agentprime: neutrinolabs-xrdpEvery new CVE for neutrinolabs-xrdp.https://agentprime.io/CVE-2026-55639: xrdp: Out-of-bounds read in GCC Conference Create Request CS_SECURITY processing (xrdp_sec_process_mcs_data_CS_SECURITY)https://agentprime.io/advisories/CVE-2026-55639/https://agentprime.io/advisories/CVE-2026-55639/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 20 Jul 2026 17:14:50 GMTCVECVE-2026-55626: xrdp: No authentication required with Xvnc backend on RHEL 9https://agentprime.io/advisories/CVE-2026-55626/https://agentprime.io/advisories/CVE-2026-55626/CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 20 Jul 2026 17:11:44 GMTCVECVE-2026-55238: xrdp: Malformed Confirm Active capability sets cause out-of-bounds readshttps://agentprime.io/advisories/CVE-2026-55238/https://agentprime.io/advisories/CVE-2026-55238/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 20 Jul 2026 17:05:01 GMTCVECVE-2026-54538: xrdp: Pre-auth infinite loop via totalLength=0 in TS_SHARECONTROLHEADERhttps://agentprime.io/advisories/CVE-2026-54538/https://agentprime.io/advisories/CVE-2026-54538/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 20 Jul 2026 16:57:32 GMTCVECVE-2026-44978: xrdp: Unchecked FIPS padding length in standard RDP Security causes heap out-of-bounds read in HMAC verificationhttps://agentprime.io/advisories/CVE-2026-44978/https://agentprime.io/advisories/CVE-2026-44978/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 20 Jul 2026 16:56:03 GMTCVECVE-2026-44178: xrdp: Channel Data Forwarding Fixed-Size Buffer Overflowhttps://agentprime.io/advisories/CVE-2026-44178/https://agentprime.io/advisories/CVE-2026-44178/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 20 Jul 2026 16:54:30 GMTCVECVE-2026-55645: xrdp: Out-of-bounds read in Client Control PDU processing (xrdp_rdp_process_data_control)https://agentprime.io/advisories/CVE-2026-55645/https://agentprime.io/advisories/CVE-2026-55645/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 20 Jul 2026 16:51:59 GMTCVECVE-2026-42218: XRDP is vulnerable to a server timing attack, leading to user enumerationhttps://agentprime.io/advisories/CVE-2026-42218/https://agentprime.io/advisories/CVE-2026-42218/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 20 Jul 2026 16:44:26 GMTCVECVE-2026-41521: xrdp: lib_framebuffer_update Has Integer Overflow Heap Info Leak & ASLR Bypasshttps://agentprime.io/advisories/CVE-2026-41521/https://agentprime.io/advisories/CVE-2026-41521/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 20 Jul 2026 16:41:43 GMTCVECVE-2026-41252: xrdp: lib_palette_update Heap Buffer Overflow & RCEhttps://agentprime.io/advisories/CVE-2026-41252/https://agentprime.io/advisories/CVE-2026-41252/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 20 Jul 2026 16:29:53 GMTCVEcriticalCVE-2026-35512: xrdp: Heap buffer overflow in EGFX channelhttps://agentprime.io/advisories/CVE-2026-35512/https://agentprime.io/advisories/CVE-2026-35512/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 17 Apr 2026 20:21:59 GMTCVECVE-2026-33689: xrdp: Pre-authentication out-of-bounds reads in channel parsershttps://agentprime.io/advisories/CVE-2026-33689/https://agentprime.io/advisories/CVE-2026-33689/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 17 Apr 2026 20:16:31 GMTCVECVE-2026-33145: xrdp: Authenticated RCE via unsanitized AlternateShell execution in xrdp-sesmanhttps://agentprime.io/advisories/CVE-2026-33145/https://agentprime.io/advisories/CVE-2026-33145/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 17 Apr 2026 20:14:14 GMTCVECVE-2026-32624: xrdp: Heap buffer overflow in xrdp_sec_process_logon_info() via incorrect g_strncat length calculationhttps://agentprime.io/advisories/CVE-2026-32624/https://agentprime.io/advisories/CVE-2026-32624/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 17 Apr 2026 19:58:08 GMTCVECVE-2026-33516: xrdp: Pre-authentication out-of-bounds reads in RDP capability and channel parsershttps://agentprime.io/advisories/CVE-2026-33516/https://agentprime.io/advisories/CVE-2026-33516/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 17 Apr 2026 19:56:11 GMTCVECVE-2026-32623: xrdp: Heap buffer overflow in NeutrinoRDP channel reassemblyhttps://agentprime.io/advisories/CVE-2026-32623/https://agentprime.io/advisories/CVE-2026-32623/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 17 Apr 2026 19:43:58 GMTCVECVE-2026-32105: xrdp: RDP MAC signature (dataSignature) never verified on receive — integrity bypass in non-TLS modehttps://agentprime.io/advisories/CVE-2026-32105/https://agentprime.io/advisories/CVE-2026-32105/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 17 Apr 2026 19:27:39 GMTCVEcriticalCVE-2026-32107: xrdp: Fail-open privilege drop in sesexec — child processes may execute as root if setuid failshttps://agentprime.io/advisories/CVE-2026-32107/https://agentprime.io/advisories/CVE-2026-32107/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 17 Apr 2026 19:25:20 GMTCVECVE-2025-68670: xrdp improperly checks bounds of domain string length, which leads to Stack-based Buffer Overflowhttps://agentprime.io/advisories/CVE-2025-68670/https://agentprime.io/advisories/CVE-2025-68670/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Jan 2026 15:52:41 GMTCVEcriticalCVE-2024-39917: xrdp allows an ininite number of login attemptshttps://agentprime.io/advisories/CVE-2024-39917/https://agentprime.io/advisories/CVE-2024-39917/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 12 Jul 2024 15:24:01 GMTCVECVE-2023-42822: Unchecked access to font glyph info in xrdphttps://agentprime.io/advisories/CVE-2023-42822/https://agentprime.io/advisories/CVE-2023-42822/CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 27 Sep 2023 17:55:02 GMTCVECVE-2023-40184: Improper handling of session establishment errors in xrdphttps://agentprime.io/advisories/CVE-2023-40184/https://agentprime.io/advisories/CVE-2023-40184/CVSS 2.6 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Aug 2023 17:48:30 GMTCVECVE-2022-23477: Buffer Overflow in xrdphttps://agentprime.io/advisories/CVE-2022-23477/https://agentprime.io/advisories/CVE-2022-23477/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 09 Dec 2022 17:51:32 GMTCVEcriticalCVE-2022-23484: Integer Overflow in xrdphttps://agentprime.io/advisories/CVE-2022-23484/https://agentprime.io/advisories/CVE-2022-23484/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 09 Dec 2022 17:51:15 GMTCVECVE-2022-23483: Out-of-Bound Read in libxrdphttps://agentprime.io/advisories/CVE-2022-23483/https://agentprime.io/advisories/CVE-2022-23483/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 09 Dec 2022 17:50:52 GMTCVECVE-2022-23482: Out-of-Bound Read in xrdphttps://agentprime.io/advisories/CVE-2022-23482/https://agentprime.io/advisories/CVE-2022-23482/CVSS 0.0 (None). Published by the CVE Program. Not analysed by agentprime yet.Fri, 09 Dec 2022 17:50:39 GMTCVECVE-2022-23481: Out-of-Bound Read in xrdphttps://agentprime.io/advisories/CVE-2022-23481/https://agentprime.io/advisories/CVE-2022-23481/CVSS 0.0 (None). Published by the CVE Program. Not analysed by agentprime yet.Fri, 09 Dec 2022 17:50:24 GMTCVECVE-2022-23480: Buffer Overflow in xrdphttps://agentprime.io/advisories/CVE-2022-23480/https://agentprime.io/advisories/CVE-2022-23480/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 09 Dec 2022 17:50:08 GMTCVEcriticalCVE-2022-23479: Buffer Overflow occurs in xrdphttps://agentprime.io/advisories/CVE-2022-23479/https://agentprime.io/advisories/CVE-2022-23479/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 09 Dec 2022 17:49:56 GMTCVEcriticalCVE-2022-23478: Out of Bound Write in xrdphttps://agentprime.io/advisories/CVE-2022-23478/https://agentprime.io/advisories/CVE-2022-23478/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 09 Dec 2022 17:49:42 GMTCVEcriticalCVE-2022-23468: Buffer Overflow in xrdphttps://agentprime.io/advisories/CVE-2022-23468/https://agentprime.io/advisories/CVE-2022-23468/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 09 Dec 2022 17:49:24 GMTCVECVE-2022-23493: Out of Bound Read in xrdphttps://agentprime.io/advisories/CVE-2022-23493/https://agentprime.io/advisories/CVE-2022-23493/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 09 Dec 2022 17:48:49 GMTCVEcriticalCVE-2022-23613: Privilege escalation on xrdphttps://agentprime.io/advisories/CVE-2022-23613/https://agentprime.io/advisories/CVE-2022-23613/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 07 Feb 2022 21:40:09 GMTCVECVE-2020-4044: Local users can perform a buffer overflow attack against the xrdp-sesman service and then impersonate ithttps://agentprime.io/advisories/CVE-2020-4044/https://agentprime.io/advisories/CVE-2020-4044/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 Jun 2020 15:55:13 GMTCVE