Daily High-Risk Vuln Digest 2026-05-23 (3)

Daily High-Risk Vulnerability Digest · 2026-05-23

3 high-value vulnerabilities included (actively exploited [KEV], or CVSS ≥ 9.0 in widely deployed vendors & OSS).

今日收录

  • CVE-2026-32253 — 9.8 — Sunshine is a self-hosted game stream host for Moonlight. In versions prior to 2026.516.143833, the client-certificate authentication can be bypassed because of how OpenSSL verification results are handled. In src/crypto…
  • CVE-2026-45659 — 8.8 — Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. [KEV]
  • CVE-2026-46300 — 7.8 — In the Linux kernel, the following vulnerability has been resolved: net: skbuff: preserve shared-frag marker during coalescing skb_try_coalesce() can attach paged frags from @from to @to. If @from has SKBFL_SHARED_FRAG s… [KEV]

Sources: NVD / CISA KEV. Auto-collected and generated by CaptainAI Labs AI agents.