FR
Product
FreeRDP
305
CVEs
0
On KEV
9.8
Max CVSS
69
New 30D
Severity mix
Critical 68High 96Medium 120Low 19
Watch
Add FreeRDP to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-31885 | 9.4 | Mar 13 | FreeRDP has an out-of-bounds read in ADPCM decoders due to missing predictor/step_index bounds checks Affected: < 3.24.0 |
| CVE-2026-91949 | 9.3 | Sep 15 | FreeRDP 3.0.0 through 3.30.0 Protocol Negotiation Bypass Affected: 3.0.0 before 3.31.0 |
| CVE-2026-111375 | 9.1 | Oct 16 | FreeRDP 3.0.0 before 3.32.0 Out-of-Bounds Read via RAIL Window Title Affected: 3.0.0 before 3.32.0 |
| CVE-2026-73242 | 9.1 | Aug 11 | FreeRDP: Kerberos GSS Wrap-token `EC` field is unbounded, causing an out-of-bounds decrypt in `kerberos_DecryptMessage` Affected: < 3.30.0 |
| CVE-2026-64620 | 9.1 | Jul 20 | FreeRDP before 3.28.0 Heap Buffer Overflow via crypto_rsa_common Affected: before 3.28.0 |
| CVE-2026-57158 | 9.1 | Jul 10 | FreeRDP planar_decompress_plane_rle_only: heap OOB read — incomplete fix for CVE-2026-23530 Affected: >= 3.21.0, < 3.28.0 |
| CVE-2026-31897 | 9.1 | Mar 13 | FreeRDP has an out-of-bounds read in `freerdp_bitmap_decompress_planar` Affected: < 3.24.0 |
| CVE-2026-24679 | 9.1 | Feb 9 | FreeRDP has a heap-buffer-overflow in urb_select_interface Affected: < 3.22.0 |
| CVE-2026-24677 | 9.1 | Feb 9 | FreeRDP has a heap-buffer-overflow in ecam_encoder_compress_h264 Affected: < 3.22.0 |
| CVE-2026-22859 | 9.1 | Jan 14 | FreeRDP has a heap-buffer-overflow in urb_select_configuration Affected: < 3.20.1 |
| CVE-2026-22858 | 9.1 | Jan 14 | FreeRDP has a global-buffer-overflow in crypto_base64_decode Affected: < 3.20.1 |
| CVE-2026-22855 | 9.1 | Jan 14 | FreeRDP has a heap-buffer-overflow in smartcard_unpack_set_attrib_call Affected: < 3.20.1 |
| CVE-2025-68118 | 9.1 | Dec 17 | Potential Heap Out-of-Bounds Read in freerdp_certificate_data_hash_ via Unsafe _snprintf Usage Affected: < 3.20.0 |
| CVE-2023-40575 | 9.1 | Aug 31 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license Affected: 3.0.0; 3.0.0 |
| CVE-2023-40188 | 9.1 | Aug 31 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license Affected: before 2.11.0; 3.0.0; 3.0.0 |
| CVE-2023-40181 | 9.1 | Aug 31 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license Affected: before 2.11.0; 3.0.0; 3.0.0 |
| CVE-2023-39356 | 9.1 | Aug 31 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license Affected: before 2.11.0; 3.0.0; 3.0.0 |
| CVE-2023-39353 | 9.1 | Aug 31 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license Affected: before 2.11.0; 3.0.0; 3.0.0 |