CVE record · 1 source
CVE-2026-110838
CVSS 7.5FreeRDP shadow server from 3.0.0 before 3.32.0 dispatches input PDUs during the Confirm Active state before authentication, allowing unauthenticated…
- Vendor
- Microsoft
- Product
- Remote Desktop
- CVSS
- 7.5
- EPSS
- 0.003 (p26)
- Exposure class
- Remote access
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
FreeRDP shadow server from 3.0.0 before 3.32.0 dispatches input PDUs during the Confirm Active state before authentication, allowing unauthenticated…
FreeRDP shadow server from 3.0.0 before 3.32.0 dispatches input PDUs during the Confirm Active state before authentication, allowing unauthenticated attackers to inject keyboard input. Attackers can negotiate TLS-only RDP and…