FR
Product
FreeRDP
305
CVEs
0
On KEV
9.8
Max CVSS
69
New 30D
Severity mix
Critical 68High 96Medium 120Low 19
Watch
Add FreeRDP to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-63633 | 9.8 | Aug 19 | FreeRDP: Heap buffer overflow in Opus audio decode (`freerdp_dsp_decode_opus` resizes the wrong stream) — server→client Affected: < 3.28.0 |
| CVE-2026-55194 | 9.8 | Aug 19 | FreeRDPHeap-buffer-overflow write in TS Gateway RPC RESPONSE reassembly due to alloc_hint capacity mismatch Affected: < 3.27.0 |
| CVE-2026-55191 | 9.8 | Aug 19 | FreeRDP: Heap-buffer-overflow write in AVC444 YUV buffer allocation Affected: < 3.27.0 |
| CVE-2026-66402 | 9.8 | Aug 1 | FreeRDP before 3.29.0 TLS Certificate Identity Validation Bypass Affected: before 3.29.0 |
| CVE-2026-57156 | 9.8 | Jul 10 | FreeRDP: Integer overflow leading to heap buffer overflow in Orders Delta Points parsing Affected: < 3.28.0 |
| CVE-2026-45700 | 9.8 | May 29 | Heap-buffer-overflow write in planar bitmap decoder Affected: < 3.26.0 |
| CVE-2026-31806 | 9.8 | Mar 13 | FreeRDP has a Heap Buffer Overflow in nsc_process_message() via Unchecked SURFACE_BITS_COMMAND Bitmap Dimensions Affected: < 3.24.0 |
| CVE-2026-31883 | 9.8 | Mar 13 | FreeRDP has a `size_t` underflow in ADPCM decoder leads to heap-buffer-overflow write Affected: < 3.24.0 |
| CVE-2026-25997 | 9.8 | Feb 25 | FreeRDP is a free implementation of the Remote Desktop Protocol Affected: before 3.23.0 |
| CVE-2026-25959 | 9.8 | Feb 25 | FreeRDP is a free implementation of the Remote Desktop Protocol Affected: before 3.23.0 |
| CVE-2026-25955 | 9.8 | Feb 25 | FreeRDP is a free implementation of the Remote Desktop Protocol Affected: before 3.23.0 |
| CVE-2026-25953 | 9.8 | Feb 25 | FreeRDP is a free implementation of the Remote Desktop Protocol Affected: before 3.23.0 |
| CVE-2026-25952 | 9.8 | Feb 25 | FreeRDP is a free implementation of the Remote Desktop Protocol Affected: before 3.23.0 |
| CVE-2026-23884 | 9.8 | Jan 19 | FreeRDP is a free implementation of the Remote Desktop Protocol Affected: before 3.21.0 |
| CVE-2026-23883 | 9.8 | Jan 19 | FreeRDP is a free implementation of the Remote Desktop Protocol Affected: before 3.21.0 |
| CVE-2026-23534 | 9.8 | Jan 19 | FreeRDP is a free implementation of the Remote Desktop Protocol Affected: before 3.21.0 |
| CVE-2026-23533 | 9.8 | Jan 19 | FreeRDP is a free implementation of the Remote Desktop Protocol Affected: before 3.21.0 |
| CVE-2026-23532 | 9.8 | Jan 19 | FreeRDP is a free implementation of the Remote Desktop Protocol Affected: before 3.21.0 |
| CVE-2026-23531 | 9.8 | Jan 19 | FreeRDP is a free implementation of the Remote Desktop Protocol Affected: before 3.21.0 |
| CVE-2026-23530 | 9.8 | Jan 19 | FreeRDP is a free implementation of the Remote Desktop Protocol Affected: before 3.21.0 |
| CVE-2026-22857 | 9.8 | Jan 14 | FreeRDP is a free implementation of the Remote Desktop Protocol Affected: before 3.20.1 |
| CVE-2026-22854 | 9.8 | Jan 14 | FreeRDP is a free implementation of the Remote Desktop Protocol Affected: before 3.20.1 |
| CVE-2026-22853 | 9.8 | Jan 14 | FreeRDP is a free implementation of the Remote Desktop Protocol Affected: before 3.20.1 |
| CVE-2026-22852 | 9.8 | Jan 14 | FreeRDP is a free implementation of the Remote Desktop Protocol Affected: before 3.20.1 |
| CVE-2024-32662 | 9.8 | Apr 23 | FreeRDP is a free implementation of the Remote Desktop Protocol Affected: before 3.5.1 |
| CVE-2024-32659 | 9.8 | Apr 23 | FreeRDP is a free implementation of the Remote Desktop Protocol Affected: before 2.11.7; 3.0.0 before 3.5.1 |
| CVE-2024-32658 | 9.8 | Apr 23 | FreeRDP is a free implementation of the Remote Desktop Protocol Affected: before 2.11.7; 3.0.0 before 3.5.1 |
| CVE-2024-32460 | 9.8 | Apr 22 | FreeRDP is a free implementation of the Remote Desktop Protocol Affected: before 2.11.6; 3.0.0 before 3.5.0 |
| CVE-2024-32459 | 9.8 | Apr 22 | FreeRDP is a free implementation of the Remote Desktop Protocol Affected: before 2.11.6; 3.0.0 before 3.5.0 |
| CVE-2024-32458 | 9.8 | Apr 22 | FreeRDP is a free implementation of the Remote Desktop Protocol Affected: before 2.11.6; 3.0.0 before 3.5.0 |
| CVE-2024-32041 | 9.8 | Apr 22 | FreeRDP is a free implementation of the Remote Desktop Protocol Affected: before 2.11.6; 3.0.0 before 3.5.0 |
| CVE-2024-32040 | 9.8 | Apr 22 | FreeRDP is a free implementation of the Remote Desktop Protocol Affected: before 2.11.6; 3.0.0 before 3.5.0 |
| CVE-2024-32039 | 9.8 | Apr 22 | FreeRDP is a free implementation of the Remote Desktop Protocol Affected: before 2.11.6; 3.0.0 before 3.5.0 |
| CVE-2024-22211 | 9.8 | Jan 19 | FreeRDP is a set of free and open source remote desktop protocol library and clients Affected: before 2.11.5; 3.0.0 before 3.2.0 |
| CVE-2023-40574 | 9.8 | Aug 31 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license Affected: 3.0.0; 3.0.0 |
| CVE-2023-40569 | 9.8 | Aug 31 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license Affected: before 2.11.0; 3.0.0; 3.0.0 |
| CVE-2023-40567 | 9.8 | Aug 31 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license Affected: before 2.11.0; 3.0.0; 3.0.0 |
| CVE-2023-40187 | 9.8 | Aug 31 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license Affected: 3.0.0; 3.0.0 |
| CVE-2023-40186 | 9.8 | Aug 31 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license Affected: before 2.11.0; 3.0.0; 3.0.0 |
| CVE-2023-39352 | 9.8 | Aug 31 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license Affected: before 2.11.0; 3.0.0; 3.0.0 |
| CVE-2023-39355 | 9.8 | Aug 31 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license Affected: 3.0.0; 3.0.0 |
| CVE-2022-24883 | 9.8 | Apr 26 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP) Affected: before 2.7.0 |
| CVE-2021-37595 | 9.8 | Jul 30 | In FreeRDP before 2.4.0 on Windows, wf_cliprdr_server_file_contents_request in client/Windows/wf_cliprdr.c has missing input checks for a FILECONTENTS_RANGE File Contents Request… Affected: before 2.4.0 |
| CVE-2021-37594 | 9.8 | Jul 30 | In FreeRDP before 2.4.0 on Windows, wf_cliprdr_server_file_contents_request in client/Windows/wf_cliprdr.c has missing input checks for a FILECONTENTS_SIZE File Contents Request… Affected: before 2.4.0 |
| CVE-2018-8788 | 9.8 | Nov 29 | FreeRDP prior to version 2.0.0-rc4 contains an Out-Of-Bounds Write of up to 4 bytes in function nsc_rle_decode() that results in a memory corruption and possibly even a remote… Affected: through 1.2.0; 2.0.0; 2.0.0; 2.0.0 |
| CVE-2018-8787 | 9.8 | Nov 29 | FreeRDP prior to version 2.0.0-rc4 contains an Integer Overflow that leads to a Heap-Based Buffer Overflow in function gdi_Bitmap_Decompress() and results in a memory corruption… Affected: through 1.2.0; 2.0.0; 2.0.0; 2.0.0 |
| CVE-2018-8786 | 9.8 | Nov 29 | FreeRDP prior to version 2.0.0-rc4 contains an Integer Truncation that leads to a Heap-Based Buffer Overflow in function update_read_bitmap_update() and results in a memory… Affected: through 1.2.0; 2.0.0; 2.0.0; 2.0.0 |
| CVE-2018-8785 | 9.8 | Nov 29 | FreeRDP prior to version 2.0.0-rc4 contains a Heap-Based Buffer Overflow in function zgfx_decompress() that results in a memory corruption and probably even a remote code… Affected: through 1.2.0; 2.0.0; 2.0.0; 2.0.0 |
| CVE-2018-8784 | 9.8 | Nov 29 | FreeRDP prior to version 2.0.0-rc4 contains a Heap-Based Buffer Overflow in function zgfx_decompress_segment() that results in a memory corruption and probably even a remote code… Affected: through 1.2.0; 2.0.0; 2.0.0; 2.0.0 |
| CVE-2026-68579 | 9.6 | Aug 2 | FreeRDP before 3.30.0 Heap Overflow via CliprdrStream_Read Affected: before 3.30.0 |