233832 matches found
MINI-VCHF-CGPM-HCH3
Bulletin has no description...
MINI-M7WV-VQ94-CPWQ
Bulletin has no description...
MINI-3J3G-QGC5-9WG6
Bulletin has no description...
MINI-GRH9-FVGR-P3G2
Bulletin has no description...
EUVD-2026-42309
Copier has a trust-prefix bypass via path traversal that runs tasks unprompted...
DEBIAN-CVE-2026-69159
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.29.0, planardecompressplanerle and planardecompressplanerleonly in libfreerdp/codec/planar.c verify that a control byte exists but do not verify that the source buffer contains the zero to fifteen raw bytes declared by th...
DEBIAN-CVE-2026-55648
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, freerdpimagecopyfromicondata in libfreerdp/codec/color.c calculates nWidth multiplied by nHeight multiplied by FreeRDPGetBytesPerPixelformat in 32-bit arithmetic. A malicious RDP server can send a RAIL TSICONINFO...
DEBIAN-CVE-2026-55191
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, FreeRDP clients that negotiate RDPGFX AVC444 with an H.264 decoder backend calculate the intermediate YUV444 allocation size in libfreerdp/codec/h264.c with 32-bit multiplication in avc444ensurebuffer. A malicious R...
DEBIAN-CVE-2026-55192
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, FreeRDP H.264 decoder backends can return YUV planes sized from the bitstream without comparing the decoded width and height to the RDPGFX surface dimensions used to validate region rectangles. A malicious RDP serve...
DEBIAN-CVE-2026-55194
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, rpcclientrecvfragment in libfreerdp/core/gateway/rpcclient.c ensures the response reassembly stream capacity using only the server-declared allochint rather than the actual StubLength about to be written. A maliciou...
DEBIAN-CVE-2026-55193
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, FreeRDP clients using TS Gateway accept a server-controlled maxxmitfrag value in libfreerdp/core/gateway/rpcbind.c without bounding it to the 4088-byte ReceiveFragment allocation. A malicious gateway can advertise...
MINI-XQRQ-FX3V-H5CG
Bulletin has no description...
MINI-P7W2-7PQG-57F2
Bulletin has no description...
MINI-WW3R-CX53-RF6R
Bulletin has no description...
MINI-3RQH-899Q-VWHF
Bulletin has no description...
MINI-C4VR-6XWC-CX8G
Bulletin has no description...
MINI-PC9J-Q467-XX97
Bulletin has no description...
MINI-7XMF-FVX8-X4W4
Bulletin has no description...