Security Digest archive
June 2025
4 editorial briefs, 20 known exploited (cisa kev) additions and 29 critical advisories across 21 digest days.
Monday, June 30, 2025
- Check exposure sudo --chroot Local Root Escalation (CVE-2025-32463)
- KEV CVE-2025-6543 Citrix NetScaler ADC and Gateway
- Critical 1 advisory: org.conductoross:conductor-core
Thursday, June 26, 2025
- Critical 1 advisory: apache-airflow-providers-snowflake
Wednesday, June 25, 2025
- KEV CVE-2024-54085 AMI MegaRAC SPx
- KEV CVE-2024-0769 D-Link DIR-859 Router
- KEV CVE-2019-6693 Fortinet FortiOS
Tuesday, June 24, 2025
- Critical 1 advisory: gogs.io/gogs
Monday, June 23, 2025
Friday, June 20, 2025
- Critical 2 advisories: github.com/mattermost/mattermost-server, rfc3161-client
Thursday, June 19, 2025
- Critical 1 advisory: pterodactyl/panel
Wednesday, June 18, 2025
- Critical 1 advisory: taylored
Tuesday, June 17, 2025
- Check exposure Citrix Bleed 2: NetScaler Gateway Memory Leak
- KEV CVE-2023-0386 Linux Kernel
- Critical 1 advisory: langflow
Monday, June 16, 2025
- KEV CVE-2025-43200 Apple Multiple Products
- KEV CVE-2023-33538 TP-Link Multiple Routers
- Critical 1 advisory: github.com/gravitational/teleport
Friday, June 13, 2025
- Check exposure MCP Inspector: Unauthenticated RCE via Browser CSRF
- Critical 3 advisories: openc3-cosmos-tool-iframe, salt, @modelcontextprotocol/inspector
Thursday, June 12, 2025
- Critical 1 advisory: org.xwiki.platform:xwiki-platform-oldco…
Wednesday, June 11, 2025
- Most can relax EchoLeak: Zero-Click Data Leak in Microsoft 365 Copilot
Tuesday, June 10, 2025
- KEV CVE-2025-33053 Microsoft Windows
- KEV CVE-2025-24016 Wazuh Wazuh Server
- Critical 3 advisories: @nx/azure-cache, org.geoserver.web:gs-web-app, magento/community-edition
Monday, June 9, 2025
- KEV CVE-2025-32433 Erlang Erlang/OTP
- KEV CVE-2024-42009 Roundcube Webmail
- Critical 3 advisories: backend.ai, github.com/knadh/listmonk, org.geotools:gt-xsd-core
Friday, June 6, 2025
- Critical 1 advisory: auth0/login
Thursday, June 5, 2025
- KEV CVE-2025-5419 Google Chromium V8
- Critical 1 advisory: auth0/symfony
Wednesday, June 4, 2025
- Critical 3 advisories: auth0/auth0-php, llama-index, auth0/wordpress
Tuesday, June 3, 2025
- KEV CVE-2025-27038 Qualcomm Multiple Chipsets
- KEV CVE-2025-21480 Qualcomm Multiple Chipsets
- KEV CVE-2025-21479 Qualcomm Multiple Chipsets
- Critical 1 advisory: billboard.js
Monday, June 2, 2025
- KEV CVE-2025-3935 ConnectWise ScreenConnect
- KEV CVE-2025-35939 Craft CMS Craft CMS
- KEV CVE-2024-56145 Craft CMS Craft CMS
- KEV CVE-2023-39780 ASUS RT-AX55 Routers
- KEV CVE-2021-32030 ASUS Routers
- Critical 1 advisory: llama-index-vector-stores-duckdb
Sunday, June 1, 2025
- Critical 1 advisory: roundcube/roundcubemail