CVEs published in June 2026
865 tracked CVEs from 22 vendors had their first vendor advisory published in June 2026: 243 critical, 412 high, 13 in CISA KEV. Newest first.
930 more from this month are covered only by Red Hat's per-package records, listed on the Red Hat vendor page.
- Added
CVE-2026-45462Medium
Microsoft SharePoint Server Spoofing Vulnerability
MS Server · 1 advisory - Added
CVE-2026-45454Medium
Microsoft SharePoint Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-45453Medium
Microsoft SharePoint Server Spoofing Vulnerability
MS Server · 1 advisory - Added
CVE-2026-44815Critical
DHCP Client Service Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-44812High
Windows Graphics Component Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-44810High
Microsoft Cryptographic Services Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-44809High
Windows Common Log File System Driver Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-44805Medium
Windows Network Controller (NC) Host Agent Denial of Service Vulnerability
MS Server · 1 advisory - Added
CVE-2026-44803High
Windows Graphics Component Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-44802High
Windows DWM Core Library Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-44801High
Remote Desktop Client Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-44799High
Remote Desktop Client Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-42993High
Remote Desktop Client Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-42992High
Remote Desktop Client Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-42991High
Windows Push Notifications Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-42989High
Winlogon Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-42987High
Windows Deployment Services (WDS) Remote Code Execution
MS Server · 1 advisory - Added
CVE-2026-42986High
Microsoft Graphics Component Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-42985High
Remote Desktop Client Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-42984High
Windows Kernel Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-42983High
Windows DWM Core Library Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-42981High
Windows Performance Monitor Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-42980High
NT OS Kernel Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-42979High
Windows Push Notifications Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-42978High
Windows Push Notifications Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-42977High
Windows Push Notifications Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-42974High
Windows Performance Monitor Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-42973Medium
Windows Push Notification Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2026-42972Medium
Windows Hyper-V Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2026-42971Medium
Windows Push Notification Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2026-42970Medium
Windows Push Notification Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2026-42969Medium
Windows Push Notification Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2026-42968Medium
Windows Telephony Server Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2026-42916High
NT OS Kernel Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-42915Medium
Microsoft Windows VMSwitch Denial of Service Vulnerability
MS Server · 1 advisory - Added
CVE-2026-42914Medium
Windows Kerberos Denial of Service Vulnerability
MS Server · 1 advisory - Added
CVE-2026-42913High
Remote Desktop Client Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-42912High
Windows Telephony Service Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-42911High
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-42910High
Windows Hotpatch Monitoring Service Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-42909High
Remote Desktop Client Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-42908High
Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2026-42907Medium
Windows Shell Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2026-42906Medium
Windows Shell Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2026-42905High
Windows DWM Core Library Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-42904Critical
Windows TCP/IP Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-42903Medium
Windows Kerberos Denial of Service Vulnerability
MS Server · 1 advisory - Added
CVE-2026-42837High
Windows Projected File System Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-42836High
Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-42828High
Windows Projected File System Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-41108High
Windows DNS Client Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-41092High
Microsoft Kinect Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-40409High
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-40404High
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-34335High
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-33828High
Windows Device Health Attestation (DHA) Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-33113Medium
Microsoft SharePoint Server Spoofing Vulnerability
MS Server · 1 advisory - Added
CVE-2026-25089CriticalCISA KEV
Fortinet FortiSandbox OS Command Injection Vulnerability
Fortinet · 1 advisory - Added
CVE-2025-67862Medium
Restricted CLI escape using Lua
Fortinet · 1 advisory - QNAP · 1 advisoryAdded
- QNAP · 1 advisoryAdded
- QNAP · 1 advisoryAdded
- QNAP · 1 advisoryAdded
- QNAP · 1 advisoryAdded
- QNAP · 1 advisoryAdded
- QNAP · 1 advisoryAdded
- QNAP · 1 advisoryAdded
- QNAP · 1 advisoryAdded
- QNAP · 1 advisoryAdded
- QNAP · 1 advisoryAdded
- QNAP · 1 advisoryAdded
- QNAP · 1 advisoryAdded
- QNAP · 1 advisoryAdded
- QNAP · 1 advisoryAdded
- QNAP · 1 advisoryAdded
- QNAP · 1 advisoryAdded
- Added
CVE-2026-41855High
Spring Framework: In an untrusted JMS environment, org.springframework.jms.support.converter.MappingJackson2MessageConverter and org.sp…
NetApp, VMware · 2 advisories - Added
CVE-2026-41854Medium
Spring Framework: Due to incorrect host parsing, applications that rely on UriComponentsBuilder to parse and validate an externally pro…
NetApp, VMware · 2 advisories - Added
CVE-2026-41853High
Spring Framework: Spring MVC and WebFlux applications are vulnerable to Multipart request smuggling attacks.
NetApp, VMware · 2 advisories - Added
CVE-2026-41852High
Spring Framework: vulnerability in Spring Expression Language (SpEL) evaluation logic
NetApp, VMware · 2 advisories - Added
CVE-2026-41851High
Spring Framework: Applications which accept user-supplied Spring Expression Language (SpEL) expressions
NetApp, VMware · 2 advisories - Added
CVE-2026-41850High
Spring Framework: Applications that evaluate user-supplied Spring Expression Language (SpEL) expressions are vulnerable to an Algorithmic Denial…
Atlassian, NetApp, VMware · 3 advisories - Added
CVE-2026-41849High
Spring Framework: integer overflow vulnerability exists in the evaluation logic of the Spring Expression Language (SpEL).
NetApp, VMware · 2 advisories - Added
CVE-2026-41848High
Spring Framework: Applications may be vulnerable to a Regular Expression Denial of Service (ReDoS) attack if an attacker is able to provide a…
NetApp, VMware · 2 advisories - Added
CVE-2026-41847Medium
Spring Framework: Spring WebFlux applications may be vulnerable to a security bypass when using the Kotlin Router DSL.
NetApp, VMware · 2 advisories - Added
CVE-2026-41846High
Spring Framework: Spring MVC applications which accept user-supplied values in the cssClass, cssErrorClass, or cssStyle attributes of JSP form tags
NetApp, VMware · 2 advisories - Added
CVE-2026-41845High
XSS (Cross Site Scripting) org.springframework:spring-web Dependency in Confluence Data Center
Atlassian, NetApp, VMware · 3 advisories - Added
CVE-2026-41844High
Spring Framework: Spring MVC or Spring WebFlux application which configures a mapping for "/**" where the view name is not explicitly specified
NetApp, VMware · 2 advisories - Added
CVE-2026-41843High
Spring Framework: Spring MVC and WebFlux applications are vulnerable to Path Traversal attacks when resolving static resources.
NetApp, VMware · 2 advisories - Added
CVE-2026-41842High
Spring Framework: Spring MVC and WebFlux applications are vulnerable to Denial of Service (DoS) attacks when resolving static resources.
Atlassian, NetApp, VMware · 3 advisories - Added
CVE-2026-41841High
Spring Framework: Spring MVC and WebFlux applications are vulnerable to Information Disclosure attacks when resolving static resources.
NetApp, VMware · 2 advisories - Added
CVE-2026-41840High
Spring Framework: Spring WebFlux applications are vulnerable to Denial of Service (DoS) attacks when processing multipart requests.
NetApp, VMware · 2 advisories - Added
CVE-2026-41839Medium
Spring Framework: WebFlux application with a compromised subdomain (for example, compromised
NetApp, VMware · 2 advisories - Added
CVE-2026-41838High
Spring Framework: IDs for WebSocket sessions in the spring-websocket module are not cryptographically unpredictable, which
NetApp, VMware · 2 advisories - Added
CVE-2026-41720High
Spring LDAP's DirContextAuthenticationStrategy implementations do not reject a bind request where a non-empty username is paired…
VMware · 1 advisory - Added
CVE-2026-41715Medium
In specific scenarios involving HTTP redirects from a secure to an insecure endpoint, the Reactor Netty HTTP client
VMware · 1 advisory - Added
CVE-2026-41710Medium
attacker can craft a large number of unique requests that trigger a failure, exhausting the capacity of the application-wide…
VMware · 1 advisory - Added
CVE-2026-41007High
Spring HATEOAS maintains an unbounded static cache of StringLinkRelation instances keyed on attacker-supplied strings.
VMware · 1 advisory - Added
CVE-2026-41006High
Spring HATEOAS's internal PropertyUtils.createObjectFromProperties method, used by the Collection+JSON and UBER media type…
VMware · 1 advisory - Added
CVE-2026-44083Medium
QNAP · 1 advisory