Skip to content
OpenAdvisories

Archive

June 2025

Vulnerabilities first published in this month (UTC), newest first.

← May 2025 2025 / June July 2025 →
  1. 119
  2. 2121
  3. 3116
  4. 4134
  5. 597
  6. 6344
  7. 715
  8. 833
  9. 9181
  10. 10490
  11. 1159
  12. 1280
  13. 1388
  14. 1421
  15. 1515
  16. 1695
  17. 17174
  18. 18414
  19. 1955
  20. 20222
  21. 2157
  22. 2238
  23. 2374
  24. 24120
  25. 25120
  26. 26116
  27. 27225
  28. 2846
  29. 2948
  30. 3089
All Critical High Medium Low Exploited only Public exploit

18 results · Clear filters · Feed

  • High 8.1
    CVE-2025-6554 Exploited Public exploit EPSS 14%

    Type confusion in V8 in Google Chrome prior to 138.0.7204.96 allowed a remote attacker to perform arbitrary read/write …

    Google Chrome chromium chromium Browsers Debian Azure Linux Alpine Wolfi
    KEV Jul 2, 2025
  • Critical 9.3
    CVE-2025-32463 Exploited Public exploit EPSS 56%

    Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directo…

    sudo-project sudo sudo sudo Debian Ubuntu Azure Linux Alpine Wolfi
    KEV Sep 29, 2025
  • Critical 10.0
    CVE-2025-20281 Exploited Public exploit Scanner template EPSS 98%

    Cisco ISE API Unauthenticated Remote Code Execution Vulnerability

    A vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to execute arbitrary code on the underlying operating system as root. The attacker does not require any valid credentials to exploit this vulnerab…

    Cisco Cisco Identity Services Engine Software Network devices
    KEV Jul 28, 2025
  • Critical 9.2
    CVE-2025-6543 Exploited Public exploit EPSS 10%

    Memory overflow vulnerability leading to unintended control flow and Denial of Service

    Memory overflow vulnerability leading to unintended control flow and Denial of Service in NetScaler ADC and NetScaler Gateway when configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server

    NetScaler ADC Gateway
    KEV Jun 30, 2025
  • Critical 10.0
    CVE-2025-32975 Exploited

    Quest KACE Systems Management Appliance (SMA) 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2.x before 13.2.183, 14…

    KEV Apr 20, 2026
  • Medium 6.1
    CVE-2025-48700 Exploited

    An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0 and 10.0 and 10.1. A Cross-Site Scripting (XSS) vu…

    KEV Apr 20, 2026
  • High 7.8
    CVE-2025-6218 Exploited Public exploit EPSS 90%

    RARLAB WinRAR Directory Traversal Remote Code Execution Vulnerability

    RARLAB WinRAR Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of RARLAB WinRAR. User interaction is required to exploit this vulnerability in that the targ…

    RARLAB WinRAR
    KEV Dec 9, 2025
  • Critical 9.3
    CVE-2025-5777 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    NetScaler ADC and NetScaler Gateway - Insufficient input validation leading to memory overread

    Insufficient input validation leading to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server

    NetScaler ADC Gateway
    KEV Jul 10, 2025
  • Medium 4.2
    CVE-2025-43200 Exploited

    This issue was addressed with improved checks. This issue is fixed in iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPa…

    Apple macOS iOS and iPadOS watchOS macOS iOS
    KEV Jun 16, 2025
  • High 8.8
    CVE-2025-33073 Exploited Public exploit EPSS 83%

    Windows SMB Client Elevation of Privilege Vulnerability

    Improper access control in Windows SMB allows an authorized attacker to elevate privileges over a network.

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
    KEV Oct 20, 2025
  • High 8.8
    CVE-2025-33053 Exploited Public exploit EPSS 87%

    Internet Shortcut Files Remote Code Execution Vulnerability

    External control of file name or path in Internet Shortcut Files allows an unauthorized attacker to execute code over a network.

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
    KEV Jun 10, 2025
  • Medium 4.6
    CVE-2025-47827 Exploited Public exploit

    In IGEL OS before 11, Secure Boot can be bypassed because the igel-flash-driver module improperly verifies a cryptograp…

    KEV Oct 14, 2025
  • High 8.6
    CVE-2025-21479 Exploited Public exploit

    Incorrect Authorization in Graphics

    Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.

    Qualcomm Snapdragon
    KEV Jun 3, 2025
  • High 7.5
    CVE-2025-27038 Exploited

    Use After Free in Graphics

    Memory corruption while rendering graphics using Adreno GPU drivers in Chrome.

    Qualcomm Snapdragon
    KEV Jun 3, 2025
  • High 8.6
    CVE-2025-21480 Exploited

    Incorrect Authorization in Graphics Windows

    Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.

    Qualcomm Snapdragon
    KEV Jun 3, 2025
  • High 8.8
    CVE-2025-5419 Exploited Public exploit

    Out of bounds read and write in V8 in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exp…

    Google Chrome chromium chromium Browsers Debian Alpine Wolfi
    KEV Jun 5, 2025
  • Critical 9.0
    CVE-2025-5086 Exploited Scanner template EPSS 97%

    Deserialization of Untrusted Data vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025

    A deserialization of untrusted data vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could lead to a remote code execution.

    Dassault Systèmes DELMIA Apriso
    KEV Sep 11, 2025
  • Critical 9.9
    CVE-2025-49113 Exploited Public exploit Scanner template EPSS 100%

    Roundcube Webmail Vulnerable to Authenticated RCE via PHP Object Deserialization

    Roundcube Webmail before 1.5.10 and 1.6.x before 1.6.11 allows remote code execution by authenticated users because the _from parameter in a URL is not validated in program/actions/settings/upload.php, leading to PHP Object Deserialization.

    Roundcube Webmail roundcube roundcube Debian Ubuntu Packagist
    KEV Feb 20, 2026