Flaw in Synergy Allows Clipboard Data Overflow
Article Content
- •CVE-2026-65976 allows clipboard data overflow in Synergy.
- •Affected versions are prior to Synergy 1.21.2.
- •A patch has been released to mitigate the vulnerability.
A vulnerability, CVE-2026-65976, has been identified in Synergy, allowing connected peers to exceed clipboard size limits, potentially leading to memory exhaustion. The flaw arises from improper handling of clipboard data during assembly, where incoming data can bypass configured limits, resulting in unbounded memory use. This vulnerability affects all versions of Synergy prior to 1.21.2 and is particularly concerning as it can be exploited over TLS by authenticated peers. The issue is linked to similar vulnerabilities in Deskflow, indicating shared code between the two products. A patch has been released in Synergy version 1.21.2 to address this flaw. The advisory will be published following the release of the fix.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (6)
Following this threat?
Track CVE-2026-65976 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
Which versions of Synergy are affected?
What should I do to protect my systems?
Is this vulnerability currently being exploited?
Continue Reading
CVE-2015-3306 Exploited in ProFTPD FTP Servers CVE-2015-3306, a vulnerability in ProFTPD 1.3.5, allows remote attackers to read and write arbitrary files using the SITE CPFR and SITE CPTO commands. This exploit can lead to unauthorized access and potential remote code execution, as the commands are executed with the privileges of the ProFTPD service. Active… 
CISA Mandates Urgent Patching of Five Critical Flaws Exploited by Flax Typhoon The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch five critical vulnerabilities by October 11, 2026, following exploitation by the China-linked hacking group Flax Typhoon. The vulnerabilities, added to CISA's Known Exploited Vulnerabilities (KEV) catalog, include…