cvegen

june 2025

cves
3,682
against an average 2025 month
0.9×
busiest day
jun 10, 488
used in real attacks
18

june 2025 brought 3,682 cves, close to an average 2025 month.

7 of its 30 days ran above the 2025 average for that weekday.

488

on jun 10, the busiest day. adobe published 253 of them at once.

284

rated critical, cvss 9 or higher. 237 of them can be hit over the network with no login and nothing for a user to click.

797

came in three single drops: the linux kernel team 362 on jun 18, adobe 253 on jun 10, patchstack 182 on jun 6.

18 already used in real attacks

cisa kev, as of oct 24, 2026

  • 3
    qualcomm multiple chipsets
    jun 3
  • 2
    google chromium v8
    jun 2, 30
  • 2
    microsoft windows
    jun 10
  • 2
    citrix netscaler adc and gateway
    jun 17, 25
  • 1
    dassault systèmes delmia apriso
    jun 2
  • 1
    roundcube webmail
    jun 2
  • 1
    igel os
    jun 5
  • 1
    apple products
    jun 16
  • 1
    rarlab winrar
    jun 21
  • 1
    synacor zimbra collaboration suite
    jun 23
and 3 more productsall 18 with cve ids

cisa keeps adding older cves when attacks come to light, so this list can still grow.

this poster

period
june 1 to 30, 2025
cves
3,682
data
cve list v5, cisa kev, drawn 2026-10-24
format
3:4, drawn for 45 × 60 cm
download jpg, 2000 × 2667