Lucene search
+L

6 matches found

NVD
NVD
•added 2026/11/03 3:17 p.m.•3 views

CVE-2026-121396

FreeRDP clients from 3.0.0 before 3.32.2 built with verbose WinPR assertions contain a reachable assertion in rtsreadauthverifier triggered by malformed RTS padding. Attackers controlling an RD Gateway can send a crafted RPC-over-HTTP RTS PDU with inconsistent authentication padding to abort the...

5.3CVSS0.00317EPSS
SaveExploits0References2
CVE
CVE
•added 2026/11/03 2:28 p.m.•8 views

CVE-2026-121396

FreeRDP clients version 3.0.0 before 3.32.2 built with verbose WinPR assertions are vulnerable to a denial of service (DoS). The root cause is a reachable assertion in rts_read_auth_verifier triggered by malformed RTS padding. An attacker controlling an RD Gateway can send a crafted RPC-over-HTTP...

5.3CVSS5.9AI score0.00317EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
•added 2026/11/03 2:28 p.m.•4 views

EUVD-2026-115928

FreeRDP clients from 3.0.0 before 3.32.2 built with verbose WinPR assertions contain a reachable assertion in rtsreadauthverifier triggered by malformed RTS padding. Attackers controlling an RD Gateway can send a crafted RPC-over-HTTP RTS PDU with inconsistent authentication padding to abort the...

5.3CVSS5.9AI score0.00317EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/11/03 2:28 p.m.•19 views

CVE-2026-121396 FreeRDP 3.0.0 before 3.32.2 denial of service via RTS padding assertion

FreeRDP clients from 3.0.0 before 3.32.2 built with verbose WinPR assertions contain a reachable assertion in rtsreadauthverifier triggered by malformed RTS padding. Attackers controlling an RD Gateway can send a crafted RPC-over-HTTP RTS PDU with inconsistent authentication padding to abort the...

5.3CVSS0.00317EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/11/03 12:00 a.m.•6 views

CVE-2026-121396: FreeRDP: FreeRDP clients from 3.0.0 before 3.32.2 built with verbose WinPR assertions contain a reachable assertion in…

FreeRDP clients from 3.0.0 before 3.32.2 built with verbose WinPR assertions contain a reachable assertion in rtsreadauthverifier triggered by malformed RTS padding. Attackers controlling an RD Gateway can send a crafted RPC-over-HTTP RTS PDU with inconsistent authentication padding to abort the...

5.3CVSS5.9AI score0.00317EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2026/03/31 12:00 a.m.•22 views

FreeRDP < 3.24.2 Multiple Vulnerabilities

FreeRDP is prone to multiple vulnerabilities. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

8.1CVSS6.2AI score0.00442EPSS
SaveExploits2
Rows per page
Query Builder