https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T19:28:47.238573+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-15958 bdu:2026-15958 2026-10-08T19:28:47.245101+00:00 bdu:2026-15958 https://cve.radiocsirt.org/vuln/euvd-2026-333960 EUVD-2026-333960 2026-10-08T19:28:47.245136+00:00 EUVD-2026-333960 https://cve.radiocsirt.org/vuln/fkie_cve-2026-56297 fkie_cve-2026-56297 2026-10-08T19:28:47.245151+00:00

FreeRDP before 3.22.0 contains a use-after-free vulnerability in dvcman_channel_close and dvcman_call_on_receive due to improper synchronization of channel_callback access. A malicious RDP server can trigger a race condition by sending DYNVC_DATA and DYNVC_CLOSE messages concurrently, causing heap-use-after-free in the drdynvc client thread and potentially enabling remote code execution or denial of service.

 https://cve.radiocsirt.org/vuln/ghsa-392f-f2j5-97qm GHSA-392f-f2j5-97qm 2026-10-08T19:28:47.245180+00:00

FreeRDP before 3.22.0 contains a use-after-free vulnerability in dvcman_channel_close and dvcman_call_on_receive due to improper synchronization of channel_callback access. A malicious RDP server can trigger a race condition by sending DYNVC_DATA and DYNVC_CLOSE messages concurrently, causing heap-use-after-free in the drdynvc client thread and potentially enabling remote code execution or denial of service.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-56297 UBUNTU-CVE-2026-56297 2026-10-08T19:28:47.245197+00:00

Affected: Ubuntu:16.04:LTS: freerdp, Ubuntu:Pro:18.04:LTS: freerdp2, Ubuntu:18.04:LTS: freerdp, Ubuntu:Pro:20.04:LTS: freerdp2, Ubuntu:22.04:LTS: freerdp2, Ubuntu:24.04:LTS: freerdp3, Ubuntu:Pro:24.04:LTS: freerdp2, Ubuntu:25.10: freerdp3

FreeRDP before 3.22.0 contains a use-after-free vulnerability in dvcman_channel_close and dvcman_call_on_receive due to improper synchronization of channel_callback access. A malicious RDP server can trigger a race condition by sending DYNVC_DATA and DYNVC_CLOSE messages concurrently, causing heap-use-after-free in the drdynvc client thread and potentially enabling remote code execution or denial of service.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2248 WID-SEC-W-2026-2248 — FreeRDP: Schwachstelle ermöglicht Codeausführung und Denial of Service 2026-10-08T19:28:47.245229+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in FreeRDP ausnutzen, um beliebigen Programmcode auszuführen, und um einen Denial of Service Angriff durchzuführen.