Search CVE reports


Toggle filters

11 – 20 of 147 results


CVE-2026-26986

Medium priority

Some fixes available 2 of 8

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `rail_window_free` dereferences a freed `xfAppWindow` pointer during `HashTable_Free` cleanup because `xf_rail_window_common` calls...

3 affected packages

freerdp, freerdp2, freerdp3

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
freerdp Not in release Not in release Needs evaluation
freerdp2 Needs evaluation Needs evaluation Needs evaluation Needs evaluation
freerdp3 Fixed Not in release
Show less packages

CVE-2026-27015

Medium priority

Some fixes available 2 of 8

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, a missing bounds check in `smartcard_unpack_read_size_align()` (`libfreerdp/utils/smartcard_pack.c:1703`) allows a malicious RDP server...

3 affected packages

freerdp, freerdp2, freerdp3

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
freerdp Not in release Not in release Needs evaluation
freerdp2 Needs evaluation Needs evaluation Needs evaluation Needs evaluation
freerdp3 Fixed Not in release
Show less packages

CVE-2026-26965

Medium priority

Some fixes available 2 of 8

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, in the RLE planar decode path, `planar_decompress_plane_rle()` writes into `pDstData` at `((nYDst+y) * nDstStep) + (4*nXDst) + nChannel`...

3 affected packages

freerdp, freerdp2, freerdp3

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
freerdp Not in release Not in release Needs evaluation
freerdp2 Needs evaluation Needs evaluation Needs evaluation Needs evaluation
freerdp3 Fixed Not in release
Show less packages

CVE-2026-26955

Medium priority

Some fixes available 2 of 8

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, a malicious RDP server can trigger a heap buffer overflow in FreeRDP clients using the GDI surface pipeline (e.g., `xfreerdp`) by sending an...

3 affected packages

freerdp, freerdp2, freerdp3

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
freerdp Not in release Not in release Needs evaluation
freerdp2 Needs evaluation Needs evaluation Needs evaluation Needs evaluation
freerdp3 Fixed Not in release
Show less packages

CVE-2026-26271

Medium priority

Some fixes available 2 of 8

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, a buffer overread in `freerdp_image_copy_from_icon_data()` (libfreerdp/codec/color.c) can be triggered by crafted RDP Window...

3 affected packages

freerdp, freerdp2, freerdp3

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
freerdp Not in release Not in release Needs evaluation
freerdp2 Needs evaluation Needs evaluation Needs evaluation Needs evaluation
freerdp3 Fixed Not in release
Show less packages

CVE-2026-25997

Medium priority

Some fixes available 2 of 8

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_clipboard_format_equal` reads freed `lastSentFormats` memory because `xf_clipboard_formats_free` (called from the cliprdr channel thread...

3 affected packages

freerdp, freerdp2, freerdp3

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
freerdp Not in release Not in release Needs evaluation
freerdp2 Needs evaluation Needs evaluation Needs evaluation Needs evaluation
freerdp3 Fixed Not in release
Show less packages

CVE-2026-25959

Medium priority

Some fixes available 2 of 8

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_cliprdr_provide_data_` passes freed `pDstData` to `XChangeProperty` because the cliprdr channel thread...

3 affected packages

freerdp, freerdp2, freerdp3

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
freerdp Not in release Not in release Needs evaluation
freerdp2 Needs evaluation Needs evaluation Needs evaluation Needs evaluation
freerdp3 Fixed Not in release
Show less packages

CVE-2026-25955

Medium priority

Some fixes available 2 of 8

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_AppUpdateWindowFromSurface` reuses a cached `XImage` whose `data` pointer references a freed RDPGFX surface buffer,...

3 affected packages

freerdp, freerdp2, freerdp3

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
freerdp Not in release Not in release Needs evaluation
freerdp2 Needs evaluation Needs evaluation Needs evaluation Needs evaluation
freerdp3 Fixed Not in release
Show less packages

CVE-2026-25954

Medium priority

Some fixes available 2 of 8

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_rail_server_local_move_size` dereferences a freed `xfAppWindow` pointer because `xf_rail_get_window` returns an unprotected pointer from...

3 affected packages

freerdp, freerdp2, freerdp3

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
freerdp Not in release Not in release Needs evaluation
freerdp2 Needs evaluation Needs evaluation Needs evaluation Needs evaluation
freerdp3 Fixed Not in release
Show less packages

CVE-2026-25953

Medium priority

Some fixes available 2 of 8

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_AppUpdateWindowFromSurface` reads from a freed `xfAppWindow` because the RDPGFX DVC thread obtains a bare pointer...

3 affected packages

freerdp, freerdp2, freerdp3

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
freerdp Not in release Not in release Needs evaluation
freerdp2 Needs evaluation Needs evaluation Needs evaluation Needs evaluation
freerdp3 Fixed Not in release
Show less packages