escaped-tag rendering enables unauthenticated denial of service6.9 Medium
- Show moreLoading…