Vulnerabilidades en FreeRDP

211 resultados
Análisis Vexday

Com 147 CVEs catalogadas, o FreeRDP apresenta um volume considerável de vulnerabilidades históricas, embora a taxa de exploração ativa esteja abaixo da média geral do catálogo, sem registros no CISA KEV. O tipo de falha predominante é CWE-125 (leitura fora dos limites de buffer), padrão recorrente em clientes de protocolo remoto e que pode facilitar vazamento de dados ou instabilidade da aplicação. O CVE de maior atenção no momento é CVE-2024-32459, com score EPSS de 0,0375, e a existência de 2 CVEs com PoC pública exige monitoramento contínuo por parte de equipes de resposta. O ritmo de 15 novas CVEs nos últimos 90 dias indica superfície de ataque em expansão ativa, reforçando a necessidade de ciclos de atualização frequentes em ambientes que utilizam esta solução de desktop remoto.

CVE-2023-40575MEDIUMOut-Of-Bounds Read in FreeRDPEPSS 1.3%CVE-2023-39355HIGHFreeRDP Use-After-Free in RDPGFX_CMDID_RESETGRAPHICSEPSS 1.3%CVE-2023-40576MEDIUMOut-Of-Bounds Read in FreeRDPEPSS 1.2%CVE-2024-32661HIGHFreeRDP rdp_write_logon_info_v1 NULL accessEPSS 1.2%CVE-2023-40574MEDIUMOut-Of-Bounds Write in FreeRDPEPSS 1.2%CVE-2024-32659CRITICALfreerdp_image_copy out of bound readEPSS 1.2%CVE-2024-32660HIGHFreeRDP zgfx_decompress out of memory vulnerabilityEPSS 1.2%CVE-2023-40187HIGHUse-After-Free in FreeRDPEPSS 1.2%CVE-2020-11089LOWOut-of-bound read in FreeRDPEPSS 1.2%CVE-2022-39283MEDIUMFreeRDP may read and display out of bounds data EPSS 1.1%CVE-2024-22211LOWFreeRDP integer Overflow leading to Heap OverflowEPSS 1.1%CVE-2022-39316MEDIUMOut of bound read in FreeRDPEPSS 1.1%CVE-2022-39318MEDIUMDivision by zero in urbdrc channel in FreeRDPEPSS 1.0%CVE-2026-40033HIGHFreeRDP - Heap-buffer-overflow in gdi_CacheToSurface via rectangle validation bypassEPSS 1.0%CVE-2022-39347LOWMissing path sanitation with `drive` channel in FreeRDPEPSS 1.0%CVE-2022-39282LOWRDP client: Read of uninitialized memory with parallel port redirectionEPSS 0.9%CVE-2017-2836MEDIUMAn exploitable denial of service vulnerability exists within the reading of proprietary server certificates in FreeRDP 2.0.0-beta1+android11EPSS 0.9%CVE-2026-22859MEDIUMFreeRDP has a heap-buffer-overflow in urb_select_configurationEPSS 0.9%CVE-2026-22855MEDIUMFreeRDP has a heap-buffer-overflow in smartcard_unpack_set_attrib_callEPSS 0.9%CVE-2026-64620CRITICALFreeRDP before 3.28.0 Heap Buffer Overflow via crypto_rsa_commonEPSS 0.9%