|
CVE-2026-50656: RoguePlanet, A Race condition in Windows Defender => LPE
|
|
1
|
158
|
June 29, 2026
|
|
CVE-2026-20253: Critical RCE in Splunk Enterprise EITW
|
|
0
|
32
|
June 26, 2026
|
|
CVE-2026-20230: SSRF Vulnerability in Cisco Unified CM SME, EITW
|
|
0
|
32
|
June 26, 2026
|
|
CVE-2026-20262: Cisco Catalyst SD-WAN EITW
|
|
1
|
54
|
June 24, 2026
|
|
Usbliter8: A BootROM exploit leveraging a Buffer Underflow and misconfiguration in the A12/13 & S4/5 USB Controller
|
|
0
|
31
|
June 20, 2026
|
|
Bitskrieg: Another Bitlocker Bypass Technique
|
|
1
|
87
|
June 10, 2026
|
|
Critical RCE in Gogs GHSA-qf6p-p7ww-cwr9
|
|
1
|
53
|
June 10, 2026
|
|
CVE-2026-42771 (LiteLLM) exploited in the wild
|
|
0
|
40
|
June 10, 2026
|
|
Chaotic Eclipse/Nightmare Eclipse drops two Windows 0days (CVE-2026-45585)
|
|
5
|
345
|
June 9, 2026
|
|
CVE-2026-23111 Presumed new LPE
|
|
0
|
32
|
June 9, 2026
|
|
CVE-2026-46290: Yet another Linux Kernel flaw
|
|
0
|
40
|
June 8, 2026
|
|
CVE-2026-9256 for nginx, vulnerability in 'ngx_http_rewrite_module'
|
|
4
|
74
|
June 7, 2026
|
|
Multiple Critical Vulnerabilities in Ubiquiti Unifi OS (CVE-2026-33000, CVE-2026-34908, CVE-2026-34909, CVE-2026-34910, CVE-2026-34911)
|
|
2
|
176
|
June 5, 2026
|
|
CVE-2026-49975: HTTP/2 Bomb: Remote DoS against most major web servers
|
|
1
|
328
|
June 3, 2026
|
|
CVE-2026-46243: CIFSwitch, Another AI-Discovered Linux LPE
|
|
0
|
239
|
May 30, 2026
|
|
Oracle Begins Their Monthly Critical Security Patch Updates with Multiple Critical CVEs
|
|
0
|
41
|
June 1, 2026
|
|
False Positives in OSV Vuln Database
|
|
0
|
25
|
May 27, 2026
|
|
CVE-2026-48710, aka "BadHost": FastAPI Header-based Auth Bypass
|
|
0
|
38
|
May 26, 2026
|
|
CVE-2026-45829: ChromaDB Pre-Auth RCE
|
|
2
|
44
|
May 19, 2026
|
|
PinTheft, new Linux LPE (Cannot replicate)
|
|
2
|
60
|
May 19, 2026
|
|
CVE-2026-46333: ssh-keysign-pwn
|
|
9
|
163
|
May 19, 2026
|
|
CVE-2026-2920[1-3] cPanel w/ PoC
|
|
0
|
29
|
May 18, 2026
|
|
Ram Leak: Another Bitlocker 0-day
|
|
0
|
40
|
May 18, 2026
|
|
Copy Fail 3 - enter Fragnesia
|
|
6
|
100
|
May 17, 2026
|
|
DirtyDecrypt: New CopyFail / DirtyFrag variant
|
|
0
|
32
|
May 17, 2026
|
|
QEMUtiny PoC
|
|
1
|
54
|
May 17, 2026
|
|
CVE-2026-42945: Heap Buffer Overflow in Nginx
|
|
3
|
187
|
May 16, 2026
|
|
CVE-2026-43284, CVE-2026-2026-43500: New CopyFail Variants ("DirtyFrag")
|
|
17
|
640
|
May 13, 2026
|
|
CVE-2026-44277: Authentication Bypass in...FortiAuthenticator
|
|
0
|
30
|
May 12, 2026
|
|
ClaudeBleed: Claude's browser extension lets any other extension inject JavaScript
|
|
2
|
51
|
May 8, 2026
|