Lucene search
+L

18 matches found

Tenable Nessus
Tenable Nessus
•added 2026/10/26 12:00 a.m.•9 views

CentOS Linux 7 [TuxCare] Security Update: freerdp / freerdp-devel / freerdp-libs / libwinpr / libwinpr-devel Multiple Vulnerabilities (CENTOS7:CLSA-2026:1792805176)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1792805176 advisory. - FreeRDP from 2.0.0 before 3.32.0 contains an insecure permission vulnerability in winpr-makecert that creates unencrypted private keys...

8.3CVSS8.4AI score0.00393EPSS
SaveExploits4References7
Tenable Nessus
Tenable Nessus
•added 2026/10/25 12:00 a.m.•19 views

Amazon Linux 2023 : freerdp, freerdp-devel, freerdp-libs (ALAS2023-2026-3307)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3307 advisory. FreeRDP 3.11.0 before 3.32.1 contains a reachable assertion vulnerability in urbisochtransfer that allows malicious RDP servers to crash clients by sending unvalidated OutputBufferSize values...

8.8CVSS7.2AI score0.00515EPSS
SaveExploits48References114
Tenable Nessus
Tenable Nessus
•added 2026/10/21 12:00 a.m.•9 views

Linux Distros Unpatched Vulnerability : CVE-2026-109244

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP from 2.0.0 before 3.32.0 contains an insecure permission vulnerability in winpr-makecert that creates unencrypted private keys without owner-only file...

6.8CVSS5.9AI score0.0014EPSS
SaveExploits1References4
SUSE CVE
SUSE CVE
•added 2026/10/13 4:35 p.m.•9 views

SUSE CVE-2026-109244

FreeRDP from 2.0.0 before 3.32.0 contains an insecure permission vulnerability in winpr-makecert that creates unencrypted private keys without owner-only file modes. Local users on multi-user Unix hosts can read world-readable key files or open PFX files protected by the hard-coded default passwo...

6.8CVSS5.9AI score0.0014EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2026/10/13 11:36 a.m.•11 views

CVE-2026-109244

A flaw was found in FreeRDP. The winpr-makecert utility creates unencrypted private key and certificate archive files without restricting permissions to the file owner, and it assigns a hardcoded default password to exported archives. A local user on a multi-user system can exploit this flaw to...

6.8CVSS5.7AI score0.0014EPSS
SaveExploits1References5
NVD
NVD
•added 2026/10/12 5:17 p.m.•13 views

CVE-2026-109244

FreeRDP from 2.0.0 before 3.32.0 contains an insecure permission vulnerability in winpr-makecert that creates unencrypted private keys without owner-only file modes. Local users on multi-user Unix hosts can read world-readable key files or open PFX files protected by the hard-coded default passwo...

6.8CVSS0.0014EPSS
SaveExploits1References2
osv_debian
osv_debian
•added 2026/10/12 5:17 p.m.•26 views

DEBIAN-CVE-2026-109244

FreeRDP from 2.0.0 before 3.32.0 contains an insecure permission vulnerability in winpr-makecert that creates unencrypted private keys without owner-only file modes. Local users on multi-user Unix hosts can read world-readable key files or open PFX files protected by the hard-coded default passwo...

6.8CVSS5.9AI score0.0014EPSS
SaveExploits1References1
osv_ubuntu
osv_ubuntu
•added 2026/10/12 5:17 p.m.•10 views

UBUNTU-CVE-2026-109244

FreeRDP from 2.0.0 before 3.32.0 contains an insecure permission vulnerability in winpr-makecert that creates unencrypted private keys without owner-only file modes. Local users on multi-user Unix hosts can read world-readable key files or open PFX files protected by the hard-coded default passwo...

6.8CVSS5.9AI score0.0014EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
•added 2026/10/12 5:17 p.m.•10 views

CVE-2026-109244

FreeRDP from 2.0.0 before 3.32.0 contains an insecure permission vulnerability in winpr-makecert that creates unencrypted private keys without owner-only file modes. Local users on multi-user Unix hosts can read world-readable key files or open PFX files protected by the hard-coded default passwo...

6.8CVSS5.9AI score0.0014EPSS
SaveExploits1References3
osv_cve
osv_cve
•added 2026/10/12 4:04 p.m.•23 views

CVE-2026-109244 FreeRDP 2.0.0 before 3.32.0 Insecure Private Key Permissions in winpr-makecert

FreeRDP from 2.0.0 before 3.32.0 contains an insecure permission vulnerability in winpr-makecert that creates unencrypted private keys without owner-only file modes. Local users on multi-user Unix hosts can read world-readable key files or open PFX files protected by the hard-coded default passwo...

6.8CVSS5.9AI score
SaveExploits0References4
EUVD
EUVD
•added 2026/10/12 4:04 p.m.•15 views

EUVD-2026-97688

FreeRDP from 2.0.0 before 3.32.0 contains an insecure permission vulnerability in winpr-makecert that creates unencrypted private keys without owner-only file modes. Local users on multi-user Unix hosts can read world-readable key files or open PFX files protected by the hard-coded default passwo...

6.8CVSS5.9AI score0.0014EPSS
SaveExploits1References2
Mend
Mend
•added 2026/10/12 4:04 p.m.•12 views

CVE-2026-109244

FreeRDP from 2.0.0 before 3.32.0 contains an insecure permission vulnerability in winpr-makecert that creates unencrypted private keys without owner-only file modes. Local users on multi-user Unix hosts can read world-readable key files or open PFX files protected by the hard-coded default passwo...

6.8CVSS5.9AI score0.0014EPSS
SaveExploits1References4
CVE
CVE
•added 2026/10/12 4:04 p.m.•27 views

CVE-2026-109244

FreeRDP versions 2.0.0 through 3.32.0 are vulnerable to an insecure permission flaw in the winpr-makecert component. The root cause is that the utility creates unencrypted private keys without enforcing owner-only file modes. On multi-user Unix hosts , local users can read these world-readable ke...

6.8CVSS5.9AI score0.0014EPSS
SaveExploits1References2Affected Software1
Debian CVE
Debian CVE
•added 2026/10/12 4:04 p.m.•18 views

CVE-2026-109244

FreeRDP from 2.0.0 before 3.32.0 contains an insecure permission vulnerability in winpr-makecert that creates unencrypted private keys without owner-only file modes. Local users on multi-user Unix hosts can read world-readable key files or open PFX files protected by the hard-coded default passwo...

6.8CVSS5.9AI score0.0014EPSS
SaveExploits1
Vulnrichment
Vulnrichment
•added 2026/10/12 4:04 p.m.•6 views

CVE-2026-109244 FreeRDP 2.0.0 before 3.32.0 Insecure Private Key Permissions in winpr-makecert

FreeRDP from 2.0.0 before 3.32.0 contains an insecure permission vulnerability in winpr-makecert that creates unencrypted private keys without owner-only file modes. Local users on multi-user Unix hosts can read world-readable key files or open PFX files protected by the hard-coded default passwo...

6.8CVSS5.9AI score0.0014EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2026/10/12 4:04 p.m.•50 views

CVE-2026-109244 FreeRDP 2.0.0 before 3.32.0 Insecure Private Key Permissions in winpr-makecert

FreeRDP from 2.0.0 before 3.32.0 contains an insecure permission vulnerability in winpr-makecert that creates unencrypted private keys without owner-only file modes. Local users on multi-user Unix hosts can read world-readable key files or open PFX files protected by the hard-coded default passwo...

6.8CVSS0.0014EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2026/10/12 12:00 a.m.•12 views

PT-2026-110661

FreeRDP from 2.0.0 before 3.32.0 contains an insecure permission vulnerability in winpr-makecert that creates unencrypted private keys without owner-only file modes. Local users on multi-user Unix hosts can read world-readable key files or open PFX files protected by the hard-coded default passwo...

6.8CVSS5.9AI score0.0014EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/12 12:00 a.m.•11 views

CVE-2026-109244: Incorrect Permission Assignment for Critical Resource

FreeRDP from 2.0.0 before 3.32.0 contains an insecure permission vulnerability in winpr-makecert that creates unencrypted private keys without owner-only file modes. Local users on multi-user Unix hosts can read world-readable key files or open PFX files protected by the hard-coded default passwo...

6.8CVSS5.9AI score0.0014EPSS
SaveExploits1References2
Rows per page
Query Builder