Vulnerability index

Browse CVEs

88 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Freerdp HIGH 7.5
CVE-2026-27950

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, the fix for the heap-use-after-free described in CVE-2026-2…

Fix: 3.23.0+
Fix from $1,950 2026-02-25
Freerdp HIGH 7.5
CVE-2026-27951

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, the function `Stream_EnsureCapacity` can create an endless …

Fix: 3.23.0+
Fix from $1,950 2026-02-25
Freerdp HIGH 7.5
CVE-2026-26986

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `rail_window_free` dereferences a freed `xfAppWindow` point…

Fix: 3.23.0+
Fix from $1,950 2026-02-25
Freerdp HIGH 8.8
CVE-2026-26965

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, in the RLE planar decode path, `planar_decompress_plane_rle…

Fix: 3.23.0+
Fix from $1,950 2026-02-25
Freerdp MEDIUM 6.5
CVE-2026-27015

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, a missing bounds check in `smartcard_unpack_read_size_align…

Fix: 3.23.0+
Fix from $1,600 2026-02-25
Freerdp CRITICAL 9.8
CVE-2026-25959

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_cliprdr_provide_data_` passes freed `pDstData` to `XCha…

Fix: 3.23.0+
Fix from $2,300 2026-02-25
Freerdp CRITICAL 9.8
CVE-2026-25997

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_clipboard_format_equal` reads freed `lastSentFormats` m…

Fix: 3.23.0+
Fix from $2,300 2026-02-25
Freerdp HIGH 8.8
CVE-2026-26955

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, a malicious RDP server can trigger a heap buffer overflow i…

Fix: 3.23.0+
Fix from $1,950 2026-02-25
Freerdp MEDIUM 5.3
CVE-2026-26271

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, a buffer overread in `freerdp_image_copy_from_icon_data()` …

Fix: 3.23.0+
Fix from $1,600 2026-02-25
Freerdp CRITICAL 9.8
CVE-2026-25952

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_SetWindowMinMaxInfo` dereferences a freed `xfAppWindow`…

Fix: 3.23.0+
Fix from $2,300 2026-02-25
Freerdp CRITICAL 9.8
CVE-2026-25953

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_AppUpdateWindowFromSurface` reads from a freed `xfAppWi…

Fix: 3.23.0+
Fix from $2,300 2026-02-25
Freerdp CRITICAL 9.8
CVE-2026-25955

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_AppUpdateWindowFromSurface` reuses a cached `XImage` wh…

Fix: 3.23.0+
Fix from $2,300 2026-02-25
Freerdp HIGH 7.5
CVE-2026-25942

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_rail_server_execute_result` indexes the global `error_c…

Fix: 3.23.0+
Fix from $1,950 2026-02-25
Freerdp HIGH 7.5
CVE-2026-25954

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_rail_server_local_move_size` dereferences a freed `xfAp…

Fix: 3.23.0+
Fix from $1,950 2026-02-25
Freerdp HIGH 8.1
CVE-2026-25941

FreeRDP is a free implementation of the Remote Desktop Protocol. Versions on the 2.x branch prior to to 2.11.8 and on the 3.x branch prior to 3.23.0 …

Fix: 2.11.8 / 3.23.0+
Fix from $1,950 2026-02-25
Freerdp HIGH 7.5
CVE-2026-24684

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, the RDPSND async playback thread can process queued PDUs after the …

Fix: 3.22.0+
Fix from $1,950 2026-02-09
Freerdp CRITICAL 9.1
CVE-2026-24677

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, ecam_encoder_compress_h264 trusts server-controlled dimensions and …

Fix: 3.22.0+
Fix from $2,300 2026-02-09
Freerdp CRITICAL 9.1
CVE-2026-24679

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, The URBDRC client uses server-supplied interface numbers as array i…

Fix: 3.22.0+
Fix from $2,300 2026-02-09
Freerdp HIGH 7.5
CVE-2026-24678

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, A capture thread sends sample responses using a freed channel callb…

Fix: 3.22.0+
Fix from $1,950 2026-02-09
Freerdp HIGH 7.5
CVE-2026-24680

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, sdl_Pointer_New frees data on failure, then pointer_free calls sdl_…

Fix: 3.22.0+
Fix from $1,950 2026-02-09
Freerdp HIGH 7.5
CVE-2026-24681

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, aAsynchronous bulk transfer completions can use a freed channel cal…

Fix: 3.22.0+
Fix from $1,950 2026-02-09
Freerdp HIGH 7.5
CVE-2026-24682

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, audin_server_recv_formats frees an incorrect number of audio format…

Fix: 3.22.0+
Fix from $1,950 2026-02-09
Freerdp HIGH 7.5
CVE-2026-24683

FreeRDP is a free implementation of the Remote Desktop Protocol. ainput_send_input_event caches channel_callback in a local variable and later uses i…

Fix: 3.22.0+
Fix from $1,950 2026-02-09
Freerdp HIGH 7.5
CVE-2026-24491

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, video_timer can send client notifications after the control channel…

Fix: 3.22.0+
Fix from $1,950 2026-02-09
Freerdp HIGH 7.5
CVE-2026-24675

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, urb_select_interface can free the device's MS config on error but l…

Fix: 3.22.0+
Fix from $1,950 2026-02-09
Freerdp HIGH 7.5
CVE-2026-24676

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, AUDIN format renegotiation frees the active format list while the c…

Fix: 3.22.0+
Fix from $1,950 2026-02-09
Freerdp HIGH 7.5
CVE-2026-23948

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, a NULL pointer dereference vulnerability in rdp_write_logon_info_v2…

Fix: 3.22.0+
Fix from $1,950 2026-02-09
Freerdp CRITICAL 9.8
CVE-2026-23883

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, `xf_Pointer_New` frees `cursorPixels` on failure, then `poi…

Fix: 3.21.0+
Fix from $2,300 2026-01-19
Freerdp CRITICAL 9.8
CVE-2026-23884

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, offscreen bitmap deletion leaves `gdi->drawing` pointing to…

Fix: 3.21.0+
Fix from $2,300 2026-01-19
Freerdp CRITICAL 9.8
CVE-2026-23533

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, a client-side heap buffer overflow occurs in the RDPGFX Cle…

Fix: 3.21.0+
Fix from $2,300 2026-01-19