Skip to content

CVE record · 1 source

CVE-2026-111382

CVSS 8.8

FreeRDP before 3.32.0 contains a client-side heap out-of-bounds write vulnerability in general_LumaToYUV444 and general_ChromaV2ToYUV444 that allows…

Vendor: Microsoft
Product: Remote Desktop
CVSS: 8.8
EPSS: 0.004 (p32)
Exposure class: Remote access

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

28

CVE NVD 16d ago

FreeRDP before 3.32.0 contains a client-side heap out-of-bounds write vulnerability in general_LumaToYUV444 and general_ChromaV2ToYUV444 that allows…

FreeRDP before 3.32.0 contains a client-side heap out-of-bounds write vulnerability in general_LumaToYUV444 and general_ChromaV2ToYUV444 that allows malicious RDP servers to corrupt client memory. Attackers can send RDPGFX AVC444…

CVSS 8.8 CVE-2026-111382 Microsoft