CVEs published June 19 to June 25, 2023
526 CVEs were published Jun 19 to Jun 25, 2023, 49 of them critical. CISA added 11 vulnerabilities to its Known Exploited Vulnerabilities catalog.
- CVEs published
- 526
- Critical
- 49
- Added to CISA KEV
- 11
- Busiest day
- Fri, Jun 23 (191)
- Quietest day
- Sat, Jun 24 (5)
- June 19, 2023116 CVEs · 12 critical
- June 20, 202364 CVEs · 12 critical
- June 21, 202329 CVEs · 5 critical
- June 22, 2023111 CVEs · 3 critical
- June 23, 2023191 CVEs · 15 critical
- June 24, 20235 CVEs · 2 critical
- June 25, 202310 CVEs
Added to CISA KEV 11
- CVE-2016-0165The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 G
- CVE-2016-9079A use-after-free vulnerability in SVG Animation has been discovered.Mozilla Firefox · Mozilla Thunderbird
- CVE-2020-12641rcube_image.php in Roundcube Webmail before 1.4.4 allows attackers to execute arbitrary code via shell metacharacters in a configuration set
- CVE-2020-35730An XSS issue was discovered in Roundcube Webmail before 1.2.13, 1.3.x before 1.3.16, and 1.4.x before 1.4.10.
- CVE-2021-44026Roundcube before 1.3.17 and 1.4.x before 1.4.12 is prone to a potential SQL injection via search or search_params.
- CVE-2023-20887Aria Operations for Networks contains a command injection vulnerability.Aria Operations for Networks
- CVE-2023-20867VMware Tools Authentication Bypass VulnerabilityVMware Tools
- CVE-2023-27992The pre-authentication command injection vulnerability in the Zyxel NAS326 firmware versions prior to V5.21(AAZF.14)C0, NAS540 firmware versZyxel NAS326 firmware · Zyxel NAS540 firmware +1
- CVE-2023-32434An integer overflow was addressed with improved input validation.Apple macOS · Apple iOS and iPadOS +1
- CVE-2023-32435A memory corruption issue was addressed with improved state management.Apple macOS · Apple iOS and iPadOS +1
- CVE-2023-32439A type confusion issue was addressed with improved checks.Apple iOS and iPadOS · Apple Safari +1