70479 matches found
CVE-2026-80077: Heap-based Buffer Overflow
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
CVE-2026-69544: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows SMB Client allows an authorized attacker to elevate privileges locally...
CVE-2026-68828: Heap-based Buffer Overflow
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
PT-2026-87178
A unverified ownership vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.7, FortiClientWindows 7.2 all versions may allow attacker to improper access control via...
CVE-2026-77896: Integer Overflow or Wraparound
Integer overflow or wraparound in Remote Desktop Client allows an unauthorized attacker to deny service over a network...
CVE-2026-73014: Missing Authorization
Missing authorization in Data Sharing Service Client allows an authorized attacker to elevate privileges locally...
PT-2026-88004
Name of the Vulnerable Software and Affected Versions Remote Desktop Client affected versions not specified Description Improper control of code generation leads to a code injection flaw, allowing an unauthorized attacker to execute arbitrary code over a network. Recommendations At the moment,...
CVE-2026-69317: Out-of-bounds Read
Out-of-bounds read in Remote Desktop Client allows an authorized attacker to disclose information over a network...
CVE-2026-78463: Improper Control of Generation of Code
Improper control of generation of code 'code injection' in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
VulnCheck KEV: CVE-2026-84869
ConnectWise ScreenConnect contains both an improper privilege management and missing authorization vulnerability that may allow an attacker to transfer and execute files through an active remote session without authorization or host confirmation...
CVE-2026-69572: Out-of-bounds Read
Out-of-bounds read in Windows SMB Client allows an authorized attacker to disclose information over a network...
PT-2026-87362
Name of the Vulnerable Software and Affected Versions Remote Desktop Client affected versions not specified Description An out-of-bounds read exists that allows an authorized attacker to disclose sensitive information over a network, potentially affecting the system. Recommendations At the moment...
PT-2026-87197
Improper verification of cryptographic signature in Windows RDP Client allows an unauthorized attacker to disclose information over a network...
PT-2026-87715
Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over an adjacent network...
CVE-2026-78627: Insertion of Sensitive Information into Log File
The Okta Hyperdrive Integration installer does not mask the OAuth client secret when passed as an MSI property. The credential is recorded in plaintext in the installer log, the Application Event Log, and the process command line, all of which are readable by an authenticated local user on the...
PT-2026-87973
Name of the Vulnerable Software and Affected Versions Remote Desktop Client affected versions not specified Description An integer overflow or wraparound occurs in the Remote Desktop Client, which allows an unauthorized attacker to cause a denial of service over a network. Recommendations At the...
PT-2026-88447
In Eclipse Ditto's Node.js JavaScript client, all released versions of @eclipse-ditto/ditto-javascript-client-node from 2.0.0 to 3.9.0 and of its predecessor package @eclipse-ditto/ditto-javascript-client-node 1.0 from 1.0.0 to 2.1.0, the WebSocket transport hard-codes rejectUnauthorized: false...
PT-2026-87130
Snipe-IT before 8.7.0 streams the SQL entry from an uploaded backup archive directly into the MySQL/MariaDB command-line client mysql without the --binary-mode flag, so the client interprets lines beginning with backslash commands such as ! as local shell commands. An authenticated...
PT-2026-86959
SAP NetWeaver Business Client does not perform sufficient validation when processing certain locally stored data during application startup. An attacker with low privileges on the local system could replace this data with specially crafted content. When the application is next launched, the craft...