Oracle Linux 7 : freerdp (ELSA-2026-68707)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-68707 advisory. - Backport fix for CVE-2026-55192 Orabug: 40040632 - Backport fix for CVE-2026-55194 Orabug: 40040632 - Backport fix for CVE-2026-64624 Orabug: 399648...

RHEL 8 : freerdp (RHSA-2026:73068)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:73068 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to RDP serve...

Amazon Linux 2 : freerdp (ALAS-2026-3938)

The version of freerdp installed on the remote host is prior to 2.11.7-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3938 advisory. A flaw was found in FreeRDP. This vulnerability allows a remote attacker with low privileges to disclose sensitive...

RHEL 9 : freerdp (RHSA-2026:72481)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:72481 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to RDP serve...

Ubuntu 24.04 LTS / 26.04 LTS : FreeRDP vulnerabilities (USN-8836-1)

The remote Ubuntu 24.04 LTS / 26.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8836-1 advisory. It was discovered that FreeRDP contained multiple security issues. An attacker could possibly use these issues to obtain sensitive information, cause...

Fedora 45 : freerdp (2026-ff8f6f4444)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-ff8f6f4444 advisory. Update to 3.32.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

RHEL 8 : freerdp (RHSA-2026:73026)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:73026 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to RDP serve...

RHEL 9 : freerdp (RHSA-2026:72479)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:72479 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to RDP serve...

RHEL 8 : freerdp (RHSA-2026:73027)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:73027 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to RDP serve...

ANT-2026-K9VH6KBR · freerdp/freerdp · Heap Buffer Overflow

heap-buffer-overflow high CVE-2026-64620 GHSA-pjqx-v446-x7fc Severity Claude high · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-K9VH6KBR: Pre-auth...

ANT-2026-EWM7B5QP · freerdp/freerdp · Heap Buffer Overflow

heap-buffer-overflow high CVE-2026-63633 GHSA-72j9-356v-88xq Severity Claude high · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-EWM7B5QP: Opus aud...

ANT-2026-TVG98XT0 · freerdp/freerdp · Authentication Bypass

auth-bypass high CVE-2026-73241 GHSA-rqgv-grx4-xm6x Severity Claude high · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-TVG98XT0: RDSTLS server...

ANT-2026-S1E4Y69J · freerdp/freerdp · Out-of-Bounds Write / Memory Corruption

oob-write high CVE-2026-73242 GHSA-vv64-95pc-vj9v Severity Claude high · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-S1E4Y69J: Kerberos wrap-token...

ANT-2026-XQVPKKPB · freerdp/freerdp · Double Free / Memory Corruption

double-free high CVE-2026-64621 GHSA-f27x-frr8-j9hc Severity Claude high · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-XQVPKKPB: Double-free of...

ANT-2026-TAV704VS · freerdp/freerdp · Argument Injection / Remote Code Execution

rce high CVE-2026-64624 GHSA-rq8f-9xjh-pr3m Severity Claude high · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-TAV704VS: .rdp file lines injected ...

ANT-2026-ZPF40VKS · freerdp/freerdp · Double Free

double-free high CVE-2026-63652 GHSA-9g22-w2gr-vcmp Severity Claude high · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-ZPF40VKS: Audio server...

ANT-2026-D5W3VWPN · freerdp/freerdp · Heap Buffer Overflow

heap-buffer-overflow high CVE-2026-68579 GHSA-m37j-jcr2-8gcc Severity Claude high · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-D5W3VWPN: Windows...

FreeRDP: FreeRDP: Remote code execution or client crash via malicious TS Gateway

A flaw was found in FreeRDP. FreeRDP clients using TS Gateway are vulnerable to a heap-buffer-overflow. A malicious gateway can send a specially crafted response fragment, causing the client to write beyond its allocated buffer. This can lead to a client crash, resulting in a Denial of Service Do...

Important: Red Hat Security Advisory: freerdp security update

An update for freerdp is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Important: Red Hat Security Advisory: freerdp security update

An update for freerdp is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...