2026-08 .NET 9.0.19 Security Update for x64 Client (KB5122105)

2026-08 .NET 9.0.19 Security Update for x64 Client KB5122105...

2026-08 .NET 8.0.30 Security Update for ARM64 Client (KB5122104)

2026-08 .NET 8.0.30 Security Update for ARM64 Client KB5122104...

Malicious code in sui-gql-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 763079354e471aa241953530a79a946e060402895da52ca47628f1817c452d7e Analysis of the package did not surface install-time lifecycle scripts, credential access, network exfiltration, dropper behavior, silent-relay, or...

MAL-2026-13768 Malicious code in sui-gql-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 763079354e471aa241953530a79a946e060402895da52ca47628f1817c452d7e Analysis of the package did not surface install-time lifecycle scripts, credential access, network exfiltration, dropper behavior, silent-relay, or...

undertow-core: Undertow: Authentication Bypass via AJP ssl_cert/is_ssl Forgery

the Undertow AJP listener honours forged sslcert and isssl AJP attributes without requiring any shared-secret authentication. This enables an unauthenticated attacker with direct TCP access to port 8009 to bypass CLIENT-CERT authentication by injecting a forged X.509 certificate via the AJP...

EUVD-2026-56219

TypeBot is a chatbot builder tool. Prior to version 3.17.0, Typebot's WhatsApp status forwarding feature stores a workspace-configured webhook forwarding URL and later POSTs WhatsApp marketing/error status events to it from the server. The stored URL is only validated as a generic URL in settings...

CVE-2026-53416

Path traversal in Zoom VDI Client and Plugins may allow an authenticated user to conduct information disclosure via local access...

EUVD-2026-56246

Path traversal in Zoom VDI Client and Plugins may allow an authenticated user to conduct information disclosure via local access...

CVE-2026-48766 TypeBot vulnerable to OpenAI API key exfiltration in listModels via attacker-controlled baseUrl

TypeBot is a chatbot builder tool. Versions prior to 3.17.0 allow a low-privilege guest member of a workspace to exfiltrate stored OpenAI-compatible API keys by invoking the OpenAI model-listing helper with an attacker-controlled baseUrl. The vulnerable path decrypts the selected workspace...

CVE-2026-34501

A flaw was found in the Redis client in the Apache Portable Runtime Utility apr-util. A heap buffer overflow can be triggered when the application processes a specially crafted response from a Redis server, resulting in a crash and denial of service. Mitigation Ensure that the Redis server used b...

CVE-2026-34502

A flaw was found in the memcached client in the Apache Portable Runtime Utility apr-util. A remote, unauthenticated attacker can cause the application to crash or become unresponsive by sending a specially crafted response from a malicious or compromised memcached server, resulting in a denial of...

Windows Remote Desktop Client Information Disclosure Vulnerability

Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network...

Windows App for Mac Information Disclosure Vulnerability

Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network...

Remote Desktop Client Remote Code Execution Vulnerability

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

Windows DHCP Client Elevation of Privilege Vulnerability

Stack-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges locally...

Remote Desktop Client Remote Code Execution Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

Remote Desktop Client Remote Code Execution Vulnerability

Stack-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

Windows SMB Client Information Disclosure Vulnerability

Buffer over-read in Windows SMB Client allows an unauthorized attacker to disclose information over a network...

Windows SMB Client Information Disclosure Vulnerability

Out-of-bounds read in Windows SMB Client allows an unauthorized attacker to disclose information over a network...

Windows SMB Client Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows SMB Client allows an authorized attacker to elevate privileges locally...