Skip to contentFreerdp vulnerabilities
Newest
- freerdpFreeRDP 2.0.0 before 3.32.0 Heap Out-of-Bounds Write via NTLM MIC OffsetCVE-2026-111880Fix available8.3 High
- freerdpFreeRDP before 3.32.0 Heap Out-of-Bounds Write in AVC444 YUV444 CombineCVE-2026-111382Fix available8.7 High
- freerdpFreeRDP before 3.32.0 Heap Buffer Overflow via Persistent Cache v2 ParserCVE-2026-111381Fix available7.0 High
- freerdpFreeRDP 3.29.0 before 3.32.0 Heap Overflow via audin Apple BackendsCVE-2026-111380Fix available8.7 High
- freerdpFreeRDP before 3.32.0 Heap Buffer Overflow via persistent_cache_read_entry_v3CVE-2026-111379Fix available7.0 High
- freerdpFreeRDP 3.0.0 before 3.32.0 Unauthenticated Memory Exhaustion via NLA Frame ParserCVE-2026-111378Fix available8.7 High
- freerdpFreeRDP 2.0.0 before 3.32.0 Memory Exhaustion via Static Channel ReassemblyCVE-2026-111377Fix available7.1 High
- freerdpFreeRDP 3.30.0 before 3.32.0 Heap Over-Read via Windows cliprdr FILECONTENTS_SIZECVE-2026-111376Fix available2.3 Low
- freerdpFreeRDP 3.0.0 before 3.32.0 Out-of-Bounds Read via RAIL Window TitleCVE-2026-111375Fix available6.3 Medium
- freerdpFreeRDP from 3.30.0 before 3.32.0 Resource Exhaustion via rdpecam StartStreamsRequestCVE-2026-111374Fix available6.0 Medium
- freerdpFreeRDP before 3.32.0 NULL Dereference via Zero-Length WebSocket PingCVE-2026-111373Fix available6.9 Medium
- freerdpFreeRDP 3.3.0 before 3.32.0 Heap Out-of-Bounds Write via Grayscale JPEG Clipboard DataCVE-2026-110839Fix available7.1 High
- freerdpFreeRDP shadow before 3.32.0 Pre-Authentication Input Injection via Confirm Active bypassCVE-2026-110838Fix available8.7 High
- freerdpFreeRDP 2.0.0 before 3.32.0 Heap Buffer Overflow via MP3 Audio DecodingCVE-2026-110837Fix available6.1 Medium
- freerdpFreeRDP 3.0.0 before 3.32.0 Infinite Loop DoS via Gateway Content-TypeCVE-2026-110836Fix available7.1 High
- freerdpFreeRDP 3.0.0 before 3.32.0 HTTP Header Injection via Proxy Routing TokenCVE-2026-110835Fix available6.3 Medium
- freerdpFreeRDP 2.0.0 before 3.32.0 Denial of Service via Serial IRP Null HandleCVE-2026-110834Fix available7.1 High
- freerdpFreeRDP before 3.32.0 Unbounded Memory Retention via RDPDR ProxyCVE-2026-110833Fix available8.2 High
- freerdpFreeRDP 2.0.0 before 3.32.0 Memory Exhaustion via DRDYNVC DATA_FIRSTCVE-2026-110832Fix available7.1 High
- freerdpFreeRDP 3.13.0 before 3.32.0 Resource Leak via Drive Redirection IRP_MJ_CREATECVE-2026-110831Fix available5.3 Medium
- freerdpFreeRDP before 3.32.0 Denial of Service via Serial IRP_MJ_CREATECVE-2026-110830Fix available8.2 High
- freerdpFreeRDP 3.0.0 before 3.32.0 Null Pointer Dereference via rdpsnd FragmentCVE-2026-110829Fix available7.1 High
- freerdpFreeRDP 3.0.0 before 3.32.0 Cleartext Credential Disclosure via /restricted-adminCVE-2026-109953Fix available6.0 Medium
- freerdpFreeRDP 3.0.0 before 3.32.0 Security Protocol Downgrade via Negotiation ResponseCVE-2026-109952Fix available6.0 Medium
- freerdpFreeRDP 3.17.1 before 3.32.0 Heap Buffer Over-Read via Proxy DRDYNVC Channel NameCVE-2026-109951Fix available6.9 Medium
- freerdpFreeRDP 3.0.0 before 3.32.0 Heap Out-of-Bounds Read via RD Gateway MessagesCVE-2026-109950Fix available5.3 Medium
- freerdpFreeRDP 3.0.0 before 3.32.0 PIN Brute-Force via Virtual SmartcardCVE-2026-109949Fix available7.1 High
- freerdpFreeRDP 3.0.0 before 3.32.0 Memory Disclosure via SCardTransmit Smartcard RedirectionCVE-2026-109948Fix available5.3 Medium
- freerdpFreeRDP 3.20.1 before 3.32.0 Unbounded Allocation via drive_process_irp_readCVE-2026-109947Fix available7.1 High
- freerdpFreeRDP 3.11.0 before 3.32.0 Reachable Assertion via AVC444 Odd Region WidthCVE-2026-109946Fix available7.1 High
- freerdpFreeRDP 3.0.0 before 3.32.0 Smartcard Use-After-Free via Concurrent Disconnect and TransmitCVE-2026-109945Fix available6.0 Medium
- freerdpFreeRDP 3.0.0 before 3.32.0 Reachable Assertion via Stale Smartcard HandleCVE-2026-109944Fix available7.1 High
- freerdpFreeRDP 3.29.0 before 3.32.0 Double Free via Async-Update Polygon OrderCVE-2026-109943Fix available7.1 High
- freerdpFreeRDP 2.3.0 before 3.32.0 NULL Pointer Dereference via RD Gateway Close Channel PacketCVE-2026-109942Fix available7.1 High
- freerdpFreeRDP 2.3.0 before 3.32.0 Infinite Loop via RD Gateway Chunked ResponseCVE-2026-109941Fix available7.1 High
- freerdpFreeRDP 3.0.0-beta1 before 3.32.0 Stack Buffer Overflow via PKCS#11 Key NameCVE-2026-109940Fix available5.1 Medium
- freerdpFreeRDP 3.27.1 before 3.32.0 NULL Pointer Dereference via Cache Bitmap V3 OrderCVE-2026-109939Fix available7.1 High
- freerdpFreeRDP 3.11.0 before 3.32.0 Integer Overflow via Mapped Video Geometry UpdateCVE-2026-109938Fix available7.1 High
- freerdpFreeRDP 3.18.0 before 3.32.0 Heap Out-of-Bounds Write via ARM Redirected UsernameCVE-2026-109680Fix available6.0 Medium
- freerdpFreeRDP 3.0.0-beta4 before 3.32.0 NULL Pointer Crash via ARM ResponseCVE-2026-109679Fix available6.0 Medium
- freerdpFreeRDP 3.0.0-beta1 before 3.32.0 Reachable Assertion via Emulated SCardStatusACVE-2026-109678Fix available7.1 High
- freerdpFreeRDP 2.0.0-beta1 before 3.28.0 Out-of-Bounds Read via LocateCardsByATRA HandlerCVE-2026-109677Fix available7.1 High
- freerdpFreeRDP 3.0.0-beta1 before 3.32.0 Use-After-Free via Smartcard ConnectCVE-2026-109676Fix available8.7 High
- freerdpFreeRDP before 3.32.0 Double Free via NSCodec plane growth failureCVE-2026-109257Fix available8.2 High
- freerdpFreeRDP 3.10.0 through 3.32.2 Heap Buffer Overflow in WinPR PNG ConversionCVE-2026-109256Fix available6.0 Medium
- freerdpFreeRDP 3.0.0 before 3.32.0 heap buffer overflow via license_check_stream_lengthCVE-2026-109255Public exploitFix available6.1 Medium
- freerdpFreeRDP 2.1.0 before 3.32.0 Use-After-Free via rdpsnd Disconnect PathCVE-2026-109254Fix available6.0 Medium
- freerdpFreeRDP 3.9.0 before 3.32.0 RDPEAR NDR Scalar Out-of-Bounds ReadCVE-2026-109253Fix available6.0 Medium
- freerdpFreeRDP from 3.9.0 before 3.32.0 RDPEAR NULL Pointer Dereference via KERB_RPC_INTERNAL_NAMECVE-2026-109252Fix available6.0 Medium
- freerdpFreeRDP before 3.32.0 Out-of-Bounds Write via MS-RDPEGT Video GeometryCVE-2026-109251Fix available6.0 Medium
- Show moreLoading…