CVE Statistics: June 2026

🌐 Discover the key figures for vulnerabilities published in June 2026 on CVE Find.

🔎 Overview

• Total number of CVEs published : 8,001 (+14.6% vs the previous month)
• Vulnerabilities added to the CISA KEV catalog : 23

📂 Breakdown by main categories

• Authorization problems : 961
• Memory Corruption : 639
• Cross-site Scripting : 638
• Overflow : 576
• SQL Injection : 402
• Directory Traversal : 280

📈 Breakdown by CVSS score

• Low : 210
• Medium : 2966
• High : 3305
• Critical : 959

🏢 Most affected vendors

1. google : 1097
2. linux : 1002
3. microsoft : 794
4. apple : 657
5. oracle : 240

📦 Most affected products

1. linux linux_kernel : 1002
2. google chrome : 964
3. apple macos : 594
4. microsoft windows : 577
5. google android : 237

⚠️ Notable CVEs of the month

• CVE-2026-56413 (10 CRITICAL) : Storage Concentrator (SC & SCVM) contains a command injection vulnerability in the ms_service.pl service, which listens on TCP port 9000 by default and accepts custom network pa...
• CVE-2026-13782 (10 CRITICAL) : Use after free in Browser in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via ...
• CVE-2026-56415 (10 CRITICAL) : Storage Concentrator (SC & SCVM) contains a command injection vulnerability within the debug.pl script that is reachable without authentication. A remote attacker can submit a s...
• CVE-2026-13773 (10 CRITICAL) : IBM WebSphere Extreme Scale 8.6.1.0 through 8.6.1.6 Approximately 50 generated CORBA stub classes in WebSphere eXtreme Scale's ogclient.jar call ORB.string_to_object() on an att...
• CVE-2026-10134 (10 CRITICAL) : IBM Langflow OSS 1.0.0 through 1.9.3 allows an attacker to read every secret available to the Langflow process, read and modify every flow, conversation, message, file upload, a...

Explore all the data in detail on CVE Find.