EUVD-2026-22545

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

EUVD-2026-22414

Heap-based buffer overflow in Windows Client Side Caching driver csc.sys allows an authorized attacker to elevate privileges locally...

EUVD-2026-22333

A insufficiently protected credentials vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4 all versions, FortiSandbox PaaS 5.0.1 through 5.0.5 may allow an authenticathed administrator to read LDAP server credentials via client-side inspection...

CVE-2026-32157

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

CVE-2026-26176

Heap-based buffer overflow in Windows Client Side Caching driver csc.sys allows an authorized attacker to elevate privileges locally...

2026-04 .NET 10.0.6 Security Update for x64 Client (KB5086095)

2026-04 .NET 10.0.6 Security Update for x64 Client KB5086095...

2026-04 .NET 10.0.6 Security Update for x86 Client (KB5086095)

2026-04 .NET 10.0.6 Security Update for x86 Client KB5086095...

2026-04 .NET 8.0.26 Security Update for x64 Client (KB5086096)

2026-04 .NET 8.0.26 Security Update for x64 Client KB5086096...

2026-04 .NET 8.0.26 Security Update for x86 Client (KB5086096)

2026-04 .NET 8.0.26 Security Update for x86 Client KB5086096...

2026-04 .NET 9.0.15 Security Update for x64 Client (KB5086097)

2026-04 .NET 9.0.15 Security Update for x64 Client KB5086097...

CVE-2026-26176 Windows Client Side Caching driver (csc.sys) Elevation of Privilege Vulnerability

...

CVE-2026-26176 Windows Client Side Caching driver (csc.sys) Elevation of Privilege Vulnerability

...

CVE-2026-26176

Technical details about CVE-2026-26176 are not provided in the supplied documents. Monitor for updates from Microsoft Security Update Guide and CVE records for affected specifics, impact, and remediation.

CVE-2026-32157 Remote Desktop Client Remote Code Execution Vulnerability

...

CVE-2026-32157

CVE-2026-32157 affects the Remote Desktop Client and enables remote code execution over the network. The CVSSv3.1 score is 8.8 (HIGH), with confidentiality, integrity, and availability all rated High. Attack requires network access and user interaction, with privilegesN/A and exploitation current...

CVE-2026-32157

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

CVE-2026-32157 Remote Desktop Client Remote Code Execution Vulnerability

...

CVE-2026-27316

A insufficiently protected credentials vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4 all versions, FortiSandbox PaaS 5.0.1 through 5.0.5 may allow an authenticathed administrator to read LDAP server credentials via client-side inspection...

Cross-site Scripting (XSS)

Overview org.webjars.npm:leaflet is a JavaScript library for mobile-friendly interactive maps Affected versions of this package are vulnerable to Cross-site Scripting XSS via the bindPopup method. An attacker can execute arbitrary JavaScript code in the context of a user's browser session by...

CVE-2026-27316

A insufficiently protected credentials vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4 all versions, FortiSandbox PaaS 5.0.1 through 5.0.5 may allow an authenticathed administrator to read LDAP server credentials via client-side inspection...