Skip to content
FFreeRDP
Products
| Product | CVEs | Exploited | Latest |
| FreeRDP | 316 | – | Nov 4, 2026 |
Exploited and recent CVEs
-
CVE-2026-121964
High 7.5
FreeRDP before 3.32.2 Heap Buffer Overflow via rpc_client_recv_fragment
0.6%
-
CVE-2026-121963
Medium 5.9
FreeRDP before 3.32.2 Use-After-Free via Dynamic rdpsnd Channel Close
0.3%
-
CVE-2026-121962
High 8.1
FreeRDP before 3.32.2 Heap Buffer Overflow via Early User Authorization Read
0.3%
-
CVE-2026-121961
Medium 5.9
FreeRDP before 3.32.2 Use-After-Free via DRDYNVC Tracker Race
0.3%
-
CVE-2026-121960
High 7.5
FreeRDP before 3.32.2 Unauthenticated Denial of Service via CredSSP TSRequest
0.6%
-
CVE-2026-121959
Medium 6.5
FreeRDP before 3.32.2 Infinite Loop via Truncated WebSocket Frame
0.3%
-
CVE-2026-121958
High 8.8
FreeRDP through 3.32.1 Heap Out-of-Bounds Write via RDPGFX HashTable_GetKeys
0.3%
-
CVE-2026-121957
High 7.5
FreeRDP before 3.32.2 Use-After-Free via RDPGFX ResetGraphics Race
0.2%
-
CVE-2026-121956
High 7.5
FreeRDP before 3.32.2 Double Free in WinPR Kerberos retrieveSomeTgt
0.4%
-
CVE-2026-121955
High 7.5
FreeRDP before 3.32.2 Use-After-Free in Smartcard Emulation ReleaseContext
0.3%
-
CVE-2026-121954
Medium 6.5
FreeRDP before 3.32.2 Heap Out-of-Bounds Write in Planar Codec
0.4%
-
CVE-2026-121953
Critical 9.8
FreeRDP before 3.32.2 Use-After-Free via rdpgfx Dynamic Virtual Channel Close
0.6%
-
CVE-2026-121952
Critical 9.8
FreeRDP before 3.32.2 Proxy Out-of-Bounds Write via Bitmap Cache v2 Capability
0.5%
-
CVE-2026-121951
High 7.5
FreeRDP 3.0.0 before 3.32.2 Denial of Service via Slow-Path Input Event
0.4%
-
CVE-2026-121950
Medium 6.5
FreeRDP before 3.32.2 Heap Overflow via RDPGFX CREATE_SURFACE Integer Wrap
0.3%
-
CVE-2026-121412
Medium 6.5
FreeRDP 3.0.0 before 3.32.2 Proxy Memory Exhaustion via DVC Reassembly
0.4%
-
CVE-2026-121411
Low 3.1
FreeRDP before 3.32.2 X11 Client Abort via RDPGFX Scaled Output Geometry
0.2%
-
CVE-2026-121410
Medium 4.3
FreeRDP before 3.32.2 Denial of Service via RDPGFX ALPHA WIRETOSURFACE_2
0.2%
-
CVE-2026-121409
Medium 5.9
FreeRDP before 3.32.2 Denial of Service via Oversized X.224 Routing Token
0.3%
-
CVE-2026-121408
Medium 5.3
FreeRDP before 3.32.2 Use-After-Free via USB Redirection Control Channel
0.2%
-
CVE-2026-121407
Medium 6.5
FreeRDP before 3.32.2 Shadow Server Denial of Service via remdesk Channel
0.3%
-
CVE-2026-121406
Medium 4.3
FreeRDP before 3.32.2 Client Denial of Service via Zero-Output ZGFX Payload
0.2%
-
CVE-2026-121405
Medium 4.3
FreeRDP before 3.32.2 Memory Exhaustion via Serial RDPDR Device Control
0.3%
-
CVE-2026-121404
Medium 6.5
FreeRDP before 3.32.2 Shadow Server CPU Exhaustion via Zero-Length DVC DATA
0.4%
-
CVE-2026-121403
Medium 4.3
FreeRDP before 3.32.2 Denial of Service via Malformed Drive IRP
0.2%
-
CVE-2026-121402
Medium 6.5
FreeRDP before 3.32.2 X11 Client Crash via Zero-Width RDPGFX ResetGraphics
0.3%
-
CVE-2026-121401
Medium 4.3
FreeRDP before 3.32.2 Denial of Service via RD Gateway extended-auth packet
0.3%
-
CVE-2026-121400
Medium 6.5
FreeRDP before 3.32.2 CPU Exhaustion via RDG Control Packet
0.3%
-
CVE-2026-121399
Medium 4.3
FreeRDP before 3.32.2 Memory Exhaustion via RD Gateway Packet Length
0.3%
-
CVE-2026-121398
Medium 5.9
FreeRDP before 3.32.2 Use-After-Free via dyn-channel-dump Module
0.2%