6582 matches found
CVE-2026-109832 Gnome-remote-desktop: busy-wait dos in vnc tls i/o handlers (gnutls_e_again / gnutls_e_interrupted)
A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. In the VNC TLS I/O handlers, retryable GnuTLS results GNUTLSEAGAIN and GNUTLSEINTERRUPTED are handled with an unbounded busy loop instead of yielding to the event loop. A remote attacker who can reach an enabled VNC...
CVE-2026-109832
A flaw exists in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. In the VNC TLS I/O handlers , retryable GnuTLS results (GNUTLS_E_AGAIN and GNUTLS_E_INTERRUPTED ) are processed using an unbounded busy loop rather than yielding to the event loop. A remote attacker capable of reaching ...
CVE-2026-109832 Gnome-remote-desktop: busy-wait dos in vnc tls i/o handlers (gnutls_e_again / gnutls_e_interrupted)
A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. In the VNC TLS I/O handlers, retryable GnuTLS results GNUTLSEAGAIN and GNUTLSEINTERRUPTED are handled with an unbounded busy loop instead of yielding to the event loop. A remote attacker who can reach an enabled VNC...
CVE-2026-109832
A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. In the VNC TLS I/O handlers, retryable GnuTLS results GNUTLSEAGAIN and GNUTLSEINTERRUPTED are handled with an unbounded busy loop instead of yielding to the event loop. A remote attacker who can reach an enabled VNC...
CVE-2026-109242
A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can exploit this vulnerability by sending a crafted sequence of progressive display tile updates to a connecting client. Because decompression buffers are allocated without being initialized, processing these updates can...
CVE-2026-109257
A flaw was found in FreeRDP. A remote attacker using a specially crafted Remote Desktop Protocol RDP client can request NSCodec compression with large display dimensions to trigger a memory allocation failure on the server. Because the server fails to properly clear memory pointers during error...
CVE-2026-109254
A flaw was found in FreeRDP. A use-after-free vulnerability allows a malicious Remote Desktop Protocol RDP server to cause a Denial of Service DoS by crashing the client. During static audio channel disconnection, audio data structures are released before the background playback thread finishes...
CVE-2026-109252
A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can cause a Denial of Service DoS by sending truncated authentication data to a connecting client. During error handling of the incomplete response, the client attempts to access uninitialized memory, leading to an...
Microsoft Windows: CVE-2026-84007: Remote Desktop Gateway Service Information Disclosure Vulnerability
Out-of-bounds read in Remote Desktop Gateway Service allows an authorized attacker to disclose information over a network...
CVE-2026-69976: Use After Free
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
Microsoft Windows: CVE-2026-69976: Remote Desktop Client Remote Code Execution Vulnerability
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
Microsoft Windows: CVE-2026-69998: Remote Desktop Client Remote Code Execution Vulnerability
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
Microsoft Windows: CVE-2026-69997: Remote Desktop Client Remote Code Execution Vulnerability
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
CVE-2026-69997: Use After Free
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
CVE-2026-69998: Use After Free
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
CVE-2026-69994: Use After Free
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
PT-2026-112288
Name of the Vulnerable Software and Affected Versions Remote Desktop Gateway Service affected versions not specified Description A use after free issue in the Remote Desktop Gateway Service allows an unauthorized attacker to execute arbitrary code over a network, which can affect the system. Use...
PT-2026-112726
Name of the Vulnerable Software and Affected Versions Windows Remote Desktop Client affected versions not specified Description An out-of-bounds read exists in the Remote Desktop Client, which allows an unauthorized attacker to disclose information over a network. An out-of-bounds read occurs whe...