22027 matches found
RHSA-2026:54512 Red Hat Security Advisory: gnome-remote-desktop security update
Bulletin has no description...
RockyLinux 10 : gnome-remote-desktop (RLSA-2026:54512)
The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:54512 advisory. gnome-remote-desktop: gnome-remote-desktop system-mode RDP server missing connection throttling allows unauthenticated denial of service CVE-2026-18358 Tenable...
AlmaLinux 10 : gnome-remote-desktop (ALSA-2026:54512)
The remote AlmaLinux 10 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2026:54512 advisory. gnome-remote-desktop: gnome-remote-desktop system-mode RDP server missing connection throttling allows unauthenticated denial of service CVE-2026-18358 Tenable h...
The vulnerability of Remote Desktop Services (RDS) for Windows operating systems allows attackers to escalate their privileges.
The vulnerability of Remote Desktop Services RDS for Windows operating systems lies in the lack of authentication for critical functions. Exploiting this vulnerability can allow attackers to gain increased privileges...
Oracle Linux 10 : gnome-remote-desktop (ELSA-2026-54512)
The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-54512 advisory. 49.3-4 - Backport connection throttling Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Ness...
Moderate: Red Hat Security Advisory: gnome-remote-desktop security update
An update for gnome-remote-desktop is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
gnome-remote-desktop: gnome-remote-desktop system-mode RDP server missing connection throttling allows unauthenticated denial of service
A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. When the daemon is running in system mode with RDP enabled, the incoming connection handler bypasses the connection throttler, allowing an unauthenticated remote attacker to open many parallel pre-authentication...
FreeRDP: FreeRDP: Denial of Service via crafted WindowIcon async message
A flaw was found in FreeRDP. A malicious or compromised Remote Desktop Protocol RDP server can exploit a heap use-after-free vulnerability when a client connects with asynchronous updates enabled. By sending a specially crafted Window Alternate Secondary Order message, the server can trigger memo...
FreeRDP: FreeRDP: Denial of Service via crafted WindowIcon async message
A flaw was found in FreeRDP. A malicious or compromised Remote Desktop Protocol RDP server can exploit a heap use-after-free vulnerability when a client connects with asynchronous updates enabled. By sending a specially crafted Window Alternate Secondary Order message, the server can trigger memo...
gnome-remote-desktop security update
49.3-4 - Backport connection throttling...
RHEL 10 : gnome-remote-desktop (RHSA-2026:54512)
The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:54512 advisory. GNOME Remote Desktop is a remote desktop and screen sharing service for the GNOME desktop environment. Security Fixes: gnome-remote-desktop:...
Oracle Linux 8 : freerdp (ELSA-2026-54485)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-54485 advisory. 2:2.11.7-11 - Backport several CVE fixes CVE-2026-64624, CVE-2026-67289, CVE-2026-67299, CVE-2026-68580 Resolves: RHEL-213173, RHEL-222796, RHEL-22297...
ALSA-2026:54512 Moderate: gnome-remote-desktop security update
GNOME Remote Desktop is a remote desktop and screen sharing service for the GNOME desktop environment. Security Fixes: gnome-remote-desktop: gnome-remote-desktop system-mode RDP server missing connection throttling allows unauthenticated denial of service CVE-2026-18358 For more details about the...
Chromium: Monthly Vulnerability Update (August 2026)
Palo Alto Networks incorporated the following Chromium security fixes into our products: https://chromereleases.googleblog.com/2025/10/stable-channel-update-for-desktop28.html Work around: No known workarounds exist for this issue...
Debian dsa-6432 : flatpak - security update
The remote Debian 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6432 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6432-1 [email protected] https://www.debian.org/security/ Moritz...
The vulnerability of desktop window managers in Windows operating systems allows attackers to increase their privileges.
The vulnerability of desktop window managers in Windows operating systems relates to reading beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
CVE-2026-73218 Cursor: Sandbox escape via launching privileged containers
Cursor is a code editor built for programming with AI. Prior to 3.0.0, Cursor IDE for macOS allows an agent running in Auto-Run Sandbox mode, when Docker Desktop and the Dev Containers CLI are installed, to launch a privileged container and mount Docker's virtiofs0, granting read and write access...
CVE-2026-73218 Cursor: Sandbox escape via launching privileged containers
Cursor is a code editor built for programming with AI. Prior to 3.0.0, Cursor IDE for macOS allows an agent running in Auto-Run Sandbox mode, when Docker Desktop and the Dev Containers CLI are installed, to launch a privileged container and mount Docker's virtiofs0, granting read and write access...
