Microsoft Security
CVE-2026-32185 Microsoft Teams Spoofing Vulnerability 18 Mei 2026 om 16:00

CVE-2026-32185 Microsoft Teams Spoofing Vulnerability

18 Mei 2026 om 16:00

The security update for Microsoft Teams for Android is not immediately available. Customers running affected Microsoft Teams for would need to install the update to be protected from this vulnerability, once the update becomes available.

Microsoft Security
CVE-2026-42897 Microsoft Exchange Server Spoofing Vulnerability 18 Mei 2026 om 16:00

CVE-2026-42897 Microsoft Exchange Server Spoofing Vulnerability

Microsoft Security

18 Mei 2026 om 16:00

Updated FAQ information. This is an informational change only.

Microsoft Security
CVE-2026-42822 Azure Local Disconnected Operations (ALDO) Elevation of Privilege Vulnerability 18 Mei 2026 om 16:00

CVE-2026-42822 Azure Local Disconnected Operations (ALDO) Elevation of Privilege Vulnerability

Microsoft Security

18 Mei 2026 om 16:00

Improper authentication in Azure Local Disconnected Operations allows an unauthorized attacker to elevate privileges over a network.

Microsoft Security
CVE-2026-32177 .NET Elevation of Privilege Vulnerability 18 Mei 2026 om 16:00

CVE-2026-32177 .NET Elevation of Privilege Vulnerability

Microsoft Security

18 Mei 2026 om 16:00

Update the Security Updates table to remove incorrectly added software

Microsoft Security
CVE-2026-43308 btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() 18 Mei 2026 om 10:39

CVE-2026-43308 btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref()

Microsoft Security

18 Mei 2026 om 10:39

Information published.

Microsoft Security
CVE-2026-8328 FTP PASV SSRF, ftpcp() does not use actual peer address, trusts server-supplied PASV host address 17 Mei 2026 om 10:01

CVE-2026-8328 FTP PASV SSRF, ftpcp() does not use actual peer address, trusts server-supplied PASV host address

Microsoft Security

17 Mei 2026 om 10:01

Information published.

CVE-2026-8368 LWP::UserAgent versions before 6.83 for Perl leak Authorization and Proxy-Authorization headers on cross-origin redirects

Microsoft Security

17 Mei 2026 om 10:01

Information published.

Microsoft Security
CVE-2026-7210 The expat and elementtree parsers use insufficient entropy for XML hash-flooding protection 17 Mei 2026 om 10:01

CVE-2026-7210 The expat and elementtree parsers use insufficient entropy for XML hash-flooding protection

Microsoft Security

17 Mei 2026 om 10:01

Information published.

Microsoft Security
CVE-2026-44283 etcd: Read access via PrevKv in etcd transactions may bypass RBAC authorization checks 17 Mei 2026 om 10:01

CVE-2026-44283 etcd: Read access via PrevKv in etcd transactions may bypass RBAC authorization checks

Microsoft Security

17 Mei 2026 om 10:01

Information published.

Microsoft Security
CVE-2026-46483 Vim: Command injection in tar#Vimuntar via missing shellescape {special} flag 17 Mei 2026 om 10:01

CVE-2026-46483 Vim: Command injection in tar#Vimuntar via missing shellescape {special} flag

Microsoft Security

17 Mei 2026 om 10:01

Information published.

Microsoft Security
CVE-2026-43490 ksmbd: validate inherited ACE SID length 16 Mei 2026 om 10:05

CVE-2026-43490 ksmbd: validate inherited ACE SID length

Microsoft Security

16 Mei 2026 om 10:05

Information published.

Microsoft Security
CVE-2026-46333 ptrace: slightly saner 'get_dumpable()' logic 16 Mei 2026 om 10:05

CVE-2026-46333 ptrace: slightly saner 'get_dumpable()' logic

Microsoft Security

16 Mei 2026 om 10:05

Information published.

Microsoft Security
CVE-2026-44662 rust-openssl: Heap buffer overflow when encrypting with AES key-wrap-with-padding 16 Mei 2026 om 10:05

CVE-2026-44662 rust-openssl: Heap buffer overflow when encrypting with AES key-wrap-with-padding

Microsoft Security

16 Mei 2026 om 10:05

Information published.

Microsoft Security
CVE-2026-44431 urllib3: Sensitive headers forwarded across origins in proxied low-level redirects 16 Mei 2026 om 10:05

CVE-2026-44431 urllib3: Sensitive headers forwarded across origins in proxied low-level redirects

Microsoft Security

16 Mei 2026 om 10:05

Information published.

Microsoft Security
CVE-2026-42946 NGINX ngx_http_scgi_module and ngx_http_uwsgi_module vulnerability 16 Mei 2026 om 10:05

CVE-2026-42946 NGINX ngx_http_scgi_module and ngx_http_uwsgi_module vulnerability

Microsoft Security

16 Mei 2026 om 10:05

Information published.

Microsoft Security
CVE-2026-42945 NGINX ngx_http_rewrite_module vulnerability 16 Mei 2026 om 10:05

CVE-2026-42945 NGINX ngx_http_rewrite_module vulnerability

Microsoft Security

16 Mei 2026 om 10:05

Information published.

Microsoft Security
CVE-2026-42934 NGINX ngx_http_charset_module vulnerability 16 Mei 2026 om 10:04

CVE-2026-42934 NGINX ngx_http_charset_module vulnerability

Microsoft Security

16 Mei 2026 om 10:04

Information published.

Microsoft Security
CVE-2026-40701 NGINX ngx_http_ssl_module vulnerability 16 Mei 2026 om 10:04

CVE-2026-40701 NGINX ngx_http_ssl_module vulnerability

Microsoft Security

16 Mei 2026 om 10:04

Information published.

Microsoft Security
CVE-2026-40460 NGINX ngx_quic_module vulnerability 16 Mei 2026 om 10:04

CVE-2026-40460 NGINX ngx_quic_module vulnerability

Microsoft Security

16 Mei 2026 om 10:04

Information published.

Microsoft Security
CVE-2026-6479 PostgreSQL SSL/GSS init causes denial of service, via uncontrolled recursion 16 Mei 2026 om 10:04

CVE-2026-6479 PostgreSQL SSL/GSS init causes denial of service, via uncontrolled recursion

Microsoft Security

16 Mei 2026 om 10:04

Information published.

Microsoft Security
CVE-2026-6477 PostgreSQL libpq lo_* functions let server superuser overwrite client stack memory 16 Mei 2026 om 10:04

CVE-2026-6477 PostgreSQL libpq lo_* functions let server superuser overwrite client stack memory

Microsoft Security

16 Mei 2026 om 10:04

Information published.

Microsoft Security
CVE-2026-6637 PostgreSQL refint allows stack buffer overflow and SQL injection 16 Mei 2026 om 10:04

CVE-2026-6637 PostgreSQL refint allows stack buffer overflow and SQL injection

Microsoft Security

16 Mei 2026 om 10:04

Information published.

Microsoft Security
CVE-2026-6472 PostgreSQL CREATE TYPE does not check multirange schema CREATE privilege 16 Mei 2026 om 10:04

CVE-2026-6472 PostgreSQL CREATE TYPE does not check multirange schema CREATE privilege

Microsoft Security

16 Mei 2026 om 10:04

Information published.

Microsoft Security
CVE-2026-6474 PostgreSQL timeofday() can disclose portions of server memory 16 Mei 2026 om 10:04

CVE-2026-6474 PostgreSQL timeofday() can disclose portions of server memory

Microsoft Security

16 Mei 2026 om 10:04

Information published.

Microsoft Security
CVE-2026-6475 PostgreSQL pg_basebackup and pg_rewind can overwrite unrelated files of origin superuser choice 16 Mei 2026 om 10:04

CVE-2026-6475 PostgreSQL pg_basebackup and pg_rewind can overwrite unrelated files of origin superuser choice

Microsoft Security

16 Mei 2026 om 10:04

Information published.

Microsoft Security
CVE-2026-6638 PostgreSQL REFRESH PUBLICATION allows SQL injection via table name 16 Mei 2026 om 10:04

CVE-2026-6638 PostgreSQL REFRESH PUBLICATION allows SQL injection via table name

Microsoft Security

16 Mei 2026 om 10:04

Information published.

Microsoft Security
CVE-2026-6473 PostgreSQL server undersizes allocations, via integer wraparound 16 Mei 2026 om 10:04

CVE-2026-6473 PostgreSQL server undersizes allocations, via integer wraparound

Microsoft Security

16 Mei 2026 om 10:04

Information published.

Microsoft Security
CVE-2026-6478 PostgreSQL discloses MD5-hashed passwords via covert timing channel 16 Mei 2026 om 10:03

CVE-2026-6478 PostgreSQL discloses MD5-hashed passwords via covert timing channel

Microsoft Security

16 Mei 2026 om 10:03

Information published.

Microsoft Security
CVE-2026-44673 libyang: lyb_read_string() integer overflow → heap buffer overflow 16 Mei 2026 om 10:03

CVE-2026-44673 libyang: lyb_read_string() integer overflow → heap buffer overflow

Microsoft Security

16 Mei 2026 om 10:03

Information published.

Microsoft Security
CVE-2026-32161 Windows Native WiFi Miniport Driver Remote Code Execution Vulnerability 15 Mei 2026 om 16:00

CVE-2026-32161 Windows Native WiFi Miniport Driver Remote Code Execution Vulnerability

Microsoft Security

15 Mei 2026 om 16:00

Updated Hotpatch links. This is in informational change only.

Normale weergave