CVEs published June 2 to June 8, 2025
854 CVEs were published Jun 2 to Jun 8, 2025, 46 of them critical. CISA added 9 vulnerabilities to its Known Exploited Vulnerabilities catalog.
- CVEs published
- 854
- Critical
- 46
- Added to CISA KEV
- 9
- Busiest day
- Fri, Jun 6 (342)
- Quietest day
- Sat, Jun 7 (15)
- June 2, 2025120 CVEs · 8 critical
- June 3, 2025116 CVEs · 9 critical
- June 4, 2025134 CVEs · 7 critical
- June 5, 202594 CVEs · 8 critical
- June 6, 2025342 CVEs · 12 critical
- June 7, 202515 CVEs · 1 critical
- June 8, 202533 CVEs · 1 critical
Added to CISA KEV 9
- CVE-2021-32030The administrator application on ASUS GT-AC2900 devices before 3.0.0.4.386.42643 and Lyra Mini before 3.0.0.4_384_46630 allows authenticatio
- CVE-2023-39780On ASUS RT-AX55 3.0.0.4.386.51598 devices, authenticated attackers can perform OS command injection via the /start_apply.htm…ASUS RT-AX55
- CVE-2024-56145RCE when PHP `register_argc_argv` config setting is enabled in craftcms/cmscraftcms cms · craftcms/cms
- CVE-2025-35939Craft CMS stores user-provided content in session filesCraft CMS · craftcms/cms
- CVE-2025-3935ScreenConnect Exposure to ASP.NET ViewState Code InjectionConnectWise ScreenConnect
- CVE-2025-21479Incorrect Authorization in GraphicsQualcomm Snapdragon
- CVE-2025-21480Incorrect Authorization in Graphics WindowsQualcomm Snapdragon
- CVE-2025-27038Use After Free in GraphicsQualcomm Snapdragon
- CVE-2025-5419Out of bounds read and write in V8 in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption Google Chrome