MEDIUM Published November 4, 2026

CVE-2026-121961

FreeRDP before 3.32.2 contains a use-after-free vulnerability in the freerdp-proxy DRDYNVC tracker when intercepting the drdynvc channel. A malicious target server can repeatedly send CREATE_REQUEST_PDU for an active channel id, racing front DATA handling to free a borrowed context and crash the proxy process.

CVSS base score

5.9 (v3.1)

Severity

MEDIUM

Attack vector

Network

Weakness

CWE-362

Last modified

November 5, 2026

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

freerdp freerdp

References

github.com Exploit, Mitigation, Vendor Advisory
www.vulncheck.com Third Party Advisory
github.com Exploit, Mitigation, Vendor Advisory

View full NVD advisory →

More freerdp vulnerabilities

Published the same day

← Back to CVE watch

CVE-2026-121961

Affected products

References

More freerdp vulnerabilities

Published the same day

Related reading