Security Advisory

CVE-2026-44420

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-05-29 19:42:23

Last updated 2026-07-17 12:04:43

Assigner GitHub_M

CVSS score 8.8

State PUBLISHED

Description

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, a malicious RDP client can trigger a heap-buffer-overflow write in FreeRDP's server-side clipboard (cliprdr) channel by sending a CB_CLIP_CAPS PDU with a too-small capabilitySetLength. This can crash the server process (remote DoS) and may be exploitable for code execution because it corrupts heap memory. This vulnerability is fixed in 3.26.0.

← Browse all CVEs View on cve.org ↗