CVE-2026-121953

A flaw was found in FreeRDP. A use-after-free vulnerability exists in the client's Remote Desktop Protocol Graphics RDPGFX dynamic virtual channel handling. A malicious RDP server can open a second dynamic virtual channel that reuses an already registered channel name with a different ChannelId,...

CVE-2026-121952

A flaw was found in FreeRDP. An out-of-bounds write vulnerability exists in freerdp-proxy when processing Bitmap Cache v2 capability sets. The proxy accepts a client-declared numCellCaches value below five and later indexes the bitmap cache cell array at fixed positions 0 through 4. A client that...

CVE-2026-121959

A flaw was found in FreeRDP. A malicious Remote Desktop RD Gateway or network attacker can cause a Denial of Service DoS by sending a truncated WebSocket data frame followed by a Transport Layer Security TLS connection shutdown. Due to improper handling of the incomplete payload when the connecti...

CVE-2026-121954

A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can cause a Denial of Service DoS and heap memory corruption on the connecting client. This issue occurs in the planar graphics codec because new display dimensions are applied before memory buffer reallocation succeeds...

CVE-2026-121950

A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can cause a denial of service DoS or memory corruption on a connecting client. This issue occurs because FreeRDP does not properly validate graphical surface dimensions, resulting in an integer overflow during memory...

CVE-2026-121963

A flaw was found in FreeRDP. This vulnerability allows a malicious Remote Desktop Protocol RDP server to cause a Denial of Service DoS by crashing the client application. By sending audio data packets over a dynamic virtual channel and immediately closing the connection, the server triggers a...

CVE-2026-121961

A flaw was found in FreeRDP. A malicious or compromised Remote Desktop Protocol RDP server can trigger a race condition by repeatedly requesting the creation of an already active dynamic virtual channel while client data is concurrently processed. This issue leads to a use-after-free condition,...

CVE-2026-121956

A flaw was found in FreeRDP. A double-free memory vulnerability in the Kerberos authentication component allows an unauthenticated remote attacker to cause a Denial of Service DoS. By sending a specially crafted Network Level Authentication NLA request, an attacker can corrupt server memory and...

CVE-2026-121964

A flaw was found in FreeRDP. A compromised or malicious Remote Desktop RD Gateway server can send specially crafted Remote Procedure Call RPC network messages to a connecting client. Because the client verifies total buffer capacity instead of remaining buffer space before writing incoming data,...

CVE-2026-121955

A flaw was found in FreeRDP. A use-after-free vulnerability exists in the smartcard emulation feature where a smartcard context is released before its background worker thread is properly terminated. A malicious server can exploit this by sending a crafted sequence of smartcard I/O Request Packet...

CVE-2026-121958

A flaw was found in FreeRDP. This vulnerability allows a remote attacker to cause a Denial of Service DoS or potentially execute arbitrary code on the client system. An attacker operating a malicious Remote Desktop Protocol RDP server, or acting in a man-in-the-middle position, can exploit this...

FreeRDP RDP Client Buffer Overflow DoS

The vulnerability in the rdpreadbitmapcachev2capabilityset function of the FreeRDP RDP client is related to buffer boundary writes. Exploitation of this vulnerability may allow a remote attacker to compromise confidentiality, gain unauthorized access to protected information, or cause a denial of...

rdpgfx FreeRDP Code Execution

The vulnerability in the rdpgfx component of the FreeRDP RDP client is related to use-after-free memory allocation. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service or execute arbitrary code...

CVE-2026-121962

A flaw was found in FreeRDP. This vulnerability allows a malicious Remote Desktop Protocol RDP server to cause a Denial of Service DoS or memory corruption by sending fragmented responses during Early User Authorization EUA authentication. Because FreeRDP fails to properly track remaining buffer...

CVE-2026-121960

A flaw was found in FreeRDP. An unauthenticated remote attacker could cause a Denial of Service DoS by sending a specially crafted Credential Security Support Provider CredSSP request that omits negotiation tokens. When processing this malformed request with Network Level Authentication NLA...

CVE-2026-121957

A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can trigger a race condition in the client by concurrently transmitting graphics reset commands alongside compressed bitmap data. This flaw leads to a use-after-free condition or out-of-bounds memory access on shared...

CVE-2026-121951

A flaw was found in FreeRDP. In server-side input parsing, the application skips the body of an unknown input event without verifying that the data remains within the declared packet length. A remote attacker with an active session can send a crafted, truncated input event, triggering an internal...

CVE-2026-121392

A flaw was found in FreeRDP. A man-in-the-middle attacker possessing a certificate issued by a trusted Certificate Authority CA can exploit improper certificate identity validation during connection establishment. Because the client incorrectly accepts fallback certificate names and improperly...

Linux Distros Unpatched Vulnerability : CVE-2026-121961

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP before 3.32.2 contains a use-after-free vulnerability in the freerdp-proxy DRDYNVC tracker when intercepting the drdynvc channel. A malicious target...

Linux Distros Unpatched Vulnerability : CVE-2026-121963

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP before 3.32.2 contains a use-after-free vulnerability in the asynchronous dynamic rdpsnd channel that allows malicious RDP servers to trigger freed...