# FreeRDP.

Every CVE that names FreeRDP among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [FreeRDP before 3.32.2 Heap Buffer Overflow via rpc_client_recv_fragment](https://agentprime.io/advisories/CVE-2026-121964.md)
  `CVE-2026-121964` · CVE record: FreeRDP FreeRDP · CVSS 8.7 High · Not analysed yet · Published 4 Nov 2026 · Tags: Memory corruption
- [FreeRDP before 3.32.2 Use-After-Free via Dynamic rdpsnd Channel Close](https://agentprime.io/advisories/CVE-2026-121963.md)
  `CVE-2026-121963` · CVE record: FreeRDP FreeRDP · CVSS 8.2 High · Not analysed yet · Published 4 Nov 2026 · Tags: Race condition
- [FreeRDP before 3.32.2 Heap Buffer Overflow via Early User Authorization Read](https://agentprime.io/advisories/CVE-2026-121962.md)
  `CVE-2026-121962` · CVE record: FreeRDP FreeRDP · CVSS 7.2 High · Not analysed yet · Published 4 Nov 2026 · Tags: Memory corruption
- [FreeRDP before 3.32.2 Use-After-Free via DRDYNVC Tracker Race](https://agentprime.io/advisories/CVE-2026-121961.md)
  `CVE-2026-121961` · CVE record: FreeRDP FreeRDP · CVSS 8.2 High · Not analysed yet · Published 4 Nov 2026 · Tags: Race condition
- [FreeRDP before 3.32.2 Unauthenticated Denial of Service via CredSSP TSRequest](https://agentprime.io/advisories/CVE-2026-121960.md)
  `CVE-2026-121960` · CVE record: FreeRDP FreeRDP · CVSS 8.7 High · Not analysed yet · Published 4 Nov 2026 · Tags: Denial of service
- [FreeRDP before 3.32.2 Infinite Loop via Truncated WebSocket Frame](https://agentprime.io/advisories/CVE-2026-121959.md)
  `CVE-2026-121959` · CVE record: FreeRDP FreeRDP · CVSS 7.1 High · Not analysed yet · Published 4 Nov 2026 · Tags: Denial of service
- [FreeRDP through 3.32.1 Heap Out-of-Bounds Write via RDPGFX HashTable_GetKeys](https://agentprime.io/advisories/CVE-2026-121958.md)
  `CVE-2026-121958` · CVE record: FreeRDP FreeRDP · CVSS 8.7 High · Not analysed yet · Published 4 Nov 2026 · Tags: Memory corruption
- [FreeRDP before 3.32.2 Use-After-Free via RDPGFX ResetGraphics Race](https://agentprime.io/advisories/CVE-2026-121957.md)
  `CVE-2026-121957` · CVE record: FreeRDP FreeRDP · CVSS 8.7 High · Not analysed yet · Published 4 Nov 2026 · Tags: Race condition
- [FreeRDP before 3.32.2 Double Free in WinPR Kerberos retrieveSomeTgt](https://agentprime.io/advisories/CVE-2026-121956.md)
  `CVE-2026-121956` · CVE record: FreeRDP FreeRDP · CVSS 8.7 High · Not analysed yet · Published 4 Nov 2026 · Tags: Memory corruption
- [FreeRDP before 3.32.2 Use-After-Free in Smartcard Emulation ReleaseContext](https://agentprime.io/advisories/CVE-2026-121955.md)
  `CVE-2026-121955` · CVE record: FreeRDP FreeRDP · CVSS 8.7 High · Not analysed yet · Published 4 Nov 2026 · Tags: Memory corruption
- [FreeRDP before 3.32.2 Heap Out-of-Bounds Write in Planar Codec](https://agentprime.io/advisories/CVE-2026-121954.md)
  `CVE-2026-121954` · CVE record: FreeRDP FreeRDP · CVSS 7.1 High · Not analysed yet · Published 4 Nov 2026 · Tags: Memory corruption
- [FreeRDP before 3.32.2 Use-After-Free via rdpgfx Dynamic Virtual Channel Close](https://agentprime.io/advisories/CVE-2026-121953.md)
  `CVE-2026-121953` · CVE record: FreeRDP FreeRDP · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Nov 2026 · Tags: Memory corruption
- [FreeRDP before 3.32.2 Proxy Out-of-Bounds Write via Bitmap Cache v2 Capability](https://agentprime.io/advisories/CVE-2026-121952.md)
  `CVE-2026-121952` · CVE record: FreeRDP FreeRDP · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Nov 2026 · Tags: Memory corruption
- [FreeRDP 3.0.0 before 3.32.2 Denial of Service via Slow-Path Input Event](https://agentprime.io/advisories/CVE-2026-121951.md)
  `CVE-2026-121951` · CVE record: FreeRDP FreeRDP · CVSS 8.7 High · Not analysed yet · Published 4 Nov 2026 · Tags: Denial of service
- [FreeRDP before 3.32.2 Heap Overflow via RDPGFX CREATE_SURFACE Integer Wrap](https://agentprime.io/advisories/CVE-2026-121950.md)
  `CVE-2026-121950` · CVE record: FreeRDP FreeRDP · CVSS 7.1 High · Not analysed yet · Published 4 Nov 2026 · Tags: Memory corruption
- [FreeRDP 3.0.0 before 3.32.2 Proxy Memory Exhaustion via DVC Reassembly](https://agentprime.io/advisories/CVE-2026-121412.md)
  `CVE-2026-121412` · CVE record: FreeRDP FreeRDP · CVSS 7.1 High · Not analysed yet · Published 3 Nov 2026 · Tags: Denial of service
- [FreeRDP before 3.32.2 X11 Client Abort via RDPGFX Scaled Output Geometry](https://agentprime.io/advisories/CVE-2026-121411.md)
  `CVE-2026-121411` · CVE record: FreeRDP FreeRDP · CVSS 2.3 Low · Not analysed yet · Published 3 Nov 2026 · Tags: CWE-20
- [FreeRDP before 3.32.2 Denial of Service via RDPGFX ALPHA WIRETOSURFACE_2](https://agentprime.io/advisories/CVE-2026-121410.md)
  `CVE-2026-121410` · CVE record: FreeRDP FreeRDP · CVSS 5.3 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: Denial of service
- [FreeRDP before 3.32.2 Denial of Service via Oversized X.224 Routing Token](https://agentprime.io/advisories/CVE-2026-121409.md)
  `CVE-2026-121409` · CVE record: FreeRDP FreeRDP · CVSS 8.2 High · Not analysed yet · Published 3 Nov 2026 · Tags: Denial of service
- [FreeRDP before 3.32.2 Use-After-Free via USB Redirection Control Channel](https://agentprime.io/advisories/CVE-2026-121408.md)
  `CVE-2026-121408` · CVE record: FreeRDP FreeRDP · CVSS 6.0 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: Race condition
- [FreeRDP before 3.32.2 Shadow Server Denial of Service via remdesk Channel](https://agentprime.io/advisories/CVE-2026-121407.md)
  `CVE-2026-121407` · CVE record: FreeRDP FreeRDP · CVSS 7.1 High · Not analysed yet · Published 3 Nov 2026 · Tags: CWE-20
- [FreeRDP before 3.32.2 Client Denial of Service via Zero-Output ZGFX Payload](https://agentprime.io/advisories/CVE-2026-121406.md)
  `CVE-2026-121406` · CVE record: FreeRDP FreeRDP · CVSS 5.3 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: Denial of service
- [FreeRDP before 3.32.2 Memory Exhaustion via Serial RDPDR Device Control](https://agentprime.io/advisories/CVE-2026-121405.md)
  `CVE-2026-121405` · CVE record: FreeRDP FreeRDP · CVSS 5.3 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: Denial of service
- [FreeRDP before 3.32.2 Shadow Server CPU Exhaustion via Zero-Length DVC DATA](https://agentprime.io/advisories/CVE-2026-121404.md)
  `CVE-2026-121404` · CVE record: FreeRDP FreeRDP · CVSS 7.1 High · Not analysed yet · Published 3 Nov 2026 · Tags: Denial of service
- [FreeRDP before 3.32.2 Denial of Service via Malformed Drive IRP](https://agentprime.io/advisories/CVE-2026-121403.md)
  `CVE-2026-121403` · CVE record: FreeRDP FreeRDP · CVSS 5.3 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: Denial of service
- [FreeRDP before 3.32.2 X11 Client Crash via Zero-Width RDPGFX ResetGraphics](https://agentprime.io/advisories/CVE-2026-121402.md)
  `CVE-2026-121402` · CVE record: FreeRDP FreeRDP · CVSS 7.1 High · Not analysed yet · Published 3 Nov 2026 · Tags: Memory corruption
- [FreeRDP before 3.32.2 Denial of Service via RD Gateway extended-auth packet](https://agentprime.io/advisories/CVE-2026-121401.md)
  `CVE-2026-121401` · CVE record: FreeRDP FreeRDP · CVSS 5.3 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: Memory corruption
- [FreeRDP before 3.32.2 CPU Exhaustion via RDG Control Packet](https://agentprime.io/advisories/CVE-2026-121400.md)
  `CVE-2026-121400` · CVE record: FreeRDP FreeRDP · CVSS 7.1 High · Not analysed yet · Published 3 Nov 2026 · Tags: Denial of service
- [FreeRDP before 3.32.2 Memory Exhaustion via RD Gateway Packet Length](https://agentprime.io/advisories/CVE-2026-121399.md)
  `CVE-2026-121399` · CVE record: FreeRDP FreeRDP · CVSS 5.3 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: Denial of service
- [FreeRDP before 3.32.2 Use-After-Free via dyn-channel-dump Module](https://agentprime.io/advisories/CVE-2026-121398.md)
  `CVE-2026-121398` · CVE record: FreeRDP FreeRDP · CVSS 8.2 High · Not analysed yet · Published 3 Nov 2026 · Tags: Memory corruption
- [FreeRDP before 3.32.2 Heap Over-Read via WinPR save_png_to_buffer()](https://agentprime.io/advisories/CVE-2026-121397.md)
  `CVE-2026-121397` · CVE record: FreeRDP FreeRDP · CVSS 5.3 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: Memory corruption
- [FreeRDP 3.0.0 before 3.32.2 denial of service via RTS padding assertion](https://agentprime.io/advisories/CVE-2026-121396.md)
  `CVE-2026-121396` · CVE record: FreeRDP FreeRDP · CVSS 5.3 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: Denial of service
- [FreeRDP 3.17.0 before 3.32.2 Denial of Service via RemoteFX Decoder](https://agentprime.io/advisories/CVE-2026-121395.md)
  `CVE-2026-121395` · CVE record: FreeRDP FreeRDP · CVSS 7.1 High · Not analysed yet · Published 3 Nov 2026 · Tags: Denial of service
- [FreeRDP before 3.32.2 Denial of Service via RemoteFX RLGR decoder](https://agentprime.io/advisories/CVE-2026-121394.md)
  `CVE-2026-121394` · CVE record: FreeRDP FreeRDP · CVSS 7.1 High · Not analysed yet · Published 3 Nov 2026 · Tags: Denial of service
- [FreeRDP 3.0.0 before 3.32.2 Denial of Service via RemoteFX Region Assertion](https://agentprime.io/advisories/CVE-2026-121393.md)
  `CVE-2026-121393` · CVE record: FreeRDP FreeRDP · CVSS 7.1 High · Not analysed yet · Published 3 Nov 2026 · Tags: Denial of service
- [FreeRDP before 3.32.2 Certificate Identity Validation Bypass via tls_verify_certificate](https://agentprime.io/advisories/CVE-2026-121392.md)
  `CVE-2026-121392` · CVE record: FreeRDP FreeRDP · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Nov 2026 · Tags: Weak cryptography or TLS
- [FreeRDP before 3.32.2 File Descriptor Exhaustion via Parallel CREATE](https://agentprime.io/advisories/CVE-2026-121391.md)
  `CVE-2026-121391` · CVE record: FreeRDP FreeRDP · CVSS 5.3 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: Denial of service
- [FreeRDP before 3.32.2 Null Pointer Crash via ARM Gateway Response](https://agentprime.io/advisories/CVE-2026-121390.md)
  `CVE-2026-121390` · CVE record: FreeRDP FreeRDP · CVSS 5.3 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: Denial of service
- [FreeRDP 3.27.0 before 3.32.2 Client DoS via RDPDR Device Announcement Logging](https://agentprime.io/advisories/CVE-2026-121389.md)
  `CVE-2026-121389` · CVE record: FreeRDP FreeRDP · CVSS 2.3 Low · Not analysed yet · Published 3 Nov 2026 · Tags: Denial of service
- [FreeRDP 3.0.0 before 3.32.2 Uncapped Memory Allocation via DRDYNVC DATA_FIRST](https://agentprime.io/advisories/CVE-2026-121388.md)
  `CVE-2026-121388` · CVE record: FreeRDP FreeRDP · CVSS 7.1 High · Not analysed yet · Published 3 Nov 2026 · Tags: Denial of service
- [FreeRDP 2.0.0 before 3.32.2 Out-of-Bounds Read via GSM610/WAV49 Decoder](https://agentprime.io/advisories/CVE-2026-121387.md)
  `CVE-2026-121387` · CVE record: FreeRDP FreeRDP · CVSS 5.3 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: Memory corruption
- [FreeRDP before 3.32.2 Denial of Service via WinPR PNG/JPEG Image Readers](https://agentprime.io/advisories/CVE-2026-121386.md)
  `CVE-2026-121386` · CVE record: FreeRDP FreeRDP · CVSS 8.7 High · Not analysed yet · Published 3 Nov 2026 · Tags: CWE-248
- [FreeRDP 2.0.0 before 3.32.0 Proxy Improper TLS Certificate Validation](https://agentprime.io/advisories/CVE-2026-114047.md)
  `CVE-2026-114047` · CVE record: FreeRDP FreeRDP · CVSS 7.6 High · Not analysed yet · Published 21 Oct 2026 · Tags: Weak cryptography or TLS
- [FreeRDP 3.0.0 before 3.32.0 null-pointer dereference via emulated smartcard](https://agentprime.io/advisories/CVE-2026-114046.md)
  `CVE-2026-114046` · CVE record: FreeRDP FreeRDP · CVSS 7.1 High · Not analysed yet · Published 21 Oct 2026 · Tags: Memory corruption
- [FreeRDP before 3.32.1 Heap Buffer Overflow via rdpsnd_server_select_format](https://agentprime.io/advisories/CVE-2026-114045.md)
  `CVE-2026-114045` · CVE record: FreeRDP FreeRDP · CVSS 8.7 High · Not analysed yet · Published 21 Oct 2026 · Tags: Memory corruption
- [FreeRDP before 3.32.1 Android Client Heap OOB Read via Graphics Pipeline](https://agentprime.io/advisories/CVE-2026-114044.md)
  `CVE-2026-114044` · CVE record: FreeRDP FreeRDP · CVSS 6.9 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: Memory corruption
- [Vulnerability in FreeRDP](https://agentprime.io/advisories/CVE-2026-114043.md)
  `CVE-2026-114043` · CVE record: FreeRDP FreeRDP · CVSS 7.1 High · Not analysed yet · Published 21 Oct 2026 · Tags: Memory corruption
- [FreeRDP 3.32.0 Use-After-Free via drdynvc Virtual Channel PDU](https://agentprime.io/advisories/CVE-2026-114042.md)
  `CVE-2026-114042` · CVE record: FreeRDP FreeRDP · CVSS 7.1 High · Not analysed yet · Published 21 Oct 2026 · Tags: Memory corruption
- [FreeRDP before 3.32.1 Heap Out-of-Bounds Read via RD Gateway Consent Message](https://agentprime.io/advisories/CVE-2026-114041.md)
  `CVE-2026-114041` · CVE record: FreeRDP FreeRDP · CVSS 6.9 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: Memory corruption
- [FreeRDP 3.14.1 before 3.32.0 Integer Underflow in BMP Writer via Clipboard](https://agentprime.io/advisories/CVE-2026-111881.md)
  `CVE-2026-111881` · CVE record: FreeRDP FreeRDP · CVSS 7.2 High · Not analysed yet · Published 17 Oct 2026 · Tags: Memory corruption
- [FreeRDP 2.0.0 before 3.32.0 Heap Out-of-Bounds Write via NTLM MIC Offset](https://agentprime.io/advisories/CVE-2026-111880.md)
  `CVE-2026-111880` · CVE record: FreeRDP FreeRDP · CVSS 8.3 High · Not analysed yet · Published 17 Oct 2026 · Tags: Memory corruption
- [FreeRDP before 3.32.0 Heap Out-of-Bounds Write in AVC444 YUV444 Combine](https://agentprime.io/advisories/CVE-2026-111382.md)
  `CVE-2026-111382` · CVE record: FreeRDP FreeRDP · CVSS 8.7 High · Not analysed yet · Published 16 Oct 2026 · Tags: Memory corruption
- [FreeRDP before 3.32.0 Heap Buffer Overflow via Persistent Cache v2 Parser](https://agentprime.io/advisories/CVE-2026-111381.md)
  `CVE-2026-111381` · CVE record: FreeRDP FreeRDP · CVSS 7.0 High · Not analysed yet · Published 16 Oct 2026 · Tags: Memory corruption
- [FreeRDP 3.29.0 before 3.32.0 Heap Overflow via audin Apple Backends](https://agentprime.io/advisories/CVE-2026-111380.md)
  `CVE-2026-111380` · CVE record: FreeRDP FreeRDP · CVSS 8.7 High · Not analysed yet · Published 16 Oct 2026 · Tags: Memory corruption
- [FreeRDP before 3.32.0 Heap Buffer Overflow via persistent_cache_read_entry_v3](https://agentprime.io/advisories/CVE-2026-111379.md)
  `CVE-2026-111379` · CVE record: FreeRDP FreeRDP · CVSS 7.0 High · Not analysed yet · Published 16 Oct 2026 · Tags: Memory corruption
- [FreeRDP 3.0.0 before 3.32.0 Unauthenticated Memory Exhaustion via NLA Frame Parser](https://agentprime.io/advisories/CVE-2026-111378.md)
  `CVE-2026-111378` · CVE record: FreeRDP FreeRDP · CVSS 8.7 High · Not analysed yet · Published 16 Oct 2026 · Tags: Denial of service
- [FreeRDP 2.0.0 before 3.32.0 Memory Exhaustion via Static Channel Reassembly](https://agentprime.io/advisories/CVE-2026-111377.md)
  `CVE-2026-111377` · CVE record: FreeRDP FreeRDP · CVSS 7.1 High · Not analysed yet · Published 16 Oct 2026 · Tags: Denial of service
- [FreeRDP 3.30.0 before 3.32.0 Heap Over-Read via Windows cliprdr FILECONTENTS_SIZE](https://agentprime.io/advisories/CVE-2026-111376.md)
  `CVE-2026-111376` · CVE record: FreeRDP FreeRDP · CVSS 2.3 Low · Not analysed yet · Published 16 Oct 2026 · Tags: Memory corruption
- [FreeRDP 3.0.0 before 3.32.0 Out-of-Bounds Read via RAIL Window Title](https://agentprime.io/advisories/CVE-2026-111375.md)
  `CVE-2026-111375` · CVE record: FreeRDP FreeRDP · CVSS 6.3 Medium · Not analysed yet · Published 16 Oct 2026 · Tags: Memory corruption
- [FreeRDP from 3.30.0 before 3.32.0 Resource Exhaustion via rdpecam StartStreamsRequest](https://agentprime.io/advisories/CVE-2026-111374.md)
  `CVE-2026-111374` · CVE record: FreeRDP FreeRDP · CVSS 6.0 Medium · Not analysed yet · Published 16 Oct 2026 · Tags: CWE-20

Older: <https://agentprime.io/advisories/technology/freerdp.md?cursor=WyIyMDI2LTEwLTE2VDAxOjE3OjQxLjU1NjAwMFoiLCJDVkUtMjAyNi0xMTEzNzQiXQ>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=freerdp>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/freerdp/>. Everything for agents: <https://agentprime.io/llms.txt>.