Search CVE reports


Toggle filters

31 – 40 of 162 results


CVE-2026-25997

Medium priority

Some fixes available 2 of 8

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_clipboard_format_equal` reads freed `lastSentFormats` memory because `xf_clipboard_formats_free` (called from the cliprdr channel thread...

3 affected packages

freerdp, freerdp2, freerdp3

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
freerdp Not in release Not in release Not in release Needs evaluation
freerdp2 Not in release Needs evaluation Needs evaluation Needs evaluation Needs evaluation
freerdp3 Not affected Fixed Not in release
Show less packages

CVE-2026-25959

Medium priority

Some fixes available 2 of 8

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_cliprdr_provide_data_` passes freed `pDstData` to `XChangeProperty` because the cliprdr channel thread...

3 affected packages

freerdp, freerdp2, freerdp3

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
freerdp Not in release Not in release Not in release Needs evaluation
freerdp2 Not in release Needs evaluation Needs evaluation Needs evaluation Needs evaluation
freerdp3 Not affected Fixed Not in release
Show less packages

CVE-2026-25955

Medium priority

Some fixes available 2 of 8

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_AppUpdateWindowFromSurface` reuses a cached `XImage` whose `data` pointer references a freed RDPGFX surface buffer,...

3 affected packages

freerdp, freerdp2, freerdp3

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
freerdp Not in release Not in release Not in release Needs evaluation
freerdp2 Not in release Needs evaluation Needs evaluation Needs evaluation Needs evaluation
freerdp3 Not affected Fixed Not in release
Show less packages

CVE-2026-25954

Medium priority

Some fixes available 2 of 8

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_rail_server_local_move_size` dereferences a freed `xfAppWindow` pointer because `xf_rail_get_window` returns an unprotected pointer from...

3 affected packages

freerdp, freerdp2, freerdp3

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
freerdp Not in release Not in release Not in release Needs evaluation
freerdp2 Not in release Needs evaluation Needs evaluation Needs evaluation Needs evaluation
freerdp3 Not affected Fixed Not in release
Show less packages

CVE-2026-25953

Medium priority

Some fixes available 2 of 8

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_AppUpdateWindowFromSurface` reads from a freed `xfAppWindow` because the RDPGFX DVC thread obtains a bare pointer...

3 affected packages

freerdp, freerdp2, freerdp3

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
freerdp Not in release Not in release Not in release Needs evaluation
freerdp2 Not in release Needs evaluation Needs evaluation Needs evaluation Needs evaluation
freerdp3 Not affected Fixed Not in release
Show less packages

CVE-2026-25952

Medium priority

Some fixes available 2 of 8

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_SetWindowMinMaxInfo` dereferences a freed `xfAppWindow` pointer because `xf_rail_get_window` in `xf_rail_server_min_max_info` returns an...

3 affected packages

freerdp, freerdp2, freerdp3

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
freerdp Not in release Not in release Not in release Needs evaluation
freerdp2 Not in release Needs evaluation Needs evaluation Needs evaluation Needs evaluation
freerdp3 Not affected Fixed Not in release
Show less packages

CVE-2026-25942

Medium priority

Some fixes available 2 of 8

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_rail_server_execute_result` indexes the global `error_code_names[]` array (7 elements, indices 0–6) with an...

3 affected packages

freerdp, freerdp2, freerdp3

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
freerdp Not in release Not in release Not in release Needs evaluation
freerdp2 Not in release Needs evaluation Needs evaluation Needs evaluation Needs evaluation
freerdp3 Not affected Fixed Not in release
Show less packages

CVE-2026-25941

Medium priority

Some fixes available 2 of 8

FreeRDP is a free implementation of the Remote Desktop Protocol. Versions on the 2.x branch prior to to 2.11.8 and on the 3.x branch prior to 3.23.0 have an out-of-bounds read vulnerability in the FreeRDP client's RDPGFX channel...

3 affected packages

freerdp, freerdp2, freerdp3

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
freerdp Not in release Not in release Not in release Needs evaluation
freerdp2 Not in release Needs evaluation Needs evaluation Needs evaluation Needs evaluation
freerdp3 Not affected Fixed Not in release
Show less packages

CVE-2026-24684

Medium priority

Some fixes available 5 of 8

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, the RDPSND async playback thread can process queued PDUs after the channel is closed and internal state is freed, leading to a use after free in...

3 affected packages

freerdp, freerdp2, freerdp3

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
freerdp Not in release Not in release Not in release Needs evaluation
freerdp2 Not in release Fixed Fixed Fixed Ignored
freerdp3 Not affected Fixed Not in release
Show less packages

CVE-2026-24683

Medium priority
Fixed

FreeRDP is a free implementation of the Remote Desktop Protocol. ainput_send_input_event caches channel_callback in a local variable and later uses it without synchronization; a concurrent channel close can free or reinitialize...

3 affected packages

freerdp, freerdp2, freerdp3

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
freerdp Not in release Not in release Not in release Not affected
freerdp2 Not in release Fixed Fixed Fixed Not affected
freerdp3 Not affected Fixed Not in release
Show less packages