Freerdp vulnerabilities
323 CVEs and advisories name Freerdp as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-111374FreeRDP from 3.30.0 before 3.32.0 Resource Exhaustion via rdpecam StartStreamsRequest
- CVE-2026-111373FreeRDP before 3.32.0 NULL Dereference via Zero-Length WebSocket Ping
- CVE-2026-110839FreeRDP 3.3.0 before 3.32.0 Heap Out-of-Bounds Write via Grayscale JPEG Clipboard Data
- CVE-2026-110838FreeRDP shadow before 3.32.0 Pre-Authentication Input Injection via Confirm Active bypass
- CVE-2026-110837FreeRDP 2.0.0 before 3.32.0 Heap Buffer Overflow via MP3 Audio Decoding
- CVE-2026-110836FreeRDP 3.0.0 before 3.32.0 Infinite Loop DoS via Gateway Content-Type
- CVE-2026-110835FreeRDP 3.0.0 before 3.32.0 HTTP Header Injection via Proxy Routing Token
- CVE-2026-110834FreeRDP 2.0.0 before 3.32.0 Denial of Service via Serial IRP Null Handle
- CVE-2026-110833FreeRDP before 3.32.0 Unbounded Memory Retention via RDPDR Proxy
- CVE-2026-110832FreeRDP 2.0.0 before 3.32.0 Memory Exhaustion via DRDYNVC DATA_FIRST
- CVE-2026-110831FreeRDP 3.13.0 before 3.32.0 Resource Leak via Drive Redirection IRP_MJ_CREATE
- CVE-2026-110830FreeRDP before 3.32.0 Denial of Service via Serial IRP_MJ_CREATE
- CVE-2026-110829FreeRDP 3.0.0 before 3.32.0 Null Pointer Dereference via rdpsnd Fragment
- CVE-2026-109953FreeRDP 3.0.0 before 3.32.0 Cleartext Credential Disclosure via /restricted-admin
- CVE-2026-109952FreeRDP 3.0.0 before 3.32.0 Security Protocol Downgrade via Negotiation Response
- CVE-2026-109951FreeRDP 3.17.1 before 3.32.0 Heap Buffer Over-Read via Proxy DRDYNVC Channel Name
- CVE-2026-109950FreeRDP 3.0.0 before 3.32.0 Heap Out-of-Bounds Read via RD Gateway Messages
- CVE-2026-109949FreeRDP 3.0.0 before 3.32.0 PIN Brute-Force via Virtual Smartcard
- CVE-2026-109948FreeRDP 3.0.0 before 3.32.0 Memory Disclosure via SCardTransmit Smartcard Redirection
- CVE-2026-109947FreeRDP 3.20.1 before 3.32.0 Unbounded Allocation via drive_process_irp_read
- CVE-2026-109946FreeRDP 3.11.0 before 3.32.0 Reachable Assertion via AVC444 Odd Region Width
- CVE-2026-109945FreeRDP 3.0.0 before 3.32.0 Smartcard Use-After-Free via Concurrent Disconnect and Transmit
- CVE-2026-109944FreeRDP 3.0.0 before 3.32.0 Reachable Assertion via Stale Smartcard Handle
- CVE-2026-109943FreeRDP 3.29.0 before 3.32.0 Double Free via Async-Update Polygon Order
- CVE-2026-109942FreeRDP 2.3.0 before 3.32.0 NULL Pointer Dereference via RD Gateway Close Channel Packet
- CVE-2026-109941FreeRDP 2.3.0 before 3.32.0 Infinite Loop via RD Gateway Chunked Response
- CVE-2026-109940FreeRDP 3.0.0-beta1 before 3.32.0 Stack Buffer Overflow via PKCS#11 Key Name
- CVE-2026-109939FreeRDP 3.27.1 before 3.32.0 NULL Pointer Dereference via Cache Bitmap V3 Order
- CVE-2026-109938FreeRDP 3.11.0 before 3.32.0 Integer Overflow via Mapped Video Geometry Update
- CVE-2026-109680FreeRDP 3.18.0 before 3.32.0 Heap Out-of-Bounds Write via ARM Redirected Username