CVE Tools
Track your stack

Freerdp

348 CVEs tracked. None of them is in CISA KEV.

This hub aggregates every CVE we track for Freerdp, a product in the security products space. Use it to gauge the current risk picture and drill into individual advisories.

Freerdp CVEs per month

Dec 2024 to Nov 2026. Point at a month, or focus the strip and use the arrow keys.
Freerdp CVEs per month
MonthCVEs
2024-120
2025-010
2025-020
2025-030
2025-040
2025-051
2025-060
2025-070
2025-080
2025-090
2025-100
2025-110
2025-121
2026-0117
2026-0227
2026-0317
2026-041
2026-055
2026-060
2026-078
2026-0834
2026-0922
2026-1069
2026-1143

Severity

How the 348 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical5115%
  • High9226%
  • Medium16949%
  • Low3610%

Latest CVEs

The 15 most recently published vulnerabilities affecting Freerdp.

  1. CVE-2026-125394FreeRDP before 3.33.0 Use-After-Free via Stale Brush Cache Pointer5.4
  2. CVE-2026-121964FreeRDP before 3.32.2 Heap Buffer Overflow via rpc_client_recv_fragment7.5
  3. CVE-2026-121962FreeRDP before 3.32.2 Heap Buffer Overflow via Early User Authorization Read8.1
  4. CVE-2026-121963FreeRDP before 3.32.2 Use-After-Free via Dynamic rdpsnd Channel Close5.9
  5. CVE-2026-121961FreeRDP before 3.32.2 Use-After-Free via DRDYNVC Tracker Race5.9
  6. CVE-2026-121959FreeRDP before 3.32.2 Infinite Loop via Truncated WebSocket Frame6.5
  7. CVE-2026-121960FreeRDP before 3.32.2 Unauthenticated Denial of Service via CredSSP TSRequest7.5
  8. CVE-2026-121958FreeRDP through 3.32.1 Heap Out-of-Bounds Write via RDPGFX HashTable_GetKeys8.8
  9. CVE-2026-121957FreeRDP before 3.32.2 Use-After-Free via RDPGFX ResetGraphics Race7.5
  10. CVE-2026-121955FreeRDP before 3.32.2 Use-After-Free in Smartcard Emulation ReleaseContext7.5
  11. CVE-2026-121956FreeRDP before 3.32.2 Double Free in WinPR Kerberos retrieveSomeTgt7.5
  12. CVE-2026-121954FreeRDP before 3.32.2 Heap Out-of-Bounds Write in Planar Codec6.5
  13. CVE-2026-121952FreeRDP before 3.32.2 Proxy Out-of-Bounds Write via Bitmap Cache v2 Capability9.8
  14. CVE-2026-121953FreeRDP before 3.32.2 Use-After-Free via rdpgfx Dynamic Virtual Channel Close9.8
  15. CVE-2026-121951FreeRDP 3.0.0 before 3.32.2 Denial of Service via Slow-Path Input Event7.5

Product grouping is registry-driven, with AI assist and human review. How it works