- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
A short verification protects source data and prevents automated AI requests.
Verifying...
As of 11/08/2026, FreeRDP recorded 136 security vulnerabilities in the last 90 days, of which 89 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of FreeRDP and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-121964FreeRDP before 3.32.2 Heap Buffer Overflow via rpc_client_recv_fragmentCVE-2026-121963FreeRDP before 3.32.2 Use-After-Free via Dynamic rdpsnd Channel CloseCVE-2026-121962FreeRDP before 3.32.2 Heap Buffer Overflow via Early User Authorization ReadCVE-2026-121961FreeRDP before 3.32.2 Use-After-Free via DRDYNVC Tracker RaceCVE-2026-121960FreeRDP before 3.32.2 Unauthenticated Denial of Service via CredSSP TSRequest| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-121964FreeRDP before 3.32.2 Heap Buffer Overflow via rpc_client_recv_fragment | Exploitation statusActively exploited | FixYes |
| SeverityHigh |
CVE-2026-121963FreeRDP before 3.32.2 Use-After-Free via Dynamic rdpsnd Channel Close | Exploitation statusActively exploited | FixYes | Published11/04/2026 | SeverityHigh |
|---|
CVE-2026-121962FreeRDP before 3.32.2 Heap Buffer Overflow via Early User Authorization Read | Exploitation statusActively exploited | FixYes | Published11/04/2026 | SeverityHigh |
|---|
CVE-2026-121961FreeRDP before 3.32.2 Use-After-Free via DRDYNVC Tracker Race | Exploitation statusActively exploited | FixYes | Published11/04/2026 | SeverityHigh |
|---|
CVE-2026-121960FreeRDP before 3.32.2 Unauthenticated Denial of Service via CredSSP TSRequest | Exploitation statusActively exploited | FixYes | Published11/04/2026 | SeverityHigh |
|---|
CVE-2026-121959FreeRDP before 3.32.2 Infinite Loop via Truncated WebSocket Frame | Exploitation statusActively exploited | FixYes | Published11/04/2026 | SeverityHigh |
|---|
CVE-2026-121958FreeRDP through 3.32.1 Heap Out-of-Bounds Write via RDPGFX HashTable_GetKeys | Exploitation statusActively exploited | FixYes | Published11/04/2026 | SeverityHigh |
|---|
CVE-2026-121957FreeRDP before 3.32.2 Use-After-Free via RDPGFX ResetGraphics Race | Exploitation statusActively exploited | FixYes | Published11/04/2026 | SeverityHigh |
|---|
CVE-2026-121956FreeRDP before 3.32.2 Double Free in WinPR Kerberos retrieveSomeTgt | Exploitation statusActively exploited | FixYes | Published11/04/2026 | SeverityHigh |
|---|
CVE-2026-121955FreeRDP before 3.32.2 Use-After-Free in Smartcard Emulation ReleaseContext | Exploitation statusActively exploited | FixYes | Published11/04/2026 | SeverityHigh |
|---|
CVE-2026-121954FreeRDP before 3.32.2 Heap Out-of-Bounds Write in Planar Codec | Exploitation statusActively exploited | FixYes | Published11/04/2026 | SeverityHigh |
|---|
CVE-2026-121953FreeRDP before 3.32.2 Use-After-Free via rdpgfx Dynamic Virtual Channel Close | Exploitation statusActively exploited | FixYes | Published11/04/2026 | SeverityCritical |
|---|
CVE-2026-121952FreeRDP before 3.32.2 Proxy Out-of-Bounds Write via Bitmap Cache v2 Capability | Exploitation statusActively exploited | FixYes | Published11/04/2026 | SeverityCritical |
|---|
CVE-2026-121951FreeRDP 3.0.0 before 3.32.2 Denial of Service via Slow-Path Input Event | Exploitation statusActively exploited | FixYes | Published11/04/2026 | SeverityHigh |
|---|
CVE-2026-121950FreeRDP before 3.32.2 Heap Overflow via RDPGFX CREATE_SURFACE Integer Wrap | Exploitation statusActively exploited | FixYes | Published11/04/2026 | SeverityHigh |
|---|
CVE-2026-121412FreeRDP 3.0.0 before 3.32.2 Proxy Memory Exhaustion via DVC Reassembly | Exploitation statusNot exploited | FixYes | Published11/03/2026 | SeverityHigh |
|---|
CVE-2026-121411FreeRDP before 3.32.2 X11 Client Abort via RDPGFX Scaled Output Geometry | Exploitation statusNot confirmed | FixYes | Published11/03/2026 | SeverityLow |
|---|
CVE-2026-121410FreeRDP before 3.32.2 Denial of Service via RDPGFX ALPHA WIRETOSURFACE_2 | Exploitation statusNot confirmed | FixYes | Published11/03/2026 | SeverityMedium |
|---|
CVE-2026-121409FreeRDP before 3.32.2 Denial of Service via Oversized X.224 Routing Token | Exploitation statusActively exploited | FixYes | Published11/03/2026 | SeverityHigh |
|---|
CVE-2026-121408FreeRDP before 3.32.2 Use-After-Free via USB Redirection Control Channel | Exploitation statusNot exploited | FixYes | Published11/03/2026 | SeverityMedium |
|---|
CVE-2026-121407FreeRDP before 3.32.2 Shadow Server Denial of Service via remdesk Channel | Exploitation statusNot confirmed | FixYes | Published11/03/2026 | SeverityHigh |
|---|
CVE-2026-121406FreeRDP before 3.32.2 Client Denial of Service via Zero-Output ZGFX Payload | Exploitation statusNot confirmed | FixYes | Published11/03/2026 | SeverityMedium |
|---|
CVE-2026-121405FreeRDP before 3.32.2 Memory Exhaustion via Serial RDPDR Device Control | Exploitation statusActively exploited | FixYes | Published11/03/2026 | SeverityMedium |
|---|
CVE-2026-121404FreeRDP before 3.32.2 Shadow Server CPU Exhaustion via Zero-Length DVC DATA | Exploitation statusNot exploited | FixYes | Published11/03/2026 | SeverityHigh |
|---|
CVE-2026-121403FreeRDP before 3.32.2 Denial of Service via Malformed Drive IRP | Exploitation statusNot confirmed | FixYes | Published11/03/2026 | SeverityMedium |
|---|
CVE-2026-121402FreeRDP before 3.32.2 X11 Client Crash via Zero-Width RDPGFX ResetGraphics | Exploitation statusNot confirmed | FixYes | Published11/03/2026 | SeverityHigh |
|---|
CVE-2026-121401FreeRDP before 3.32.2 Denial of Service via RD Gateway extended-auth packet | Exploitation statusActively exploited | FixYes | Published11/03/2026 | SeverityMedium |
|---|
CVE-2026-121400FreeRDP before 3.32.2 CPU Exhaustion via RDG Control Packet | Exploitation statusNot exploited | FixYes | Published11/03/2026 | SeverityHigh |
|---|
CVE-2026-121399FreeRDP before 3.32.2 Memory Exhaustion via RD Gateway Packet Length | Exploitation statusNot confirmed | FixYes | Published11/03/2026 | SeverityMedium |
|---|
CVE-2026-121398FreeRDP before 3.32.2 Use-After-Free via dyn-channel-dump Module | Exploitation statusNot confirmed | FixYes | Published11/03/2026 | SeverityHigh |
|---|
CVE-2026-121397FreeRDP before 3.32.2 Heap Over-Read via WinPR save_png_to_buffer() | Exploitation statusActively exploited | FixYes | Published11/03/2026 | SeverityMedium |
|---|
CVE-2026-121396FreeRDP 3.0.0 before 3.32.2 denial of service via RTS padding assertion | Exploitation statusNot exploited | FixYes | Published11/03/2026 | SeverityMedium |
|---|
CVE-2026-121395FreeRDP 3.17.0 before 3.32.2 Denial of Service via RemoteFX Decoder | Exploitation statusNot confirmed | FixYes | Published11/03/2026 | SeverityHigh |
|---|
CVE-2026-121394FreeRDP before 3.32.2 Denial of Service via RemoteFX RLGR decoder | Exploitation statusNot confirmed | FixYes | Published11/03/2026 | SeverityHigh |
|---|
CVE-2026-121393FreeRDP 3.0.0 before 3.32.2 Denial of Service via RemoteFX Region Assertion | Exploitation statusActively exploited | FixYes | Published11/03/2026 | SeverityHigh |
|---|
CVE-2026-121392FreeRDP before 3.32.2 Certificate Identity Validation Bypass via tls_verify_certificate | Exploitation statusNot exploited | FixYes | Published11/03/2026 | SeverityCritical |
|---|
CVE-2026-121391FreeRDP before 3.32.2 File Descriptor Exhaustion via Parallel CREATE | Exploitation statusNot confirmed | FixYes | Published11/03/2026 | SeverityMedium |
|---|
CVE-2026-121390FreeRDP before 3.32.2 Null Pointer Crash via ARM Gateway Response | Exploitation statusNot confirmed | FixYes | Published11/03/2026 | SeverityMedium |
|---|
CVE-2026-121389FreeRDP 3.27.0 before 3.32.2 Client DoS via RDPDR Device Announcement Logging | Exploitation statusActively exploited | FixYes | Published11/03/2026 | SeverityLow |
|---|
CVE-2026-121388FreeRDP 3.0.0 before 3.32.2 Uncapped Memory Allocation via DRDYNVC DATA_FIRST | Exploitation statusNot exploited | FixYes | Published11/03/2026 | SeverityHigh |
|---|
CVE-2026-121387FreeRDP 2.0.0 before 3.32.2 Out-of-Bounds Read via GSM610/WAV49 Decoder | Exploitation statusNot confirmed | FixYes | Published11/03/2026 | SeverityMedium |
|---|
CVE-2026-121386FreeRDP before 3.32.2 Denial of Service via WinPR PNG/JPEG Image Readers | Exploitation statusNot confirmed | FixYes | Published11/03/2026 | SeverityHigh |
|---|
CVE-2026-114047FreeRDP 2.0.0 before 3.32.0 Proxy Improper TLS Certificate Validation | Exploitation statusNot exploited | FixYes | Published10/21/2026 | SeverityHigh |
|---|
CVE-2026-114046FreeRDP 3.0.0 before 3.32.0 null-pointer dereference via emulated smartcard | Exploitation statusActively exploited | FixYes | Published10/21/2026 | SeverityHigh |
|---|
CVE-2026-114045FreeRDP before 3.32.1 Heap Buffer Overflow via rdpsnd_server_select_format | Exploitation statusNot exploited | FixYes | Published10/21/2026 | SeverityHigh |
|---|
CVE-2026-114044FreeRDP before 3.32.1 Android Client Heap OOB Read via Graphics Pipeline | Exploitation statusNot exploited | FixYes | Published10/21/2026 | SeverityMedium |
|---|
CVE-2026-114043Vulnerability in FreeRDP | Exploitation statusActively exploited | FixYes | Published10/21/2026 | SeverityHigh |
|---|
CVE-2026-114042FreeRDP 3.32.0 Use-After-Free via drdynvc Virtual Channel PDU | Exploitation statusActively exploited | FixYes | Published10/21/2026 | SeverityHigh |
|---|
CVE-2026-114041FreeRDP before 3.32.1 Heap Out-of-Bounds Read via RD Gateway Consent Message | Exploitation statusNot exploited | FixYes | Published10/21/2026 | SeverityMedium |
|---|
CVE-2026-111881FreeRDP 3.14.1 before 3.32.0 Integer Underflow in BMP Writer via Clipboard | Exploitation statusActively exploited | FixYes | Published10/17/2026 | SeverityHigh |
|---|
200 Results | Page 1 of 4