FreeRDP
- Total products in the ecosystem
- 1
- Total vulnerabilities (90 days)
- 136
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
A short verification protects source data and prevents automated AI requests.
Verifying...
As of 11/08/2026, FreeRDP recorded 136 security vulnerabilities in the last 90 days across 1 products, including 89 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, FreeRDP had the most security vulnerabilities in the FreeRDP ecosystem, with 136 vulnerabilities—approximately 100% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-109250FreeRDP 3.0.0 before 3.32.0 Heap Buffer Overflow via PKCS#11 collect_keys()CVE-2026-109249FreeRDP 3.0.0 before 3.32.0 Heap Out-of-Bounds Read via Remote Assistance File ParsingCVE-2026-109248FreeRDP 3.0.0 before 3.32.0 Heap Out-of-Bounds Read via WinPR Clipboard cFileNameCVE-2026-91964FreeRDP 2.0.0 through 3.30.0 Heap Buffer Overflow via RoutingTokenCVE-2026-91963FreeRDP 2.0.0 through 3.30.0 Uninitialized Heap Memory Disclosure via urbdrc| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-109250FreeRDP 3.0.0 before 3.32.0 Heap Buffer Overflow via PKCS#11 collect_keys() | Exploitation statusNot confirmed | FixYes |
| Published10/12/2026 |
| SeverityHigh |
CVE-2026-109249FreeRDP 3.0.0 before 3.32.0 Heap Out-of-Bounds Read via Remote Assistance File Parsing | Exploitation statusNot confirmed | FixYes | Affected productFreeRDP | Published10/12/2026 | SeverityMedium |
|---|
CVE-2026-109248FreeRDP 3.0.0 before 3.32.0 Heap Out-of-Bounds Read via WinPR Clipboard cFileName | Exploitation statusNot confirmed | FixYes | Affected productFreeRDP | Published10/12/2026 | SeverityMedium |
|---|
CVE-2026-91964FreeRDP 2.0.0 through 3.30.0 Heap Buffer Overflow via RoutingToken | Exploitation statusNot exploited | FixYes | Affected productFreeRDP | Published09/15/2026 | SeverityHigh |
|---|
CVE-2026-91963FreeRDP 2.0.0 through 3.30.0 Uninitialized Heap Memory Disclosure via urbdrc | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published09/15/2026 | SeverityHigh |
|---|
CVE-2026-91962FreeRDP before 3.31.0 Integer Overflow via audin Apple backends | Exploitation statusNot exploited | FixYes | Affected productFreeRDP | Published09/15/2026 | SeverityMedium |
|---|
CVE-2026-91961FreeRDP before 3.31.0 Denial of Service via URBDRC | Exploitation statusNot exploited | FixYes | Affected productFreeRDP | Published09/15/2026 | SeverityHigh |
|---|
CVE-2026-91960FreeRDP before 3.31.0 Integer Overflow Double Free | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published09/15/2026 | SeverityHigh |
|---|
CVE-2026-91959FreeRDP before 3.31.0 Buffer Over-read via RTS Gateway | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published09/15/2026 | SeverityHigh |
|---|
CVE-2026-91958FreeRDP 3.11.0 through 3.30.0 Heap Buffer Overflow via Monitor Index | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published09/15/2026 | SeverityMedium |
|---|
CVE-2026-91957FreeRDP before 3.31.0 Use-After-Free via smartcard worker | Exploitation statusNot exploited | FixYes | Affected productFreeRDP | Published09/15/2026 | SeverityLow |
|---|
CVE-2026-91956FreeRDP before 3.31.0 Out-of-Bounds Read via URBDRC | Exploitation statusNot exploited | FixYes | Affected productFreeRDP | Published09/15/2026 | SeverityHigh |
|---|
CVE-2026-91955FreeRDP before 3.31.0 Denial of Service via Desktop Dimensions | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published09/15/2026 | SeverityHigh |
|---|
CVE-2026-91954FreeRDP before 3.31.0 NULL Pointer Dereference via NSCodec | Exploitation statusNot exploited | FixYes | Affected productFreeRDP | Published09/15/2026 | SeverityHigh |
|---|
CVE-2026-91953FreeRDP before 3.31.0 Heap Buffer Overflow via LB_LOAD_BALANCE_INFO | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published09/15/2026 | SeverityHigh |
|---|
CVE-2026-91952FreeRDP before 3.31.0 Denial of Service via pool_decode_rect | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published09/15/2026 | SeverityHigh |
|---|
CVE-2026-91951FreeRDP 3.14.0 through 3.30.0 Out-of-bounds Write via urbdrc | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published09/15/2026 | SeverityHigh |
|---|
CVE-2026-91950FreeRDP before 3.31.0 Out-of-Bounds Read via UINT32 Wraparound | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published09/15/2026 | SeverityHigh |
|---|
CVE-2026-91949FreeRDP 3.0.0 through 3.30.0 Protocol Negotiation Bypass | Exploitation statusNot exploited | FixYes | Affected productFreeRDP | Published09/15/2026 | SeverityCritical |
|---|
CVE-2026-91948FreeRDP before 3.31.0 Out-of-bounds Write via SHOW_PROTOCOL | Exploitation statusNot exploited | FixYes | Affected productFreeRDP | Published09/15/2026 | SeverityHigh |
|---|
CVE-2026-91947FreeRDP Server before 3.31.0 Use-After-Free via DRDYNVC | Exploitation statusNot exploited | FixYes | Affected productFreeRDP | Published09/15/2026 | SeverityHigh |
|---|
CVE-2026-91946FreeRDP before 3.31.0 Information Disclosure via RDPGFX ResetGraphics | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published09/15/2026 | SeverityHigh |
|---|
CVE-2026-91945FreeRDP before 3.31.0 Out-of-bounds Read via Smartcard ATR | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published09/15/2026 | SeverityHigh |
|---|
CVE-2026-85090FreeRDP before 3.31.0 Heap Out-of-Bounds Read via AVC444 | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published09/03/2026 | SeverityMedium |
|---|
CVE-2026-85089FreeRDP before 3.31.0 Information Disclosure via uninitialized heap memory | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published09/03/2026 | SeverityHigh |
|---|
CVE-2026-63652FreeRDP: Double-free of `client_formats` in the rdpsnd server channel on a malformed Client Audio Formats PDU | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published08/19/2026 | SeverityHigh |
|---|
CVE-2026-63633FreeRDP: Heap buffer overflow in Opus audio decode (`freerdp_dsp_decode_opus` resizes the wrong stream) — server→client | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published08/19/2026 | SeverityHigh |
|---|
CVE-2026-63117FreeRDP: Denial of service through ADPCM frame size calculation | Exploitation statusNot exploited | FixYes | Affected productFreeRDP | Published08/19/2026 | SeverityMedium |
|---|
CVE-2026-55648FreeRDP: Integer Overflow in `freerdp_image_copy_from_icon_data` Bypasses Bounds Check | Exploitation statusNot exploited | FixYes | Affected productFreeRDP | Published08/19/2026 | SeverityMedium |
|---|
CVE-2026-55564FreeRDP: Out-of-bounds read in glyph_cache_get via crafted glyph fragments | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published08/19/2026 | SeverityMedium |
|---|
CVE-2026-55194FreeRDPHeap-buffer-overflow write in TS Gateway RPC RESPONSE reassembly due to alloc_hint capacity mismatch | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published08/19/2026 | SeverityHigh |
|---|
CVE-2026-55193FreeRDP: Heap-buffer-overflow write in TS Gateway RPC fragment receive due to uncapped bind_ack max_xmit_frag | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published08/19/2026 | SeverityHigh |
|---|
CVE-2026-55192FreeRDP: Out-of-bounds read in H.264 YUV-to-RGB conversion due to decoder/surface dimension mismatch | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published08/19/2026 | SeverityHigh |
|---|
CVE-2026-55191FreeRDP: Heap-buffer-overflow write in AVC444 YUV buffer allocation | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published08/19/2026 | SeverityHigh |
|---|
CVE-2026-73242FreeRDP: Kerberos GSS Wrap-token `EC` field is unbounded, causing an out-of-bounds decrypt in `kerberos_DecryptMessage` | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published08/11/2026 | SeverityHigh |
|---|
CVE-2026-73241FreeRDP: RDSTLS server authentication bypass: a credential-less Capabilities PDU is accepted at the auth step (fail-open `resultCode`) | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published08/11/2026 | SeverityHigh |
|---|
CVE-2026-68580FreeRDP before 3.29.0 Integer Overflow via Audio Input Channel | Exploitation statusNot exploited | FixYes | Affected productFreeRDP | Published08/02/2026 | SeverityHigh |
|---|
CVE-2026-68579FreeRDP before 3.30.0 Heap Overflow via CliprdrStream_Read | Exploitation statusNot exploited | FixYes | Affected productFreeRDP | Published08/02/2026 | SeverityHigh |
|---|
CVE-2026-67306FreeRDP before 3.29.0 Out-of-Bounds Read via Planar RLE | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published08/01/2026 | SeverityMedium |
|---|
CVE-2026-67305FreeRDP Windows Client before 3.29.0 Heap Buffer Overflow via Cliprdr | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published08/01/2026 | SeverityCritical |
|---|
CVE-2026-67304FreeRDP before 3.29.0 NULL Dereference via smartcard cleanup | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published08/01/2026 | SeverityHigh |
|---|
CVE-2026-67303FreeRDP before 3.29.0 Denial of Service via serial DeviceControl | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published08/01/2026 | SeverityMedium |
|---|
CVE-2026-67302FreeRDP rdpecam StartStreamsRequest divide-by-zero denial of service | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published08/01/2026 | SeverityMedium |
|---|
CVE-2026-67301FreeRDP before 3.29.0 Out-of-bounds Read via Polygon async message-proxy | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published08/01/2026 | SeverityHigh |
|---|
CVE-2026-67300FreeRDP before 3.29.0 Use-After-Free via async message proxy | Exploitation statusNot exploited | FixYes | Affected productFreeRDP | Published08/01/2026 | SeverityHigh |
|---|
CVE-2026-67299FreeRDP before 3.29.0 Use-After-Free via WindowIcon async message | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published08/01/2026 | SeverityHigh |
|---|
CVE-2026-67298FreeRDP 3.28.0 Heap Buffer Overflow via RAIL orderLength Underflow | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published08/01/2026 | SeverityHigh |
|---|
CVE-2026-67297FreeRDP before 3.29.0 Resource Exhaustion via chunked HTTP response | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published08/01/2026 | SeverityHigh |
|---|
CVE-2026-67296FreeRDP before 3.29.0 Denial of Service via RDPEI PDU | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published08/01/2026 | SeverityHigh |
|---|
CVE-2026-67295FreeRDP before 3.29.0 Path Traversal via drive redirection | Exploitation statusNot exploited | FixYes | Affected productFreeRDP | Published08/01/2026 | SeverityMedium |
|---|
200 Results | Page 3 of 4