CVE-2026-111375 | FreeRDP up to 3.31.x Windows RAIL client SetWindowTextW out-of-bounds

October 16, 2026 Yanac

A vulnerability marked as critical has been reported in FreeRDP up to 3.31.x. This affects the function SetWindowTextW of the component Windows RAIL client. This manipulation causes out-of-bounds read.

This vulnerability appears as CVE-2026-111375. The attack may be initiated remotely. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More