CVE-2026-0776

CVE-2026-0776 - Discord 客户端不受控制的搜索路径元素 概述 本仓库记录了 CVE-2026-0776，这是一个影响 Windows 上 Discord 桌面客户端的本地代码执行问题。 该漏洞与基于 Node.js 的组件中不安全的模块解析行为有关，在特定条件下可能允许从意外的文件系统位置加载 JavaScript 代码。 详情 CWE-427：不受控制的搜索路径元素 CVSS：7.3（高危） 影响：本地代码执行 在某些情况下，Discord 可能会从不受信任的位置加载 JavaScript 模块。如果攻击者能够将特制模块放置在搜索路径中，则任意 JavaScrip...

Ubisoft-Uplay-Desktop-Client-63.0.5699.0

Ubisoft-Uplay-Desktop-Client-63.0.5699.0...

CVE-2020-8254

CVE-2020-8254：Pulse Secure VPN Windows 客户端中的 Zip Slip 漏洞 Pulse Secure Desktop Client 9.1R9 中存在一个漏洞，如果能够说服用户连接到恶意服务器，则可能导致远程代码执行（RCE）。 厂商披露： 厂商关于此漏洞的披露和修复信息可在此处找到。 要求： 此漏洞需要： 用户交互（受害者需要在被要求下载“Host Checker”软件时点击“是”或“始终”） 概念验证： 更多详情及利用过程可参见此PDF。...

CVE-2026-83998

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

CVE-2026-80077

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

CVE-2026-80074

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

CVE-2026-78463

Improper control of generation of code 'code injection' in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

CVE-2026-77896

Integer overflow or wraparound in Remote Desktop Client allows an unauthorized attacker to deny service over a network...

CVE-2026-69485

Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute code over a network...

CVE-2026-69358

Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute code over a network...

CVE-2026-69317

Out-of-bounds read in Remote Desktop Client allows an authorized attacker to disclose information over a network...

CVE-2026-68828

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

EUVD-2026-73470

Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute code over a network...

CVE-2026-69358

Microsoft Remote Desktop Client is affected by a use of uninitialized resource flaw that allows an authorized attacker to achieve remote code execution over a network. The vulnerability requires user interaction and carries a CVSS 3.1 score of 7.1 (HIGH) with high impact on confidentiality, integ...

CVE-2026-69317

Windows Remote Desktop Client is affected by an out-of-bounds read vulnerability that allows an authorized attacker to disclose information over a network. The flaw is classified as an information disclosure with a CVSS 3.1 score of 5.7 (Medium) , requiring low privileges and user interaction. CI...

EUVD-2026-73451

Out-of-bounds read in Remote Desktop Client allows an authorized attacker to disclose information over a network...

EUVD-2026-73397

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

CVE-2026-68828

CVE-2026-68828 is a heap-based buffer overflow in the Microsoft Remote Desktop Client that allows an unauthorized attacker to execute arbitrary code over a network. The vulnerability is rated CVSS 3.1: 8.8 (HIGH) with the vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating network-based exploi...

EUVD-2026-73361

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

CVE-2026-83998

A heap-based buffer overflow in Microsoft Remote Desktop Client allows an unauthorized attacker to achieve remote code execution over a network, requiring user interaction but no prior privileges (CVSS 8.8 HIGH ). The CNA is Microsoft ([email protected]), with the advisory published via MSRC ....