https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-14T06:52:19.957769+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-109948 fkie_cve-2026-109948 2026-10-14T06:52:19.962079+00:00

FreeRDP from 3.0.0 before 3.32.0 contains an uninitialized memory disclosure vulnerability in smartcard_Transmit_Call that allows malicious RDP servers to read client memory. Servers can send SCardTransmit requests with an invalid card handle and nonzero receive length, causing smartcard_pack_transmit_return to serialize up to 66,560 uninitialized heap bytes.

 https://db.gcve.eu/vuln/ghsa-xh9q-86wg-w2r5 GHSA-xh9q-86wg-w2r5 2026-10-14T06:52:19.962211+00:00

FreeRDP from 3.0.0 before 3.32.0 contains an uninitialized memory disclosure vulnerability in smartcard_Transmit_Call that allows malicious RDP servers to read client memory. Servers can send SCardTransmit requests with an invalid card handle and nonzero receive length, causing smartcard_pack_transmit_return to serialize up to 66,560 uninitialized heap bytes.