CVE-2026-121389

概要

参考情報

• FreeRDP/FreeRDP security advisory · Vendor Advisory
• vulncheck.com/advisories/freerdp-3.27.0-before-3.32.2-client-dos-via-rdpdr-device-announcement-logging · Third Party Advisory

freerdp のその他の脆弱性

• CVE-2026-121964高 7.5FreeRDP before 3.32.2 contains a heap-based buffer overflow in the RD Gateway RPC client, where rpc_client_recv_fragment writes BIND_ACK and…
• CVE-2026-121963中 5.9FreeRDP before 3.32.2 contains a use-after-free vulnerability in the asynchronous dynamic rdpsnd channel that allows malicious RDP servers t…
• CVE-2026-121962高 8.1FreeRDP before 3.32.2 contains a heap buffer overflow in transport_default_read_pdu when handling partial Early User Authorization reads dur…
• CVE-2026-121961中 5.9FreeRDP before 3.32.2 contains a use-after-free vulnerability in the freerdp-proxy DRDYNVC tracker when intercepting the drdynvc channel. A …
• CVE-2026-121960高 7.5FreeRDP before 3.32.2 contains a denial of service vulnerability in the NLA-enabled shadow server when a CredSSP TSRequest omits negoTokens.…