CVE-2026-67292

creationtimestamp| type| source ---|---|--- 2026-08-01 20:12:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms2bpofl4v2m 2026-08-04 09:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msapafceeg2s 2026-08-05 02:18:03+00:00| seen|...

CVE-2026-67292

FreeRDP before 3.29.0 contains a buffer over-disclosure vulnerability in the gateway WebSocket transport libfreerdp/core/gateway/websocket.c. The client's Pong reply reuses a fixed 1024-byte response stream whose length is not sealed to the actual received Ping payload, so a malicious...