Skip to content
Threat Feed
Subscribe

Product

FreeRDP (<=3.27.1)

1 brief RSS
critical advisory

CVE-2026-64620 - FreeRDP Heap-based Buffer Overflow

FreeRDP before version 3.28.0 contains a heap-based buffer overflow in the `crypto_rsa_common()` function, exploitable pre-authentication by an unauthenticated attacker crafting a malicious ciphertext to cause a denial of service on the server when a client uses RDP Standard Security.

FreeRDP vulnerability buffer-overflow denial-of-service cve network
2t 1c