Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
FreeRDP is a free implementation of the Remote Desktop Protocol. ainput_send_input_event caches channel_callback in a local variable and later uses it without synchronization; a concurrent channel close can free or reinitialize the callback, leading to a use after free. Prior to 3.22.0, This vulnerability is fixed in 3.22.0.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-02-09 | 1 | General1 |
| 2026-02-10 | 1 | Disclosure1 |
CVE-2026-24683 Use-After-Free Vulnerability in FreeRDP Channel Callback Prior to Version 3.22.0 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-24683
Post summary
CVE-2026-24683 is a Use‑After‑Free flaw in FreeRDP before 3.22.0; the post merely announces the vulnerability without providing exploit or patch details.
CVE-2026-24683 FreeRDP is a free implementation of the Remote Desktop Protocol. ainput_send_input_event caches channel_callback in a local variable and later uses it without synchro… https://www.cve.org/CVERecord?id=CVE-2026-24683
Post summary
CVE-2026-24683 concerns a concurrency flaw in FreeRDP’s input handling, but no PoC, exploit, patch, or active exploitation details are provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | freerdp | freerdp | - | - | - |