Skip to contentFreerdp vulnerabilities
Newest
- freerdpFreeRDP 3.0.0 before 3.32.0 Heap Buffer Overflow via PKCS#11 collect_keys()CVE-2026-109250Fix available7.0 High
- freerdpFreeRDP 3.0.0 before 3.32.0 Heap Out-of-Bounds Read via Remote Assistance File ParsingCVE-2026-109249Fix available6.8 Medium
- freerdpFreeRDP 3.0.0 before 3.32.0 Heap Out-of-Bounds Read via WinPR Clipboard cFileNameCVE-2026-109248Fix available6.9 Medium
- freerdpFreeRDP before 3.32.0 Path Traversal via Clipboard cFileNameCVE-2026-109247Fix available2.1 Low
- freerdpFreeRDP before 3.32.0 Shadow Server Divide-by-Zero via Frame Acknowledge PDUCVE-2026-109246Fix available7.1 High
- freerdpFreeRDP 3.0.0 before 3.32.0 Improper Certificate Validation in freerdp_http_requestCVE-2026-109245Fix available7.4 High
- freerdpFreeRDP 2.0.0 before 3.32.0 Insecure Private Key Permissions in winpr-makecertCVE-2026-109244Fix available6.8 Medium
- freerdpFreeRDP 3.0.0 before 3.32.0 Insecure Permissions on Soft-Smartcard Private Key FileCVE-2026-109243Fix available4.1 Medium
- freerdpFreeRDP before 3.0.0 and 3.6.0 before 3.32.0 Uninitialized Heap Disclosure via Progressive Codec Tile UpgradeCVE-2026-109242Fix available7.1 High
- freerdpFreeRDP before 3.32.0 NULL Dereference in Video Redirection ChannelCVE-2026-109241Fix available2.3 Low
- freerdpFreeRDP 3.11.0 before 3.32.1 Reachable Assertion DoS via urb_isoch_transferCVE-2026-109240Fix available2.3 Low
- freerdpFreeRDP 2.0.0 through 3.30.0 Heap Buffer Overflow via RoutingTokenCVE-2026-91964Fix available8.7 High
- freerdpFreeRDP 2.0.0 through 3.30.0 Uninitialized Heap Memory Disclosure via urbdrcCVE-2026-91963Fix available7.1 High
- freerdpFreeRDP before 3.31.0 Integer Overflow via audin Apple backendsCVE-2026-91962Fix available5.3 Medium
- freerdpFreeRDP before 3.31.0 Denial of Service via URBDRCCVE-2026-91961Fix available7.1 High
- freerdpFreeRDP before 3.31.0 Integer Overflow Double FreeCVE-2026-91960Fix available7.1 High
- freerdpFreeRDP before 3.31.0 Buffer Over-read via RTS GatewayCVE-2026-91959Fix available7.1 High
- freerdpFreeRDP 3.11.0 through 3.30.0 Heap Buffer Overflow via Monitor IndexCVE-2026-91958Fix available6.9 Medium
- freerdpFreeRDP before 3.31.0 Use-After-Free via smartcard workerCVE-2026-91957Fix available2.3 Low
- freerdpFreeRDP before 3.31.0 Out-of-Bounds Read via URBDRCCVE-2026-91956Fix available7.1 High
- freerdpFreeRDP before 3.31.0 Denial of Service via Desktop DimensionsCVE-2026-91955Fix available8.2 High
- freerdpFreeRDP before 3.31.0 NULL Pointer Dereference via NSCodecCVE-2026-91954Fix available7.1 High
- freerdpFreeRDP before 3.31.0 Heap Buffer Overflow via LB_LOAD_BALANCE_INFOCVE-2026-91953Fix available7.1 High
- freerdpFreeRDP before 3.31.0 Denial of Service via pool_decode_rectCVE-2026-91952Fix available7.1 High
- freerdpFreeRDP 3.14.0 through 3.30.0 Out-of-bounds Write via urbdrcCVE-2026-91951Fix available7.1 High
- freerdpFreeRDP before 3.31.0 Out-of-Bounds Read via UINT32 WraparoundCVE-2026-91950Fix available7.1 High
- freerdpFreeRDP 3.0.0 through 3.30.0 Protocol Negotiation BypassCVE-2026-91949Fix available9.2 Critical
- freerdpFreeRDP before 3.31.0 Out-of-bounds Write via SHOW_PROTOCOLCVE-2026-91948Fix available7.7 High
- freerdpFreeRDP Server before 3.31.0 Use-After-Free via DRDYNVCCVE-2026-91947Fix available7.7 High
- freerdpFreeRDP before 3.31.0 Information Disclosure via RDPGFX ResetGraphicsCVE-2026-91946Fix available7.1 High
- freerdpFreeRDP before 3.31.0 Out-of-bounds Read via Smartcard ATRCVE-2026-91945Fix available7.1 High
- freerdpFreeRDP before 3.31.0 Heap Out-of-Bounds Read via AVC444CVE-2026-85090Fix available5.3 Medium
- freerdpFreeRDP before 3.31.0 Information Disclosure via uninitialized heap memoryCVE-2026-85089Fix available7.1 High
- freerdpFreeRDP: RDSTLS server authentication bypass: a credential-less Capabilities PDU is accepted at the auth step (fail-open `resultCode`)CVE-2026-73241Fix available8.3 High
- freerdpFreeRDP: Kerberos GSS Wrap-token `EC` field is unbounded, causing an out-of-bounds decrypt in `kerberos_DecryptMessage`CVE-2026-73242Fix available8.3 High
- freerdpFreeRDP before 3.29.0 Integer Overflow via Audio Input ChannelCVE-2026-68580Fix available7.7 High
- freerdpFreeRDP before 3.30.0 Heap Overflow via CliprdrStream_ReadCVE-2026-68579Fix available8.7 High
- freerdpFreeRDP before 3.29.0 Out-of-Bounds Read via Planar RLECVE-2026-67306Fix available5.3 Medium
- freerdpFreeRDP before 3.29.0 Denial of Service via serial DeviceControlCVE-2026-67303Fix available5.3 Medium
- freerdpFreeRDP rdpecam StartStreamsRequest divide-by-zero denial of serviceCVE-2026-67302Fix available5.3 Medium
- freerdpFreeRDP before 3.29.0 Use-After-Free via async message proxyCVE-2026-67300Fix available8.7 High
- freerdpFreeRDP before 3.29.0 Use-After-Free via WindowIcon async messageCVE-2026-67299Fix available8.7 High
- freerdpFreeRDP 3.28.0 Heap Buffer Overflow via RAIL orderLength UnderflowCVE-2026-67298Fix available8.7 High
- freerdpFreeRDP before 3.29.0 Path Traversal via drive redirectionCVE-2026-67295Fix available5.3 Medium
- freerdpFreeRDP before 3.29.0 WebSocket Ping Buffer Over-disclosureCVE-2026-67292Fix available9.3 Critical
- freerdpFreeRDP before 3.29.0 Heap Out-of-Bounds Read via GLYPH_FRAGMENT_ADDCVE-2026-67291Fix available8.7 High
- freerdpFreeRDP before 3.29.0 Denial of Service via smartcard cacheCVE-2026-67288Fix available8.7 High
- freerdpFreeRDP before 3.29.0 Out-of-Bounds Read via UVC H.264CVE-2026-66401Fix available2.4 Low
- freerdpFreeRDP before 3.29.0 NULL Dereference via smartcard cleanupCVE-2026-67304Fix available8.7 High
- freerdpFreeRDP before 3.29.0 Denial of Service via RDPEI PDUCVE-2026-67296Fix available8.7 High
- Show moreLoading…