CVE-2026-44420EPSS p88.5%

CVE-2026-44420CVE-2026-44420

freerdp / freerdp

Description

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, a malicious RDP client can trigger a heap-buffer-overflow write in FreeRDP's server-side clipboard (cliprdr) channel by sending a CB_CLIP_CAPS PDU with a too-small capabilitySetLength. This can crash the server process (remote DoS) and may be exploitable for code execution because it corrupts heap memory. This vulnerability is fixed in 3.26.0.

Scoring

CVSS 8.8 ()
VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS3.67% probability of exploitation · percentile 88.5% · 2026-08-03T12:00:16Z
Last modified2026-07-27

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
CVE-2026-44421
CVE
CVE-2026-23532
CVE
CVE-2026-23531
CVE
CVE-2026-23534
CVE
CVE-2026-22854
CVE
CVE-2026-23530
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.