FreeRDP CVEs

32 high and critical vulnerabilities covered by CVE Brief since 2026-02-11, each with independent analyst commentary.

← All vendors RSS feed Watch this vendor
32 Total CVEs
32 AI Analyzed
0 CISA KEV
5 Critical

Profile

0% ended up actively exploited 0 of 32 added to CISA KEV
16% rated critical (CVSS 9.0+) 5 critical, 27 high
0 with a public exploit on record positive-only index; absence is not proof

Last 12 months

32 CVEs in the last 12 months

Products

  • FreeRDP32

1 products in total

Every figure counts the high and critical CVEs CVE Brief has published for this vendor, not every CVE the vendor has ever received. Exploitation means listing in the CISA Known Exploited Vulnerabilities catalog. No patch-availability figure is shown because CVE Brief does not measure it.

All Vendors
Showing 1-32 of 32 CVEs
CVE-2026-68579
Analyzed
9.6
FreeRDP FreeRDP

FreeRDP contains a heap-based buffer overflow in the Windows clipboard client, which can be triggered by a malicious RDP server sending an oversized r...

2026-08-03
Full analysis →
CVE-2026-67305
Analyzed
9.4
FreeRDP FreeRDP

A heap-based buffer overflow in the FreeRDP Windows client's clipboard virtual channel allows remote code execution when processing malicious clipboar...

2026-08-02
Full analysis →
CVE-2026-67289
Analyzed
9.8
FreeRDP FreeRDP

FreeRDP is vulnerable to HTTP request header injection because it fails to sanitize control characters in RDP redirection addresses when using an HTTP...

2026-08-02
Full analysis →
CVE-2026-66402
Analyzed
9.8
FreeRDP FreeRDP

FreeRDP contains multiple TLS certificate validation flaws allowing attackers to bypass server identity verification due to improper handling of Commo...

2026-08-02
Full analysis →
CVE-2026-64620
Analyzed
9.8
FreeRDP FreeRDP

A heap-based buffer overflow in FreeRDP's crypto_rsa_common function allows an unauthenticated attacker to cause a denial of service by sending a forg...

2026-07-21
Full analysis →