https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-09T11:00:15.703332+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-121953 CVE-2026-121953 — FreeRDP before 3.32.2 Use-After-Free via rdpgfx Dynamic Virtual Channel Close 2026-11-09T11:00:15.705002+00:00

Affected: FreeRDP

FreeRDP before 3.32.2 has a use-after-free in the client's rdpgfx dynamic virtual channel: a duplicate-name channel with a new ChannelId overwrites the listener's single callback slot, which rdpgfx_on_close frees without clearing. A malicious RDP server can open and close such a channel, then send a PDU on the original channel to crash the client or potentially execute code.