CVEs published in June 2026
8,400 vulnerabilities, 981 critical, 27 exploited.
- google chromeInappropriate implementation in Input in Google Chrome on Linux prior to 150.0.7871.47 allowed a...6.5 Medium
- google chromeSide-channel information leakage in Safe Browsing in Google Chrome on iOS prior to 150.0.7871.47...6.5 Medium
- google chromeInsufficient data validation in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47...4.6 Medium
- google chromeUse after free in Import in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker...7.5 High
- google chromeInsufficient validation of untrusted input in Accessibility in Google Chrome prior to 150.0.7871...8.1 High
- google chromeUse after free in GFX in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker to...8.8 High
- google chromeUse after free in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker...8.3 High
- google chromeType Confusion in Chrome Tabs in Google Chrome prior to 150.0.7871.47 allowed a remote attacker...8.3 High
- google chromeUse after free in Views in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who...7.5 High
- google chromeInteger overflow in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker...8.3 High
- google chromeInappropriate implementation in Updater in Google Chrome on Windows prior to 150.0.7871.47...7.8 High
- google chromeUse after free in QUIC in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to...8.1 High
- google chromeHeap buffer overflow in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote...9.6 Critical
- google chromeInsufficient validation of untrusted input in Chromecast in Google Chrome prior to 150.0.7871.47...9.6 Critical
- google chromeInteger overflow in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker...9.6 Critical
- google chromeInsufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47...6.5 Medium
- google chromeInsufficient validation of untrusted input in WebAppInstalls in Google Chrome on Windows prior to...7.5 High
- google chromeInsufficient policy enforcement in SVG in Google Chrome prior to 150.0.7871.47 allowed a remote...6.5 Medium
- google chromeUse after free in Touchbar in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote...9.6 Critical
- google chromeInsufficient validation of untrusted input in Downloads in Google Chrome prior to 150.0.7871.47...8.1 High
- google chromeSide-channel information leakage in Scroll in Google Chrome prior to 150.0.7871.47 allowed a...6.5 Medium
- google chromeUse after free in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had...9.6 Critical
- google chromeUse after free in Fullscreen in Google Chrome on Android prior to 150.0.7871.47 allowed a remote...8.8 High
- google chromeUse after free in Chromoting in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote...8.1 High
- google chromeUse after free in Ozone in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to...8.8 High
- google chromeUse after free in Bluetooth in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote...9.6 Critical
- google chromeUse after free in Views in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who...8.8 High
- google chromeUse after free in Views in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who...8.8 High
- google chromeUse after free in Browser in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who...10.0 Critical
- google chromeInsufficient validation of untrusted input in Skia in Google Chrome prior to 150.0.7871.47...9.6 Critical
- google chromeInsufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.47...9.6 Critical
- google chromeUse after free in Chromoting in Google Chrome on ChromeOS prior to 150.0.7871.47 allowed a remote...8.1 High
- google chromeUse after free in WebUSB in Google Chrome on Mac prior to 150.0.7871.47 allowed a local attacker...7.8 High
- google chromeInsufficient validation of untrusted input in iOSWeb in Google Chrome on iOS prior to 150.0.7871...8.8 High
- google chromeType Confusion in Dawn in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had...9.8 Critical
- google chromeUse after free in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had...9.8 Critical
- google chromeUse after free in Extensions in Google Chrome prior to 150.0.7871.47 allowed an attacker who...8.1 High
- stonefly storage concentrator, storage concentrator virtual machine +1 moreSQL Injection in StoneFly Storage Concentrator9.2 Critical
- stonefly storage concentrator, storage concentrator virtual machine +1 moreCross-site Scripting in StoneFly Storage Concentrator5.1 Medium
- solarwinds database performance analyzerSolarWinds Database Performance Analyzer Stored Cross-Site Scripting Vulnerability5.6 Medium
- electron-userland app-builder-lib, electron electron-builder +1 moreelectron-updater: Uncontrolled search path elements within `AppImage` built by `app-builder-lib`7.8 High
- electron builder-util-runtime, electron-builder +1 moreelectron-updater: Cross-origin redirect leaks `PRIVATE-TOKEN` and mixed-case `Authorization` credentials in `builder-util-runtime`8.2 High
- phpmyfaqphpMyFAQ - Privilege Escalation via Missing Self-Rights Constraint in GroupController::updatePermissions8.7 High
- open-webuiOpen WebUI - Server-Side Request Forgery via Location Redirect in /api/v1/retrieval/process/web5.3 Medium
- imagemagickImageMagick - Policy Bypass via Incorrect Path Validation4.8 Medium
- cap-go capgoCapgo - Missing UPDATE RLS Policy for Build Status Persistence5.3 Medium
- cap-go capgoCapgo - Server-Side Validation Bypass via Direct Browser-Side Organization Security Settings Updates5.3 Medium
- cap-go capgoCapgo - Improper Error Handling in Accept Invitation Endpoint via Invalid Magic String6.9 Medium
- cap-go capgoCapgo - Integrity Issue in Release Routing via Multiple Public Channels7.1 High
- cap-go capgoCapgo - Unauthenticated Organization Existence Oracle via public.invite_user_to_org RPC6.9 Medium
- Show moreLoading…