CVE-2026-44978

xrdp is an open source RDP server. Versions 0.10.6 and prior contain a heap out-of-bounds read vulnerability within the FIPS-specific receive paths. This vulnerability does not affect the default configuration of xrdp. The vulnerability is only exploitable when the security layer is set to...

CVE-2026-44978

xrdp is an open source RDP server. Versions 0.10.6 and prior contain a heap out-of-bounds read vulnerability within the FIPS-specific receive paths. This vulnerability does not affect the default configuration of xrdp. The vulnerability is only exploitable when the security layer is set to...

CVE-2026-44978 xrdp: Unchecked FIPS padding length in standard RDP Security causes heap out-of-bounds read in HMAC verification

xrdp is an open source RDP server. Versions 0.10.6 and prior contain a heap out-of-bounds read vulnerability within the FIPS-specific receive paths. This vulnerability does not affect the default configuration of xrdp. The vulnerability is only exploitable when the security layer is set to...

CVE-2026-44978 xrdp: Unchecked FIPS padding length in standard RDP Security causes heap out-of-bounds read in HMAC verification

xrdp is an open source RDP server. Versions 0.10.6 and prior contain a heap out-of-bounds read vulnerability within the FIPS-specific receive paths. This vulnerability does not affect the default configuration of xrdp. The vulnerability is only exploitable when the security layer is set to...

CVE-2026-44978

Summary: xrdp versions up to 0.10.6 contain a heap out-of-bounds read in the FIPS-specific receive paths when non-default security_layer and crypt_level are used. An unauthenticated remote attacker can trigger a denial-of-service by sending a crafted FIPS-protected PDU, via a non-default mode (se...

OESA-2026-3005 edk2 security update

EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications. Security Fixes: Issue summary: A specially crafted password-encrypted CMS message can trigger a NULL pointer dereference during CMS decryption. Impact summary: This NULL pointer...

CVE-2026-53715 vulnerabilities

Vulnerabilities for packages: gitlab-operator, datadog-agent-fips, tigera-operator-fips, tigera-operator, datadog-agent, gitlab-operator-fips...

GHSA-M2V6-2JMH-4C68 vulnerabilities

Vulnerabilities for packages: gitlab-operator, datadog-agent-fips, tigera-operator-fips, tigera-operator, datadog-agent, gitlab-operator-fips...

GHSA-CXPQ-8V7Q-CG56 vulnerabilities

Vulnerabilities for packages: gitlab-operator, datadog-agent-fips, tigera-operator-fips, tigera-operator, datadog-agent, gitlab-operator-fips...

GHSA-8FV2-88GG-HM7Q vulnerabilities

Vulnerabilities for packages: gitlab-operator, datadog-agent-fips, tigera-operator-fips, tigera-operator, datadog-agent, gitlab-operator-fips...

CVE-2026-53717 vulnerabilities

Vulnerabilities for packages: gitlab-operator, datadog-agent-fips, tigera-operator-fips, tigera-operator, datadog-agent, gitlab-operator-fips...

CVE-2026-53714 vulnerabilities

Vulnerabilities for packages: gitlab-operator, datadog-agent-fips, tigera-operator-fips, tigera-operator, datadog-agent, gitlab-operator-fips...

GHSA-22XC-XG2R-9J7V vulnerabilities

Vulnerabilities for packages: gitlab-operator, datadog-agent-fips, tigera-operator-fips, tigera-operator, datadog-agent, gitlab-operator-fips...

GHSA-FCRP-7GC2-93G7 vulnerabilities

Vulnerabilities for packages: gitlab-operator, datadog-agent-fips, tigera-operator-fips, tigera-operator, datadog-agent, gitlab-operator-fips...

CVE-2026-53718 vulnerabilities

Vulnerabilities for packages: gitlab-operator, datadog-agent-fips, tigera-operator-fips, tigera-operator, datadog-agent, gitlab-operator-fips...

CVE-2026-53713 vulnerabilities

Vulnerabilities for packages: gitlab-operator, datadog-agent-fips, tigera-operator-fips, tigera-operator, datadog-agent, gitlab-operator-fips...

GHSA-H7PQ-86H8-RP5X vulnerabilities

Vulnerabilities for packages: gitlab-operator, datadog-agent-fips, tigera-operator-fips, tigera-operator, datadog-agent, gitlab-operator-fips...

GHSA-WCRF-9VRR-854F vulnerabilities

Vulnerabilities for packages: gitlab-operator, datadog-agent-fips, tigera-operator-fips, tigera-operator, datadog-agent, gitlab-operator-fips...

CVE-2026-50274 vulnerabilities

Vulnerabilities for packages: eks-distro, eks-distro-fips, vitess, kubernetes-dns-node-cache, kubernetes-dns-node-cache-fips, traefik, datadog-agent-fips, buildkite-agent, traefik-fips, coder-fips, coder, datadog-agent, buildkite-agent-fips...

GHSA-74J5-XF3V-CRQ8 vulnerabilities

Vulnerabilities for packages: eks-distro, eks-distro-fips, vitess, kubernetes-dns-node-cache, kubernetes-dns-node-cache-fips, traefik, datadog-agent-fips, buildkite-agent, traefik-fips, coder-fips, coder, datadog-agent, buildkite-agent-fips...