CVE-2026-69955

Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network...

CVE-2026-69940

Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network...

CVE-2026-69949

Heap-based buffer overflow in Windows Client for NFS allows an authorized attacker to elevate privileges locally...

CVE-2026-110239

Rapyd Admin before 9.20.0 contains a stored cross-site scripting vulnerability in the x-rpd::rich-text Blade component that outputs bound model values as raw HTML without sanitisation. Authenticated users can set the bound property through the Livewire client API to store JavaScript that executes...

CVE-2026-108458

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

CVE-2026-103575

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

CVE-2026-100201

Heap-based buffer overflow in Windows Client License Service allows an authorized attacker to elevate privileges locally...

Improper Validation of Integrity Check Value

Overview Affected versions of this package are vulnerable to Improper Validation of Integrity Check Value in the Get method of the manifests type in registry/client/repository.go, which reads the response body and passes it to distribution.UnmarshalManifest without computing digest.FromBytesbody...

Improper Validation of Integrity Check Value

Overview Affected versions of this package are vulnerable to Improper Validation of Integrity Check Value in the Get method of the manifests type in registry/client/repository.go, which reads the response body and passes it to distribution.UnmarshalManifest without computing digest.FromBytesbody...

CVE-2026-103575

A Use after free vulnerability exists in the Remote Desktop Client , which may allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a CVSS 3.1 base score of 8.8 (High) . While the impact includes high confidentiality, integrity, and availability, u...

CVE-2026-100201

A heap-based buffer overflow vulnerability exists in the Windows Client License Service . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-122 (Heap-based Buffer Overflow) and CWE-197 (Numeric Truncation Error). Details regar...

CVE-2026-96948

The Windows Client Side Caching driver (csc.sys) is vulnerable to an information disclosure flaw (CWE-497). An authorized attacker can exploit this vulnerability to disclose sensitive information locally on the system. No specific exploit code or in-the-wild exploitation details are provided in t...

CVE-2026-96912

A Use after free vulnerability in the Windows Client License Service allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-416 and has a CVSS 3.1 base score of 7.8 . While the documents confirm the impact of privilege elevation, no specific...

CVE-2026-70250

A Use after free vulnerability in the Windows DHCP Client allows an unauthorized attacker to execute code over an adjacent network . The vulnerability is associated with CWE-416 (Use After Free) and CWE-362 (Race Condition). While the specific root cause is linked to concurrent execution using sh...

EUVD-2026-100133

Use after free in Windows DHCP Client allows an unauthorized attacker to execute code over an adjacent network...

CVE-2026-83789

A heap-based buffer overflow exists in the Windows SMB Client component. This vulnerability allows an unauthorized attacker to elevate privileges over a network. The CVSS 3.1 score is 8.8 (High) , indicating significant impact on confidentiality, integrity, and availability. While an official fix...

CVE-2026-83698

A heap-based buffer overflow exists in the Windows Client-Side Caching (CSC) Service . This vulnerability allows an authorized attacker to achieve local privilege escalation . No specific exploit information or in-the-wild exploitation details are provided in the documents. Remediation involves a...

CVE-2026-83677

A memory leak vulnerability (CWE-401) exists in the Windows DHCP Client due to a missing release of memory after its effective lifetime. This flaw allows an unauthorized attacker to conduct a denial of service (DoS) attack over a network. The CVSS v3.1 score is 7.5 (High) , indicating low attack ...

CVE-2026-70006

A Use after free vulnerability in the Remote Desktop Client allows an unauthorized attacker to execute code over a network. The vulnerability has a CVSS 3.1 base score of 7.5 (High) , where the attack vector is Network and user interaction is Required . Exploitation details are not provided in th...

CVE-2026-70012

A Use after free vulnerability in the Remote Desktop Client allows an unauthorized attacker to execute code over a network. The vulnerability's impact is categorized as HIGH for confidentiality, integrity, and availability. No specific exploitations or exploit links are provided in the documents....