VulnSocial

CVE-2026-91962Active Exploitation(freerdp / freerdp)

MEDIUMCVSS 5.3 · MEDIUM

Exploitation ongoing with high activity in latest observed window (1 mentions)

Immediate actions

  • Patch freerdp freerdp systems immediately
  • Assume compromise if assets are exposed

Recommended action window: Immediate (within 24h)

NVD description

FreeRDP before 3.31.0 contains an integer overflow in the audin Apple backends when processing FramesPerPacket values from MSG_SNDIN_OPEN messages. Attackers can supply crafted FramesPerPacket values that cause AudioQueueAllocateBuffer size computation to wrap, resulting in undersized buffer allocation and potential out-of-bounds access.

freerdp CVEsBack to dashboard
4.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-131

Priority

MEDIUM

Exploitation

ACTIVE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • freerdp

Threat summary

  • Active exploitation appears in 1 classified signals
  • Patch or workaround signal is available
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Active exploitation reported across 1 signal
  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • Peaked 1d ago at 1 mentions (2026-09-15); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
freerdp
Products
freerdp

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-09-15: 1Mentions · 2026-10-17: 1Active Exploitation · 2026-09-15: 1Patch / Workaround · 2026-10-17: 1Technical Details · 2026-09-15: 1Technical Details · 2026-10-17: 109-1510-17
Signal classification2 categories
Active Exploitation
150.0%
Patch
150.0%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-09-151
Active Exploitation1
2026-10-171
Patch1
Full discourse2 posts
  • ThreatAft@ThreatAft
    Patch

    🔐🖥️ FreeRDP — 2 CVEs, patch to 3.32.0 CVE-2026-111380 (CVSS 8.8): Apple audin backends (macOS/iOS) — integer overflow in buffer size calc, heap OOB write. Bypasses prior fix for CVE-2026-91962. 🔗 https://threataft.com/articles/freerdp-cluster-cve-2026-111380-111375 #FreeRDP #RDP #CVE #CyberSecurity #ThreatIntel

    Post summary

    The tweet announces two FreeRDP CVEs with technical details (CVSS 8.8, integer overflow, heap OOB write) and directs users to patch to version 3.32.0.

    00020104
    50 followersView on X
  • Kaitan ID Security@KaitanSecurity
    Active Exploitation

    ⚠️ HIGH — CVE-2026-91962 FreeRDP before 3.31.0 contains an integer overflow in the audin Apple backends when processing FramesPerPacket values f… CVSS 6.3 ⚡ Exploit in the wild Full analysis → https://sec.kaitan.id/cves/CVE-2026-91962 #Apple #CyberSecurity #InfoSec

    Post summary

    The text reports CVE-2026-91962 as a FreeRDP integer overflow affecting versions before 3.31.0 and explicitly states it is being exploited in the wild. It includes technical vulnerability details and a CVSS score, but no PoC, named exploit tool, or explicit patch guidance.

    0000074
    89 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appfreerdpfreerdp---

Explore more

Back to dashboardfreerdp CVEsfreerdp vulnerabilities