CVE-2026-27951

A flaw was found in FreeRDP, a free implementation of the Remote Desktop Protocol. The StreamEnsureCapacity function can create an endless blocking loop, leading to a Denial of Service DoS. This vulnerability can be exploited on 32-bit systems where the available physical memory is greater than o...

CVE-2026-27950

A flaw was found in FreeRDP. An incomplete fix for a heap-use-after-free vulnerability CVE-2026-24680 in the SDL2 implementation allows a remote attacker to trigger a denial of service. The pointer is not nulled after being freed, which can lead to memory corruption. This issue means that...

CVE-2026-27015

A flaw was found in FreeRDP, a free implementation of the Remote Desktop Protocol. A malicious Remote Desktop Protocol RDP server can exploit a missing bounds check vulnerability in the smartcard redirection feature. This can lead to a client crash, resulting in a Denial of Service DoS for the...

CVE-2026-26271

A flaw was found in FreeRDP, a free implementation of the Remote Desktop Protocol. A remote attacker could exploit a buffer overread vulnerability by sending crafted Remote Desktop Protocol RDP Window Icon TSICONINFO data to a client. This could lead to a Denial of Service DoS on the client syste...

CVE-2026-26986

A flaw was found in FreeRDP, a free implementation of the Remote Desktop Protocol. This double free vulnerability occurs during the cleanup process when a remote desktop session disconnects. Specifically, if a title allocation fails, a pointer to an application window is freed but not removed fro...

CVE-2026-25997

A flaw was found in FreeRDP, a free implementation of the Remote Desktop Protocol. This vulnerability, a heap use-after-free, occurs during an auto-reconnect operation when the xfclipboardformatsfree function frees memory that is still being accessed by another thread. A remote attacker could...

CVE-2026-25959

A flaw was found in FreeRDP, a free implementation of the Remote Desktop Protocol. A remote attacker could exploit a race condition in the clipboard handling feature. This vulnerability, known as a heap use-after-free, occurs when the system attempts to use memory that has already been released...

CVE-2026-25955

A flaw was found in FreeRDP, a free implementation of the Remote Desktop Protocol. This use-after-free vulnerability occurs because the xfAppUpdateWindowFromSurface function reuses a cached image whose data pointer references a freed RDPGFX surface buffer. A remote attacker could exploit this fla...

CVE-2026-25954

A flaw was found in FreeRDP, a free implementation of the Remote Desktop Protocol RDP. A remote attacker could exploit a use-after-free vulnerability in the xfrailserverlocalmovesize function. This occurs because the xfrailgetwindow function returns an unprotected pointer, allowing a main thread ...

CVE-2026-25953

A flaw was found in FreeRDP, a free implementation of the Remote Desktop Protocol. This use-after-free vulnerability occurs in the xfAppUpdateWindowFromSurface function where a bare pointer to a window is obtained without proper lifetime protection. A remote attacker could exploit this by...

CVE-2026-25952

A flaw was found in FreeRDP. A remote attacker could exploit a use-after-free vulnerability in the xfSetWindowMinMaxInfo function. This occurs when a freed window pointer is dereferenced because the main thread concurrently deletes a window while the Remote Desktop Protocol RAIL channel thread is...

CVE-2026-25942

A flaw was found in FreeRDP. A malicious server can exploit this vulnerability by sending a specially crafted execResult value 7 or greater to the client. This unchecked value is used to index an array, leading to an out-of-bounds read in the xfrailserverexecuteresult function. This can potential...

CVE-2026-25941

A flaw was found in the FreeRDP client. A malicious Remote Desktop Protocol RDP server can exploit an out-of-bounds read vulnerability in the RDPGFX channel. By sending a specially crafted WIRETOSURFACE2 Protocol Data Unit PDU with a bitmapDataLength value exceeding the actual data, an attacker c...

CVE-2026-27494 n8n has Arbitrary File Read via Python Code Node Sandbox Escape

n8n is an open source workflow automation platform. Prior to versions 2.10.1, 2.9.3, and 1.123.22, an authenticated user with permission to create or modify workflows could use the Python Code node to escape the sandbox. The sandbox did not sufficiently restrict access to certain built-in Python...

CVE-2026-27494

n8n is an open source workflow automation platform. Prior to versions 2.10.1, 2.9.3, and 1.123.22, an authenticated user with permission to create or modify workflows could use the Python Code node to escape the sandbox. The sandbox did not sufficiently restrict access to certain built-in Python...

CVE-2026-27493

n8n is an open source workflow automation platform. Prior to versions 2.10.1, 2.9.3, and 1.123.22, a second-order expression injection vulnerability existed in n8n's Form nodes that could allow an unauthenticated attacker to inject and evaluate arbitrary n8n expressions by submitting crafted form...

CVE-2026-27727

A flaw was found in mchange-commons-java, a Java utility library. An attacker can exploit this vulnerability by providing a maliciously crafted javax.naming.Reference or serialized object to an application using the library. This can provoke the application to download and execute arbitrary...

CVE-2026-27699

A flaw was found in basic-ftp, an FTP client library. A malicious FTP server can exploit a path traversal vulnerability CWE-22 within the downloadToDir method. This allows the server to send directory listings containing special sequences that trick the client into writing files to unintended...

CVE-2026-3146

A flaw was found in libvips. A local user could trigger a null pointer dereference by manipulating the vipsforeignloadmatrixheader function. This vulnerability could lead to a Denial of Service DoS, causing the application to become unresponsive. Mitigation Mitigation for this issue is either not...

CVE-2026-3147

A flaw was found in libvips. A local attacker could exploit a heap-based buffer overflow vulnerability in the vipsforeignloadcsvbuild function. This vulnerability, triggered by manipulating CSV file loading, could lead to unauthorized information disclosure, denial of service DoS, or limited data...