CVE-2021-38665

Remote Desktop Protocol Client Information Disclosure Vulnerability...

CVE-2021-38665

CVE-2021-38665 is described as a Remote Desktop Protocol Client Information Disclosure Vulnerability. The provided records show CVSSv3.1 base score 6.5 (NETWORK, LOW ATTACK COMPLEXITY, NONE PRIVILEGES, UI: REQUIRED) and a CNA-provided score of 7.4 (HIGH confidentiality impact). Exploitation detai...

Microsoft Patch Tuesday, November 2021 Edition

Microsoft Corp. today released updates to quash at least 55 security bugs in its Windows operating systems and other software. Two of the patches address vulnerabilities that are already being used in active attacks online, and four of the flaws were disclosed publicly before today -- potentially...

OESA-2021-1424 freerdp security update

FreeRDP is a client implementation of the Remote Desktop Protocol RDP that follows Microsoft's open specifications. This package provides the client applications xfreerdp and wlfreerdp. Security Fixes: FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache...

Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

...

Remote Desktop Protocol Client Information Disclosure Vulnerability

...

PT-2021-4796 · Microsoft · Windows Remote Desktop Protocol +1

Name of the Vulnerable Software and Affected Versions: Windows Remote Desktop Protocol RDP affected versions not specified Description: The issue is related to a lack of protection for service data in the Windows Remote Desktop Protocol RDP component of the Windows operating system. Exploitation ...

Microsoft Windows Remote Desktop Protocol 信息泄露漏洞

Microsoft Windows Remote Desktop Protocol RDP is a Microsoft application for connecting to remote Windows desktops. An information disclosure vulnerability exists in Microsoft Windows RDP. The following products and versions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows 10 Versi...

PT-2021-4793 · Microsoft · Windows Remote Desktop Protocol +1

Name of the Vulnerable Software and Affected Versions: Windows Remote Desktop Protocol affected versions not specified Description: The issue is related to a lack of protection for service data in the Windows Remote Desktop Protocol, which can allow an attacker to gain unauthorized access to a...

Microsoft Windows Remote Desktop Protocol 代码注入漏洞

Microsoft Windows Remote Desktop Protocol RDP is an application for connecting to remote Windows desktops from Microsoft Corporation USA. A code injection vulnerability exists in Microsoft Windows RDP. The following products and versions are affected:Windows 10 Version 20H2 for ARM64-based...

KLA12341 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information, execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. An elevation of...

Ongoing Cyber Threats to U.S. Water and Wastewater Systems

Summary Immediate Actions WWS Facilities Can Take Now to Protect Against Malicious Cyber Activity • Do not click on suspicious links. • If you use RDP, secure and monitor it. • Usestrong passwords. • Usemulti-factor authentication. Note: This advisory uses the MITRE Adversarial Tactics, Technique...

CVE-2021-41160

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. In affected versions a malicious server might trigger out of bound writes in a connected client. Connections using GDI or SurfaceCommands to send graphics updates to the client might send 0...

CVE-2021-41160

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. In affected versions a malicious server might trigger out of bound writes in a connected client. Connections using GDI or SurfaceCommands to send graphics updates to the client might send 0...

CVE-2021-41159

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. All FreeRDP clients prior to version 2.4.1 using gateway connections /gt:rpc fail to validate input data. A malicious gateway might allow client memory to be written out of bounds. This issue h...

CVE-2021-41159

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. All FreeRDP clients prior to version 2.4.1 using gateway connections /gt:rpc fail to validate input data. A malicious gateway might allow client memory to be written out of bounds. This issue h...

Out-of-bounds

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. All FreeRDP clients prior to version 2.4.1 using gateway connections /gt:rpc fail to validate input data. A malicious gateway might allow client memory to be written out of bounds. This issue h...

UBUNTU-CVE-2021-41160

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. In affected versions a malicious server might trigger out of bound writes in a connected client. Connections using GDI or SurfaceCommands to send graphics updates to the client might send 0...

CVE-2021-41159

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. All FreeRDP clients prior to version 2.4.1 using gateway connections /gt:rpc fail to validate input data. A malicious gateway might allow client memory to be written out of bounds. This issue h...

CVE-2021-41159

FreeRDP before version 2.4.1 with gateway connections (/gt:rpc) is vulnerable to improper input validation that can lead to out-of-bounds writes in client memory, potentially enabling remote code execution. The issue is fixed in 2.4.1. If upgrading is not possible, use /gt:http or connect directl...