Browse CVEs

HIGH 7.8 CVE-2026-64624 FreeRDP before 3.28.0 treats lines beginning with forward slash in RDP files as raw command-line options, exposing the entire CLI parser surface to u… Freerdp 3.28.0+ Fix from $1,9502026-07-20 CRITICAL 9.1 CVE-2026-64620 FreeRDP before 3.28.0 (affected <=3.27.1) contains a heap-based buffer overflow in crypto_rsa_common() (libfreerdp/crypto/crypto.c). The function wri… Freerdp 3.28.0+ Fix from $2,3002026-07-20 HIGH 7.3 CVE-2026-64621 FreeRDP before 3.28.0 (affected 3.x through 3.27.1) contains a double-free vulnerability in freerdp_client_rdp_file_apply_to_settings() (client/commo… Freerdp 3.28.0+ Fix from $1,9502026-07-20 CRITICAL 9.8 CVE-2026-57156 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.28.0 on 32-bit builds, FreeRDP clients contain an integer overflow in upd… Freerdp 3.28.0+ Fix from $2,3002026-07-10 CRITICAL 9.1 CVE-2026-57158 FreeRDP is a free implementation of the Remote Desktop Protocol. From 3.21.0 before 3.28.0, FreeRDP clients using the GFX pipeline contain an incompl… Freerdp 3.28.0+ Fix from $2,3002026-07-10 HIGH 8.8 CVE-2026-55827 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.1, FreeRDP clients launched with the non-default /cache:codec:rfx opti… Freerdp 3.27.1+ Fix from $1,9502026-07-10 MEDIUM 6.5 CVE-2026-57157 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.28.0, FreeRDP server implementations with the MS-RDPECAM camera device en… Freerdp 3.28.0+ Fix from $1,6002026-07-10 HIGH 8.1 CVE-2026-56297 FreeRDP before 3.22.0 contains a use-after-free vulnerability in dvcman_channel_close and dvcman_call_on_receive due to improper synchronization of c… Freerdp 3.22.0+ Fix from $1,9502026-07-08 CRITICAL 9.8 CVE-2026-45700 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, FreeRDP's planar bitmap decoder has an out-of-bounds heap write whe… Freerdp 3.26.0+ Fix from $2,3002026-05-29 HIGH 8.8 CVE-2026-44420 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, a malicious RDP client can trigger a heap-buffer-overflow write in … Freerdp 3.26.0+ Fix from $1,9502026-05-29 HIGH 8.8 CVE-2026-44421 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, a malicious RDP server can trigger a heap-buffer-overflow write in … Freerdp 3.26.0+ Fix from $1,9502026-05-29 HIGH 8.8 CVE-2026-44422 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, FreeRDP's RDPEAR NDR parser accepts one non-null NDR pointer ref-id… Freerdp 3.26.0+ Fix from $1,9502026-05-29 HIGH 8.8 CVE-2026-40033 FreeRDP before 3.26.0 contains a heap-buffer-overflow vulnerability in gdi_CacheToSurface that allows remote attackers to write out-of-bounds heap me… Freerdp 3.26.0+ Fix from $1,9502026-05-26 MEDIUM 6.1 CVE-2026-40254 FreeRDP is a free implementation of the Remote Desktop Protocol. Versions prior to 3.25.0 have an off-by-one in the path traversal filter in `channel… Freerdp 3.25.0+ Fix from $1,6002026-04-24 MEDIUM 6.6 CVE-2026-33987 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, in persistent_cache_read_entry_v3() in libfreerdp/cache/per… Freerdp 3.24.2+ Fix from $1,6002026-03-30 MEDIUM 5.3 CVE-2026-33995 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, a double-free vulnerability in kerberos_AcceptSecurityConte… Freerdp 3.24.2+ Fix from $1,6002026-03-30 HIGH 8.1 CVE-2026-33982 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, there is a heap-buffer-overflow READ vulnerability at 24 by… Freerdp 3.24.2+ Fix from $1,9502026-03-30 HIGH 7.5 CVE-2026-33984 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, in resize_vbar_entry() in libfreerdp/codec/clear.c, vBarEnt… Freerdp 3.24.2+ Fix from $1,9502026-03-30 HIGH 7.5 CVE-2026-33986 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, in yuv_ensure_buffer() in libfreerdp/codec/h264.c, h264->wi… Freerdp 3.24.2+ Fix from $1,9502026-03-30 HIGH 7.1 CVE-2026-33985 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, pixel data from adjacent heap memory is rendered to screen,… Freerdp 3.24.2+ Fix from $1,9502026-03-30 MEDIUM 6.5 CVE-2026-33977 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, a malicious RDP server can crash the FreeRDP client by send… Freerdp 3.24.2+ Fix from $1,6002026-03-30 MEDIUM 6.5 CVE-2026-33983 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, progressive_decompress_tile_upgrade() detects a mismatch vi… Freerdp 3.24.2+ Fix from $1,6002026-03-30 MEDIUM 6.5 CVE-2026-33952 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, an unvalidated auth_length field read from the network trig… Freerdp 3.24.2+ Fix from $1,6002026-03-30 CRITICAL 9.1 CVE-2026-31897 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, there is an out-of-bounds read in freerdp_bitmap_decompress_planar … Freerdp 3.24.0+ Fix from $2,3002026-03-13 CRITICAL 9.8 CVE-2026-31883 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, a size_t underflow in the IMA-ADPCM and MS-ADPCM audio decoders lea… Freerdp 3.24.0+ Fix from $2,3002026-03-13 CRITICAL 9.4 CVE-2026-31885 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, there is an out-of-bounds read in MS-ADPCM and IMA-ADPCM decoders d… Freerdp 3.24.0+ Fix from $2,3002026-03-13 HIGH 7.5 CVE-2026-31884 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, division by zero in MS-ADPCM and IMA-ADPCM decoders when nBlockAlig… Freerdp 3.24.0+ Fix from $1,9502026-03-13 CRITICAL 9.8 CVE-2026-31806 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, the gdi_surface_bits() function processes SURFACE_BITS_COMMAND mes… Freerdp 3.24.0+ Fix from $2,3002026-03-13 HIGH 8.2 CVE-2026-29775 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, a client-side heap out-of-bounds read/write occurs in FreeRDP's bit… Freerdp 3.24.0+ Fix from $1,9502026-03-13 HIGH 8.2 CVE-2026-29774 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, a client-side heap buffer overflow occurs in the FreeRDP client's A… Freerdp 3.24.0+ Fix from $1,9502026-03-13