Schwachstellen, die jetzt zählen.

Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network.

Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network.

Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network.

Untrusted pointer dereference in Windows Group Policy allows an authorized attacker to elevate privileges over a network.

Stack-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges over a network.

Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network.

Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges over a network.

Out-of-bounds read in Windows exFAT File System allows an authorized attacker to elevate privileges over a network.

Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges over a network.

Use after free in Windows HTTP.sys allows an authorized attacker to elevate privileges over a network.

Missing authorization in Windows Hyper-V allows an authorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges over a network.

CommServe contained a cryptographic signature verification issue affecting privilege management.

CommServe contained a cryptographic signature verification issue affecting privilege management. Software customers upgrade to resolved maintenance release. Update CommServe and Web Server.

CommServe contained a path traversal issue affecting information disclosure.

CommServe contained an authentication bypass issue affecting access authorization and information disclosure.

CommServe contained a heap-based buffer overflow issue affecting service availability.

CommServe contained a stack-based buffer overflow issue affecting service availability.

IBM Langflow OSS 1.0.0 through 1.10.2 could allow a remote authenticated attacker to obtain sensitive information and inject messages into workflow history due…

IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote attacker to obtain sensitive information due to server-side request forgery.

In affected versions of the Codefresh platform an authenticated user can utilize an API endpoint to elevate to Admin permissions.

In Splunk Enterprise for Windows versions below 10.4.2, 10.2.6, 10.0.9, 9.4.13, and 9.3.14, a local user with access to the Windows host could bind to the…

In Splunk Enterprise for Windows versions below 10.4.2, 10.2.6, 10.0.9, 9.4.13, and 9.3.14, a local user with access to the Windows host could bind to the management port before Splunk Enterprise starts, intercept authentication tokens from child processes, and use those tokens to compromise all relevant data and system integrity available to the user account running Splunk Enterprise. The vulnerability is possible because the Windows management-port listener does not apply…

Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability

Insufficient granularity of access control in Active Directory Federation Services (AD FS) allows an authorized attacker to elevate privileges locally.

Google Chrome / Microsoft Edge: Mehrere Schwachstellen

Out of bounds read and write in V8 in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

Daemon Tools Lite Embedded Malicious Code Vulnerability

A supply chain attack compromised the official installation packages of DAEMON Tools Lite (Windows versions 12.5.0.2421 through 12.5.0.2434), distributed from the legitimate website daemon-tools.cc between approximately April 8, 2026, and May 5, 2026. Attackers gained unauthorized access to the vendor's (AVB Disc Soft) build or distribution infrastructure and trojanized three binaries: DTHelper.exe, DiscSoftBusServiceLite.exe, and DTShellHlp.exe. These files were digitally…

Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability

Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network.

Microsoft Windows Protection Mechanism Failure Vulnerability

Protection mechanism failure in Windows Shell allows an unauthorized attacker to perform spoofing over a network.