Boletim de segurança de 28 de outubro de 2026

Exploração ativaAlta · CVSS 7.8PoC pública (6)EPSS 16%

CISA KEV

CVE-2026-46300

Linux Kernel Missing Initialization of a Variable Vulnerability

Linux · Kernel

Linux Kernel contains a missing initialization of a variable vulnerability that could allow for unintended modification of page-cache-backed data via failure to preserve the shared-fragment marker during socket buffer coalescing, causing ESP input processing to decrypt shared fragments in place. This vulnerability can...

Na KEV desde 28/10/2026Fonte oficial

Exploração ativaBaixa · CVSS 2.7

CISA KEV

CVE-2026-41709

Broadcom VMWare ESX Insufficient Logging Vulnerability

Broadcom · VMware ESX

Broadcom VMWare ESX contains an insufficient logging vulnerability that could allow a malicious actor with admin access to perform certain operations without being logged.

Na KEV desde 28/10/2026Fonte oficial

28 de outubro de 2026

Sob exploração ativa

Linux Kernel Missing Initialization of a Variable Vulnerability

Broadcom VMWare ESX Insufficient Logging Vulnerability