CVE-2026-68828: Heap-based Buffer Overflow

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

PT-2026-87178

A unverified ownership vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.7, FortiClientWindows 7.2 all versions may allow attacker to improper access control via...

CVE-2026-77896: Integer Overflow or Wraparound

Integer overflow or wraparound in Remote Desktop Client allows an unauthorized attacker to deny service over a network...

CVE-2026-73014: Missing Authorization

Missing authorization in Data Sharing Service Client allows an authorized attacker to elevate privileges locally...

PT-2026-88004

Name of the Vulnerable Software and Affected Versions Remote Desktop Client affected versions not specified Description Improper control of code generation leads to a code injection flaw, allowing an unauthorized attacker to execute arbitrary code over a network. Recommendations At the moment,...

CVE-2026-69317: Out-of-bounds Read

Out-of-bounds read in Remote Desktop Client allows an authorized attacker to disclose information over a network...

CVE-2026-78463: Improper Control of Generation of Code

Improper control of generation of code 'code injection' in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

VulnCheck KEV: CVE-2026-84869

ConnectWise ScreenConnect contains both an improper privilege management and missing authorization vulnerability that may allow an attacker to transfer and execute files through an active remote session without authorization or host confirmation...

freerdp-proxy RDP Unauthorized Access

The vulnerability of the freerdp-proxy RDP client component, FreeRDP, is related to the disclosure of information. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

ALSA-2026:64808 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: can: bcm: add locking for bcmop runtime updates CVE-2025-38004 kernel: iouring/poll: fix signed comparison in iopollgetownership CVE-2026-52933 kernel: netfilter: nat: use kfreercu to...

Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: crypto: pcrypt - Fix handling of MAYBACKLOG requests CVE-2026-43493 kernel: netfilter: conntrack: remove sprintf usage...

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: can: bcm: add locking for bcmop runtime updates CVE-2025-38004 kernel: iouring/poll: fix signed comparison in iopollgetownership CVE-2026-52933 kernel: netfilter: nat: use kfreercu to...

CVE-2026-69572: Out-of-bounds Read

Out-of-bounds read in Windows SMB Client allows an authorized attacker to disclose information over a network...

PT-2026-87362

Name of the Vulnerable Software and Affected Versions Remote Desktop Client affected versions not specified Description An out-of-bounds read exists that allows an authorized attacker to disclose sensitive information over a network, potentially affecting the system. Recommendations At the moment...

PT-2026-87197

Improper verification of cryptographic signature in Windows RDP Client allows an unauthorized attacker to disclose information over a network...

PT-2026-87715

Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over an adjacent network...

PT-2026-87555

Name of the Vulnerable Software and Affected Versions Windows SMB Client affected versions not specified Description A heap-based buffer overflow occurs in the Windows SMB Client, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory corruptio...

CVE-2026-78627: Insertion of Sensitive Information into Log File

The Okta Hyperdrive Integration installer does not mask the OAuth client secret when passed as an MSI property. The credential is recorded in plaintext in the installer log, the Application Event Log, and the process command line, all of which are readable by an authenticated local user on the...

PT-2026-87973

Name of the Vulnerable Software and Affected Versions Remote Desktop Client affected versions not specified Description An integer overflow or wraparound occurs in the Remote Desktop Client, which allows an unauthorized attacker to cause a denial of service over a network. Recommendations At the...

PT-2026-88447

In Eclipse Ditto's Node.js JavaScript client, all released versions of @eclipse-ditto/ditto-javascript-client-node from 2.0.0 to 3.9.0 and of its predecessor package @eclipse-ditto/ditto-javascript-client-node 1.0 from 1.0.0 to 2.1.0, the WebSocket transport hard-codes rejectUnauthorized: false...