22498 matches found
ROS-20260615-73-0012
The vulnerability of the planardecompressplanerle function in the FreeRDP RDP client is related to data writing beyond the specified buffer. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...
PT-2026-49238
Name of the Vulnerable Software and Affected Versions Mattermost Desktop App versions prior to 6.1 Mattermost Desktop App version 5.5.13.0 Description The application fails to restrict the allow list of domains for NTLM credential forwarding. This allows a user on a server where the image proxy i...
Linux Distros Unpatched Vulnerability : CVE-2026-52720
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap buffer overflow vulnerability was found in GStreamer's librfb RFB/VNC client. The rectangle bounds check incorrectly validates area rather than individua...
ROS-20260615-73-0020
The vulnerability of the freerdpimagecopyfromicondata function libfreerdp/codec/color.c in the RDP client FreeRDP arises due to an operation being executed outside the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to cause service failure...
ROS-20260615-73-0015
The vulnerability of the gdiSurfaceCommandClearCodec function in the RDP client FreeRDP is caused by a buffer overflow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
ROS-20260615-73-0031
The vulnerability of the updatereadcachebitmaporder function in the RDP client FreeRDP is related to integer overflow. Exploiting this vulnerability could allow a malicious actor to cause service failure...
ROS-20260615-73-0007
The vulnerability of the StreamEnsureCapacity function in the RDP client FreeRDP is caused by a numerical overflow condition. Exploiting this vulnerability could allow an attacker, operating remotely, to cause service failures...
DWM Core Library Privilege Escalation
The vulnerability of the DWM Core Library in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
Remote Desktop Client Code Execution
The vulnerability of the Remote Desktop Client for Windows operating systems relates to the use of memory after it is released. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
DWM Core Library Privilege Escalation
The vulnerability of the DWM Core Library in Windows operating systems relates to the ability to utilize memory after it is freed. Exploiting this vulnerability can allow an attacker to enhance their privileges...
DWM Core Library Privilege Escalation
The vulnerability of the DWM Core Library in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
Remote Desktop Client Code Execution
The vulnerability of the Remote Desktop Client for Windows operating systems in relation to client machines is related to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
DWM Core Library Disclosure
The vulnerability of the DWM Core Library in Windows operating systems relates to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...
Windows RDP Information Disclosure
The vulnerability of the Remote Desktop Protocol RDP implementation in Windows operating systems is related to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information...
ROS-20260615-73-0041
The vulnerability of the yuvensurebuffer function in the RDP client FreeRDP is related to incorrect calculations of the size of the buffer allocated. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending specially crafted NAL packets...
Zhongke Fangde Software Co., Ltd.'s Fangde Desktop Operating System has a local privilege escalation vulnerability (CNVD-C-2026-281778).
Fangde Desktop Operating System is a domestic operating system designed for compatibility with domestic CPUs such as Haiguang, Zhaoxin, Feiteng, Loongson, Shenwei, and Kunpeng. It supports mainstream architectures like x86, ARM, and MIPS. There is a local privilege escalation vulnerability in...
openSUSE 16 Security Update : java-21-openj9 (openSUSE-SU-2026:20947-1)
The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20947-1 advisory. Changes in java-21-openj9: - Make post scripts less noisy bsc1267355 - Use libalternatives instead of update-alternatives for distributions wher...
CVE-2026-42890
Actual is an open-source personal finance application. In the macOS desktop application version 25.x built on Electron 39.2.7, the ELECTRONRUNASNODE fuse is not disabled, allowing an attacker who can place a file on disk or control command-line arguments to invoke the signed Actual.app binary wit...
Security Bulletin: Arbitrary File Write and Remote Code Execution Vulnerability in Langflow v2 API
Summary IBM Langflow Desktop contains a critical vulnerability in its v2 API file handling mechanism where the POST /api/v2/files/ endpoint improperly processes multipart upload filenames without sanitization, allowing path traversal and arbitrary file write outside intended directories; this fla...
Security Bulletin: Unauthenticated Insecure Direct Object Reference (IDOR) Vulnerability in Langflow Desktop Image Download Endpoint
Summary IBM Langflow Desktop contains a vulnerability in its image retrieval functionality where the GET /api/v1/files/images/flowid/filename endpoint fails to enforce authentication and ownership validation, allowing any unauthenticated user to access image files by supplying a valid flow...