Vulnerability index

Browse CVEs

22 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Xrdp HIGH 7.3
CVE-2026-55626

xrdp is an open source RDP server. In versions 0.10.6 and prior, when an authenticated user session is initialized using the Xvnc backend over UNIX d…

Fix: 0.10.6.1+
Fix from $1,950 2026-07-20
Xrdp MEDIUM 5.3
CVE-2026-55639

xrdp is an open source RDP server. Versions 0.10.6 and prior contain a vulnerability concerning the parsing of Client Security Data within the Client…

Fix: 0.10.6.1+
Fix from $1,600 2026-07-20
Xrdp MEDIUM 6.5
CVE-2026-55645

xrdp is an open source RDP server. Versions 0.10.6 and prior contain a vulnerability concerning the processing of Client Control PDUs. During the RDP…

Fix: 0.10.6.1+
Fix from $1,600 2026-07-20
Xrdp MEDIUM 5.3
CVE-2026-55238

xrdp is an open source RDP server. Versions 0.10.6 and prior contain a vulnerability concerning the processing of RDP Confirm Active PDU, where durin…

Fix: 0.10.6.1+
Fix from $1,600 2026-07-20
Xrdp HIGH 7.5
CVE-2026-54538

xrdp is an open source RDP server. In versions 0.10.6 and prior, a n issue was discovered where the software fails to properly validate the totalLeng…

Fix: 0.10.6.1+
Fix from $1,950 2026-07-20
Xrdp HIGH 8.8
CVE-2026-44178

xrdp is an open source RDP server. Versions 0.10.6 and prior contain a heap-based buffer overflow vulnerability within the virtual channel forwarding…

Fix: 0.10.6.1+
Fix from $1,950 2026-07-20
Xrdp MEDIUM 5.3
CVE-2026-44978

xrdp is an open source RDP server. Versions 0.10.6 and prior contain a heap out-of-bounds read vulnerability within the FIPS-specific receive paths. …

Fix: 0.10.6.1+
Fix from $1,600 2026-07-20
Xrdp CRITICAL 9.8
CVE-2026-41252

xrdp is an open source RDP server. Versions 0.10.6 and prior contain a missing bounds check in xrdp, which allows a heap-based buffer overflow when o…

Fix: 0.10.6.1+
Fix from $2,300 2026-07-20
Xrdp CRITICAL 9.1
CVE-2026-41521

xrdp is an open source RDP server. Versions 0.10.6 and prior contain an integer overflow vulnerability when processing screen update messages within …

Fix: 0.10.6.1+
Fix from $2,300 2026-07-20
Xrdp MEDIUM 5.3
CVE-2026-42218

xrdp is an open source RDP server. Versions 0.10.6 and prior contain a timing side-channel vulnerability in the login interface. Due to a discrepancy…

Fix: 0.10.6.1+
Fix from $1,600 2026-07-20
Xrdp HIGH 8.8
CVE-2026-35512

xrdp is an open source RDP server. Versions through 0.10.5 have a heap-based buffer overflow in the EGFX (graphics dynamic virtual channel) implement…

Fix: 0.10.6+
Fix from $1,950 2026-04-17
Xrdp CRITICAL 9.1
CVE-2026-33689

xrdp is an open source RDP server. Versions through 0.10.5 have an out-of-bounds read vulnerability in the pre-authentication RDP message parsing log…

Fix: 0.10.6+
Fix from $2,300 2026-04-17
Xrdp MEDIUM 6.3
CVE-2026-33145

xrdp is an open source RDP server. Versions through 0.10.5 allow an authenticated remote user to execute arbitrary commands on the server due to unsa…

Fix: 0.10.6+
Fix from $1,600 2026-04-17
Xrdp CRITICAL 9.1
CVE-2026-33516

xrdp is an open source RDP server. Versions through 0.10.5 contain an out-of-bounds read vulnerability during the RDP capability exchange phase. The …

Fix: 0.10.6+
Fix from $2,300 2026-04-17
Xrdp MEDIUM 6.5
CVE-2026-32624

xrdp is an open source RDP server. Versions through 0.10.5 contain a heap-based buffer overflow vulnerability in its logon processing. In environment…

Fix: 0.10.6+
Fix from $1,600 2026-04-17
Xrdp HIGH 8.8
CVE-2026-32107

xrdp is an open source RDP server. In versions through 0.10.5, the session execution component did not properly handle an error during the privilege …

Fix: 0.10.6+
Fix from $1,950 2026-04-17
Xrdp HIGH 8.1
CVE-2026-32623

xrdp is an open source RDP server. Versions through 0.10.5 contain a heap-based buffer overflow vulnerability in the NeutrinoRDP module. When proxyin…

Fix: 0.10.6+
Fix from $1,950 2026-04-17
Xrdp HIGH 7.7
CVE-2026-32105

xrdp is an open source RDP server. In versions through 0.10.5, xrdp does not implement verification for the Message Authentication Code (MAC) signatu…

Fix: 0.10.6+
Fix from $1,950 2026-04-17
Xrdp CRITICAL 9.8
CVE-2024-39917

xrdp is an open source RDP server. xrdp versions prior to 0.10.0 have a vulnerability that allows attackers to make an infinite number of login attem…

Fix: 0.10.0+
Fix from $2,300 2024-07-12
Xrdp MEDIUM 6.5
CVE-2023-40184

xrdp is an open source remote desktop protocol (RDP) server. In versions prior to 0.9.23 improper handling of session establishment errors allows byp…

Fix: 0.9.23+
Fix from $1,600 2023-08-30
Xrdp HIGH 7.8
CVE-2020-4044

The xrdp-sesman service before version 0.9.13.1 can be crashed by connecting over port 3350 and supplying a malicious payload. Once the xrdp-sesman p…

Fix: 0.9.13.1+
Fix from $1,950 2020-06-30
Xrdp HIGH 7.3
CVE-2017-6967

xrdp 0.9.1 calls the PAM function auth_start_session() in an incorrect location, leading to PAM session modules not being properly initialized, with …

Patch available
Fix from $1,950 2017-03-17