Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, aAsynchronous bulk transfer completions can use a freed channel callback after URBDRC channel close, leading to a use after free in urb_write_completion. This vulnerability is fixed in 3.22.0.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-24681 Use-After-Free Vulnerability in FreeRDP Prior to 3.22.0 via URBDRC Channel https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-24681
Post summary
The text announces a new CVE (CVE‑2026‑24681) describing a use‑after‑free flaw in FreeRDP versions prior to 3.22.0 that can be triggered via the URBDRC channel.
CVE-2026-24681 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, aAsynchronous bulk transfer completions can use a freed channel callback after URBDR… https://www.cve.org/CVERecord?id=CVE-2026-24681
Post summary
The post discloses a use‑after‑free vulnerability in FreeRDP prior to version 3.22.0, without providing any PoC, exploit, or patch information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | freerdp | freerdp | - | - | - |