PT-2026-58671

Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally...

PT-2026-58781

Name of the Vulnerable Software and Affected Versions Creative Cloud Desktop affected versions not specified Description An Uncontrolled Search Path Element issue exists in the AdobeUpdateService. This flaw could allow an attacker to achieve local privilege escalation and execute arbitrary code...

PT-2026-58517

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description An out-of-bounds read in the Remote Desktop Protocol RDP allows an unauthorized attacker to disclose information over a network. This issue can be triggered when a user interacts with a...

PT-2026-58665

Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network...

PT-2026-58449

Name of the Vulnerable Software and Affected Versions Remote Desktop Client affected versions not specified Description A use after free issue exists in the Remote Desktop Client, which allows an unauthorized attacker to execute arbitrary code over a network and affect the system. Use after free ...

CVE-2026-50369: Use After Free

Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network...

PT-2026-58351

Name of the Vulnerable Software and Affected Versions Windows Remote Desktop Services affected versions not specified Description A use after free condition in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network. Use after free is a memory corruption...

PT-2026-58790

Name of the Vulnerable Software and Affected Versions Creative Cloud Desktop affected versions not specified Description A Time-of-check Time-of-use TOCTOU Race Condition exists, which is a software bug where a program checks the state of a resource and then acts on that resource, but the state...

PT-2026-58661

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description An integer overflow or wraparound in the Remote Desktop Protocol RDP allows an unauthorized attacker to execute arbitrary code over a network. Recommendations At the moment, there i...

APSB26-77 : Security update available for Adobe Creative Cloud Desktop Application

Adobe has released an update for the Creative Cloud Desktop for Windows. This update includes a fix for critical vulnerabilities that could lead to arbitrary code execution in the context of the current user. Adobe is not aware of any exploits in the wild for any of the issues addressed in these...

KB5099540: Windows Server 2022 / Azure Stack HCI 22H2 Security Update (July 2026)

The remote Windows host is missing security update 5099540. It is, therefore, affected by multiple vulnerabilities - Integer overflow or wraparound in Windows RDP allows an unauthorized attacker to execute code over a network. CVE-2026-58594 - Heap-based buffer overflow in Windows FTP Service...

KB5099445: Windows Server 2012 Security Update (July 2026)

The remote Windows host is missing security update 5099445. It is, therefore, affected by multiple vulnerabilities - Integer overflow or wraparound in Windows RDP allows an unauthorized attacker to execute code over a network. CVE-2026-58594 - Heap-based buffer overflow in Windows Message Queuing...

KB5099539: Windows 10 version 21H2 / Windows 10 Version 22H2 Security Update (July 2026)

The remote Windows host is missing security update 5099539. It is, therefore, affected by multiple vulnerabilities - Integer overflow or wraparound in Windows RDP allows an unauthorized attacker to execute code over a network. CVE-2026-58594 - Heap-based buffer overflow in Windows FTP Service...

KB5099444: Windows Server 2012 R2 Security Update (July 2026)

The remote Windows host is missing security update 5099444. It is, therefore, affected by multiple vulnerabilities - Integer overflow or wraparound in Windows RDP allows an unauthorized attacker to execute code over a network. CVE-2026-58594 - Heap-based buffer overflow in Windows Message Queuing...

The vulnerability of the contains_dotdot() function in the RDP client FreeRDP allows a hacker to read and write arbitrary files.

The vulnerability of the contains.dot function in the RDP client FreeRDP is related to a single-byte offset error. Exploiting this vulnerability could allow an attacker to read and write arbitrary files remotely...

KB5099535: Windows 10 Version 1607 / Windows Server 2016 Security Update (July 2026)

The remote Windows host is missing security update 5099535. It is, therefore, affected by multiple vulnerabilities - Integer overflow or wraparound in Windows RDP allows an unauthorized attacker to execute code over a network. CVE-2026-58594 - Heap-based buffer overflow in Windows FTP Service...

KB5101649: Windows 11 Version 26H1 Security Update (July 2026)

The remote Windows host is missing security update 5101649. It is, therefore, affected by multiple vulnerabilities - Integer overflow or wraparound in Windows RDP allows an unauthorized attacker to execute code over a network. CVE-2026-58594 - Heap-based buffer overflow in Windows FTP Service...

KB5099536: Windows Server 2025 Security Update (July 2026)

The remote Windows host is missing security update 5099536. It is, therefore, affected by multiple vulnerabilities - Integer overflow or wraparound in Windows RDP allows an unauthorized attacker to execute code over a network. CVE-2026-58594 - Heap-based buffer overflow in Windows FTP Service...

KB5099538: Windows 10 version 1809 / Windows Server 2019 Security Update (July 2026)

The remote Windows host is missing security update 5099538. It is, therefore, affected by multiple vulnerabilities - Integer overflow or wraparound in Windows RDP allows an unauthorized attacker to execute code over a network. CVE-2026-58594 - Heap-based buffer overflow in Windows FTP Service...

KB5101650: Windows 11 Version 24H2 / Windows 11 Version 25H2 Security Update (July 2026)

The remote Windows host is missing security update 5101650. It is, therefore, affected by multiple vulnerabilities - Integer overflow or wraparound in Windows RDP allows an unauthorized attacker to execute code over a network. CVE-2026-58594 - Heap-based buffer overflow in Windows FTP Service...