firefox: Privilege escalation in the Remote Settings Client component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the Remote Settings Client component...

Windows SMB Client Information Disclosure Vulnerability

Out-of-bounds read in Windows SMB Client allows an authorized attacker to disclose information over a network...

Remote Desktop Client Remote Code Execution Vulnerability

Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute code over a network...

Telnet Client Remote Code Execution Vulnerability

Heap-based buffer overflow in Telnet Client allows an unauthorized attacker to execute code over a network...

Microsoft Remote Desktop App for Windows Information Disclosure Vulnerability

Improper verification of cryptographic signature in Windows RDP Client allows an unauthorized attacker to disclose information over a network...

Remote Desktop Client Remote Code Execution Vulnerability

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

Windows Remote Desktop Client Denial of Service Vulnerability

Integer overflow or wraparound in Remote Desktop Client allows an unauthorized attacker to deny service over a network...

Windows Remote Desktop Client Information Disclosure Vulnerability

Out-of-bounds read in Remote Desktop Client allows an authorized attacker to disclose information over a network...

Remote Desktop Client Remote Code Execution Vulnerability

Improper control of generation of code 'code injection' in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

Remote Desktop Client Remote Code Execution Vulnerability

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

Remote Desktop Client Remote Code Execution Vulnerability

Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute code over a network...

Windows DHCP Client Denial of Service Vulnerability

Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over an adjacent network...

Windows SMB Client Information Disclosure Vulnerability

Out-of-bounds read in Windows SMB Client allows an authorized attacker to disclose information locally...

Windows DHCP Client Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges over an adjacent network...

Windows SMB Client Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows SMB Client allows an authorized attacker to elevate privileges locally...

Remote Desktop Client Remote Code Execution Vulnerability

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

Remote Desktop Client Remote Code Execution Vulnerability

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

Skype for Business Spoofing Vulnerability

Use of client-side authentication in Skype for Business allows an authorized attacker to perform spoofing over a network...

Windows SMB Client Remote Code Execution Vulnerability

Use after free in Windows SMB Client allows an unauthorized attacker to execute code over a network...

CVE-2026-73309

XenForo before 2.3.13 is vulnerable to an authentication bypass in its OAuth2 token endpoint . An unauthenticated attacker can submit empty strings for the client_secret and code_verifier parameters; because PHP truthy evaluation treats empty strings as falsy, both the client secret check and the...