Vulnerabilidades em FreeRDP

322 resultados
Análise Vexday

Com 147 CVEs catalogadas, o FreeRDP apresenta um volume considerável de vulnerabilidades históricas, embora a taxa de exploração ativa esteja abaixo da média geral do catálogo, sem registros no CISA KEV. O tipo de falha predominante é CWE-125 (leitura fora dos limites de buffer), padrão recorrente em clientes de protocolo remoto e que pode facilitar vazamento de dados ou instabilidade da aplicação. O CVE de maior atenção no momento é CVE-2024-32459, com score EPSS de 0,0375, e a existência de 2 CVEs com PoC pública exige monitoramento contínuo por parte de equipes de resposta. O ritmo de 15 novas CVEs nos últimos 90 dias indica superfície de ataque em expansão ativa, reforçando a necessidade de ciclos de atualização frequentes em ambientes que utilizam esta solução de desktop remoto.

CVE-2026-109678HIGHFreeRDP 3.0.0-beta1 before 3.32.0 Reachable Assertion via Emulated SCardStatusAEPSS 0.3%CVE-2026-109941HIGHFreeRDP 2.3.0 before 3.32.0 Infinite Loop via RD Gateway Chunked ResponseEPSS 0.3%CVE-2026-109942HIGHFreeRDP 2.3.0 before 3.32.0 NULL Pointer Dereference via RD Gateway Close Channel PacketEPSS 0.3%CVE-2026-109952MEDIUMFreeRDP 3.0.0 before 3.32.0 Security Protocol Downgrade via Negotiation ResponseEPSS 0.3%CVE-2026-114041MEDIUMFreeRDP before 3.32.1 Heap Out-of-Bounds Read via RD Gateway Consent MessageEPSS 0.3%CVE-2026-31884MEDIUMFreeRDP has a division-by-zero in ADPCM decoders when `nBlockAlign` is 0EPSS 0.3%CVE-2026-111880HIGHFreeRDP 2.0.0 before 3.32.0 Heap Out-of-Bounds Write via NTLM MIC OffsetEPSS 0.3%CVE-2026-111380HIGHFreeRDP 3.29.0 before 3.32.0 Heap Overflow via audin Apple BackendsEPSS 0.3%CVE-2026-110833HIGHFreeRDP before 3.32.0 Unbounded Memory Retention via RDPDR ProxyEPSS 0.3%CVE-2026-110830HIGHFreeRDP before 3.32.0 Denial of Service via Serial IRP_MJ_CREATEEPSS 0.3%CVE-2026-111377HIGHFreeRDP 2.0.0 before 3.32.0 Memory Exhaustion via Static Channel ReassemblyEPSS 0.3%CVE-2026-109248MEDIUMFreeRDP 3.0.0 before 3.32.0 Heap Out-of-Bounds Read via WinPR Clipboard cFileNameEPSS 0.3%CVE-2026-121401MEDIUMFreeRDP before 3.32.2 Denial of Service via RD Gateway extended-auth packetEPSS 0.3%CVE-2026-121396MEDIUMFreeRDP 3.0.0 before 3.32.2 denial of service via RTS padding assertionEPSS 0.3%CVE-2026-111375MEDIUMFreeRDP 3.0.0 before 3.32.0 Out-of-Bounds Read via RAIL Window TitleEPSS 0.3%CVE-2026-110832HIGHFreeRDP 2.0.0 before 3.32.0 Memory Exhaustion via DRDYNVC DATA_FIRSTEPSS 0.3%CVE-2026-121407HIGHFreeRDP before 3.32.2 Shadow Server Denial of Service via remdesk ChannelEPSS 0.3%CVE-2026-121959HIGHFreeRDP before 3.32.2 Infinite Loop via Truncated WebSocket FrameEPSS 0.3%CVE-2026-121963HIGHFreeRDP before 3.32.2 Use-After-Free via Dynamic rdpsnd Channel CloseEPSS 0.3%CVE-2026-110836HIGHFreeRDP 3.0.0 before 3.32.0 Infinite Loop DoS via Gateway Content-TypeEPSS 0.3%