# FreeRDP. Every CVE that names FreeRDP among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [FreeRDP: contains_dotdot() off-by-one allows drive channel path traversal via terminal ..](https://agentprime.io/advisories/CVE-2026-40254.md) `CVE-2026-40254` · CVE record: FreeRDP FreeRDP · CVSS 4.2 Medium · Not analysed yet · Published 24 Apr 2026 · Tags: CWE-193 - [FreeRDP: Possible double free in kerberos_AcceptSecurityContext](https://agentprime.io/advisories/CVE-2026-33995.md) `CVE-2026-33995` · CVE record: FreeRDP FreeRDP · CVSS 5.3 Medium · Not analysed yet · Published 30 Mar 2026 · Tags: Memory corruption - [FreeRDP: Persistent Cache bmpSize Desync - Heap OOB Write](https://agentprime.io/advisories/CVE-2026-33987.md) `CVE-2026-33987` · CVE record: FreeRDP FreeRDP · CVSS 7.1 High · Not analysed yet · Published 30 Mar 2026 · Tags: Memory corruption - [FreeRDP: H.264 YUV Buffer Dimension Desync - Heap OOB Write](https://agentprime.io/advisories/CVE-2026-33986.md) `CVE-2026-33986` · CVE record: FreeRDP FreeRDP · CVSS 7.5 High · Not analysed yet · Published 30 Mar 2026 · Tags: Memory corruption - [FreeRDP: ClearCodec Glyph Cache Count Desync - Heap OOB Read](https://agentprime.io/advisories/CVE-2026-33985.md) `CVE-2026-33985` · CVE record: FreeRDP FreeRDP · CVSS 5.9 Medium · Not analysed yet · Published 30 Mar 2026 · Tags: Memory corruption - [FreeRDP: ClearCodec resize_vbar_entry() Heap OOB Write](https://agentprime.io/advisories/CVE-2026-33984.md) `CVE-2026-33984` · CVE record: FreeRDP FreeRDP · CVSS 7.5 High · Not analysed yet · Published 30 Mar 2026 · Tags: Memory corruption - [FreeRDP: Progressive Codec Quant BYTE Underflow - UB + CPU DoS](https://agentprime.io/advisories/CVE-2026-33983.md) `CVE-2026-33983` · CVE record: FreeRDP FreeRDP · CVSS 6.5 Medium · Not analysed yet · Published 30 Mar 2026 · Tags: Memory corruption, CWE-252 - [FreeRDP: Persistent Cache Allocator Mismatch - Heap OOB Read](https://agentprime.io/advisories/CVE-2026-33982.md) `CVE-2026-33982` · CVE record: FreeRDP FreeRDP · CVSS 7.1 High · Not analysed yet · Published 30 Mar 2026 · Tags: Memory corruption - [FreeRDP: DoS via WINPR_ASSERT in rts_read_auth_verifier_no_checks](https://agentprime.io/advisories/CVE-2026-33952.md) `CVE-2026-33952` · CVE record: FreeRDP FreeRDP · CVSS 6.0 Medium · Not analysed yet · Published 30 Mar 2026 · Tags: Denial of service - [FreeRDP: DoS via WINPR_ASSERT in IMA ADPCM audio decoder (dsp.c:331)](https://agentprime.io/advisories/CVE-2026-33977.md) `CVE-2026-33977` · CVE record: FreeRDP FreeRDP · CVSS 6.9 Medium · Not analysed yet · Published 30 Mar 2026 · Tags: Denial of service - [FreeRDP has an out-of-bounds read in \`freerdp_bitmap_decompress_planar\`](https://agentprime.io/advisories/CVE-2026-31897.md) `CVE-2026-31897` · CVE record: FreeRDP FreeRDP · CVSS 0.0 None · Not analysed yet · Published 13 Mar 2026 · Tags: Memory corruption - [FreeRDP has a Heap Buffer Overflow in nsc_process_message() via Unchecked SURFACE_BITS_COMMAND Bitmap Dimensions](https://agentprime.io/advisories/CVE-2026-31806.md) `CVE-2026-31806` · CVE record: FreeRDP FreeRDP · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Mar 2026 · Tags: Memory corruption - [FreeRDP has an out-of-bounds read in ADPCM decoders due to missing predictor/step_index bounds checks](https://agentprime.io/advisories/CVE-2026-31885.md) `CVE-2026-31885` · CVE record: FreeRDP FreeRDP · CVSS 6.5 Medium · Not analysed yet · Published 13 Mar 2026 · Tags: Memory corruption - [FreeRDP has a division-by-zero in ADPCM decoders when \`nBlockAlign\` is 0](https://agentprime.io/advisories/CVE-2026-31884.md) `CVE-2026-31884` · CVE record: FreeRDP FreeRDP · CVSS 6.5 Medium · Not analysed yet · Published 13 Mar 2026 · Tags: Denial of service - [FreeRDP has a \`size_t\` underflow in ADPCM decoder leads to heap-buffer-overflow write](https://agentprime.io/advisories/CVE-2026-31883.md) `CVE-2026-31883` · CVE record: FreeRDP FreeRDP · CVSS 6.5 Medium · Not analysed yet · Published 13 Mar 2026 · Tags: Memory corruption - [FreeRDP has an Integer Underflow in update_read_cache_bitmap_order Function of FreeRDP's Core Library](https://agentprime.io/advisories/CVE-2026-29776.md) `CVE-2026-29776` · CVE record: FreeRDP FreeRDP · CVSS 3.1 Low · Not analysed yet · Published 13 Mar 2026 · Tags: Memory corruption, Denial of service - [FreeRDP has a heap-buffer-overflow in bitmap_cache_put via OOB cacheId](https://agentprime.io/advisories/CVE-2026-29775.md) `CVE-2026-29775` · CVE record: FreeRDP FreeRDP · CVSS 5.3 Medium · Not analysed yet · Published 13 Mar 2026 · Tags: Memory corruption - [FreeRDP has a heap-buffer-overflow in avc420_yuv_to_rgb via OOB regionRects](https://agentprime.io/advisories/CVE-2026-29774.md) `CVE-2026-29774` · CVE record: FreeRDP FreeRDP · CVSS 5.3 Medium · Not analysed yet · Published 13 Mar 2026 · Tags: Memory corruption - [FreeRDP has possible Integer overflow in Stream_EnsureCapacity](https://agentprime.io/advisories/CVE-2026-27951.md) `CVE-2026-27951` · CVE record: FreeRDP FreeRDP · CVSS 5.3 Medium · Not analysed yet · Published 25 Feb 2026 · Tags: Memory corruption - [FreeRDP heap-use-after-free in update_pointer_new(SDL): Fix Applied in the Wrong File](https://agentprime.io/advisories/CVE-2026-27950.md) `CVE-2026-27950` · CVE record: FreeRDP FreeRDP · CVSS 5.5 Medium · Not analysed yet · Published 25 Feb 2026 · Tags: Memory corruption - [FreeRDP has heap-use-after-free in rail_window_free](https://agentprime.io/advisories/CVE-2026-26986.md) `CVE-2026-26986` · CVE record: FreeRDP FreeRDP · CVSS 5.5 Medium · Not analysed yet · Published 25 Feb 2026 · Tags: Memory corruption - [FreeRDP has Out-of-bounds Write](https://agentprime.io/advisories/CVE-2026-26965.md) `CVE-2026-26965` · CVE record: FreeRDP FreeRDP · CVSS 8.8 High · Not analysed yet · Published 25 Feb 2026 · Tags: Memory corruption - [FreeRDP has Out-of-bounds Write](https://agentprime.io/advisories/CVE-2026-26955.md) `CVE-2026-26955` · CVE record: FreeRDP FreeRDP · CVSS 8.8 High · Not analysed yet · Published 25 Feb 2026 · Tags: Memory corruption - [FreeRDP: Smartcard NDR Alignment Padding Triggers Reachable WINPR_ASSERT Abort (Client DoS)](https://agentprime.io/advisories/CVE-2026-27015.md) `CVE-2026-27015` · CVE record: FreeRDP FreeRDP · CVSS 5.0 Medium · Not analysed yet · Published 25 Feb 2026 · Tags: Denial of service - [Buffer Overread in FreeRDP Icon Processing](https://agentprime.io/advisories/CVE-2026-26271.md) `CVE-2026-26271` · CVE record: FreeRDP FreeRDP · CVSS 5.5 Medium · Not analysed yet · Published 25 Feb 2026 · Tags: CWE-126 - [FreeRDP has heap-use-after-free in xf_clipboard_format_equal](https://agentprime.io/advisories/CVE-2026-25997.md) `CVE-2026-25997` · CVE record: FreeRDP FreeRDP · CVSS 5.5 Medium · Not analysed yet · Published 25 Feb 2026 · Tags: Memory corruption - [FreeRDP has heap-use-after-free in xf_cliprdr_provide_data\_](https://agentprime.io/advisories/CVE-2026-25959.md) `CVE-2026-25959` · CVE record: FreeRDP FreeRDP · CVSS 5.5 Medium · Not analysed yet · Published 25 Feb 2026 · Tags: Memory corruption - [FreeRDP has heap-use-after-free in xf_AppUpdateWindowFromSurface (stale XImage)](https://agentprime.io/advisories/CVE-2026-25955.md) `CVE-2026-25955` · CVE record: FreeRDP FreeRDP · CVSS 5.5 Medium · Not analysed yet · Published 25 Feb 2026 · Tags: Memory corruption - [FreeRDP has heap-use-after-free in xf_rail_server_local_move_size](https://agentprime.io/advisories/CVE-2026-25954.md) `CVE-2026-25954` · CVE record: FreeRDP FreeRDP · CVSS 5.5 Medium · Not analysed yet · Published 25 Feb 2026 · Tags: Memory corruption - [FreeRDP has heap-use-after-free in xf_AppUpdateWindowFromSurface (freed appWindow)](https://agentprime.io/advisories/CVE-2026-25953.md) `CVE-2026-25953` · CVE record: FreeRDP FreeRDP · CVSS 5.5 Medium · Not analysed yet · Published 25 Feb 2026 · Tags: Memory corruption - [FreeRDP has heap-use-after-free in xf_SetWindowMinMaxInfo](https://agentprime.io/advisories/CVE-2026-25952.md) `CVE-2026-25952` · CVE record: FreeRDP FreeRDP · CVSS 5.5 Medium · Not analysed yet · Published 25 Feb 2026 · Tags: Memory corruption - [FreeRDP has global-buffer-overflow in xf_rail_server_execute_result](https://agentprime.io/advisories/CVE-2026-25942.md) `CVE-2026-25942` · CVE record: FreeRDP FreeRDP · CVSS 5.5 Medium · Not analysed yet · Published 25 Feb 2026 · Tags: Memory corruption - [FreeRDP: vuln_1_15_1 RDPGFX WIRE_TO_SURFACE_2 Out-of-Bounds Read](https://agentprime.io/advisories/CVE-2026-25941.md) `CVE-2026-25941` · CVE record: FreeRDP FreeRDP · CVSS 4.3 Medium · Not analysed yet · Published 25 Feb 2026 · Tags: Memory corruption, CWE-20 - [FreeRDP has a Heap-use-after-free in play_thread](https://agentprime.io/advisories/CVE-2026-24684.md) `CVE-2026-24684` · CVE record: FreeRDP FreeRDP · CVSS 8.7 High · Not analysed yet · Published 9 Feb 2026 · Tags: Memory corruption - [FreeRDP has a heap-use-after-free in ainput_send_input_event](https://agentprime.io/advisories/CVE-2026-24683.md) `CVE-2026-24683` · CVE record: FreeRDP FreeRDP · CVSS 8.7 High · Not analysed yet · Published 9 Feb 2026 · Tags: Memory corruption - [FreeRDP has a Heap-buffer-overflow in audio_formats_free](https://agentprime.io/advisories/CVE-2026-24682.md) `CVE-2026-24682` · CVE record: FreeRDP FreeRDP · CVSS 8.7 High · Not analysed yet · Published 9 Feb 2026 · Tags: Memory corruption - [FreeRDP has a heap-use-after-free in urb_bulk_transfer_cb](https://agentprime.io/advisories/CVE-2026-24681.md) `CVE-2026-24681` · CVE record: FreeRDP FreeRDP · CVSS 8.7 High · Not analysed yet · Published 9 Feb 2026 · Tags: Memory corruption - [FreeRDP has a heap-use-after-free in update_pointer_new(SDL)](https://agentprime.io/advisories/CVE-2026-24680.md) `CVE-2026-24680` · CVE record: FreeRDP FreeRDP · CVSS 8.7 High · Not analysed yet · Published 9 Feb 2026 · Tags: Memory corruption - [FreeRDP has a heap-buffer-overflow in urb_select_interface](https://agentprime.io/advisories/CVE-2026-24679.md) `CVE-2026-24679` · CVE record: FreeRDP FreeRDP · CVSS 8.7 High · Not analysed yet · Published 9 Feb 2026 · Tags: Memory corruption - [FreeRDP has a Heap-use-after-free in cam_v4l_stream_capture_thread](https://agentprime.io/advisories/CVE-2026-24678.md) `CVE-2026-24678` · CVE record: FreeRDP FreeRDP · CVSS 8.7 High · Not analysed yet · Published 9 Feb 2026 · Tags: Memory corruption - [FreeRDP has a heap-buffer-overflow in ecam_encoder_compress_h264](https://agentprime.io/advisories/CVE-2026-24677.md) `CVE-2026-24677` · CVE record: FreeRDP FreeRDP · CVSS 8.7 High · Not analysed yet · Published 9 Feb 2026 · Tags: Memory corruption - [FreeRDP has a heap-use-after-free in audio_format_compatible](https://agentprime.io/advisories/CVE-2026-24676.md) `CVE-2026-24676` · CVE record: FreeRDP FreeRDP · CVSS 7.7 High · Not analysed yet · Published 9 Feb 2026 · Tags: Memory corruption - [FreeRDP has a Heap-use-after-free in urb_select_interface](https://agentprime.io/advisories/CVE-2026-24675.md) `CVE-2026-24675` · CVE record: FreeRDP FreeRDP · CVSS 7.7 High · Not analysed yet · Published 9 Feb 2026 · Tags: Memory corruption - [FreeRDP has a heap-use-after-free in video_timer](https://agentprime.io/advisories/CVE-2026-24491.md) `CVE-2026-24491` · CVE record: FreeRDP FreeRDP · CVSS 7.7 High · Not analysed yet · Published 9 Feb 2026 · Tags: Memory corruption - [FreeRDP has a NULL Pointer Dereference in rdp_write_logon_info_v2()](https://agentprime.io/advisories/CVE-2026-23948.md) `CVE-2026-23948` · CVE record: FreeRDP FreeRDP · CVSS 6.9 Medium · Not analysed yet · Published 9 Feb 2026 · Tags: Memory corruption - [Heap-use-after-free in gdi_set_bounds](https://agentprime.io/advisories/CVE-2026-23884.md) `CVE-2026-23884` · CVE record: FreeRDP FreeRDP · CVSS 7.7 High · Not analysed yet · Published 19 Jan 2026 · Tags: Memory corruption - [Heap-use-after-free in update_pointer_new](https://agentprime.io/advisories/CVE-2026-23883.md) `CVE-2026-23883` · CVE record: FreeRDP FreeRDP · CVSS 7.7 High · Not analysed yet · Published 19 Jan 2026 · Tags: Memory corruption - [FreeRDP has heap-buffer-overflow in Glyph_Alloc](https://agentprime.io/advisories/CVE-2026-23732.md) `CVE-2026-23732` · CVE record: FreeRDP FreeRDP · CVSS 5.5 Medium · Not analysed yet · Published 19 Jan 2026 · Tags: Memory corruption - [FreeRDP has heap-buffer-overflow in clear_decompress_bands_data](https://agentprime.io/advisories/CVE-2026-23534.md) `CVE-2026-23534` · CVE record: FreeRDP FreeRDP · CVSS 7.7 High · Not analysed yet · Published 19 Jan 2026 · Tags: Memory corruption - [FreeRDP has heap-buffer-overflow in clear_decompress_residual_data](https://agentprime.io/advisories/CVE-2026-23533.md) `CVE-2026-23533` · CVE record: FreeRDP FreeRDP · CVSS 7.7 High · Not analysed yet · Published 19 Jan 2026 · Tags: Memory corruption - [FreeRDP has heap-buffer-overflow in gdi_SurfaceToSurface](https://agentprime.io/advisories/CVE-2026-23532.md) `CVE-2026-23532` · CVE record: FreeRDP FreeRDP · CVSS 7.7 High · Not analysed yet · Published 19 Jan 2026 · Tags: Memory corruption - [FreeRDP has heap-buffer-overflow in clear_decompress](https://agentprime.io/advisories/CVE-2026-23531.md) `CVE-2026-23531` · CVE record: FreeRDP FreeRDP · CVSS 7.7 High · Not analysed yet · Published 19 Jan 2026 · Tags: Memory corruption - [FreeRDP has heap-buffer-overflow in planar_decompress_plane_rle](https://agentprime.io/advisories/CVE-2026-23530.md) `CVE-2026-23530` · CVE record: FreeRDP FreeRDP · CVSS 7.7 High · Not analysed yet · Published 19 Jan 2026 · Tags: Memory corruption - [FreeRDP has a heap-buffer-overflow in urb_select_configuration](https://agentprime.io/advisories/CVE-2026-22859.md) `CVE-2026-22859` · CVE record: FreeRDP FreeRDP · CVSS 5.6 Medium · Not analysed yet · Published 14 Jan 2026 · Tags: Memory corruption, CWE-129 - [FreeRDP has a global-buffer-overflow in crypto_base64_decode](https://agentprime.io/advisories/CVE-2026-22858.md) `CVE-2026-22858` · CVE record: FreeRDP FreeRDP · CVSS 5.6 Medium · Not analysed yet · Published 14 Jan 2026 · Tags: Memory corruption, CWE-758 - [FreeRDP has a heap-use-after-free in irp_thread_func](https://agentprime.io/advisories/CVE-2026-22857.md) `CVE-2026-22857` · CVE record: FreeRDP FreeRDP · CVSS 6.8 Medium · Not analysed yet · Published 14 Jan 2026 · Tags: Memory corruption - [FreeRDP has a heap-use-after-free in create_irp_thread](https://agentprime.io/advisories/CVE-2026-22856.md) `CVE-2026-22856` · CVE record: FreeRDP FreeRDP · CVSS 6.8 Medium · Not analysed yet · Published 14 Jan 2026 · Tags: Race condition, Memory corruption - [FreeRDP has a heap-buffer-overflow in smartcard_unpack_set_attrib_call](https://agentprime.io/advisories/CVE-2026-22855.md) `CVE-2026-22855` · CVE record: FreeRDP FreeRDP · CVSS 5.6 Medium · Not analysed yet · Published 14 Jan 2026 · Tags: Memory corruption - [FreeRDP has a heap-buffer-overflow in drive_process_irp_read](https://agentprime.io/advisories/CVE-2026-22854.md) `CVE-2026-22854` · CVE record: FreeRDP FreeRDP · CVSS 6.8 Medium · Not analysed yet · Published 14 Jan 2026 · Tags: Memory corruption - [FreeRDP has a heap-buffer-overflow in ndr_read_uint8Array](https://agentprime.io/advisories/CVE-2026-22853.md) `CVE-2026-22853` · CVE record: FreeRDP FreeRDP · CVSS 6.8 Medium · Not analysed yet · Published 14 Jan 2026 · Tags: Memory corruption Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .