CVE-2026-64621

FreeRDP before 3.28.0 affected 3.x through 3.27.1 contains a double-free vulnerability in freerdpclientrdpfileapplytosettings client/common/file.c when parsing the selectedmonitors field of a .rdp connection file. The MonitorIds array is allocated through the settings object, and a raw non-owning...

CVE-2026-64621

FreeRDP before 3.28.0 (affected 3.x through 3.27.1) contains a size-controlled double-free in freerdp_client_rdp_file_apply_to_settings() when parsing the selectedmonitors field in an .rdp file. The MonitorIds array is allocated via the settings object and a raw pointer is freed on the strtoul er...

SUSE CVE-2011-0901

Multiple stack-based buffer overflows in the tsclaunchremote function src/support.c in Terminal Server Client tsclient 0.150, and possibly other versions, allow user-assisted remote attackers to execute arbitrary code via a .RDP file with a long 1 username, 2 password, or 3 domain argument. NOTE:...