By publication date
Exploited and new serious CVEs: June 2025
206 records · 18 KEV. In publication order.
Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.
Month boundaries are UTC, the same rule as the publication date on each record page.
Page 3 of 3
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
29Monitor | CVE-2025-6916Proof of concept | TOTOLINK T6 formLoginAuth.htm Form_Login missing authenticationtotolink · t6 firmware · CWE-287 | High7.4 | — | 0.8% | Jun 30, 2025 |
24Monitor | CVE-2025-49493Proof of concept | Akamai CloudTest before 60 2025.06.02 (12988) allows file inclusion via XML External Entity (XXE) injection.akamai · cloudtest · CWE-611 | Medium5.8 | — | 2.1% | Jun 30, 2025 |
26Monitor | CVE-2025-52995No exploit | File Browser vulnerable to command execution allowlist bypassfilebrowser · filebrowser · CWE-77 | Medium6.6 | — | 0.6% | Jun 30, 2025 |
36Monitor | CVE-2025-32462Proof of concept | Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to esudo project · sudo · CWE-863 | High8.8 | — | 4.4% | Jun 30, 2025 |
78This week | CVE-2025-32463Weaponized | Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the -sudo project · sudo · CWE-829 | High7.8 | KEV | 55.4% | Jun 30, 2025 |
66This week | CVE-2025-6554Weaponized | Type confusion in V8 in Google Chrome prior to 138.0.7204.96 allowed a remote attacker to perform arbitrary read/write via a crafted HTML pagoogle · chrome · CWE-843 | High8.1 | KEV | 14.1% | Jun 30, 2025 |
- CVE-2025-691629Monitor
TOTOLINK T6 formLoginAuth.htm Form_Login missing authentication
HighCVSS 7.4Proof of conceptEPSS 0%totolink · t6 firmwareJun 30, 2025
- CVE-2025-4949324Monitor
Akamai CloudTest before 60 2025.06.02 (12988) allows file inclusion via XML External Entity (XXE) injection.
MediumCVSS 5.8Proof of conceptEPSS 2%akamai · cloudtestJun 30, 2025
- CVE-2025-5299526Monitor
File Browser vulnerable to command execution allowlist bypass
MediumCVSS 6.6No exploitEPSS 0%filebrowser · filebrowserJun 30, 2025
- CVE-2025-3246236Monitor
Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to e
HighCVSS 8.8Proof of conceptEPSS 4%sudo project · sudoJun 30, 2025
- CVE-2025-3246378This week
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the -
HighCVSS 7.8KEVWeaponizedEPSS 55%sudo project · sudoJun 30, 2025
- CVE-2025-655466This week
Type confusion in V8 in Google Chrome prior to 138.0.7204.96 allowed a remote attacker to perform arbitrary read/write via a crafted HTML pa
HighCVSS 8.1KEVWeaponizedEPSS 14%google · chromeJun 30, 2025