Rezultati pretraživanja za 'Od datuma: 01.11.2024.'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-109255 | 6.8 | FreeRDP 3.0.0 before 3.32.0 contains an integer truncation vulnerability in license_check_stream_length that allows a malicious RDP server to trigger a heap buffer overflow on 32-bit clients. Attackers can send a crafted SERVER_LICENSE_REQUEST with a | 2026-10-12 17:17:16 | 2026-10-12 17:17:16 |
| CVE-2026-109254 | 5.9 | FreeRDP 2.1.0 before 3.32.0 contains a use-after-free vulnerability in the static rdpsnd channel disconnect path, which frees audio formats and device without joining play_thread. A malicious RDP server can disconnect while asynchronous Wave2 playbac | 2026-10-12 17:17:16 | 2026-10-12 17:17:16 |
| CVE-2026-109253 | 5.3 | FreeRDP from 3.9.0 before 3.32.0 contains an out-of-bounds read vulnerability in the RDPEAR NDR scalar readers, which check value length before consuming alignment padding. Malicious or compromised RDP servers can send crafted unaligned RDPEAR payloa | 2026-10-12 17:17:16 | 2026-10-12 17:17:16 |
| CVE-2026-109252 | 5.3 | FreeRDP from 3.9.0 before 3.32.0 contains a NULL pointer dereference vulnerability in the RDPEAR NDR reader that allows malicious servers to crash clients via truncated KERB_RPC_INTERNAL_NAME data. Attackers can send a CreateApReqAuthenticatorReq wit | 2026-10-12 17:17:16 | 2026-10-12 17:17:16 |
| CVE-2026-109251 | 5.3 | FreeRDP before 3.32.0 stores the server-supplied signed MS-RDPEGT geometry origin unchecked in an unsigned video surface coordinate, so the blit clamp in gdiVideoShowSurface() wraps in 32-bit arithmetic and is skipped. A malicious RDP server can send | 2026-10-12 17:17:16 | 2026-10-12 17:17:16 |
| CVE-2026-109250 | 6.6 | FreeRDP 3.0.0 before 3.32.0 contains a heap buffer overflow vulnerability in collect_keys() that allows local attackers to write past the fixed 64-entry keys array during PKCS#11 key enumeration. Attackers controlling smartcard tokens can present mor | 2026-10-12 17:17:16 | 2026-10-12 17:17:16 |
| CVE-2026-109249 | 5.5 | FreeRDP 3.0.0 before 3.32.0 contains a heap out-of-bounds read in freerdp_assistance_parse_all_elements_of() because it advances its parsing cursor without reducing the remaining length, letting the scan window exceed the decrypted ConnectionString2 | 2026-10-12 17:17:16 | 2026-10-12 17:17:16 |
| CVE-2026-109248 | 6.5 | FreeRDP 3.0.0 before 3.32.0 contains a heap out-of-bounds read in the WinPR clipboard function convert_filedescriptors_to_file_list(), which scans a server-controlled FILEDESCRIPTORW cFileName with unbounded _wcschr() and count_special_chars() calls | 2026-10-12 17:17:15 | 2026-10-12 17:17:15 |
| CVE-2026-109247 | 3.1 | FreeRDP before 3.32.0 contains a path traversal vulnerability in convert_filedescriptors_to_file_list() in winpr/libwinpr/clipboard/synthetic_file.c, which concatenates server-supplied cFileName values from FileGroupDescriptorW clipboard data into th | 2026-10-12 17:17:15 | 2026-10-12 17:17:15 |
| CVE-2026-109246 | 6.5 | FreeRDP before 3.32.0 contains a divide-by-zero vulnerability in the freerdp-shadow-cli shadow server: the frame id in a client's Frame Acknowledge PDU is stored without a range check, so the in-flight frame count in shadow_encoder_inflight_frames() | 2026-10-12 17:17:15 | 2026-10-12 17:17:15 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/13174
Zapisa po stranici: