CVE-2026-85089

A flaw was found in FreeRDP. This vulnerability allows a remote attacker with low privileges to disclose sensitive information from the server or proxy process memory to a downstream client. This occurs because certain functions responsible for writing Save Session Info Protocol Data Units PDUs u...

CVE-2026-20280

creationtimestamp| type| source ---|---|--- 2026-09-03 08:46:02+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuudet/haavoittuvuus-2026-24 2026-09-03 11:04:46+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mumcje5hr22b 2026-09-03 11:04:47+00:00| seen|...

CVE-2026-20281

creationtimestamp| type| source ---|---|--- 2026-09-03 08:45:29+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=2046 2026-09-03 08:46:05+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuudet/haavoittuvuus-2026-24 2026-09-03 13:45:12+00:00| seen|...

CVE-2026-20355

creationtimestamp| type| source ---|---|--- 2026-09-03 08:45:03+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=2046 2026-09-03 08:46:09+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuudet/haavoittuvuus-2026-24 2026-09-03 10:44:22+00:00| seen|...

CVE-2026-84676

creationtimestamp| type| source ---|---|--- 2026-09-03 04:46:16+00:00| seen| https://www.hkcert.org/security-bulletin/jenkins-multiple-vulnerabilities20260903...

CVE-2026-84796

creationtimestamp| type| source ---|---|--- 2026-09-03 04:40:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mulmzieyi725...

CVE-2026-85089

creationtimestamp| type| source ---|---|--- 2026-09-03 03:45:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/6gne2scotqcce...

EUVD-2026-70299

FreeRDP versions 3.0.0 through 3.30.0 before 3.31.0 transmit uninitialized heap memory in Save Session Info PDU reserved padding fields. Three PDU writers in libfreerdp/core/info.c rdpwritelogoninfov2, rdpwritelogoninfoplain, and rdpwritelogoninfoex use StreamSeek instead of StreamZero for reserv...

CVE-2026-85089

FreeRDP versions 3.0.0 through 3.30.0 are affected by an information disclosure vulnerability in the Save Session Info PDU writers within libfreerdp/core/info.c. Three functions (rdp_write_logon_info_v2, rdp_write_logon_info_plain, and rdp_write_logon_info_ex) use Stream_Seek instead of Stream_Ze...

CVE-2026-85089 FreeRDP before 3.31.0 Information Disclosure via uninitialized heap memory

FreeRDP versions 3.0.0 through 3.30.0 before 3.31.0 transmit uninitialized heap memory in Save Session Info PDU reserved padding fields. Three PDU writers in libfreerdp/core/info.c rdpwritelogoninfov2, rdpwritelogoninfoplain, and rdpwritelogoninfoex use StreamSeek instead of StreamZero for reserv...

CVE-2026-85089 FreeRDP before 3.31.0 Information Disclosure via uninitialized heap memory

FreeRDP versions 3.0.0 through 3.30.0 before 3.31.0 transmit uninitialized heap memory in Save Session Info PDU reserved padding fields. Three PDU writers in libfreerdp/core/info.c rdpwritelogoninfov2, rdpwritelogoninfoplain, and rdpwritelogoninfoex use StreamSeek instead of StreamZero for reserv...

CVE-2026-85089

FreeRDP versions 3.0.0 through 3.30.0 before 3.31.0 transmit uninitialized heap memory in Save Session Info PDU reserved padding fields. Three PDU writers in libfreerdp/core/info.c rdpwritelogoninfov2, rdpwritelogoninfoplain, and rdpwritelogoninfoex use StreamSeek instead of StreamZero for reserv...

CVE-2026-85089 FreeRDP before 3.31.0 Information Disclosure via uninitialized heap memory

FreeRDP versions 3.0.0 through 3.30.0 before 3.31.0 transmit uninitialized heap memory in Save Session Info PDU reserved padding fields. Three PDU writers in libfreerdp/core/info.c rdpwritelogoninfov2, rdpwritelogoninfoplain, and rdpwritelogoninfoex use StreamSeek instead of StreamZero for reserv...

CVE-2026-67445

creationtimestamp| type| source ---|---|--- 2026-09-03 00:35:02+00:00| published-proof-of-concept| https://github.com/axllent/mailpit/security/advisories/GHSA-w878-pj84-3j5v 2026-09-03 05:32:21+00:00| seen| https://gist.github.com/alon710/25d950fb1b775a5961200e6e2792284d...

PT-2026-85110

Unauthenticated Cross Site Scripting XSS in EWWW Image Optimizer = 8.7.6 versions...

CVE-2026-85089: Use of Uninitialized Resource

FreeRDP versions 3.0.0 through 3.30.0 before 3.31.0 transmit uninitialized heap memory in Save Session Info PDU reserved padding fields. Three PDU writers in libfreerdp/core/info.c rdpwritelogoninfov2, rdpwritelogoninfoplain, and rdpwritelogoninfoex use StreamSeek instead of StreamZero for reserv...

PT-2026-85117

Unauthenticated SQL Injection in GeoDirectory = 2.8.174 versions...

PT-2026-85086

Subscriber Cross Site Scripting XSS in Graphene = 2.9.4 versions...

The vulnerability of the cqspi_remove() function in the drivers/spi/spi-cadence-quadspi.c module of the Linux operating system’s SPI device driver allows a hacker to disclose sensitive information or cause service failures.

The vulnerability of the cqspiremove function in the drivers/spi/spi-cadence-quadspi.c module of the Linux kernel’s SPI device driver relates to premature release of resources during its operation. Exploiting this vulnerability can allow an attacker to disclose sensitive information or cause syst...

The vulnerability of the btmtk_usb_hci_wmtSync() function in the drivers/bluetooth/btmtk.c module of the Linux kernel’s Bluetooth device driver allows a attacker to disclose confidential information or cause service failures.

The vulnerability of the btmtkusbhciwmtSync function in the drivers/bluetooth/btmtk.c module of the Linux Bluetooth kernel driver is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could allow an attacker to disclose sensitive information or...