Pwn2Addr

**Name of the Vulnerable Software and Affected Versions** Windows RDP (affected versions not specified) **Description** An out-of-bounds read in Windows Remote Desktop Protocol (RDP) allows an unauthenticated and unauthorized attacker to disclose information from memory over a network. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Remote Desktop Client (affected versions not specified) **Description** A heap-based buffer overflow in the Remote Desktop Client allows an unauthorized attacker to execute arbitrary code over a network. This issue occurs when connecting to a malicious RDP target, which can lead to the attacker gaining control over the user's system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Remote Desktop Client (affected versions not specified) **Description** A heap-based buffer overflow allows an unauthorized attacker to execute arbitrary code over a network, which can affect the system. A heap-based buffer overflow occurs when an application writes more data to a heap-allocated memory block than it can hold, potentially corrupting adjacent memory. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Remote Desktop Client (affected versions not specified) **Description** A heap-based buffer overflow allows an unauthorized attacker to execute arbitrary code over a network, which can affect the system. A heap-based buffer overflow occurs when an application writes more data to a heap-allocated memory block than it can hold, potentially corrupting adjacent memory. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows RDP (affected versions not specified) **Description** An out-of-bounds read in Windows Remote Desktop Protocol (RDP) allows an unauthorized attacker to disclose information over a network. This issue enables unauthenticated snooping of sensitive data. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Remote Desktop Client (affected versions not specified) **Description** A heap-based buffer overflow in the Remote Desktop Client allows an unauthorized attacker to execute code over a network. A heap-based buffer overflow occurs when a program writes more data to a heap-allocated memory block than it can hold, potentially corrupting adjacent memory. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 148.0.7778.216 **Description** A use after free issue in the Document Object Model (DOM), which is the programming interface for web documents, allows a remote attacker to execute arbitrary code within a sandbox by utilizing a specially crafted HTML page. **Recommendations** Update to version 148.0.7778.216 or later.

**Name of the Vulnerable Software and Affected Versions** Microsoft Remote Desktop client for Windows Desktop versions 1.2.0.0 through 2.0.1069.0 **Description** A use-after-free vulnerability in the Remote Desktop Client allows an unauthorized remote attacker to execute arbitrary code over a network. This occurs by triggering memory corruption during client processing. Use-after-free is a condition where a program continues to use a pointer after it has been freed, which can lead to crashes or malicious code execution. **Recommendations** Update to version 2.0.1070.0.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 149 Firefox ESR versions prior to 140.9 Thunderbird versions prior to 149 Thunderbird versions prior to 140.9 **Description** The software contains issues related to incorrect boundary conditions and uninitialized memory within the JavaScript Engine component. **Recommendations** Update Firefox to version 149 or later. Update Firefox ESR to version 140.9 or later. Update Thunderbird to version 149 or later. Update Thunderbird to version 140.9 or later.