Vulnerabilidades em FreeRDP

322 resultados
Análise Vexday

Com 147 CVEs catalogadas, o FreeRDP apresenta um volume considerável de vulnerabilidades históricas, embora a taxa de exploração ativa esteja abaixo da média geral do catálogo, sem registros no CISA KEV. O tipo de falha predominante é CWE-125 (leitura fora dos limites de buffer), padrão recorrente em clientes de protocolo remoto e que pode facilitar vazamento de dados ou instabilidade da aplicação. O CVE de maior atenção no momento é CVE-2024-32459, com score EPSS de 0,0375, e a existência de 2 CVEs com PoC pública exige monitoramento contínuo por parte de equipes de resposta. O ritmo de 15 novas CVEs nos últimos 90 dias indica superfície de ataque em expansão ativa, reforçando a necessidade de ciclos de atualização frequentes em ambientes que utilizam esta solução de desktop remoto.

CVE-2026-110834HIGHFreeRDP 2.0.0 before 3.32.0 Denial of Service via Serial IRP Null HandleEPSS 0.3%CVE-2026-109256MEDIUMFreeRDP 3.10.0 through 3.32.2 Heap Buffer Overflow in WinPR PNG ConversionEPSS 0.3%CVE-2026-110829HIGHFreeRDP 3.0.0 before 3.32.0 Null Pointer Dereference via rdpsnd FragmentEPSS 0.3%CVE-2026-121388HIGHFreeRDP 3.0.0 before 3.32.2 Uncapped Memory Allocation via DRDYNVC DATA_FIRSTEPSS 0.3%CVE-2026-121400HIGHFreeRDP before 3.32.2 CPU Exhaustion via RDG Control PacketEPSS 0.3%CVE-2026-27015MEDIUMFreeRDP: Smartcard NDR Alignment Padding Triggers Reachable WINPR_ASSERT Abort (Client DoS)EPSS 0.3%CVE-2026-121389LOWFreeRDP 3.27.0 before 3.32.2 Client DoS via RDPDR Device Announcement LoggingEPSS 0.3%CVE-2026-121961HIGHFreeRDP before 3.32.2 Use-After-Free via DRDYNVC Tracker RaceEPSS 0.3%CVE-2026-109679MEDIUMFreeRDP 3.0.0-beta4 before 3.32.0 NULL Pointer Crash via ARM ResponseEPSS 0.3%CVE-2026-109680MEDIUMFreeRDP 3.18.0 before 3.32.0 Heap Out-of-Bounds Write via ARM Redirected UsernameEPSS 0.3%CVE-2026-121958HIGHFreeRDP through 3.32.1 Heap Out-of-Bounds Write via RDPGFX HashTable_GetKeysEPSS 0.3%CVE-2026-111374MEDIUMFreeRDP from 3.30.0 before 3.32.0 Resource Exhaustion via rdpecam StartStreamsRequestEPSS 0.3%CVE-2026-31897NONEFreeRDP has an out-of-bounds read in `freerdp_bitmap_decompress_planar`EPSS 0.3%CVE-2026-68580HIGHFreeRDP before 3.29.0 Integer Overflow via Audio Input ChannelEPSS 0.3%CVE-2026-109242HIGHFreeRDP before 3.0.0 and 3.6.0 before 3.32.0 Uninitialized Heap Disclosure via Progressive Codec Tile UpgradeEPSS 0.3%CVE-2026-33995MEDIUMFreeRDP: Possible double free in kerberos_AcceptSecurityContextEPSS 0.3%CVE-2026-109247LOWFreeRDP before 3.32.0 Path Traversal via Clipboard cFileNameEPSS 0.3%CVE-2026-109251MEDIUMFreeRDP before 3.32.0 Out-of-Bounds Write via MS-RDPEGT Video GeometryEPSS 0.3%CVE-2026-22851MEDIUMFreeRDP RDPGFX ResetGraphics race leads to use-after-free in SDL client (sdl->primary)EPSS 0.3%CVE-2026-109252MEDIUMFreeRDP from 3.9.0 before 3.32.0 RDPEAR NULL Pointer Dereference via KERB_RPC_INTERNAL_NAMEEPSS 0.3%