StarNet FastX 安全漏洞

StarNet FastX is a remote desktop software from StarNet USA. A security vulnerability exists in StarNet FastX 4.1.51 and prior versions that stems from a path traversal flaw that could allow an unauthenticated attacker to read arbitrary files...

Microsoft DWM Core Library 安全漏洞

Microsoft DWM Core Library is a core library for Microsoft windows from Microsoft Corporation USA. A security vulnerability exists in Microsoft DWM Core Library, which can be exploited by an attacker to gain elevated privileges...

Microsoft Windows Remote Desktop Services 资源管理错误漏洞

Microsoft Windows Remote Desktop Services is a collection of features from Microsoft Corporation USA that allow users to remotely access graphical desktops and Windows applications. A resource management error vulnerability exists in Microsoft Windows Remote Desktop Services that stems from an...

Microsoft Remote Desktop Protocol Client 资源管理错误漏洞

Microsoft Remote Desktop Protocol Client is a client software application for connecting to remote desktops from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Remote Desktop Protocol Client, which can be exploited by an attacker to remotely execute code...

PT-2025-42133

Name of the Vulnerable Software and Affected Versions Windows versions affected versions not specified Description A heap-based buffer overflow exists in the Windows DWM Core Library. This issue allows a locally authorized attacker to elevate privileges. Recommendations At the moment, there is no...

PT-2025-41962

Name of the Vulnerable Software and Affected Versions FortiOS versions 7.6.2 and below, 7.4.7 and below, 7.2.10 and below, 7.0 all versions, 6.4 all versions FortiPAM versions 1.5.0, 1.4.2 and below, 1.3 all versions, 1.2 all versions, 1.1 all versions, 1.0 all versions FortiProxy versions 7.6.2...

Microsoft Desktop Windows Manager 安全漏洞

Microsoft Desktop Windows Manager is a desktop window manager from Microsoft Corporation USA. A security vulnerability exists in Microsoft Desktop Windows Manager that originates from an attacker's ability to elevate privileges by exploiting the vulnerability...

PT-2025-42031

Name of the Vulnerable Software and Affected Versions Windows versions affected versions not specified Description An out-of-bounds read issue exists in the Desktop Window Manager DWM of Windows operating systems. Exploitation of this issue can allow an attacker to elevate privileges locally. The...

PT-2025-42132

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A heap-based buffer overflow exists in the Windows DWM Core Library. This issue could allow a locally authorized attacker to elevate privileges. Recommendations At the moment, there is no...

PT-2025-42059

Name of the Vulnerable Software and Affected Versions Windows versions affected versions not specified Description A heap-based buffer overflow exists in Windows Desktop Window Manager DWM. A local attacker can exploit this to gain elevated privileges. Recommendations At the moment, there is no...

PT-2025-42094

Name of the Vulnerable Software and Affected Versions Windows Remote Desktop Services affected versions not specified Description A use after free condition exists in Windows Remote Desktop Services. This allows an authorized attacker to elevate privileges locally. Recommendations At the moment,...

PT-2025-42025

Name of the Vulnerable Software and Affected Versions Windows Remote Desktop Protocol affected versions not specified Description An improper authentication issue exists in Windows Remote Desktop Protocol. This allows an authorized attacker to bypass a security feature locally. Recommendations At...

Microsoft Windows Remote Desktop Services 授权问题漏洞

Microsoft Windows Remote Desktop Services is a collection of features from Microsoft Corporation USA that allow users to remotely access graphical desktops and Windows applications. An authorization issue vulnerability exists in Microsoft Windows Remote Desktop Services that stems from an...

Microsoft DWM Core Library 安全漏洞

Microsoft DWM Core Library is a core library for Microsoft windows from Microsoft Corporation USA. A security vulnerability exists in Microsoft DWM Core Library, which can be exploited by an attacker to gain elevated privileges...

PT-2025-42073

Name of the Vulnerable Software and Affected Versions Windows Remote Desktop affected versions not specified Description A use after free condition exists in Windows Remote Desktop. This allows an unauthorized attacker to execute code locally. Recommendations At the moment, there is no informatio...

Fortinet多款产品 安全漏洞

Fortinet FortiOS and others are products of Fortinet, Inc.Fortinet FortiOS is a dedicated security operating system on the FortiGate network security platform.Fortinet FortiProxy is a secure network proxy that protects employees by combining a variety of detection technologies such as Web...

Microsoft Remote Desktop Client 资源管理错误漏洞

Microsoft Remote Desktop Client is a remote desktop client from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Remote Desktop Client, which originates from a vulnerability that can be exploited by an attacker to remotely execute code...

PT-2025-42056

Name of the Vulnerable Software and Affected Versions Microsoft Windows Remote Desktop Client affected versions not specified Description A use-after-free condition exists in the Remote Desktop Client RDC component of Microsoft Windows. This issue allows a remote attacker to execute arbitrary cod...

Stable Channel Update for Desktop

The Stable channel has been updated to 141.0.7390.107/.108 for Windows and Mac and 141.0.7390.107 for Linux, which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log. Security Fixes and Rewards Note: Access to bug details and links may be kept...

EUVD-2025-34084

Mattermost Desktop App versions = 5.13.0 fail to validate URLs external to the configured Mattermost servers, allowing an attacker on a server the user has configured to crash the user's application by sending the user a malformed URL...