2561 matches found
USN-8561-1: FreeRDP vulnerabilities
It was discovered that FreeRDP contained multiple security issues. An attacker could possibly use these issues to obtain sensitive information, cause FreeRDP to crash, resulting in a denial of service, or execute arbitrary code...
CVE-2026-55238: Buffer Over-read
xrdp is an open source RDP server. Versions 0.10.6 and prior contain a vulnerability concerning the processing of RDP Confirm Active PDU, where during the capability negotiation phase, the parser did not perform sufficient length validation for specific capability sets. A remote, unauthenticated...
Linux Distros Unpatched Vulnerability : CVE-2026-64621
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP before 3.28.0 affected 3.x through 3.27.1 contains a double-free vulnerability in freerdpclientrdpfileapplytosettings client/common/file.c when parsing...
CVE-2026-64624: Improper Neutralization of Argument Delimiters in a Command
FreeRDP before 3.28.0 treats lines beginning with forward slash in RDP files as raw command-line options, exposing the entire CLI parser surface to untrusted files. Attackers can craft malicious RDP files with /rdp2tcp, /cert:ignore, or /drive options to execute arbitrary commands, bypass...
CVE-2026-54538: Loop with Unreachable Exit Condition
xrdp is an open source RDP server. In versions 0.10.6 and prior, a n issue was discovered where the software fails to properly validate the totalLength field within the RDP protocol control header during packet reception. An unauthenticated remote attacker can exploit this vulnerability by sendin...
CVE-2026-64620: Heap-based Buffer Overflow
FreeRDP before 3.28.0 affected outlength, so out-of-bounds bytes are written before the bounds check. On the server side, when a client selects RDP Standard Security, the encrypted client random is decrypted into a fixed 32-byte buffer. Because the server publishes its RSA public key, an...
CVE-2026-56171: Exposure of Private Personal Information to an Unauthorized Actor
Exposure of private personal information to an unauthorized actor in Windows RDP allows an unauthorized attacker to disclose information over a network...
FreeRDP RDPSND DoS
The vulnerability of the RDPSND async playback thread in the RDP client FreeRDP component relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure or execute arbitrary code...
[SECURITY] Fedora 44 Update: xrdp-0.10.6.1-1.fc44
xrdp provides a fully functional RDP server compatible with a wide range of RDP clients, including FreeRDP and Microsoft RDP client...
CVE-2026-50376
Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network...
PT-2026-58652
Name of the Vulnerable Software and Affected Versions Windows RDP affected versions not specified Description An out-of-bounds read occurs in Windows RDP, which allows an unauthorized attacker to disclose sensitive information over a network. Recommendations At the moment, there is no information...
CVE-2026-50376: Use of Uninitialized Resource
Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network...
CVE-2026-58539: Out-of-bounds Read
Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network...
CVE-2026-58535: Use of Uninitialized Resource
Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network...
CVE-2026-54126: Out-of-bounds Read
Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network...
CVE-2026-58546: Use of Uninitialized Resource
Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network...
CVE-2026-58533: Use of Uninitialized Resource
Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network...
CVE-2026-57982: Use of Uninitialized Resource
Use of uninitialized resource in Windows RDP allows an authorized attacker to disclose information over a network...