Known Vulnerabilities for products from Freerdp
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Freerdp".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-85090 json | Not Provided | 2026-09-03 | 2026-09-05 | |
| CVE-2026-85089 json | FreeRDP versions 3.0.0 through 3.30.0 (before 3.31.0) transmit uninitialized heap memory in Save Session Info PDU reserved pa... | Not Provided | 2026-09-03 | 2026-09-09 |
| CVE-2026-76840 json | Not Provided | 2026-08-24 | 2026-08-24 | |
| CVE-2026-73242 json | Not Provided | 2026-08-11 | 2026-08-12 | |
| CVE-2026-73241 json | Not Provided | 2026-08-11 | 2026-08-13 | |
| CVE-2026-68580 json | Not Provided | 2026-08-02 | 2026-08-05 | |
| CVE-2026-68579 json | Not Provided | 2026-08-02 | 2026-08-03 | |
| CVE-2026-67306 json | FreeRDP versions 3.28.0 and earlier contain an out-of-bounds read vulnerability in the RDP6 planar RLE bitmap decoder functio... | Not Provided | 2026-08-01 | 2026-09-08 |
| CVE-2026-67305 json | FreeRDP Windows client before 3.29.0 contains a heap buffer overflow vulnerability in the clipboard virtual channel when proc... | Not Provided | 2026-08-01 | 2026-09-08 |
| CVE-2026-67304 json | FreeRDP before 3.29.0 contains a null pointer dereference vulnerability in smartcard device control request cleanup when read... | Not Provided | 2026-08-01 | 2026-09-08 |
| CVE-2026-67302 json | FreeRDP before 3.29.0 (affected versions <= 3.28.0) contains a divide-by-zero vulnerability in the rdpecam camera redirection... | Not Provided | 2026-08-01 | 2026-09-08 |
| CVE-2026-67301 json | FreeRDP before 3.29.0 contains out-of-bounds read vulnerabilities in the async update message proxy for the PolygonSC and Pol... | Not Provided | 2026-08-01 | 2026-09-08 |
| CVE-2026-67299 json | FreeRDP before 3.29.0 contains a client-side heap use-after-free in the async update message proxy for WINDOW_ICON_ORDER when... | Not Provided | 2026-08-01 | 2026-09-08 |
| CVE-2026-67297 json | FreeRDP before 3.29.0 fails to enforce the RESPONSE_SIZE_LIMIT when processing Transfer-Encoding: chunked HTTP responses in h... | Not Provided | 2026-08-01 | 2026-09-11 |
| CVE-2026-67296 json | FreeRDP before 3.29.0 contains a denial of service vulnerability in the RDPEI server channel handler that fails to validate m... | Not Provided | 2026-08-01 | 2026-09-11 |
| CVE-2026-67294 json | FreeRDP before 3.29.0 improperly validates the Extended Key Usage (EKU) purpose of the peer certificate during client-side se... | Not Provided | 2026-08-01 | 2026-09-11 |
| CVE-2026-67292 json | FreeRDP before 3.29.0 contains a buffer over-disclosure vulnerability in the gateway WebSocket transport (libfreerdp/core/gat... | Not Provided | 2026-08-01 | 2026-09-11 |
| CVE-2026-67291 json | FreeRDP before 3.29.0 (affected versions <= 3.28.0) contains a heap out-of-bounds read in update_process_glyph_fragments()/gl... | Not Provided | 2026-08-01 | 2026-09-03 |
| CVE-2026-67288 json | FreeRDP before 3.29.0 contains a null pointer dereference vulnerability in smartcard cache request decoders that accept NULL ... | Not Provided | 2026-08-01 | 2026-09-03 |
| CVE-2026-66401 json | FreeRDP before 3.29.0 contains an out-of-bounds heap read vulnerability in the UVC H.264 extension-unit parser that fails to ... | Not Provided | 2026-08-01 | 2026-09-03 |
Known software with vulnerabilities from Freerdp
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Freerdp | Freerdp | 1.0.0 |