FR
Product
FreeRDP
by FreeRDP · last CVE Oct 21, 2026
305
CVEs
0
On KEV
9.8
Max CVSS
69
New 30D
Severity mix
Critical 68High 96Medium 120Low 19
Watch

Add FreeRDP to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-33986
7.5
0%
Mar 30
FreeRDP: H.264 YUV Buffer Dimension Desync - Heap OOB Write
Affected: < 3.24.2
CVE-2026-33984
7.5
0%
Mar 30
FreeRDP: ClearCodec resize_vbar_entry() Heap OOB Write
Affected: < 3.24.2
CVE-2026-31884
7.5
0%
Mar 13
FreeRDP has a division-by-zero in ADPCM decoders when `nBlockAlign` is 0
Affected: < 3.24.0
CVE-2026-27951
7.5
0%
Feb 25
FreeRDP has possible Integer overflow in Stream_EnsureCapacity
Affected: < 3.23.0
CVE-2026-27950
7.5
0%
Feb 25
FreeRDP heap-use-after-free in update_pointer_new(SDL): Fix Applied in the Wrong File
Affected: < 3.23.0
CVE-2026-26986
7.5
1%
Feb 25
FreeRDP has heap-use-after-free in rail_window_free
Affected: < 3.23.0
CVE-2026-25954
7.5
1%
Feb 25
FreeRDP has heap-use-after-free in xf_rail_server_local_move_size
Affected: < 3.23.0
CVE-2026-25942
7.5
1%
Feb 25
FreeRDP has global-buffer-overflow in xf_rail_server_execute_result
Affected: < 3.23.0
CVE-2026-24684
7.5
1%
Feb 9
FreeRDP has a Heap-use-after-free in play_thread
Affected: < 3.22.0
CVE-2026-24683
7.5
1%
Feb 9
FreeRDP has a heap-use-after-free in ainput_send_input_event
Affected: < 3.22.0
CVE-2026-24682
7.5
1%
Feb 9
FreeRDP has a Heap-buffer-overflow in audio_formats_free
Affected: < 3.22.0
CVE-2026-24681
7.5
1%
Feb 9
FreeRDP has a heap-use-after-free in urb_bulk_transfer_cb
Affected: < 3.22.0
CVE-2026-24680
7.5
0%
Feb 9
FreeRDP has a heap-use-after-free in update_pointer_new(SDL)
Affected: < 3.22.0
CVE-2026-24678
7.5
1%
Feb 9
FreeRDP has a Heap-use-after-free in cam_v4l_stream_capture_thread
Affected: < 3.22.0
CVE-2026-24676
7.5
1%
Feb 9
FreeRDP has a heap-use-after-free in audio_format_compatible
Affected: < 3.22.0
CVE-2026-24675
7.5
1%
Feb 9
FreeRDP has a Heap-use-after-free in urb_select_interface
Affected: < 3.22.0
CVE-2026-24491
7.5
1%
Feb 9
FreeRDP has a heap-use-after-free in video_timer
Affected: < 3.22.0
CVE-2026-23948
7.5
1%
Feb 9
FreeRDP has a NULL Pointer Dereference in rdp_write_logon_info_v2()
Affected: < 3.22.0
CVE-2026-23732
7.5
1%
Jan 19
FreeRDP has heap-buffer-overflow in Glyph_Alloc
Affected: < 3.21.0
CVE-2024-32661
7.5
1%
Apr 23
FreeRDP is a free implementation of the Remote Desktop Protocol
Affected: before 3.5.1
CVE-2024-32660
7.5
1%
Apr 23
FreeRDP is a free implementation of the Remote Desktop Protocol
Affected: before 2.11.7; 3.0.0 before 3.5.1
CVE-2023-40576
7.5
1%
Aug 31
FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license
Affected: 3.0.0; 3.0.0
CVE-2023-39354
7.5
2%
Aug 31
FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license
Affected: before 2.11.0; 3.0.0; 3.0.0
CVE-2023-39351
7.5
2%
Aug 31
FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license
Affected: before 2.11.0; 3.0.0; 3.0.0
CVE-2023-39350
7.5
2%
Aug 31
FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license
Affected: before 2.11.0; 3.0.0; 3.0.0
CVE-2023-40589
7.5
1%
Aug 31
FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license
Affected: before 2.11.0; 3.0.0; 3.0.0
CVE-2022-39283
7.5
1%
Oct 12
FreeRDP may read and display out of bounds data
Affected: <= 2.8.0
CVE-2022-39282
7.5
1%
Oct 12
RDP client: Read of uninitialized memory with parallel port redirection
Affected: <= 2.8.0
CVE-2022-24882
7.5
3%
Apr 26
FreeRDP is a free implementation of the Remote Desktop Protocol (RDP)
Affected: before 2.7.0
CVE-2020-4031
7.5
2%
Jun 22
In FreeRDP before version 2.1.2, there is a use-after-free in gdi_SelectObject
Affected: before 2.1.2
CVE-2019-17178
7.5
3%
Oct 4
HuffmanTree_makeFromFrequencies in lodepng.c in LodePNG through 2019-09-28, as used in WinPR in FreeRDP and other products, has a memory leak because a supplied realloc pointer…
Affected: through 1.0.2; 1.1.0
CVE-2019-17177
7.5
3%
Oct 4
libfreerdp/codec/region.c in FreeRDP through 1.1.x and 2.x through 2.0.0-rc4 has memory leaks because a supplied realloc pointer (i.e., the first argument to realloc) is also used…
Affected: through 1.0.2; 1.1.0; 1.1.0; 2.0.0; 2.0.0; 2.0.0; +3 more
CVE-2018-8789
7.5
5%
Nov 29
FreeRDP prior to version 2.0.0-rc4 contains several Out-Of-Bounds Reads in the NTLM Authentication module that results in a Denial of Service (segfault)
Affected: through 1.2.0; 2.0.0; 2.0.0; 2.0.0
CVE-2013-4119
7.5
4%
Oct 3
FreeRDP before 1.1.0-beta+2013071101 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) by disconnecting before authentication…
Affected: through 1.0.2
CVE-2013-4118
7.5
4%
Oct 3
FreeRDP before 1.1.0-beta1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via unspecified vectors
Affected: through 1.0.2
CVE-2026-111880
7.4
0%
Oct 17
FreeRDP 2.0.0 before 3.32.0 Heap Out-of-Bounds Write via NTLM MIC Offset
Affected: 2.0.0 before 3.32.0
CVE-2026-111381
7.3
0%
Oct 16
FreeRDP before 3.32.0 Heap Buffer Overflow via Persistent Cache v2 Parser
Affected: before 3.32.0
CVE-2026-111379
7.3
0%
Oct 16
FreeRDP before 3.32.0 Heap Buffer Overflow via persistent_cache_read_entry_v3
Affected: before 3.32.0
CVE-2026-64621
7.3
0%
Jul 20
FreeRDP before 3.28.0 Double-Free via selectedmonitors
Affected: before 3.28.0
CVE-2026-110839
7.1
0%
Oct 14
FreeRDP 3.3.0 before 3.32.0 Heap Out-of-Bounds Write via Grayscale JPEG Clipboard Data
Affected: 3.3.0 before 3.32.0
CVE-2026-110837
7.1
0%
Oct 14
FreeRDP 2.0.0 before 3.32.0 Heap Buffer Overflow via MP3 Audio Decoding
Affected: 2.0.0 before 3.32.0
CVE-2026-109242
7.1
0%
Oct 12
FreeRDP before 3.0.0 and 3.6.0 before 3.32.0 Uninitialized Heap Disclosure via Progressive Codec Tile Upgrade
Affected: before 3.0.0; 3.6.0 before 3.32.0
CVE-2026-55564
7.1
0%
Aug 19
FreeRDP: Out-of-bounds read in glyph_cache_get via crafted glyph fragments
Affected: < 3.27.0
CVE-2026-33985
7.1
0%
Mar 30
FreeRDP: ClearCodec Glyph Cache Count Desync - Heap OOB Read
Affected: < 3.24.2
CVE-2020-13396
7.1
2%
May 22
An issue was discovered in FreeRDP before 2.1.1
Affected: before 2.1.1
CVE-2017-2834
7.0
2%
Apr 24
An exploitable code execution vulnerability exists in the authentication functionality of FreeRDP 2.0.0-beta1+android11
Affected: 2.0.0
Page 2 of 2 · 96 total