https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 19:56:16 +0000 https://cve.radiocsirt.org/vuln/alsa-2026:3068 <p><strong>Affected:</strong> AlmaLinux:10: freerdp, AlmaLinux:10: freerdp-devel, AlmaLinux:10: freerdp-libs, AlmaLinux:10: freerdp-server, AlmaLinux:10: libwinpr, AlmaLinux:10: libwinpr-devel</p> <p>FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.</p> <p>Security Fix(es):</p> <p>* freerdp: FreeRDP heap-buffer-overflow (CVE-2026-22855) * freerdp: FreeRDP heap-buffer-overflow (CVE-2026-22853) * freerdp: FreeRDP global-buffer-overflow (CVE-2026-22858) * freerdp: FreeRDP heap-buffer-overflow (CVE-2026-22859) * freerdp: FreeRDP: Denial of Service via use after free in ecam_channel_write (CVE-2026-24678)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:10: freerdp, AlmaLinux:10: freerdp-devel, AlmaLinux:10: freerdp-libs, AlmaLinux:10: freerdp-server, AlmaLinux:10: libwinpr, AlmaLinux:10: libwinpr-devel</p> <p>FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.</p> <p>Security Fix(es):</p> <p>* freerdp: FreeRDP heap-buffer-overflow (CVE-2026-22855) * freerdp: FreeRDP heap-buffer-overflow (CVE-2026-22853) * freerdp: FreeRDP global-buffer-overflow (CVE-2026-22858) * freerdp: FreeRDP heap-buffer-overflow (CVE-2026-22859) * freerdp: FreeRDP: Denial of Service via use after free in ecam_channel_write (CVE-2026-24678)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2026:3068 https://cve.radiocsirt.org/vuln/bdu:2026-06517 bdu:2026-06517 https://cve.radiocsirt.org/vuln/bdu:2026-06517 https://cve.radiocsirt.org/vuln/euvd-2026-337465 EUVD-2026-337465 https://cve.radiocsirt.org/vuln/euvd-2026-337465 https://cve.radiocsirt.org/vuln/fkie_cve-2026-24678 <p>FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, A capture thread sends sample responses using a freed channel callback after a device channel close, leading to a use after free in ecam_channel_write. This vulnerability is fixed in 3.22.0.</p> <p>FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, A capture thread sends sample responses using a freed channel callback after a device channel close, leading to a use after free in ecam_channel_write. This vulnerability is fixed in 3.22.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-24678 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10132-1 <p>freerdp-3.22.0-1.1 on GA media</p> <p>freerdp-3.22.0-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:10132-1 https://cve.radiocsirt.org/vuln/rhsa-2026:19033 <p>freerdp: FreeRDP heap-buffer-overflow freerdp: FreeRDP heap-buffer-overflow freerdp: FreeRDP heap-buffer-overflow freerdp: FreeRDP heap-buffer-overflow freerdp: FreeRDP heap-use-after-free freerdp: FreeRDP global-buffer-overflow freerdp: FreeRDP heap-buffer-overflow freerdp: FreeRDP: Denial of Service via FastGlyph parsing buffer overflow freerdp: FreeRDP has a NULL Pointer Dereference in rdp_write_logon_info_v2() freerdp: FreeRDP has a heap-use-after-free in video_timer freerdp: FreeRDP has a Heap-use-after-free in urb_select_interface freerdp: FreeRDP: Denial of Service via use-after-free in AUDIN format renegotiation freerdp: FreeRDP: Denial of Service via use after free in ecam_channel_write freerdp: FreeRDP has a heap-buffer-overflow in urb_select_interface freerdp: FreeRDP has a heap-use-after-free in urb_bulk_transfer_cb freerdp: FreeRDP has a Heap-buffer-overflow in audio_formats_free freerdp: FreeRDP has a heap-use-after-free in ainput_send_input_event freerdp: FreeRDP has a Heap-use-after-free in play_thread freerdp: FreeRDP: Arbitrary code execution via heap buffer overflow in GDI surface pipeline freerdp: FreeRDP: Arbitrary code execution via heap out-of-bounds write in RLE planar decode path freerdp: FreeRDP: Arbitrary code execution via crafted Remote Desktop Protocol (RDP) server messages FreeRDP: FreeRDP: Denial of Service via specially crafted Remote Desktop Protocol messages FreeRDP: FreeRDP: Heap buffer overflow allows arbitrary code execution via crafted…</p> <p>freerdp: FreeRDP heap-buffer-overflow freerdp: FreeRDP heap-buffer-overflow freerdp: FreeRDP heap-buffer-overflow freerdp: FreeRDP heap-buffer-overflow freerdp: FreeRDP heap-use-after-free freerdp: FreeRDP global-buffer-overflow freerdp: FreeRDP heap-buffer-overflow freerdp: FreeRDP: Denial of Service via FastGlyph parsing buffer overflow freerdp: FreeRDP has a NULL Pointer Dereference in rdp_write_logon_info_v2() freerdp: FreeRDP has a heap-use-after-free in video_timer freerdp: FreeRDP has a Heap-use-after-free in urb_select_interface freerdp: FreeRDP: Denial of Service via use-after-free in AUDIN format renegotiation freerdp: FreeRDP: Denial of Service via use after free in ecam_channel_write freerdp: FreeRDP has a heap-buffer-overflow in urb_select_interface freerdp: FreeRDP has a heap-use-after-free in urb_bulk_transfer_cb freerdp: FreeRDP has a Heap-buffer-overflow in audio_formats_free freerdp: FreeRDP has a heap-use-after-free in ainput_send_input_event freerdp: FreeRDP has a Heap-use-after-free in play_thread freerdp: FreeRDP: Arbitrary code execution via heap buffer overflow in GDI surface pipeline freerdp: FreeRDP: Arbitrary code execution via heap out-of-bounds write in RLE planar decode path freerdp: FreeRDP: Arbitrary code execution via crafted Remote Desktop Protocol (RDP) server messages FreeRDP: FreeRDP: Denial of Service via specially crafted Remote Desktop Protocol messages FreeRDP: FreeRDP: Heap buffer overflow allows arbitrary code execution via crafted…</p> https://cve.radiocsirt.org/vuln/rhsa-2026:19033 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-24678 <p><strong>Affected:</strong> Ubuntu:25.10: freerdp3</p> <p>FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, A capture thread sends sample responses using a freed channel callback after a device channel close, leading to a use after free in ecam_channel_write. This vulnerability is fixed in 3.22.0.</p> <p><strong>Affected:</strong> Ubuntu:25.10: freerdp3</p> <p>FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, A capture thread sends sample responses using a freed channel callback after a device channel close, leading to a use after free in ecam_channel_write. This vulnerability is fixed in 3.22.0.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-24678 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0244 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in FreeRDP ausnutzen, um einen Denial of Service zu verursachen oder potentiell beliebigen Programmcode auszuführen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in FreeRDP ausnutzen, um einen Denial of Service zu verursachen oder potentiell beliebigen Programmcode auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0244