Lucene search
+L

5456 matches found

Positive Technologies
Positive Technologies
added 2026/04/17 12:0 a.m.15 views

PT-2026-33501

xrdp is an open source RDP server. Versions through 0.10.5 contain an out-of-bounds read vulnerability during the RDP capability exchange phase. The issue occurs when memory is accessed before validating the remaining buffer length. A remote, unauthenticated attacker can trigger this vulnerabilit...

7.7CVSS5.8AI score0.00427EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2026/04/17 12:0 a.m.5 views

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: freerdp (UTSA-2026-010666)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010666 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, aAsynchronous bulk transfer completions can use a freed channel callback after URBD...

8.7CVSS5.8AI score0.00467EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/04/17 12:0 a.m.6 views

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: freerdp (UTSA-2026-010669)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010669 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol. ainputsendinputevent caches channelcallback in a local variable and later uses it without...

8.7CVSS5.8AI score0.00467EPSS
SaveExploits0References4
Fedora
Fedora
added 2026/04/16 11:42 p.m.11 views

[SECURITY] Fedora 44 Update: krdp-6.6.4-1.fc44

Desktop sharing using RDP...

5.8AI score
SaveExploits0
RedHat Linux
RedHat Linux
added 2026/04/16 1:20 p.m.11 views

FreeRDP: FreeRDP: Denial of Service via specially crafted Remote Desktop Protocol messages

A flaw was found in FreeRDP, a free implementation of the Remote Desktop Protocol RDP. A remote attacker could exploit this vulnerability by sending a specially crafted RDP message. This can lead to an undefined behavior where a wrapped value is used as a shift exponent, causing an approximately ...

7.5CVSS5.8AI score0.00426EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2026/04/16 12:52 p.m.7 views

Important: Red Hat Security Advisory: freerdp security update

An update for freerdp is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

7.5CVSS6.7AI score0.00426EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2026/04/16 12:52 p.m.12 views

FreeRDP: FreeRDP: Heap buffer overflow allows arbitrary code execution via crafted pixel data

A flaw was found in FreeRDP, a free implementation of the Remote Desktop Protocol. A remote attacker could exploit a heap buffer overflow vulnerability in the resizevbarentry function. This occurs when an error in buffer resizing leads to attacker-controlled pixel data being written into an...

7.5CVSS6.2AI score0.00398EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2026/04/16 12:52 p.m.8 views

FreeRDP: FreeRDP: Denial of Service via specially crafted Remote Desktop Protocol messages

A flaw was found in FreeRDP, a free implementation of the Remote Desktop Protocol RDP. A remote attacker could exploit this vulnerability by sending a specially crafted RDP message. This can lead to an undefined behavior where a wrapped value is used as a shift exponent, causing an approximately ...

7.5CVSS5.8AI score0.00426EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2026/04/16 12:0 a.m.5 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: freerdp (UTSA-2026-007204)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007204 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, offscreen bitmap deletion leaves gdi-drawing pointing to freed memory,...

9.8CVSS5.8AI score0.00402EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2026/04/16 12:0 a.m.6 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: freerdp (UTSA-2026-007203)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007203 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, videotimer can send client notifications after the control channel is closed,...

8.7CVSS5.8AI score0.00467EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/04/16 12:0 a.m.8 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: freerdp (UTSA-2026-007191)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007191 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a race in the serial channel IRP thread tracking allows a heap useafterfree when on...

8.1CVSS5.8AI score0.00286EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2026/04/16 12:0 a.m.7 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: freerdp (UTSA-2026-007181)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007181 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, a missing bounds check in smartcardunpackreadsizealign...

6.5CVSS5.8AI score0.00256EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2026/04/16 12:0 a.m.8 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: freerdp (UTSA-2026-007207)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007207 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, in ClearCodec, when glyphData is present, cleardecompress calls...

9.8CVSS6AI score0.00443EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2026/04/16 12:0 a.m.8 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: freerdp (UTSA-2026-007200)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007200 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, the RDPSND async playback thread can process queued PDUs after the channel is close...

8.7CVSS5.8AI score0.00534EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/04/16 12:0 a.m.7 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: freerdp (UTSA-2026-007206)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007206 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, xfPointerNew frees cursorPixels on failure, then pointerfree calls...

9.8CVSS5.8AI score0.00402EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2026/04/16 12:0 a.m.5 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: freerdp (UTSA-2026-007205)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007205 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0,freerdpbitmapdecompressplanar does not validate nSrcWidth/nSrcHeight against...

9.8CVSS6AI score0.00443EPSS
SaveExploits1References4
OSV
OSV
added 2026/04/16 12:0 a.m.8 views

ALSA-2026:8457 Important: freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fixes: FreeRDP: FreeRDP: Heap buffer overflow allows arbitrary code execution v...

7.5CVSS6.6AI score0.00426EPSS
SaveExploits0References6
AlmaLinux
AlmaLinux
added 2026/04/16 12:0 a.m.21 views

Important: freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fixes: FreeRDP: FreeRDP: Heap buffer overflow allows arbitrary code execution v...

7.5CVSS6.6AI score0.00426EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
added 2026/04/15 7:23 p.m.7 views

CVE-2026-32157

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

8.8CVSS6AI score0.00778EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/04/15 7:23 p.m.8 views

CVE-2026-26159

Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges locally...

7.8CVSS6.3AI score0.00256EPSS
SaveExploits0References1
Rows per page
Query Builder