5708 matches found
freerdp: improper client input validation for gateway connections allows to overwrite memory
A flaw was found in the FreeRDP client when it fails to validate input data when using gateway connections. This flaw could allow a malicious gateway to send a specially crafted input to a client leading to an out of bounds write in client memory. The highest threat from this flaw is that it coul...
Microsoft & Adobe Patch Tuesday (November 2021) – Microsoft 55 Vulnerabilities with 6 Critical, 6 Zero-Days. Adobe 4 Vulnerabilities
Microsoft Patch Tuesday – November 2021 Microsoft patched 55 vulnerabilities in their November 2021 Patch Tuesday release, of which six are rated as critical severity and six were previously reported as zero-days. Critical Microsoft Vulnerabilities Patched CVE-2021-42298 - Microsoft Defender Remo...
CVE-2021-41371
Windows Remote Desktop Protocol RDP Information Disclosure Vulnerability...
CVE-2021-38666
Remote Desktop Client Remote Code Execution Vulnerability...
CVE-2021-38666
Remote Desktop Client Remote Code Execution Vulnerability...
CVE-2021-38665
Remote Desktop Protocol Client Information Disclosure Vulnerability...
CVE-2021-38665
Remote Desktop Protocol Client Information Disclosure Vulnerability...
CVE-2021-38631
Windows Remote Desktop Protocol RDP Information Disclosure Vulnerability...
Information disclosure
Remote Desktop Protocol Client Information Disclosure Vulnerability...
CVE-2021-38631
Windows Remote Desktop Protocol RDP Information Disclosure Vulnerability...
CVE-2021-38666
Remote Desktop Client Remote Code Execution Vulnerability...
CVE-2021-38665
Remote Desktop Protocol Client Information Disclosure Vulnerability...
Remote code execution
Remote Desktop Client Remote Code Execution Vulnerability...
CVE-2021-38666
CVE-2021-38666 is described as a Remote Desktop Client Remote Code Execution vulnerability. The vulnerability affects the Windows Remote Desktop Client, with the CVSS3.1 score indicating network-exposed, no privileges required, user interaction needed, and high impact to confidentiality, integrit...
CVE-2021-38666 Remote Desktop Client Remote Code Execution Vulnerability
...
CVE-2021-38665
CVE-2021-38665 is described as a Remote Desktop Protocol Client Information Disclosure Vulnerability. The provided records show CVSSv3.1 base score 6.5 (NETWORK, LOW ATTACK COMPLEXITY, NONE PRIVILEGES, UI: REQUIRED) and a CNA-provided score of 7.4 (HIGH confidentiality impact). Exploitation detai...
Microsoft Patch Tuesday, November 2021 Edition
Microsoft Corp. today released updates to quash at least 55 security bugs in its Windows operating systems and other software. Two of the patches address vulnerabilities that are already being used in active attacks online, and four of the flaws were disclosed publicly before today -- potentially...
OESA-2021-1424 freerdp security update
FreeRDP is a client implementation of the Remote Desktop Protocol RDP that follows Microsoft's open specifications. This package provides the client applications xfreerdp and wlfreerdp. Security Fixes: FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache...
