{"metadata": {"vulnerability": "cve-2026-109680", "count": 16, "kinds": {"milestone": 5, "sighting": 1, "kev": 0, "other": 10}}, "data": [{"timestamp": "2026-09-29T00:00:00Z", "date_only": false, "value": "2026-09-29T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "cve-2026-109680", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-12T21:08:17.598Z", "date_only": false, "value": "2026-10-12T21:08:17.598Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2026-109680", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-13T13:27:08.292Z", "date_only": false, "value": "2026-10-13T13:27:08.292Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-109680", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-13T13:27:08.292Z", "date_only": false, "value": "2026-10-13T13:27:08.292Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "cve-2026-109680", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-13T14:03:06.089Z", "date_only": false, "value": "2026-10-13T14:03:06.089022Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117433970554888817", "record": "CVE-2026-109680", "field": "creation_timestamp", "uuid": "a7a70581-dc2c-4437-be8f-4541beb29310", "content": "CVE-2026-109680 FreeRDP 3.18.0 before 3.32.0 Heap Out-of-Bounds Write via ARM Redirected Username FreeRDP 3.18.0 before 3.32.0 has a heap-based out-of-bounds write in freerdp_interruptible_get_line, which shrinks the buffer to 32 bytes while keeping a pre-filled suggested username's length as its write offset. A malicious or compromised ARM routing service can return a long redirectedUsername that reaches the CLI credential prompt, crashing the client when the user types input.\nhttps://www.cve.org/CVERecord?id=CVE-2026-109680https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-4ww8-3vqm-jgcfhttps://www.vulncheck.com/advisories/freerdp-3.18.0-before-3.32.0-heap-out-of-bounds-write-via-arm-redirected-username#FreeRDP#CVE_2026_109680#bot", "url": "https://infosec.exchange/users/cve/statuses/117433970554888817"}, {"timestamp": "2026-10-13T14:17:00Z", "date_only": false, "value": "2026-10-13T14:17:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-109680", "record": "UBUNTU-CVE-2026-109680", "field": "published"}, {"timestamp": "2026-10-13T14:17:31Z", "date_only": false, "value": "2026-10-13T14:17:31Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-47G3-RFJF-36W6", "record": "GHSA-47G3-RFJF-36W6", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-13T14:17:31.367Z", "date_only": false, "value": "2026-10-13T14:17:31.367", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-109680", "record": "FKIE_CVE-2026-109680", "field": "published"}, {"timestamp": "2026-10-13T15:32:21Z", "date_only": false, "value": "2026-10-13T15:32:21Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-47G3-RFJF-36W6", "record": "GHSA-47G3-RFJF-36W6", "field": "published"}, {"timestamp": "2026-10-13T15:32:22Z", "date_only": false, "value": "2026-10-13T15:32:22Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-47G3-RFJF-36W6", "record": "GHSA-47G3-RFJF-36W6", "field": "modified"}, {"timestamp": "2026-10-16T21:46:10.323Z", "date_only": false, "value": "2026-10-16T21:46:10.323764Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-109680", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-16T21:46:10.323Z", "date_only": false, "value": "2026-10-16T21:46:10.323764Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-109680", "record": "FKIE_CVE-2026-109680", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-16T21:46:38.791Z", "date_only": false, "value": "2026-10-16T21:46:38.791Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2026-109680", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-16T21:46:38.791Z", "date_only": false, "value": "2026-10-16T21:46:38.791Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-109680", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-20T20:36:15.950Z", "date_only": false, "value": "2026-10-20T20:36:15.950", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-109680", "record": "FKIE_CVE-2026-109680", "field": "lastModified"}, {"timestamp": "2026-10-22T08:03:38Z", "date_only": false, "value": "2026-10-22T08:03:38Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-109680", "record": "UBUNTU-CVE-2026-109680", "field": "modified"}]}