CVE-2026-50497: Off-by-one Error

Off-by-one error in Windows Remote Desktop Protocol allows an unauthorized attacker to disclose information over a network...

CVE-2026-48344: Time-of-check Time-of-use (TOCTOU) Race Condition

Creative Cloud Desktop is affected by a Time-of-check Time-of-use TOCTOU Race Condition vulnerability that could result in arbitrary code execution in the context of the current user. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user...

CVE-2026-54990: Heap-based Buffer Overflow

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

CVE-2026-50330: Heap-based Buffer Overflow

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-50504: Buffer Over-read

Buffer over-read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network...

CVE-2026-50692: Heap-based Buffer Overflow

Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally...

CVE-2026-48272: Uncontrolled Search Path Element

Creative Cloud Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction. Scop...

EulerOS 2.0 SP10 : systemd (EulerOS-SA-2026-2673)

According to the versions of the systemd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in systemd. The systemd-machined service contains an Improper Access Control vulnerability due to insufficient validation of the...

PT-2026-58670

Name of the Vulnerable Software and Affected Versions Desktop Window Manager affected versions not specified Description A use-after-free condition exists that allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when an application...

PT-2026-58321

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description A heap-based buffer overflow in the Remote Desktop Client allows an unauthorized attacker to elevate privileges over a network. This issue can be exploited without requiring user...

PT-2026-58659

Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network...

PT-2026-58511

Name of the Vulnerable Software and Affected Versions Desktop Window Manager affected versions not specified Description A heap-based buffer overflow occurs in the Desktop Window Manager, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory...

CVE-2026-58634: Use After Free

Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally...

PT-2026-58648

Name of the Vulnerable Software and Affected Versions Windows RDP affected versions not specified Description The use of an uninitialized resource in Windows Remote Desktop Protocol RDP allows an unauthorized attacker to disclose sensitive information over a network and affect the system...

PT-2026-58236

Name of the Vulnerable Software and Affected Versions Windows 11 affected versions not specified Windows Server 2025 affected versions not specified Description A heap-based buffer overflow in the Remote Desktop Client allows an unauthorized and unauthenticated attacker to execute arbitrary code...

PT-2026-58607

Name of the Vulnerable Software and Affected Versions Windows 10 Windows 11 Windows Server affected versions not specified Description An uninitialized resource flaw in the Windows Remote Desktop Protocol RDP allows an unauthorized and unauthenticated attacker to execute arbitrary code over a...

CVE-2026-58626: Use After Free

Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network...

KB5101650: Windows 11 Version 24H2 / Windows 11 Version 25H2 Security Update (July 2026)

The remote Windows host is missing security update 5101650. It is, therefore, affected by multiple vulnerabilities - Integer overflow or wraparound in Windows RDP allows an unauthorized attacker to execute code over a network. CVE-2026-58594 - Heap-based buffer overflow in Windows FTP Service...

KB5101649: Windows 11 Version 26H1 Security Update (July 2026)

The remote Windows host is missing security update 5101649. It is, therefore, affected by multiple vulnerabilities - Integer overflow or wraparound in Windows RDP allows an unauthorized attacker to execute code over a network. CVE-2026-58594 - Heap-based buffer overflow in Windows FTP Service...

APSB26-77 : Security update available for Adobe Creative Cloud Desktop Application

Adobe has released an update for the Creative Cloud Desktop for Windows. This update includes a fix for critical vulnerabilities that could lead to arbitrary code execution in the context of the current user. Adobe is not aware of any exploits in the wild for any of the issues addressed in these...