CVE-2026-121398
MEDIUM
freerdp
NVD
CVSS Score
5.9
Severity
MEDIUM
Published
Nov 03, 2026
Vendor
freerdp
Description
FreeRDP before 3.32.2 contains a cross-thread use-after-free vulnerability in the freerdp-proxy dyn-channel-dump module during session teardown. A malicious RDP target can send dynamic channel data while the front client disconnects, letting the client thread read freed ChannelData and crash the proxy process.