Peter Leibling – Seite 66 – Leibling.de

CVE-2026-4890 CVE-2026-4890

Information published.

CVE-2026-8711 NGINX JavaScript vulnerability

Information published.

CVE-2026-5172 CVE-2026-5172

Information published.

[UPDATE] [hoch] FreeRDP: Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in FreeRDP ausnutzen, um beliebigen Programmcode auszuführen, einen Denial-of-Service-Zustand zu verursachen oder nicht näher spezifizierte Angriffe durchzuführen.

[UPDATE] [hoch] Snipe-IT: Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in Snipe-IT ausnutzen, um Cross-Site-Scripting-Angriffe durchzuführen, Benutzer auf bösartige Websites umzuleiten, Administratorrechte zu erlangen oder beliebigen Code auszuführen.

CVE-2026-45659 Microsoft SharePoint Remote Code Execution Vulnerability

Information published. This CVE was addressed by updates that were released in May 2026, but the CVE was inadvertently omitted from the May 2026 Security Updates. This is an informational change only. Customers who have already installed the May 2026 updates do not need to take any further action.

CVE-2026-41091 Microsoft Defender Elevation of Privilege Vulnerability

In the Security Updates table, added links to the Release Notes. This is an informational change only.

CVE-2026-45584 Microsoft Defender Remote Code Execution Vulnerability

In the Security Updates table, added links to the Release Notes. This is an informational change only.

CVE-2026-45498 Microsoft Defender Denial of Service Vulnerability

CWE added. Informational change only.

CVE-2026-45495 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

CWE added. Informational change only.