CVEs published in June 2026

CVE-2026-11631Critical

Use after free in Aura

CVE-2026-11630High

Use after free in File Input

CVE-2026-11629High

Use after free in Ozone

CVE-2026-11628High

Use after free in Ozone

CVE-2026-41567High

Moby/Docker Engine: Arbitrary Code Execution via malicious container image and compressed archive upload

CVE-2025-41244HighCISA KEV

Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability

CVE-2025-15284Medium

Qs Vulnerability in NetApp Products

CVE-2026-48579Critical

Microsoft Exchange Online Information Disclosure Vulnerability

CVE-2026-50219Medium

Use-after-free vulnerability due to improper handler call depth tracking

CVE-2026-41010High

BOSH: ReleaseJob#unpack builds job_dir = File.join(@release_dir, 'jobs', name) and job_tgz = File.join(@release_dir, 'jobs'…

CVE-2026-41860High

BOSH: CWE-326 in BOSH allows a local attacker to steal Basic-auth credentials or redirect UAA token requests via MITM.

CVE-2026-41859High

network man-in-the-middle between nats-sync and the BOSH director

CVE-2026-41858High

Weak Randomness / Insecure Cryptographic Primitive (CWE-338) in Get-RandomPassword in BOSH-Ecosystem / windows-utilities-release

CVE-2026-41011High

BOSH: PackagePersister.validate_tgz builds "tar -tf #{tgz} 2>&1" where tgz = File.join(release_dir, 'packages', "#{name}.tgz") and…

CVE-2026-20233Medium

Cisco Webex Meetings Cross-Site Scripting Vulnerability

CVE-2024-47273Medium

Hyper Backup: improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in Backup Task functionality in…

CVE-2024-47263Medium

Hyper Backup: improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in Backup.Repository webapi…

CVE-2023-52951Medium

cleartext transmission of sensitive information vulnerability in Synology Note Station Client before 2.2.4-703

CVE-2022-49042High

inclusion of functionality from untrusted control sphere vulnerability in MinGW DLL component in Synology Hyper Backup…

CVE-2022-49036High

inclusion of functionality from untrusted control sphere vulnerability in OpenSSL configuration in Synology Active Backup for…

CVE-2026-0257HighCISA KEV

Palo Alto Networks PAN-OS Authentication Bypass Vulnerability

CVE-2026-49975High

Remote Denial of Service via compression bomb and Slowloris-style attack

CVE-2026-8936High

Docker Desktop: Fixed a VM panic caused by unbounded recursion in the grpcfuse kernel module when a container created deeply nested directories on a bind-mounted host folder and triggered a dentry invalidation event

CVE-2026-42507Critical

Golang net/textproto: Misleading error messages via input injection

CVE-2026-27145Critical

golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

CVE-2026-3871Medium

buffer overflow vulnerability in the UPnP DeletePortMapping command in Zyxel VMG4005-B50B firmware versions through 5.13(ABRL.5.4)C0 could allow an adjacent attacker to trigger a temporary denial-of-service (DoS) condition affecting the UPnP function of the affected device

CVE-2026-3870Medium

buffer overflow vulnerability in the UPnP AddPortMapping command in Zyxel VMG4005-B50B firmware versions through 5.13(ABRL.5.4)C0 could allow an adjacent attacker to trigger a temporary denial-of-service (DoS) condition affecting the UPnP function of the affected device

CVE-2026-0251High

GlobalProtect App: Local Privilege Escalation Vulnerabilities

CVE-2026-43660High

Processing maliciously crafted web content may prevent Content Security Policy from being enforced

CVE-2026-10989Critical

Inappropriate implementation in V8

CVE-2026-10988High

Use after free in Views

CVE-2026-10987High

Integer overflow in V8

CVE-2026-10986High

Integer overflow in Media

CVE-2026-10985High

Out of bounds read in Skia

CVE-2026-10984High

Inappropriate implementation in Accessibility

CVE-2026-10983Critical

Insufficient validation of untrusted input in Dawn

CVE-2026-10982High

Use after free in WebXR

CVE-2026-10981High

Insufficient validation of untrusted input in Codecs

CVE-2026-10980High

Insufficient validation of untrusted input in DevTools

CVE-2026-10979High

Out of bounds read in ANGLE

CVE-2026-10978Critical

Use after free in Chromoting

CVE-2026-10977High

Uninitialized Use in Skia

CVE-2026-10976High

Uninitialized Use in Dawn

CVE-2026-10975Critical

Use after free in WebRTC

CVE-2026-10974Critical

Insufficient validation of untrusted input in ANGLE

CVE-2026-10973High

Uninitialized Use in Dawn

CVE-2026-10972Critical

Use after free in Ozone

CVE-2026-10971Critical

Insufficient validation of untrusted input in Printing

CVE-2026-10970Critical

Insufficient validation of untrusted input in InterestGroups

CVE-2026-10969Critical

Insufficient validation of untrusted input in Extensions

CVE-2026-10968High

Insufficient validation of untrusted input in Dawn

CVE-2026-10967Critical

Use after free in SurfaceCapture

CVE-2026-10966Critical

Insufficient validation of untrusted input in Codecs

CVE-2026-10965High

Integer overflow in DevTools

CVE-2026-10964High

Integer overflow in V8

CVE-2026-10963High

Integer overflow in V8

CVE-2026-10962High

Type Confusion in Media

CVE-2026-10961High

Use after free in Chrome for iOS

CVE-2026-10960High

Uninitialized Use in Codecs

CVE-2026-10959High

Use after free in Input

CVE-2026-10958High

Use after free in Chrome for iOS

CVE-2026-10957High

Use after free in Glic

CVE-2026-10956High

Use after free in MimeHandlerView

CVE-2026-10955High

Type Confusion in ANGLE

CVE-2026-10954Critical

Use after free in Actor

CVE-2026-10953Critical

Use after free in Core

CVE-2026-10952High

Use after free in Chrome for iOS

CVE-2026-10951High

Use after free in Autofill

CVE-2026-10950High

Insufficient policy enforcement in Autofill

CVE-2026-10949High

Heap buffer overflow in Video

CVE-2026-10948High

Use after free in WebRTC

CVE-2026-10947Critical

Use after free in WebRTC

CVE-2026-10946High

Heap buffer overflow in Media

CVE-2026-10945High

Use after free in PDF

CVE-2026-10944High

Insufficient policy enforcement in Autofill

CVE-2026-10943High

Use after free in WebRTC

CVE-2026-10942High

Insufficient validation of untrusted input in UI

CVE-2026-10941Critical

Out of bounds memory access in Skia

CVE-2026-10940High

Race in Codecs

CVE-2026-10939High

Use after free in WebRTC

CVE-2026-10938High

Insufficient validation of untrusted input in Input

CVE-2026-10937Critical

Inappropriate implementation in Passwords

CVE-2026-10936High

Type Confusion in V8

CVE-2026-10935High

Inappropriate implementation in V8

CVE-2026-10934High

Use after free in Autofill

CVE-2026-10933High

Use after free in Audio

CVE-2026-10932High

Use after free in UI

CVE-2026-10931Critical

Use after free in FileSystem

CVE-2026-10930High

Out of bounds read in ANGLE

CVE-2026-10929High

Heap buffer overflow in ANGLE

CVE-2026-10928High

Script injection in Headless

CVE-2026-10927High

Out of bounds read in Dawn

CVE-2026-10926High

Use after free in Cast

CVE-2026-10925High

Out of bounds write in Skia

CVE-2026-10924High

Integer overflow in Chromecast

CVE-2026-10923High

Use after free in WebAppInstalls

CVE-2026-10922High

Insufficient validation of untrusted input in DevTools

CVE-2026-10921High

Integer overflow in Dawn

CVE-2026-10920High

Insufficient validation of untrusted input in WebShare

CVE-2026-10919High

Use after free in ANGLE