https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-07T00:34:49.461344+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-121951 fkie_cve-2026-121951 2026-11-07T00:34:49.464066+00:00

FreeRDP 3.0.0 before 3.32.2 server-side RDP peer input parsing skips the six-byte body of a slow-path input event with an unknown message type without checking it lies within the packet's declared length, causing a WinPR stream assertion failure. A remote RDP client with an active session can send a truncated unknown input event to abort assertion-enabled server processes, causing denial of service.

 https://db.gcve.eu/vuln/ghsa-wcwc-8x6v-rgcq GHSA-wcwc-8x6v-rgcq 2026-11-07T00:34:49.464161+00:00

FreeRDP 3.0.0 before 3.32.2 server-side RDP peer input parsing skips the six-byte body of a slow-path input event with an unknown message type without checking it lies within the packet's declared length, causing a WinPR stream assertion failure. A remote RDP client with an active session can send a truncated unknown input event to abort assertion-enabled server processes, causing denial of service.

 https://db.gcve.eu/vuln/ubuntu-cve-2026-121951 UBUNTU-CVE-2026-121951 2026-11-07T00:34:49.464195+00:00

Affected: Ubuntu:16.04:LTS: freerdp, Ubuntu:18.04:LTS: freerdp

FreeRDP 3.0.0 before 3.32.2 server-side RDP peer input parsing skips the six-byte body of a slow-path input event with an unknown message type without checking it lies within the packet's declared length, causing a WinPR stream assertion failure. A remote RDP client with an active session can send a truncated unknown input event to abort assertion-enabled server processes, causing denial of service.