Vulnerabilidades em FreeRDP

322 resultados
Análise Vexday

Com 147 CVEs catalogadas, o FreeRDP apresenta um volume considerável de vulnerabilidades históricas, embora a taxa de exploração ativa esteja abaixo da média geral do catálogo, sem registros no CISA KEV. O tipo de falha predominante é CWE-125 (leitura fora dos limites de buffer), padrão recorrente em clientes de protocolo remoto e que pode facilitar vazamento de dados ou instabilidade da aplicação. O CVE de maior atenção no momento é CVE-2024-32459, com score EPSS de 0,0375, e a existência de 2 CVEs com PoC pública exige monitoramento contínuo por parte de equipes de resposta. O ritmo de 15 novas CVEs nos últimos 90 dias indica superfície de ataque em expansão ativa, reforçando a necessidade de ciclos de atualização frequentes em ambientes que utilizam esta solução de desktop remoto.

CVE-2026-121410MEDIUMFreeRDP before 3.32.2 Denial of Service via RDPGFX ALPHA WIRETOSURFACE_2EPSS 0.2%CVE-2026-121411LOWFreeRDP before 3.32.2 X11 Client Abort via RDPGFX Scaled Output GeometryEPSS 0.2%CVE-2026-121408MEDIUMFreeRDP before 3.32.2 Use-After-Free via USB Redirection Control ChannelEPSS 0.2%CVE-2026-109241LOWFreeRDP before 3.32.0 NULL Dereference in Video Redirection ChannelEPSS 0.2%CVE-2026-33985MEDIUMFreeRDP: ClearCodec Glyph Cache Count Desync - Heap OOB ReadEPSS 0.2%CVE-2026-66401LOWFreeRDP before 3.29.0 Out-of-Bounds Read via UVC H.264EPSS 0.2%CVE-2026-40254MEDIUMFreeRDP: contains_dotdot() off-by-one allows drive channel path traversal via terminal ..EPSS 0.2%CVE-2026-91958MEDIUMFreeRDP 3.11.0 through 3.30.0 Heap Buffer Overflow via Monitor IndexEPSS 0.2%CVE-2026-33982HIGHFreeRDP: Persistent Cache Allocator Mismatch - Heap OOB ReadEPSS 0.2%CVE-2026-111379HIGHFreeRDP before 3.32.0 Heap Buffer Overflow via persistent_cache_read_entry_v3EPSS 0.2%CVE-2026-114047HIGHFreeRDP 2.0.0 before 3.32.0 Proxy Improper TLS Certificate ValidationEPSS 0.2%CVE-2026-29776LOWFreeRDP has an Integer Underflow in update_read_cache_bitmap_order Function of FreeRDP's Core LibraryEPSS 0.2%CVE-2026-64624HIGHFreeRDP RDP File Parser Remote Code Execution via CLI OptionsEPSS 0.2%CVE-2026-111381HIGHFreeRDP before 3.32.0 Heap Buffer Overflow via Persistent Cache v2 ParserEPSS 0.2%CVE-2026-109249MEDIUMFreeRDP 3.0.0 before 3.32.0 Heap Out-of-Bounds Read via Remote Assistance File ParsingEPSS 0.2%CVE-2026-121392CRITICALFreeRDP before 3.32.2 Certificate Identity Validation Bypass via tls_verify_certificateEPSS 0.2%CVE-2026-111376LOWFreeRDP 3.30.0 before 3.32.0 Heap Over-Read via Windows cliprdr FILECONTENTS_SIZEEPSS 0.2%CVE-2026-121390MEDIUMFreeRDP before 3.32.2 Null Pointer Crash via ARM Gateway ResponseEPSS 0.2%CVE-2026-109244MEDIUMFreeRDP 2.0.0 before 3.32.0 Insecure Private Key Permissions in winpr-makecertEPSS 0.1%CVE-2026-109940MEDIUMFreeRDP 3.0.0-beta1 before 3.32.0 Stack Buffer Overflow via PKCS#11 Key NameEPSS 0.1%