freerdp: FreeRDP: Denial of Service via endless blocking loop in Stream_EnsureCapacity

A flaw was found in FreeRDP, a free implementation of the Remote Desktop Protocol. The StreamEnsureCapacity function can create an endless blocking loop, leading to a Denial of Service DoS. This vulnerability can be exploited on 32-bit systems where the available physical memory is greater than o...

freerdp: FreeRDP: Denial of Service via endless blocking loop in Stream_EnsureCapacity

A flaw was found in FreeRDP, a free implementation of the Remote Desktop Protocol. The StreamEnsureCapacity function can create an endless blocking loop, leading to a Denial of Service DoS. This vulnerability can be exploited on 32-bit systems where the available physical memory is greater than o...

2026-05 Cumulative Update for Windows 10 Version 22H2 for x64-based Systems (KB5087544)

2026-05 Cumulative Update for Windows 10 Version 22H2 for x64-based Systems KB5087544...

2026-05 Cumulative Update for Windows 10 Version 1607 for x64-based Systems (KB5087537)

2026-05 Cumulative Update for Windows 10 Version 1607 for x64-based Systems KB5087537...

2026-05 .NET 8.0.27 Security Update for x64 Server (KB5093447)

2026-05 .NET 8.0.27 Security Update for x64 Server KB5093447...

2026-05 Cumulative Update for .NET Framework 4.8 for Windows Server 2016 for x64 (KB5087065)

2026-05 Cumulative Update for .NET Framework 4.8 for Windows Server 2016 for x64 KB5087065...

2026-05 Cumulative Update for Windows Server 2016 for x64-based Systems (KB5087537)

2026-05 Cumulative Update for Windows Server 2016 for x64-based Systems KB5087537...

2026-05 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 10 Version 22H2 for x64 (KB5088863)

2026-05 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 10 Version 22H2 for x64 KB5088863...

2026-05 .NET 9.0.16 Security Update for x86 Client (KB5093448)

2026-05 .NET 9.0.16 Security Update for x86 Client KB5093448...

2026-05 Cumulative Update for Windows 10 Version 21H2 for x64-based Systems (KB5087544)

2026-05 Cumulative Update for Windows 10 Version 21H2 for x64-based Systems KB5087544...

2026-05 Cumulative Update for Microsoft server operating system version 21H2 for x64-based Systems (KB5087545)

2026-05 Cumulative Update for Microsoft server operating system version 21H2 for x64-based Systems KB5087545...

2026-05 .NET 8.0.27 Security Update for x86 Client (KB5093447)

2026-05 .NET 8.0.27 Security Update for x86 Client KB5093447...

Microsoft Windows Kernel 安全漏洞

The Microsoft Windows Kernel is the kernel of the Windows operating system developed by Microsoft Corporation. There are security vulnerabilities present in the Microsoft Windows Kernel. Attackers can exploit these vulnerabilities to gain higher privileges. The following products and versions are...

EUVD-2026-29199

Amazon::Credentials versions through 1.2.0 for Perl uses rand to generate encryption keys. Amazon::Credentials stores credentials in an obfuscated form to prevent access to the secrets from a data dump of the object. Before version 1.3.0, the secrets were encrypted using a 64-bit key that was...

CVE-2026-6146

CVE-2026-6146 affects Perl module Amazon::Credentials up to version 1.2.0. The root cause is the use of Perl’s built‑in rand to generate encryption keys, with secrets stored in an obfuscated form but not securely encrypted. Prior to 1.3.0, a 64‑bit key derived from rand is used, which is predicta...

NGINX: NGINX: Denial of Service due to memory corruption via crafted MP4 file

A flaw was found in NGINX Open Source, specifically within the ngxhttpmp4module. An attacker can exploit this memory corruption vulnerability by providing a specially crafted MP4 file. This can lead to an over-read or over-write of NGINX worker memory, causing the worker to terminate and resultin...

NGINX: NGINX: Denial of Service due to memory corruption via crafted MP4 file

A flaw was found in NGINX Open Source, specifically within the ngxhttpmp4module. An attacker can exploit this memory corruption vulnerability by providing a specially crafted MP4 file. This can lead to an over-read or over-write of NGINX worker memory, causing the worker to terminate and resultin...

NGINX: NGINX: Denial of Service due to memory corruption via crafted MP4 file

A flaw was found in NGINX Open Source, specifically within the ngxhttpmp4module. An attacker can exploit this memory corruption vulnerability by providing a specially crafted MP4 file. This can lead to an over-read or over-write of NGINX worker memory, causing the worker to terminate and resultin...

Unity Linux 20.1060e / 20.1070e Security Update: ImageMagick (UTSA-2026-017620)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017620 advisory. A flaw was found in ImageMagick in MagickCore/quantum-export.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined...

Unity Linux 20.1060e / 20.1070e Security Update: redis (UTSA-2026-017631)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017631 advisory. Redis is an open-source, in-memory database that persists on disk. In affected versions of Redis an integer overflow bug in 32-bit Redis version 4.0 or newer could b...