https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-22T05:34:23.500027+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2021-41160 CVE-2021-41160 — Improper region checks in FreeRDP allow out of bound write to memory 2026-10-22T05:34:23.501943+00:00

Affected: FreeRDP

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. In affected versions a malicious server might trigger out of bound writes in a connected client. Connections using GDI or SurfaceCommands to send graphics updates to the client might send `0` width/height or out of bound rectangles to trigger out of bound writes. With `0` width or heigth the memory allocation will be `0` but the missing bounds checks allow writing to the pointer at this (not allocated) region. This issue has been patched in FreeRDP 2.4.1.

 https://cve.radiocsirt.org/vuln/usn-5154-1 USN-5154-1 — freerdp2 vulnerabilities 2026-10-22T05:34:23.502020+00:00

Affected: Ubuntu:18.04:LTS: freerdp2, Ubuntu:20.04:LTS: freerdp2

It was discovered that FreeRDP incorrectly handled certain inputs. An attacker could possibly use this issue to execute arbitrary code or cause a crash. (CVE-2021-41159)

It was discovered that FreeRDP incorrectly handled certain connections. An attacker could possibly use this issue to execute arbitrary code or cause a crash. (CVE-2021-41160)