CVE-2025-55340 Windows Remote Desktop Protocol Security Feature Bypass

...

CVE-2025-55340

CVE-2025-55340 is a Windows Remote Desktop Protocol security feature bypass caused by improper authentication that can enable an authenticated local attacker to bypass a security feature. The vulnerability affects Windows Remote Desktop Protocol and is rated HIGH with a CVSSv3.1 vector of AV:L/AC...

CVE-2025-57740

An Heap-based Buffer Overflow vulnerability CWE-122 in FortiOS version 7.6.2 and below, version 7.4.7 and below, version 7.2.10 and below, 7.0 all versions, 6.4 all versions; FortiPAM version 1.5.0, version 1.4.2 and below, 1.3 all versions, 1.2 all versions, 1.1 all versions, 1.0 all versions an...

CVE-2025-57740

An Heap-based Buffer Overflow vulnerability CWE-122 in FortiOS version 7.6.2 and below, version 7.4.7 and below, version 7.2.10 and below, 7.0 all versions, 6.4 all versions; FortiPAM version 1.5.0, version 1.4.2 and below, 1.3 all versions, 1.2 all versions, 1.1 all versions, 1.0 all versions an...

Remote Desktop Protocol Remote Code Execution Vulnerability

Use after free in Windows Remote Desktop allows an unauthorized attacker to execute code locally...

Remote Desktop Client Remote Code Execution Vulnerability

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

Windows Remote Desktop Protocol Security Feature Bypass

Improper authentication in Windows Remote Desktop Protocol allows an authorized attacker to bypass a security feature locally...

Windows Remote Desktop Services Elevation of Privilege Vulnerability

Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally...

Microsoft Windows Remote Desktop Services 资源管理错误漏洞

Microsoft Windows Remote Desktop Services is a collection of features from Microsoft Corporation USA that allow users to remotely access graphical desktops and Windows applications. A resource management error vulnerability exists in Microsoft Windows Remote Desktop Services that stems from an...

PT-2025-41962

Name of the Vulnerable Software and Affected Versions FortiOS versions 7.6.2 and below, 7.4.7 and below, 7.2.10 and below, 7.0 all versions, 6.4 all versions FortiPAM versions 1.5.0, 1.4.2 and below, 1.3 all versions, 1.2 all versions, 1.1 all versions, 1.0 all versions FortiProxy versions 7.6.2...

StarNet FastX 安全漏洞

StarNet FastX is a remote desktop software from StarNet USA. A security vulnerability exists in StarNet FastX 4.1.51 and prior versions that stems from a path traversal flaw that could allow an unauthenticated attacker to read arbitrary files...

Microsoft Remote Desktop Protocol Client 资源管理错误漏洞

Microsoft Remote Desktop Protocol Client is a client software application for connecting to remote desktops from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Remote Desktop Protocol Client, which can be exploited by an attacker to remotely execute code...

Microsoft Windows Remote Desktop Services 授权问题漏洞

Microsoft Windows Remote Desktop Services is a collection of features from Microsoft Corporation USA that allow users to remotely access graphical desktops and Windows applications. An authorization issue vulnerability exists in Microsoft Windows Remote Desktop Services that stems from an...

PT-2025-42094

Name of the Vulnerable Software and Affected Versions Windows Remote Desktop Services affected versions not specified Description A use after free condition exists in Windows Remote Desktop Services. This allows an authorized attacker to elevate privileges locally. Recommendations At the moment,...

PT-2025-42025

Name of the Vulnerable Software and Affected Versions Windows Remote Desktop Protocol affected versions not specified Description An improper authentication issue exists in Windows Remote Desktop Protocol. This allows an authorized attacker to bypass a security feature locally. Recommendations At...

Microsoft Remote Desktop Client 资源管理错误漏洞

Microsoft Remote Desktop Client is a remote desktop client from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Remote Desktop Client, which originates from a vulnerability that can be exploited by an attacker to remotely execute code...

PT-2025-42056

Name of the Vulnerable Software and Affected Versions Microsoft Windows Remote Desktop Client affected versions not specified Description A use-after-free condition exists in the Remote Desktop Client RDC component of Microsoft Windows. This issue allows a remote attacker to execute arbitrary cod...

PT-2025-42073

Name of the Vulnerable Software and Affected Versions Windows Remote Desktop affected versions not specified Description A use after free condition exists in Windows Remote Desktop. This allows an unauthorized attacker to execute code locally. Recommendations At the moment, there is no informatio...

AlmaLinux 10 : gnome-remote-desktop (ALSA-2025:10635)

The remote AlmaLinux 10 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2025:10635 advisory. gnome-remote-desktop: Uncontrolled Resource Consumption due to Malformed RDP PDUs CVE-2025-5024 Tenable has extracted the preceding description block directly fr...

BatShadow Group Uses New Go-Based 'Vampire Bot' Malware to Hunt Job Seekers

A Vietnamese threat actor named BatShadow has been attributed to a new campaign that leverages social engineering tactics to deceive job seekers and digital marketing professionals to deliver a previously undocumented malware called Vampire Bot. "The attackers pose as recruiters, distributing...