https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T07:51:53.334387+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-91947 CVE-2026-91947 — FreeRDP Server before 3.31.0 Use-After-Free via DRDYNVC 2026-10-08T07:51:53.351322+00:00

Affected: FreeRDP

FreeRDP server versions before 3.31.0 contain a use-after-free vulnerability in the DRDYNVC parser that dereferences a channel pointer after releasing the synchronization lock. Authenticated clients can race AUDIN channel closure messages against DRDYNVC data parsing to trigger heap-use-after-free when accessing freed channel objects.