CVE-2026-110830GHSA-mqxv-c882-m8w9

FreeRDP before 3.32.0 Denial of Service via Serial IRP_MJ_CREATE

FreeRDP FreeRDP

CVSS

8.2High

ExploitationPublic exploit codeCISA's assessment says proof of concept code is public, assessed 15 Oct 2026. Not in the KEV catalogCISA via CVE List

Exploit odds (EPSS)0.25%Chance of exploitation activity in the next 30 days, higher than 15% of CVEs. Scored 23 Oct 2026FIRST EPSS

Fixed in3.32.0Fixed versionCVE List

Published14 Oct 2026Updated 15 Oct 2026CVE List

What fixes it

3.32.0FreeRDPCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Reports 1

1 outlet mention it. Reports are not confirmation; each links to its source.

🚨 CVE-2026-110830 FreeRDP before 3.32.0 fails to close prior serial handles in serial_process_irp_create, allowing a malicious RDP server to exhaust file descriptors. Attackers can send repeated seriaTelegram: CVE Notify, 23 Oct 2026

Description

FreeRDP before 3.32.0 fails to close prior serial handles in serial_process_irp_create, allowing a malicious RDP server to exhaust file descriptors. Attackers can send repeated serial IRP_MJ_CREATE requests to accumulate descriptors and terminate the client at the CommReadFile FD_SETSIZE assertion.

Text from CVE List

Affected versions 2

FreeRDPaffected: 2.0.0-rc0 before 3.32.0CVE List
FreeRDPunaffected: 3.32.0CVE List