1175 matches found
PT-2026-70424
Name of the Vulnerable Software and Affected Versions Remote Desktop Client affected versions not specified Description A race condition occurs when concurrent execution using a shared resource lacks proper synchronization. This allows an unauthorized attacker to execute arbitrary code over a...
CVE-2026-67305
The FreeRDP Windows client contains a heap buffer overflow vulnerability. If a user pastes maliciously crafted, oversized clipboard data from an untrusted RDP server, it triggers memory corruption that may result in remote code execution...
Vulnerability of the functions update_process_glyph_fragments() and glyph_cache_fragment_put() in the libfreerdp/cache/glyph.c file of the RDP client FreeRDP, allowing a intruder to cause a service failure
The vulnerabilities of the updateprocessglyphfragments and glyphcachefragmentput functions in the libfreerdp/cache/glyph.c file of the RDP client FreeRDP are related to reading beyond the allowed range of memory. Exploiting these vulnerabilities could allow a remote attacker to cause service...
EUVD-2026-51834
FreeRDP before 3.29.0 affected versions = 3.28.0 contains a divide-by-zero vulnerability in the rdpecam camera redirection client. ecamdevprocessstartstreamsrequest parses a server-controlled CAMMEDIATYPEDESCRIPTION from a StartStreamsRequest PDU but validates only Format and Flags, not...
EUVD-2026-51821
FreeRDP before 3.29.0 contains client-side heap use-after-free vulnerabilities in the async update message proxy for RAIL WINDOWSTATEORDER and NOTIFYICONSTATEORDER when AsyncUpdate is enabled. When a malicious or compromised RDP server sends crafted update orders, the message proxy shallow-copies...
CVE-2026-67305 FreeRDP Windows Client before 3.29.0 Heap Buffer Overflow via Cliprdr
FreeRDP Windows client before 3.29.0 contains a heap buffer overflow vulnerability in the clipboard virtual channel when processing CLIPRDRFILECONTENTSRESPONSE PDUs without validating the server-provided size against the destination buffer. A malicious RDP server can send a response with a data...
CVE-2026-8164
Uncontrolled Search Path Element vulnerability in ArkSigner Software and Hardware Industry and Trade Inc. ArkSigner Desktop Client allows Search Order Hijacking. This issue affects ArkSigner Desktop Client: from v2.2.16.10 through 17062026...
CVE-2026-8164 Search Order Hijacking in ArkSigner's ArkSigner Desktop Client
Uncontrolled Search Path Element vulnerability in ArkSigner Software and Hardware Industry and Trade Inc. ArkSigner Desktop Client allows Search Order Hijacking. This issue affects ArkSigner Desktop Client: from v2.2.16.10 through 17062026...
Vulnerabilities exploited in Zoom
Zoom has identified vulnerabilities in the Zoom Client for Windows, Zoom Rooms for Windows, and other Zoom Windows products, such as the Windows Desktop Client, VDI Client, and Meeting SDK. These vulnerabilities include a TOCTOU race condition that can be exploited by authenticated local users to...
CVE-2026-53412 Zoom Workplace VDI Plugin for Windows - Improper Input Validation
Improper Input Validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows may allow an unauthenticated user to conduct an account takeover via network access...
Zoom Patches Critical Windows Flaw That Could Enable Account Takeover
Zoom has released security updates for a critical security flaw impacting Zoom Workplace for Windows that could facilitate account takeover. The vulnerability, tracked as CVE-2026-53412 CVSS score: 9.8, affects Zoom Workplace for Windows before version 7.0.0 and Zoom Workplace VDI Client for...
PT-2026-60396
Name of the Vulnerable Software and Affected Versions Zoom Clients for Windows affected versions not specified Description A time-of-check to time-of-use TOCTOU race condition exists in the installation and uninstallation process. This flaw allows an authenticated local user to escalate privilege...
EUVD-2026-44072
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
EUVD-2026-44001
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
CVE-2026-50504
Buffer over-read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network...
CVE-2026-50474
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
CVE-2026-50330
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-54990
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
CVE-2026-58594
CVE-2026-58594 is a Windows Remote Desktop Client RCE vulnerability caused by an integer overflow/wraparound in the RDP client. Public sources (NVD/NCSC/CIRCL) attribute network-based exploitation with potential arbitrary code execution on vulnerable Windows systems. Connected entries confirm the...
