Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

FreeRDP — Vulnerabilities & Security Advisories 211

Browse all 211 CVE security advisories affecting FreeRDP. AI-powered Chinese analysis, POCs, and references for each vulnerability.

FreeRDP is an open-source Remote Desktop Protocol client and server implementation designed to facilitate cross-platform remote desktop connectivity. Its widespread adoption in enterprise and personal environments has made it a frequent target for security researchers, resulting in a significant number of recorded Common Vulnerabilities and Exposures. Historically, the codebase has been susceptible to critical remote code execution flaws, often stemming from improper input validation within the RDP protocol parsing logic. These vulnerabilities frequently allow attackers to execute arbitrary commands or escalate privileges on affected systems without user interaction. While the project maintains an active development cycle to patch these issues, the sheer volume of past incidents highlights the complexity of implementing secure network protocols. Continuous monitoring and timely updates remain essential for mitigating risks associated with its extensive feature set and legacy code dependencies.

Found 211 results / 211 Clear Filters
Top products by FreeRDP: FreeRDP
CVE ID Title CVSS Severity Published
CVE-2026-55191 FreeRDP: Heap-buffer-overflow write in AVC444 YUV buffer allocation — FreeRDP CWE-122 8.7 High 2026-08-19
CVE-2026-73242 FreeRDP: Kerberos GSS Wrap-token `EC` field is unbounded, causing an out-of-bounds decrypt in `kerberos_DecryptMessage` — FreeRDP CWE-122 8.3 High 2026-08-11
CVE-2026-73241 FreeRDP: RDSTLS server authentication bypass: a credential-less Capabilities PDU is accepted at the auth step (fail-open `resultCode`) — FreeRDP CWE-287 8.3 High 2026-08-11
CVE-2026-68580 FreeRDP before 3.29.0 Integer Overflow via Audio Input Channel — FreeRDP CWE-122 7.5 High 2026-08-02
CVE-2026-68579 FreeRDP before 3.30.0 Heap Overflow via CliprdrStream_Read — FreeRDP CWE-787 9.6 Critical 2026-08-02
CVE-2026-67289 FreeRDP before 3.29.0 HTTP Proxy Request Injection via Redirection — FreeRDP CWE-113 9.8 Critical 2026-08-01
CVE-2026-67296 FreeRDP before 3.29.0 Denial of Service via RDPEI PDU — FreeRDP CWE-20 7.5 High 2026-08-01
CVE-2026-66401 FreeRDP before 3.29.0 Out-of-Bounds Read via UVC H.264 — FreeRDP CWE-125 2.1 Low 2026-08-01
CVE-2026-67291 FreeRDP before 3.29.0 Heap Out-of-Bounds Read via GLYPH_FRAGMENT_ADD — FreeRDP CWE-125 7.5 High 2026-08-01
CVE-2026-67299 FreeRDP before 3.29.0 Use-After-Free via WindowIcon async message — FreeRDP CWE-416 7.5 High 2026-08-01
CVE-2026-67294 FreeRDP before 3.29.0 TLS Certificate EKU Bypass — FreeRDP CWE-295 5.9 Medium 2026-08-01
CVE-2026-67298 FreeRDP 3.28.0 Heap Buffer Overflow via RAIL orderLength Underflow — FreeRDP CWE-191 7.5 High 2026-08-01
CVE-2026-67288 FreeRDP before 3.29.0 Denial of Service via smartcard cache — FreeRDP CWE-476 7.5 High 2026-08-01
CVE-2026-67306 FreeRDP before 3.29.0 Out-of-Bounds Read via Planar RLE — FreeRDP CWE-125 5.4 Medium 2026-08-01
CVE-2026-67295 FreeRDP before 3.29.0 Path Traversal via drive redirection — FreeRDP CWE-22 6.3 Medium 2026-08-01
CVE-2026-67303 FreeRDP before 3.29.0 Denial of Service via serial DeviceControl — FreeRDP CWE-617 4.3 Medium 2026-08-01
CVE-2026-67300 FreeRDP before 3.29.0 Use-After-Free via async message proxy — FreeRDP CWE-416 7.5 High 2026-08-01
CVE-2026-67292 FreeRDP before 3.29.0 WebSocket Ping Buffer Over-disclosure — FreeRDP CWE-130 6.5 Medium 2026-08-01
CVE-2026-67302 FreeRDP rdpecam StartStreamsRequest divide-by-zero denial of service — FreeRDP CWE-369 4.3 Medium 2026-08-01
CVE-2026-66402 FreeRDP before 3.29.0 TLS Certificate Identity Validation Bypass — FreeRDP CWE-295 9.8 Critical 2026-08-01
CVE-2026-67293 FreeRDP before 3.29.0 Improper Certificate Hostname Validation — FreeRDP CWE-295 4.2 Medium 2026-08-01
CVE-2026-67301 FreeRDP before 3.29.0 Out-of-bounds Read via Polygon async message-proxy — FreeRDP CWE-125 7.5 High 2026-08-01
CVE-2026-67297 FreeRDP before 3.29.0 Resource Exhaustion via chunked HTTP response — FreeRDP CWE-770 7.5 High 2026-08-01
CVE-2026-67305 FreeRDP Windows Client before 3.29.0 Heap Buffer Overflow via Cliprdr — FreeRDP CWE-122 9.4 Critical 2026-08-01
CVE-2026-67290 FreeRDP before 3.29.0 Heap Out-of-Bounds Read via TSMF — FreeRDP CWE-125 7.5 High 2026-08-01
CVE-2026-67304 FreeRDP before 3.29.0 NULL Dereference via smartcard cleanup — FreeRDP CWE-476 7.5 High 2026-08-01
CVE-2026-64624 FreeRDP RDP File Parser Remote Code Execution via CLI Options — FreeRDP CWE-88 7.8 High 2026-07-20
CVE-2026-64621 FreeRDP before 3.28.0 Double-Free via selectedmonitors — FreeRDP CWE-415 7.3 High 2026-07-20
CVE-2026-64620 FreeRDP before 3.28.0 Heap Buffer Overflow via crypto_rsa_common — FreeRDP CWE-122 9.8 Critical 2026-07-20
CVE-2026-57156 FreeRDP: Integer overflow leading to heap buffer overflow in Orders Delta Points parsing — FreeRDP CWE-122 - - 2026-07-10

This page lists every published CVE security advisory associated with FreeRDP. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.