Freerdp
This hub aggregates every CVE we track for Freerdp, a product in the security products space. Use it to gauge the current risk picture and drill into individual advisories.
202
CVEs tracked
44
Critical
60
High
0
In CISA KEV
Severity distribution
MEDIUM68HIGH60CRITICAL44LOW30
Monthly trend
0
0
0
0
0
0
0
0
1
0
0
0
0
0
0
1
17
27
17
1
5
0
8
22
2024-092026-08
Latest CVEs
The 15 most recently published vulnerabilities affecting Freerdp.
- CVE-2026-68580FreeRDP before 3.29.0 Integer Overflow via Audio Input Channel7.5
- CVE-2026-68579FreeRDP before 3.30.0 Heap Overflow via CliprdrStream_Read9.6
- CVE-2026-67288FreeRDP before 3.29.0 Denial of Service via smartcard cache7.5
- CVE-2026-66401FreeRDP before 3.29.0 Out-of-Bounds Read via UVC H.2642.1
- CVE-2026-67303FreeRDP before 3.29.0 Denial of Service via serial DeviceControl4.3
- CVE-2026-67302FreeRDP rdpecam StartStreamsRequest divide-by-zero denial of service4.3
- CVE-2026-67298FreeRDP 3.28.0 Heap Buffer Overflow via RAIL orderLength Underflow7.5
- CVE-2026-67306FreeRDP before 3.29.0 Out-of-Bounds Read via Planar RLE5.4
- CVE-2026-67299FreeRDP before 3.29.0 Use-After-Free via WindowIcon async message7.5
- CVE-2026-67300FreeRDP before 3.29.0 Use-After-Free via async message proxy7.5
- CVE-2026-67291FreeRDP before 3.29.0 Heap Out-of-Bounds Read via GLYPH_FRAGMENT_ADD7.5
- CVE-2026-67295FreeRDP before 3.29.0 Path Traversal via drive redirection6.3
- CVE-2026-67292FreeRDP before 3.29.0 WebSocket Ping Buffer Over-disclosure6.5
- CVE-2026-66402FreeRDP before 3.29.0 TLS Certificate Identity Validation Bypass9.8
- CVE-2026-67304FreeRDP before 3.29.0 NULL Dereference via smartcard cleanup7.5
Product normalization is registry-driven with AI assist and human review. How it works