CVE-2026-59134 Remote Desktop Client Remote Code Execution Vulnerability

...

CVE-2026-59134

The CVE-2026-59134 entry concerns a heap-based buffer overflow in the Remote Desktop Client that enables remote code execution and requires network access (attack vector: NETWORK) with user interaction. The documented impact is high (CVSS 3.1: AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H). No explicit rem...

EUVD-2026-56314

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

2026-08 .NET 9.0.19 Security Update for x86 Client (KB5122105)

2026-08 .NET 9.0.19 Security Update for x86 Client KB5122105...

2026-08 .NET 8.0.30 Security Update for x64 Client (KB5122104)

2026-08 .NET 8.0.30 Security Update for x64 Client KB5122104...

2026-08 .NET 10.0.11 Security Update for x64 Client (KB5122106)

2026-08 .NET 10.0.11 Security Update for x64 Client KB5122106...

2026-08 .NET 9.0.19 Security Update for x64 Client (KB5122105)

2026-08 .NET 9.0.19 Security Update for x64 Client KB5122105...

2026-08 .NET 10.0.11 Security Update for ARM64 Client (KB5122106)

2026-08 .NET 10.0.11 Security Update for ARM64 Client KB5122106...

2026-08 .NET 8.0.30 Security Update for x86 Client (KB5122104)

2026-08 .NET 8.0.30 Security Update for x86 Client KB5122104...

2026-08 .NET 9.0.19 Security Update for ARM64 Client (KB5122105)

2026-08 .NET 9.0.19 Security Update for ARM64 Client KB5122105...

2026-08 .NET 8.0.30 Security Update for ARM64 Client (KB5122104)

2026-08 .NET 8.0.30 Security Update for ARM64 Client KB5122104...

Malicious code in sui-gql-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 763079354e471aa241953530a79a946e060402895da52ca47628f1817c452d7e Analysis of the package did not surface install-time lifecycle scripts, credential access, network exfiltration, dropper behavior, silent-relay, or...

MAL-2026-13768 Malicious code in sui-gql-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 763079354e471aa241953530a79a946e060402895da52ca47628f1817c452d7e Analysis of the package did not surface install-time lifecycle scripts, credential access, network exfiltration, dropper behavior, silent-relay, or...

undertow-core: Undertow: Authentication Bypass via AJP ssl_cert/is_ssl Forgery

the Undertow AJP listener honours forged sslcert and isssl AJP attributes without requiring any shared-secret authentication. This enables an unauthenticated attacker with direct TCP access to port 8009 to bypass CLIENT-CERT authentication by injecting a forged X.509 certificate via the AJP...

EUVD-2026-56219

TypeBot is a chatbot builder tool. Prior to version 3.17.0, Typebot's WhatsApp status forwarding feature stores a workspace-configured webhook forwarding URL and later POSTs WhatsApp marketing/error status events to it from the server. The stored URL is only validated as a generic URL in settings...

CVE-2026-53416

Path traversal in Zoom VDI Client and Plugins may allow an authenticated user to conduct information disclosure via local access...

EUVD-2026-56246

Path traversal in Zoom VDI Client and Plugins may allow an authenticated user to conduct information disclosure via local access...

CVE-2026-48766 TypeBot vulnerable to OpenAI API key exfiltration in listModels via attacker-controlled baseUrl

TypeBot is a chatbot builder tool. Versions prior to 3.17.0 allow a low-privilege guest member of a workspace to exfiltrate stored OpenAI-compatible API keys by invoking the OpenAI model-listing helper with an attacker-controlled baseUrl. The vulnerable path decrypts the selected workspace...

CVE-2026-34501

A flaw was found in the Redis client in the Apache Portable Runtime Utility apr-util. A heap buffer overflow can be triggered when the application processes a specially crafted response from a Redis server, resulting in a crash and denial of service. Mitigation Ensure that the Redis server used b...

CVE-2026-34502

A flaw was found in the memcached client in the Apache Portable Runtime Utility apr-util. A remote, unauthenticated attacker can cause the application to crash or become unresponsive by sending a specially crafted response from a malicious or compromised memcached server, resulting in a denial of...