FreeRDP
- Total products in the ecosystem
- 1
- Total vulnerabilities (90 days)
- 136
en
A short verification protects source data and prevents automated AI requests.
Verifying...
As of 11/08/2026, FreeRDP recorded 136 security vulnerabilities in the last 90 days across 1 products, including 89 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, FreeRDP had the most security vulnerabilities in the FreeRDP ecosystem, with 136 vulnerabilities—approximately 100% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-121964FreeRDP before 3.32.2 Heap Buffer Overflow via rpc_client_recv_fragmentCVE-2026-121963FreeRDP before 3.32.2 Use-After-Free via Dynamic rdpsnd Channel CloseCVE-2026-121962FreeRDP before 3.32.2 Heap Buffer Overflow via Early User Authorization ReadCVE-2026-121961FreeRDP before 3.32.2 Use-After-Free via DRDYNVC Tracker RaceCVE-2026-121960FreeRDP before 3.32.2 Unauthenticated Denial of Service via CredSSP TSRequest| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-121964FreeRDP before 3.32.2 Heap Buffer Overflow via rpc_client_recv_fragment | Exploitation statusActively exploited | FixYes |
| Published11/04/2026 |
| SeverityHigh |
CVE-2026-121963FreeRDP before 3.32.2 Use-After-Free via Dynamic rdpsnd Channel Close | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published11/04/2026 | SeverityHigh |
|---|
CVE-2026-121962FreeRDP before 3.32.2 Heap Buffer Overflow via Early User Authorization Read | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published11/04/2026 | SeverityHigh |
|---|
CVE-2026-121961FreeRDP before 3.32.2 Use-After-Free via DRDYNVC Tracker Race | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published11/04/2026 | SeverityHigh |
|---|
CVE-2026-121960FreeRDP before 3.32.2 Unauthenticated Denial of Service via CredSSP TSRequest | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published11/04/2026 | SeverityHigh |
|---|
CVE-2026-121959FreeRDP before 3.32.2 Infinite Loop via Truncated WebSocket Frame | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published11/04/2026 | SeverityHigh |
|---|
CVE-2026-121958FreeRDP through 3.32.1 Heap Out-of-Bounds Write via RDPGFX HashTable_GetKeys | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published11/04/2026 | SeverityHigh |
|---|
CVE-2026-121957FreeRDP before 3.32.2 Use-After-Free via RDPGFX ResetGraphics Race | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published11/04/2026 | SeverityHigh |
|---|
CVE-2026-121956FreeRDP before 3.32.2 Double Free in WinPR Kerberos retrieveSomeTgt | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published11/04/2026 | SeverityHigh |
|---|
CVE-2026-121955FreeRDP before 3.32.2 Use-After-Free in Smartcard Emulation ReleaseContext | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published11/04/2026 | SeverityHigh |
|---|
CVE-2026-121954FreeRDP before 3.32.2 Heap Out-of-Bounds Write in Planar Codec | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published11/04/2026 | SeverityHigh |
|---|
CVE-2026-121953FreeRDP before 3.32.2 Use-After-Free via rdpgfx Dynamic Virtual Channel Close | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published11/04/2026 | SeverityCritical |
|---|
CVE-2026-121952FreeRDP before 3.32.2 Proxy Out-of-Bounds Write via Bitmap Cache v2 Capability | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published11/04/2026 | SeverityCritical |
|---|
CVE-2026-121951FreeRDP 3.0.0 before 3.32.2 Denial of Service via Slow-Path Input Event | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published11/04/2026 | SeverityHigh |
|---|
CVE-2026-121950FreeRDP before 3.32.2 Heap Overflow via RDPGFX CREATE_SURFACE Integer Wrap | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published11/04/2026 | SeverityHigh |
|---|
CVE-2026-121412FreeRDP 3.0.0 before 3.32.2 Proxy Memory Exhaustion via DVC Reassembly | Exploitation statusNot exploited | FixYes | Affected productFreeRDP | Published11/03/2026 | SeverityHigh |
|---|
CVE-2026-121411FreeRDP before 3.32.2 X11 Client Abort via RDPGFX Scaled Output Geometry | Exploitation statusNot confirmed | FixYes | Affected productFreeRDP | Published11/03/2026 | SeverityLow |
|---|
CVE-2026-121410FreeRDP before 3.32.2 Denial of Service via RDPGFX ALPHA WIRETOSURFACE_2 | Exploitation statusNot confirmed | FixYes | Affected productFreeRDP | Published11/03/2026 | SeverityMedium |
|---|
CVE-2026-121409FreeRDP before 3.32.2 Denial of Service via Oversized X.224 Routing Token | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published11/03/2026 | SeverityHigh |
|---|
CVE-2026-121408FreeRDP before 3.32.2 Use-After-Free via USB Redirection Control Channel | Exploitation statusNot exploited | FixYes | Affected productFreeRDP | Published11/03/2026 | SeverityMedium |
|---|
CVE-2026-121407FreeRDP before 3.32.2 Shadow Server Denial of Service via remdesk Channel | Exploitation statusNot confirmed | FixYes | Affected productFreeRDP | Published11/03/2026 | SeverityHigh |
|---|
CVE-2026-121406FreeRDP before 3.32.2 Client Denial of Service via Zero-Output ZGFX Payload | Exploitation statusNot confirmed | FixYes | Affected productFreeRDP | Published11/03/2026 | SeverityMedium |
|---|
CVE-2026-121405FreeRDP before 3.32.2 Memory Exhaustion via Serial RDPDR Device Control | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published11/03/2026 | SeverityMedium |
|---|
CVE-2026-121404FreeRDP before 3.32.2 Shadow Server CPU Exhaustion via Zero-Length DVC DATA | Exploitation statusNot exploited | FixYes | Affected productFreeRDP | Published11/03/2026 | SeverityHigh |
|---|
CVE-2026-121403FreeRDP before 3.32.2 Denial of Service via Malformed Drive IRP | Exploitation statusNot confirmed | FixYes | Affected productFreeRDP | Published11/03/2026 | SeverityMedium |
|---|
CVE-2026-121402FreeRDP before 3.32.2 X11 Client Crash via Zero-Width RDPGFX ResetGraphics | Exploitation statusNot confirmed | FixYes | Affected productFreeRDP | Published11/03/2026 | SeverityHigh |
|---|
CVE-2026-121401FreeRDP before 3.32.2 Denial of Service via RD Gateway extended-auth packet | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published11/03/2026 | SeverityMedium |
|---|
CVE-2026-121400FreeRDP before 3.32.2 CPU Exhaustion via RDG Control Packet | Exploitation statusNot exploited | FixYes | Affected productFreeRDP | Published11/03/2026 | SeverityHigh |
|---|
CVE-2026-121399FreeRDP before 3.32.2 Memory Exhaustion via RD Gateway Packet Length | Exploitation statusNot confirmed | FixYes | Affected productFreeRDP | Published11/03/2026 | SeverityMedium |
|---|
CVE-2026-121398FreeRDP before 3.32.2 Use-After-Free via dyn-channel-dump Module | Exploitation statusNot confirmed | FixYes | Affected productFreeRDP | Published11/03/2026 | SeverityHigh |
|---|
CVE-2026-121397FreeRDP before 3.32.2 Heap Over-Read via WinPR save_png_to_buffer() | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published11/03/2026 | SeverityMedium |
|---|
CVE-2026-121396FreeRDP 3.0.0 before 3.32.2 denial of service via RTS padding assertion | Exploitation statusNot exploited | FixYes | Affected productFreeRDP | Published11/03/2026 | SeverityMedium |
|---|
CVE-2026-121395FreeRDP 3.17.0 before 3.32.2 Denial of Service via RemoteFX Decoder | Exploitation statusNot confirmed | FixYes | Affected productFreeRDP | Published11/03/2026 | SeverityHigh |
|---|
CVE-2026-121394FreeRDP before 3.32.2 Denial of Service via RemoteFX RLGR decoder | Exploitation statusNot confirmed | FixYes | Affected productFreeRDP | Published11/03/2026 | SeverityHigh |
|---|
CVE-2026-121393FreeRDP 3.0.0 before 3.32.2 Denial of Service via RemoteFX Region Assertion | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published11/03/2026 | SeverityHigh |
|---|
CVE-2026-121392FreeRDP before 3.32.2 Certificate Identity Validation Bypass via tls_verify_certificate | Exploitation statusNot exploited | FixYes | Affected productFreeRDP | Published11/03/2026 | SeverityCritical |
|---|
CVE-2026-121391FreeRDP before 3.32.2 File Descriptor Exhaustion via Parallel CREATE | Exploitation statusNot confirmed | FixYes | Affected productFreeRDP | Published11/03/2026 | SeverityMedium |
|---|
CVE-2026-121390FreeRDP before 3.32.2 Null Pointer Crash via ARM Gateway Response | Exploitation statusNot confirmed | FixYes | Affected productFreeRDP | Published11/03/2026 | SeverityMedium |
|---|
CVE-2026-121389FreeRDP 3.27.0 before 3.32.2 Client DoS via RDPDR Device Announcement Logging | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published11/03/2026 | SeverityLow |
|---|
CVE-2026-121388FreeRDP 3.0.0 before 3.32.2 Uncapped Memory Allocation via DRDYNVC DATA_FIRST | Exploitation statusNot exploited | FixYes | Affected productFreeRDP | Published11/03/2026 | SeverityHigh |
|---|
CVE-2026-121387FreeRDP 2.0.0 before 3.32.2 Out-of-Bounds Read via GSM610/WAV49 Decoder | Exploitation statusNot confirmed | FixYes | Affected productFreeRDP | Published11/03/2026 | SeverityMedium |
|---|
CVE-2026-121386FreeRDP before 3.32.2 Denial of Service via WinPR PNG/JPEG Image Readers | Exploitation statusNot confirmed | FixYes | Affected productFreeRDP | Published11/03/2026 | SeverityHigh |
|---|
CVE-2026-114047FreeRDP 2.0.0 before 3.32.0 Proxy Improper TLS Certificate Validation | Exploitation statusNot exploited | FixYes | Affected productFreeRDP | Published10/21/2026 | SeverityHigh |
|---|
CVE-2026-114046FreeRDP 3.0.0 before 3.32.0 null-pointer dereference via emulated smartcard | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published10/21/2026 | SeverityHigh |
|---|
CVE-2026-114045FreeRDP before 3.32.1 Heap Buffer Overflow via rdpsnd_server_select_format | Exploitation statusNot exploited | FixYes | Affected productFreeRDP | Published10/21/2026 | SeverityHigh |
|---|
CVE-2026-114044FreeRDP before 3.32.1 Android Client Heap OOB Read via Graphics Pipeline | Exploitation statusNot exploited | FixYes | Affected productFreeRDP | Published10/21/2026 | SeverityMedium |
|---|
CVE-2026-114043Vulnerability in FreeRDP | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published10/21/2026 | SeverityHigh |
|---|
CVE-2026-114042FreeRDP 3.32.0 Use-After-Free via drdynvc Virtual Channel PDU | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published10/21/2026 | SeverityHigh |
|---|
CVE-2026-114041FreeRDP before 3.32.1 Heap Out-of-Bounds Read via RD Gateway Consent Message | Exploitation statusNot exploited | FixYes | Affected productFreeRDP | Published10/21/2026 | SeverityMedium |
|---|
CVE-2026-111881FreeRDP 3.14.1 before 3.32.0 Integer Underflow in BMP Writer via Clipboard | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published10/17/2026 | SeverityHigh |
|---|
200 Results | Page 1 of 4