What is CVE-2026-73242?

CVE-2026-73242 is a critical-severity vulnerability in Freerdp, classified under Heap-based Buffer Overflow. CVSS score: 9.1/10. Published 2026-08-11.

How severe is CVE-2026-73242?

Critical severity. CVSS v3 base score is 9.1 out of 10.

Buffer overflow in Freerdp

CVE-2026-73242

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.30.0, FreeRDP's winpr/libwinpr/sspi/Kerberos/kerberos.c kerberos_DecryptMessage function fails to bound the peer-controlled GSS Wrap-token EC field before using it with RRC in IOV pointer offsets, allowing a malicious RDP peer to trigger out-of-bounds reads and in-place writes during CredSSP/NLA Kerberos decryption. This issue is fixed in version 3.30.0.

Vulnerability class: Buffer Overflow

Published 2026-08-11 · last modified 2026-09-25.

CVSS v3 metric

CVSS v3 base score 9.1 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N.

EPSS exploit prediction

EPSS: 0.004 (35.9th percentile), scored 2026-09-26.

Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 36th percentile — 35.9% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.004 · newest: 0.004 · change: +0.001

Affected products

Freerdp — versions < 3.30.0

Weakness classification (CWE)

CWE-122 — Heap-based Buffer Overflow

References

github.com/FreeRDP/FreeRDP/security/advisories/GHSA-vv64-95pc-vj9v (Exploit, Mitigation, Vendor Advisory)
github.com/FreeRDP/FreeRDP/pull/13065 (Patch, Issue Tracking)
github.com/FreeRDP/FreeRDP/commit/0adf5e30d01be84e190a359a7bdd37bc51d740cc (Patch)
github.com/FreeRDP/FreeRDP/releases/tag/3.30.0 (Release Notes)

Frequently asked questions

What is CVE-2026-73242?: CVE-2026-73242 is a critical-severity vulnerability in Freerdp, classified under Heap-based Buffer Overflow. CVSS score: 9.1/10. Published 2026-08-11.
How severe is CVE-2026-73242?: Critical severity. CVSS v3 base score is 9.1 out of 10.