Vulnerability index

Browse CVEs

88 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Freerdp HIGH 7.8
CVE-2026-64624

FreeRDP before 3.28.0 treats lines beginning with forward slash in RDP files as raw command-line options, exposing the entire CLI parser surface to u…

Fix: 3.28.0+
Fix from $1,950 2026-07-20
Freerdp CRITICAL 9.1
CVE-2026-64620

FreeRDP before 3.28.0 (affected <=3.27.1) contains a heap-based buffer overflow in crypto_rsa_common() (libfreerdp/crypto/crypto.c). The function wri…

Fix: 3.28.0+
Fix from $2,300 2026-07-20
Freerdp HIGH 7.3
CVE-2026-64621

FreeRDP before 3.28.0 (affected 3.x through 3.27.1) contains a double-free vulnerability in freerdp_client_rdp_file_apply_to_settings() (client/commo…

Fix: 3.28.0+
Fix from $1,950 2026-07-20
Freerdp CRITICAL 9.8
CVE-2026-57156

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.28.0 on 32-bit builds, FreeRDP clients contain an integer overflow in upd…

Fix: 3.28.0+
Fix from $2,300 2026-07-10
Freerdp CRITICAL 9.1
CVE-2026-57158

FreeRDP is a free implementation of the Remote Desktop Protocol. From 3.21.0 before 3.28.0, FreeRDP clients using the GFX pipeline contain an incompl…

Fix: 3.28.0+
Fix from $2,300 2026-07-10
Freerdp HIGH 8.8
CVE-2026-55827

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.1, FreeRDP clients launched with the non-default /cache:codec:rfx opti…

Fix: 3.27.1+
Fix from $1,950 2026-07-10
Freerdp MEDIUM 6.5
CVE-2026-57157

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.28.0, FreeRDP server implementations with the MS-RDPECAM camera device en…

Fix: 3.28.0+
Fix from $1,600 2026-07-10
Freerdp HIGH 8.1
CVE-2026-56297

FreeRDP before 3.22.0 contains a use-after-free vulnerability in dvcman_channel_close and dvcman_call_on_receive due to improper synchronization of c…

Fix: 3.22.0+
Fix from $1,950 2026-07-08
Freerdp CRITICAL 9.8
CVE-2026-45700

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, FreeRDP's planar bitmap decoder has an out-of-bounds heap write whe…

Fix: 3.26.0+
Fix from $2,300 2026-05-29
Freerdp HIGH 8.8
CVE-2026-44420

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, a malicious RDP client can trigger a heap-buffer-overflow write in …

Fix: 3.26.0+
Fix from $1,950 2026-05-29
Freerdp HIGH 8.8
CVE-2026-44421

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, a malicious RDP server can trigger a heap-buffer-overflow write in …

Fix: 3.26.0+
Fix from $1,950 2026-05-29
Freerdp HIGH 8.8
CVE-2026-44422

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, FreeRDP's RDPEAR NDR parser accepts one non-null NDR pointer ref-id…

Fix: 3.26.0+
Fix from $1,950 2026-05-29
Freerdp HIGH 8.8
CVE-2026-40033

FreeRDP before 3.26.0 contains a heap-buffer-overflow vulnerability in gdi_CacheToSurface that allows remote attackers to write out-of-bounds heap me…

Fix: 3.26.0+
Fix from $1,950 2026-05-26
Freerdp MEDIUM 6.1
CVE-2026-40254

FreeRDP is a free implementation of the Remote Desktop Protocol. Versions prior to 3.25.0 have an off-by-one in the path traversal filter in `channel…

Fix: 3.25.0+
Fix from $1,600 2026-04-24
Freerdp MEDIUM 6.6
CVE-2026-33987

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, in persistent_cache_read_entry_v3() in libfreerdp/cache/per…

Fix: 3.24.2+
Fix from $1,600 2026-03-30
Freerdp MEDIUM 5.3
CVE-2026-33995

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, a double-free vulnerability in kerberos_AcceptSecurityConte…

Fix: 3.24.2+
Fix from $1,600 2026-03-30
Freerdp HIGH 8.1
CVE-2026-33982

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, there is a heap-buffer-overflow READ vulnerability at 24 by…

Fix: 3.24.2+
Fix from $1,950 2026-03-30
Freerdp HIGH 7.5
CVE-2026-33984

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, in resize_vbar_entry() in libfreerdp/codec/clear.c, vBarEnt…

Fix: 3.24.2+
Fix from $1,950 2026-03-30
Freerdp HIGH 7.5
CVE-2026-33986

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, in yuv_ensure_buffer() in libfreerdp/codec/h264.c, h264->wi…

Fix: 3.24.2+
Fix from $1,950 2026-03-30
Freerdp HIGH 7.1
CVE-2026-33985

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, pixel data from adjacent heap memory is rendered to screen,…

Fix: 3.24.2+
Fix from $1,950 2026-03-30
Freerdp MEDIUM 6.5
CVE-2026-33977

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, a malicious RDP server can crash the FreeRDP client by send…

Fix: 3.24.2+
Fix from $1,600 2026-03-30
Freerdp MEDIUM 6.5
CVE-2026-33983

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, progressive_decompress_tile_upgrade() detects a mismatch vi…

Fix: 3.24.2+
Fix from $1,600 2026-03-30
Freerdp MEDIUM 6.5
CVE-2026-33952

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, an unvalidated auth_length field read from the network trig…

Fix: 3.24.2+
Fix from $1,600 2026-03-30
Freerdp CRITICAL 9.1
CVE-2026-31897

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, there is an out-of-bounds read in freerdp_bitmap_decompress_planar …

Fix: 3.24.0+
Fix from $2,300 2026-03-13
Freerdp CRITICAL 9.8
CVE-2026-31883

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, a size_t underflow in the IMA-ADPCM and MS-ADPCM audio decoders lea…

Fix: 3.24.0+
Fix from $2,300 2026-03-13
Freerdp CRITICAL 9.4
CVE-2026-31885

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, there is an out-of-bounds read in MS-ADPCM and IMA-ADPCM decoders d…

Fix: 3.24.0+
Fix from $2,300 2026-03-13
Freerdp HIGH 7.5
CVE-2026-31884

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, division by zero in MS-ADPCM and IMA-ADPCM decoders when nBlockAlig…

Fix: 3.24.0+
Fix from $1,950 2026-03-13
Freerdp CRITICAL 9.8
CVE-2026-31806

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, the gdi_surface_bits() function processes SURFACE_BITS_COMMAND mes…

Fix: 3.24.0+
Fix from $2,300 2026-03-13
Freerdp HIGH 8.2
CVE-2026-29775

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, a client-side heap out-of-bounds read/write occurs in FreeRDP's bit…

Fix: 3.24.0+
Fix from $1,950 2026-03-13
Freerdp HIGH 8.2
CVE-2026-29774

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, a client-side heap buffer overflow occurs in the FreeRDP client's A…

Fix: 3.24.0+
Fix from $1,950 2026-03-13