https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-05T17:10:20.823792+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-121389 CVE-2026-121389 — FreeRDP 3.27.0 before 3.32.2 Client DoS via RDPDR Device Announcement Logging 2026-11-05T17:10:20.824761+00:00

Affected: FreeRDP

FreeRDP from 3.27.0 before 3.32.2 contains a denial of service vulnerability in rdpdr_dump_packet that allows malicious RDP servers to abort clients by sending malformed RDPDR device-list announcements. Attackers can declare a DeviceDataLength exceeding the received packet, triggering a fatal Stream_Seek assertion when device redirection, TRACE logging, and WinPR assertions are enabled.