CVE-2026-73242: Freerdp

Critical severity, CVSS 9.1. EPSS: 0.4% chance of exploitation in the next 30 days.

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.30.0, FreeRDP's winpr/libwinpr/sspi/Kerberos/kerberos.c kerberos_DecryptMessage function fails to bound the peer-controlled GSS Wrap-token EC field before using it with RRC in IOV pointer offsets, allowing a malicious RDP peer to trigger out-of-bounds reads and in-place writes during CredSSP/NLA Kerberos decryption. This issue is fixed in version 3.30.0.

Affected products

• Freerdp Freerdp: before 3.30.0 (fixed in 3.30.0)

Published 2026-08-11. Last modified 2026-09-25.