Windows Remote Desktop Services Information Disclosure Vulnerability

Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to disclose information locally...

Windows Remote Desktop Services Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally...

Remote Desktop Services Remote Code Execution Vulnerability

Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network...

Remote Desktop Services Remote Code Execution Vulnerability

Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network...

Windows Remote Desktop Services Elevation of Privilege Vulnerability

Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network...

Windows Management Services Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Management Services allows an authorized attacker to elevate privileges over a network...

Remote Desktop Services Remote Code Execution Vulnerability

Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network...

Remote Desktop Services Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to execute code over a network...

CVE-2026-86590

In Eclipse Che versions 7.79.0 through 7.121.0, the dashboard backend's POST /dashboard/api/data/resolver endpoint passes a caller-supplied URL directly to an outbound HTTP GET request with no host filtering. An authenticated user can exploit this server-side request forgery SSRF to read response...

PT-2026-87022

In Eclipse Che versions 7.79.0 through 7.121.0, the dashboard backend's POST /dashboard/api/data/resolver endpoint passes a caller-supplied URL directly to an outbound HTTP GET request with no host filtering. An authenticated user can exploit this server-side request forgery SSRF to read response...

PT-2026-87534

🚨 HIGH SEVERITY: CVE-2026-69514 CVSS 7.5 Heap buffer overflow in Windows Remote Desktop Services enables remote code execution by authenticated attackers. Patch immediately. CVE Vulnerability PatchNow ThreatIntel DFIR https://t.co/h112imW6bc...

CVE-2026-72957: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Deployment Services allows an authorized attacker to execute code locally...

CVE-2026-86735: Server-Side Request Forgery (SSRF)

snipe-it versions before 8.7.0 contain a server-side request forgery vulnerability in the ExternalUrl validation rule that fails to detect IPv6 transition addresses encoding private IPv4 targets. Attackers with super-admin privileges can configure webhook URLs using NAT64, 6to4, or Teredo...

PT-2026-87618

Name of the Vulnerable Software and Affected Versions Windows Remote Desktop Services affected versions not specified Description An out-of-bounds read occurs in Windows Remote Desktop Services, which allows an authorized attacker to disclose sensitive information locally. An out-of-bounds read i...

CVE-2026-69624: Incomplete List of Disallowed Inputs

Incomplete list of disallowed inputs in Active Directory Certificate Services AD CS allows an authorized attacker to perform tampering over a network...

CVE-2026-69395: Use of Externally-Controlled Format String

Use of externally-controlled format string in Active Directory Certificate Services AD CS allows an authorized attacker to disclose information over a network...

CVE-2026-58611: Improper Authorization

Improper authorization in XBox Gaming Services allows an authorized attacker to elevate privileges locally...

CVE-2026-69546: Use After Free

Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network...

PT-2026-87556

Name of the Vulnerable Software and Affected Versions Active Directory Domain Services affected versions not specified Description A use after free issue in Active Directory Domain Services allows an unauthorized attacker to execute arbitrary code over a network, which can affect the system. Use...

PT-2026-87539

Name of the Vulnerable Software and Affected Versions Active Directory Domain Services affected versions not specified Description A use after free issue in Active Directory Domain Services allows an unauthorized attacker to execute arbitrary code over a network, which can affect the system. Use...