SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-67305

CRITICAL · CVSS 9.4 EPSS 0.49% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-08-01 · Last synced 2026-08-31

CyberRota Analysis

AI-Generated

The FreeRDP Windows client prior to version 3.29.0 is vulnerable to a heap buffer overflow in the clipboard virtual channel, which occurs when processing oversized data payloads from a malicious RDP server. This flaw can lead to arbitrary heap memory corruption, potentially allowing remote code execution during paste operations. Organizations using affected versions of FreeRDP should prioritize patching to mitigate the risk of exploitation.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
remote code execution code execution
GitHub PoC Links

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-67305
Severity
CRITICAL
CVSS
9.4
EPSS
0.49%
Windows

Original NVD Description

FreeRDP Windows client before 3.29.0 contains a heap buffer overflow vulnerability in the clipboard virtual channel when processing CLIPRDR_FILE_CONTENTS_RESPONSE PDUs without validating the server-provided size against the destination buffer. A malicious RDP server can send a response with a data payload significantly larger than requested, causing arbitrary heap memory corruption that may enable remote code execution when a user performs a paste operation.