CVE-2026-32107: falha de alta gravidade em neutrinolabs xrdp
xrdp: Fail-open privilege drop in sesexec — child processes may execute as root if setuid fails
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8.8epss 0.2%
xrdp is an open source RDP server. In versions through 0.10.5, the session execution component did not properly handle an error during the privilege drop process. This improper privilege management could allow an authenticated local attacker to escalate privileges to root and execute arbitrary code on the system. An additional exploit would be needed to facilitate this. This issue has been fixed in version 0.10.6.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Produtos afetados
neutrinolabs · xrdpCVEs relacionadas — neutrinolabs xrdp
No mesmo produto, das mais perigosas para as menos.
CVE-2020-4044HIGHLocal users can perform a buffer overflow attack against the xrdp-sesman service and then impersonate itEPSS 2.3%CVE-2025-68670CRITICALxrdp improperly checks bounds of domain string length, which leads to Stack-based Buffer OverflowEPSS 1.4%CVE-2026-41252CRITICALxrdp: lib_palette_update Heap Buffer Overflow & RCEEPSS 1.1%CVE-2022-23493CRITICALOut of Bound Read in xrdpEPSS 1.0%CVE-2022-23477CRITICALBuffer Overflow in xrdpEPSS 0.9%CVE-2022-23480CRITICALBuffer Overflow in xrdpEPSS 0.9%