CVE-2026-109676
HIGH
NVD
CVSS Score
8.8
Severity
HIGH
Published
Oct 13, 2026
Vendor
unknown
Description
FreeRDP from 3.0.0-beta1 before 3.32.0 contains a use-after-free vulnerability in smartcard handling that allows attackers to access a freed smartcard handle object after an invalid connect operation. Attackers can trigger an invalid smartcard connect operation to cause reuse of the freed handle, leading to memory corruption or crashes.