Lucene search
+L

11 matches found

Tenable Nessus
Tenable Nessus
•added 2026/04/16 12:00 a.m.•16 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: freerdp (UTSA-2026-007209)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007209 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a heap use-after-free occurs in irpthreadfunc because the IRP is freed by...

9.8CVSS7.3AI score0.00531EPSS
SaveExploits1References4
osv_oesa
osv_oesa
•added 2026/03/06 11:10 a.m.•19 views

OESA-2026-1519 freerdp security update

FreeRDP is a client implementation of the Remote Desktop Protocol RDP that follows Microsoft's open specifications. This package provides the client applications xfreerdp. Security Fixes: A malicious server can trigger a client-side heap buffer overflow, causing a crash DoS and potential heap...

9.8CVSS8AI score0.00922EPSS
SaveExploits18References28
Tenable Nessus
Tenable Nessus
•added 2026/03/04 12:00 a.m.•15 views

SUSE SLES12 Security Update : freerdp (SUSE-SU-2026:0762-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0762-1 advisory. - CVE-2026-22855: heap-buffer-overflow in smartcardunpacksetattribcall bsc1256721. - CVE-2026-22857: heap-use-after-free in irpthreadfunc...

9.8CVSS7.6AI score0.00888EPSS
SaveExploits5References34
SUSE Linux
SUSE Linux
•added 2026/03/03 12:40 p.m.•25 views

Security update for freerdp

This update for freerdp fixes the following issues: CVE-2026-22855: heap-buffer-overflow in smartcardunpacksetattribcall bsc1256721. CVE-2026-22857: heap-use-after-free in irpthreadfunc bsc1256723. CVE-2026-23533: improper validation can lead to heap buffer overflow in cleardecompressresidualdata...

7.7CVSS7.3AI score0.00888EPSS
SaveExploits6References24
BDU FSTEC
BDU FSTEC
•added 2026/01/20 12:00 a.m.•26 views

FreeRDP RDP Code Execution

The vulnerability of the irpthreadfunc function in the RDP client of FreeRDP is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure...

7.6CVSS8.8AI score0.00531EPSS
SaveExploits1References7Affected Software3
NVD
NVD
•added 2026/01/14 6:16 p.m.•26 views

CVE-2026-22857

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a heap use-after-free occurs in irpthreadfunc because the IRP is freed by irp-Complete and then accessed again on the error path. This vulnerability is fixed in 3.20.1...

9.8CVSS0.00531EPSS
SaveExploits1References2
osv_ubuntu
osv_ubuntu
•added 2026/01/14 6:16 p.m.•25 views

UBUNTU-CVE-2026-22857

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a heap use-after-free occurs in irpthreadfunc because the IRP is freed by irp-Complete and then accessed again on the error path. This vulnerability is fixed in 3.20.1...

9.8CVSS7.7AI score0.00531EPSS
SaveExploits1References5
UbuntuCve
UbuntuCve
•added 2026/01/14 6:16 p.m.•18 views

CVE-2026-22857

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a heap use-after-free occurs in irpthreadfunc because the IRP is freed by irp-Complete and then accessed again on the error path. This vulnerability is fixed in 3.20.1...

9.8CVSS7.7AI score0.00531EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2026/01/14 5:53 p.m.•63 views

CVE-2026-22857 FreeRDP has a heap-use-after-free in irp_thread_func

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a heap use-after-free occurs in irpthreadfunc because the IRP is freed by irp-Complete and then accessed again on the error path. This vulnerability is fixed in 3.20.1...

7.7CVSS0.00531EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2026/01/14 5:53 p.m.•11 views

CVE-2026-22857 FreeRDP has a heap-use-after-free in irp_thread_func

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a heap use-after-free occurs in irpthreadfunc because the IRP is freed by irp-Complete and then accessed again on the error path. This vulnerability is fixed in 3.20.1...

7.7CVSS7.7AI score0.00531EPSS
SaveExploits1References2
Debian CVE
Debian CVE
•added 2026/01/14 5:53 p.m.•25 views

CVE-2026-22857

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a heap use-after-free occurs in irpthreadfunc because the IRP is freed by irp-Complete and then accessed again on the error path. This vulnerability is fixed in 3.20.1...

9.8CVSS7.7AI score0.00531EPSS
SaveExploits1
Rows per page
Query Builder