PT-2026-70563

Name of the Vulnerable Software and Affected Versions Remote Desktop Client affected versions not specified Description A stack-based buffer overflow occurs in the Remote Desktop Client, which allows an unauthorized attacker to execute arbitrary code over a network and affect the system. A...

PT-2026-70459

Name of the Vulnerable Software and Affected Versions Windows Remote Desktop Services affected versions not specified Description A heap-based buffer overflow occurs in Windows Remote Desktop Services, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow...

PT-2026-70833

Cursor is a code editor built for programming with AI. Prior to 3.0.0, Cursor IDE for macOS allows an agent running in Auto-Run Sandbox mode, when Docker Desktop and the Dev Containers CLI are installed, to launch a privileged container and mount Docker's virtiofs0, granting read and write access...

PT-2026-70681

Name of the Vulnerable Software and Affected Versions Desktop Window Manager affected versions not specified Description A heap-based buffer overflow occurs in the Desktop Window Manager, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory...

PT-2026-70413

Name of the Vulnerable Software and Affected Versions Remote Desktop Client affected versions not specified Description A heap-based buffer overflow occurs in the Remote Desktop Client, which allows an unauthorized attacker to execute arbitrary code over a network and affect the system. A...

PT-2026-70441

Name of the Vulnerable Software and Affected Versions Remote Desktop Client affected versions not specified Description An out-of-bounds read exists that allows an unauthorized attacker to disclose sensitive information over a network. Recommendations At the moment, there is no information about ...

PT-2026-70433

Name of the Vulnerable Software and Affected Versions Remote Desktop Client affected versions not specified Description A heap-based buffer overflow occurs in the Remote Desktop Client, which allows an unauthorized attacker to execute arbitrary code over a network and affect the system. A...

PT-2026-70424

Name of the Vulnerable Software and Affected Versions Remote Desktop Client affected versions not specified Description A race condition occurs when concurrent execution using a shared resource lacks proper synchronization. This allows an unauthorized attacker to execute arbitrary code over a...

CVE-2026-15060

When systemd-machined = v259 or v258 with a custom polkit policy that allows register-machine access is running on a desktop system, an unprivileged user logged in a desktop graphical session can kill arbitrary processes, even privileged ones. - versions older than v259 are not affected, unless...

CVE-2026-15060

When systemd-machined = v259 or v258 with a custom polkit policy that allows register-machine access is running on a desktop system, an unprivileged user logged in a desktop graphical session can kill arbitrary processes, even privileged ones. - versions older than v259 are not affected, unless...

EUVD-2026-55627

When systemd-machined = v259 or v258 with a custom polkit policy that allows register-machine access is running on a desktop system, an unprivileged user logged in a desktop graphical session can kill arbitrary processes, even privileged ones. - versions older than v259 are not affected, unless...

CVE-2026-15060 systemd-machined: unprivileged users can terminate arbitrary processes

When systemd-machined = v259 or v258 with a custom polkit policy that allows register-machine access is running on a desktop system, an unprivileged user logged in a desktop graphical session can kill arbitrary processes, even privileged ones. - versions older than v259 are not affected, unless...

CVE-2026-15060

CVE-2026-15060 : The vulnerability affects systemd-machined on desktop systems running version ≥ v259 (or v258 with a local policy that permits the polkit action register-machine). An unprivileged user in a desktop graphical session can kill arbitrary processes, including privileged ones. Affecte...

CVE-2026-67290

A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can send specially crafted media data to a connected client. This malformed data can trigger a heap out-of-bounds read vulnerability within the TSMF FFmpeg decoder, leading to the client application crashing. This can...

CVE-2026-67296

A flaw was found in FreeRDP. A remote attacker can exploit a vulnerability in the Remote Desktop Protocol RDP Enhanced Input RDPEI server channel handler. By sending a malicious RDPEI message with an oversized declared body length, the attacker can force the server to allocate excessive memory,...

CVE-2026-67305

The FreeRDP Windows client contains a heap buffer overflow vulnerability. If a user pastes maliciously crafted, oversized clipboard data from an untrusted RDP server, it triggers memory corruption that may result in remote code execution...

CVE-2026-68579

A flaw was found in FreeRDP. A heap-based buffer overflow exists in the Windows clipboard client's CliprdrStreamRead function. A malicious or compromised Remote Desktop Protocol RDP server can send an oversized clipboard file contents response. When a user pastes this content, it causes an...

CVE-2026-67297

A vulnerability in FreeRDP allows a malicious RD Gateway to bypass client-side size limits by sending oversized chunked HTTP responses. This exhausts the client's memory, resulting in a Denial of Service DoS. Mitigation To mitigate this issue, FreeRDP clients should only connect to trusted Remote...

@ascua/electron (>=0.8.0, <=0.18.0), @eltmon/panctl (0.7.2-canary.3) +11 more potentially affected by CVE-2026-70612 via electron (>=40.0.0, <=40.8.5)

electron NPM version =40.0.0, =0.8.0, =4.0.0, =0.30.0, =0.8.0, =1.1.0-rc-1, =1.0.0, =1.142.0, =0.1.5, =1.2.1, =2.0.4, =3.24.1 Source cves: CVE-2026-70612 Source advisory: SNYK:JS-ELECTRON-18563336...

@0x-copilot/cli (>=0.1.0, <=0.2.0), @cafeai/cafe-code (>=0.0.35, <=0.0.36) +12 more potentially affected by CVE-2026-70606 via electron (>=42.0.0, <=42.4.1)

electron NPM version =42.0.0, =0.1.0, =0.0.35, =0.1.28, =0.1.0, =6.0.0, =0.0.0-alpha.1, =0.10.0, =0.1.4, =0.1.2, =0.1.1, =0.1.20 - sunrize 2.1.5 - wrap-it-up 0.0.17 Source cves: CVE-2026-70606 Source advisory: SNYK:JS-ELECTRON-18563352...