8 matches found
KB5082200: Windows 10 version 21H2 / Windows 10 Version 22H2 Security Update (April 2026)
The remote Windows host is missing security update 5082200. It is, therefore, affected by multiple vulnerabilities - Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network. CVE-2026-33824 - Protection mechanism failure in Windows Shell allows an...
CVE-2026-33986
A flaw was found in FreeRDP, a free implementation of the Remote Desktop Protocol. A remote attacker could exploit a memory allocation vulnerability in the H.264 codec by enticing a user to connect to a malicious server. This flaw occurs when internal buffer dimensions are incorrectly updated aft...
CVE-2026-25954
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, xfrailserverlocalmovesize dereferences a freed xfAppWindow pointer because xfrailgetwindow returns an unprotected pointer from the railWindows hash table, and the main thread can concurrently delete the wind...
EUVD-2025-16145
Malicious code in bioql PyPI...
EUVD-2024-47138
Malicious code in bioql PyPI...
FreeRDP autodetect_recv_bandwidth_measure_results Disclosure DoS
Vulnerability of the autodetectrecvbandwidthmeasureresults function in RDP clients of FreeRDP when reading beyond memory boundaries. Exploitation of this vulnerability can allow a malicious actor to disclose sensitive information or cause service failures...
FreeRDP RDP DoS
The vulnerability of the gdimultiopaquerect function in the RDP client FreeRDP is related to the operation of writing data beyond the buffer boundaries when processing the multiopaquerect-numRectangles parameter. Exploiting this vulnerability can allow a remote attacker to cause service failure...
SUSE CVE-2022-39347
FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing path canonicalization and base path check for drive channel. A malicious server can trick a FreeRDP based client to read files outside the shared directory. This issue has been addressed in...