Mad31K

An observable timing discrepancy in Windows Schannel allows an unauthorized attacker to execute arbitrary code over a network, which can affect the system.

An authentication bypass exists in Windows Kerberos due to the use of an alternate path or channel. This flaw allows an unauthorized attacker to elevate privileges over a network without requiring a login.

Cross-site scripting (XSS) vulnerability due to improper input validation. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 42587.

A security issue exists in RustDesk Client for Windows related to the Transfer File feature. A local attacker with low-privileged code execution capabilities can disclose sensitive information. This is achieved by uploading a symbolic link, which allows the service to read arbitrary files, potentially in the context of SYSTEM.

The issue is related to local privilege escalation due to insecure file permissions.