MATE Desktop Atril Document Viewer EPUB File Parsing Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of MATE Desktop Atril Document Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

CVE-2025-3911

Recording of environment variables, configured for running containers, in Docker Desktop application logs could lead to unintentional disclosure of sensitive information such as api keys, passwords, etc. A malicious actor with read access to these logs could obtain sensitive credentials informati...

CVE-2025-4095

Registry Access Management RAM is a security feature allowing administrators to restrict access for their developers to only allowed registries. When a MacOS configuration profile is used to enforce organization sign-in, the RAM policies are not being applied, which would allow Docker Desktop use...

Brave Desktop 1.78.94 Security Fixes

Re-encoded images fetched for Brave News. Upgraded Chromium to 136.0.7103.60 — refer to Google Chrome advisories for inherited CVEs...

CVE-2025-3224

A vulnerability in the update process of Docker Desktop for Windows versions prior to 4.41.0 could allow a local, low-privileged attacker to escalate privileges to SYSTEM. During an update, Docker Desktop attempts to delete files and subdirectories under the path C:\ProgramData\Docker\config with...

CVE-2025-21416

Missing authorization in Azure Virtual Desktop allows an authorized attacker to elevate privileges over a network...

CVE-2025-21416 Azure Virtual Desktop Elevation of Privilege Vulnerability

...

CVE-2025-21416

CVE-2025-21416 describes a privilege elevation vulnerability in Microsoft Azure Virtual Desktop caused by missing authorization. The issue enables an authorized attacker, over a network, to elevate privileges within affected environments. Documents consistently reference Azure Virtual Desktop, wi...

CVE-2025-21416 Azure Virtual Desktop Elevation of Privilege Vulnerability

...

Azure Virtual Desktop Elevation of Privilege Vulnerability

Missing authorization in Azure Virtual Desktop allows an authorized attacker to elevate privileges over a network...

Microsoft Azure Virtual Desktop 安全漏洞

Microsoft Azure Virtual Desktop is an Azure cloud-based virtual desktop and application delivery service from Microsoft Corporation USA that supports multi-user Windows virtualized environments. A security vulnerability exists in Microsoft Azure Virtual Desktop that stems from a lack of...

LVDA 2402 | Ubuntu VDAs taking a long time (2-3min) to login

Customer is experiencing unusual slow logon when launching a published desktop hosted on Ubuntu It typically takes about 2 to 3 minutes to login...

CWAL 2311 | Failed to register YUBI key on VDA desktop

Failed to register Yubi Key in workspace app for Linux.http://webauthn.io/webauthn.io registration works and onlyhttps://webauthn.me/debuggerwebauthn.me site registration fail...

PT-2025-18299 · Microsoft · Azure Virtual Desktop

Name of the Vulnerable Software and Affected Versions: Azure Virtual Desktop affected versions not specified Description: The issue is related to missing authorization in Azure Virtual Desktop, which allows an authorized attacker to elevate privileges over a network. Recommendations: At the momen...

CVE-2025-4095

Registry Access Management RAM is a security feature allowing administrators to restrict access for their developers to only allowed registries. When a MacOS configuration profile is used to enforce organization sign-in, the RAM policies are not being applied, which would allow Docker Desktop use...

CVE-2025-3911

Recording of environment variables, configured for running containers, in Docker Desktop application logs could lead to unintentional disclosure of sensitive information such as api keys, passwords, etc. A malicious actor with read access to these logs could obtain sensitive credentials informati...

CVE-2025-3911 Exposure in Docker Desktop logs of environment variables configured for running containers

Recording of environment variables, configured for running containers, in Docker Desktop application logs could lead to unintentional disclosure of sensitive information such as api keys, passwords, etc. A malicious actor with read access to these logs could obtain sensitive credentials informati...

CVE-2025-3911

Docker Desktop before 4.41.0 logs environment variables configured for running containers in application logs, risking disclosure of sensitive credentials to anyone with log access. Affected product: Docker Desktop (Linux reportedly impacted in Nessus). Root cause: environment variables are recor...

CVE-2025-3911 Exposure in Docker Desktop logs of environment variables configured for running containers

Recording of environment variables, configured for running containers, in Docker Desktop application logs could lead to unintentional disclosure of sensitive information such as api keys, passwords, etc. A malicious actor with read access to these logs could obtain sensitive credentials informati...

CVE-2025-4095 Registry Access Management (RAM) policies not applied when sign-in enforcement is configured via a configuration profile

Registry Access Management RAM is a security feature allowing administrators to restrict access for their developers to only allowed registries. When a MacOS configuration profile is used to enforce organization sign-in, the RAM policies are not being applied, which would allow Docker Desktop use...