Linux Distros Unpatched Vulnerability : CVE-2026-24678

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, A capture thread sends sample responses using a freed channel callback after a...

TencentOS Server 4: freerdp (TSSA-2026:0039)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0039 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

Linux Distros Unpatched Vulnerability : CVE-2026-24683

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP is a free implementation of the Remote Desktop Protocol. ainputsendinputevent caches channelcallback in a local variable and later uses it without...

Linux Distros Unpatched Vulnerability : CVE-2026-24491

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, videotimer can send client notifications after the control channel is closed,...

Linux Distros Unpatched Vulnerability : CVE-2026-24680

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, sdlPointerNew frees data on failure, then pointerfree calls sdlPointerFree and...

Linux Distros Unpatched Vulnerability : CVE-2026-24676

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, AUDIN format renegotiation frees the active format list while the capture thre...

Linux Distros Unpatched Vulnerability : CVE-2026-24682

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, audinserverrecvformats frees an incorrect number of audio formats on parse...

Linux Distros Unpatched Vulnerability : CVE-2026-24675

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, urbselectinterface can free the device's MS config on error but later code sti...

Linux Distros Unpatched Vulnerability : CVE-2026-24684

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, the RDPSND async playback thread can process queued PDUs after the channel is...

[SECURITY] Fedora 42 Update: freerdp-3.21.0-1.fc42

The xfreerdp & wlfreerdp Remote Desktop Protocol RDP clients from the FreeR DP project. xfreerdp & wlfreerdp can connect to RDP servers such as Microsoft Windows machines, xrdp and VirtualBox...

Fedora 42 : freerdp (2026-943caf40d9)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-943caf40d9 advisory. Update to 3.21.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

OPENSUSE-SU-2026:10107-1 freerdp-3.21.0-1.1 on GA media

These are all security issues fixed in the freerdp-3.21.0-1.1 package on the GA media of openSUSE Tumbleweed...

Advisory ROSA-SA-2026-3127

software: freerdp 2.11.7 OS: ROSA-CHROME CVE-ID: CVE-2025-4478 BDU-ID: 2025-12117 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the GNOME Remote Desktop service is related to pointer dereferencing errors. Exploitation of the vulnerability could allow an attacker acting remotely to compromise data...

[SECURITY] Fedora 43 Update: freerdp-3.21.0-1.fc43

The xfreerdp & wlfreerdp Remote Desktop Protocol RDP clients from the FreeR DP project. xfreerdp & wlfreerdp can connect to RDP servers such as Microsoft Windows machines, xrdp and VirtualBox...

Fedora 43 : freerdp (2026-23d669bf94)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-23d669bf94 advisory. Update to 3.21.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

[SECURITY] Fedora 42 Update: freerdp-3.20.2-1.fc42

The xfreerdp & wlfreerdp Remote Desktop Protocol RDP clients from the FreeR DP project. xfreerdp & wlfreerdp can connect to RDP servers such as Microsoft Windows machines, xrdp and VirtualBox...

The vulnerability of the clear_decompress() function in the RDP client FreeRDP allows a hacker to execute arbitrary code and trigger a service failure.

The vulnerability of the cleardecompress function in the RDP client FreeRDP is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code and cause service failures...

Vulnerability of the gdi_SurfaceToSurface() function in the RDP client of FreeRDP, allowing a hacker to execute arbitrary code and cause service failure

The vulnerability of the gdiSurfaceToSurface function in the RDP client FreeRDP is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code and cause service interruptions...

Vulnerability of the clear_decompress_bands_data() function in the RDP client FreeRDP, allowing a hacker to execute arbitrary code and cause service failure

The vulnerability of the cleardecompressbandsdata function in the RDP client FreeRDP is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code and cause service failures...

Vulnerability of the gdi_set_bounds() function in the RDP client of FreeRDP, allowing a hacker to execute arbitrary code and cause a service failure

The vulnerability of the gdisetbounds function in the RDP client of FreeRDP is related to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code and cause service failure...