📄 AnyDesk 9.0.4 Denial of Service

AnyDesk version 9.0.4 contains a local privilege-lacking vulnerability in its "Send Support Information" feature. An attacker with low-privileged local access can abuse NTFS junctions reparse points to redirect file write operations performed by the AnyDesk service. The service blindly follows th...

CVE-2026-15788

CVE-2026-15788 concerns BuildKit on Windows Containers (WCOW). The issue is that the cache mount source= selector does not detect NTFS directory junctions inside the cache root, allowing a build authored by an untrusted user to read arbitrary host files reachable to the BuildKit daemon process. A...

PT-2026-61699

Name of the Vulnerable Software and Affected Versions BuildKit affected versions not specified Description On Windows Container on Windows WCOW workers, the cache mount source= selector fails to detect NTFS directory junctions located within the cache root. This allows an untrusted user to author...