# FreeRDP. Every CVE that names FreeRDP among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [FreeRDP before 3.32.0 NULL Dereference via Zero-Length WebSocket Ping](https://agentprime.io/advisories/CVE-2026-111373.md) `CVE-2026-111373` · CVE record: FreeRDP FreeRDP · CVSS 6.9 Medium · Not analysed yet · Published 16 Oct 2026 · Tags: Memory corruption - [FreeRDP 3.3.0 before 3.32.0 Heap Out-of-Bounds Write via Grayscale JPEG Clipboard Data](https://agentprime.io/advisories/CVE-2026-110839.md) `CVE-2026-110839` · CVE record: FreeRDP FreeRDP · CVSS 7.1 High · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption - [FreeRDP shadow before 3.32.0 Pre-Authentication Input Injection via Confirm Active bypass](https://agentprime.io/advisories/CVE-2026-110838.md) `CVE-2026-110838` · CVE record: FreeRDP FreeRDP · CVSS 8.7 High · Not analysed yet · Published 14 Oct 2026 · Tags: Authentication bypass - [FreeRDP 2.0.0 before 3.32.0 Heap Buffer Overflow via MP3 Audio Decoding](https://agentprime.io/advisories/CVE-2026-110837.md) `CVE-2026-110837` · CVE record: FreeRDP FreeRDP · CVSS 6.1 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption - [FreeRDP 3.0.0 before 3.32.0 Infinite Loop DoS via Gateway Content-Type](https://agentprime.io/advisories/CVE-2026-110836.md) `CVE-2026-110836` · CVE record: FreeRDP FreeRDP · CVSS 7.1 High · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service - [FreeRDP 3.0.0 before 3.32.0 HTTP Header Injection via Proxy Routing Token](https://agentprime.io/advisories/CVE-2026-110835.md) `CVE-2026-110835` · CVE record: FreeRDP FreeRDP · CVSS 6.3 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Other injection - [FreeRDP 2.0.0 before 3.32.0 Denial of Service via Serial IRP Null Handle](https://agentprime.io/advisories/CVE-2026-110834.md) `CVE-2026-110834` · CVE record: FreeRDP FreeRDP · CVSS 7.1 High · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption - [FreeRDP before 3.32.0 Unbounded Memory Retention via RDPDR Proxy](https://agentprime.io/advisories/CVE-2026-110833.md) `CVE-2026-110833` · CVE record: FreeRDP FreeRDP · CVSS 8.2 High · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service - [FreeRDP 2.0.0 before 3.32.0 Memory Exhaustion via DRDYNVC DATA_FIRST](https://agentprime.io/advisories/CVE-2026-110832.md) `CVE-2026-110832` · CVE record: FreeRDP FreeRDP · CVSS 7.1 High · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service - [FreeRDP 3.13.0 before 3.32.0 Resource Leak via Drive Redirection IRP_MJ_CREATE](https://agentprime.io/advisories/CVE-2026-110831.md) `CVE-2026-110831` · CVE record: FreeRDP FreeRDP · CVSS 5.3 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: CWE-775 - [FreeRDP before 3.32.0 Denial of Service via Serial IRP_MJ_CREATE](https://agentprime.io/advisories/CVE-2026-110830.md) `CVE-2026-110830` · CVE record: FreeRDP FreeRDP · CVSS 8.2 High · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service - [FreeRDP 3.0.0 before 3.32.0 Null Pointer Dereference via rdpsnd Fragment](https://agentprime.io/advisories/CVE-2026-110829.md) `CVE-2026-110829` · CVE record: FreeRDP FreeRDP · CVSS 7.1 High · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption - [FreeRDP 3.0.0 before 3.32.0 Cleartext Credential Disclosure via /restricted-admin](https://agentprime.io/advisories/CVE-2026-109953.md) `CVE-2026-109953` · CVE record: FreeRDP FreeRDP · CVSS 6.0 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Hard-coded credentials - [FreeRDP 3.0.0 before 3.32.0 Security Protocol Downgrade via Negotiation Response](https://agentprime.io/advisories/CVE-2026-109952.md) `CVE-2026-109952` · CVE record: FreeRDP FreeRDP · CVSS 6.0 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: CWE-757 - [FreeRDP 3.17.1 before 3.32.0 Heap Buffer Over-Read via Proxy DRDYNVC Channel Name](https://agentprime.io/advisories/CVE-2026-109951.md) `CVE-2026-109951` · CVE record: FreeRDP FreeRDP · CVSS 6.9 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption - [FreeRDP 3.0.0 before 3.32.0 Heap Out-of-Bounds Read via RD Gateway Messages](https://agentprime.io/advisories/CVE-2026-109950.md) `CVE-2026-109950` · CVE record: FreeRDP FreeRDP · CVSS 5.3 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption - [FreeRDP 3.0.0 before 3.32.0 PIN Brute-Force via Virtual Smartcard](https://agentprime.io/advisories/CVE-2026-109949.md) `CVE-2026-109949` · CVE record: FreeRDP FreeRDP · CVSS 7.1 High · Not analysed yet · Published 13 Oct 2026 · Tags: Authentication bypass - [FreeRDP 3.0.0 before 3.32.0 Memory Disclosure via SCardTransmit Smartcard Redirection](https://agentprime.io/advisories/CVE-2026-109948.md) `CVE-2026-109948` · CVE record: FreeRDP FreeRDP · CVSS 5.3 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Information disclosure - [FreeRDP 3.20.1 before 3.32.0 Unbounded Allocation via drive_process_irp_read](https://agentprime.io/advisories/CVE-2026-109947.md) `CVE-2026-109947` · CVE record: FreeRDP FreeRDP · CVSS 7.1 High · Not analysed yet · Published 13 Oct 2026 · Tags: Denial of service - [FreeRDP 3.11.0 before 3.32.0 Reachable Assertion via AVC444 Odd Region Width](https://agentprime.io/advisories/CVE-2026-109946.md) `CVE-2026-109946` · CVE record: FreeRDP FreeRDP · CVSS 7.1 High · Not analysed yet · Published 13 Oct 2026 · Tags: Denial of service - [FreeRDP 3.0.0 before 3.32.0 Smartcard Use-After-Free via Concurrent Disconnect and Transmit](https://agentprime.io/advisories/CVE-2026-109945.md) `CVE-2026-109945` · CVE record: FreeRDP FreeRDP · CVSS 6.0 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Race condition - [FreeRDP 3.0.0 before 3.32.0 Reachable Assertion via Stale Smartcard Handle](https://agentprime.io/advisories/CVE-2026-109944.md) `CVE-2026-109944` · CVE record: FreeRDP FreeRDP · CVSS 7.1 High · Not analysed yet · Published 13 Oct 2026 · Tags: Denial of service - [FreeRDP 3.29.0 before 3.32.0 Double Free via Async-Update Polygon Order](https://agentprime.io/advisories/CVE-2026-109943.md) `CVE-2026-109943` · CVE record: FreeRDP FreeRDP · CVSS 7.1 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption - [FreeRDP 2.3.0 before 3.32.0 NULL Pointer Dereference via RD Gateway Close Channel Packet](https://agentprime.io/advisories/CVE-2026-109942.md) `CVE-2026-109942` · CVE record: FreeRDP FreeRDP · CVSS 7.1 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption - [FreeRDP 2.3.0 before 3.32.0 Infinite Loop via RD Gateway Chunked Response](https://agentprime.io/advisories/CVE-2026-109941.md) `CVE-2026-109941` · CVE record: FreeRDP FreeRDP · CVSS 7.1 High · Not analysed yet · Published 13 Oct 2026 · Tags: Denial of service - [FreeRDP 3.0.0-beta1 before 3.32.0 Stack Buffer Overflow via PKCS#11 Key Name](https://agentprime.io/advisories/CVE-2026-109940.md) `CVE-2026-109940` · CVE record: FreeRDP FreeRDP · CVSS 5.1 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption - [FreeRDP 3.27.1 before 3.32.0 NULL Pointer Dereference via Cache Bitmap V3 Order](https://agentprime.io/advisories/CVE-2026-109939.md) `CVE-2026-109939` · CVE record: FreeRDP FreeRDP · CVSS 7.1 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption - [FreeRDP 3.11.0 before 3.32.0 Integer Overflow via Mapped Video Geometry Update](https://agentprime.io/advisories/CVE-2026-109938.md) `CVE-2026-109938` · CVE record: FreeRDP FreeRDP · CVSS 7.1 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption - [FreeRDP 3.18.0 before 3.32.0 Heap Out-of-Bounds Write via ARM Redirected Username](https://agentprime.io/advisories/CVE-2026-109680.md) `CVE-2026-109680` · CVE record: FreeRDP FreeRDP · CVSS 6.0 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption - [FreeRDP 3.0.0-beta4 before 3.32.0 NULL Pointer Crash via ARM Response](https://agentprime.io/advisories/CVE-2026-109679.md) `CVE-2026-109679` · CVE record: FreeRDP FreeRDP · CVSS 6.0 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption - [FreeRDP 3.0.0-beta1 before 3.32.0 Reachable Assertion via Emulated SCardStatusA](https://agentprime.io/advisories/CVE-2026-109678.md) `CVE-2026-109678` · CVE record: FreeRDP FreeRDP · CVSS 7.1 High · Not analysed yet · Published 13 Oct 2026 · Tags: Denial of service - [FreeRDP 2.0.0-beta1 before 3.28.0 Out-of-Bounds Read via LocateCardsByATRA Handler](https://agentprime.io/advisories/CVE-2026-109677.md) `CVE-2026-109677` · CVE record: FreeRDP FreeRDP · CVSS 7.1 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption - [FreeRDP 3.0.0-beta1 before 3.32.0 Use-After-Free via Smartcard Connect](https://agentprime.io/advisories/CVE-2026-109676.md) `CVE-2026-109676` · CVE record: FreeRDP FreeRDP · CVSS 8.7 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption - [FreeRDP before 3.32.0 Double Free via NSCodec plane growth failure](https://agentprime.io/advisories/CVE-2026-109257.md) `CVE-2026-109257` · CVE record: FreeRDP FreeRDP · CVSS 8.2 High · Not analysed yet · Published 12 Oct 2026 · Tags: Memory corruption - [FreeRDP 3.10.0 through 3.32.2 Heap Buffer Overflow in WinPR PNG Conversion](https://agentprime.io/advisories/CVE-2026-109256.md) `CVE-2026-109256` · CVE record: FreeRDP FreeRDP · CVSS 6.0 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Memory corruption - [FreeRDP 3.0.0 before 3.32.0 heap buffer overflow via license_check_stream_length](https://agentprime.io/advisories/CVE-2026-109255.md) `CVE-2026-109255` · CVE record: FreeRDP FreeRDP · CVSS 6.1 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Memory corruption - [FreeRDP 2.1.0 before 3.32.0 Use-After-Free via rdpsnd Disconnect Path](https://agentprime.io/advisories/CVE-2026-109254.md) `CVE-2026-109254` · CVE record: FreeRDP FreeRDP · CVSS 6.0 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Memory corruption - [FreeRDP 3.9.0 before 3.32.0 RDPEAR NDR Scalar Out-of-Bounds Read](https://agentprime.io/advisories/CVE-2026-109253.md) `CVE-2026-109253` · CVE record: FreeRDP FreeRDP · CVSS 6.0 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Memory corruption - [FreeRDP from 3.9.0 before 3.32.0 RDPEAR NULL Pointer Dereference via KERB_RPC_INTERNAL_NAME](https://agentprime.io/advisories/CVE-2026-109252.md) `CVE-2026-109252` · CVE record: FreeRDP FreeRDP · CVSS 6.0 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Memory corruption - [FreeRDP before 3.32.0 Out-of-Bounds Write via MS-RDPEGT Video Geometry](https://agentprime.io/advisories/CVE-2026-109251.md) `CVE-2026-109251` · CVE record: FreeRDP FreeRDP · CVSS 6.0 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: CWE-129 - [FreeRDP 3.0.0 before 3.32.0 Heap Buffer Overflow via PKCS#11 collect_keys()](https://agentprime.io/advisories/CVE-2026-109250.md) `CVE-2026-109250` · CVE record: FreeRDP FreeRDP · CVSS 7.0 High · Not analysed yet · Published 12 Oct 2026 · Tags: CWE-129 - [FreeRDP 3.0.0 before 3.32.0 Heap Out-of-Bounds Read via Remote Assistance File Parsing](https://agentprime.io/advisories/CVE-2026-109249.md) `CVE-2026-109249` · CVE record: FreeRDP FreeRDP · CVSS 6.8 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Memory corruption - [FreeRDP 3.0.0 before 3.32.0 Heap Out-of-Bounds Read via WinPR Clipboard cFileName](https://agentprime.io/advisories/CVE-2026-109248.md) `CVE-2026-109248` · CVE record: FreeRDP FreeRDP · CVSS 6.9 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Memory corruption - [FreeRDP before 3.32.0 Path Traversal via Clipboard cFileName](https://agentprime.io/advisories/CVE-2026-109247.md) `CVE-2026-109247` · CVE record: FreeRDP FreeRDP · CVSS 2.1 Low · Not analysed yet · Published 12 Oct 2026 · Tags: Path traversal - [FreeRDP before 3.32.0 Shadow Server Divide-by-Zero via Frame Acknowledge PDU](https://agentprime.io/advisories/CVE-2026-109246.md) `CVE-2026-109246` · CVE record: FreeRDP FreeRDP · CVSS 7.1 High · Not analysed yet · Published 12 Oct 2026 · Tags: Memory corruption - [FreeRDP 3.0.0 before 3.32.0 Improper Certificate Validation in freerdp_http_request](https://agentprime.io/advisories/CVE-2026-109245.md) `CVE-2026-109245` · CVE record: FreeRDP FreeRDP · CVSS 7.4 High · Not analysed yet · Published 12 Oct 2026 · Tags: Weak cryptography or TLS - [FreeRDP 2.0.0 before 3.32.0 Insecure Private Key Permissions in winpr-makecert](https://agentprime.io/advisories/CVE-2026-109244.md) `CVE-2026-109244` · CVE record: FreeRDP FreeRDP · CVSS 6.8 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Broken access control - [FreeRDP 3.0.0 before 3.32.0 Insecure Permissions on Soft-Smartcard Private Key File](https://agentprime.io/advisories/CVE-2026-109243.md) `CVE-2026-109243` · CVE record: FreeRDP FreeRDP · CVSS 4.1 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Broken access control - [FreeRDP before 3.0.0 and 3.6.0 before 3.32.0 Uninitialized Heap Disclosure via Progressive Codec Tile Upgrade](https://agentprime.io/advisories/CVE-2026-109242.md) `CVE-2026-109242` · CVE record: FreeRDP FreeRDP · CVSS 7.1 High · Not analysed yet · Published 12 Oct 2026 · Tags: Memory corruption - [FreeRDP before 3.32.0 NULL Dereference in Video Redirection Channel](https://agentprime.io/advisories/CVE-2026-109241.md) `CVE-2026-109241` · CVE record: FreeRDP FreeRDP · CVSS 2.3 Low · Not analysed yet · Published 12 Oct 2026 · Tags: Memory corruption - [FreeRDP 3.11.0 before 3.32.1 Reachable Assertion DoS via urb_isoch_transfer](https://agentprime.io/advisories/CVE-2026-109240.md) `CVE-2026-109240` · CVE record: FreeRDP FreeRDP · CVSS 2.3 Low · Not analysed yet · Published 12 Oct 2026 · Tags: Denial of service - [FreeRDP 2.0.0 through 3.30.0 Heap Buffer Overflow via RoutingToken](https://agentprime.io/advisories/CVE-2026-91964.md) `CVE-2026-91964` · CVE record: FreeRDP FreeRDP · CVSS 8.7 High · Not analysed yet · Published 15 Sept 2026 · Tags: Memory corruption - [FreeRDP 2.0.0 through 3.30.0 Uninitialized Heap Memory Disclosure via urbdrc](https://agentprime.io/advisories/CVE-2026-91963.md) `CVE-2026-91963` · CVE record: FreeRDP FreeRDP · CVSS 7.1 High · Not analysed yet · Published 15 Sept 2026 · Tags: Memory corruption - [FreeRDP before 3.31.0 Integer Overflow via audin Apple backends](https://agentprime.io/advisories/CVE-2026-91962.md) `CVE-2026-91962` · CVE record: FreeRDP FreeRDP · CVSS 5.3 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Memory corruption - [FreeRDP before 3.31.0 Denial of Service via URBDRC](https://agentprime.io/advisories/CVE-2026-91961.md) `CVE-2026-91961` · CVE record: FreeRDP FreeRDP · CVSS 7.1 High · Not analysed yet · Published 15 Sept 2026 · Tags: Denial of service - [FreeRDP before 3.31.0 Integer Overflow Double Free](https://agentprime.io/advisories/CVE-2026-91960.md) `CVE-2026-91960` · CVE record: FreeRDP FreeRDP · CVSS 7.1 High · Not analysed yet · Published 15 Sept 2026 · Tags: Memory corruption - [FreeRDP before 3.31.0 Buffer Over-read via RTS Gateway](https://agentprime.io/advisories/CVE-2026-91959.md) `CVE-2026-91959` · CVE record: FreeRDP FreeRDP · CVSS 7.1 High · Not analysed yet · Published 15 Sept 2026 · Tags: Memory corruption - [FreeRDP 3.11.0 through 3.30.0 Heap Buffer Overflow via Monitor Index](https://agentprime.io/advisories/CVE-2026-91958.md) `CVE-2026-91958` · CVE record: FreeRDP FreeRDP · CVSS 6.9 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Memory corruption - [FreeRDP before 3.31.0 Use-After-Free via smartcard worker](https://agentprime.io/advisories/CVE-2026-91957.md) `CVE-2026-91957` · CVE record: FreeRDP FreeRDP · CVSS 2.3 Low · Not analysed yet · Published 15 Sept 2026 · Tags: Memory corruption - [FreeRDP before 3.31.0 Out-of-Bounds Read via URBDRC](https://agentprime.io/advisories/CVE-2026-91956.md) `CVE-2026-91956` · CVE record: FreeRDP FreeRDP · CVSS 7.1 High · Not analysed yet · Published 15 Sept 2026 · Tags: Memory corruption Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .