Login Request a demo
FR
Product
FreeRDP
by FreeRDP · last CVE Oct 21, 2026
305
CVEs
0
On KEV
9.8
Max CVSS
69
New 30D
Vulnerabilities305In the news0Timeline
Severity mix
Critical 68High 96Medium 120Low 19
Severity
All severities305Critical68High96Medium120Low19
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add FreeRDP to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-31885
9.4
0%
Mar 13
FreeRDP is a free implementation of the Remote Desktop Protocol
Affected: before 3.24.0
CVE-2026-91949
9.3
1%
Sep 15
FreeRDP 3.0.0 through 3.30.0 Protocol Negotiation Bypass
Affected: 3.0.0 before 3.31.0
CVE-2026-111375
9.1
0%
Oct 16
FreeRDP 3.0.0 before 3.32.0 Out-of-Bounds Read via RAIL Window Title
Affected: 3.0.0 before 3.32.0
CVE-2026-73242
9.1
0%
Aug 11
FreeRDP: Kerberos GSS Wrap-token `EC` field is unbounded, causing an out-of-bounds decrypt in `kerberos_DecryptMessage`
Affected: < 3.30.0
CVE-2026-64620
9.1
1%
Jul 20
FreeRDP before 3.28.0 Heap Buffer Overflow via crypto_rsa_common
Affected: before 3.28.0
CVE-2026-57158
9.1
1%
Jul 10
FreeRDP planar_decompress_plane_rle_only: heap OOB read — incomplete fix for CVE-2026-23530
Affected: >= 3.21.0, < 3.28.0
CVE-2026-31897
9.1
0%
Mar 13
FreeRDP is a free implementation of the Remote Desktop Protocol
Affected: before 3.24.0
CVE-2026-24679
9.1
1%
Feb 9
FreeRDP is a free implementation of the Remote Desktop Protocol
Affected: before 3.22.0
CVE-2026-24677
9.1
1%
Feb 9
FreeRDP is a free implementation of the Remote Desktop Protocol
Affected: before 3.22.0
CVE-2026-22859
9.1
1%
Jan 14
FreeRDP is a free implementation of the Remote Desktop Protocol
Affected: before 3.20.1
CVE-2026-22858
9.1
1%
Jan 14
FreeRDP is a free implementation of the Remote Desktop Protocol
Affected: before 3.20.1
CVE-2026-22855
9.1
1%
Jan 14
FreeRDP is a free implementation of the Remote Desktop Protocol
Affected: before 3.20.1
CVE-2025-68118
9.1
0%
Dec 17
FreeRDP is a free implementation of the Remote Desktop Protocol
Affected: before 3.20.0
CVE-2023-40575
9.1
1%
Aug 31
FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license
Affected: 3.0.0; 3.0.0
CVE-2023-40188
9.1
1%
Aug 31
FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license
Affected: before 2.11.0; 3.0.0; 3.0.0
CVE-2023-40181
9.1
2%
Aug 31
FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license
Affected: before 2.11.0; 3.0.0; 3.0.0
CVE-2023-39356
9.1
2%
Aug 31
FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license
Affected: before 2.11.0; 3.0.0; 3.0.0
CVE-2023-39353
9.1
1%
Aug 31
FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license
Affected: before 2.11.0; 3.0.0; 3.0.0
CVE-2026-114045
8.8
1%
Oct 21
FreeRDP before 3.32.1 Heap Buffer Overflow via rdpsnd_server_select_format
Affected: before 3.32.1
CVE-2026-111382
8.8
0%
Oct 16
FreeRDP before 3.32.0 Heap Out-of-Bounds Write in AVC444 YUV444 Combine
Affected: before 3.32.0
CVE-2026-111380
8.8
0%
Oct 16
FreeRDP 3.29.0 before 3.32.0 Heap Overflow via audin Apple Backends
Affected: 3.29.0 before 3.32.0
CVE-2026-109676
8.8
0%
Oct 13
FreeRDP 3.0.0-beta1 before 3.32.0 Use-After-Free via Smartcard Connect
Affected: 3.0.0-beta1 before 3.32.0
CVE-2026-91964
8.8
1%
Sep 15
FreeRDP 2.0.0 through 3.30.0 Heap Buffer Overflow via RoutingToken
Affected: 2.0.0 before 3.0.0; 3.0.0 before 3.31.0; before 3.31.0
CVE-2026-55193
8.8
0%
Aug 19
FreeRDP: Heap-buffer-overflow write in TS Gateway RPC fragment receive due to uncapped bind_ack max_xmit_frag
Affected: < 3.27.0
CVE-2026-67305
8.8
1%
Aug 1
FreeRDP Windows Client before 3.29.0 Heap Buffer Overflow via Cliprdr
Affected: before 3.29.0
CVE-2026-55827
8.8
1%
Jul 10
FreeRDP: Heap out-of-bounds write in RemoteFX (RFX) Cache Bitmap V3 decode
Affected: < 3.27.1
CVE-2026-44420
8.8
5%
May 29
FreeRDP cliprdr server heap-buffer-overflow via undersized capabilitySetLength in CB_CLIP_CAPS
Affected: < 3.26.0
CVE-2026-44422
8.8
0%
May 29
FreeRDP RDPEAR NDR ref-id aliasing causes client-side UAF/double-free and type confusion
Affected: < 3.26.0
CVE-2026-44421
8.8
1%
May 29
FreeRDP RDPGFX CacheToSurface heap-buffer-overflow via clamped-rectangle validation bypass
Affected: < 3.26.0
CVE-2026-40033
8.8
1%
May 26
FreeRDP - Heap-buffer-overflow in gdi_CacheToSurface via rectangle validation bypass
Affected: before 3.26.0
CVE-2026-26965
8.8
1%
Feb 25
FreeRDP is a free implementation of the Remote Desktop Protocol
Affected: before 3.23.0
CVE-2026-26955
8.8
1%
Feb 25
FreeRDP is a free implementation of the Remote Desktop Protocol
Affected: before 3.23.0
CVE-2021-41160
8.8
2%
Oct 21
FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license
Affected: before 2.4.1
CVE-2021-41159
8.8
1%
Oct 21
FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license
Affected: before 2.4.1
CVE-2020-13398
8.3
2%
May 22
An issue was discovered in FreeRDP before 2.1.1
Affected: before 2.1.1
CVE-2026-55192
8.2
0%
Aug 19
FreeRDP: Out-of-bounds read in H.264 YUV-to-RGB conversion due to decoder/surface dimension mismatch
Affected: < 3.27.0
CVE-2026-29775
8.2
0%
Mar 13
FreeRDP is a free implementation of the Remote Desktop Protocol
Affected: before 3.24.0
CVE-2026-29774
8.2
0%
Mar 13
FreeRDP is a free implementation of the Remote Desktop Protocol
Affected: before 3.24.0
CVE-2026-56297
8.1
0%
Jul 8
FreeRDP - Use-After-Free via Race Condition in DRDYNVC Channel Callback
Affected: before 3.22.0
CVE-2026-33982
8.1
0%
Mar 30
FreeRDP: Persistent Cache Allocator Mismatch - Heap OOB Read
Affected: < 3.24.2
CVE-2026-25941
8.1
0%
Feb 25
FreeRDP is a free implementation of the Remote Desktop Protocol
Affected: 2.0.0 before 2.11.8; 3.0.0 before 3.23.0
CVE-2026-22856
8.1
0%
Jan 14
FreeRDP is a free implementation of the Remote Desktop Protocol
Affected: before 3.20.1
CVE-2017-2835
8.1
1%
Apr 24
An exploitable code execution vulnerability exists in the RDP receive functionality of FreeRDP 2.0.0-beta1+android11
Affected: 2.0.0
CVE-2026-64624
7.8
0%
Jul 20
FreeRDP RDP File Parser Remote Code Execution via CLI Options
Affected: before 3.28.0
CVE-2026-111881
7.6
0%
Oct 17
FreeRDP 3.14.1 before 3.32.0 Integer Underflow in BMP Writer via Clipboard
Affected: 3.14.1 before 3.32.0
CVE-2026-111378
7.5
1%
Oct 16
FreeRDP 3.0.0 before 3.32.0 Unauthenticated Memory Exhaustion via NLA Frame Parser
Affected: 3.0.0 before 3.32.0
CVE-2026-111373
7.5
0%
Oct 16
FreeRDP before 3.32.0 NULL Dereference via Zero-Length WebSocket Ping
Affected: before 3.32.0
CVE-2026-110838
7.5
0%
Oct 14
FreeRDP shadow before 3.32.0 Pre-Authentication Input Injection via Confirm Active bypass
Affected: 3.0.0 before 3.32.0
CVE-2026-110833
7.5
0%
Oct 14
FreeRDP before 3.32.0 Unbounded Memory Retention via RDPDR Proxy
Affected: 3.0.0-beta1 before 3.32.0
CVE-2026-110830
7.5
0%
Oct 14
FreeRDP before 3.32.0 Denial of Service via Serial IRP_MJ_CREATE
Affected: 2.0.0-rc0 before 3.32.0
Page 2 of 7 · 305 total
123…7