Is CVE-2026-110830 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-110830?

CVE-2026-110830 has a CVSS v3 severity of MEDIUM (5.9).

Back

CVE-2026-110830

Description

FreeRDP before 3.32.0 fails to close prior serial handles in serial_process_irp_create, allowing a malicious RDP server to exhaust file descriptors. Attackers can send repeated serial IRP_MJ_CREATE requests to accumulate descriptors and terminate the client at the CommReadFile FD_SETSIZE assertion.