Vulnerabilidades em FreeRDP

211 resultados
Análise Vexday

Com 147 CVEs catalogadas, o FreeRDP apresenta um volume considerável de vulnerabilidades históricas, embora a taxa de exploração ativa esteja abaixo da média geral do catálogo, sem registros no CISA KEV. O tipo de falha predominante é CWE-125 (leitura fora dos limites de buffer), padrão recorrente em clientes de protocolo remoto e que pode facilitar vazamento de dados ou instabilidade da aplicação. O CVE de maior atenção no momento é CVE-2024-32459, com score EPSS de 0,0375, e a existência de 2 CVEs com PoC pública exige monitoramento contínuo por parte de equipes de resposta. O ritmo de 15 novas CVEs nos últimos 90 dias indica superfície de ataque em expansão ativa, reforçando a necessidade de ciclos de atualização frequentes em ambientes que utilizam esta solução de desktop remoto.

CVE-2026-24684HIGHFreeRDP has a Heap-use-after-free in play_threadEPSS 0.6%CVE-2026-91964HIGHFreeRDP 2.0.0 through 3.30.0 Heap Buffer Overflow via RoutingTokenEPSS 0.5%CVE-2026-67305CRITICALFreeRDP Windows Client before 3.29.0 Heap Buffer Overflow via CliprdrEPSS 0.5%CVE-2026-26955HIGHFreeRDP has Out-of-bounds WriteEPSS 0.5%CVE-2026-23530HIGHFreeRDP has heap-buffer-overflow in planar_decompress_plane_rleEPSS 0.5%CVE-2026-23531HIGHFreeRDP has heap-buffer-overflow in clear_decompressEPSS 0.5%CVE-2026-23533HIGHFreeRDP has heap-buffer-overflow in clear_decompress_residual_dataEPSS 0.5%CVE-2026-23534HIGHFreeRDP has heap-buffer-overflow in clear_decompress_bands_dataEPSS 0.5%CVE-2026-23532HIGHFreeRDP has heap-buffer-overflow in gdi_SurfaceToSurfaceEPSS 0.5%CVE-2026-22857MEDIUMFreeRDP has a heap-use-after-free in irp_thread_funcEPSS 0.5%CVE-2026-22854MEDIUMFreeRDP has a heap-buffer-overflow in drive_process_irp_readEPSS 0.5%CVE-2026-24677HIGHFreeRDP has a heap-buffer-overflow in ecam_encoder_compress_h264EPSS 0.5%CVE-2026-24679HIGHFreeRDP has a heap-buffer-overflow in urb_select_interfaceEPSS 0.5%CVE-2026-44421HIGHFreeRDP RDPGFX CacheToSurface heap-buffer-overflow via clamped-rectangle validation bypassEPSS 0.5%CVE-2026-55192HIGHFreeRDP: Out-of-bounds read in H.264 YUV-to-RGB conversion due to decoder/surface dimension mismatchEPSS 0.5%CVE-2026-25955MEDIUMFreeRDP has heap-use-after-free in xf_AppUpdateWindowFromSurface (stale XImage)EPSS 0.5%CVE-2026-55193HIGHFreeRDP: Heap-buffer-overflow write in TS Gateway RPC fragment receive due to uncapped bind_ack max_xmit_fragEPSS 0.5%CVE-2026-25954MEDIUMFreeRDP has heap-use-after-free in xf_rail_server_local_move_sizeEPSS 0.5%CVE-2026-24683HIGHFreeRDP has a heap-use-after-free in ainput_send_input_eventEPSS 0.5%CVE-2026-24682HIGHFreeRDP has a Heap-buffer-overflow in audio_formats_freeEPSS 0.5%