Lucene search
+L

54782 matches found

RedhatCVE
RedhatCVE
added 4 days ago10 views

CVE-2026-18570

A flaw was found in the full-scope-disabled client-policy executor within the keycloak-services component. This component is responsible for enforcing security policies during client registration and configuration in Red Hat Build of Keycloak. The issue occurs because the executor only validates...

5.4CVSS5.2AI score0.00155EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 4 days ago11 views

Linux Distros Unpatched Vulnerability : CVE-2026-67300

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP before 3.29.0 contains client-side heap use-after-free vulnerabilities in the async update message proxy for RAIL WINDOWSTATEORDER and...

8.7CVSS5.7AI score0.00329EPSS
SaveExploits0References4
OPENSUSE Linux
OPENSUSE Linux
added 4 days ago9 views

Security update for keybase-client (low)

openSUSE Security Update: Security update for keybase-client Announcement ID: openSUSE-SU-2026:0272-1 Rating: low References: Cross-References: CVE-2026-39824 Affected Products: openSUSE Backports SLE-15-SP7 An update that fixes one vulnerability is now available. Description: This update for...

3.3CVSS6.5AI score0.00114EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 4 days ago8 views

Linux Distros Unpatched Vulnerability : CVE-2026-67294

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP before 3.29.0 improperly validates the Extended Key Usage EKU purpose of the peer certificate during client-side server TLS authentication. In...

9.3CVSS5.6AI score0.00271EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 4 days ago9 views

Linux Distros Unpatched Vulnerability : CVE-2026-67299

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP before 3.29.0 contains a client-side heap use-after-free in the async update message proxy for WINDOWICONORDER when AsyncUpdate is enabled e.g. xfreerdp...

8.7CVSS7.2AI score0.00329EPSS
SaveExploits0References4
NVD
NVD
added 5 days ago7 views

CVE-2026-67305

FreeRDP Windows client before 3.29.0 contains a heap buffer overflow vulnerability in the clipboard virtual channel when processing CLIPRDRFILECONTENTSRESPONSE PDUs without validating the server-provided size against the destination buffer. A malicious RDP server can send a response with a data...

9.4CVSS0.00489EPSS
SaveExploits0References2
NVD
NVD
added 5 days ago7 views

CVE-2026-67300

FreeRDP before 3.29.0 contains client-side heap use-after-free vulnerabilities in the async update message proxy for RAIL WINDOWSTATEORDER and NOTIFYICONSTATEORDER when AsyncUpdate is enabled. When a malicious or compromised RDP server sends crafted update orders, the message proxy shallow-copies...

8.7CVSS0.00329EPSS
SaveExploits0References3
NVD
NVD
added 5 days ago7 views

CVE-2026-67301

FreeRDP before 3.29.0 contains out-of-bounds read vulnerabilities in the async update message proxy for the PolygonSC and PolygonCB primary drawing orders. When AsyncUpdate is enabled e.g., xfreerdp /async-update, updatemessagePolygonSC and updatemessagePolygonCB allocate a fresh points array but...

8.7CVSS0.00339EPSS
SaveExploits0References3
NVD
NVD
added 5 days ago6 views

CVE-2026-67303

FreeRDP before 3.29.0 contains a reachable assertion WINPRASSERTOutputBufferLength == BytesReturned in serialprocessirpdevicecontrol in channels/serial/client/serialmain.c. When serial device redirection is enabled and a server-controlled IRPMJDEVICECONTROL request specifies an unsupported IOCTL...

5.3CVSS0.00248EPSS
SaveExploits0References4
NVD
NVD
added 5 days ago7 views

CVE-2026-67294

FreeRDP before 3.29.0 improperly validates the Extended Key Usage EKU purpose of the peer certificate during client-side server TLS authentication. In x509utilsverify, when server-purpose X509PURPOSESSLSERVER verification fails, the code falls back to client-purpose and any-purpose verification, ...

9.3CVSS0.00271EPSS
SaveExploits0References3
NVD
NVD
added 5 days ago6 views

CVE-2026-67288

FreeRDP before 3.29.0 contains a null pointer dereference vulnerability in smartcard cache request decoders that accept NULL NDR pointers for LookupName in SCARDIOCTLREADCACHEA and SCARDIOCTLWRITECACHEA operations. When smartcard emulation is enabled, attackers can send crafted smartcard cache...

8.7CVSS0.0035EPSS
SaveExploits0References5
OSV
OSV
added 5 days ago2 views

UBUNTU-CVE-2026-67288

FreeRDP before 3.29.0 contains a null pointer dereference vulnerability in smartcard cache request decoders that accept NULL NDR pointers for LookupName in SCARDIOCTLREADCACHEA and SCARDIOCTLWRITECACHEA operations. When smartcard emulation is enabled, attackers can send crafted smartcard cache...

8.7CVSS5.5AI score0.0035EPSS
SaveExploits0References7
OSV
OSV
added 5 days ago2 views

UBUNTU-CVE-2026-67291

FreeRDP before 3.29.0 affected versions = 3.28.0 contains a heap out-of-bounds read in updateprocessglyphfragments/glyphcachefragmentput in libfreerdp/cache/glyph.c. When handling a GLYPHFRAGMENTADD update, the code reads a one-byte server-controlled declared fragment size but does not verify it...

8.7CVSS5.7AI score0.00339EPSS
SaveExploits0References5
OSV
OSV
added 5 days ago2 views

UBUNTU-CVE-2026-67300

FreeRDP before 3.29.0 contains client-side heap use-after-free vulnerabilities in the async update message proxy for RAIL WINDOWSTATEORDER and NOTIFYICONSTATEORDER when AsyncUpdate is enabled. When a malicious or compromised RDP server sends crafted update orders, the message proxy shallow-copies...

8.7CVSS5.6AI score0.00329EPSS
SaveExploits0References5
OSV
OSV
added 5 days ago3 views

UBUNTU-CVE-2026-67294

FreeRDP before 3.29.0 improperly validates the Extended Key Usage EKU purpose of the peer certificate during client-side server TLS authentication. In x509utilsverify, when server-purpose X509PURPOSESSLSERVER verification fails, the code falls back to client-purpose and any-purpose verification, ...

9.3CVSS5.6AI score0.00271EPSS
SaveExploits0References5
OSV
OSV
added 5 days ago2 views

UBUNTU-CVE-2026-67301

FreeRDP before 3.29.0 contains out-of-bounds read vulnerabilities in the async update message proxy for the PolygonSC and PolygonCB primary drawing orders. When AsyncUpdate is enabled e.g., xfreerdp /async-update, updatemessagePolygonSC and updatemessagePolygonCB allocate a fresh points array but...

8.7CVSS5.5AI score0.00339EPSS
SaveExploits0References5
EUVD
EUVD
added 5 days ago8 views

EUVD-2026-51819

FreeRDP before 3.29.0 contains a null pointer dereference vulnerability in smartcard cache request decoders that accept NULL NDR pointers for LookupName in SCARDIOCTLREADCACHEA and SCARDIOCTLWRITECACHEA operations. When smartcard emulation is enabled, attackers can send crafted smartcard cache...

8.7CVSS5.5AI score0.0035EPSS
SaveExploits0References4
EUVD
EUVD
added 5 days ago7 views

EUVD-2026-51834

FreeRDP before 3.29.0 affected versions = 3.28.0 contains a divide-by-zero vulnerability in the rdpecam camera redirection client. ecamdevprocessstartstreamsrequest parses a server-controlled CAMMEDIATYPEDESCRIPTION from a StartStreamsRequest PDU but validates only Format and Flags, not...

5.3CVSS5.5AI score0.00316EPSS
SaveExploits0References4
CVE
CVE
added 5 days ago19 views

CVE-2026-67299

FreeRDP before 3.29.0 is affected by a client-side heap use-after-free in the async update path when WINDOW_ICON_ORDER is processed. In update_message_WindowIcon(), a shallow CopyMemory overwrites a newly allocated lParam->iconInfo with a parser-owned windowIcon->iconInfo pointer; after the...

8.7CVSS5.6AI score0.00329EPSS
SaveExploits0References3
CVE
CVE
added 5 days ago29 views

CVE-2026-67300

CVE-2026-67300 – FreeRDP before 3.29.0 : A client-side heap use-after-free in the async update message proxy affects RAIL WINDOW_STATE_ORDER and NOTIFY_ICON_STATE_ORDER when AsyncUpdate is enabled. If a malicious RDP server sends crafted update orders, the proxy shallow-copies structures containi...

8.7CVSS5.6AI score0.00329EPSS
SaveExploits0References3
Rows per page
Query Builder