<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://db.gcve.eu/rss/recent/all/10</id>
  <title>Most recent entries from all</title>
  <updated>2026-11-05T05:59:59.086056+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@gcve.eu</email>
  </author>
  <link href="https://db.gcve.eu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent entries.</subtitle>
  <entry>
    <id>https://db.gcve.eu/vuln/fkie_cve-2026-121394</id>
    <title>fkie_cve-2026-121394</title>
    <updated>2026-11-05T05:59:59.092498+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>FreeRDP from 3.11.0 before 3.32.2 contains an assertion failure in the RemoteFX RLGR decoder that allows malicious servers to terminate clients. Attackers controlling an RDP server can send a RemoteFX tileset with RLGR code 32767, triggering a signed narrowing assertion in rfx_rlgr_decode and crashing the client.</p>
      </div>
    </content>
    <link href="https://db.gcve.eu/vuln/fkie_cve-2026-121394"/>
  </entry>
  <entry>
    <id>https://db.gcve.eu/vuln/ghsa-hf67-3c3m-x68x</id>
    <title>GHSA-hf67-3c3m-x68x</title>
    <updated>2026-11-05T05:59:59.092585+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>FreeRDP from 3.11.0 before 3.32.2 contains an assertion failure in the RemoteFX RLGR decoder that allows malicious servers to terminate clients. Attackers controlling an RDP server can send a RemoteFX tileset with RLGR code 32767, triggering a signed narrowing assertion in rfx_rlgr_decode and crashing the client.</p>
      </div>
    </content>
    <link href="https://db.gcve.eu/vuln/ghsa-hf67-3c3m-x68x"/>
  </entry>
  <entry>
    <id>https://db.gcve.eu/vuln/rhsa-2026:94514</id>
    <title>RHSA-2026:94514 — Red Hat Security Advisory: freerdp security, bug fix, and enhancement update</title>
    <updated>2026-11-05T05:59:59.092614+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>freerdp: FreeRDP: Denial of Service via uninitialized progressive tile handling freerdp: FreeRDP 3.0.0-beta1 before 3.32.0 Use-After-Free via Smartcard Connect freerdp: freerdp: Denial of Service via file descriptor exhaustion in serial device handling freerdp: freerdp: Denial of Service via unbounded memory consumption during RDPDR reassembly freerdp: freerdp: Denial of Service via heap-based buffer overflow during MP3 audio decoding freerdp: FreeRDP: Unauthenticated keystroke injection via premature input dispatch freerdp: FreeRDP: Denial of Service via grayscale JPEG clipboard conversion freerdp: freerdp: Denial of Service via memory exhaustion in NLA frame parser freerdp: FreeRDP: Arbitrary code execution via crafted persistent cache file freerdp: freerdp: Arbitrary code execution via crafted persistent cache file freerdp: freerdp: Arbitrary code execution via crafted display frames freerdp: freerdp: Denial of Service via heap out-of-bounds write in NTLM authentication freerdp: FreeRDP: heap buffer overflow in server rdpsnd via crafted audio formats freerdp: FreeRDP: Denial of Service via malformed image clipboard payloads freerdp: freerdp: Denial of Service via uncontrolled memory allocation in dynamic virtual channels freerdp: FreeRDP: Denial of Service via assertion failure in RemoteFX decoder freerdp: freerdp: Denial of Service via zero-width graphics reset freerdp: freerdp: Denial of Service via zero-length dynamic virtual channel messages</p>
      </div>
    </content>
    <link href="https://db.gcve.eu/vuln/rhsa-2026:94514"/>
  </entry>
</feed>
