CVE-2024-20766

Summary: CVE-2024-20766 affects Adobe InDesign Desktop (versions 18.5.1, 19.2 and earlier) with an out-of-bounds read that can disclose memory and bypass certain mitigations (ASLR). Exploitation requires user interaction (victim opens a malicious file). References consistently describe this as an...

CVE-2024-20770 Adobe Photoshop 2024 TIF File parsing Out-Of-Bound Read

Photoshop Desktop versions 24.7.2, 25.3.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in th...

CVE-2024-20770

CVE-2024-20770 affects Adobe Photoshop Desktop up to versions 24.7.2 and 25.3.1 (and earlier). The issue is an out-of-bounds read that could disclose sensitive memory and potentially bypass ASLR. Exploitation requires user interaction (victim must open a malicious file). Several connected sources...

CVE-2024-26362

CVE-2024-26362 applies to Enpass Password Manager Desktop Client 6.9.2 for Windows and Linux. The connected sources confirm an HTML injection vulnerability triggered by creation of a crafted note, allowing an attacker to run arbitrary HTML code. The CVSS3.1 base metrics in the initial document in...

Stable Channel Update for Desktop

The Stable channel has been updated to 123.0.6312.122/.123 for Windows 123.0.6312.122/.123/.124 for Mac and 123.0.6312.122 to Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log Security Fixes and Rewards Note: Access to bug details a...

CVE-2024-3545

Improper permission handling in the vault offline cache feature in Devolutions Remote Desktop Manager 2024.1.20 and earlier on windows and Devolutions Server 2024.1.8 and earlier allows an attacker to access sensitive informations contained in the offline cache file by gaining access to a compute...

CVE-2024-3545

CVE-2024-3545 involves Devolutions Remote Desktop Manager (Windows) version 2024.1.20 and earlier, and Devolutions Server version 2024.1.8 and earlier. The vulnerability stems from improper permission handling in the vault offline cache feature, which could allow an attacker with access to the in...

CVE-2024-3545

Improper permission handling in the vault offline cache feature in Devolutions Remote Desktop Manager 2024.1.20 and earlier on windows and Devolutions Server 2024.1.8 and earlier allows an attacker to access sensitive informations contained in the offline cache file by gaining access to a compute...

CVE-2024-3545

Improper permission handling in the vault offline cache feature in Devolutions Remote Desktop Manager 2024.1.20 and earlier on windows and Devolutions Server 2024.1.8 and earlier allows an attacker to access sensitive informations contained in the offline cache file by gaining access to a compute...

CVE-2024-27242

Cross site scripting in Zoom Desktop Client for Linux before version 5.17.10 may allow an authenticated user to conduct a denial of service via network access...

CVE-2024-24694

Improper privilege management in the installer for Zoom Desktop Client for Windows before version 5.17.10 may allow an authenticated user to conduct an escalation of privilege via local access...

CVE-2024-26172

Windows DWM Core Library Information Disclosure Vulnerability...

CVE-2024-27247

CVE-2024-27247 describes an issue in the Zoom Desktop Client for macOS installer prior to version 5.17.10 where improper privilege management could allow a privileged local user to escalate privileges. Affected software: Zoom Desktop Client for macOS (pre-5.17.10). Root cause: installer privilege...

CVE-2024-24694 Zoom Desktop Client for Windows - Improper Privilege Management

Improper privilege management in the installer for Zoom Desktop Client for Windows before version 5.17.10 may allow an authenticated user to conduct an escalation of privilege via local access...

Raindex Launches On Flare To Power Decentralized CEX-Style Trading

By Owais Sultan Flare, the blockchain for data, has announced the launch of the Raindex desktop app: a new intents-like DEX… This is a post from HackRead.com Read the original post: Raindex Launches On Flare To Power Decentralized CEX-Style Trading...

April 9, 2024—KB5036909 (OS Build 20348.2402)

None None...

April 9, 2024—KB5036899 (OS Build 14393.6897) - EXPIRED

None None...

April 9, 2024—KB5036896 (OS Build 17763.5696) - EXPIRED

None None...

PT-2024-21773 · Zoom · Zoom Desktop Client For Macos

Name of the Vulnerable Software and Affected Versions: Zoom Desktop Client for macOS versions prior to 5.17.10 Description: The issue is related to improper privilege management in the installer, which may allow a privileged user to conduct an escalation of privilege via local access...

Zoom Client 安全漏洞

Zoom Desktop Client for Linux is a client application designed for virtualized desktop environments such as Windows 365 Cloud PC. A cross-site scripting vulnerability exists in Zoom Desktop Client for Linux, which stems from the application's lack of effective filtering and escaping of...