CVE-2026-69940: Out-of-bounds Read

Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network...

CVE-2026-70149: Heap-based Buffer Overflow

Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver csc.sys allows an authorized attacker to disclose information locally...

CVE-2026-69955: Out-of-bounds Read

Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network...

CVE-2026-96948: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver csc.sys allows an authorized attacker to disclose information locally...

CVE-2026-96912: Use After Free

Use after free in Windows Client License Service allows an authorized attacker to elevate privileges locally...

PT-2026-111880

Name of the Vulnerable Software and Affected Versions Windows Client License Service affected versions not specified Description A heap-based buffer overflow occurs in the Windows Client License Service. This issue allows an authorized attacker to elevate privileges locally on the system. A...

Microsoft Remote Desktop Client Buffer Overflow RCE

The vulnerability of the Microsoft Remote Desktop Client for Windows client involves the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

CVE-2026-79807 Authenticated Local Missing Integrity Verification Vulnerability leads to Local Privilege Escalation in the ClearPass Policy Manager Windows Client Software

A missing integrity verification vulnerability in the Windows client software for ClearPass Policy Manager could allow malicious users on a local instance to elevate their user privileges. A successful exploit could allow these users to execute attacker-supplied code with elevated privileges on t...

CVE-2026-79807

The ClearPass Policy Manager Windows client software contains a missing integrity verification vulnerability. This flaw could allow an authenticated local user to perform Local Privilege Escalation , enabling them to execute arbitrary code with elevated privileges on the local system. No specific...

CVE-2026-79807 Authenticated Local Missing Integrity Verification Vulnerability leads to Local Privilege Escalation in the ClearPass Policy Manager Windows Client Software

A missing integrity verification vulnerability in the Windows client software for ClearPass Policy Manager could allow malicious users on a local instance to elevate their user privileges. A successful exploit could allow these users to execute attacker-supplied code with elevated privileges on t...

CVE-2026-84386

A unverified ownership vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.7, FortiClientWindows 7.2 all versions may allow attacker to improper access control via via an exposed minifilter communication port...

PT-2026-87178

A unverified ownership vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.7, FortiClientWindows 7.2 all versions may allow attacker to improper access control via...

PALLET CONTROL products vulnerable to improper access control

Overview PALLET CONTROL products provided by JAL Digital Co.,Ltd. include multiple service programs that run in the background and provide certain functions. However, access to these service programs is not properly restricted, allowing non-administrative users to access them. Improper access...

UBUNTU-CVE-2026-68579

FreeRDP before 3.30.0 = 3.29.0 contains a heap-based buffer overflow in the Windows clipboard client's CliprdrStreamRead function client/Windows/wfcliprdr.c. When an OLE paste consumer e.g. explorer.exe calls IStream::Read with a fixed-size buffer of cb bytes, CliprdrStreamRead requests file...

CVE-2026-67305

FreeRDP Windows client before 3.29.0 contains a heap buffer overflow vulnerability in the clipboard virtual channel when processing CLIPRDRFILECONTENTSRESPONSE PDUs without validating the server-provided size against the destination buffer. A malicious RDP server can send a response with a data...

CVE-2026-67305

FreeRDP Windows client before 3.29.0 contains a heap buffer overflow vulnerability in the clipboard virtual channel when processing CLIPRDRFILECONTENTSRESPONSE PDUs without validating the server-provided size against the destination buffer. A malicious RDP server can send a response with a data...

EUVD-2026-51862

FreeRDP Windows client before 3.29.0 contains a heap buffer overflow vulnerability in the clipboard virtual channel when processing CLIPRDRFILECONTENTSRESPONSE PDUs without validating the server-provided size against the destination buffer. A malicious RDP server can send a response with a data...

CVE-2026-67305

FreeRDP Windows client (before 3.29.0) has a heap buffer overflow in the clipboard virtual channel (CLIPRDR_FILE_CONTENTS_RESPONSE PDUs) due to lack of validation of the server-provided size against the destination buffer. A malicious RDP server could send a payload larger than requested, causing...

PT-2026-67285

Name of the Vulnerable Software and Affected Versions FreeRDP Windows client versions prior to 3.29.0 Description A heap buffer overflow occurs in the clipboard virtual channel when processing CLIPRDR FILE CONTENTS RESPONSE PDUs Protocol Data Units because the server-provided size is not validate...

CVE-2026-53410

CVE-2026-53410 describes a TOCTOU race condition in the installation and uninstallation flow of certain Zoom Clients for Windows that could allow an authenticated local user to escalate privileges. Affected components include Zoom Workplace for Windows, Zoom Workplace VDI Client, Zoom Workplace V...