EUVD-2026-73176

Improper verification of cryptographic signature in Windows RDP Client allows an unauthorized attacker to disclose information over a network...

2026-09 .NET 10.0.12 Security Update for x86 Client (KB5126106)

2026-09 .NET 10.0.12 Security Update for x86 Client KB5126106...

2026-09 .NET 10.0.12 Security Update for x64 Client (KB5126106)

2026-09 .NET 10.0.12 Security Update for x64 Client KB5126106...

2026-09 .NET 9.0.20 Security Update for ARM64 Client (KB5126105)

2026-09 .NET 9.0.20 Security Update for ARM64 Client KB5126105...

2026-09 .NET 8.0.31 Security Update for x86 Client (KB5126104)

2026-09 .NET 8.0.31 Security Update for x86 Client KB5126104...

2026-09 .NET 10.0.12 Security Update for ARM64 Client (KB5126106)

2026-09 .NET 10.0.12 Security Update for ARM64 Client KB5126106...

2026-09 .NET 9.0.20 Security Update for x86 Client (KB5126105)

2026-09 .NET 9.0.20 Security Update for x86 Client KB5126105...

2026-09 .NET 9.0.20 Security Update for x64 Client (KB5126105)

2026-09 .NET 9.0.20 Security Update for x64 Client KB5126105...

2026-09 .NET 8.0.31 Security Update for ARM64 Client (KB5126104)

2026-09 .NET 8.0.31 Security Update for ARM64 Client KB5126104...

2026-09 .NET 8.0.31 Security Update for x64 Client (KB5126104)

2026-09 .NET 8.0.31 Security Update for x64 Client KB5126104...

CVE-2026-84386

A unverified ownership vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.7, FortiClientWindows 7.2 all versions may allow attacker to improper access control via via an exposed minifilter communication port...

CVE-2026-86733

Snipe-IT before 8.7.0 streams the SQL entry from an uploaded backup archive directly into the MySQL/MariaDB command-line client mysql without the --binary-mode flag, so the client interprets lines beginning with backslash commands such as ! as local shell commands. An authenticated...

CVE-2026-86733

Snipe-IT before 8.7.0 is vulnerable to remote code execution via its backup restore feature. The application streams SQL from an uploaded backup archive directly into the MySQL/MariaDB command-line client without the --binary-mode flag, causing the client to interpret backslash commands (e.g., \!...

CVE-2026-86733 Snipe-IT before 8.7.0 Remote Code Execution via Backup Restore

Snipe-IT before 8.7.0 streams the SQL entry from an uploaded backup archive directly into the MySQL/MariaDB command-line client mysql without the --binary-mode flag, so the client interprets lines beginning with backslash commands such as ! as local shell commands. An authenticated...

EUVD-2026-72869

Snipe-IT before 8.7.0 streams the SQL entry from an uploaded backup archive directly into the MySQL/MariaDB command-line client mysql without the --binary-mode flag, so the client interprets lines beginning with backslash commands such as ! as local shell commands. An authenticated...

firefox: Privilege escalation in the Remote Settings Client component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the Remote Settings Client component...

Windows DHCP Client Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges over an adjacent network...

Windows SMB Client Remote Code Execution Vulnerability

Use after free in Windows SMB Client allows an unauthorized attacker to execute code over a network...

Windows SMB Client Information Disclosure Vulnerability

Out-of-bounds read in Windows SMB Client allows an authorized attacker to disclose information locally...

Remote Desktop Client Remote Code Execution Vulnerability

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network...