CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,511 CVEs published, 359 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,511
Show in the list
Critical, last 7 days
359
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list

Showing CVEs that name the product freerdp:freerdp. Show all products

194 CVEs, showing 101 to 150PreviousPage 3 of 4Next
CVESeverityTitlePublished
CVE-2026-73242High 8.3FreeRDP: Kerberos GSS Wrap-token `EC` field is unbounded, causing an out-of-bounds decrypt in `kerberos_DecryptMessage`
Assigned by GitHub_M
Aug 11, 2026
CVE-2026-55191High 8.7FreeRDP: Heap-buffer-overflow write in AVC444 YUV buffer allocation
Assigned by GitHub_M
Aug 19, 2026
CVE-2026-55564Medium 5.4FreeRDP: Out-of-bounds read in glyph_cache_get via crafted glyph fragments
Assigned by GitHub_M
Aug 19, 2026
CVE-2026-55193High 8.7FreeRDP: Heap-buffer-overflow write in TS Gateway RPC fragment receive due to uncapped bind_ack max_xmit_frag
Assigned by GitHub_M
Aug 19, 2026
CVE-2026-55648Medium 6.1FreeRDP: Integer Overflow in `freerdp_image_copy_from_icon_data` Bypasses Bounds Check
Assigned by GitHub_M
Aug 19, 2026
CVE-2026-55194High 8.7FreeRDPHeap-buffer-overflow write in TS Gateway RPC RESPONSE reassembly due to alloc_hint capacity mismatch
Assigned by GitHub_M
Aug 19, 2026
CVE-2026-55192High 7.2FreeRDP: Out-of-bounds read in H.264 YUV-to-RGB conversion due to decoder/surface dimension mismatch
Assigned by GitHub_M
Aug 19, 2026
CVE-2026-63117Medium 6.5FreeRDP: Denial of service through ADPCM frame size calculation
Assigned by GitHub_M
Aug 19, 2026
CVE-2026-63652High 7.1FreeRDP: Double-free of `client_formats` in the rdpsnd server channel on a malformed Client Audio Formats PDU
Assigned by GitHub_M
Aug 19, 2026
CVE-2026-63633High 7.7FreeRDP: Heap buffer overflow in Opus audio decode (`freerdp_dsp_decode_opus` resizes the wrong stream) — server→client
Assigned by GitHub_M
Aug 19, 2026
CVE-2026-85089Medium 6.5FreeRDP before 3.31.0 Information Disclosure via uninitialized heap memory
Assigned by VulnCheck
Sep 3, 2026
CVE-2026-85090Medium 5.4FreeRDP before 3.31.0 Heap Out-of-Bounds Read via AVC444
Assigned by VulnCheck
Sep 3, 2026
CVE-2026-91945Medium 6.5FreeRDP before 3.31.0 Out-of-bounds Read via Smartcard ATR
Assigned by VulnCheck
Sep 15, 2026
CVE-2026-91946Medium 6.5FreeRDP before 3.31.0 Information Disclosure via RDPGFX ResetGraphics
Assigned by VulnCheck
Sep 15, 2026
CVE-2026-91947High 7.5FreeRDP Server before 3.31.0 Use-After-Free via DRDYNVC
Assigned by VulnCheck
Sep 15, 2026
CVE-2026-91948High 7.5FreeRDP before 3.31.0 Out-of-bounds Write via SHOW_PROTOCOL
Assigned by VulnCheck
Sep 15, 2026
CVE-2026-91949Critical 9.3FreeRDP 3.0.0 through 3.30.0 Protocol Negotiation Bypass
Assigned by VulnCheck
Sep 15, 2026
CVE-2026-91950Medium 6.5FreeRDP before 3.31.0 Out-of-Bounds Read via UINT32 Wraparound
Assigned by VulnCheck
Sep 15, 2026
CVE-2026-91951Medium 6.5FreeRDP 3.14.0 through 3.30.0 Out-of-bounds Write via urbdrc
Assigned by VulnCheck
Sep 15, 2026
CVE-2026-91952Medium 6.5FreeRDP before 3.31.0 Denial of Service via pool_decode_rect
Assigned by VulnCheck
Sep 15, 2026
CVE-2026-91953Medium 6.5FreeRDP before 3.31.0 Heap Buffer Overflow via LB_LOAD_BALANCE_INFO
Assigned by VulnCheck
Sep 15, 2026
CVE-2026-91954Medium 6.5FreeRDP before 3.31.0 NULL Pointer Dereference via NSCodec
Assigned by VulnCheck
Sep 15, 2026
CVE-2026-91955High 7.5FreeRDP before 3.31.0 Denial of Service via Desktop Dimensions
Assigned by VulnCheck
Sep 15, 2026
CVE-2026-91956Medium 6.5FreeRDP before 3.31.0 Out-of-Bounds Read via URBDRC
Assigned by VulnCheck
Sep 15, 2026
CVE-2026-91957Low 3.1FreeRDP before 3.31.0 Use-After-Free via smartcard worker
Assigned by VulnCheck
Sep 15, 2026
CVE-2026-91958Medium 6.6FreeRDP 3.11.0 through 3.30.0 Heap Buffer Overflow via Monitor Index
Assigned by VulnCheck
Sep 15, 2026
CVE-2026-91959Medium 6.5FreeRDP before 3.31.0 Buffer Over-read via RTS Gateway
Assigned by VulnCheck
Sep 15, 2026
CVE-2026-91960Medium 6.5FreeRDP before 3.31.0 Integer Overflow Double Free
Assigned by VulnCheck
Sep 15, 2026
CVE-2026-91961Medium 6.5FreeRDP before 3.31.0 Denial of Service via URBDRC
Assigned by VulnCheck
Sep 15, 2026
CVE-2026-91962Medium 6.3FreeRDP before 3.31.0 Integer Overflow via audin Apple backends
Assigned by VulnCheck
Sep 15, 2026
CVE-2026-91963Medium 6.5FreeRDP 2.0.0 through 3.30.0 Uninitialized Heap Memory Disclosure via urbdrc
Assigned by VulnCheck
Sep 15, 2026
CVE-2026-91964High 8.8FreeRDP 2.0.0 through 3.30.0 Heap Buffer Overflow via RoutingToken
Assigned by VulnCheck
Sep 15, 2026
CVE-2026-109240Low 3.1FreeRDP 3.11.0 before 3.32.1 Reachable Assertion DoS via urb_isoch_transfer
Assigned by VulnCheck
Oct 12, 2026
CVE-2026-109241Low 3.1FreeRDP before 3.32.0 NULL Dereference in Video Redirection Channel
Assigned by VulnCheck
Oct 12, 2026
CVE-2026-109242High 7.1FreeRDP before 3.0.0 and 3.6.0 before 3.32.0 Uninitialized Heap Disclosure via Progressive Codec Tile Upgrade
Assigned by VulnCheck
Oct 12, 2026
CVE-2026-109243Medium 4.4FreeRDP 3.0.0 before 3.32.0 Insecure Permissions on Soft-Smartcard Private Key File
Assigned by VulnCheck
Oct 12, 2026
CVE-2026-109244Medium 6.6FreeRDP 2.0.0 before 3.32.0 Insecure Private Key Permissions in winpr-makecert
Assigned by VulnCheck
Oct 12, 2026
CVE-2026-109245Medium 6.8FreeRDP 3.0.0 before 3.32.0 Improper Certificate Validation in freerdp_http_request
Assigned by VulnCheck
Oct 12, 2026
CVE-2026-109246Medium 6.5FreeRDP before 3.32.0 Shadow Server Divide-by-Zero via Frame Acknowledge PDU
Assigned by VulnCheck
Oct 12, 2026
CVE-2026-109247Low 3.1FreeRDP before 3.32.0 Path Traversal via Clipboard cFileName
Assigned by VulnCheck
Oct 12, 2026
CVE-2026-109248Medium 6.5FreeRDP 3.0.0 before 3.32.0 Heap Out-of-Bounds Read via WinPR Clipboard cFileName
Assigned by VulnCheck
Oct 12, 2026
CVE-2026-109249Medium 5.5FreeRDP 3.0.0 before 3.32.0 Heap Out-of-Bounds Read via Remote Assistance File Parsing
Assigned by VulnCheck
Oct 12, 2026
CVE-2026-109250Medium 6.6FreeRDP 3.0.0 before 3.32.0 Heap Buffer Overflow via PKCS#11 collect_keys()
Assigned by VulnCheck
Oct 12, 2026
CVE-2026-109251Medium 5.3FreeRDP before 3.32.0 Out-of-Bounds Write via MS-RDPEGT Video Geometry
Assigned by VulnCheck
Oct 12, 2026
CVE-2026-109252Medium 5.3FreeRDP from 3.9.0 before 3.32.0 RDPEAR NULL Pointer Dereference via KERB_RPC_INTERNAL_NAME
Assigned by VulnCheck
Oct 12, 2026
CVE-2026-109253Medium 5.3FreeRDP 3.9.0 before 3.32.0 RDPEAR NDR Scalar Out-of-Bounds Read
Assigned by VulnCheck
Oct 12, 2026
CVE-2026-109254Medium 5.9FreeRDP 2.1.0 before 3.32.0 Use-After-Free via rdpsnd Disconnect Path
Assigned by VulnCheck
Oct 12, 2026
CVE-2026-109255Medium 6.8FreeRDP 3.0.0 before 3.32.0 heap buffer overflow via license_check_stream_length
Assigned by VulnCheck
Oct 12, 2026
CVE-2026-109256Medium 5.3FreeRDP 3.10.0 through 3.32.2 Heap Buffer Overflow in WinPR PNG Conversion
Assigned by VulnCheck
Oct 12, 2026
CVE-2026-109257Medium 5.9FreeRDP before 3.32.0 Double Free via NSCodec plane growth failure
Assigned by VulnCheck
Oct 12, 2026
PreviousPage 3 of 4Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.