XR
Product
xrdp
37
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 17High 11Medium 9Low 0
Watch
Add xrdp to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-55645 | 6.5 | Jul 20 | xrdp: Out-of-bounds read in Client Control PDU processing (xrdp_rdp_process_data_control) Affected: < 0.10.6.1 |
| CVE-2026-32624 | 6.5 | Apr 17 | xrdp: Heap buffer overflow in xrdp_sec_process_logon_info() via incorrect g_strncat length calculation Affected: < 0.10.6 |
| CVE-2023-42822 | 6.5 | Sep 27 | xrdp is an open source remote desktop protocol server Affected: before 0.9.23.1 |
| CVE-2023-40184 | 6.5 | Aug 30 | xrdp is an open source remote desktop protocol (RDP) server Affected: before 0.9.23 |
| CVE-2026-33145 | 6.3 | Apr 17 | xrdp: Authenticated RCE via unsanitized AlternateShell execution in xrdp-sesman Affected: < 0.10.6 |
| CVE-2026-55639 | 5.3 | Jul 20 | xrdp: Out-of-bounds read in GCC Conference Create Request CS_SECURITY processing (xrdp_sec_process_mcs_data_CS_SECURITY) Affected: < 0.10.6.1 |
| CVE-2026-55238 | 5.3 | Jul 20 | xrdp: Malformed Confirm Active capability sets cause out-of-bounds reads Affected: < 0.10.6.1 |
| CVE-2026-44978 | 5.3 | Jul 20 | xrdp: Unchecked FIPS padding length in standard RDP Security causes heap out-of-bounds read in HMAC verification Affected: < 0.10.6.1 |
| CVE-2026-42218 | 5.3 | Jul 20 | XRDP is vulnerable to a server timing attack, leading to user enumeration Affected: < 0.10.6.1 |
Showing 9