591 matches found
The vulnerability of the TSMF decoder in FFmpeg’s RDP client FreeRDP allows a hacker to induce a service failure.
The vulnerability of the TSMF decoder in FFmpeg’s RDP client, FreeRDP, relates to reading data outside of the allowed range in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...
Vulnerability of the functions update_process_glyph_fragments() and glyph_cache_fragment_put() in the libfreerdp/cache/glyph.c file of the RDP client FreeRDP, allowing a intruder to cause a service failure
The vulnerabilities of the updateprocessglyphfragments and glyphcachefragmentput functions in the libfreerdp/cache/glyph.c file of the RDP client FreeRDP involve reading beyond the permitted range of memory. Exploiting these vulnerabilities could allow a malicious actor to cause service failures...
EUVD-2026-51834
FreeRDP before 3.29.0 affected versions = 3.28.0 contains a divide-by-zero vulnerability in the rdpecam camera redirection client. ecamdevprocessstartstreamsrequest parses a server-controlled CAMMEDIATYPEDESCRIPTION from a StartStreamsRequest PDU but validates only Format and Flags, not...
EUVD-2026-51821
FreeRDP before 3.29.0 contains client-side heap use-after-free vulnerabilities in the async update message proxy for RAIL WINDOWSTATEORDER and NOTIFYICONSTATEORDER when AsyncUpdate is enabled. When a malicious or compromised RDP server sends crafted update orders, the message proxy shallow-copies...
CVE-2026-67305 FreeRDP Windows Client before 3.29.0 Heap Buffer Overflow via Cliprdr
FreeRDP Windows client before 3.29.0 contains a heap buffer overflow vulnerability in the clipboard virtual channel when processing CLIPRDRFILECONTENTSRESPONSE PDUs without validating the server-provided size against the destination buffer. A malicious RDP server can send a response with a data...
EUVD-2026-44072
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
EUVD-2026-44001
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
CVE-2026-50504
Buffer over-read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network...
CVE-2026-50474
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
CVE-2026-50330
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-54990
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
CVE-2026-58594
CVE-2026-58594 is a Windows Remote Desktop Client RCE vulnerability caused by an integer overflow/wraparound in the RDP client. Public sources (NVD/NCSC/CIRCL) attribute network-based exploitation with potential arbitrary code execution on vulnerable Windows systems. Connected entries confirm the...
CVE-2026-58594 Remote Desktop Client Remote Code Execution Vulnerability
...
CVE-2026-58539
CVE-2026-58539 is a Windows Remote Desktop Client/RDP vulnerability described as an out-of-bounds read that could allow an unauthenticated attacker to disclose information over a network. The connected documents corroborate this as a Windows RDP/Remote Desktop Client issue with public advisories ...
CVE-2026-58546 Windows Remote Desktop Client Information Disclosure Vulnerability
...
CVE-2026-58546 Windows Remote Desktop Client Information Disclosure Vulnerability
...
CVE-2026-58533 Windows Remote Desktop Client Information Disclosure Vulnerability
...
CVE-2026-58535
CVE-2026-58535 affects the Windows Remote Desktop Client. The root cause is a use of an uninitialized resource in Windows RDP, enabling an unauthenticated, network-based disclosure of information. Public data from NVD lists CVSS v3.1 base metrics: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N, base score 7...