CVE-2026-67292

A flaw was found in FreeRDP, a remote desktop protocol client. A malicious server or WebSocket peer could send a specially crafted Ping control frame. This could cause the client to send an overly long Pong reply, leading to the disclosure of sensitive information beyond the intended payload...