FreeRDP versions 3.29.0 before 3.32.0 contain an integer overflow in the Apple audin backends (CVE-2026-111380) that leads to a heap out-of-bounds write. VulnCheck as the CNA rates the flaw 8.8 under CVSS 3.1 and 8.7 under CVSS 4.0.
A malicious RDP server can supply a FramesPerPacket value of 2^30 inside the audin Open PDU.
The overflow produces undersized AudioQueueAllocateBuffer allocations.
Tap a lens to see what this story means for you.
Liked this? The Brief brings you the whole day in tech, verified, every morning.
Two minutes, free forever. What's in The Brief →
See what’s happening right now
The Feed runs all day — short, verified briefs the moment they break.
Open the FeedFollow @thecircuitry_
Every story we publish, as it happens. No noise between.
Reader-supported
The Circuitry is a passion project I've always wanted to build, and I love the work behind it.
Running it costs real money. APIs, hosting, time. To keep improving the site and growing this into something useful for everyone, those costs have to be covered.
Any contribution is appreciated. If not, no pressure. Thanks for reading.
Lenovo disclosed CVE-2026-92629, a high-severity improper authorization flaw in Baiying PC Client versions before 1.1.0.295 that could allow local authenticated users to execute arbitrary code with elevated privileges. Lenovo PSIRT as the CNA rates the issue 7.3 under CVSS 3.1 and 7.0 under CVSS 4.0.
Lenovo has fixed CVE-2026-75941 in the Legion Zone application before version 2.0.28.8182. Lenovo PSIRT as CNA rates the flaw 8.0 under CVSS 3.1 and 8.6 under CVSS 4.0, allowing same-network arbitrary code execution in the China-only app.
Renovate before 44.79.0 and five Mend Renovate products have a high-severity SSRF flaw, CVE-2026-110868, that can expose cloud credentials. VulnCheck rates it 8.5 under CVSS 3.1.
CISA has included CVE-2026-21589 in its known exploited list, covering eight Atlassian Data Center products with a short compliance window.
Juniper has patched CVE-2026-102023, a flaw in Junos OS Evolved that lets an attacker knock a device's firewall statistics process over with an SNMP request when a firewall counter is set up. Juniper, the CVE numbering authority, scores it 7.5 under CVSS 3.1 and 8.7 under CVSS 4.0.
