CVE-2026-55827
FreeRDP: Heap out-of-bounds write in RemoteFX (RFX) Cache Bitmap V3 decode
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.1, FreeRDP clients launched with the non-default /cache:codec:rfx option pass desktop stride and height to RemoteFX decoding for Cache Bitmap V3 data while allocating bitmap->data only for the smaller DstWidth and DstHeight in gdi_Bitmap_Decompress, allowing a malicious RDP server to trigger a heap out-of-bounds write with attacker-controlled offset and content. This issue is fixed in version 3.27.1.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
7.5
FreeRDP: Heap out-of-bounds write in RemoteFX (RFX) Cache Bitmap V3 decode
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.1, FreeRDP clients launched with the non-default /cache:codec:rfx option pass desktop stride and height to RemoteFX decoding for Cache Bitmap V3 data while allocating bitmap->data only for the smaller DstWidth and DstHeight in gdi_Bitmap_Decompress, allowing a malicious RDP server to trigger a heap out-of-bounds write with attacker-controlled offset and content. This issue is fixed in version 3.27.1.
- Record
CVE-2026-55827- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-131, CWE-787
- Updated
- 2026-11-02
EUVDEUVD-2026-43004
7.5
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.1, FreeRDP clients launched with the non-default /cache:codec:rfx option pass desktop stride and height to RemoteFX decoding for Cache Bitmap V3 data while allocating bitmap->data only for the smaller DstWidth and DstHeight in gdi_Bitmap_Decompress, allowing a malicious RDP server to trigger a heap out-of-bounds write with attacker-controlled offset and content. This issue is fixed in version 3.27.1.
- Record
EUVD-2026-43004- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
NVD
7.5
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.1, FreeRDP clients launched with the non-default /cache:codec:rfx option pass desktop stride and height to RemoteFX decoding for Cache Bitmap V3 data while allocating bitmap->data only for the smaller DstWidth and DstHeight in gdi_Bitmap_Decompress, allowing a malicious RDP server to trigger a heap out-of-bounds write with attacker-controlled offset and content. This issue is fixed in version 3.27.1.
- Record
CVE-2026-55827- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-131, CWE-787
- Updated
- 2026-11-02
OSVALPINE-CVE-2026-55827
8.8
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.1, FreeRDP clients launched with the non-default /cache:codec:rfx option pass desktop stride and height to RemoteFX decoding for Cache Bitmap V3 data while allocating bitmap->data only for the smaller DstWidth and DstHeight in gdi_Bitmap_Decompress, allowing a malicious RDP server to trigger a heap out-of-bounds write with attacker-controlled offset and content. This issue is fixed in version 3.27.1.
- Record
ALPINE-CVE-2026-55827- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
OSV
7.5
FreeRDP: Heap out-of-bounds write in RemoteFX (RFX) Cache Bitmap V3 decode
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.1, FreeRDP clients launched with the non-default /cache:codec:rfx option pass desktop stride and height to RemoteFX decoding for Cache Bitmap V3 data while allocating bitmap->data only for the smaller DstWidth and DstHeight in gdi_Bitmap_Decompress, allowing a malicious RDP server to trigger a heap out-of-bounds write with attacker-controlled offset and content. This issue is fixed in version 3.27.1.
- Record
CVE-2026-55827- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-131, CWE-787
- Updated
- 2026-11-02
OSVDEBIAN-CVE-2026-55827
8.8
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.1, FreeRDP clients launched with the non-default /cache:codec:rfx option pass desktop stride and height to RemoteFX decoding for Cache Bitmap V3 data while allocating bitmap->data only for the smaller DstWidth and DstHeight in gdi_Bitmap_Decompress, allowing a malicious RDP server to trigger a heap out-of-bounds write with attacker-controlled offset and content. This issue is fixed in version 3.27.1.
- Record
DEBIAN-CVE-2026-55827- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 7 moreShow less
OSVRHSA-2026:50747
7.5
Red Hat Security Advisory: freerdp security update
- Record
RHSA-2026:50747- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2026:54667
7.5
Red Hat Security Advisory: freerdp security update
- Record
RHSA-2026:54667- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRLSA-2026:50747
7.5
Important: freerdp security update
FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.
Security Fix(es):
- FreeRDP: FreeRDP: Remote code execution via heap out-of-bounds write in RemoteFX decoding (CVE-2026-55827)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2026:50747- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2026-55827
7.5
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.1, FreeRDP clients launched with the non-default /cache:codec:rfx option pass desktop stride and height to RemoteFX decoding for Cache Bitmap V3 data while allocating bitmap->data only for the smaller DstWidth and DstHeight in gdi_Bitmap_Decompress, allowing a malicious RDP server to trigger a heap out-of-bounds write with attacker-controlled offset and content. This issue is fixed in version 3.27.1.
- Record
UBUNTU-CVE-2026-55827- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVALSA-2026:50747 No score
Important: freerdp security update
FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.
Security Fix(es):
- FreeRDP: FreeRDP: Remote code execution via heap out-of-bounds write in RemoteFX decoding (CVE-2026-55827)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2026:50747- Updated
- 2026-11-02
OSVopenSUSE-SU-2026:11065-1 No score
freerdp-3.27.1-1.1 on GA media
These are all security issues fixed in the freerdp-3.27.1-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2026:11065-1- Updated
- 2026-11-02
OSVUSN-8561-1 No score
freerdp3 vulnerabilities
It was discovered that FreeRDP contained multiple security issues. An attacker could possibly use these issues to obtain sensitive information, cause FreeRDP to crash, resulting in a denial of service, or execute arbitrary code.
- Record
USN-8561-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
freerdpAlpine:v3.24 |
before 3.27.1-r0 | 3.27.1-r0 |
freerdpAlmaLinux:10 |
before 2:3.10.3-12.el10_2.7 | 2:3.10.3-12.el10_2.7 |
freerdp-develAlmaLinux:10 |
before 2:3.10.3-12.el10_2.7 | 2:3.10.3-12.el10_2.7 |
freerdp-libsAlmaLinux:10 |
before 2:3.10.3-12.el10_2.7 | 2:3.10.3-12.el10_2.7 |
freerdp-serverAlmaLinux:10 |
before 2:3.10.3-12.el10_2.7 | 2:3.10.3-12.el10_2.7 |
libwinprAlmaLinux:10 |
before 2:3.10.3-12.el10_2.7 | 2:3.10.3-12.el10_2.7 |
libwinpr-develAlmaLinux:10 |
before 2:3.10.3-12.el10_2.7 | 2:3.10.3-12.el10_2.7 |
freerdp2Debian:12 |
All versions, plus listed versions 2.10.0+dfsg1-12.10.0+dfsg1-1.12.11.2+dfsg1-12.11.2+dfsg1-1.1~exp12.11.2+dfsg1-1.1~exp2 Show 8 moreShow less2.11.5+dfsg1-12.11.7+dfsg1-12.11.7+dfsg1-22.11.7+dfsg1-32.11.7+dfsg1-42.11.7+dfsg1-52.11.7+dfsg1-62.11.7+dfsg1-6~deb12u1 |
None known |
freerdp3Debian:13 |
All versions, plus listed versions 3.15.0+dfsg-2.13.15.0+dfsg-2.1+deb13u13.15.0+dfsg-2.1+deb13u23.15.0+dfsg-2.1+deb13u33.16.0+dfsg-1 Show 44 moreShow less3.16.0+dfsg-23.17.0+dfsg-13.17.1+dfsg-13.17.1+dfsg-23.17.2+dfsg-13.17.2+dfsg-23.17.2+dfsg-33.18.0+dfsg-13.19.0+dfsg-13.19.1+dfsg-13.20.0+dfsg-13.20.2+dfsg-13.21.0+dfsg-13.22.0+dfsg-13.22.0+dfsg-1~bpo13+03.22.0+dfsg-1~bpo13+13.22.0+dfsg-33.23.0+dfsg-13.23.0+dfsg-1~bpo13+13.24.0+dfsg-13.24.0+dfsg-23.24.1+dfsg-13.24.2+dfsg-13.24.2+dfsg-1~bpo13+13.25.0+dfsg-13.25.0+dfsg-23.25.0+dfsg-33.25.0+dfsg-43.25.0+dfsg-53.26.0+dfsg-13.26.0+dfsg-1~bpo13+13.27.0+dfsg-13.27.1+dfsg-13.28.0+dfsg-13.28.0+dfsg-23.29.0+dfsg-13.30.0+dfsg-13.30.0+dfsg-1~bpo13+13.31.0+dfsg-13.31.1+dfsg-13.31.1+dfsg-1~bpo13+13.32.0+dfsg-13.32.1+dfsg-13.32.1+dfsg-1~bpo13+1 |
None known |
freerdp3Debian:14 |
before 3.27.1+dfsg-1, plus listed versions 3.15.0+dfsg-2.13.16.0+dfsg-13.16.0+dfsg-23.17.0+dfsg-13.17.1+dfsg-1 Show 29 moreShow less3.17.1+dfsg-23.17.2+dfsg-13.17.2+dfsg-23.17.2+dfsg-33.18.0+dfsg-13.19.0+dfsg-13.19.1+dfsg-13.20.0+dfsg-13.20.2+dfsg-13.21.0+dfsg-13.22.0+dfsg-13.22.0+dfsg-1~bpo13+03.22.0+dfsg-1~bpo13+13.22.0+dfsg-33.23.0+dfsg-13.23.0+dfsg-1~bpo13+13.24.0+dfsg-13.24.0+dfsg-23.24.1+dfsg-13.24.2+dfsg-13.24.2+dfsg-1~bpo13+13.25.0+dfsg-13.25.0+dfsg-23.25.0+dfsg-33.25.0+dfsg-43.25.0+dfsg-53.26.0+dfsg-13.26.0+dfsg-1~bpo13+13.27.0+dfsg-1 |
3.27.1+dfsg-1 |
Show 35 moreShow less
| Package | Affected | Fixed |
|---|---|---|
freerdpRed Hat:enterprise_linux:10.2 |
before 2:3.10.3-12.el10_2.7 | 2:3.10.3-12.el10_2.7 |
freerdp-debuginfoRed Hat:enterprise_linux:10.2 |
before 2:3.10.3-12.el10_2.7 | 2:3.10.3-12.el10_2.7 |
freerdp-debugsourceRed Hat:enterprise_linux:10.2 |
before 2:3.10.3-12.el10_2.7 | 2:3.10.3-12.el10_2.7 |
freerdp-libsRed Hat:enterprise_linux:10.2 |
before 2:3.10.3-12.el10_2.7 | 2:3.10.3-12.el10_2.7 |
freerdp-libs-debuginfoRed Hat:enterprise_linux:10.2 |
before 2:3.10.3-12.el10_2.7 | 2:3.10.3-12.el10_2.7 |
freerdp-server-debuginfoRed Hat:enterprise_linux:10.2 |
before 2:3.10.3-12.el10_2.7 | 2:3.10.3-12.el10_2.7 |
libwinprRed Hat:enterprise_linux:10.2 |
before 2:3.10.3-12.el10_2.7 | 2:3.10.3-12.el10_2.7 |
libwinpr-debuginfoRed Hat:enterprise_linux:10.2 |
before 2:3.10.3-12.el10_2.7 | 2:3.10.3-12.el10_2.7 |
freerdp-develRed Hat:enterprise_linux:10.2 |
before 2:3.10.3-12.el10_2.7 | 2:3.10.3-12.el10_2.7 |
freerdp-serverRed Hat:enterprise_linux:10.2 |
before 2:3.10.3-12.el10_2.7 | 2:3.10.3-12.el10_2.7 |
libwinpr-develRed Hat:enterprise_linux:10.2 |
before 2:3.10.3-12.el10_2.7 | 2:3.10.3-12.el10_2.7 |
freerdpRed Hat:enterprise_linux_eus:10.0 |
before 2:3.10.3-3.el10_0.10 | 2:3.10.3-3.el10_0.10 |
freerdp-debuginfoRed Hat:enterprise_linux_eus:10.0 |
before 2:3.10.3-3.el10_0.10 | 2:3.10.3-3.el10_0.10 |
freerdp-debugsourceRed Hat:enterprise_linux_eus:10.0 |
before 2:3.10.3-3.el10_0.10 | 2:3.10.3-3.el10_0.10 |
freerdp-libsRed Hat:enterprise_linux_eus:10.0 |
before 2:3.10.3-3.el10_0.10 | 2:3.10.3-3.el10_0.10 |
freerdp-libs-debuginfoRed Hat:enterprise_linux_eus:10.0 |
before 2:3.10.3-3.el10_0.10 | 2:3.10.3-3.el10_0.10 |
freerdp-server-debuginfoRed Hat:enterprise_linux_eus:10.0 |
before 2:3.10.3-3.el10_0.10 | 2:3.10.3-3.el10_0.10 |
libwinprRed Hat:enterprise_linux_eus:10.0 |
before 2:3.10.3-3.el10_0.10 | 2:3.10.3-3.el10_0.10 |
libwinpr-debuginfoRed Hat:enterprise_linux_eus:10.0 |
before 2:3.10.3-3.el10_0.10 | 2:3.10.3-3.el10_0.10 |
freerdp-develRed Hat:enterprise_linux_eus:10.0 |
before 2:3.10.3-3.el10_0.10 | 2:3.10.3-3.el10_0.10 |
freerdp-serverRed Hat:enterprise_linux_eus:10.0 |
before 2:3.10.3-3.el10_0.10 | 2:3.10.3-3.el10_0.10 |
libwinpr-develRed Hat:enterprise_linux_eus:10.0 |
before 2:3.10.3-3.el10_0.10 | 2:3.10.3-3.el10_0.10 |
freerdpRocky Linux:10 |
before 2:3.10.3-12.el10_2.7 | 2:3.10.3-12.el10_2.7 |
freerdpUbuntu:16.04:LTS |
All versions, plus listed versions 1.1.0~git20140921.1.440916e+dfsg1-5ubuntu11.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.21.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.31.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4 |
None known |
freerdp2Ubuntu:Pro:18.04:LTS |
All versions, plus listed versions 2.0.0~git20170725.1.1648deb+dfsg1-12.0.0~git20170725.1.1648deb+dfsg1-52.0.0~git20170725.1.1648deb+dfsg1-5ubuntu12.0.0~git20170725.1.1648deb+dfsg1-5ubuntu22.0.0~git20170725.1.1648deb+dfsg1-6 Show 14 moreShow less2.0.0~git20170725.1.1648deb+dfsg1-6build12.0.0~git20170725.1.1648deb+dfsg1-72.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.12.1.1+dfsg1-0ubuntu0.18.04.12.2.0+dfsg1-0ubuntu0.18.04.12.2.0+dfsg1-0ubuntu0.18.04.22.2.0+dfsg1-0ubuntu0.18.04.32.2.0+dfsg1-0ubuntu0.18.04.42.2.0+dfsg1-0ubuntu0.18.04.4+esm12.2.0+dfsg1-0ubuntu0.18.04.4+esm22.2.0+dfsg1-0ubuntu0.18.04.4+esm32.2.0+dfsg1-0ubuntu0.18.04.4+esm42.2.0+dfsg1-0ubuntu0.18.04.4+esm52.2.0+dfsg1-0ubuntu0.18.04.4+esm6 |
None known |
freerdpUbuntu:18.04:LTS |
All versions, plus listed versions 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu11.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.11.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2 |
None known |
freerdp2Ubuntu:Pro:20.04:LTS |
All versions, plus listed versions 2.0.0~git20190204.1.2693389a+dfsg1-12.0.0~git20190204.1.2693389a+dfsg1-22.0.0~git20190204.1.2693389a+dfsg1-2build12.0.0~git20190204.1.2693389a+dfsg1-2build22.1.1+dfsg1-0ubuntu0.20.04.1 Show 12 moreShow less2.2.0+dfsg1-0ubuntu0.20.04.12.2.0+dfsg1-0ubuntu0.20.04.22.2.0+dfsg1-0ubuntu0.20.04.32.2.0+dfsg1-0ubuntu0.20.04.42.2.0+dfsg1-0ubuntu0.20.04.52.2.0+dfsg1-0ubuntu0.20.04.62.6.1+dfsg1-0ubuntu0.20.04.12.6.1+dfsg1-0ubuntu0.20.04.22.6.1+dfsg1-0ubuntu0.20.04.2+esm12.6.1+dfsg1-0ubuntu0.20.04.2+esm22.6.1+dfsg1-0ubuntu0.20.04.2+esm32.6.1+dfsg1-0ubuntu0.20.04.2+esm4 |
None known |
freerdp2Ubuntu:22.04:LTS |
All versions, plus listed versions 2.3.0+dfsg1-2build12.3.0+dfsg1-2ubuntu12.3.0+dfsg1-2ubuntu22.4.1+dfsg1-12.4.1+dfsg1-1ubuntu1 Show 18 moreShow less2.4.1+dfsg1-1ubuntu22.5.0+dfsg1-12.6.0+dfsg1-12.6.1+dfsg1-12.6.1+dfsg1-32.6.1+dfsg1-3ubuntu12.6.1+dfsg1-3ubuntu22.6.1+dfsg1-3ubuntu2.12.6.1+dfsg1-3ubuntu2.22.6.1+dfsg1-3ubuntu2.32.6.1+dfsg1-3ubuntu2.42.6.1+dfsg1-3ubuntu2.52.6.1+dfsg1-3ubuntu2.62.6.1+dfsg1-3ubuntu2.72.6.1+dfsg1-3ubuntu2.82.6.1+dfsg1-3ubuntu2.92.6.1+dfsg1-3ubuntu2.102.6.1+dfsg1-3ubuntu2.11 |
None known |
freerdp3Ubuntu:24.04:LTS |
before 3.30.0+dfsg-0ubuntu0.24.04.1, plus listed versions 3.4.0+dfsg1-0ubuntu23.4.0+dfsg1-0ubuntu33.4.0+dfsg1-0ubuntu43.5.0+dfsg1-0ubuntu13.5.1+dfsg1-0ubuntu1 Show 5 moreShow less3.5.1+dfsg1-0ubuntu1.13.5.1+dfsg1-0ubuntu1.23.5.1+dfsg1-0ubuntu1.43.5.1+dfsg1-0ubuntu1.53.5.1+dfsg1-0ubuntu1.6 |
3.30.0+dfsg-0ubuntu0.24.04.1 |
freerdp2Ubuntu:Pro:24.04:LTS |
All versions, plus listed versions 2.10.0+dfsg1-1.1ubuntu12.11.2+dfsg1-12.11.2+dfsg1-1build12.11.2+dfsg1-1build32.11.5+dfsg1-1build1 Show 7 moreShow less2.11.5+dfsg1-1build22.11.5+dfsg1-1ubuntu0.1~esm12.11.5+dfsg1-1ubuntu0.1~esm22.11.5+dfsg1-1ubuntu0.1~esm32.11.5+dfsg1-1ubuntu0.1~esm42.11.5+dfsg1-1ubuntu0.1~esm52.11.5+dfsg1-1ubuntu0.1~esm6 |
None known |
freerdp3Ubuntu:25.10 |
All versions, plus listed versions 3.14.0+dfsg-1ubuntu13.15.0+dfsg-2.13.16.0+dfsg-1ubuntu13.16.0+dfsg-23.16.0+dfsg-2ubuntu0.13.16.0+dfsg-2ubuntu0.33.16.0+dfsg-2ubuntu0.43.16.0+dfsg-2ubuntu0.5 |
None known |
freerdp3Ubuntu:26.04:LTS |
before 3.30.0+dfsg-0ubuntu0.26.04.1, plus listed versions 3.16.0+dfsg-23.18.0+dfsg-1ubuntu13.19.0+dfsg-13.19.1+dfsg-13.20.0+dfsg-1 Show 6 moreShow less3.20.2+dfsg-13.21.0+dfsg-13.22.0+dfsg-13.24.1+dfsg-1ubuntu13.24.2+dfsg-1ubuntu13.24.2+dfsg-1ubuntu1.1 |
3.30.0+dfsg-0ubuntu0.26.04.1 |
freerdp3Ubuntu:24.04:LTS From an advisory covering 34 CVEs |
before 3.30.0+dfsg-0ubuntu0.24.04.1, plus listed versions 3.4.0+dfsg1-0ubuntu23.4.0+dfsg1-0ubuntu33.4.0+dfsg1-0ubuntu43.5.0+dfsg1-0ubuntu13.5.1+dfsg1-0ubuntu1 Show 5 moreShow less3.5.1+dfsg1-0ubuntu1.13.5.1+dfsg1-0ubuntu1.23.5.1+dfsg1-0ubuntu1.43.5.1+dfsg1-0ubuntu1.53.5.1+dfsg1-0ubuntu1.6 |
3.30.0+dfsg-0ubuntu0.24.04.1 |
freerdp3Ubuntu:26.04:LTS From an advisory covering 34 CVEs |
before 3.30.0+dfsg-0ubuntu0.26.04.1, plus listed versions 3.16.0+dfsg-23.18.0+dfsg-1ubuntu13.19.0+dfsg-13.19.1+dfsg-13.20.0+dfsg-1 Show 6 moreShow less3.20.2+dfsg-13.21.0+dfsg-13.22.0+dfsg-13.24.1+dfsg-1ubuntu13.24.2+dfsg-1ubuntu13.24.2+dfsg-1ubuntu1.1 |
3.30.0+dfsg-0ubuntu0.26.04.1 |
freerdpopenSUSE:Tumbleweed From an advisory covering 6 CVEs |
before 3.27.1-1.1 | 3.27.1-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected, aliases, references | OSV | |
| aliases | EUVD | |
| first indexed | CVE List, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-55827 is a high vulnerability (CVSS 7.5) in Freerdp, published June 19, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.53%, the 45th percentile. Fixed in freerdp 3.27.1-r0.
References
github.com/FreeRDP/FreeRDP/security/advisories/GHSA-c495-h83v-3prp
github.com/FreeRDP/FreeRDP/pull/12899
github.com/FreeRDP/FreeRDP/commit/e58adf922ea4c0d5495e59a1fe488d70092e0e3e
github.com/FreeRDP/FreeRDP/releases/tag/3.27.1
security.alpinelinux.org/vuln/CVE-2026-55827
access.redhat.com/errata/RHSA-2026:50747
Show 54 moreShow less
access.redhat.com/security/cve/CVE-2026-55827
bugzilla.redhat.com/2499159
errata.almalinux.org/10/ALSA-2026-50747.html
github.com/CVEProject/cvelistV5/tree/main/cves/2026/55xxx/CVE-2026-55827.json
nvd.nist.gov/vuln/detail/CVE-2026-55827
security-tracker.debian.org/tracker/CVE-2026-55827
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=2499159
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_50747.json
cve.org/CVERecord?id=CVE-2026-55827
access.redhat.com/errata/RHSA-2026:54667
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_54667.json
errata.rockylinux.org/RLSA-2026:50747
ubuntu.com/security/CVE-2026-55827
ubuntu.com/security/notices/USN-8561-1
ubuntu.com/security/CVE-2026-27951
ubuntu.com/security/CVE-2026-29774
ubuntu.com/security/CVE-2026-29775
ubuntu.com/security/CVE-2026-29776
ubuntu.com/security/CVE-2026-31806
ubuntu.com/security/CVE-2026-31883
ubuntu.com/security/CVE-2026-31884
ubuntu.com/security/CVE-2026-31885
ubuntu.com/security/CVE-2026-31897
ubuntu.com/security/CVE-2026-33952
ubuntu.com/security/CVE-2026-33977
ubuntu.com/security/CVE-2026-33982
ubuntu.com/security/CVE-2026-33983
ubuntu.com/security/CVE-2026-33984
ubuntu.com/security/CVE-2026-33985
ubuntu.com/security/CVE-2026-33986
ubuntu.com/security/CVE-2026-33987
ubuntu.com/security/CVE-2026-33995
ubuntu.com/security/CVE-2026-40033
ubuntu.com/security/CVE-2026-40254
ubuntu.com/security/CVE-2026-44420
ubuntu.com/security/CVE-2026-44421
ubuntu.com/security/CVE-2026-44422
ubuntu.com/security/CVE-2026-55191
ubuntu.com/security/CVE-2026-55192
ubuntu.com/security/CVE-2026-55193
ubuntu.com/security/CVE-2026-55194
ubuntu.com/security/CVE-2026-55564
ubuntu.com/security/CVE-2026-55648
ubuntu.com/security/CVE-2026-56297
ubuntu.com/security/CVE-2026-57156
ubuntu.com/security/CVE-2026-57157
ubuntu.com/security/CVE-2026-57158
suse.com/security/cve/CVE-2026-55191
suse.com/security/cve/CVE-2026-55192
suse.com/security/cve/CVE-2026-55193
suse.com/security/cve/CVE-2026-55194
suse.com/security/cve/CVE-2026-55648
suse.com/security/cve/CVE-2026-55827