Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

FreeRDP vulnerabilities

322 published CVEs name FreeRDP among the affected products.

Published CVEs
322
Last 12 months
243
Critical
20
Known exploited
0

Critical 20High 144Medium 123Low 34Not scored 1

CVEs per yearBy the year they were published

  1. 20186
  2. 202031
  3. 20212
  4. 202211
  5. 202317
  6. 202412
  7. 20251
  8. 2026242

Newest CVEs

  • CVE-2026-121964

    FreeRDP before 3.32.2 Heap Buffer Overflow via rpc_client_recv_fragment

    FreeRDP · FreeRDP

    High8.7
  • CVE-2026-121963

    FreeRDP before 3.32.2 Use-After-Free via Dynamic rdpsnd Channel Close

    FreeRDP · FreeRDP

    High8.2
  • CVE-2026-121962

    FreeRDP before 3.32.2 Heap Buffer Overflow via Early User Authorization Read

    FreeRDP · FreeRDP

    High7.2
  • CVE-2026-121961

    FreeRDP before 3.32.2 Use-After-Free via DRDYNVC Tracker Race

    FreeRDP · FreeRDP

    High8.2
  • CVE-2026-121960

    FreeRDP before 3.32.2 Unauthenticated Denial of Service via CredSSP TSRequest

    FreeRDP · FreeRDP

    High8.7
  • CVE-2026-121959

    FreeRDP before 3.32.2 Infinite Loop via Truncated WebSocket Frame

    FreeRDP · FreeRDP

    High7.1
  • CVE-2026-121958

    FreeRDP through 3.32.1 Heap Out-of-Bounds Write via RDPGFX HashTable_GetKeys

    FreeRDP · FreeRDP

    High8.7
  • CVE-2026-121957

    FreeRDP before 3.32.2 Use-After-Free via RDPGFX ResetGraphics Race

    FreeRDP · FreeRDP

    High8.7
  • CVE-2026-121956

    FreeRDP before 3.32.2 Double Free in WinPR Kerberos retrieveSomeTgt

    FreeRDP · FreeRDP

    High8.7
  • CVE-2026-121955

    FreeRDP before 3.32.2 Use-After-Free in Smartcard Emulation ReleaseContext

    FreeRDP · FreeRDP

    High8.7