Lucene search
+L

229 matches found

Vulnrichment
Vulnrichment
•added 2026/01/14 5:53 p.m.•7 views

CVE-2026-22857 FreeRDP has a heap-use-after-free in irp_thread_func

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a heap use-after-free occurs in irpthreadfunc because the IRP is freed by irp-Complete and then accessed again on the error path. This vulnerability is fixed in 3.20.1...

7.7CVSS6.5AI score0.00519EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2026/01/14 5:53 p.m.•9 views

CVE-2026-22857

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a heap use-after-free occurs in irpthreadfunc because the IRP is freed by irp-Complete and then accessed again on the error path. This vulnerability is fixed in 3.20.1...

9.8CVSS5.6AI score0.00519EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2026/01/14 5:53 p.m.•59 views

CVE-2026-22857 FreeRDP has a heap-use-after-free in irp_thread_func

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a heap use-after-free occurs in irpthreadfunc because the IRP is freed by irp-Complete and then accessed again on the error path. This vulnerability is fixed in 3.20.1...

7.7CVSS0.00519EPSS
SaveExploits1References2
Debian CVE
Debian CVE
•added 2026/01/14 5:53 p.m.•17 views

CVE-2026-22857

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a heap use-after-free occurs in irpthreadfunc because the IRP is freed by irp-Complete and then accessed again on the error path. This vulnerability is fixed in 3.20.1...

9.8CVSS5.5AI score0.00519EPSS
SaveExploits1
AlpineLinux
AlpineLinux
•added 2026/01/14 5:53 p.m.•13 views

CVE-2026-22856

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a race in the serial channel IRP thread tracking allows a heap use‑after‑free when one thread removes an entry from serial-IrpThreads while another reads it. This vulnerability is fixed in 3.20.1...

8.1CVSS6.8AI score0.00322EPSS
SaveExploits1
CVE
CVE
•added 2026/01/14 5:53 p.m.•69 views

CVE-2026-22856

FreeRDP (CVE-2026-22856): A race in the serial channel IRP thread tracking can cause a heap-use-after-free when one thread removes an entry from serial->IrpThreads while another reads it. This issue is fixed in FreeRDP 3.20.1. The vulnerability affects pre-3.20.1 releases; no exploitation deta...

8.1CVSS6.4AI score0.00322EPSS
SaveExploits1References2Affected Software1
OSV
OSV
•added 2026/01/14 5:53 p.m.•21 views

CVE-2026-22856 FreeRDP has a heap-use-after-free in create_irp_thread

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a race in the serial channel IRP thread tracking allows a heap use‑after‑free when one thread removes an entry from serial-IrpThreads while another reads it. This vulnerability is fixed in 3.20.1...

7.7CVSS5.9AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/01/14 5:53 p.m.•7 views

CVE-2026-22856 FreeRDP has a heap-use-after-free in create_irp_thread

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a race in the serial channel IRP thread tracking allows a heap use‑after‑free when one thread removes an entry from serial-IrpThreads while another reads it. This vulnerability is fixed in 3.20.1...

7.7CVSS6.4AI score0.00322EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2026/01/14 5:47 p.m.•5 views

CVE-2026-22854 FreeRDP has a heap-buffer-overflow in drive_process_irp_read

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a heap-buffer-overflow occurs in drive read when a server-controlled read length is used to read file data into an IRP output stream buffer without a hard upper bound, allowing an oversized read to overwrite heap...

7.7CVSS6.6AI score0.00519EPSS
SaveExploits1References2
Debian CVE
Debian CVE
•added 2026/01/14 5:47 p.m.•12 views

CVE-2026-22854

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a heap-buffer-overflow occurs in drive read when a server-controlled read length is used to read file data into an IRP output stream buffer without a hard upper bound, allowing an oversized read to overwrite heap...

9.8CVSS5.6AI score0.00519EPSS
SaveExploits1
Cvelist
Cvelist
•added 2026/01/14 5:47 p.m.•55 views

CVE-2026-22854 FreeRDP has a heap-buffer-overflow in drive_process_irp_read

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a heap-buffer-overflow occurs in drive read when a server-controlled read length is used to read file data into an IRP output stream buffer without a hard upper bound, allowing an oversized read to overwrite heap...

7.7CVSS0.00519EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2026/01/01 12:00 a.m.•13 views

PT-2026-2937

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.20.1 Description FreeRDP is a free implementation of the Remote Desktop Protocol. A heap use-after-free condition exists in the irp thread func function because the IRP is freed by irp-Complete and subsequently...

9.8CVSS6.7AI score0.01214EPSS
SaveExploits10References200
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•11 views

EUVD-2020-5764

Malware in sbrugna...

6.5CVSS6.1AI score0.00531EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•20 views

EUVD-2018-15756

Malware in sbrugna...

5.5CVSS4.9AI score0.00487EPSS
SaveExploits1References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2018-15775

Malware in sbrugna...

5.5CVSS5.4AI score0.0057EPSS
SaveExploits1References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2018-15757

Malware in sbrugna...

9.3CVSS8.7AI score0.00541EPSS
SaveExploits1References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•45 views

EUVD-2020-5759

Malware in sbrugna...

8.8CVSS8.8AI score0.00534EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2008-5694

Malware in sbrugna...

7.2CVSS6.4AI score0.00805EPSS
SaveExploits1References7
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•28 views

EUVD-2021-8960

Malicious code in bioql PyPI...

8.8CVSS8.8AI score0.00321EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•13 views

EUVD-2021-8961

Malicious code in bioql PyPI...

8.8CVSS8.8AI score0.00321EPSS
SaveExploits1References1
Rows per page
Query Builder