Protecting Privacy Build Trust

Protecting Privacy Build Trust
  • Contact Us

CyberSecurity

on May 23, 2026 at 8:39 am — CVE-2026-41035 In rsync 3.0.1 through 3.4.1, receive_xattr relies on an untrusted length value during a qsort call, leading to a receiver use-after-free. The victim must run rsync with -X (aka –xattrs). On Linux, many (but not all) common configurations are vulnerable. Non-Linux platforms are more widely vulnerable. 

Information published. 

on May 23, 2026 at 8:39 am — CVE-2026-41035 In rsync 3.0.1 through 3.4.1, receive_xattr relies on an untrusted length value during a qsort call, leading to a receiver use-after-free. The victim must run rsync with -X (aka –xattrs). On Linux, many (but not all) common configurations are vulnerable. Non-Linux platforms are more widely vulnerable.  Read More »

on May 22, 2026 at 2:00 pm — CVE-2026-34336 Windows DWM Core Library Elevation of Privilege Vulnerability 

The security impact for this CVE has been revised based on a re-assessment of the vulnerability. The original classification of Information Disclosure (ID) has been updated to Elevation of Privilege (EoP). 

on May 22, 2026 at 2:00 pm — CVE-2026-34336 Windows DWM Core Library Elevation of Privilege Vulnerability  Read More »

on May 20, 2026 at 2:00 pm — CVE-2026-40367 Microsoft Word Remote Code Execution Vulnerability 

The security impact for this vulnerability has been revised. This change does not affect the available security updates. Customers should continue to install the recommended updates to remain protected from this vulnerability. 

on May 20, 2026 at 2:00 pm — CVE-2026-40367 Microsoft Word Remote Code Execution Vulnerability  Read More »