CVEs published June 30 to July 6, 2025
630 CVEs were published Jun 30 to Jul 6, 2025, 63 of them critical. CISA added 4 vulnerabilities to its Known Exploited Vulnerabilities catalog.
- CVEs published
- 630
- Critical
- 63
- Added to CISA KEV
- 4
- Busiest day
- Fri, Jul 4 (186)
- Quietest day
- Sat, Jul 5 (8)
- June 30, 202588 CVEs · 4 critical
- July 1, 202589 CVEs · 16 critical
- July 2, 202584 CVEs · 13 critical
- July 3, 2025147 CVEs · 9 critical
- July 4, 2025186 CVEs · 18 critical
- July 5, 20258 CVEs
- July 6, 202528 CVEs · 3 critical
Added to CISA KEV 4
- CVE-2025-6543Memory overflow vulnerability leading to unintended control flow and Denial of ServiceNetScaler ADC · NetScaler Gateway
- CVE-2025-48927The TeleMessage service through 2025-05-05 configures Spring Boot Actuator with an exposed heap dump endpoint at a /heapdump URI, as exploitTeleMessage service
- CVE-2025-48928The TeleMessage service through 2025-05-05 is based on a JSP application in which the heap content is roughly equivalent to a "core dump" inTeleMessage service
- CVE-2025-6554Type confusion in V8 in Google Chrome prior to 138.0.7204.96 allowed a remote attacker to perform arbitrary read/write via a crafted HTML paGoogle Chrome