CVE record · 1 source
CVE-2026-111880
CVSS 7.4FreeRDP versions from 2.0.0 before 3.32.0 contain a heap out-of-bounds write in the server hash-callback NTLM path that fails to validate the MIC…
- Vendor
- Microsoft
- Product
- Active Directory / Entra ID
- CVSS
- 7.4
- EPSS
- 0.003 (p25)
- Exposure class
- Identity
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
FreeRDP versions from 2.0.0 before 3.32.0 contain a heap out-of-bounds write in the server hash-callback NTLM path that fails to validate the MIC…
FreeRDP versions from 2.0.0 before 3.32.0 contain a heap out-of-bounds write in the server hash-callback NTLM path that fails to validate the MIC offset. Unauthenticated attackers can send a crafted AUTHENTICATE_MESSAGE with a…