CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!
Threat and Vulnerability Intelligence Database
Example Searches:
CVE
Threat Actors
Countries
Vendors
Severity
Known Exploited
|
🚨 Marked as known exploited on June 10th, 2025 (11 days ago).
Description: Microsoft's June 2025 Patch Tuesday addresses 66 vulnerabilities across its product suite, including a high-severity zero-day in the WebDAV service that is currently being exploited in the wild. The most critical flaws this month impact core Windows services, remote access components, and Microsoft Office products. The zero-day vulnerability, tracked as CVE-2025-33053, is a remote code …
The post Windows 11 June 2025 Patch Tuesday Fixes 66 Flaws, One Zero-Day appeared first on CyberInsider.
CVSS: HIGH (8.8) EPSS Score: 16.5%
June 10th, 2025 (11 days ago)
|
|
🚨 Marked as known exploited on June 10th, 2025 (11 days ago).
Description: 9Critical56Important0Moderate0LowMicrosoft addresses 65 CVEs, including two zero-day vulnerabilities, with one being exploited in the wild.Microsoft addresses 65 CVEs in its June 2025 Patch Tuesday release, with nine rated critical, and 56 rated as important. Our counts omitted one vulnerability reported by CERT CC.This month’s update includes patches for:.NET and Visual StudioApp Control for Business (WDAC)Microsoft AutoUpdate (MAU)Microsoft Local Security Authority Server (lsasrv)Microsoft OfficeMicrosoft Office ExcelMicrosoft Office OutlookMicrosoft Office PowerPointMicrosoft Office SharePointMicrosoft Office WordNuance Digital Engagement PlatformPower AutomateRemote Desktop ClientVisual StudioWebDAVWindows Common Log File System DriverWindows Cryptographic ServicesWindows DHCP ServerWindows DWM Core LibraryWindows HelloWindows InstallerWindows KDC Proxy Service (KPSSVC)Windows KernelWindows Local Security Authority (LSA)Windows Local Security Authority Subsystem Service (LSASS)Windows MediaWindows NetlogonWindows Recovery DriverWindows Remote Access Connection ManagerWindows Remote Desktop ServicesWindows Routing and Remote Access Service (RRAS)Windows SDKWindows SMBWindows Security AppWindows ShellWindows Standards-Based Storage Management ServiceWindows Storage Management ProviderWindows Storage Port DriverWindows Win32K GRFXRemote code execution (RCE) vulnerabilities accounted for 38.5% of the vulnerabilities patched this month, followed by information disclosure vu...
CVSS: HIGH (8.8) EPSS Score: 16.5%
June 10th, 2025 (11 days ago)
|
|
June 10th, 2025 (11 days ago)
|
|
Description: [AI generated] The Department of Culture and Tourism Abu Dhabi is a governmental organization in charge of conserving and promoting the Emirate's cultural heritage and tourism sector. They plan festivals, concerts and other cultural events, manage major tourist sites and museums, work to attract international visitors, and regulate the tourism industry in Abu Dhabi.
June 10th, 2025 (11 days ago)
|
CVE-2025-33053 |
Description: Web Distributed Authoring and Versioning (WebDAV) contains an external control of file name or path vulnerability. This vulnerability could allow an unauthorized attacker to execute code over a network. This vulnerability could affect various products that implement WebDAV, including but not limited to Microsoft Windows.
CVSS: HIGH (8.8) EPSS Score: 16.5%
June 10th, 2025 (11 days ago)
|
|
Description: OpenAI is working to fix an ongoing outage impacting ChatGPT users worldwide and preventing them from accessing the chatbot on the web or via mobile and desktop apps. [...]
June 10th, 2025 (12 days ago)
|
|
Description: AI acts like Pac-Man—devouring sensitive data across clouds, apps, and copilots. Varonis analyzed 1,000 orgs and found 99% have exposed data AI can access, exposing them to data risks. [...]
June 10th, 2025 (12 days ago)
|
|
Description: Heroku is suffering a widespread outage that has lasted over six hours, preventing developers from logging into the platform and breaking website functionality. [...]
June 10th, 2025 (12 days ago)
|
|
Description: Ivanti has released security updates to fix three high-severity hardcoded key vulnerabilities in the company's Workspace Control (IWC) solution. [...]
June 10th, 2025 (12 days ago)
|
|
Description: In a twist on typical hiring-related social engineering attacks, the FIN6 hacking group impersonates job seekers to target recruiters, using convincing resumes and phishing sites to deliver malware. [...]
June 10th, 2025 (12 days ago)
|