CVE-2026-20805

Exposure of sensitive information to an unauthorized actor in Desktop Windows Manager allows an authorized attacker to disclose information locally...

CVE-2026-20805 Desktop Window Manager Information Disclosure Vulnerability

...

CVE-2026-20805 Desktop Window Manager Information Disclosure Vulnerability

...

Desktop Window Manager Elevation of Privilege Vulnerability

Use after free in Desktop Windows Manager allows an authorized attacker to elevate privileges locally...

January 13, 2026—KB5073457 (OS Build 20348.4648)

None None...

Desktop Window Manager Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Desktop Windows Manager allows an authorized attacker to disclose information locally...

Microsoft DWM Core Library Elevation of Privilege Vulnerability

Use after free in Windows DWM allows an authorized attacker to elevate privileges locally...

Microsoft Windows Desktop Window Manager Use-After-Free Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the desktop window...

PT-2026-2774

Name of the Vulnerable Software and Affected Versions InDesign Desktop versions 19.5.5 and earlier InDesign Desktop version 21.0 Description InDesign Desktop versions 19.5.5 and 21.0 are susceptible to a Heap-based Buffer Overflow condition. Successful exploitation of this issue could lead to...

PT-2026-2775

Name of the Vulnerable Software and Affected Versions InDesign Desktop versions 21.0 and 19.5.5 and earlier Description InDesign Desktop versions 21.0, 19.5.5, and earlier are susceptible to an Out-of-bounds Read issue, potentially leading to memory exposure. An attacker could exploit this to...

PT-2026-2767

Name of the Vulnerable Software and Affected Versions Dreamweaver Desktop versions 21.6 and earlier Description Dreamweaver Desktop versions 21.6 and earlier are susceptible to an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' issue. Successful exploitati...

PT-2026-2768

Name of the Vulnerable Software and Affected Versions Dreamweaver Desktop versions 21.6 and earlier Description Dreamweaver Desktop versions 21.6 and earlier are susceptible to an Improper Input Validation issue. Successful exploitation could lead to arbitrary code execution within the current...

PT-2026-2773

Name of the Vulnerable Software and Affected Versions InDesign Desktop versions 19.5.5 and earlier InDesign Desktop version 21.0 Description InDesign Desktop versions 19.5.5 and 21.0 are susceptible to an Access of Uninitialized Pointer issue. Successful exploitation of this issue could lead to...

Adobe InDesign Desktop 安全漏洞

Adobe InDesign Desktop is a page layout software from the American company Audobee Adobe. A security vulnerability exists in Adobe InDesign Desktop version 21.0, 19.5.5 and earlier versions that originates from a heap buffer overflow and could lead to the execution of arbitrary code...

VulnCheck KEV: CVE-2026-20805

Exposure of sensitive information to an unauthorized actor in Desktop Windows Manager allows an authorized attacker to disclose information locally...

Microsoft Desktop Windows Manager 安全漏洞

Microsoft Desktop Windows Manager is a desktop window manager from Microsoft Corporation USA. A security vulnerability exists in Microsoft Desktop Windows Manager. An attacker exploiting this vulnerability could gain access to sensitive information. The following products and versions are...

Eigent 代码注入漏洞

Eigent is a multi-agent workflow desktop application open-sourced by Eigent AI. Eigent suffers from a code injection vulnerability that stems from a CI workflow using the pullrequesttarget trigger and checking out untrusted PR code, which could lead to arbitrary code execution...

MiracleLinux 9 : gnome-remote-desktop-40.0-11.el9_6 (AXSA:2025-10634:02)

The remote MiracleLinux 9 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2025-10634:02 advisory. gnome-remote-desktop: Uncontrolled Resource Consumption due to Malformed RDP PDUs CVE-2025-5024 Tenable has extracted the preceding description block direct...

MiracleLinux 8 : gnome-remote-desktop-0.1.8-4.el8_10 (AXSA:2025-10476:01)

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2025-10476:01 advisory. gnome-remote-desktop: Uncontrolled Resource Consumption due to Malformed RDP PDUs CVE-2025-5024 Tenable has extracted the preceding description block direct...

Adobe InDesign Desktop 缓冲区错误漏洞

Adobe InDesign is a set of layout and editing applications from the American company Audobee Adobe. Adobe InDesign suffers from an out-of-bounds read vulnerability that can be exploited by an attacker to obtain sensitive information...