Freerdp vulnerabilities
323 CVEs and advisories name Freerdp as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-125394FreeRDP before 3.33.0 Use-After-Free via Stale Brush Cache Pointer
- CVE-2026-121964FreeRDP before 3.32.2 Heap Buffer Overflow via rpc_client_recv_fragment
- CVE-2026-121963FreeRDP before 3.32.2 Use-After-Free via Dynamic rdpsnd Channel Close
- CVE-2026-121962FreeRDP before 3.32.2 Heap Buffer Overflow via Early User Authorization Read
- CVE-2026-121961FreeRDP before 3.32.2 Use-After-Free via DRDYNVC Tracker Race
- CVE-2026-121960FreeRDP before 3.32.2 Unauthenticated Denial of Service via CredSSP TSRequest
- CVE-2026-121959FreeRDP before 3.32.2 Infinite Loop via Truncated WebSocket Frame
- CVE-2026-121958FreeRDP through 3.32.1 Heap Out-of-Bounds Write via RDPGFX HashTable_GetKeys
- CVE-2026-121957FreeRDP before 3.32.2 Use-After-Free via RDPGFX ResetGraphics Race
- CVE-2026-121956FreeRDP before 3.32.2 Double Free in WinPR Kerberos retrieveSomeTgt
- CVE-2026-121955FreeRDP before 3.32.2 Use-After-Free in Smartcard Emulation ReleaseContext
- CVE-2026-121954FreeRDP before 3.32.2 Heap Out-of-Bounds Write in Planar Codec
- CVE-2026-121953FreeRDP before 3.32.2 Use-After-Free via rdpgfx Dynamic Virtual Channel Close
- CVE-2026-121952FreeRDP before 3.32.2 Proxy Out-of-Bounds Write via Bitmap Cache v2 Capability
- CVE-2026-121951FreeRDP 3.0.0 before 3.32.2 Denial of Service via Slow-Path Input Event
- CVE-2026-121950FreeRDP before 3.32.2 Heap Overflow via RDPGFX CREATE_SURFACE Integer Wrap
- CVE-2026-121412FreeRDP 3.0.0 before 3.32.2 Proxy Memory Exhaustion via DVC Reassembly
- CVE-2026-121411FreeRDP before 3.32.2 X11 Client Abort via RDPGFX Scaled Output Geometry
- CVE-2026-121410FreeRDP before 3.32.2 Denial of Service via RDPGFX ALPHA WIRETOSURFACE_2
- CVE-2026-121409FreeRDP before 3.32.2 Denial of Service via Oversized X.224 Routing Token
- CVE-2026-121408FreeRDP before 3.32.2 Use-After-Free via USB Redirection Control Channel
- CVE-2026-121407FreeRDP before 3.32.2 Shadow Server Denial of Service via remdesk Channel
- CVE-2026-121406FreeRDP before 3.32.2 Client Denial of Service via Zero-Output ZGFX Payload
- CVE-2026-121405FreeRDP before 3.32.2 Memory Exhaustion via Serial RDPDR Device Control
- CVE-2026-121404FreeRDP before 3.32.2 Shadow Server CPU Exhaustion via Zero-Length DVC DATA
- CVE-2026-121403FreeRDP before 3.32.2 Denial of Service via Malformed Drive IRP
- CVE-2026-121402FreeRDP before 3.32.2 X11 Client Crash via Zero-Width RDPGFX ResetGraphics
- CVE-2026-121401FreeRDP before 3.32.2 Denial of Service via RD Gateway extended-auth packet
- CVE-2026-121400FreeRDP before 3.32.2 CPU Exhaustion via RDG Control Packet
- CVE-2026-121399FreeRDP before 3.32.2 Memory Exhaustion via RD Gateway Packet Length