Search: CVE-2026-24678

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.5	EPSS 0.7%	CVE-2026-24678Freerdp3 · Prior to 3.22.0, A capture thread sends sample responses using a freed channel callback after a device channel close, leading to a use after free in High7.5EPSS 0.7%2026-02-09GCVE DatabaseCVE-2026-24678 FreeRDP3 versions prior to 3.22.0 contain a use-after-free vulnerability in the ecam_channel_write function caused by a capture thread sending sample responses using a freed channel callback after a device channel closes. This flaw can lead to denial of service or potentially arbitrary code execution. The vulnerability has a CVSS 3.1 score of 7.5 (medium severity) and affects specific Ubuntu package versions. An official patch is available in FreeRDP 3.22.0 and later. EPSS 0.7%Vulnerability	GCVE Database	2026-02-09

Page 1 of 1