https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T10:16:50.546044+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-14962 bdu:2026-14962 2026-10-03T10:16:50.646648+00:00 bdu:2026-14962 https://cve.radiocsirt.org/vuln/euvd-2026-358418 EUVD-2026-358418 2026-10-03T10:16:50.646714+00:00 EUVD-2026-358418 https://cve.radiocsirt.org/vuln/fkie_cve-2026-55564 fkie_cve-2026-55564 2026-10-03T10:16:50.646745+00:00

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, the glyph_cache_get function in libfreerdp/cache/glyph.c checks whether index is greater than cache->number instead of greater than or equal to it. A malicious RDP server can use GLYPH_FRAGMENT_USE replay in update_process_glyph_fragments to make the default cache receive index 254 when cache->number is 254, reading one pointer beyond the entries array and dereferencing it as a glyph. This can crash the client and may disclose adjacent heap data. This issue is fixed in version 3.27.0.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-55564 UBUNTU-CVE-2026-55564 2026-10-03T10:16:50.646806+00:00

Affected: Ubuntu:16.04:LTS: freerdp, Ubuntu:Pro:18.04:LTS: freerdp2, Ubuntu:18.04:LTS: freerdp, Ubuntu:Pro:20.04:LTS: freerdp2, Ubuntu:22.04:LTS: freerdp2, Ubuntu:24.04:LTS: freerdp3, Ubuntu:Pro:24.04:LTS: freerdp2, Ubuntu:25.10: freerdp3, Ubuntu:26.04:LTS: freerdp3

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, the glyph_cache_get function in libfreerdp/cache/glyph.c checks whether index is greater than cache->number instead of greater than or equal to it. A malicious RDP server can use GLYPH_FRAGMENT_USE replay in update_process_glyph_fragments to make the default cache receive index 254 when cache->number is 254, reading one pointer beyond the entries array and dereferencing it as a glyph. This can crash the client and may disclose adjacent heap data. This issue is fixed in version 3.27.0.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1933 WID-SEC-W-2026-1933 — FreeRDP: Mehrere Schwachstellen 2026-10-03T10:16:50.646906+00:00

Ein Angreifer kann mehrere Schwachstellen in FreeRDP ausnutzen,um nicht näher spezifizierte Auswirkungen zu verursachen, potenziell beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu verursachen.