Search CVE reports


Toggle filters

21 – 30 of 162 results


CVE-2026-29776

Medium priority
Needs evaluation

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, Integer Underflow in update_read_cache_bitmap_order Function of FreeRDP's Core Library This vulnerability is fixed in 3.24.0.

3 affected packages

freerdp, freerdp2, freerdp3

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
freerdp Not in release Not in release Not in release Needs evaluation
freerdp2 Not in release Needs evaluation Needs evaluation Needs evaluation Needs evaluation
freerdp3 Not affected Needs evaluation Not in release
Show less packages

CVE-2026-29775

Medium priority
Needs evaluation

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, a client-side heap out-of-bounds read/write occurs in FreeRDP's bitmap cache subsystem due to an off-by-one boundary check in bitmap_cache_put. A...

3 affected packages

freerdp, freerdp2, freerdp3

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
freerdp Not in release Not in release Not in release Needs evaluation
freerdp2 Not in release Needs evaluation Needs evaluation Needs evaluation Needs evaluation
freerdp3 Not affected Needs evaluation Not in release
Show less packages

CVE-2026-29774

Medium priority
Needs evaluation

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, a client-side heap buffer overflow occurs in the FreeRDP client's AVC420/AVC444 YUV-to-RGB conversion path due to missing horizontal...

3 affected packages

freerdp, freerdp2, freerdp3

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
freerdp Not in release Not in release Not in release Needs evaluation
freerdp2 Not in release Needs evaluation Needs evaluation Needs evaluation Needs evaluation
freerdp3 Not affected Needs evaluation Not in release
Show less packages

CVE-2026-27951

Medium priority
Vulnerable

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, the function `Stream_EnsureCapacity` can create an endless blocking loop. This may affect all client and server implementations...

3 affected packages

freerdp, freerdp2, freerdp3

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
freerdp Not in release Not in release Not in release Needs evaluation
freerdp2 Not in release Needs evaluation Needs evaluation Needs evaluation Needs evaluation
freerdp3 Not affected Vulnerable Not in release
Show less packages

CVE-2026-27950

Medium priority

Some fixes available 2 of 8

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, the fix for the heap-use-after-free described in CVE-2026-24680 is incomplete. While the vulnerable execution flow referenced in the...

3 affected packages

freerdp, freerdp2, freerdp3

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
freerdp Not in release Not in release Not in release Needs evaluation
freerdp2 Not in release Needs evaluation Needs evaluation Needs evaluation Needs evaluation
freerdp3 Not affected Fixed Not in release
Show less packages

CVE-2026-26986

Medium priority

Some fixes available 2 of 8

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `rail_window_free` dereferences a freed `xfAppWindow` pointer during `HashTable_Free` cleanup because `xf_rail_window_common` calls...

3 affected packages

freerdp, freerdp2, freerdp3

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
freerdp Not in release Not in release Not in release Needs evaluation
freerdp2 Not in release Needs evaluation Needs evaluation Needs evaluation Needs evaluation
freerdp3 Not affected Fixed Not in release
Show less packages

CVE-2026-27015

Medium priority

Some fixes available 2 of 8

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, a missing bounds check in `smartcard_unpack_read_size_align()` (`libfreerdp/utils/smartcard_pack.c:1703`) allows a malicious RDP server...

3 affected packages

freerdp, freerdp2, freerdp3

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
freerdp Not in release Not in release Not in release Needs evaluation
freerdp2 Not in release Needs evaluation Needs evaluation Needs evaluation Needs evaluation
freerdp3 Not affected Fixed Not in release
Show less packages

CVE-2026-26965

Medium priority

Some fixes available 2 of 8

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, in the RLE planar decode path, `planar_decompress_plane_rle()` writes into `pDstData` at `((nYDst+y) * nDstStep) + (4*nXDst) + nChannel`...

3 affected packages

freerdp, freerdp2, freerdp3

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
freerdp Not in release Not in release Not in release Needs evaluation
freerdp2 Not in release Needs evaluation Needs evaluation Needs evaluation Needs evaluation
freerdp3 Not affected Fixed Not in release
Show less packages

CVE-2026-26955

Medium priority

Some fixes available 2 of 8

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, a malicious RDP server can trigger a heap buffer overflow in FreeRDP clients using the GDI surface pipeline (e.g., `xfreerdp`) by sending an...

3 affected packages

freerdp, freerdp2, freerdp3

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
freerdp Not in release Not in release Not in release Needs evaluation
freerdp2 Not in release Needs evaluation Needs evaluation Needs evaluation Needs evaluation
freerdp3 Not affected Fixed Not in release
Show less packages

CVE-2026-26271

Medium priority

Some fixes available 2 of 8

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, a buffer overread in `freerdp_image_copy_from_icon_data()` (libfreerdp/codec/color.c) can be triggered by crafted RDP Window...

3 affected packages

freerdp, freerdp2, freerdp3

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
freerdp Not in release Not in release Not in release Needs evaluation
freerdp2 Not in release Needs evaluation Needs evaluation Needs evaluation Needs evaluation
freerdp3 Not affected Fixed Not in release
Show less packages