60
35
42
60
60
35
60
42
30
30
42
60
60
42
47
55
60
42
47
42
60
60
Latest Microsoft Updates Patch 4 Critical Flaws In Windows RDP Client
60
Microsoft plugs wormable RDP flaw, new speculative execution side channel vulnerabilities
60
55
47
ZDI-26-556: Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability
ZDI discloses Parallels RAS Client RDP backend service flaw (CVE-2026-18263, CVSS 7.8) letting local attackers escalate privileges.
ZDI advisory ZDI-26-556 covers an exposed dangerous function in the Parallels RAS Client's RDP backend service, tracked as CVE-2026-18263 with a CVSS rating of 7.8. A local attacker who can already execute low-privileged code on the target system can use the flaw to escalate privileges.
30
ZDI-26-555: Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability
ZDI discloses CVE-2026-18262, a CVSS 7.8 exposed dangerous function in Parallels RAS Client's RDP backend service allowing local privilege escalation.
ZDI advisory ZDI-26-555 describes an exposed dangerous function in the Parallels RAS Client RDP backend service, tracked as CVE-2026-18262 with a CVSS score of 7.8. The flaw allows local attackers to escalate privileges on affected installations. Exploitation requires first obtaining the ability to execute low-privileged code on the target system.
20
March 2022 Patch Tuesday: Microsoft fixes RCEs in RDP client, Exchange Server
60
47
60
60
60
55
Critical NetScaler Flaw Can Bypass Authentication on Certain Gateway and AAA Servers
Citrix patches critical NetScaler Gateway and AAA authentication bypass CVE-2026-19490 (CVSS 9.3) plus a SIP ALG memory overflow flaw; exploitation attempts observed.
Citrix fixed CVE-2026-19490 (CVSS 9.3), an authentication bypass affecting customer-managed NetScaler ADC and Gateway appliances configured as Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or AAA virtual servers, and CVE-2026-19489 (CVSS 8.8), a memory overflow causing DoS when SIP ALG is enabled in Large Scale NAT groups. Updates are available in versions 14.1-73.32, 13.1-63.21, and corresponding FIPS/NDcPP builds, while Citrix-managed cloud services were already patched. The flaws were reported by Samarth Vashisht of JPMorgan Chase's penetration-testing team, and Previdian later observed 10 exploitation attempts against CVE-2026-19490 from six unique IP addresses in Australia, Germany, Japan, and the US, with no confirmed compromise.
72
47
60
55
55
30