https://cvebrief.com/archive/cves/vendor/freerdp/ High and critical FreeRDP vulnerabilities covered by CVE Brief, with independent analyst commentary. en-us Fri, 21 Aug 2026 12:00:00 GMT https://cvebrief.com/cve/cve-2026-55191/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-freerdp-CVE-2026-55191 Fri, 21 Aug 2026 12:00:00 GMT FreeRDP is a free implementation of the Remote Desktop Protocol Fix documented (OSV.dev). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-55193/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-freerdp-CVE-2026-55193 Fri, 21 Aug 2026 12:00:00 GMT FreeRDP is a free implementation of the Remote Desktop Protocol Fix documented (OSV.dev). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-55194/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-freerdp-CVE-2026-55194 Fri, 21 Aug 2026 12:00:00 GMT FreeRDP is a free implementation of the Remote Desktop Protocol Fix documented (OSV.dev). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-68579/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-freerdp-CVE-2026-68579 Mon, 03 Aug 2026 12:00:00 GMT FreeRDP contains a heap-based buffer overflow in the Windows clipboard client, which can be triggered by a malicious RDP server sending an oversized response. Fix documented: 3.30.0 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-68580/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-freerdp-CVE-2026-68580 Mon, 03 Aug 2026 12:00:00 GMT FreeRDP before 3 Fix documented: 3.29.0 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-66402/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-freerdp-CVE-2026-66402 Sun, 02 Aug 2026 12:00:00 GMT FreeRDP contains multiple TLS certificate validation flaws allowing attackers to bypass server identity verification due to improper handling of Common Name and DNS SAN strings. Fix documented: 3.29.0 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-67288/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-freerdp-CVE-2026-67288 Sun, 02 Aug 2026 12:00:00 GMT FreeRDP before 3 Fix documented: 3.29.0 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-67289/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-freerdp-CVE-2026-67289 Sun, 02 Aug 2026 12:00:00 GMT FreeRDP is vulnerable to HTTP request header injection because it fails to sanitize control characters in RDP redirection addresses when using an HTTP proxy. Fix documented: 3.29.0 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-67290/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-freerdp-CVE-2026-67290 Sun, 02 Aug 2026 12:00:00 GMT FreeRDP before 3 Fix documented: 3.29.0 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-67291/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-freerdp-CVE-2026-67291 Sun, 02 Aug 2026 12:00:00 GMT FreeRDP before 3 Fix documented: 3.29.0 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-67296/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-freerdp-CVE-2026-67296 Sun, 02 Aug 2026 12:00:00 GMT FreeRDP before 3 Fix documented: 3.29.0 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-67297/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-freerdp-CVE-2026-67297 Sun, 02 Aug 2026 12:00:00 GMT FreeRDP before 3 Fix documented: 3.29.0 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-67298/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-freerdp-CVE-2026-67298 Sun, 02 Aug 2026 12:00:00 GMT FreeRDP versions 3 Fix documented: 3.29.0 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-67299/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-freerdp-CVE-2026-67299 Sun, 02 Aug 2026 12:00:00 GMT FreeRDP before 3 Fix documented: 3.29.0 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-67300/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-freerdp-CVE-2026-67300 Sun, 02 Aug 2026 12:00:00 GMT FreeRDP before 3 Fix documented: 3.29.0 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-67301/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-freerdp-CVE-2026-67301 Sun, 02 Aug 2026 12:00:00 GMT FreeRDP before 3 Fix documented: 3.29.0 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-67304/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-freerdp-CVE-2026-67304 Sun, 02 Aug 2026 12:00:00 GMT FreeRDP before 3 Fix documented: 3.29.0 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-67305/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-freerdp-CVE-2026-67305 Sun, 02 Aug 2026 12:00:00 GMT A heap-based buffer overflow in the FreeRDP Windows client's clipboard virtual channel allows remote code execution when processing malicious clipboard responses from an RDP server. Fix documented: 3.29.0 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-64620/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-freerdp-CVE-2026-64620 Tue, 21 Jul 2026 12:00:00 GMT A heap-based buffer overflow in FreeRDP's crypto_rsa_common function allows an unauthenticated attacker to cause a denial of service by sending a forged RDP standard security ciphertext. Fix documented: 3.28.0 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-55827/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-freerdp-CVE-2026-55827 Sun, 12 Jul 2026 12:00:00 GMT FreeRDP is a free implementation of the Remote Desktop Protocol Fix documented (OSV.dev). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-57156/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-freerdp-CVE-2026-57156 Sat, 11 Jul 2026 12:00:00 GMT FreeRDP is a free implementation of the Remote Desktop Protocol Fix documented (OSV.dev). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-44420/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-freerdp-CVE-2026-44420 Sat, 30 May 2026 12:00:00 GMT FreeRDP is a free implementation of the Remote Desktop Protocol Fix documented (OSV.dev). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-44421/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-freerdp-CVE-2026-44421 Sat, 30 May 2026 12:00:00 GMT FreeRDP is a free implementation of the Remote Desktop Protocol Fix documented (OSV.dev). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-40033/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-freerdp-CVE-2026-40033 Wed, 27 May 2026 12:00:00 GMT FreeRDP before 3 Fix documented: 3.26.0 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-33982/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-freerdp-CVE-2026-33982 Tue, 31 Mar 2026 12:00:00 GMT FreeRDP is a free implementation of the Remote Desktop Protocol Fix documented (OSV.dev). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-33984/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-freerdp-CVE-2026-33984 Tue, 31 Mar 2026 12:00:00 GMT FreeRDP is a free implementation of the Remote Desktop Protocol Fix documented (OSV.dev). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-33986/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-freerdp-CVE-2026-33986 Tue, 31 Mar 2026 12:00:00 GMT FreeRDP is a free implementation of the Remote Desktop Protocol Fix documented (OSV.dev). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-33987/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-freerdp-CVE-2026-33987 Tue, 31 Mar 2026 12:00:00 GMT FreeRDP is a free implementation of the Remote Desktop Protocol Fix documented (OSV.dev). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-26955/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-freerdp-CVE-2026-26955 Thu, 26 Feb 2026 12:00:00 GMT FreeRDP is a free implementation of the Remote Desktop Protocol Fix documented (OSV.dev). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-26965/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-freerdp-CVE-2026-26965 Thu, 26 Feb 2026 12:00:00 GMT FreeRDP is a free implementation of the Remote Desktop Protocol Fix documented (OSV.dev). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-23948/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-freerdp-CVE-2026-23948 Wed, 11 Feb 2026 12:00:00 GMT FreeRDP is a free implementation of the Remote Desktop Protocol Fix documented (OSV.dev). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-24491/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-freerdp-CVE-2026-24491 Wed, 11 Feb 2026 12:00:00 GMT FreeRDP is a free implementation of the Remote Desktop Protocol Fix documented (OSV.dev). Independent analyst report on CVE Brief.