FreeRDP
- Total products in the ecosystem
- 1
- Total vulnerabilities (90 days)
- 136
en
A short verification protects source data and prevents automated AI requests.
Verifying...
As of 11/08/2026, FreeRDP recorded 136 security vulnerabilities in the last 90 days across 1 products, including 89 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, FreeRDP had the most security vulnerabilities in the FreeRDP ecosystem, with 136 vulnerabilities—approximately 100% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-111880FreeRDP 2.0.0 before 3.32.0 Heap Out-of-Bounds Write via NTLM MIC OffsetCVE-2026-111382FreeRDP before 3.32.0 Heap Out-of-Bounds Write in AVC444 YUV444 CombineCVE-2026-111381FreeRDP before 3.32.0 Heap Buffer Overflow via Persistent Cache v2 ParserCVE-2026-111380FreeRDP 3.29.0 before 3.32.0 Heap Overflow via audin Apple BackendsCVE-2026-111379FreeRDP before 3.32.0 Heap Buffer Overflow via persistent_cache_read_entry_v3| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-111880FreeRDP 2.0.0 before 3.32.0 Heap Out-of-Bounds Write via NTLM MIC Offset | Exploitation statusNot exploited | FixYes |
| Published10/17/2026 |
| SeverityHigh |
CVE-2026-111382FreeRDP before 3.32.0 Heap Out-of-Bounds Write in AVC444 YUV444 Combine | Exploitation statusNot exploited | FixYes | Affected productFreeRDP | Published10/16/2026 | SeverityHigh |
|---|
CVE-2026-111381FreeRDP before 3.32.0 Heap Buffer Overflow via Persistent Cache v2 Parser | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published10/16/2026 | SeverityHigh |
|---|
CVE-2026-111380FreeRDP 3.29.0 before 3.32.0 Heap Overflow via audin Apple Backends | Exploitation statusNot confirmed | FixYes | Affected productFreeRDP | Published10/16/2026 | SeverityHigh |
|---|
CVE-2026-111379FreeRDP before 3.32.0 Heap Buffer Overflow via persistent_cache_read_entry_v3 | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published10/16/2026 | SeverityHigh |
|---|
CVE-2026-111378FreeRDP 3.0.0 before 3.32.0 Unauthenticated Memory Exhaustion via NLA Frame Parser | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published10/16/2026 | SeverityHigh |
|---|
CVE-2026-111377FreeRDP 2.0.0 before 3.32.0 Memory Exhaustion via Static Channel Reassembly | Exploitation statusNot exploited | FixYes | Affected productFreeRDP | Published10/16/2026 | SeverityHigh |
|---|
CVE-2026-111376FreeRDP 3.30.0 before 3.32.0 Heap Over-Read via Windows cliprdr FILECONTENTS_SIZE | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published10/16/2026 | SeverityLow |
|---|
CVE-2026-111375FreeRDP 3.0.0 before 3.32.0 Out-of-Bounds Read via RAIL Window Title | Exploitation statusNot confirmed | FixYes | Affected productFreeRDP | Published10/16/2026 | SeverityMedium |
|---|
CVE-2026-111374FreeRDP from 3.30.0 before 3.32.0 Resource Exhaustion via rdpecam StartStreamsRequest | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published10/16/2026 | SeverityMedium |
|---|
CVE-2026-111373FreeRDP before 3.32.0 NULL Dereference via Zero-Length WebSocket Ping | Exploitation statusNot exploited | FixYes | Affected productFreeRDP | Published10/16/2026 | SeverityMedium |
|---|
CVE-2026-110839FreeRDP 3.3.0 before 3.32.0 Heap Out-of-Bounds Write via Grayscale JPEG Clipboard Data | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published10/14/2026 | SeverityHigh |
|---|
CVE-2026-110838FreeRDP shadow before 3.32.0 Pre-Authentication Input Injection via Confirm Active bypass | Exploitation statusNot confirmed | FixYes | Affected productFreeRDP | Published10/14/2026 | SeverityHigh |
|---|
CVE-2026-110837FreeRDP 2.0.0 before 3.32.0 Heap Buffer Overflow via MP3 Audio Decoding | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published10/14/2026 | SeverityMedium |
|---|
CVE-2026-110836FreeRDP 3.0.0 before 3.32.0 Infinite Loop DoS via Gateway Content-Type | Exploitation statusNot confirmed | FixYes | Affected productFreeRDP | Published10/14/2026 | SeverityHigh |
|---|
CVE-2026-110835FreeRDP 3.0.0 before 3.32.0 HTTP Header Injection via Proxy Routing Token | Exploitation statusNot confirmed | FixYes | Affected productFreeRDP | Published10/14/2026 | SeverityMedium |
|---|
CVE-2026-110834FreeRDP 2.0.0 before 3.32.0 Denial of Service via Serial IRP Null Handle | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published10/14/2026 | SeverityHigh |
|---|
CVE-2026-110833FreeRDP before 3.32.0 Unbounded Memory Retention via RDPDR Proxy | Exploitation statusNot confirmed | FixYes | Affected productFreeRDP | Published10/14/2026 | SeverityHigh |
|---|
CVE-2026-110832FreeRDP 2.0.0 before 3.32.0 Memory Exhaustion via DRDYNVC DATA_FIRST | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published10/14/2026 | SeverityHigh |
|---|
CVE-2026-110831FreeRDP 3.13.0 before 3.32.0 Resource Leak via Drive Redirection IRP_MJ_CREATE | Exploitation statusNot confirmed | FixYes | Affected productFreeRDP | Published10/14/2026 | SeverityMedium |
|---|
CVE-2026-110830FreeRDP before 3.32.0 Denial of Service via Serial IRP_MJ_CREATE | Exploitation statusNot confirmed | FixYes | Affected productFreeRDP | Published10/14/2026 | SeverityHigh |
|---|
CVE-2026-110829FreeRDP 3.0.0 before 3.32.0 Null Pointer Dereference via rdpsnd Fragment | Exploitation statusNot confirmed | FixYes | Affected productFreeRDP | Published10/14/2026 | SeverityHigh |
|---|
CVE-2026-109953FreeRDP 3.0.0 before 3.32.0 Cleartext Credential Disclosure via /restricted-admin | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published10/13/2026 | SeverityMedium |
|---|
CVE-2026-109952FreeRDP 3.0.0 before 3.32.0 Security Protocol Downgrade via Negotiation Response | Exploitation statusNot confirmed | FixYes | Affected productFreeRDP | Published10/13/2026 | SeverityMedium |
|---|
CVE-2026-109951FreeRDP 3.17.1 before 3.32.0 Heap Buffer Over-Read via Proxy DRDYNVC Channel Name | Exploitation statusNot confirmed | FixYes | Affected productFreeRDP | Published10/13/2026 | SeverityMedium |
|---|
CVE-2026-109950FreeRDP 3.0.0 before 3.32.0 Heap Out-of-Bounds Read via RD Gateway Messages | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published10/13/2026 | SeverityMedium |
|---|
CVE-2026-109949FreeRDP 3.0.0 before 3.32.0 PIN Brute-Force via Virtual Smartcard | Exploitation statusNot exploited | FixYes | Affected productFreeRDP | Published10/13/2026 | SeverityHigh |
|---|
CVE-2026-109948FreeRDP 3.0.0 before 3.32.0 Memory Disclosure via SCardTransmit Smartcard Redirection | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published10/13/2026 | SeverityMedium |
|---|
CVE-2026-109947FreeRDP 3.20.1 before 3.32.0 Unbounded Allocation via drive_process_irp_read | Exploitation statusNot confirmed | FixYes | Affected productFreeRDP | Published10/13/2026 | SeverityHigh |
|---|
CVE-2026-109946FreeRDP 3.11.0 before 3.32.0 Reachable Assertion via AVC444 Odd Region Width | Exploitation statusNot confirmed | FixYes | Affected productFreeRDP | Published10/13/2026 | SeverityHigh |
|---|
CVE-2026-109945FreeRDP 3.0.0 before 3.32.0 Smartcard Use-After-Free via Concurrent Disconnect and Transmit | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published10/13/2026 | SeverityMedium |
|---|
CVE-2026-109944FreeRDP 3.0.0 before 3.32.0 Reachable Assertion via Stale Smartcard Handle | Exploitation statusNot exploited | FixYes | Affected productFreeRDP | Published10/13/2026 | SeverityHigh |
|---|
CVE-2026-109943FreeRDP 3.29.0 before 3.32.0 Double Free via Async-Update Polygon Order | Exploitation statusNot confirmed | FixYes | Affected productFreeRDP | Published10/13/2026 | SeverityHigh |
|---|
CVE-2026-109942FreeRDP 2.3.0 before 3.32.0 NULL Pointer Dereference via RD Gateway Close Channel Packet | Exploitation statusNot confirmed | FixYes | Affected productFreeRDP | Published10/13/2026 | SeverityHigh |
|---|
CVE-2026-109941FreeRDP 2.3.0 before 3.32.0 Infinite Loop via RD Gateway Chunked Response | Exploitation statusNot confirmed | FixYes | Affected productFreeRDP | Published10/13/2026 | SeverityHigh |
|---|
CVE-2026-109940FreeRDP 3.0.0-beta1 before 3.32.0 Stack Buffer Overflow via PKCS#11 Key Name | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published10/13/2026 | SeverityMedium |
|---|
CVE-2026-109939FreeRDP 3.27.1 before 3.32.0 NULL Pointer Dereference via Cache Bitmap V3 Order | Exploitation statusNot confirmed | FixYes | Affected productFreeRDP | Published10/13/2026 | SeverityHigh |
|---|
CVE-2026-109938FreeRDP 3.11.0 before 3.32.0 Integer Overflow via Mapped Video Geometry Update | Exploitation statusNot confirmed | FixYes | Affected productFreeRDP | Published10/13/2026 | SeverityHigh |
|---|
CVE-2026-109680FreeRDP 3.18.0 before 3.32.0 Heap Out-of-Bounds Write via ARM Redirected Username | Exploitation statusNot confirmed | FixYes | Affected productFreeRDP | Published10/13/2026 | SeverityMedium |
|---|
CVE-2026-109679FreeRDP 3.0.0-beta4 before 3.32.0 NULL Pointer Crash via ARM Response | Exploitation statusNot confirmed | FixYes | Affected productFreeRDP | Published10/13/2026 | SeverityMedium |
|---|
CVE-2026-109678FreeRDP 3.0.0-beta1 before 3.32.0 Reachable Assertion via Emulated SCardStatusA | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published10/13/2026 | SeverityHigh |
|---|
CVE-2026-109677FreeRDP 2.0.0-beta1 before 3.28.0 Out-of-Bounds Read via LocateCardsByATRA Handler | Exploitation statusNot confirmed | FixYes | Affected productFreeRDP | Published10/13/2026 | SeverityHigh |
|---|
CVE-2026-109676FreeRDP 3.0.0-beta1 before 3.32.0 Use-After-Free via Smartcard Connect | Exploitation statusNot confirmed | FixYes | Affected productFreeRDP | Published10/13/2026 | SeverityHigh |
|---|
CVE-2026-109257FreeRDP before 3.32.0 Double Free via NSCodec plane growth failure | Exploitation statusNot confirmed | FixYes | Affected productFreeRDP | Published10/12/2026 | SeverityHigh |
|---|
CVE-2026-109256FreeRDP 3.10.0 through 3.32.2 Heap Buffer Overflow in WinPR PNG Conversion | Exploitation statusNot confirmed | FixYes | Affected productFreeRDP | Published10/12/2026 | SeverityMedium |
|---|
CVE-2026-109255FreeRDP 3.0.0 before 3.32.0 heap buffer overflow via license_check_stream_length | Exploitation statusNot confirmed | FixYes | Affected productFreeRDP | Published10/12/2026 | SeverityMedium |
|---|
CVE-2026-109254FreeRDP 2.1.0 before 3.32.0 Use-After-Free via rdpsnd Disconnect Path | Exploitation statusNot confirmed | FixYes | Affected productFreeRDP | Published10/12/2026 | SeverityMedium |
|---|
CVE-2026-109253FreeRDP 3.9.0 before 3.32.0 RDPEAR NDR Scalar Out-of-Bounds Read | Exploitation statusNot confirmed | FixYes | Affected productFreeRDP | Published10/12/2026 | SeverityMedium |
|---|
CVE-2026-109252FreeRDP from 3.9.0 before 3.32.0 RDPEAR NULL Pointer Dereference via KERB_RPC_INTERNAL_NAME | Exploitation statusNot confirmed | FixYes | Affected productFreeRDP | Published10/12/2026 | SeverityMedium |
|---|
CVE-2026-109251FreeRDP before 3.32.0 Out-of-Bounds Write via MS-RDPEGT Video Geometry | Exploitation statusNot confirmed | FixYes | Affected productFreeRDP | Published10/12/2026 | SeverityMedium |
|---|
200 Results | Page 2 of 4