← العودة للجدول
CVE-2026-111377
CVE-2026-111377 — FreeRDP from 2.0.0 before 3.32.0 contains an unbounded reassembly vulnerability
📅 2026-10-16
🟡 Medium 🔥 No NVD Vulnerability Windows CVSS 6.5

📋 الوصف الكامل

FreeRDP from 2.0.0 before 3.32.0 contains an unbounded reassembly vulnerability in WTSProcessChannelData that fails to enforce cumulative fragment limits. Authenticated clients can start a static virtual channel message, withhold the LAST flag, and send endless fragments to exhaust server memory.

💻 الأنظمة المتأثرة

⚠️ نوع التهديد

Vulnerability

🔗 CVE ID

CVE-2026-111377

📡 المصدر

NVD

✅ الحلول والتخفيف

Refer to CVE-2026-111377 NVD advisory

🔗 المصدر الأصلي ← 📘 NVD ← ⚡ CISA KEV ← 🔍 Valters IT ←