FreeRDP: FreeRDP: Arbitrary code execution via malicious RDP files

A flaw in FreeRDP's file parser incorrectly treats lines starting with a forward slash / as command-line options. If a victim opens a maliciously crafted .rdp file, an attacker can silently inject CLI flags to execute arbitrary code, expose local filesystems, or bypass certificate validation...

CVE-2026-19481 @fastify/busboy vulnerable to Denial of Service via prototype-named multipart part header

@fastify/busboy is a multipart form-data parser. In versions 1.0.0 through 3.2.0, an attacker who can submit multipart form-data can crash the parser by sending a part header whose name is a prototype-inherited property such as proto or constructor. The internal header parser stores headers in a...

CVE-2026-19481 @fastify/busboy vulnerable to Denial of Service via prototype-named multipart part header

@fastify/busboy is a multipart form-data parser. In versions 1.0.0 through 3.2.0, an attacker who can submit multipart form-data can crash the parser by sending a part header whose name is a prototype-inherited property such as proto or constructor. The internal header parser stores headers in a...

CVE-2026-19481 @fastify/busboy vulnerable to Denial of Service via prototype-named multipart part header

@fastify/busboy is a multipart form-data parser. In versions 1.0.0 through 3.2.0, an attacker who can submit multipart form-data can crash the parser by sending a part header whose name is a prototype-inherited property such as proto or constructor. The internal header parser stores headers in a...

CVE-2026-19481

Summary: CVE-2026-19481 affects the multipart-form data parser in the @fastify/busboy package (versions 1.0.0–3.2.0). An attacker can submit multipart data with a part header named after a prototype-inherited property (e.g., proto , constructor), causing the header parser (which stores headers in...

CVE-2026-19694

TTX Logger file parser crash in 4.6.0 to 4.6.7 allows denial of service...

CVE-2026-19694 Heap-based Buffer Overflow in Wireshark

TTX Logger file parser crash in 4.6.0 to 4.6.7 allows denial of service...

EUVD-2026-57745

TTX Logger file parser crash in 4.6.0 to 4.6.7 allows denial of service...

CVE-2026-19694 Heap-based Buffer Overflow in Wireshark

TTX Logger file parser crash in 4.6.0 to 4.6.7 allows denial of service...

CVE-2026-19694

TTX Logger file parser crash in 4.6.0 to 4.6.7 allows denial of service...

CVE-2026-19694

TTX Logger file parser crash in 4.6.0 to 4.6.7 allows denial of service...

CVE-2026-19695 Stack-based Buffer Overflow in Wireshark

Gammu DCT3 trace file parser crash in 4.6.0 to 4.6.7 allows denial of service...

CVE-2026-19695

Gammu DCT3 trace file parser crash in 4.6.0 to 4.6.7 allows denial of service...

CVE-2026-19695 Stack-based Buffer Overflow in Wireshark

Gammu DCT3 trace file parser crash in 4.6.0 to 4.6.7 allows denial of service...

CVE-2026-19695

CVE-2026-19695 affects Wireshark via a stack-based buffer overflow in the Gammu DCT3 trace file parser, with crashes reported in Wireshark 4.6.0–4.6.7 that allow denial of service. Core details in the connected CVE entries indicate the vulnerability is tied to the DCT3 trace file parsing code, ca...

CVE-2026-19695 Stack-based Buffer Overflow in Wireshark

Gammu DCT3 trace file parser crash in 4.6.0 to 4.6.7 allows denial of service...

CVE-2026-19695

Gammu DCT3 trace file parser crash in 4.6.0 to 4.6.7 allows denial of service...

CVE-2026-19695

Gammu DCT3 trace file parser crash in 4.6.0 to 4.6.7 allows denial of service...

EUVD-2026-57744

Gammu DCT3 trace file parser crash in 4.6.0 to 4.6.7 allows denial of service...

CVE-2026-19696

CVE-2026-19696 concerns an out-of-bounds write in Wireshark’s BLF file parser, affecting Wireshark versions 4.6.0 through 4.6.7 and potentially causing a denial-of-service on Windows. The vulnerability is triggered during parsing of BLF files (as used by Ixia IxVeriWave and Vector Informatik flow...