Beveiligingsadvies

CVE-2026-56297

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-07-08 13:49:01

Laatst bijgewerkt 2026-07-08 14:23:00

Toegewezen door VulnCheck

CVSS-score 8.3

Status PUBLISHED

Beschrijving

FreeRDP before 3.22.0 contains a use-after-free vulnerability in dvcman_channel_close and dvcman_call_on_receive due to improper synchronization of channel_callback access. A malicious RDP server can trigger a race condition by sending DYNVC_DATA and DYNVC_CLOSE messages concurrently, causing heap-use-after-free in the drdynvc client thread and potentially enabling remote code execution or denial of service.

← Alle CVE's bekijken Bekijk op cve.org ↗