Windows Remote Desktop Services Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally...

Windows Management Services Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Management Services allows an authorized attacker to elevate privileges over a network...

Remote Desktop Services Remote Code Execution Vulnerability

Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network...

Remote Desktop Services Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to execute code over a network...

Remote Desktop Services Remote Code Execution Vulnerability

Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network...

Xbox Gaming Services Elevation of Privilege Vulnerability

Improper authorization in XBox Gaming Services allows an authorized attacker to elevate privileges locally...

Windows Deployment Services Remote Code Execution Vulnerability

Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network...

Remote Desktop Services Remote Code Execution Vulnerability

Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network...

Windows Deployment Services Remote Code Execution Vulnerability

Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network...

Windows Deployment Services Remote Code Execution Vulnerability

Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network...

Windows Remote Desktop Services Elevation of Privilege Vulnerability

Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network...

Windows Deployment Services Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Deployment Services allows an authorized attacker to execute code locally...

CVE-2026-86590

In Eclipse Che versions 7.79.0 through 7.121.0, the dashboard backend's POST /dashboard/api/data/resolver endpoint passes a caller-supplied URL directly to an outbound HTTP GET request with no host filtering. An authenticated user can exploit this server-side request forgery SSRF to read response...

KLA91262 PE vulnerabilities in Microsoft Apps

Privilege escalation vulnerabilities were found in Microsoft Apps. Malicious users can exploit these vulnerabilities to gain privileges. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Xbox Gaming Services can be exploited remotely to gain privileges. 2...

PT-2026-87534

🚨 HIGH SEVERITY: CVE-2026-69514 CVSS 7.5 Heap buffer overflow in Windows Remote Desktop Services enables remote code execution by authenticated attackers. Patch immediately. CVE Vulnerability PatchNow ThreatIntel DFIR https://t.co/h112imW6bc...

PT-2026-87540

Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network...

CVE-2026-19304

IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote authenticated attacker to obtain sensitive information from internal services due to a URL parser discrepancy...

EUVD-2026-71266

IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote authenticated attacker to obtain sensitive information from internal services due to a URL parser discrepancy...

CVE-2026-85662 Marqo 2.26.0 Server-Side Request Forgery via Media URLs

Marqo 2.26.0 contains a server-side request forgery vulnerability in the adddocuments endpoint that allows unauthenticated attackers to trigger requests to arbitrary URLs by supplying malicious media field values. Attackers can exploit downloadimagefromurl and fetchcontentsample functions which...

EUVD-2026-71118

Marqo 2.26.0 contains a server-side request forgery vulnerability in the adddocuments endpoint that allows unauthenticated attackers to trigger requests to arbitrary URLs by supplying malicious media field values. Attackers can exploit downloadimagefromurl and fetchcontentsample functions which...