Threats tagged 'ghsa-fg26-fr9r-9hrq'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	8.7	CVE-2026-121956FreeRDP before 3.32.2 contains a double free in the WinPR Kerberos SSPI retrieveSomeTgt function, which installs the High8.72026-11-04GCVE DatabaseCVE-2026-121956 FreeRDP versions prior to 3.32.2 contain a double free vulnerability in the WinPR Kerberos SSPI retrieveSomeTgt function. This flaw occurs when the function installs the krb5 default realm into a target principal with an empty realm without properly taking ownership. Unauthenticated remote attackers can exploit this by sending a crafted NLA/CredSSP u2u TGT request with a server-name component containing '@', leading to heap corruption and a server crash. Report on CVE-2026-121956 Vulnerability CWE-415 #ghsa-fg26-fr9r-9hrq	GCVE Database	2026-11-04

Page 1 of 1