Lucene search
+L

4843 matches found

Rockylinux
Rockylinux
added 2026/07/10 12:03 p.m.14 views

freerdp security update

An update is available for freerdp. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released...

9.8CVSS6.5AI score0.00629EPSS
SaveExploits1
OSV
OSV
added 2026/07/10 10:10 a.m.8 views

RHSA-2026:37207 Red Hat Security Advisory: freerdp security update

Bulletin has no description...

8.8CVSS6.1AI score0.00629EPSS
SaveExploits1References8
Oracle linux
Oracle linux
added 2026/07/10 12:00 a.m.11 views

freerdp security update

2:2.11.7-7.4 - Fix incorrect bounds checks in planar codec CVE-2026-45700 Resolves: RHEL-186991...

9.8CVSS6.1AI score0.00629EPSS
SaveExploits1
Positive Technologies
Positive Technologies
added 2026/07/10 12:00 a.m.15 views

PT-2026-57293

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.28.0 Description FreeRDP clients on 32-bit builds contain an integer overflow in the update read delta points function within libfreerdp/core/orders.c. This occurs when multiplying an attacker-controlled point count...

9.8CVSS6.2AI score0.00698EPSS
SaveExploits15References53
Tenable Nessus
Tenable Nessus
added 2026/07/10 12:00 a.m.13 views

RockyLinux 9 : freerdp (RLSA-2026:37207)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:37207 advisory. freerdp: FreeRDP: Out-of-bounds write in planar bitmap decoder allows arbitrary code execution CVE-2026-45700 Tenable has extracted the preceding description blo...

9.8CVSS6.3AI score0.00629EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2026/07/10 12:00 a.m.14 views

Oracle Linux 9 : freerdp (ELSA-2026-37207)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-37207 advisory. 2:2.11.7-7.4 - Fix incorrect bounds checks in planar codec CVE-2026-45700 Resolves: RHEL-186991 Tenable has extracted the preceding description block directly...

9.8CVSS6.2AI score0.00629EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2026/07/09 2:16 p.m.12 views

CVE-2026-56297

A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can exploit a use-after-free vulnerability due to improper synchronization of channel callback access. By sending DYNVCDATA and DYNVCCLOSE messages concurrently, a race condition can be triggered in the drdynvc client...

8.3CVSS6.5AI score0.00361EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
added 2026/07/09 10:04 a.m.36 views

freerdp: FreeRDP: Out-of-bounds write in planar bitmap decoder allows arbitrary code execution

A flaw was found in FreeRDP, a free implementation of the Remote Desktop Protocol. The planar bitmap decoder contains an out-of-bounds heap write vulnerability when processing RLE planar data. A remote attacker could exploit this by providing specially crafted RLE planar data, leading to an...

9.8CVSS6.6AI score0.00629EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
added 2026/07/09 10:04 a.m.13 views

Important: Red Hat Security Advisory: freerdp security update

An update for freerdp is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

9.8CVSS6.6AI score0.00629EPSS
SaveExploits1References2
SUSE CVE
SUSE CVE
added 2026/07/09 2:52 a.m.7 views

SUSE CVE-2026-56297

FreeRDP before 3.22.0 contains a use-after-free vulnerability in dvcmanchannelclose and dvcmancallonreceive due to improper synchronization of channelcallback access. A malicious RDP server can trigger a race condition by sending DYNVCDATA and DYNVCCLOSE messages concurrently, causing...

6.4CVSS6.5AI score0.00361EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
added 2026/07/09 12:00 a.m.25 views

CVE-2026-55648

Integer Overflow in freerdpimagecopyfromicondata Bypasses Bounds Check...

6.1CVSS5.8AI score0.00401EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/07/09 12:00 a.m.26 views

Linux Distros Unpatched Vulnerability : CVE-2026-56297

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP before 3.22.0 contains a use-after-free vulnerability in dvcmanchannelclose and dvcmancallonreceive due to improper synchronization of channelcallback...

8.3CVSS7.6AI score0.00361EPSS
SaveExploits1References4
OSV
OSV
added 2026/07/09 12:00 a.m.7 views

UBUNTU-CVE-2026-55648

Integer Overflow in freerdpimagecopyfromicondata Bypasses Bounds Check...

6.1CVSS6.1AI score0.00401EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/07/09 12:00 a.m.18 views

TencentOS Server 4: freerdp (TSSA-2026:0561)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0561 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

7.5CVSS7.1AI score0.00398EPSS
SaveExploits0References3
AlmaLinux
AlmaLinux
added 2026/07/09 12:00 a.m.12 views

Important: freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fixes: freerdp: FreeRDP: Out-of-bounds write in planar bitmap decoder allows...

9.8CVSS6.5AI score0.00629EPSS
SaveExploits1References4
OSV
OSV
added 2026/07/08 2:17 p.m.6 views

DEBIAN-CVE-2026-56297

FreeRDP before 3.22.0 contains a use-after-free vulnerability in dvcmanchannelclose and dvcmancallonreceive due to improper synchronization of channelcallback access. A malicious RDP server can trigger a race condition by sending DYNVCDATA and DYNVCCLOSE messages concurrently, causing...

8.1CVSS6.5AI score0.00361EPSS
SaveExploits1References1
EUVD
EUVD
added 2026/07/08 1:49 p.m.14 views

EUVD-2026-42255

FreeRDP before 3.22.0 contains a use-after-free vulnerability in dvcmanchannelclose and dvcmancallonreceive due to improper synchronization of channelcallback access. A malicious RDP server can trigger a race condition by sending DYNVCDATA and DYNVCCLOSE messages concurrently, causing...

8.3CVSS6.6AI score0.00361EPSS
SaveExploits1References2
OSV
OSV
added 2026/07/08 1:49 p.m.10 views

CVE-2026-56297 FreeRDP - Use-After-Free via Race Condition in DRDYNVC Channel Callback

FreeRDP before 3.22.0 contains a use-after-free vulnerability in dvcmanchannelclose and dvcmancallonreceive due to improper synchronization of channelcallback access. A malicious RDP server can trigger a race condition by sending DYNVCDATA and DYNVCCLOSE messages concurrently, causing...

8.3CVSS6.5AI score
SaveExploits0References4
CVE
CVE
added 2026/07/08 1:49 p.m.25 views

CVE-2026-56297

FreeRDP

8.3CVSS6.6AI score0.00361EPSS
SaveExploits1References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/08 1:49 p.m.9 views

CVE-2026-56297

FreeRDP before 3.22.0 contains a use-after-free vulnerability in dvcmanchannelclose and dvcmancallonreceive due to improper synchronization of channelcallback access. A malicious RDP server can trigger a race condition by sending DYNVCDATA and DYNVCCLOSE messages concurrently, causing...

8.3CVSS6.6AI score0.00361EPSS
SaveExploits1References3
Rows per page
Query Builder