Vulnerabilities in FreeRDP
322 resultsCVE-2026-91952HIGHFreeRDP before 3.31.0 Denial of Service via pool_decode_rectEPSS 0.4%CVE-2026-91956HIGHFreeRDP before 3.31.0 Out-of-Bounds Read via URBDRCEPSS 0.4%CVE-2026-91959HIGHFreeRDP before 3.31.0 Buffer Over-read via RTS GatewayEPSS 0.4%CVE-2026-91954HIGHFreeRDP before 3.31.0 NULL Pointer Dereference via NSCodecEPSS 0.4%CVE-2026-111382HIGHFreeRDP before 3.32.0 Heap Out-of-Bounds Write in AVC444 YUV444 CombineEPSS 0.4%CVE-2026-121412HIGHFreeRDP 3.0.0 before 3.32.2 Proxy Memory Exhaustion via DVC ReassemblyEPSS 0.4%CVE-2026-121404HIGHFreeRDP before 3.32.2 Shadow Server CPU Exhaustion via Zero-Length DVC DATAEPSS 0.4%CVE-2026-85089HIGHFreeRDP before 3.31.0 Information Disclosure via uninitialized heap memoryEPSS 0.4%CVE-2026-91951HIGHFreeRDP 3.14.0 through 3.30.0 Out-of-bounds Write via urbdrcEPSS 0.4%CVE-2026-67306MEDIUMFreeRDP before 3.29.0 Out-of-Bounds Read via Planar RLEEPSS 0.4%CVE-2026-91947HIGHFreeRDP Server before 3.31.0 Use-After-Free via DRDYNVCEPSS 0.4%CVE-2026-110837MEDIUMFreeRDP 2.0.0 before 3.32.0 Heap Buffer Overflow via MP3 Audio DecodingEPSS 0.4%CVE-2026-91961HIGHFreeRDP before 3.31.0 Denial of Service via URBDRCEPSS 0.4%CVE-2026-91957LOWFreeRDP before 3.31.0 Use-After-Free via smartcard workerEPSS 0.4%CVE-2026-109951MEDIUMFreeRDP 3.17.1 before 3.32.0 Heap Buffer Over-Read via Proxy DRDYNVC Channel NameEPSS 0.4%CVE-2026-67294CRITICALFreeRDP before 3.29.0 TLS Certificate EKU BypassEPSS 0.4%CVE-2026-64621CRITICALFreeRDP before 3.28.0 Double-Free via selectedmonitorsEPSS 0.4%CVE-2026-67295MEDIUMFreeRDP before 3.29.0 Path Traversal via drive redirectionEPSS 0.4%CVE-2026-121393HIGHFreeRDP 3.0.0 before 3.32.2 Denial of Service via RemoteFX Region AssertionEPSS 0.4%CVE-2026-114042HIGHFreeRDP 3.32.0 Use-After-Free via drdynvc Virtual Channel PDUEPSS 0.4%