June 9, 2026—KB5094041 (Monthly Rollup)

None None...

CVE-2026-50023

yt-dlp is a command-line audio/video downloader. Prior to 2026.06.09, a vulnerability exists in yt-dlp that allows a remote attacker to write arbitrary OS-shortcut files such as .desktop, .url, .webloc to the user's filesystem, bypassing the remediation for CVE-2024-38519. The allowlist explicitl...

CVE-2024-4177

creationtimestamp| type| source ---|---|--- 2024-06-09 21:00:45+00:00| seen| https://t.me/HackingInsights/2034...