firefox: thunderbird: Sandbox escape in the Remote Settings Client component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape in the Remote Settings Client component...

Important: Red Hat Security Advisory: thunderbird security update

An update for thunderbird is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common...

firefox: thunderbird: Mitigation bypass in the Remote Settings Client component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the Remote Settings Client component...

CVE-2026-89111

The SAP Cloud SDK for Python contains an OAuth2 SSRF vulnerability (CWE-918) affecting multi-tenant BTP applications. An attacker who controls the tenant_subdomain parameter can redirect OAuth2 token requests to a server they control. This allows for the exfiltration of client credentials . The v...

EUVD-2026-98193

The SAP Cloud SDK for Python contains an OAuth2 SSRF vulnerability affecting multi-tenant BTP applications. An attacker who controls the tenantsubdomain parameter can redirect OAuth2 token requests to an attacker-controlled server, causing client credentials to be exfiltrated...

PT-2026-113223

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

CVE-2026-110239: Improper Neutralization of Input During Web Page Generation

Rapyd Admin before 9.20.0 contains a stored cross-site scripting vulnerability in the x-rpd::rich-text Blade component that outputs bound model values as raw HTML without sanitisation. Authenticated users can set the bound property through the Livewire client API to store JavaScript that executes...

CVE-2026-54700: Improper Input Validation

ConnectBot SSH Client Library is written in Kotlin with Kaitai Struct and KStateMachine. Prior to 0.3.1, the SSH protocol parser trusts attacker-controlled inner byte lengths and element counts without verifying that they fit in the containing packet. A malicious or compromised SSH server can...

CVE-2026-69976: Use After Free

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

CVE-2026-109948: Exposure of Sensitive Information to an Unauthorized Actor

FreeRDP from 3.0.0 before 3.32.0 contains an uninitialized memory disclosure vulnerability in smartcardTransmitCall that allows malicious RDP servers to read client memory. Servers can send SCardTransmit requests with an invalid card handle and nonzero receive length, causing...

CVE-2026-108458: Use After Free

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

PT-2026-111392

Name of the Vulnerable Software and Affected Versions .NET Client Library for SIMATIC S7 Webserver API versions prior to V3.3.62 Description Applications using the library do not properly redact PLC restore passwords from HTTP error exception messages. An attacker with access to logs or diagnosti...

Ubuntu 24.04 LTS : curl vulnerability (USN-8670-1)

The remote Ubuntu 24.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8670-1 advisory. Joshua Rogers discovered that curl incorrectly handled reusing connections when client certificate settings changed. This could result in the wrong client...

CVE-2026-103575: Use After Free

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

CVE-2026-100201: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Client License Service allows an authorized attacker to elevate privileges locally...

PT-2026-113150

Name of the Vulnerable Software and Affected Versions Windows Client Side Caching driver csc.sys affected versions not specified Description An issue in the Windows Client Side Caching driver csc.sys allows an authorized attacker to locally disclose sensitive information. Recommendations At the...

Microsoft Windows: CVE-2026-69994: Remote Desktop Client Remote Code Execution Vulnerability

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-69995: Remote Desktop Client Remote Code Execution Vulnerability

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-69996: Remote Desktop Client Remote Code Execution Vulnerability

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-69997: Remote Desktop Client Remote Code Execution Vulnerability

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...