https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T20:42:50.978794+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2026:66347 ALSA-2026:66347 — Important: freerdp security update 2026-10-03T20:42:51.318466+00:00

Affected: AlmaLinux:9: freerdp, AlmaLinux:9: freerdp-devel, AlmaLinux:9: freerdp-libs, AlmaLinux:9: libwinpr, AlmaLinux:9: libwinpr-devel

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.

Security Fix(es):

* FreeRDP: FreeRDP: Remote code execution or client crash via malicious TS Gateway (CVE-2026-55193)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2026-14961 bdu:2026-14961 2026-10-03T20:42:51.318535+00:00 bdu:2026-14961 https://cve.radiocsirt.org/vuln/euvd-2026-360179 EUVD-2026-360179 2026-10-03T20:42:51.318552+00:00 EUVD-2026-360179 https://cve.radiocsirt.org/vuln/fkie_cve-2026-55193 fkie_cve-2026-55193 2026-10-03T20:42:51.318564+00:00

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, FreeRDP clients using TS Gateway accept a server-controlled max_xmit_frag value in libfreerdp/core/gateway/rpc_bind.c without bounding it to the 4088-byte ReceiveFragment allocation. A malicious gateway can advertise 65535 and then send a response fragment of the same length, causing rpc_channel_read in libfreerdp/core/gateway/rpc.c to write up to 65535 bytes into the smaller ReceiveFragment buffer. This can crash the client and may permit code execution through attacker-controlled heap corruption. This issue is fixed in version 3.27.0.

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11065-1 openSUSE-SU-2026:11065-1 — freerdp-3.27.1-1.1 on GA media 2026-10-03T20:42:51.318589+00:00

freerdp-3.27.1-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:72481 RHSA-2026:72481 — Red Hat Security Advisory: freerdp security update 2026-10-03T20:42:51.318610+00:00

FreeRDP: FreeRDP: Remote code execution or client crash via malicious TS Gateway

 https://cve.radiocsirt.org/vuln/rlsa-2026:66347 RLSA-2026:66347 — Important: freerdp security update 2026-10-03T20:42:51.318626+00:00

Affected: Rocky Linux:9: freerdp

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.

Security Fix(es):

* FreeRDP: FreeRDP: Remote code execution or client crash via malicious TS Gateway (CVE-2026-55193)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-55193 UBUNTU-CVE-2026-55193 2026-10-03T20:42:51.318648+00:00

Affected: Ubuntu:16.04:LTS: freerdp, Ubuntu:Pro:18.04:LTS: freerdp2, Ubuntu:18.04:LTS: freerdp, Ubuntu:Pro:20.04:LTS: freerdp2, Ubuntu:22.04:LTS: freerdp2, Ubuntu:24.04:LTS: freerdp3, Ubuntu:Pro:24.04:LTS: freerdp2, Ubuntu:25.10: freerdp3, Ubuntu:26.04:LTS: freerdp3

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, FreeRDP clients using TS Gateway accept a server-controlled max_xmit_frag value in libfreerdp/core/gateway/rpc_bind.c without bounding it to the 4088-byte ReceiveFragment allocation. A malicious gateway can advertise 65535 and then send a response fragment of the same length, causing rpc_channel_read in libfreerdp/core/gateway/rpc.c to write up to 65535 bytes into the smaller ReceiveFragment buffer. This can crash the client and may permit code execution through attacker-controlled heap corruption. This issue is fixed in version 3.27.0.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1933 WID-SEC-W-2026-1933 — FreeRDP: Mehrere Schwachstellen 2026-10-03T20:42:51.318681+00:00

Ein Angreifer kann mehrere Schwachstellen in FreeRDP ausnutzen,um nicht näher spezifizierte Auswirkungen zu verursachen, potenziell beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu verursachen.