CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

osv_debian•added 2026/10/13 2:17 p.m.•22 views

DEBIAN-CVE-2026-109678

FreeRDP 3.0.0-beta1 before 3.32.0, when built with verbose WinPR assertions and using smartcard emulation, has a reachable assertion: the emulated SCardStatusA passes a NULL reader-name destination to scardcopystrings. A malicious RDP server can send an SCardStatusA request with...

6.5CVSS6.4AI score0.00326EPSS

SaveExploits1References1

osv_ubuntu•added 2026/10/13 2:17 p.m.•9 views

UBUNTU-CVE-2026-109678

7.1CVSS6.4AI score0.00326EPSS

SaveExploits1References4

CVE•added 2026/10/13 1:27 p.m.•23 views

CVE-2026-109678

FreeRDP versions 3.0.0-beta1 before 3.32.0 are vulnerable to a reachable assertion when built with verbose WinPR assertions and smartcard emulation enabled. The root cause is that the emulated SCardStatusA function passes a NULL reader-name destination to scard_copy_strings. A malicious RDP serve...

7.1CVSS6.4AI score0.00326EPSS

SaveExploits1References2Affected Software1

Rapid7 Vulnerability Database (full)•added 2026/10/13 12:00 a.m.•10 views

CVE-2026-109678: Reachable Assertion

7.1CVSS6.4AI score0.00326EPSS

SaveExploits1References5

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by