FR
Product
FreeRDP
by FreeRDP · last CVE Oct 21, 2026
305
CVEs
0
On KEV
9.8
Max CVSS
69
New 30D
Severity mix
Critical 68High 96Medium 120Low 19
Watch

Add FreeRDP to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-109257
7.5
0%
Oct 12
FreeRDP before 3.32.0 Double Free via NSCodec plane growth failure
Affected: before 3.32.0
CVE-2026-91955
7.5
1%
Sep 15
FreeRDP before 3.31.0 Denial of Service via Desktop Dimensions
Affected: before 3.31.0
CVE-2026-91948
7.5
1%
Sep 15
FreeRDP before 3.31.0 Out-of-bounds Write via SHOW_PROTOCOL
Affected: 3.28.0 before 3.31.0
CVE-2026-91947
7.5
0%
Sep 15
FreeRDP Server before 3.31.0 Use-After-Free via DRDYNVC
Affected: 2.0.0 before 3.31.0
CVE-2026-55648
7.5
0%
Aug 19
FreeRDP: Integer Overflow in `freerdp_image_copy_from_icon_data` Bypasses Bounds Check
Affected: < 3.27.0
CVE-2026-73241
7.5
0%
Aug 11
FreeRDP: RDSTLS server authentication bypass: a credential-less Capabilities PDU is accepted at the auth step (fail-open `resultCode`)
Affected: < 3.30.0
CVE-2026-68580
7.5
0%
Aug 2
FreeRDP before 3.29.0 Integer Overflow via Audio Input Channel
Affected: before 3.29.0
CVE-2026-67298
7.5
1%
Aug 1
FreeRDP 3.28.0 Heap Buffer Overflow via RAIL orderLength Underflow
Affected: before 3.29.0
CVE-2026-67291
7.5
0%
Aug 1
FreeRDP before 3.29.0 Heap Out-of-Bounds Read via GLYPH_FRAGMENT_ADD
Affected: before 3.29.0
CVE-2026-67300
7.5
0%
Aug 1
FreeRDP before 3.29.0 Use-After-Free via async message proxy
Affected: before 3.29.0
CVE-2026-67299
7.5
0%
Aug 1
FreeRDP before 3.29.0 Use-After-Free via WindowIcon async message
Affected: before 3.29.0
CVE-2026-67288
7.5
0%
Aug 1
FreeRDP before 3.29.0 Denial of Service via smartcard cache
Affected: before 3.29.0
CVE-2026-67289
7.5
0%
Aug 1
FreeRDP before 3.29.0 HTTP Proxy Request Injection via Redirection
Affected: before 3.29.0
CVE-2026-67296
7.5
1%
Aug 1
FreeRDP before 3.29.0 Denial of Service via RDPEI PDU
Affected: before 3.29.0
CVE-2026-67304
7.5
1%
Aug 1
FreeRDP before 3.29.0 NULL Dereference via smartcard cleanup
Affected: before 3.29.0
CVE-2026-67297
7.5
1%
Aug 1
FreeRDP before 3.29.0 Resource Exhaustion via chunked HTTP response
Affected: before 3.29.0
CVE-2026-67301
7.5
1%
Aug 1
FreeRDP before 3.29.0 Out-of-bounds Read via Polygon async message-proxy
Affected: before 3.29.0
CVE-2026-67290
7.5
1%
Aug 1
FreeRDP before 3.29.0 Heap Out-of-Bounds Read via TSMF
Affected: before 3.29.0
CVE-2026-33986
7.5
0%
Mar 30
FreeRDP: H.264 YUV Buffer Dimension Desync - Heap OOB Write
Affected: < 3.24.2
CVE-2026-33984
7.5
0%
Mar 30
FreeRDP: ClearCodec resize_vbar_entry() Heap OOB Write
Affected: < 3.24.2
CVE-2026-31884
7.5
0%
Mar 13
FreeRDP has a division-by-zero in ADPCM decoders when `nBlockAlign` is 0
Affected: < 3.24.0
CVE-2026-27951
7.5
0%
Feb 25
FreeRDP has possible Integer overflow in Stream_EnsureCapacity
Affected: < 3.23.0
CVE-2026-27950
7.5
0%
Feb 25
FreeRDP heap-use-after-free in update_pointer_new(SDL): Fix Applied in the Wrong File
Affected: < 3.23.0
CVE-2026-26986
7.5
1%
Feb 25
FreeRDP has heap-use-after-free in rail_window_free
Affected: < 3.23.0
CVE-2026-25954
7.5
1%
Feb 25
FreeRDP has heap-use-after-free in xf_rail_server_local_move_size
Affected: < 3.23.0
CVE-2026-25942
7.5
1%
Feb 25
FreeRDP has global-buffer-overflow in xf_rail_server_execute_result
Affected: < 3.23.0
CVE-2026-24684
7.5
1%
Feb 9
FreeRDP has a Heap-use-after-free in play_thread
Affected: < 3.22.0
CVE-2026-24683
7.5
1%
Feb 9
FreeRDP has a heap-use-after-free in ainput_send_input_event
Affected: < 3.22.0
CVE-2026-24682
7.5
1%
Feb 9
FreeRDP has a Heap-buffer-overflow in audio_formats_free
Affected: < 3.22.0
CVE-2026-24681
7.5
1%
Feb 9
FreeRDP has a heap-use-after-free in urb_bulk_transfer_cb
Affected: < 3.22.0
CVE-2026-24680
7.5
0%
Feb 9
FreeRDP has a heap-use-after-free in update_pointer_new(SDL)
Affected: < 3.22.0
CVE-2026-24678
7.5
1%
Feb 9
FreeRDP has a Heap-use-after-free in cam_v4l_stream_capture_thread
Affected: < 3.22.0
CVE-2026-24676
7.5
1%
Feb 9
FreeRDP has a heap-use-after-free in audio_format_compatible
Affected: < 3.22.0
CVE-2026-24675
7.5
1%
Feb 9
FreeRDP has a Heap-use-after-free in urb_select_interface
Affected: < 3.22.0
CVE-2026-24491
7.5
1%
Feb 9
FreeRDP has a heap-use-after-free in video_timer
Affected: < 3.22.0
CVE-2026-23948
7.5
1%
Feb 9
FreeRDP has a NULL Pointer Dereference in rdp_write_logon_info_v2()
Affected: < 3.22.0
CVE-2026-23732
7.5
1%
Jan 19
FreeRDP has heap-buffer-overflow in Glyph_Alloc
Affected: < 3.21.0
CVE-2024-32661
7.5
1%
Apr 23
FreeRDP rdp_write_logon_info_v1 NULL access
Affected: < 3.5.1
CVE-2024-32660
7.5
1%
Apr 23
FreeRDP zgfx_decompress out of memory vulnerability
Affected: < 3.5.1
CVE-2023-40576
7.5
1%
Aug 31
FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license
Affected: 3.0.0; 3.0.0
CVE-2023-39354
7.5
2%
Aug 31
FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license
Affected: before 2.11.0; 3.0.0; 3.0.0
CVE-2023-39351
7.5
2%
Aug 31
FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license
Affected: before 2.11.0; 3.0.0; 3.0.0
CVE-2023-39350
7.5
2%
Aug 31
FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license
Affected: before 2.11.0; 3.0.0; 3.0.0
CVE-2023-40589
7.5
1%
Aug 31
FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license
Affected: before 2.11.0; 3.0.0; 3.0.0
CVE-2022-39283
7.5
1%
Oct 12
FreeRDP may read and display out of bounds data
Affected: <= 2.8.0
CVE-2022-39282
7.5
1%
Oct 12
RDP client: Read of uninitialized memory with parallel port redirection
Affected: <= 2.8.0
CVE-2022-24882
7.5
3%
Apr 26
FreeRDP is a free implementation of the Remote Desktop Protocol (RDP)
Affected: before 2.7.0
CVE-2020-4031
7.5
2%
Jun 22
In FreeRDP before version 2.1.2, there is a use-after-free in gdi_SelectObject
Affected: before 2.1.2
CVE-2019-17178
7.5
3%
Oct 4
HuffmanTree_makeFromFrequencies in lodepng.c in LodePNG through 2019-09-28, as used in WinPR in FreeRDP and other products, has a memory leak because a supplied realloc pointer…
Affected: through 1.0.2; 1.1.0
CVE-2019-17177
7.5
3%
Oct 4
libfreerdp/codec/region.c in FreeRDP through 1.1.x and 2.x through 2.0.0-rc4 has memory leaks because a supplied realloc pointer (i.e., the first argument to realloc) is also used…
Affected: through 1.0.2; 1.1.0; 1.1.0; 2.0.0; 2.0.0; 2.0.0; +3 more
Page 3 of 7 · 305 total