CVE-2026-41521

xrdp is an open source RDP server. Versions 0.10.6 and prior contain an integer overflow vulnerability when processing screen update messages within the vnc-any connection mode. A malicious remote VNC server can send crafted image dimensions that cause an integer overflow during memory buffer siz...

CVE-2026-41252

xrdp is an open source RDP server. Versions 0.10.6 and prior contain a missing bounds check in xrdp, which allows a heap-based buffer overflow when operating in vnc-any mode. The issue occurs during the handling of RFB protocol color map messages from a VNC server, where incoming color indices ar...

PT-2026-61003

Name of the Vulnerable Software and Affected Versions xrdp versions prior to 0.10.6.1 Description A missing bounds check in the server occurs when operating in vnc-any mode during the handling of RFB protocol color map messages from a VNC server. Because incoming color indices are not properly...