CVE-2026-49801 Windows SMB Information Disclosure Vulnerability

...

CVE-2026-54997 Windows SMB Information Disclosure Vulnerability

...

CVE-2026-54997

Public technical details are not provided in the supplied documents for CVE-2026-54997. No specifics on affected products, versions, root cause, or remediation are available here. Monitor for updates from official sources.

CVE-2026-54997 Windows SMB Information Disclosure Vulnerability

...

CVE-2026-54992 Microsoft Message Queuing Queue Manager Remote Code Execution Vulnerability

...

CVE-2026-54992

CVE-2026-54992 is a heap-based buffer overflow affecting the Windows Message Queuing Queue Manager that allows a local attacker to execute code. The vulnerability is described in NVD/MSRC references as enabling local arbitrary code execution. The public entries consistently describe the same unde...

CVE-2026-54992 Microsoft Message Queuing Queue Manager Remote Code Execution Vulnerability

...

Security update for the Linux Kernel (Live Patch 54 for SUSE Linux Enterprise 15 SP4)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.219 fixes various security issues The following security issues were fixed: CVE-2026-31758: usb: usbtmc: Flush anchored URBs in usbtmcrelease bsc1264094. CVE-2026-43037: ip6tunnel: clear skb2-cb in ip4ip6err bsc1265197...

SUSE-SU-2026:2989-1 Security update for the Linux Kernel (Live Patch 40 for SUSE Linux Enterprise 15 SP5)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.166 fixes various security issues The following security issues were fixed: - CVE-2026-31758: usb: usbtmc: Flush anchored URBs in usbtmcrelease bsc1264094. - CVE-2026-43037: ip6tunnel: clear skb2-cb in ip4ip6err bsc1265197. -...

CVE-2026-52838

Affected software: Easy!Appointments (self-hosted appointment scheduler). Vulnerability: Stored XSS via the public booking page. An authenticated administrator can store HTML/JavaScript in the disable_booking_message setting (rich-text editor). The value is later passed directly to the public boo...

CVE-2026-52838 Easy!Appointments disable_booking_message rendered as raw HTML on public booking page — Stored XSS

Easy!Appointments is a self hosted appointment scheduler. Versions prior to 1.6.0 allow administrators to define a custom "booking disabled" message through the booking settings page. That value is stored in the disablebookingmessage setting via a rich-text editor and later passed directly to the...

Windows SMB Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows SMB allows an authorized attacker to elevate privileges over a network...

Windows Message Queuing (MSMQ) Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows Active Directory allows an authorized attacker to elevate privileges locally...

Windows SMB Server Denial of Service Vulnerability

Null pointer dereference in Windows SMB Server allows an authorized attacker to deny service over a network...

Windows SMB Server Elevation of Privilege Vulnerability

Incorrect implementation of authentication algorithm in Windows SMB Server allows an authorized attacker to elevate privileges over a network...

Microsoft Message Queuing Queue Manager Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code locally...

Windows Message Queuing Service (MSMQ) Remote Code Execution Vulnerability

Use after free in Windows Message Queuing allows an authorized attacker to execute code over a network...

Windows Message Queuing Service (MSMQ) Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over a network...

Microsoft Message Queuing Queue Manager Remote Code Execution Vulnerability

Use after free in Microsoft Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network...

Security update for pacemaker

This update for pacemaker fixes the following issues: CVE-2026-10649: Fixed denial of service via integer overflow in remote message decompression bsc1268381. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...