Peter Leibling – Seite 310

Notepad++: Sicherheitsupdate gegen Codeschmuggel-Lücke

Notepad++ verbessert Sicherheitsmechanismen und stopft eine neue Lücke, die Angreifern das Ausführen von Schadcode erlaubt.

[UPDATE] [kritisch] Dell RecoverPoint for Virtual Machines: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen und potenziell Privilegieneskalation

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Dell RecoverPoint for Virtual Machines ausnutzen, um Sicherheitsvorkehrungen zu umgehen, und potenziell um seine Privilegien zu erhöhen.

Chromium: CVE-2026-2322 Heap buffer overflow in Codecs

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2024 ) for more information.

Chromium: CVE-2026-2319 Race in DevTools

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2024 ) for more information.

Chromium: CVE-2026-2316 Insufficient policy enforcement in Frames

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2024 ) for more information.

Chromium: CVE-2026-2314 Heap buffer overflow in Codecs

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2024 ) for more information.

CVE-2025-14524 bearer token leak on cross-protocol redirect

Information published.

CVE-2025-15079 libssh global known_hosts override

Information published.

CVE-2025-15224 libssh key passphrase bypass without agent set

Information published.

CVE-2022-43680 In libexpat through 2.4.9 there is a use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate in out-of-memory situations.

Information published.

Autor: Peter Leibling

Notepad++: Sicherheitsupdate gegen Codeschmuggel-Lücke

[UPDATE] [kritisch] Dell RecoverPoint for Virtual Machines: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen und potenziell Privilegieneskalation

Chromium: CVE-2026-2322 Heap buffer overflow in Codecs

Chromium: CVE-2026-2319 Race in DevTools

Chromium: CVE-2026-2316 Insufficient policy enforcement in Frames

Chromium: CVE-2026-2314 Heap buffer overflow in Codecs

CVE-2025-14524 bearer token leak on cross-protocol redirect

CVE-2025-15079 libssh global known_hosts override

CVE-2025-15224 libssh key passphrase bypass without agent set

CVE-2022-43680 In libexpat through 2.4.9 there is a use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate in out-of-memory situations.

Suchen