FreeRDP

Products

ProductCVEsExploitedLatest
FreeRDP316–Nov 4, 2026

Exploited and recent CVEs

  • CVE-2026-121964 High 7.5 FreeRDP before 3.32.2 Heap Buffer Overflow via rpc_client_recv_fragment 0.6%
  • CVE-2026-121963 Medium 5.9 FreeRDP before 3.32.2 Use-After-Free via Dynamic rdpsnd Channel Close 0.3%
  • CVE-2026-121962 High 8.1 FreeRDP before 3.32.2 Heap Buffer Overflow via Early User Authorization Read 0.3%
  • CVE-2026-121961 Medium 5.9 FreeRDP before 3.32.2 Use-After-Free via DRDYNVC Tracker Race 0.3%
  • CVE-2026-121960 High 7.5 FreeRDP before 3.32.2 Unauthenticated Denial of Service via CredSSP TSRequest 0.6%
  • CVE-2026-121959 Medium 6.5 FreeRDP before 3.32.2 Infinite Loop via Truncated WebSocket Frame 0.3%
  • CVE-2026-121958 High 8.8 FreeRDP through 3.32.1 Heap Out-of-Bounds Write via RDPGFX HashTable_GetKeys 0.3%
  • CVE-2026-121957 High 7.5 FreeRDP before 3.32.2 Use-After-Free via RDPGFX ResetGraphics Race 0.2%
  • CVE-2026-121956 High 7.5 FreeRDP before 3.32.2 Double Free in WinPR Kerberos retrieveSomeTgt 0.4%
  • CVE-2026-121955 High 7.5 FreeRDP before 3.32.2 Use-After-Free in Smartcard Emulation ReleaseContext 0.3%
  • CVE-2026-121954 Medium 6.5 FreeRDP before 3.32.2 Heap Out-of-Bounds Write in Planar Codec 0.4%
  • CVE-2026-121953 Critical 9.8 FreeRDP before 3.32.2 Use-After-Free via rdpgfx Dynamic Virtual Channel Close 0.6%
  • CVE-2026-121952 Critical 9.8 FreeRDP before 3.32.2 Proxy Out-of-Bounds Write via Bitmap Cache v2 Capability 0.5%
  • CVE-2026-121951 High 7.5 FreeRDP 3.0.0 before 3.32.2 Denial of Service via Slow-Path Input Event 0.4%
  • CVE-2026-121950 Medium 6.5 FreeRDP before 3.32.2 Heap Overflow via RDPGFX CREATE_SURFACE Integer Wrap 0.3%
  • CVE-2026-121412 Medium 6.5 FreeRDP 3.0.0 before 3.32.2 Proxy Memory Exhaustion via DVC Reassembly 0.4%
  • CVE-2026-121411 Low 3.1 FreeRDP before 3.32.2 X11 Client Abort via RDPGFX Scaled Output Geometry 0.2%
  • CVE-2026-121410 Medium 4.3 FreeRDP before 3.32.2 Denial of Service via RDPGFX ALPHA WIRETOSURFACE_2 0.2%
  • CVE-2026-121409 Medium 5.9 FreeRDP before 3.32.2 Denial of Service via Oversized X.224 Routing Token 0.3%
  • CVE-2026-121408 Medium 5.3 FreeRDP before 3.32.2 Use-After-Free via USB Redirection Control Channel 0.2%
  • CVE-2026-121407 Medium 6.5 FreeRDP before 3.32.2 Shadow Server Denial of Service via remdesk Channel 0.3%
  • CVE-2026-121406 Medium 4.3 FreeRDP before 3.32.2 Client Denial of Service via Zero-Output ZGFX Payload 0.2%
  • CVE-2026-121405 Medium 4.3 FreeRDP before 3.32.2 Memory Exhaustion via Serial RDPDR Device Control 0.3%
  • CVE-2026-121404 Medium 6.5 FreeRDP before 3.32.2 Shadow Server CPU Exhaustion via Zero-Length DVC DATA 0.4%
  • CVE-2026-121403 Medium 4.3 FreeRDP before 3.32.2 Denial of Service via Malformed Drive IRP 0.2%
  • CVE-2026-121402 Medium 6.5 FreeRDP before 3.32.2 X11 Client Crash via Zero-Width RDPGFX ResetGraphics 0.3%
  • CVE-2026-121401 Medium 4.3 FreeRDP before 3.32.2 Denial of Service via RD Gateway extended-auth packet 0.3%
  • CVE-2026-121400 Medium 6.5 FreeRDP before 3.32.2 CPU Exhaustion via RDG Control Packet 0.3%
  • CVE-2026-121399 Medium 4.3 FreeRDP before 3.32.2 Memory Exhaustion via RD Gateway Packet Length 0.3%
  • CVE-2026-121398 Medium 5.9 FreeRDP before 3.32.2 Use-After-Free via dyn-channel-dump Module 0.2%