FreeRDP
- Total products in the ecosystem
- 1
- Total vulnerabilities (90 days)
- 136
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
A short verification protects source data and prevents automated AI requests.
Verifying...
As of 11/08/2026, FreeRDP recorded 136 security vulnerabilities in the last 90 days across 1 products, including 89 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, FreeRDP had the most security vulnerabilities in the FreeRDP ecosystem, with 136 vulnerabilities—approximately 100% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-67294FreeRDP before 3.29.0 TLS Certificate EKU BypassCVE-2026-67293FreeRDP before 3.29.0 Improper Certificate Hostname ValidationCVE-2026-67292FreeRDP before 3.29.0 WebSocket Ping Buffer Over-disclosureCVE-2026-67291FreeRDP before 3.29.0 Heap Out-of-Bounds Read via GLYPH_FRAGMENT_ADDCVE-2026-67290FreeRDP before 3.29.0 Heap Out-of-Bounds Read via TSMF| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-67294FreeRDP before 3.29.0 TLS Certificate EKU Bypass | Exploitation statusActively exploited | FixYes |
| Published08/01/2026 |
| SeverityCritical |
CVE-2026-67293FreeRDP before 3.29.0 Improper Certificate Hostname Validation | Exploitation statusNot exploited | FixYes | Affected productFreeRDP | Published08/01/2026 | SeverityCritical |
|---|
CVE-2026-67292FreeRDP before 3.29.0 WebSocket Ping Buffer Over-disclosure | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published08/01/2026 | SeverityCritical |
|---|
CVE-2026-67291FreeRDP before 3.29.0 Heap Out-of-Bounds Read via GLYPH_FRAGMENT_ADD | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published08/01/2026 | SeverityHigh |
|---|
CVE-2026-67290FreeRDP before 3.29.0 Heap Out-of-Bounds Read via TSMF | Exploitation statusNot exploited | FixYes | Affected productFreeRDP | Published08/01/2026 | SeverityHigh |
|---|
CVE-2026-67289FreeRDP before 3.29.0 HTTP Proxy Request Injection via Redirection | Exploitation statusNot exploited | FixYes | Affected productFreeRDP | Published08/01/2026 | SeverityCritical |
|---|
CVE-2026-67288FreeRDP before 3.29.0 Denial of Service via smartcard cache | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published08/01/2026 | SeverityHigh |
|---|
CVE-2026-66402FreeRDP before 3.29.0 TLS Certificate Identity Validation Bypass | Exploitation statusNot exploited | FixYes | Affected productFreeRDP | Published08/01/2026 | SeverityCritical |
|---|
CVE-2026-66401FreeRDP before 3.29.0 Out-of-Bounds Read via UVC H.264 | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published08/01/2026 | SeverityLow |
|---|
CVE-2026-64624FreeRDP RDP File Parser Remote Code Execution via CLI Options | Exploitation statusNot exploited | FixYes | Affected productFreeRDP | Published07/20/2026 | SeverityHigh |
|---|
CVE-2026-64621FreeRDP before 3.28.0 Double-Free via selectedmonitors | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published07/20/2026 | SeverityCritical |
|---|
CVE-2026-64620FreeRDP before 3.28.0 Heap Buffer Overflow via crypto_rsa_common | Exploitation statusNot exploited | FixYes | Affected productFreeRDP | Published07/20/2026 | SeverityCritical |
|---|
CVE-2026-57158FreeRDP planar_decompress_plane_rle_only: heap OOB read — incomplete fix for CVE-2026-23530 | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published07/10/2026 | SeverityMedium |
|---|
CVE-2026-57157Out-of-bounds read in the camera device enumerator server (rdpecam) via unterminated DeviceName / VirtualChannelName | Exploitation statusNot exploited | FixYes | Affected productFreeRDP | Published07/10/2026 | SeverityMedium |
|---|
CVE-2026-57156FreeRDP: Integer overflow leading to heap buffer overflow in Orders Delta Points parsing | Exploitation statusNot exploited | FixYes | Affected productFreeRDP | Published07/10/2026 | SeverityHigh |
|---|
CVE-2026-55827FreeRDP: Heap out-of-bounds write in RemoteFX (RFX) Cache Bitmap V3 decode | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published07/10/2026 | SeverityHigh |
|---|
CVE-2026-56297FreeRDP - Use-After-Free via Race Condition in DRDYNVC Channel Callback | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published07/08/2026 | SeverityHigh |
|---|
CVE-2026-45700Heap-buffer-overflow write in planar bitmap decoder | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published05/29/2026 | SeverityHigh |
|---|
CVE-2026-44422FreeRDP RDPEAR NDR ref-id aliasing causes client-side UAF/double-free and type confusion | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published05/29/2026 | SeverityHigh |
|---|
CVE-2026-44421FreeRDP RDPGFX CacheToSurface heap-buffer-overflow via clamped-rectangle validation bypass | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published05/29/2026 | SeverityHigh |
|---|
CVE-2026-44420FreeRDP cliprdr server heap-buffer-overflow via undersized capabilitySetLength in CB_CLIP_CAPS | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published05/29/2026 | SeverityHigh |
|---|
CVE-2026-40033FreeRDP - Heap-buffer-overflow in gdi_CacheToSurface via rectangle validation bypass | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published05/26/2026 | SeverityHigh |
|---|
CVE-2026-40254FreeRDP: contains_dotdot() off-by-one allows drive channel path traversal via terminal .. | Exploitation statusActively exploited | FixNo | Affected productFreeRDP | Published04/24/2026 | SeverityMedium |
|---|
CVE-2026-33995FreeRDP: Possible double free in kerberos_AcceptSecurityContext | Exploitation statusNot exploited | FixYes | Affected productFreeRDP | Published03/30/2026 | SeverityMedium |
|---|
CVE-2026-33987FreeRDP: Persistent Cache bmpSize Desync - Heap OOB Write | Exploitation statusNot exploited | FixYes | Affected productFreeRDP | Published03/30/2026 | SeverityHigh |
|---|
CVE-2026-33986FreeRDP: H.264 YUV Buffer Dimension Desync - Heap OOB Write | Exploitation statusNot exploited | FixYes | Affected productFreeRDP | Published03/30/2026 | SeverityHigh |
|---|
CVE-2026-33985FreeRDP: ClearCodec Glyph Cache Count Desync - Heap OOB Read | Exploitation statusNot exploited | FixYes | Affected productFreeRDP | Published03/30/2026 | SeverityMedium |
|---|
CVE-2026-33984FreeRDP: ClearCodec resize_vbar_entry() Heap OOB Write | Exploitation statusNot exploited | FixYes | Affected productFreeRDP | Published03/30/2026 | SeverityHigh |
|---|
CVE-2026-33983FreeRDP: Progressive Codec Quant BYTE Underflow - UB + CPU DoS | Exploitation statusNot exploited | FixYes | Affected productFreeRDP | Published03/30/2026 | SeverityHigh |
|---|
CVE-2026-33982FreeRDP: Persistent Cache Allocator Mismatch - Heap OOB Read | Exploitation statusNot exploited | FixYes | Affected productFreeRDP | Published03/30/2026 | SeverityHigh |
|---|
CVE-2026-33977FreeRDP: DoS via WINPR_ASSERT in IMA ADPCM audio decoder (dsp.c:331) | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published03/30/2026 | SeverityMedium |
|---|
CVE-2026-33952FreeRDP: DoS via WINPR_ASSERT in rts_read_auth_verifier_no_checks | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published03/30/2026 | SeverityMedium |
|---|
CVE-2026-31897FreeRDP has an out-of-bounds read in `freerdp_bitmap_decompress_planar` | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published03/13/2026 | SeverityInformational |
|---|
CVE-2026-31885FreeRDP has an out-of-bounds read in ADPCM decoders due to missing predictor/step_index bounds checks | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published03/13/2026 | SeverityMedium |
|---|
CVE-2026-31884FreeRDP has a division-by-zero in ADPCM decoders when `nBlockAlign` is 0 | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published03/13/2026 | SeverityMedium |
|---|
CVE-2026-31883FreeRDP has a `size_t` underflow in ADPCM decoder leads to heap-buffer-overflow write | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published03/13/2026 | SeverityMedium |
|---|
CVE-2026-31806FreeRDP has a Heap Buffer Overflow in nsc_process_message() via Unchecked SURFACE_BITS_COMMAND Bitmap Dimensions | Exploitation statusNot exploited | FixYes | Affected productFreeRDP | Published03/13/2026 | SeverityCritical |
|---|
CVE-2026-29776FreeRDP has an Integer Underflow in update_read_cache_bitmap_order Function of FreeRDP's Core Library | Exploitation statusNot exploited | FixYes | Affected productFreeRDP | Published03/13/2026 | SeverityLow |
|---|
CVE-2026-29775FreeRDP has a heap-buffer-overflow in bitmap_cache_put via OOB cacheId | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published03/13/2026 | SeverityMedium |
|---|
CVE-2026-29774FreeRDP has a heap-buffer-overflow in avc420_yuv_to_rgb via OOB regionRects | Exploitation statusActively exploited | FixYes | Affected productFreeRDP | Published03/13/2026 | SeverityMedium |
|---|
CVE-2026-27951FreeRDP has possible Integer overflow in Stream_EnsureCapacity | Exploitation statusActively exploited | FixNo | Affected productFreeRDP | Published02/25/2026 | SeverityMedium |
|---|
CVE-2026-27950FreeRDP heap-use-after-free in update_pointer_new(SDL): Fix Applied in the Wrong File | Exploitation statusNot exploited | FixYes | Affected productFreeRDP | Published02/25/2026 | SeverityMedium |
|---|
CVE-2026-27015FreeRDP: Smartcard NDR Alignment Padding Triggers Reachable WINPR_ASSERT Abort (Client DoS) | Exploitation statusActively exploited | FixNo | Affected productFreeRDP | Published02/25/2026 | SeverityMedium |
|---|
CVE-2026-26986FreeRDP has heap-use-after-free in rail_window_free | Exploitation statusActively exploited | FixNo | Affected productFreeRDP | Published02/25/2026 | SeverityMedium |
|---|
CVE-2026-26965FreeRDP has Out-of-bounds Write | Exploitation statusActively exploited | FixNo | Affected productFreeRDP | Published02/25/2026 | SeverityHigh |
|---|
CVE-2026-26955FreeRDP has Out-of-bounds Write | Exploitation statusActively exploited | FixNo | Affected productFreeRDP | Published02/25/2026 | SeverityHigh |
|---|
CVE-2026-26271Buffer Overread in FreeRDP Icon Processing | Exploitation statusNot exploited | FixNo | Affected productFreeRDP | Published02/25/2026 | SeverityMedium |
|---|
CVE-2026-25997FreeRDP has heap-use-after-free in xf_clipboard_format_equal | Exploitation statusActively exploited | FixNo | Affected productFreeRDP | Published02/25/2026 | SeverityMedium |
|---|
CVE-2026-25959FreeRDP has heap-use-after-free in xf_cliprdr_provide_data_ | Exploitation statusActively exploited | FixNo | Affected productFreeRDP | Published02/25/2026 | SeverityMedium |
|---|
CVE-2026-25955FreeRDP has heap-use-after-free in xf_AppUpdateWindowFromSurface (stale XImage) | Exploitation statusActively exploited | FixNo | Affected productFreeRDP | Published02/25/2026 | SeverityMedium |
|---|
200 Results | Page 4 of 4