CVE-2026-24675
Published: 09 February 2026
Summary
CVE-2026-24675 is a high-severity Use After Free (CWE-416) vulnerability in Freerdp Freerdp. Its CVSS base score is 7.7 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Application or System Exploitation (T1499.004); ranked at the 7.5th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified are NIST 800-53 SI-2 (Flaw Remediation) and RA-5 (Vulnerability Monitoring and Scanning).
Deeper analysis
CVE-2026-24675 is a use-after-free vulnerability (CWE-416) affecting FreeRDP, a free implementation of the Remote Desktop Protocol, in versions prior to 3.22.0. The issue occurs in the urb_select_interface function, which can free the device's MS config structure on error, while later code in libusb_udev_select_interface continues to dereference it, resulting in memory corruption.
Attackers with network access can exploit this vulnerability remotely without authentication, privileges, or user interaction, as indicated by its CVSS v3.1 base score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). Successful exploitation leads to a denial of service, such as an application crash, with no impact on confidentiality or integrity.
The vulnerability is addressed in FreeRDP version 3.22.0. Mitigation involves updating to this patched release, as detailed in the FreeRDP GitHub security advisory (GHSA-x9jr-99h2-g7mj) and the fixing commit (d676518809c319eec15911c705c13536036af2ae).
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2026-6480
Vulnerability details
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, urb_select_interface can free the device's MS config on error but later code still dereferences it, leading to a use after free in libusb_udev_select_interface. This vulnerability is fixed…
more
in 3.22.0.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Use-after-free in FreeRDP enables remote exploitation of the RDP service resulting in memory corruption and application crash (DoS).
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Mandates timely identification, reporting, and correction of flaws such as the use-after-free in FreeRDP by updating to the patched version 3.22.0.
Vulnerability monitoring and scanning identifies systems running vulnerable FreeRDP versions prior to 3.22.0 affected by CVE-2026-24675.
Monitoring security alerts and advisories like the FreeRDP GHSA-x9jr-99h2-g7mj provides awareness of the vulnerability and prompts remediation.