Skip to content
OpenAdvisories

Archive

16 June 2026

Vulnerabilities first published on this day (UTC), newest first.

← May 2026 2026 / June /16 July 2026 →
  1. 1379
  2. 2224
  3. 3153
  4. 4641
  5. 5169
  6. 639
  7. 724
  8. 8286
  9. 9721
  10. 10252
  11. 11194
  12. 12291
  13. 1322
  14. 1418
  15. 15401
  16. 16549
  17. 17397
  18. 18158
  19. 19206
  20. 2046
  21. 2172
  22. 22223
  23. 23258
  24. 24522
  25. 25472
  26. 26374
  27. 2733
  28. 2845
  29. 29246
  30. 30651
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Critical 9.1
    CVE-2026-46858 Public exploit

    Vulnerability in the APM - Application Performance Management product of Oracle Enterprise Manager (component: JADM, JV…

    Oracle APM - Application Performance Management
  • High 7.8
    CVE-2026-50656 Public exploit EPSS 11%

    Microsoft Defender Elevation of Privilege Vulnerability

    Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "RoguePlanet ".

    Microsoft Microsoft Malware Protection Engine
  • High 8.6
    CVE-2026-42089 Public exploit

    yeoman-environment Vulnerable to Arbitrary Package Installation without User Confirmation

    Yeoman Environment provides an API to discover, create, and run generators, and to configure where and how a generator is resolved. Versions 2.9.0 through 6.0.0 install missing local generator packages from caller-supplied package names without user confirmat…

    yeoman environment yeoman-environment npm
  • Critical 9.6
    CVE-2026-12295 Public exploit

    Sandbox escape in the DOM: Navigation component

    Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.

    Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  • Critical 9.3
    CVE-2026-49772 Public exploit Scanner template

    WordPress The Events Calendar plugin 6.15.12-6.16.2 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Liquid Web / StellarWP The Events Calendar allows Blind SQL Injection. This issue affects The Events Calendar: from 6.15.12 through 6.16.2.

    Liquid Web / StellarWP The Events Calendar
  • Critical 9.3
    CVE-2026-52715 Public exploit Scanner template

    WordPress GEO my WordPress plugin <= 4.5.5 - SQL Injection vulnerability

    Unauthenticated SQL Injection in GEO my WordPress <= 4.5.5 versions.

    Eyal Fitoussi GEO my WordPress Web / CMS
  • High 7.8
    CVE-2026-46331 Public exploit

    net/sched: fix pedit partial COW leading to page cache corruption

    In the Linux kernel, the following vulnerability has been resolved: net/sched: fix pedit partial COW leading to page cache corruption tcf_pedit_act() computes the COW range for skb_ensure_writable() once before the key loop using tcfp_off_max_hint, but the hi…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux