{"vulnerability": "CVE-2026-111375", "sightings": [{"uuid": "6b61a5e0-51e0-4fca-aa9c-098176f4cb29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-111375", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117448015409130514", "content": "CVE-2026-111375 FreeRDP 3.0.0 before 3.32.0 Out-of-Bounds Read via RAIL Window Title FreeRDP from 3.0.0 before 3.32.0 contains an out-of-bounds read vulnerability in the Windows RAIL client that allows malicious RDP servers to trigger heap over-reads by sending non-NUL-terminated window titles. Attackers can send a full-length WINDOW_ORDER_FIELD_TITLE update that wf_rail_window_common passes to SetWindowTextW, corrupting titles or crashing the client.\nhttps://www.cve.org/CVERecord?id=CVE-2026-111375https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-3rvr-qvx8-rj23https://www.vulncheck.com/advisories/freerdp-3.0.0-before-3.32.0-out-of-bounds-read-via-rail-window-title#FreeRDP#CVE_2026_111375#bot", "creation_timestamp": "2026-10-16T01:34:53.417611Z"}]}