KB5082200: Windows 10 version 21H2 / Windows 10 Version 22H2 Security Update (April 2026)

The remote Windows host is missing security update 5082200. It is, therefore, affected by multiple vulnerabilities - Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network. CVE-2026-33824 - Protection mechanism failure in Windows Shell allows an...

CVE-2026-33986

A flaw was found in FreeRDP, a free implementation of the Remote Desktop Protocol. A remote attacker could exploit a memory allocation vulnerability in the H.264 codec by enticing a user to connect to a malicious server. This flaw occurs when internal buffer dimensions are incorrectly updated aft...

CVE-2026-25954

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, xfrailserverlocalmovesize dereferences a freed xfAppWindow pointer because xfrailgetwindow returns an unprotected pointer from the railWindows hash table, and the main thread can concurrently delete the wind...

EUVD-2025-16145

Malicious code in bioql PyPI...

EUVD-2024-47138

Malicious code in bioql PyPI...

Vulnerability of the autodetect_recv_bandwidth_measure_results function in the RDP client FreeRDP, which allows a hacker to disclose protected information or cause service failure.

Vulnerability of the autodetectrecvbandwidthmeasureresults function in RDP clients of FreeRDP when reading beyond memory boundaries. Exploitation of this vulnerability can allow a malicious actor to disclose sensitive information or cause service failures...

The vulnerability of the gdi_multi_opaque_rect() function in the RDP client of FreeRDP, which allows a intruder to cause a service failure.

The vulnerability of the gdimultiopaquerect function in the RDP client FreeRDP is related to the operation of writing data beyond the buffer boundaries when processing the multiopaquerect-numRectangles parameter. Exploiting this vulnerability can allow a remote attacker to cause service failure...

SUSE CVE-2022-39347

FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing path canonicalization and base path check for drive channel. A malicious server can trick a FreeRDP based client to read files outside the shared directory. This issue has been addressed in...