Browse CVEs

HIGH 7.5 CVE-2026-27950 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, the fix for the heap-use-after-free described in CVE-2026-2… Freerdp 3.23.0+ Fix from $1,9502026-02-25 HIGH 7.5 CVE-2026-27951 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, the function `Stream_EnsureCapacity` can create an endless … Freerdp 3.23.0+ Fix from $1,9502026-02-25 HIGH 7.5 CVE-2026-26986 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `rail_window_free` dereferences a freed `xfAppWindow` point… Freerdp 3.23.0+ Fix from $1,9502026-02-25 HIGH 8.8 CVE-2026-26965 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, in the RLE planar decode path, `planar_decompress_plane_rle… Freerdp 3.23.0+ Fix from $1,9502026-02-25 MEDIUM 6.5 CVE-2026-27015 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, a missing bounds check in `smartcard_unpack_read_size_align… Freerdp 3.23.0+ Fix from $1,6002026-02-25 CRITICAL 9.8 CVE-2026-25959 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_cliprdr_provide_data_` passes freed `pDstData` to `XCha… Freerdp 3.23.0+ Fix from $2,3002026-02-25 CRITICAL 9.8 CVE-2026-25997 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_clipboard_format_equal` reads freed `lastSentFormats` m… Freerdp 3.23.0+ Fix from $2,3002026-02-25 HIGH 8.8 CVE-2026-26955 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, a malicious RDP server can trigger a heap buffer overflow i… Freerdp 3.23.0+ Fix from $1,9502026-02-25 MEDIUM 5.3 CVE-2026-26271 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, a buffer overread in `freerdp_image_copy_from_icon_data()` … Freerdp 3.23.0+ Fix from $1,6002026-02-25 CRITICAL 9.8 CVE-2026-25952 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_SetWindowMinMaxInfo` dereferences a freed `xfAppWindow`… Freerdp 3.23.0+ Fix from $2,3002026-02-25 CRITICAL 9.8 CVE-2026-25953 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_AppUpdateWindowFromSurface` reads from a freed `xfAppWi… Freerdp 3.23.0+ Fix from $2,3002026-02-25 CRITICAL 9.8 CVE-2026-25955 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_AppUpdateWindowFromSurface` reuses a cached `XImage` wh… Freerdp 3.23.0+ Fix from $2,3002026-02-25 HIGH 7.5 CVE-2026-25942 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_rail_server_execute_result` indexes the global `error_c… Freerdp 3.23.0+ Fix from $1,9502026-02-25 HIGH 7.5 CVE-2026-25954 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_rail_server_local_move_size` dereferences a freed `xfAp… Freerdp 3.23.0+ Fix from $1,9502026-02-25 HIGH 8.1 CVE-2026-25941 FreeRDP is a free implementation of the Remote Desktop Protocol. Versions on the 2.x branch prior to to 2.11.8 and on the 3.x branch prior to 3.23.0 … Freerdp 2.11.8 / 3.23.0+ Fix from $1,9502026-02-25 HIGH 7.5 CVE-2026-24684 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, the RDPSND async playback thread can process queued PDUs after the … Freerdp 3.22.0+ Fix from $1,9502026-02-09 CRITICAL 9.1 CVE-2026-24677 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, ecam_encoder_compress_h264 trusts server-controlled dimensions and … Freerdp 3.22.0+ Fix from $2,3002026-02-09 CRITICAL 9.1 CVE-2026-24679 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, The URBDRC client uses server-supplied interface numbers as array i… Freerdp 3.22.0+ Fix from $2,3002026-02-09 HIGH 7.5 CVE-2026-24678 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, A capture thread sends sample responses using a freed channel callb… Freerdp 3.22.0+ Fix from $1,9502026-02-09 HIGH 7.5 CVE-2026-24680 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, sdl_Pointer_New frees data on failure, then pointer_free calls sdl_… Freerdp 3.22.0+ Fix from $1,9502026-02-09 HIGH 7.5 CVE-2026-24681 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, aAsynchronous bulk transfer completions can use a freed channel cal… Freerdp 3.22.0+ Fix from $1,9502026-02-09 HIGH 7.5 CVE-2026-24682 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, audin_server_recv_formats frees an incorrect number of audio format… Freerdp 3.22.0+ Fix from $1,9502026-02-09 HIGH 7.5 CVE-2026-24683 FreeRDP is a free implementation of the Remote Desktop Protocol. ainput_send_input_event caches channel_callback in a local variable and later uses i… Freerdp 3.22.0+ Fix from $1,9502026-02-09 HIGH 7.5 CVE-2026-24491 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, video_timer can send client notifications after the control channel… Freerdp 3.22.0+ Fix from $1,9502026-02-09 HIGH 7.5 CVE-2026-24675 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, urb_select_interface can free the device's MS config on error but l… Freerdp 3.22.0+ Fix from $1,9502026-02-09 HIGH 7.5 CVE-2026-24676 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, AUDIN format renegotiation frees the active format list while the c… Freerdp 3.22.0+ Fix from $1,9502026-02-09 HIGH 7.5 CVE-2026-23948 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, a NULL pointer dereference vulnerability in rdp_write_logon_info_v2… Freerdp 3.22.0+ Fix from $1,9502026-02-09 CRITICAL 9.8 CVE-2026-23883 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, `xf_Pointer_New` frees `cursorPixels` on failure, then `poi… Freerdp 3.21.0+ Fix from $2,3002026-01-19 CRITICAL 9.8 CVE-2026-23884 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, offscreen bitmap deletion leaves `gdi->drawing` pointing to… Freerdp 3.21.0+ Fix from $2,3002026-01-19 CRITICAL 9.8 CVE-2026-23533 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, a client-side heap buffer overflow occurs in the RDPGFX Cle… Freerdp 3.21.0+ Fix from $2,3002026-01-19