https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-22T03:19:54.081301+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2021:4622 ALSA-2021:4622 — Important: freerdp security update 2026-10-22T03:19:54.122916+00:00

Affected: AlmaLinux:8: freerdp, AlmaLinux:8: freerdp-devel, AlmaLinux:8: freerdp-libs, AlmaLinux:8: libwinpr, AlmaLinux:8: libwinpr-devel

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.

Security Fix(es):

* freerdp: improper client input validation for gateway connections allows to overwrite memory (CVE-2021-41159)

* freerdp: improper region checks in all clients allow out of bound write to memory (CVE-2021-41160)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2022-05756 bdu:2022-05756 2026-10-22T03:19:54.123020+00:00 bdu:2022-05756 https://cve.radiocsirt.org/vuln/cleanstart-2024-oe64928 CLEANSTART-2024-OE64928 — FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license 2026-10-22T03:19:54.123048+00:00

Affected: CleanStart: freerdp

Security vulnerability affects the freerdp package. FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license.

 https://cve.radiocsirt.org/vuln/cnvd-2021-103653 cnvd-2021-103653 2026-10-22T03:19:54.123093+00:00 cnvd-2021-103653 https://cve.radiocsirt.org/vuln/euvd-2026-258011 EUVD-2026-258011 2026-10-22T03:19:54.123112+00:00 EUVD-2026-258011 https://cve.radiocsirt.org/vuln/fkie_cve-2021-41160 fkie_cve-2021-41160 2026-10-22T03:19:54.123133+00:00

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. In affected versions a malicious server might trigger out of bound writes in a connected client. Connections using GDI or SurfaceCommands to send graphics updates to the client might send `0` width/height or out of bound rectangles to trigger out of bound writes. With `0` width or heigth the memory allocation will be `0` but the missing bounds checks allow writing to the pointer at this (not allocated) region. This issue has been patched in FreeRDP 2.4.1.

 https://cve.radiocsirt.org/vuln/gsd-2021-41160 gsd-2021-41160 2026-10-22T03:19:54.123170+00:00 gsd-2021-41160 https://cve.radiocsirt.org/vuln/oesa-2021-1424 OESA-2021-1424 — freerdp security update 2026-10-22T03:19:54.123186+00:00

Affected: openEuler:20.03-LTS-SP1: freerdp, openEuler:20.03-LTS-SP2: freerdp

FreeRDP is a client implementation of the Remote Desktop Protocol (RDP) that follows Microsoft's open specifications. This package provides the client applications xfreerdp and wlfreerdp. Security Fix(es): FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. In affected versions a malicious server might trigger out of bound writes in a connected client. Connections using GDI or SurfaceCommands to send graphics updates to the client might send `0` width/height or out of bound rectangles to trigger out of bound writes. With `0` width or heigth the memory allocation will be `0` but the missing bounds checks allow writing to the pointer at this (not allocated) region. This issue has been patched in FreeRDP 2.4.1.(CVE-2021-41160)

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:11591-1 openSUSE-SU-2024:11591-1 — freerdp-2.4.1-1.1 on GA media 2026-10-22T03:19:54.123245+00:00

freerdp-2.4.1-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2021:4620 RHSA-2021:4620 — Red Hat Security Advisory: freerdp security update 2026-10-22T03:19:54.123274+00:00

freerdp: improper client input validation for gateway connections allows to overwrite memory freerdp: improper region checks in all clients allow out of bound write to memory

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-41160 UBUNTU-CVE-2021-41160 2026-10-22T03:19:54.123305+00:00

Affected: Ubuntu:16.04:LTS: freerdp, Ubuntu:18.04:LTS: freerdp2, Ubuntu:18.04:LTS: freerdp, Ubuntu:20.04:LTS: freerdp2, Ubuntu:22.04:LTS: freerdp2

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. In affected versions a malicious server might trigger out of bound writes in a connected client. Connections using GDI or SurfaceCommands to send graphics updates to the client might send `0` width/height or out of bound rectangles to trigger out of bound writes. With `0` width or heigth the memory allocation will be `0` but the missing bounds checks allow writing to the pointer at this (not allocated) region. This issue has been patched in FreeRDP 2.4.1.