Peter Leibling – Seite 46 – Leibling.de

CVE-2026-49975 Apache HTTP Server: mod_http2 denial of service

Information published.

[NEU] [hoch] Microsoft Azure: Mehrere Schwachstellen

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Microsoft Azure und Microsoft Azure Stack ausnutzen, um beliebigen Code auszuführen, Spoofing-Angriffe durchzuführen, erweiterte Berechtigungen zu erlangen, Daten zu manipulieren oder vertrauliche Informationen offenzulegen.

[NEU] [hoch] Microsoft Dynamics 365 (On-Premises): Schwachstelle ermöglicht Erlangen von Administratorrechten

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Microsoft Dynamics 365 ausnutzen, um Administratorrechte zu erlangen.

[NEU] [mittel] Microsoft Apps: Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in Microsoft 365 Copilot, Microsoft PowerToys und verschiedenen Microsoft Apps ausnutzen, um Administratorrechte zu erlangen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Spoofing-Angriffe durchzuführen oder vertrauliche Informationen offenzulegen.

Chromium: CVE-2026-11034 Insufficient validation of untrusted input in Tab Group Sync

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Chromium: CVE-2026-11035 Insufficient validation of untrusted input in Custom Tabs

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Chromium: CVE-2026-10984 Inappropriate implementation in Accessibility

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Chromium: CVE-2026-10934 Use after free in Autofill

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Chromium: CVE-2026-11145 Race in Geolocation

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Chromium: CVE-2026-10929 Heap buffer overflow in ANGLE

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.