CVE-2026-121962 | FreeRDP up to 3.32.1 CredSSP transport_default_read_pdu heap-based overflow

November 4, 2026 Yanac

A vulnerability classified as problematic has been found in FreeRDP up to 3.32.1. The affected element is the function transport_default_read_pdu of the component CredSSP. The manipulation leads to heap-based buffer overflow.

This vulnerability is traded as CVE-2026-121962. It is possible to initiate the attack remotely. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More