Search CVE reports


Toggle filters

1 – 10 of 238 results


CVE-2026-91964

Medium priority

Some fixes available 2 of 8

[GHSA-2vf2-grvj-6g8x: Heap buffer overflow in nego_send_negotiation_request]

3 affected packages

freerdp, freerdp2, freerdp3

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
freerdp Not in release Not in release Not in release Needs evaluation
freerdp2 Not in release Needs evaluation Needs evaluation Needs evaluation Needs evaluation
freerdp3 Fixed Fixed Not in release
Show less packages

CVE-2026-91963

Medium priority

Some fixes available 2 of 8

[GHSA-hw7p-5h2r-83gq: Disclosure of uninitialized heap memory in the urbdrc USB redirection path]

3 affected packages

freerdp, freerdp2, freerdp3

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
freerdp Not in release Not in release Not in release Needs evaluation
freerdp2 Not in release Needs evaluation Needs evaluation Needs evaluation Needs evaluation
freerdp3 Fixed Fixed Not in release
Show less packages

CVE-2026-91962

Medium priority

Some fixes available 2 of 8

[GHSA-f5p6-88mh-59vg: audin Apple backends perform overflow-prone buffer size arithmetic from server-controlled values]

3 affected packages

freerdp, freerdp2, freerdp3

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
freerdp Not in release Not in release Not in release Needs evaluation
freerdp2 Not in release Needs evaluation Needs evaluation Needs evaluation Needs evaluation
freerdp3 Fixed Fixed Not in release
Show less packages

CVE-2026-91961

Medium priority

Some fixes available 2 of 8

[GHSA-w9qg-g24r-77f6: URBDRC/libusb control-transfer path aborts on reachable OutputBufferSize assertion]

3 affected packages

freerdp, freerdp2, freerdp3

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
freerdp Not in release Not in release Not in release Needs evaluation
freerdp2 Not in release Needs evaluation Needs evaluation Needs evaluation Needs evaluation
freerdp3 Fixed Fixed Not in release
Show less packages

CVE-2026-91960

Medium priority

Some fixes available 2 of 8

[GHSA-vccg-35r5-8jrf: Stream_EnsureCapacity still overflows]

3 affected packages

freerdp, freerdp2, freerdp3

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
freerdp Not in release Not in release Not in release Needs evaluation
freerdp2 Not in release Needs evaluation Needs evaluation Needs evaluation Needs evaluation
freerdp3 Fixed Fixed Not in release
Show less packages

CVE-2026-91959

Medium priority

Some fixes available 2 of 8

[GHSA-pj8w-fh79-f438: rts_read_result length-checks 2 bytes and then reads 4]

3 affected packages

freerdp, freerdp2, freerdp3

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
freerdp Not in release Not in release Not in release Needs evaluation
freerdp2 Not in release Needs evaluation Needs evaluation Needs evaluation Needs evaluation
freerdp3 Fixed Fixed Not in release
Show less packages

CVE-2026-91958

Medium priority

Some fixes available 2 of 8

[GHSA-23pf-q83q-x45r: Unbounded MonitorIds used as an array index in X11 monitor selection]

3 affected packages

freerdp, freerdp2, freerdp3

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
freerdp Not in release Not in release Not in release Needs evaluation
freerdp2 Not in release Needs evaluation Needs evaluation Needs evaluation Needs evaluation
freerdp3 Fixed Fixed Not in release
Show less packages

CVE-2026-91957

Medium priority

Some fixes available 2 of 8

[GHSA-j5mq-3349-gwmm: channels,smartcard worker creation failure frees a devman-owned device]

3 affected packages

freerdp, freerdp2, freerdp3

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
freerdp Not in release Not in release Not in release Needs evaluation
freerdp2 Not in release Needs evaluation Needs evaluation Needs evaluation Needs evaluation
freerdp3 Fixed Fixed Not in release
Show less packages

CVE-2026-91956

Medium priority

Some fixes available 2 of 8

[GHSA-hg4r-vv53-vwf8: URBDRC out-of-bounds read in func_get_ep_desc via InterfaceNumber/array-position index mismatch]

3 affected packages

freerdp, freerdp2, freerdp3

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
freerdp Not in release Not in release Not in release Needs evaluation
freerdp2 Not in release Needs evaluation Needs evaluation Needs evaluation Needs evaluation
freerdp3 Fixed Fixed Not in release
Show less packages

CVE-2026-91955

Medium priority

Some fixes available 2 of 8

[GHSA-4464-r7qj-pgrx: FreeRDP: server stores client Core Data DesktopWidth/Height unvalidated in GCC negotiation]

3 affected packages

freerdp, freerdp2, freerdp3

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
freerdp Not in release Not in release Not in release Needs evaluation
freerdp2 Not in release Needs evaluation Needs evaluation Needs evaluation Needs evaluation
freerdp3 Fixed Fixed Not in release
Show less packages