CVE-2026-68758

A low-privileged authenticated user may access restricted support information under specific conditions...

EUVD-2026-57255

A low-privileged authenticated user may access restricted support information under specific conditions...

CVE-2026-68758

A low-privileged authenticated user may access restricted support information under specific conditions...

📄 AnyDesk 9.0.4 Denial of Service

AnyDesk version 9.0.4 contains a local privilege-lacking vulnerability in its "Send Support Information" feature. An attacker with low-privileged local access can abuse NTFS junctions reparse points to redirect file write operations performed by the AnyDesk service. The service blindly follows th...

EUVD-2026-43543

AnyDesk Support Information Link Following Denial-of-Service Vulnerability. This vulnerability allows local attackers to create a denial-of-service condition on affected installations of AnyDesk. An attacker must first obtain the ability to execute low-privileged code on the target system in orde...

CVE-2026-15682

AnyDesk Support Information Link Following Denial-of-Service Vulnerability. This vulnerability allows local attackers to create a denial-of-service condition on affected installations of AnyDesk. An attacker must first obtain the ability to execute low-privileged code on the target system in orde...

CVE-2026-15682 AnyDesk Support Information Link Following Denial-of-Service Vulnerability

AnyDesk Support Information Link Following Denial-of-Service Vulnerability. This vulnerability allows local attackers to create a denial-of-service condition on affected installations of AnyDesk. An attacker must first obtain the ability to execute low-privileged code on the target system in orde...

CVE-2026-15682

AnyDesk Support Information Link Following Denial-of-Service Vulnerability. This vulnerability allows local attackers to create a denial-of-service condition on affected installations of AnyDesk. An attacker must first obtain the ability to execute low-privileged code on the target system in orde...

CVE-2026-15682 AnyDesk Support Information Link Following Denial-of-Service Vulnerability

AnyDesk Support Information Link Following Denial-of-Service Vulnerability. This vulnerability allows local attackers to create a denial-of-service condition on affected installations of AnyDesk. An attacker must first obtain the ability to execute low-privileged code on the target system in orde...

CVE-2026-15682

The CVE-2026-15682 vulnerability affects AnyDesk’s Send Support Information feature. By creating a junction, an attacker who can run low-privilege code locally can abuse the process to create arbitrary files, enabling a denial-of-service condition on affected installations. The flaw is localized ...

CVE-2026-15682: Improper Link Resolution Before File Access

AnyDesk Support Information Link Following Denial-of-Service Vulnerability. This vulnerability allows local attackers to create a denial-of-service condition on affected installations of AnyDesk. An attacker must first obtain the ability to execute low-privileged code on the target system in orde...

(0Day) AnyDesk Support Information Link Following Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of AnyDesk. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Send...

EUVD-2024-41271

Malicious code in bioql PyPI...

.NET 8.0 Update - March 11, 2025 (KB5054229)

.NET 8.0 Update - March 11, 2025 KB5054229 NET 8.0 has been refreshed with the latest update as of March 11, 2025. This update contains both security and non-security fixes. See the release notes for details on updated packages. .NET 8.0 servicing updates are upgrades. The latest servicing update...

Hitachi Energy Service Suite

SUMMARY Hitachi Energy is aware of the multiple vulnerabilities related to open-source Apache Tomcat components that affect the Service Suite product versions listed in this document. An attacker successfully exploiting these vulnerabilities can cause confidentiality, integrity and availability...

January 14, 2025—KB5050006 (Security-only update)

January 14, 2025—KB5050006 Security-only update Applies To Windows Server 2008 R2 Premium Assurance End of support information Note Windows Server 2008 R2 Premium Assurance ends on January 13, 2026. Windows Server 2008 R2 Extended Security Updates ESU ended on January 10, 2023. Additionally,...

KB5050116: Servicing stack update for Windows Server 2012: January 14, 2025

KB5050116: Servicing stack update for Windows Server 2012: January 14, 2025 Applies To Windows Server 2012 ESU End of support information Note Windows Server 2012 reached the end of support EOS on October 10, 2023. Extended Security Updates ESUs are available for purchase and will continue for...

.NET 8.0 Update - February 11, 2025 (KB5052978)

.NET 8.0 Update - February 11, 2025 KB5052978 NET 8.0 has been refreshed with the latest update as of February 11, 2025. This update contains non-security fixes. See the release notes for details on updated packages. .NET 8.0 servicing updates are upgrades. The latest servicing update for 8.0 wil...

CVE-2024-45805 OpenCTI leaks support information due to inadequate access control

OpenCTI is an open-source cyber threat intelligence platform. Before 6.3.0, general users can access information that can only be accessed by users with access privileges to admin and support information SETTINGSSUPPORT. This is due to inadequate access control for support information...

CVE-2024-45805 OpenCTI leaks support information due to inadequate access control

OpenCTI is an open-source cyber threat intelligence platform. Before 6.3.0, general users can access information that can only be accessed by users with access privileges to admin and support information SETTINGSSUPPORT. This is due to inadequate access control for support information...