Allgemein – Leibling.de

CVE-2026-43490 ksmbd: validate inherited ACE SID length

Information published.

CVE-2026-46333 ptrace: slightly saner ‚get_dumpable()‘ logic

Information published.

CVE-2026-44662 rust-openssl: Heap buffer overflow when encrypting with AES key-wrap-with-padding

Information published.

CVE-2026-44431 urllib3: Sensitive headers forwarded across origins in proxied low-level redirects

Information published.

CVE-2026-42946 NGINX ngx_http_scgi_module and ngx_http_uwsgi_module vulnerability

Information published.

Microsoft Exchange: Zero-Day-Lücke wird angegriffen

In Microsofts Exchange klafft eine Zero-Day-Lücke, die Angreifer bereits missbrauchen. Admins sollten rasch handeln.

CVE-2026-32161 Windows Native WiFi Miniport Driver Remote Code Execution Vulnerability

Updated Hotpatch links. This is in informational change only.

CVE-2026-32170 Windows Rich Text Edit Elevation of Privilege Vulnerability

Updated Hotpatch links. This is in informational change only.

CVE-2026-21530 Windows Rich Text Edit Elevation of Privilege Vulnerability

Updated Hotpatch links. This is in informational change only.

CVE-2026-40379 Azure Entra ID Spoofing Vulnerability

Corrected CVE title. This is an informational change only.