Beveiligingsadvies

CVE-2026-91960

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-15 15:18:14

Laatst bijgewerkt 2026-09-15 15:56:30

Toegewezen door VulnCheck

CVSS-score 7.1

Status PUBLISHED

Beschrijving

FreeRDP versions before 3.31.0 contain an integer overflow in WinPR's Stream_EnsureRemainingCapacity function that allows remote attackers to cause denial of service. A malicious RD Gateway peer can send a WebSocket Ping frame with a crafted 64-bit extended payload length to trigger integer wraparound, resulting in a double free that crashes the FreeRDP client during connection.

← Alle CVE's bekijken Bekijk op cve.org ↗