Announcements

BeyondTrust has released security updates to address vulnerabilities affecting Remote Support (RS), Privileged Remote Access (PRA), and Privilege Management for Windows. The addressed vulnerabilities could allow the attacker to bypass security restrictions, conduct denial of service attacks, or execute arbitrary code and gain access to the affected product. Sample of the addressed vulnerabilities: 1. BeyondTrust

Microsoft has released security updates to address several vulnerabilities affecting multiple Microsoft products. The addressed vulnerabilities could allow the attacker to perform spoofing attacks, obtain sensitive information, gain elevated privileges, bypass security restrictions, or execute arbitrary code on the affected systems. Sample of the addressed vulnerabilities: 1. Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability

Mozilla has released an updated Firefox version 152.0.4 to fix a critical vulnerability. The addressed vulnerability could allow the attacker to trigger memory corruption attacks or execute arbitrary code on the affected system. The addressed vulnerability: Mozilla Firefox Memory Safety Bugs Vulnerability (CVE-2026-14241): CVSS: 9.8 Attack Vector: Network Attack Complexity: Low Privileges Required: None User

Google has released an updated Chrome version 150.0.7871.46/.47 for Windows and Mac and 150.0.7871.46 for Linux. The addressed vulnerabilities could allow the attacker to bypass security restrictions, gain elevated privileges, obtain sensitive information, or execute arbitrary code on the affected systems via a crafted HTML page. Sample of the addressed vulnerabilities: 1. Google Chrome Use

Progress has released a security update to address multiple vulnerabilities across Progress Kemp LoadMaster. The addressed vulnerabilities could allow the unauthenticated attacker to bypass security restrictions or execute arbitrary code on the affected system. Sample of the addressed vulnerabilities: Progress Kemp LoadMaster OS Command Injection Vulnerability (CVE-2026- 8037): CVSS: 9.6 Attack Vector: Adjacent Attack Complexity:

Adobe has released security updates to address several vulnerabilities affecting Adobe ColdFusion and Adobe Campaign Classic. The addressed vulnerabilities could allow the attacker to bypass security restrictions, manipulate files, gain elevated privileges, or execute arbitrary commands on the affected product. Sample of the addressed vulnerabilities: 1. Adobe ColdFusion Unrestricted Upload of File with Dangerous Type

Apache Tomcat has released a security update to address several vulnerabilities affecting Apache Tomcat. The addressed vulnerabilities could allow the attacker to perform cross-site scripting attacks or bypass security restrictions on the affected system. Sample of the addressed vulnerabilities: 1. Apache Tomcat Invalid CRL Configuration Vulnerability (CVE-2026-53434): CVSS: 9.1 Attack Vector: Network Attack Complexity: Low

Google has released an updated Chrome version 149.0.7827.196/197 for Windows and Mac, and 149.0.7827.196 for Linux. The addressed vulnerabilities could allow the attacker to conduct denial of service attacks, obtain sensitive information, bypass security restrictions, or execute arbitrary code on the affected systems via a crafted HTML page. Sample of the addressed vulnerabilities: 1. Google

Google has released an updated Chrome version 149.0.7827.155/.156 for Windows and Mac and 149.0.7827.155 for Linux. The addressed vulnerabilities could allow the attacker to gain elevated privileges, obtain sensitive information, bypass security restrictions, or execute arbitrary code on the affected systems. Sample of the addressed vulnerabilities: 1. Google Chrome Digital Credentials Use After Free Vulnerability

Cisco has released security updates to address several vulnerabilities affecting multiple Cisco products. The addressed vulnerabilities could allow the attacker to gain elevated privileges, obtain sensitive information, perform denial of service attacks, or executemarbitrary commands on the affected system. Sample of the addressed vulnerabilities: 1. Cisco Identity Services Engine Remote Code Execution Vulnerability (CVE-2026-20181): CVSS:

Microsoft has released security updates to address several vulnerabilities affecting multiple Microsoft products. The addressed vulnerabilities could allow the attacker to gain elevated privileges, perform spoofing attacks, obtain sensitive information, or execute arbitrary code on the affected systems. Sample of the addressed vulnerabilities: 1. Azure Active Directory Elevation of Privilege Vulnerability (CVE-2026-45480): CVSS: 10 Attack

Splunk has released a security update to address two vulnerabilities affecting Splunk AI Toolkit. The addressed vulnerabilities could allow the attacker to obtain sensitive information or execute arbitrary OS commands on the affected system. The addressed vulnerabilities: 1. Splunk AI Toolkit OS Command Injection in the btool Configuration Helper Vulnerability (CVE-2026-20266): CVSS: 9.1 Attack Vector:

Oracle released its critical patch updates for June 2026, containing 245 new security patches across multiple affected Oracle products and third-party components. The addressed vulnerabilities could allow the attacker to conduct denial-of-service attacks, obtain sensitive information, manipulate data, or gain access to the affected systems. Sample of the addressed vulnerabilities: 1. Oracle Coherence Centralized Takeover

Mozilla has released updated Firefox version 152 and Firefox ESR versions 115.37 and 140.12 to fix multiple vulnerabilities. The addressed vulnerabilities could allow the attacker to conduct denial-of-service and spoofing attacks, gain elevated privilege, trigger memory corruption, obtain sensitive information, bypass security restrictions, and execute arbitrary code on the affected systems. Sample of the addressed

Fortra has released a security update to fix two vulnerabilities affecting Fortra’s Core Privileged Access Manager (BoKS). The addressed vulnerabilities could allow the attacker to gain elevated privileges or compromise a legacy tar-installed client, which may be able to cause commands to be executed on the affected system. The addressed vulnerabilities: 1. Core Privileged Access

Google has released an updated Chrome version 149.0.7827.114/.115 for Windows and Mac, and 149.0.7827.114 for Linux. The addressed vulnerabilities could allow the attacker to conduct denial-of-service attacks, trigger memory corruption, gain elevated privileges, obtain sensitive information, bypass security restrictions, or execute arbitrary code on the affected system via a crafted HTML page. Sample of the

Oracle has released a security update to fix a critical zero-day vulnerability affecting Oracle PeopleSoft Enterprise PeopleTools. The addressed vulnerability could allow the unauthenticated attacker with network access via HTTP to execute arbitrary code, leading to the compromise and a complete takeover of the affected systems. The addressed vulnerability: Oracle PeopleSoft Enterprise PeopleTools Remote Code

Splunk has released security updates to address several vulnerabilities affecting multiple Splunk products. The addressed vulnerabilities could allow the attacker to perform server-side request forgery (SSRF), conduct cross-site scripting (XSS) attacks, manipulate data, bypass security restrictions, obtain sensitive information, or execute arbitrary code on the affected systems. Sample of the addressed vulnerabilities: 1. Splunk Enterprise

Adobe has released security updates to address several vulnerabilities affecting multiple Adobe products. The addressed vulnerabilities could allow the attacker to bypass security restrictions, manipulate data, obtain sensitive information, perform denial-ofservice and cross-site scripting attacks, execute arbitrary code, and gain access to the affected systems. Sample of the addressed vulnerabilities: 1. Adobe Experience Manager Forms

OpenSSL has released security updates to address several vulnerabilities affecting OpenSSL Software Services. The addressed vulnerabilities could allow the attacker to perform denial-of-service attacks, bypass security restrictions, obtain sensitive information, gain elevated privileges, or execute arbitrary code on the affected system. Sample of the addressed vulnerabilities: 1. OpenSSL Heap Use-After-Free in the PKCS7_verify() Function Vulnerability