VULNERABILITY INTELLIGENCE

CVE-2026-67305

CVSS score8.8 HIGH
EPSS probability0.77%
CISA KEVNot currently listed
Published2026-08-01
Last modified2026-09-08
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

FreeRDP Windows client before 3.29.0 contains a heap buffer overflow vulnerability in the clipboard virtual channel when processing CLIPRDR_FILE_CONTENTS_RESPONSE PDUs without validating the server-provided size against the destination buffer. A malicious RDP server can send a response with a data payload significantly larger than requested, causing arbitrary heap memory corruption that may enable remote code execution when a user performs a paste operation.

Weakness classification

  • disclosure@vulncheck.com: CWE-122

Primary references