CVE-2026-114041 MEDIUM 6.9 Freerdp — FreeRDP before 3.32.1 on Windows contains a heap out-of-bounds read in client_cli_present_gateway_message that… 2026-10-21 CVE-2026-114042 HIGH 7.1 Freerdp — FreeRDP 3.32.0 contains a use-after-free vulnerability in the drdynvc channel that frees a pool-owned stream w… 2026-10-21 CVE-2026-114043 HIGH 7.1 Freerdp — FreeRDP before 3.32.1 contains a heap-based out-of-bounds read in WinPR's clipboard PNG-to-CF_DIB synthesis be… 2026-10-21 CVE-2026-114044 MEDIUM 6.9 Freerdp — FreeRDP before 3.32.1 contains a heap out-of-bounds read vulnerability in the Android client that allows malic… 2026-10-21 CVE-2026-114045 HIGH 8.7 Freerdp — FreeRDP before 3.32.1 contains a heap-based buffer overflow in the server-side rdpsnd channel because an integ… 2026-10-21 CVE-2026-114046 HIGH 7.1 Freerdp — FreeRDP 3.0.0 before 3.32.0 contains a null-pointer dereference in the smartcard emulation backend that accept… 2026-10-21 CVE-2026-114047 HIGH 7.6 Freerdp — FreeRDP from 2.0.0 before 3.32.0 contains an improper certificate validation vulnerability in its proxy that a… 2026-10-21 CVE-2026-111880 HIGH 8.3 Freerdp — FreeRDP versions from 2.0.0 before 3.32.0 contain a heap out-of-bounds write in the server hash-callback NTLM … 2026-10-17 CVE-2026-111881 HIGH 7.2 Freerdp — FreeRDP from 3.14.1 before 3.32.0 contains an integer underflow in the WinPR BMP writer, where a mismatched st…● PoC 2026-10-17 CVE-2026-111373 MEDIUM 6.9 Freerdp — FreeRDP before 3.32.0 contains a NULL pointer dereference vulnerability in the websocket transport that allows… 2026-10-16 CVE-2026-111374 MEDIUM 6 Freerdp — FreeRDP from 3.30.0 before 3.32.0 contains a resource exhaustion vulnerability in the rdpecam client that lets…● PoC 2026-10-16 CVE-2026-111375 MEDIUM 6.3 Freerdp — FreeRDP from 3.0.0 before 3.32.0 contains an out-of-bounds read vulnerability in the Windows RAIL client that …● PoC 2026-10-16 CVE-2026-111376 LOW 2.3 Freerdp — FreeRDP from 3.30.0 before 3.32.0 contains a heap out-of-bounds read vulnerability in the Windows client's Cli…● PoC 2026-10-16 CVE-2026-111377 HIGH 7.1 Freerdp — FreeRDP from 2.0.0 before 3.32.0 contains an unbounded reassembly vulnerability in WTSProcessChannelData that … 2026-10-16 CVE-2026-111378 HIGH 8.7 Freerdp — FreeRDP from 3.0.0 before 3.32.0 contains an uncontrolled resource consumption vulnerability in parse_nla_mode…● PoC 2026-10-16 CVE-2026-111379 HIGH 7 Freerdp — FreeRDP before 3.32.0 contains a heap buffer overflow vulnerability in persistent_cache_read_entry_v3 that all…● PoC 2026-10-16 CVE-2026-111380 HIGH 8.7 Freerdp — FreeRDP from 3.29.0 before 3.32.0 contains an integer overflow in the Apple audin backends (audin_mac.m, audin…● PoC 2026-10-16 CVE-2026-111381 HIGH 7 Freerdp — FreeRDP before 3.32.0 contains a heap buffer overflow vulnerability in persistent_cache_read_entry_v2 that all…● PoC 2026-10-16 CVE-2026-111382 HIGH 8.7 Freerdp — FreeRDP before 3.32.0 contains a client-side heap out-of-bounds write vulnerability in general_LumaToYUV444 an… 2026-10-16 CVE-2026-110829 HIGH 7.1 Freerdp — FreeRDP versions from 3.0.0 before 3.32.0 contain a null pointer dereference in the rdpsnd channel when a frag…● PoC 2026-10-14 CVE-2026-110830 HIGH 8.2 Freerdp — FreeRDP before 3.32.0 fails to close prior serial handles in serial_process_irp_create, allowing a malicious R…● PoC 2026-10-14 CVE-2026-110831 MEDIUM 5.3 Freerdp — FreeRDP versions 3.13.0 before 3.32.0 contain a resource retention flaw in drive_process_irp_create, which reg… 2026-10-14 CVE-2026-110832 HIGH 7.1 Freerdp — FreeRDP from 2.0.0 before 3.32.0 contains a memory exhaustion vulnerability in wts_read_drdynvc_data_first tha… 2026-10-14 CVE-2026-110833 HIGH 8.2 Freerdp — FreeRDP from 3.0.0-beta1 before 3.32.0 fails to enforce cumulative or absolute size limits when reassembling R… 2026-10-14 CVE-2026-110834 HIGH 7.1 Freerdp — FreeRDP from 2.0.0 before 3.32.0 contains a null pointer dereference vulnerability that allows malicious RDP s…● PoC 2026-10-14 CVE-2026-110835 MEDIUM 6.3 Freerdp — FreeRDP 3.0.0 before 3.32.0 allows HTTP header injection in its proxy because a lone LF in the target portion …● PoC 2026-10-14 CVE-2026-110836 HIGH 7.1 Freerdp — FreeRDP from 3.0.0 before 3.32.0 contains an infinite loop vulnerability in http_response_recv() that allows m…● PoC 2026-10-14 CVE-2026-110837 MEDIUM 6.1 Freerdp — FreeRDP 2.0.0 before 3.32.0, when built with WITH_LAME=ON and WITH_DSP_FFMPEG=OFF, has a heap-based buffer ove…● PoC 2026-10-14 CVE-2026-110838 HIGH 8.7 Freerdp — FreeRDP shadow server from 3.0.0 before 3.32.0 dispatches input PDUs during the Confirm Active state before au… 2026-10-14 CVE-2026-110839 HIGH 7.1 Freerdp — FreeRDP 3.3.0 before 3.32.0, when built with WINPR_UTILS_IMAGE_JPEG=ON, has a heap-based out-of-bounds write i…● PoC 2026-10-14 CVE-2026-109676 HIGH 8.7 Freerdp — FreeRDP from 3.0.0-beta1 before 3.32.0 contains a use-after-free vulnerability in smartcard handling that allo… 2026-10-13 CVE-2026-109677 HIGH 7.1 Freerdp — FreeRDP from 2.0.0-beta1 before 3.28.0 contains an out-of-bounds read vulnerability in smartcard_LocateCardsBy… 2026-10-13 CVE-2026-109678 HIGH 7.1 Freerdp — FreeRDP 3.0.0-beta1 before 3.32.0, when built with verbose WinPR assertions and using smartcard emulation, has…● PoC 2026-10-13 CVE-2026-109679 MEDIUM 6 Freerdp — FreeRDP 3.0.0-beta4 before 3.32.0 contains a NULL pointer dereference in arm_handle_request_ok when an ARM end…● PoC 2026-10-13 CVE-2026-109680 MEDIUM 6 Freerdp — FreeRDP 3.18.0 before 3.32.0 has a heap-based out-of-bounds write in freerdp_interruptible_get_line, which shr…● PoC 2026-10-13 CVE-2026-109938 HIGH 7.1 Freerdp — Positive mapped-video coordinates overflow and abort FreeRDP clients A malicious or compromised RDP server can…● PoC 2026-10-13 CVE-2026-109939 HIGH 7.1 Freerdp — FreeRDP 3.27.1 before 3.32.0 contains a NULL pointer dereference in update_read_cache_bitmap_v3_order() in lib… 2026-10-13 CVE-2026-109940 MEDIUM 5.1 Freerdp — FreeRDP 3.0.0-beta1 before 3.32.0 on Unix builds with PKCS#11 support has a stack-based buffer overflow in wpr…● PoC 2026-10-13 CVE-2026-109941 HIGH 7.1 Freerdp — FreeRDP from 2.3.0 before 3.32.0 contains an infinite loop vulnerability in http_chuncked_read that allows mal…● PoC 2026-10-13 CVE-2026-109942 HIGH 7.1 Freerdp — FreeRDP 2.3.0 before 3.32.0 dereferences a NULL stream in rdg_process_close_packet in libfreerdp/core/gateway/…● PoC 2026-10-13 CVE-2026-109943 HIGH 7.1 Freerdp — FreeRDP 3.29.0 before 3.32.0 contains a double free in the client's async-update message proxy, which shallow-… 2026-10-13 CVE-2026-109944 HIGH 7.1 Freerdp — FreeRDP 3.0.0 before 3.32.0 does not remove card handles when Emulate_SCardReleaseContext releases a smartcard… 2026-10-13 CVE-2026-109945 MEDIUM 6 Freerdp — FreeRDP 3.0.0 before 3.32.0 contains a heap use-after-free vulnerability in smartcard emulation when SCARD_IOC…● PoC 2026-10-13 CVE-2026-109946 HIGH 7.1 Freerdp — FreeRDP 3.11.0 before 3.32.0 does not validate that AVC444 and AVC444v2 region widths are even before YUV444 c…● PoC 2026-10-13 CVE-2026-109947 HIGH 7.1 Freerdp — FreeRDP from 3.20.1 before 3.32.0 contains an uncontrolled resource allocation vulnerability that allows malic…● PoC 2026-10-13 CVE-2026-109948 MEDIUM 5.3 Freerdp — FreeRDP from 3.0.0 before 3.32.0 contains an uninitialized memory disclosure vulnerability in smartcard_Transm…● PoC 2026-10-13 CVE-2026-109949 HIGH 7.1 Freerdp — FreeRDP 3.0.0 before 3.32.0 contains an improper restriction of excessive authentication attempts in its virtu… 2026-10-13 CVE-2026-109950 MEDIUM 5.3 Freerdp — FreeRDP from 3.0.0 before 3.32.0 contains a heap out-of-bounds read vulnerability that allows a malicious RD G…● PoC 2026-10-13 CVE-2026-109951 MEDIUM 6.9 Freerdp — FreeRDP 3.17.1 before 3.32.0 contains a heap buffer over-read vulnerability in DynvcTrackerHandleCreateBack of…● PoC 2026-10-13 CVE-2026-109952 MEDIUM 6 Freerdp — The FreeRDP client 3.0.0 before 3.32.0 does not check a server-selected PROTOCOL_RDSTLS or PROTOCOL_HYBRID_EX …● PoC 2026-10-13 CVE-2026-109953 MEDIUM 6 Freerdp — FreeRDP 3.0.0 before 3.32.0 contains an insufficiently protected credentials vulnerability where the /restrict…● PoC 2026-10-13 CVE-2026-109240 LOW 2.3 Freerdp — FreeRDP 3.11.0 before 3.32.1 contains a reachable assertion vulnerability in urb_isoch_transfer that allows ma…● PoC 2026-10-12 CVE-2026-109241 LOW 2.3 Freerdp — FreeRDP before 3.32.0 contains a NULL pointer dereference vulnerability in the client video redirection channe… 2026-10-12 CVE-2026-109242 HIGH 7.1 Freerdp — FreeRDP before 3.0.0 and 3.6.0 before 3.32.0 renders uninitialized heap memory from un-decoded progressive til…● PoC 2026-10-12 CVE-2026-109243 MEDIUM 4.1 Freerdp — FreeRDP from 3.0.0 before 3.32.0 contains an incorrect permission assignment vulnerability that allows local u…● PoC 2026-10-12 CVE-2026-109244 MEDIUM 6.8 Freerdp — FreeRDP from 2.0.0 before 3.32.0 contains an insecure permission vulnerability in winpr-makecert that creates … 2026-10-12 CVE-2026-109245 HIGH 7.4 Freerdp — FreeRDP 3.0.0 before 3.32.0 contains an improper certificate validation vulnerability in freerdp_http_request(…● PoC 2026-10-12 CVE-2026-109246 HIGH 7.1 Freerdp — FreeRDP before 3.32.0 contains a divide-by-zero vulnerability in the freerdp-shadow-cli shadow server: the fra…● PoC 2026-10-12 CVE-2026-109247 LOW 2.1 Freerdp — FreeRDP before 3.32.0 contains a path traversal vulnerability in convert_filedescriptors_to_file_list() in win…● PoC 2026-10-12 CVE-2026-109248 MEDIUM 6.9 Freerdp — FreeRDP 3.0.0 before 3.32.0 contains a heap out-of-bounds read in the WinPR clipboard function convert_filedes…● PoC 2026-10-12 CVE-2026-109249 MEDIUM 6.8 Freerdp — FreeRDP 3.0.0 before 3.32.0 contains a heap out-of-bounds read in freerdp_assistance_parse_all_elements_of() b… 2026-10-12 CVE-2026-109250 HIGH 7 Freerdp — FreeRDP 3.0.0 before 3.32.0 contains a heap buffer overflow vulnerability in collect_keys() that allows local …● PoC 2026-10-12 CVE-2026-109251 MEDIUM 6 Freerdp — FreeRDP before 3.32.0 stores the server-supplied signed MS-RDPEGT geometry origin unchecked in an unsigned vid…● PoC 2026-10-12 CVE-2026-109252 MEDIUM 6 Freerdp — FreeRDP from 3.9.0 before 3.32.0 contains a NULL pointer dereference vulnerability in the RDPEAR NDR reader th…● PoC 2026-10-12 CVE-2026-109253 MEDIUM 6 Freerdp — FreeRDP from 3.9.0 before 3.32.0 contains an out-of-bounds read vulnerability in the RDPEAR NDR scalar readers…● PoC 2026-10-12 CVE-2026-109254 MEDIUM 6 Freerdp — FreeRDP 2.1.0 before 3.32.0 contains a use-after-free vulnerability in the static rdpsnd channel disconnect pa… 2026-10-12 CVE-2026-109255 MEDIUM 6.1 Freerdp — FreeRDP 3.0.0 before 3.32.0 contains an integer truncation vulnerability in license_check_stream_length that a…● PoC 2026-10-12 CVE-2026-109256 MEDIUM 6 Freerdp — FreeRDP 3.10.0 through 3.32.2 contains a heap buffer overflow in the WinPR png_write_data callback that writes…● PoC 2026-10-12 CVE-2026-109257 HIGH 8.2 Freerdp — FreeRDP before 3.32.0 contains a double-free vulnerability in nsc_context_initialize_encode() that leaves dang…● PoC 2026-10-12 CVE-2026-91945 HIGH 7.1 Freerdp — FreeRDP versions before 3.31.0 contain an out-of-bounds read vulnerability in smartcard response decoders that…● PoC 2026-09-15 CVE-2026-91946 HIGH 7.1 Freerdp — FreeRDP versions before 3.31.0 contain an information disclosure vulnerability in the RDPGFX server's ResetGra…● PoC 2026-09-15 CVE-2026-91947 HIGH 7.7 Freerdp — FreeRDP server versions before 3.31.0 contain a use-after-free vulnerability in the DRDYNVC parser that derefe… 2026-09-15 CVE-2026-91948 HIGH 7.7 Freerdp — FreeRDP versions before 3.31.0 contain an out-of-bounds write vulnerability in server-side static virtual chan… 2026-09-15 CVE-2026-91949 CRITICAL 9.2 Freerdp — FreeRDP server versions before 3.31.0 contain a protocol negotiation bypass vulnerability that allows unauthen… 2026-09-15 CVE-2026-91950 HIGH 7.1 Freerdp — FreeRDP before 3.31.0 contains an out-of-bounds read vulnerability in the rdpdr_dump_packet function due to 32…● PoC 2026-09-15 CVE-2026-91951 HIGH 7.1 Freerdp — FreeRDP versions before 3.31.0 contain an out-of-bounds write vulnerability in the urbdrc client channel's urb… 2026-09-15 CVE-2026-91952 HIGH 7.1 Freerdp — FreeRDP versions before 3.31.0 contain an infinite-loop denial of service in the pool_decode_rect function whe…● PoC 2026-09-15 CVE-2026-91953 HIGH 7.1 Freerdp — FreeRDP versions before 3.31.0 contain a heap buffer overflow vulnerability in nego_send_negotiation_request()… 2026-09-15 CVE-2026-91954 HIGH 7.1 Freerdp — FreeRDP before 3.31.0 contains a null pointer dereference vulnerability in gdi_surface_bits when processing Su… 2026-09-15 CVE-2026-91955 HIGH 8.2 Freerdp — FreeRDP before 3.31.0 fails to validate client-supplied DesktopWidth and DesktopHeight values during GCC negot…● PoC 2026-09-15 CVE-2026-91956 HIGH 7.1 Freerdp — FreeRDP before 3.31.0 contains an out-of-bounds read vulnerability in the URBDRC channel's func_get_ep_desc fu… 2026-09-15 CVE-2026-91957 LOW 2.3 Freerdp — FreeRDP before 3.31.0 contains a use-after-free vulnerability in the smartcard RDPDR device handler when worke… 2026-09-15 CVE-2026-91958 MEDIUM 6.9 Freerdp — FreeRDP versions before 3.31.0 fail to validate MonitorIds array values when parsing RDP connection files, all…● PoC 2026-09-15 CVE-2026-91959 HIGH 7.1 Freerdp — FreeRDP before 3.31.0 contains a buffer over-read vulnerability in the rts_read_result function within the RPC… 2026-09-15 CVE-2026-91960 HIGH 7.1 Freerdp — FreeRDP versions before 3.31.0 contain an integer overflow in WinPR's Stream_EnsureRemainingCapacity function …● PoC 2026-09-15 CVE-2026-91961 HIGH 7.1 Freerdp — FreeRDP before 3.31.0 contains a denial-of-service vulnerability in the URBDRC control-transfer request path t… 2026-09-15 CVE-2026-91962 MEDIUM 5.3 Freerdp — FreeRDP before 3.31.0 contains an integer overflow in the audin Apple backends when processing FramesPerPacket… 2026-09-15 CVE-2026-91963 HIGH 7.1 Freerdp — FreeRDP versions before 3.31.0 contain an uninitialized heap memory disclosure vulnerability in the urbdrc USB…● PoC 2026-09-15 CVE-2026-91964 HIGH 8.7 Freerdp — FreeRDP versions before 3.31.0 contain a heap-based buffer overflow in nego_send_negotiation_request when proc… 2026-09-15