CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

6 matches found

osv_debian•added 2026/10/13 2:17 p.m.•22 views

DEBIAN-CVE-2026-109678

FreeRDP 3.0.0-beta1 before 3.32.0, when built with verbose WinPR assertions and using smartcard emulation, has a reachable assertion: the emulated SCardStatusA passes a NULL reader-name destination to scardcopystrings. A malicious RDP server can send an SCardStatusA request with...

6.5CVSS6.4AI score0.00326EPSS

SaveExploits1References1

NVD•added 2026/10/13 2:17 p.m.•22 views

CVE-2026-109678

7.1CVSS0.00326EPSS

SaveExploits1References2

CVE•added 2026/10/13 1:27 p.m.•23 views

CVE-2026-109678

FreeRDP versions 3.0.0-beta1 before 3.32.0 are vulnerable to a reachable assertion when built with verbose WinPR assertions and smartcard emulation enabled. The root cause is that the emulated SCardStatusA function passes a NULL reader-name destination to scard_copy_strings. A malicious RDP serve...

7.1CVSS6.4AI score0.00326EPSS

SaveExploits1References2Affected Software1

Vulnrichment•added 2026/10/13 1:27 p.m.•8 views

CVE-2026-109678 FreeRDP 3.0.0-beta1 before 3.32.0 Reachable Assertion via Emulated SCardStatusA

7.1CVSS6.4AI score0.00326EPSS

SaveExploits1References2

osv_cve•added 2026/10/13 1:27 p.m.•20 views

CVE-2026-109678 FreeRDP 3.0.0-beta1 before 3.32.0 Reachable Assertion via Emulated SCardStatusA

7.1CVSS6.4AI score0.00326EPSS

SaveExploits1References4

Cvelist•added 2026/10/13 1:27 p.m.•41 views

CVE-2026-109678 FreeRDP 3.0.0-beta1 before 3.32.0 Reachable Assertion via Emulated SCardStatusA

7.1CVSS0.00326EPSS

SaveExploits1References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by