Freerdp vulnerabilities
323 CVEs and advisories name Freerdp as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-67299FreeRDP before 3.29.0 Use-After-Free via WindowIcon async message
- CVE-2026-67288FreeRDP before 3.29.0 Denial of Service via smartcard cache
- CVE-2026-67303FreeRDP before 3.29.0 Denial of Service via serial DeviceControl
- CVE-2026-67295FreeRDP before 3.29.0 Path Traversal via drive redirection
- CVE-2026-67292FreeRDP before 3.29.0 WebSocket Ping Buffer Over-disclosure
- CVE-2026-66401FreeRDP before 3.29.0 Out-of-Bounds Read via UVC H.264
- CVE-2026-67302FreeRDP rdpecam StartStreamsRequest divide-by-zero denial of service
- CVE-2026-67306FreeRDP before 3.29.0 Out-of-Bounds Read via Planar RLE
- CVE-2026-67289FreeRDP before 3.29.0 HTTP Proxy Request Injection via Redirection
- CVE-2026-67294FreeRDP before 3.29.0 TLS Certificate EKU Bypass
- CVE-2026-67296FreeRDP before 3.29.0 Denial of Service via RDPEI PDU
- CVE-2026-67304FreeRDP before 3.29.0 NULL Dereference via smartcard cleanup
- CVE-2026-66402FreeRDP before 3.29.0 TLS Certificate Identity Validation Bypass
- CVE-2026-67297FreeRDP before 3.29.0 Resource Exhaustion via chunked HTTP response
- CVE-2026-67301FreeRDP before 3.29.0 Out-of-bounds Read via Polygon async message-proxy
- CVE-2026-67293FreeRDP before 3.29.0 Improper Certificate Hostname Validation
- CVE-2026-67305FreeRDP Windows Client before 3.29.0 Heap Buffer Overflow via Cliprdr
- CVE-2026-67290FreeRDP before 3.29.0 Heap Out-of-Bounds Read via TSMF
- CVE-2026-64624FreeRDP RDP File Parser Remote Code Execution via CLI Options
- CVE-2026-64621FreeRDP before 3.28.0 Double-Free via selectedmonitors
- CVE-2026-64620FreeRDP before 3.28.0 Heap Buffer Overflow via crypto_rsa_common
- CVE-2026-57156FreeRDP: Integer overflow leading to heap buffer overflow in Orders Delta Points parsing
- CVE-2026-57157Out-of-bounds read in the camera device enumerator server (rdpecam) via unterminated DeviceName / VirtualChannelName
- CVE-2026-57158FreeRDP planar_decompress_plane_rle_only: heap OOB read — incomplete fix for CVE-2026-23530
- CVE-2026-55827FreeRDP: Heap out-of-bounds write in RemoteFX (RFX) Cache Bitmap V3 decode
- CVE-2026-56297FreeRDP - Use-After-Free via Race Condition in DRDYNVC Channel Callback
- CVE-2026-45700Heap-buffer-overflow write in planar bitmap decoder
- CVE-2026-44420FreeRDP cliprdr server heap-buffer-overflow via undersized capabilitySetLength in CB_CLIP_CAPS
- CVE-2026-44422FreeRDP RDPEAR NDR ref-id aliasing causes client-side UAF/double-free and type confusion
- CVE-2026-44421FreeRDP RDPGFX CacheToSurface heap-buffer-overflow via clamped-rectangle validation bypass