FR
Product
FreeRDP
305
CVEs
0
On KEV
9.8
Max CVSS
69
New 30D
Severity mix
Critical 68High 96Medium 120Low 19
Watch
Add FreeRDP to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-109257 | 7.5 | Oct 12 | FreeRDP before 3.32.0 Double Free via NSCodec plane growth failure Affected: before 3.32.0 |
| CVE-2026-91955 | 7.5 | Sep 15 | FreeRDP before 3.31.0 Denial of Service via Desktop Dimensions Affected: before 3.31.0 |
| CVE-2026-91948 | 7.5 | Sep 15 | FreeRDP before 3.31.0 Out-of-bounds Write via SHOW_PROTOCOL Affected: 3.28.0 before 3.31.0 |
| CVE-2026-91947 | 7.5 | Sep 15 | FreeRDP Server before 3.31.0 Use-After-Free via DRDYNVC Affected: 2.0.0 before 3.31.0 |
| CVE-2026-55648 | 7.5 | Aug 19 | FreeRDP: Integer Overflow in `freerdp_image_copy_from_icon_data` Bypasses Bounds Check Affected: < 3.27.0 |
| CVE-2026-73241 | 7.5 | Aug 11 | FreeRDP: RDSTLS server authentication bypass: a credential-less Capabilities PDU is accepted at the auth step (fail-open `resultCode`) Affected: < 3.30.0 |
| CVE-2026-68580 | 7.5 | Aug 2 | FreeRDP before 3.29.0 Integer Overflow via Audio Input Channel Affected: before 3.29.0 |
| CVE-2026-67298 | 7.5 | Aug 1 | FreeRDP 3.28.0 Heap Buffer Overflow via RAIL orderLength Underflow Affected: before 3.29.0 |
| CVE-2026-67291 | 7.5 | Aug 1 | FreeRDP before 3.29.0 Heap Out-of-Bounds Read via GLYPH_FRAGMENT_ADD Affected: before 3.29.0 |
| CVE-2026-67300 | 7.5 | Aug 1 | FreeRDP before 3.29.0 Use-After-Free via async message proxy Affected: before 3.29.0 |
| CVE-2026-67299 | 7.5 | Aug 1 | FreeRDP before 3.29.0 Use-After-Free via WindowIcon async message Affected: before 3.29.0 |
| CVE-2026-67288 | 7.5 | Aug 1 | FreeRDP before 3.29.0 Denial of Service via smartcard cache Affected: before 3.29.0 |
| CVE-2026-67289 | 7.5 | Aug 1 | FreeRDP before 3.29.0 HTTP Proxy Request Injection via Redirection Affected: before 3.29.0 |
| CVE-2026-67296 | 7.5 | Aug 1 | FreeRDP before 3.29.0 Denial of Service via RDPEI PDU Affected: before 3.29.0 |
| CVE-2026-67304 | 7.5 | Aug 1 | FreeRDP before 3.29.0 NULL Dereference via smartcard cleanup Affected: before 3.29.0 |
| CVE-2026-67297 | 7.5 | Aug 1 | FreeRDP before 3.29.0 Resource Exhaustion via chunked HTTP response Affected: before 3.29.0 |
| CVE-2026-67301 | 7.5 | Aug 1 | FreeRDP before 3.29.0 Out-of-bounds Read via Polygon async message-proxy Affected: before 3.29.0 |
| CVE-2026-67290 | 7.5 | Aug 1 | FreeRDP before 3.29.0 Heap Out-of-Bounds Read via TSMF Affected: before 3.29.0 |
| CVE-2026-33986 | 7.5 | Mar 30 | FreeRDP: H.264 YUV Buffer Dimension Desync - Heap OOB Write Affected: < 3.24.2 |
| CVE-2026-33984 | 7.5 | Mar 30 | FreeRDP: ClearCodec resize_vbar_entry() Heap OOB Write Affected: < 3.24.2 |
| CVE-2026-31884 | 7.5 | Mar 13 | FreeRDP has a division-by-zero in ADPCM decoders when `nBlockAlign` is 0 Affected: < 3.24.0 |
| CVE-2026-27951 | 7.5 | Feb 25 | FreeRDP is a free implementation of the Remote Desktop Protocol Affected: before 3.23.0 |
| CVE-2026-27950 | 7.5 | Feb 25 | FreeRDP is a free implementation of the Remote Desktop Protocol Affected: before 3.23.0 |
| CVE-2026-26986 | 7.5 | Feb 25 | FreeRDP is a free implementation of the Remote Desktop Protocol Affected: before 3.23.0 |
| CVE-2026-25954 | 7.5 | Feb 25 | FreeRDP is a free implementation of the Remote Desktop Protocol Affected: before 3.23.0 |
| CVE-2026-25942 | 7.5 | Feb 25 | FreeRDP is a free implementation of the Remote Desktop Protocol Affected: before 3.23.0 |
| CVE-2026-24684 | 7.5 | Feb 9 | FreeRDP is a free implementation of the Remote Desktop Protocol Affected: before 3.22.0 |
| CVE-2026-24683 | 7.5 | Feb 9 | FreeRDP is a free implementation of the Remote Desktop Protocol Affected: before 3.22.0 |
| CVE-2026-24682 | 7.5 | Feb 9 | FreeRDP is a free implementation of the Remote Desktop Protocol Affected: before 3.22.0 |
| CVE-2026-24681 | 7.5 | Feb 9 | FreeRDP is a free implementation of the Remote Desktop Protocol Affected: before 3.22.0 |
| CVE-2026-24680 | 7.5 | Feb 9 | FreeRDP is a free implementation of the Remote Desktop Protocol Affected: before 3.22.0 |
| CVE-2026-24678 | 7.5 | Feb 9 | FreeRDP is a free implementation of the Remote Desktop Protocol Affected: before 3.22.0 |
| CVE-2026-24676 | 7.5 | Feb 9 | FreeRDP is a free implementation of the Remote Desktop Protocol Affected: before 3.22.0 |
| CVE-2026-24675 | 7.5 | Feb 9 | FreeRDP is a free implementation of the Remote Desktop Protocol Affected: before 3.22.0 |
| CVE-2026-24491 | 7.5 | Feb 9 | FreeRDP is a free implementation of the Remote Desktop Protocol Affected: before 3.22.0 |
| CVE-2026-23948 | 7.5 | Feb 9 | FreeRDP is a free implementation of the Remote Desktop Protocol Affected: before 3.22.0 |
| CVE-2026-23732 | 7.5 | Jan 19 | FreeRDP is a free implementation of the Remote Desktop Protocol Affected: before 3.21.0 |
| CVE-2024-32661 | 7.5 | Apr 23 | FreeRDP is a free implementation of the Remote Desktop Protocol Affected: before 3.5.1 |
| CVE-2024-32660 | 7.5 | Apr 23 | FreeRDP is a free implementation of the Remote Desktop Protocol Affected: before 2.11.7; 3.0.0 before 3.5.1 |
| CVE-2023-40576 | 7.5 | Aug 31 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license Affected: 3.0.0; 3.0.0 |
| CVE-2023-39354 | 7.5 | Aug 31 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license Affected: before 2.11.0; 3.0.0; 3.0.0 |
| CVE-2023-39351 | 7.5 | Aug 31 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license Affected: before 2.11.0; 3.0.0; 3.0.0 |
| CVE-2023-39350 | 7.5 | Aug 31 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license Affected: before 2.11.0; 3.0.0; 3.0.0 |
| CVE-2023-40589 | 7.5 | Aug 31 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license Affected: before 2.11.0; 3.0.0; 3.0.0 |
| CVE-2022-39283 | 7.5 | Oct 12 | FreeRDP may read and display out of bounds data Affected: <= 2.8.0 |
| CVE-2022-39282 | 7.5 | Oct 12 | RDP client: Read of uninitialized memory with parallel port redirection Affected: <= 2.8.0 |
| CVE-2022-24882 | 7.5 | Apr 26 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP) Affected: before 2.7.0 |
| CVE-2020-4031 | 7.5 | Jun 22 | In FreeRDP before version 2.1.2, there is a use-after-free in gdi_SelectObject Affected: before 2.1.2 |
| CVE-2019-17178 | 7.5 | Oct 4 | HuffmanTree_makeFromFrequencies in lodepng.c in LodePNG through 2019-09-28, as used in WinPR in FreeRDP and other products, has a memory leak because a supplied realloc pointer… Affected: through 1.0.2; 1.1.0 |
| CVE-2019-17177 | 7.5 | Oct 4 | libfreerdp/codec/region.c in FreeRDP through 1.1.x and 2.x through 2.0.0-rc4 has memory leaks because a supplied realloc pointer (i.e., the first argument to realloc) is also used… Affected: through 1.0.2; 1.1.0; 1.1.0; 2.0.0; 2.0.0; 2.0.0; +3 more |