Security Advisory

CVE-2026-91957

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-09-15 15:18:12

Last updated 2026-09-15 15:18:12

Assigner VulnCheck

CVSS score 3.1

State PUBLISHED

Description

FreeRDP before 3.31.0 contains a use-after-free vulnerability in the smartcard RDPDR device handler when worker thread creation fails after device registration. Attackers can trigger thread creation failure during channel setup to cause device pointer deallocation while devman retains a reference, leading to crash or code execution.

← Browse all CVEs View on cve.org ↗