{"metadata": {"vulnerability": "cve-2026-109250", "count": 14, "kinds": {"milestone": 4, "sighting": 1, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-09-28T00:00:00Z", "date_only": false, "value": "2026-09-28T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "cve-2026-109250", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-12T14:09:00.052Z", "date_only": false, "value": "2026-10-12T14:09:00.052Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2026-109250", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-12T16:04:23.587Z", "date_only": false, "value": "2026-10-12T16:04:23.587Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-109250", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-12T16:04:23.587Z", "date_only": false, "value": "2026-10-12T16:04:23.587Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "cve-2026-109250", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-12T16:35:33.122Z", "date_only": false, "value": "2026-10-12T16:35:33.122821Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117428907711854087", "record": "CVE-2026-109250", "field": "creation_timestamp", "uuid": "96f6ae9a-4723-470b-bc79-550c13f983ba", "content": "CVE-2026-109250 FreeRDP 3.0.0 before 3.32.0 Heap Buffer Overflow via PKCS#11 collect_keys() FreeRDP 3.0.0 before 3.32.0 contains a heap buffer overflow vulnerability in collect_keys() that allows local attackers to write past the fixed 64-entry keys array during PKCS#11 key enumeration. Attackers controlling smartcard tokens can present more than 64 public key objects across multiple slots to corrupt heap memory with attacker-chosen CKA_ID and CKA_LABEL data during smartcard logon.\nhttps://www.cve.org/CVERecord?id=CVE-2026-109250https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-jhv5-m83m-hxhqhttps://www.vulncheck.com/advisories/freerdp-3.0.0-before-3.32.0-heap-buffer-overflow-via-pkcs-11-collect-keys#FreeRDP#CVE_2026_109250#bot", "url": "https://infosec.exchange/users/cve/statuses/117428907711854087"}, {"timestamp": "2026-10-12T17:17:16Z", "date_only": false, "value": "2026-10-12T17:17:16Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-Q5VF-VW79-QR24", "record": "GHSA-Q5VF-VW79-QR24", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-12T17:17:16.230Z", "date_only": false, "value": "2026-10-12T17:17:16.230", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-109250", "record": "FKIE_CVE-2026-109250", "field": "published"}, {"timestamp": "2026-10-12T18:31:38Z", "date_only": false, "value": "2026-10-12T18:31:38Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-Q5VF-VW79-QR24", "record": "GHSA-Q5VF-VW79-QR24", "field": "published"}, {"timestamp": "2026-10-12T18:31:38Z", "date_only": false, "value": "2026-10-12T18:31:38Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-Q5VF-VW79-QR24", "record": "GHSA-Q5VF-VW79-QR24", "field": "modified"}, {"timestamp": "2026-10-13T18:01:30.910Z", "date_only": false, "value": "2026-10-13T18:01:30.910192Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-109250", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-13T18:01:30.910Z", "date_only": false, "value": "2026-10-13T18:01:30.910192Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-109250", "record": "FKIE_CVE-2026-109250", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-13T18:01:59.972Z", "date_only": false, "value": "2026-10-13T18:01:59.972Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2026-109250", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-13T18:01:59.972Z", "date_only": false, "value": "2026-10-13T18:01:59.972Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-109250", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-13T19:18:13.977Z", "date_only": false, "value": "2026-10-13T19:18:13.977", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-109250", "record": "FKIE_CVE-2026-109250", "field": "lastModified"}]}