FR
Vendor
FreeRDP
305
CVEs
0
On KEV
69
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-114047 | FR FreeRDP FreeRDP | 6.8 | Oct 21 | FreeRDP 2.0.0 before 3.32.0 Proxy Improper TLS Certificate Validation |
| CVE-2026-114046 | FR FreeRDP FreeRDP | 6.5 | Oct 21 | FreeRDP 3.0.0 before 3.32.0 null-pointer dereference via emulated smartcard |
| CVE-2026-114045 | FR FreeRDP FreeRDP | 8.8 | Oct 21 | FreeRDP before 3.32.1 Heap Buffer Overflow via rdpsnd_server_select_format |
| CVE-2026-114044 | FR FreeRDP FreeRDP | 5.3 | Oct 21 | FreeRDP before 3.32.1 Android Client Heap OOB Read via Graphics Pipeline |
| CVE-2026-114043 | FR FreeRDP FreeRDP | 6.5 | Oct 21 | Vulnerability in FreeRDP |
| CVE-2026-114042 | FR FreeRDP FreeRDP | 6.5 | Oct 21 | FreeRDP 3.32.0 Use-After-Free via drdynvc Virtual Channel PDU |
| CVE-2026-114041 | FR FreeRDP FreeRDP | 6.5 | Oct 21 | FreeRDP before 3.32.1 Heap Out-of-Bounds Read via RD Gateway Consent Message |
| CVE-2026-111881 | FR FreeRDP FreeRDP | 7.6 | Oct 17 | FreeRDP 3.14.1 before 3.32.0 Integer Underflow in BMP Writer via Clipboard |
| CVE-2026-111880 | FR FreeRDP FreeRDP | 7.4 | Oct 17 | FreeRDP 2.0.0 before 3.32.0 Heap Out-of-Bounds Write via NTLM MIC Offset |
| CVE-2026-111382 | FR FreeRDP FreeRDP | 8.8 | Oct 16 | FreeRDP before 3.32.0 Heap Out-of-Bounds Write in AVC444 YUV444 Combine |
| CVE-2026-111381 | FR FreeRDP FreeRDP | 7.3 | Oct 16 | FreeRDP before 3.32.0 Heap Buffer Overflow via Persistent Cache v2 Parser |
| CVE-2026-111380 | FR FreeRDP FreeRDP | 8.8 | Oct 16 | FreeRDP 3.29.0 before 3.32.0 Heap Overflow via audin Apple Backends |
| CVE-2026-111379 | FR FreeRDP FreeRDP | 7.3 | Oct 16 | FreeRDP before 3.32.0 Heap Buffer Overflow via persistent_cache_read_entry_v3 |
| CVE-2026-111378 | FR FreeRDP FreeRDP | 7.5 | Oct 16 | FreeRDP 3.0.0 before 3.32.0 Unauthenticated Memory Exhaustion via NLA Frame Parser |
| CVE-2026-111377 | FR FreeRDP FreeRDP | 6.5 | Oct 16 | FreeRDP 2.0.0 before 3.32.0 Memory Exhaustion via Static Channel Reassembly |
| CVE-2026-111376 | FR FreeRDP FreeRDP | 5.0 | Oct 16 | FreeRDP 3.30.0 before 3.32.0 Heap Over-Read via Windows cliprdr FILECONTENTS_SIZE |
| CVE-2026-111375 | FR FreeRDP FreeRDP | 9.1 | Oct 16 | FreeRDP 3.0.0 before 3.32.0 Out-of-Bounds Read via RAIL Window Title |
| CVE-2026-111374 | FR FreeRDP FreeRDP | 5.3 | Oct 16 | FreeRDP from 3.30.0 before 3.32.0 Resource Exhaustion via rdpecam StartStreamsRequest |
| CVE-2026-111373 | FR FreeRDP FreeRDP | 7.5 | Oct 16 | FreeRDP before 3.32.0 NULL Dereference via Zero-Length WebSocket Ping |
| CVE-2026-110839 | FR FreeRDP FreeRDP | 7.1 | Oct 14 | FreeRDP 3.3.0 before 3.32.0 Heap Out-of-Bounds Write via Grayscale JPEG Clipboard Data |
| CVE-2026-110838 | FR FreeRDP FreeRDP | 7.5 | Oct 14 | FreeRDP shadow before 3.32.0 Pre-Authentication Input Injection via Confirm Active bypass |
| CVE-2026-110837 | FR FreeRDP FreeRDP | 7.1 | Oct 14 | FreeRDP 2.0.0 before 3.32.0 Heap Buffer Overflow via MP3 Audio Decoding |
| CVE-2026-110836 | FR FreeRDP FreeRDP | 6.5 | Oct 14 | FreeRDP 3.0.0 before 3.32.0 Infinite Loop DoS via Gateway Content-Type |
| CVE-2026-110835 | FR FreeRDP FreeRDP | 5.8 | Oct 14 | FreeRDP 3.0.0 before 3.32.0 HTTP Header Injection via Proxy Routing Token |
| CVE-2026-110834 | FR FreeRDP FreeRDP | 6.5 | Oct 14 | FreeRDP 2.0.0 before 3.32.0 Denial of Service via Serial IRP Null Handle |
| CVE-2026-110833 | FR FreeRDP FreeRDP | 7.5 | Oct 14 | FreeRDP before 3.32.0 Unbounded Memory Retention via RDPDR Proxy |
| CVE-2026-110832 | FR FreeRDP FreeRDP | 6.5 | Oct 14 | FreeRDP 2.0.0 before 3.32.0 Memory Exhaustion via DRDYNVC DATA_FIRST |
| CVE-2026-110831 | FR FreeRDP FreeRDP | 4.3 | Oct 14 | FreeRDP 3.13.0 before 3.32.0 Resource Leak via Drive Redirection IRP_MJ_CREATE |
| CVE-2026-110830 | FR FreeRDP FreeRDP | 7.5 | Oct 14 | FreeRDP before 3.32.0 Denial of Service via Serial IRP_MJ_CREATE |
| CVE-2026-110829 | FR FreeRDP FreeRDP | 6.5 | Oct 14 | FreeRDP 3.0.0 before 3.32.0 Null Pointer Dereference via rdpsnd Fragment |
| CVE-2026-109953 | FR FreeRDP FreeRDP | 5.3 | Oct 13 | FreeRDP 3.0.0 before 3.32.0 Cleartext Credential Disclosure via /restricted-admin |
| CVE-2026-109952 | FR FreeRDP FreeRDP | 5.3 | Oct 13 | FreeRDP 3.0.0 before 3.32.0 Security Protocol Downgrade via Negotiation Response |
| CVE-2026-109951 | FR FreeRDP FreeRDP | 5.3 | Oct 13 | FreeRDP 3.17.1 before 3.32.0 Heap Buffer Over-Read via Proxy DRDYNVC Channel Name |
| CVE-2026-109950 | FR FreeRDP FreeRDP | 4.3 | Oct 13 | FreeRDP 3.0.0 before 3.32.0 Heap Out-of-Bounds Read via RD Gateway Messages |
| CVE-2026-109949 | FR FreeRDP FreeRDP | 6.5 | Oct 13 | FreeRDP 3.0.0 before 3.32.0 PIN Brute-Force via Virtual Smartcard |
| CVE-2026-109948 | FR FreeRDP FreeRDP | 4.3 | Oct 13 | FreeRDP 3.0.0 before 3.32.0 Memory Disclosure via SCardTransmit Smartcard Redirection |
| CVE-2026-109947 | FR FreeRDP FreeRDP | 6.5 | Oct 13 | FreeRDP 3.20.1 before 3.32.0 Unbounded Allocation via drive_process_irp_read |
| CVE-2026-109946 | FR FreeRDP FreeRDP | 6.5 | Oct 13 | FreeRDP 3.11.0 before 3.32.0 Reachable Assertion via AVC444 Odd Region Width |
| CVE-2026-109945 | FR FreeRDP FreeRDP | 5.9 | Oct 13 | FreeRDP 3.0.0 before 3.32.0 Smartcard Use-After-Free via Concurrent Disconnect and Transmit |
| CVE-2026-109944 | FR FreeRDP FreeRDP | 6.5 | Oct 13 | FreeRDP 3.0.0 before 3.32.0 Reachable Assertion via Stale Smartcard Handle |
| CVE-2026-109943 | FR FreeRDP FreeRDP | 6.5 | Oct 13 | FreeRDP 3.29.0 before 3.32.0 Double Free via Async-Update Polygon Order |
| CVE-2026-109942 | FR FreeRDP FreeRDP | 6.5 | Oct 13 | FreeRDP 2.3.0 before 3.32.0 NULL Pointer Dereference via RD Gateway Close Channel Packet |
| CVE-2026-109941 | FR FreeRDP FreeRDP | 6.5 | Oct 13 | FreeRDP 2.3.0 before 3.32.0 Infinite Loop via RD Gateway Chunked Response |
| CVE-2026-109940 | FR FreeRDP FreeRDP | 4.6 | Oct 13 | FreeRDP 3.0.0-beta1 before 3.32.0 Stack Buffer Overflow via PKCS#11 Key Name |
| CVE-2026-109939 | FR FreeRDP FreeRDP | 6.5 | Oct 13 | FreeRDP 3.27.1 before 3.32.0 NULL Pointer Dereference via Cache Bitmap V3 Order |
| CVE-2026-109938 | FR FreeRDP FreeRDP | 6.5 | Oct 13 | FreeRDP 3.11.0 before 3.32.0 Integer Overflow via Mapped Video Geometry Update |
| CVE-2026-109680 | FR FreeRDP FreeRDP | 6.5 | Oct 13 | FreeRDP 3.18.0 before 3.32.0 Heap Out-of-Bounds Write via ARM Redirected Username |
| CVE-2026-109679 | FR FreeRDP FreeRDP | 5.3 | Oct 13 | FreeRDP 3.0.0-beta4 before 3.32.0 NULL Pointer Crash via ARM Response |
| CVE-2026-109678 | FR FreeRDP FreeRDP | 6.5 | Oct 13 | FreeRDP 3.0.0-beta1 before 3.32.0 Reachable Assertion via Emulated SCardStatusA |
| CVE-2026-109677 | FR FreeRDP FreeRDP | 6.5 | Oct 13 | FreeRDP 2.0.0-beta1 before 3.28.0 Out-of-Bounds Read via LocateCardsByATRA Handler |
| CVE-2026-109676 | FR FreeRDP FreeRDP | 8.8 | Oct 13 | FreeRDP 3.0.0-beta1 before 3.32.0 Use-After-Free via Smartcard Connect |
| CVE-2026-109257 | FR FreeRDP FreeRDP | 7.5 | Oct 12 | FreeRDP before 3.32.0 Double Free via NSCodec plane growth failure |
| CVE-2026-109256 | FR FreeRDP FreeRDP | 6.5 | Oct 12 | FreeRDP 3.10.0 through 3.32.2 Heap Buffer Overflow in WinPR PNG Conversion |
| CVE-2026-109255 | FR FreeRDP FreeRDP | 6.8 | Oct 12 | FreeRDP 3.0.0 before 3.32.0 heap buffer overflow via license_check_stream_length |
| CVE-2026-109254 | FR FreeRDP FreeRDP | 5.9 | Oct 12 | FreeRDP 2.1.0 before 3.32.0 Use-After-Free via rdpsnd Disconnect Path |
| CVE-2026-109253 | FR FreeRDP FreeRDP | 5.3 | Oct 12 | FreeRDP 3.9.0 before 3.32.0 RDPEAR NDR Scalar Out-of-Bounds Read |
| CVE-2026-109252 | FR FreeRDP FreeRDP | 5.3 | Oct 12 | FreeRDP from 3.9.0 before 3.32.0 RDPEAR NULL Pointer Dereference via KERB_RPC_INTERNAL_NAME |
| CVE-2026-109251 | FR FreeRDP FreeRDP | 5.3 | Oct 12 | FreeRDP before 3.32.0 Out-of-Bounds Write via MS-RDPEGT Video Geometry |
| CVE-2026-109250 | FR FreeRDP FreeRDP | 6.6 | Oct 12 | FreeRDP 3.0.0 before 3.32.0 Heap Buffer Overflow via PKCS#11 collect_keys() |
| CVE-2026-109249 | FR FreeRDP FreeRDP | 5.5 | Oct 12 | FreeRDP 3.0.0 before 3.32.0 Heap Out-of-Bounds Read via Remote Assistance File Parsing |