CVE-2026-69984

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

CVE-2026-69988

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

CVE-2026-69991

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

CVE-2026-69986

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

CVE-2026-69987

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

CVE-2026-69976

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

CVE-2026-69955

Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network...

CVE-2026-69940

Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network...

CVE-2026-69949

Heap-based buffer overflow in Windows Client for NFS allows an authorized attacker to elevate privileges locally...

CVE-2026-110239

Rapyd Admin before 9.20.0 contains a stored cross-site scripting vulnerability in the x-rpd::rich-text Blade component that outputs bound model values as raw HTML without sanitisation. Authenticated users can set the bound property through the Livewire client API to store JavaScript that executes...

CVE-2026-108458

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

CVE-2026-103575

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

CVE-2026-100201

Heap-based buffer overflow in Windows Client License Service allows an authorized attacker to elevate privileges locally...

Improper Validation of Integrity Check Value

Overview Affected versions of this package are vulnerable to Improper Validation of Integrity Check Value in the Get method of the manifests type in registry/client/repository.go, which reads the response body and passes it to distribution.UnmarshalManifest without computing digest.FromBytesbody...

Improper Validation of Integrity Check Value

Overview Affected versions of this package are vulnerable to Improper Validation of Integrity Check Value in the Get method of the manifests type in registry/client/repository.go, which reads the response body and passes it to distribution.UnmarshalManifest without computing digest.FromBytesbody...

CVE-2026-103575

A Use after free vulnerability exists in the Remote Desktop Client , which may allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a CVSS 3.1 base score of 8.8 (High) . While the impact includes high confidentiality, integrity, and availability, u...

CVE-2026-100201

A heap-based buffer overflow vulnerability exists in the Windows Client License Service . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-122 (Heap-based Buffer Overflow) and CWE-197 (Numeric Truncation Error). Details regar...

CVE-2026-96948

The Windows Client Side Caching driver (csc.sys) is vulnerable to an information disclosure flaw (CWE-497). An authorized attacker can exploit this vulnerability to disclose sensitive information locally on the system. No specific exploit code or in-the-wild exploitation details are provided in t...

CVE-2026-96912

A Use after free vulnerability in the Windows Client License Service allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-416 and has a CVSS 3.1 base score of 7.8 . While the documents confirm the impact of privilege elevation, no specific...

CVE-2026-70250

A Use after free vulnerability in the Windows DHCP Client allows an unauthorized attacker to execute code over an adjacent network . The vulnerability is associated with CWE-416 (Use After Free) and CWE-362 (Race Condition). While the specific root cause is linked to concurrent execution using sh...