neutrinolabs xrdp

• CVE-2026-55639 Medium 5.3 xrdp: Out-of-bounds read in GCC Conference Create Request CS_SECURITY processing (xrdp_sec_process_mcs_data_CS_SECURITY) 0.4%
• CVE-2026-55626 High 8.0 xrdp: No authentication required with Xvnc backend on RHEL 9 0.2%
• CVE-2026-55238 Medium 5.3 xrdp: Malformed Confirm Active capability sets cause out-of-bounds reads 0.5%
• CVE-2026-54538 High 7.5 xrdp: Pre-auth infinite loop via totalLength=0 in TS_SHARECONTROLHEADER 0.7%
• CVE-2026-44978 Medium 5.3 xrdp: Unchecked FIPS padding length in standard RDP Security causes heap out-of-bounds read in HMAC verification 0.5%
• CVE-2026-44178 High 8.8 xrdp: Channel Data Forwarding Fixed-Size Buffer Overflow 0.9%
• CVE-2026-55645 Medium 6.5 xrdp: Out-of-bounds read in Client Control PDU processing (xrdp_rdp_process_data_control) 0.5%
• CVE-2026-42218 Medium 5.3 XRDP is vulnerable to a server timing attack, leading to user enumeration 0.4%
• CVE-2026-41521 High 8.2 xrdp: lib_framebuffer_update Has Integer Overflow Heap Info Leak & ASLR Bypass 0.7%
• CVE-2026-41252 Critical 9.8 xrdp: lib_palette_update Heap Buffer Overflow & RCE 1.1%
• CVE-2026-35512 High 8.7 xrdp: Heap buffer overflow in EGFX channel 0.6%
• CVE-2026-33689 High 8.7 xrdp: Pre-authentication out-of-bounds reads in channel parsers 0.5%
• CVE-2026-33145 Medium 6.3 xrdp: Authenticated RCE via unsanitized AlternateShell execution in xrdp-sesman 0.4%
• CVE-2026-32624 Medium 6.3 xrdp: Heap buffer overflow in xrdp_sec_process_logon_info() via incorrect g_strncat length calculation 0.4%
• CVE-2026-33516 High 7.7 xrdp: Pre-authentication out-of-bounds reads in RDP capability and channel parsers 0.4%
• CVE-2026-32623 High 7.7 xrdp: Heap buffer overflow in NeutrinoRDP channel reassembly 0.5%
• CVE-2026-32105 Critical 9.3 xrdp: RDP MAC signature (dataSignature) never verified on receive — integrity bypass in non-TLS mode 0.2%
• CVE-2026-32107 High 8.8 xrdp: Fail-open privilege drop in sesexec — child processes may execute as root if setuid fails 0.2%
• CVE-2025-68670 Critical 9.1 xrdp improperly checks bounds of domain string length, which leads to Stack-based Buffer Overflow 1.4%
• CVE-2024-39917 High 7.2 xrdp allows an ininite number of login attempts 0.6%
• CVE-2023-42822 Medium 4.6 Unchecked access to font glyph info in xrdp 0.7%
• CVE-2023-40184 Low 2.6 Improper handling of session establishment errors in xrdp 0.9%
• CVE-2022-23477 Critical 9.1 Buffer Overflow in xrdp 0.9%
• CVE-2022-23484 High 8.2 Integer Overflow in xrdp 0.8%
• CVE-2022-23483 High 7.5 Out-of-Bound Read in libxrdp 0.9%
• CVE-2022-23482 None 0.0 Out-of-Bound Read in xrdp 0.8%
• CVE-2022-23481 None 0.0 Out-of-Bound Read in xrdp 0.8%
• CVE-2022-23480 Critical 9.1 Buffer Overflow in xrdp 0.9%
• CVE-2022-23479 Critical 9.1 Buffer Overflow occurs in xrdp 0.9%
• CVE-2022-23478 Critical 9.1 Out of Bound Write in xrdp 0.9%
• CVE-2022-23468 Medium 6.5 Buffer Overflow in xrdp 0.8%
• CVE-2022-23493 Critical 9.1 Out of Bound Read in xrdp 1.0%
• CVE-2022-23613 High 7.8 Privilege escalation on xrdp 0.5%
• CVE-2020-4044 High 7.5 Local users can perform a buffer overflow attack against the xrdp-sesman service and then impersonate it 2.3%