Was hat sich geändert?

Vergleich von 2. Mai 2026 mit dem Vortag 25. April 2026.

Neu hinzugekommen

KEV NEU Linux

100

CISA Adds One Known Exploited Vulnerability to Catalog

This CVE is actively exploited and added to CISA's KEV catalog, requiring immediate patching of affected Linux systems.

Kritisch CVSS 7.8 EPSS 3% 1. Mai, 12:00

KEV NEU Linux

100

Dangerous New Linux Exploit Gives Attackers Root Access to Countless Computers

This alert describes a specific active exploit (CopyFail) with root access capabilities, not just a patch reminder, and highlights that many systems remain unpatched.

Kritisch CVSS 7.8 EPSS 3% 1. Mai, 20:30

KEV NEU Linux

100

Metasploit Wrap-Up 05/01/2026

Public PoC and Metasploit module for a Linux kernel cryptographic API logic flaw enabling local privilege escalation on AMD64/AARCH64 systems.

Kritisch CVSS 7.8 EPSS 3% 1. Mai, 20:22

KEV NEU Dell

vSphere and BRICKSTORM Malware: A Defender's Guide

The BRICKSTORM malware exploits vCenter SSO to establish persistence and evade detection, requiring MFA and real-time alerting on SSO account actions.

Kritisch CVSS 10.0 EPSS 22% 2. Apr., 14:00

NEU

100

This vulnerability allows a non-privileged user to corrupt kernel memory via GPU system calls, which could be exploited in multi-tenant virtualization environments like VMware ESXi to break isolation.

Hoch CVSS 7.8 EPSS 0% 1. Mai, 16:16

NEU Linux

CVE-2026-31700

This is a newly disclosed Linux kernel vulnerability with a TOCTOU race condition in the packet socket subsystem that could allow local privilege escalation.

Niedrig EPSS 0% 1. Mai, 14:16

NEU Linux

CVE-2026-31709

This CVE describes a newly discovered vulnerability in the Linux kernel's SMB client that allows a malicious server to corrupt memory via a crafted DACL, going beyond a simple patch reminder by detailing the specific flaw in ACL validation.

Niedrig EPSS 0% 1. Mai, 14:16

NEU Linux

CVE-2026-31711

An unauthenticated remote attacker can exhaust the max_connections pool by triggering memory allocation failures via crafted TCP connections, causing permanent denial of service until module reload.

Niedrig EPSS 0% 1. Mai, 14:16

NEU Linux

CVE-2026-31774

This vulnerability describes a specific slab-out-of-bounds read in io_uring that can be triggered by passing large sqe->len values, potentially leading to memory corruption or information disclosure.

Niedrig EPSS 0% 1. Mai, 15:16

NEU Linux

CVE-2026-43016

This is a newly disclosed use-after-free vulnerability in the Linux kernel's BPF sockmap subsystem that could allow local privilege escalation or denial of service.

Niedrig EPSS 0% 1. Mai, 15:16

NEU Linux

CVE-2026-43043

This is a newly disclosed vulnerability with no active exploitation reported yet, but it poses a high risk of kernel panic for systems using AF_ALG crypto operations.

Niedrig EPSS 0% 1. Mai, 15:16

Neu als KEV gelistet

Keine Änderungen in dieser Kategorie.

Score-Sprung

Keine Änderungen in dieser Kategorie.

Nicht mehr im Report

Keine Änderungen in dieser Kategorie.