Important: Red Hat Security Advisory: yelp security update

An update for yelp is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, and Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as havi...

Docker Desktop < 4.41.0 Privilege Escalation

The version of Docker Desktop for Windows is prior to 4.41.0. It is therefore affected by a privilege escalation vulnerability. A vulnerability in the update process of Docker Desktop for Windows versions prior to 4.41.0 could allow a local, low-privileged attacker to escalate privileges to SYSTE...

RHEL 8 : yelp (RHSA-2025:4451)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:4451 advisory. Yelp is the help browser for the GNOME desktop. It is designed to help you browse all the documentation on your system in one central tool, including...

Docker Desktop < 4.41.0 Information Disclosure Vulnerability

The version of Docker Desktop for Linux is prior to 4.41.0. It is therefore affected by an information disclosure vulnerability. The Recording of environment variables, configured for running containers, in Docker Desktop application logs could lead to unintentional disclosure of sensitive...

NetScaler RDP proxy -14.1- How to configure RDP proxy with RDS server

This article explains how to configure an RDP Proxy Gateway with an RDS server. Key Points to Note: -If you are using an RDS server, you will need an RDP server profile where the RDP IP is set as the RDS server IP. -For the RDP Host, enter the FQDN of the Gateway Virtual Server. This is required...

RHEL 9 : yelp (RHSA-2025:4456)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:4456 advisory. Yelp is the help browser for the GNOME desktop. It is designed to help you browse all the documentation on your system in one central tool, including...

Docker Desktop < 4.41.0 Access Control

The version of Docker Desktop for Mac is prior to 4.41.0. It is therefore affected by an access control vulnerability. Registry Access Management RAM is a security feature allowing administrators to restrict access for their developers to only allowed registries. When a MacOS configuration profil...

CVE-2025-21416

Missing authorization in Azure Virtual Desktop allows an authorized attacker to elevate privileges over a network...

CVE-2025-1884 Use-After-Free vulnerability exists in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025

Use-After-Free vulnerability exists in the SLDPRT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025. This vulnerability could allow an attacker to execute arbitrary code while opening a specially crafted SLDPRT file...

Microsoft Edge taskbar icon may not appear when it is launched through Local App Access

When Microsoft Edge is launched in an ICA desktop session through Local App Access LAA, Microsoft Edge icon may not appear in Windows taskbar of the session. In the situation, if end user makes a mouse click on the background Windows desktop in the session, the foreground Microsoft Edge window wi...

MATE Desktop Atril Document Viewer CBT File Parsing Argument Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of MATE Desktop Atril Document Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

MATE Desktop Atril Document Viewer EPUB File Parsing Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of MATE Desktop Atril Document Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

CVE-2025-3911

Recording of environment variables, configured for running containers, in Docker Desktop application logs could lead to unintentional disclosure of sensitive information such as api keys, passwords, etc. A malicious actor with read access to these logs could obtain sensitive credentials informati...

CVE-2025-4095

Registry Access Management RAM is a security feature allowing administrators to restrict access for their developers to only allowed registries. When a MacOS configuration profile is used to enforce organization sign-in, the RAM policies are not being applied, which would allow Docker Desktop use...

Brave Desktop 1.78.94 Security Fixes

Re-encoded images fetched for Brave News. Upgraded Chromium to 136.0.7103.60 — refer to Google Chrome advisories for inherited CVEs...

CVE-2025-3224

A vulnerability in the update process of Docker Desktop for Windows versions prior to 4.41.0 could allow a local, low-privileged attacker to escalate privileges to SYSTEM. During an update, Docker Desktop attempts to delete files and subdirectories under the path C:\ProgramData\Docker\config with...

CVE-2025-21416

Missing authorization in Azure Virtual Desktop allows an authorized attacker to elevate privileges over a network...

CVE-2025-21416 Azure Virtual Desktop Elevation of Privilege Vulnerability

...

CVE-2025-21416 Azure Virtual Desktop Elevation of Privilege Vulnerability

...

CVE-2025-21416

CVE-2025-21416 describes a privilege elevation vulnerability in Microsoft Azure Virtual Desktop caused by missing authorization. The issue enables an authorized attacker, over a network, to elevate privileges within affected environments. Documents consistently reference Azure Virtual Desktop, wi...