All vulnerabilities
CVE-2026-109676GHSA-369h-7h2p-4685

FreeRDP 3.0.0-beta1 before 3.32.0 Use-After-Free via Smartcard Connect

FreeRDP FreeRDP
Open in ThreatlineRecord JSON
CVSS
8.7High
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.26%Chance of exploitation activity in the next 30 days, higher than 17% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in3.32.0Fixed versionCVE List
Published13 Oct 2026Updated 14 Oct 2026CVE List

What fixes it

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

FreeRDP from 3.0.0-beta1 before 3.32.0 contains a use-after-free vulnerability in smartcard handling that allows attackers to access a freed smartcard handle object after an invalid connect operation. Attackers can trigger an invalid smartcard connect operation to cause reuse of the freed handle, leading to memory corruption or crashes.

Text from CVE List

Affected versions 2

  • FreeRDPaffected: 3.0.0-beta1 before 3.32.0CVE List
  • FreeRDPunaffected: 3.32.0CVE List

References 2