Exploitation observed; activity peaked at 3 mentions and remains active
Recommended action window: Immediate (within 24h)
NVD description
FreeRDP before 3.30.0 (<= 3.29.0) contains a heap-based buffer overflow in the Windows clipboard client's CliprdrStream_Read function (client/Windows/wf_cliprdr.c). When an OLE paste consumer (e.g. explorer.exe) calls IStream::Read with a fixed-size buffer of cb bytes, CliprdrStream_Read requests file contents from the RDP server and then copies the response into the caller's buffer using the server-supplied length (req_fsize) instead of cb. A malicious or compromised RDP server can return an oversized CB_FILECONTENTS_RESPONSE, causing an out-of-bounds write of attacker-controlled data into the paste consumer's heap buffer when a user pastes server-offered clipboard file contents.
Priority
MEDIUM
Exploitation
ACTIVE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-08-02 | 3 | Active Exploitation1Disclosure2 |
| 2026-08-13 | 1 | Disclosure1 |
| 2026-08-25 | 1 | Patch1 |
Two CVE records describe the same heap overflow in the same FreeRDP function. CVE-2026-67305 (CVSS v4 9.4): "Windows client before 3.29.0." CVE-2026-68579: "before 3.30.0 (<= 3.29.0)." So we read the source. 🧵
Post summary
The post highlights two CVE entries for a heap overflow in FreeRDP, noting affected client versions and a high CVSS score, but provides no PoC, exploit, or patch details.
🚨High - RustDesk (Windows) clipboard heap buffer overflow via CLIPRDR FileContentsResponse (CVE-2026-76840) CliprdrStream_Read copies with the peer-supplied req_fsize instead of the caller's buffer size, so a malicious peer returning an oversized CB_FILECONTENTS_RESPONSE writes out of bounds when the user pastes remote clipboard files in an OLE consumer. Same root cause as FreeRDP CVE-2026-68579. 👉Affected: RustDesk (Windows) ≤ 1.4.9 | No fixed release — PR #15515. Interim: disable clipboard file transfer
Post summary
RustDesk Windows has a heap buffer overflow (CVE‑2026‑76840) with no patch yet; the interim mitigation is to disable clipboard file transfer.
CVE-2026-68579 FreeRDP before 3.30.0 (<= 3.29.0) contains a heap-based buffer overflow in the Windows clipboard client's CliprdrStream_Read function (client/Windows/wf_cliprdr.c). W… https://www.cve.org/CVERecord?id=CVE-2026-68579
Post summary
The snippet reports CVE-2026-68579 as a heap-based buffer overflow in FreeRDP versions <=3.29.0, detailing the vulnerable function and file location.
🔒 #CyberSecurity CVE-2026-68579: FreeRDP Remote Code Execution — Detection and Hardening Guide "A critical vulnerability, CVE-2026-68579 (CVSS 9.6), has been identified in FreeRDP, a…" 🔗 https://securityarsenal.com/blog/cve-2026-68579-freerdp-remote-code-execution-detection-and-hardening-guide #CyberSecurity #ThreatIntel #cve202668579 #critical #cve
Post summary
The tweet announces the discovery of CVE‑2026‑68579, a remote‑code‑execution vulnerability in FreeRDP with a CVSS score of 9.6, and links to a detection and hardening guide without providing a PoC, exploit code, or patch details.
Attention, elevated activities detected targeting FreeRDP (CVE-2026-68579) https://vuldb.com/vuln/385353/cti
Post summary
The message reports elevated activity targeting the FreeRDP vulnerability CVE-2026-68579, implying that the flaw may be actively exploited. No proof‑of‑concept, exploit code, patch, or detailed technical information is provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | freerdp | freerdp | - | - | - |