Поиск уязвимостей
Количество 13
Количество 13
BDU:2026-07647
Уязвимость функции gdi_CreateSurface() RDP-клиента FreeRDP, позволяющая нарушителю выполнить произвольный код и вызвать отказ в обслуживании
ROS-20260707-80-0016
Уязвимость freerdp3
ROS-20260707-73-0017
Уязвимость freerdp3
ALT-PU-2026-8423
ALT-PU-2026-8423: package `freerdp3` update to version 3.26.0-alt1
ALT-PU-2026-8321
ALT-PU-2026-8321: package `freerdp3` update to version 3.26.0-alt1
CVE-2026-44421
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, a malicious RDP server can trigger a heap-buffer-overflow write in the FreeRDP client by sending crafted RDPGFX PDUs. The bug is in gdi_CacheToSurface: it validates a destination rectangle that is clamped to UINT16_MAX, but then performs the copy using the original cacheEntry->width/height. This can cause a large out-of-bounds heap write and may lead to client crashes or code execution. This bug is reachable from a malicious RDP server, but only when the client has RDPGFX enabled. This vulnerability is fixed in 3.26.0.
CVE-2026-44421
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, a malicious RDP server can trigger a heap-buffer-overflow write in the FreeRDP client by sending crafted RDPGFX PDUs. The bug is in gdi_CacheToSurface: it validates a destination rectangle that is clamped to UINT16_MAX, but then performs the copy using the original cacheEntry->width/height. This can cause a large out-of-bounds heap write and may lead to client crashes or code execution. This bug is reachable from a malicious RDP server, but only when the client has RDPGFX enabled. This vulnerability is fixed in 3.26.0.
CVE-2026-44421
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, a malicious RDP server can trigger a heap-buffer-overflow write in the FreeRDP client by sending crafted RDPGFX PDUs. The bug is in gdi_CacheToSurface: it validates a destination rectangle that is clamped to UINT16_MAX, but then performs the copy using the original cacheEntry->width/height. This can cause a large out-of-bounds heap write and may lead to client crashes or code execution. This bug is reachable from a malicious RDP server, but only when the client has RDPGFX enabled. This vulnerability is fixed in 3.26.0.
CVE-2026-44421
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ...
RLSA-2026:36203
Important: freerdp security update
ELSA-2026-36203
ELSA-2026-36203: freerdp security update (IMPORTANT)
openSUSE-SU-2026:21116-1
Security update for freerdp
SUSE-SU-2026:3562-1
Security update for freerdp
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2026-07647 Уязвимость функции gdi_CreateSurface() RDP-клиента FreeRDP, позволяющая нарушителю выполнить произвольный код и вызвать отказ в обслуживании | CVSS3: 8.8 | 1% Низкий | 6 месяцев назад |
 | ROS-20260707-80-0016 Уязвимость freerdp3 | CVSS3: 8.8 | 1% Низкий | 4 месяца назад |
| ROS-20260707-73-0017 Уязвимость freerdp3 | CVSS3: 8.8 | 1% Низкий | 4 месяца назад |
| ALT-PU-2026-8423 ALT-PU-2026-8423: package `freerdp3` update to version 3.26.0-alt1 | CVSS3: 9.8 | 5 месяцев назад | |
| ALT-PU-2026-8321 ALT-PU-2026-8321: package `freerdp3` update to version 3.26.0-alt1 | CVSS3: 9.8 | 6 месяцев назад | |
 | CVE-2026-44421 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, a malicious RDP server can trigger a heap-buffer-overflow write in the FreeRDP client by sending crafted RDPGFX PDUs. The bug is in gdi_CacheToSurface: it validates a destination rectangle that is clamped to UINT16_MAX, but then performs the copy using the original cacheEntry->width/height. This can cause a large out-of-bounds heap write and may lead to client crashes or code execution. This bug is reachable from a malicious RDP server, but only when the client has RDPGFX enabled. This vulnerability is fixed in 3.26.0. | CVSS3: 8.8 | 1% Низкий | 5 месяцев назад |
 | CVE-2026-44421 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, a malicious RDP server can trigger a heap-buffer-overflow write in the FreeRDP client by sending crafted RDPGFX PDUs. The bug is in gdi_CacheToSurface: it validates a destination rectangle that is clamped to UINT16_MAX, but then performs the copy using the original cacheEntry->width/height. This can cause a large out-of-bounds heap write and may lead to client crashes or code execution. This bug is reachable from a malicious RDP server, but only when the client has RDPGFX enabled. This vulnerability is fixed in 3.26.0. | CVSS3: 8.8 | 1% Низкий | 5 месяцев назад |
 | CVE-2026-44421 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, a malicious RDP server can trigger a heap-buffer-overflow write in the FreeRDP client by sending crafted RDPGFX PDUs. The bug is in gdi_CacheToSurface: it validates a destination rectangle that is clamped to UINT16_MAX, but then performs the copy using the original cacheEntry->width/height. This can cause a large out-of-bounds heap write and may lead to client crashes or code execution. This bug is reachable from a malicious RDP server, but only when the client has RDPGFX enabled. This vulnerability is fixed in 3.26.0. | CVSS3: 8.8 | 1% Низкий | 5 месяцев назад |
| CVE-2026-44421 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... | CVSS3: 8.8 | 1% Низкий | 5 месяцев назад |
 | RLSA-2026:36203 Important: freerdp security update | 4 месяца назад | ||
| ELSA-2026-36203 ELSA-2026-36203: freerdp security update (IMPORTANT) | 4 месяца назад | ||
 | openSUSE-SU-2026:21116-1 Security update for freerdp | 5 месяцев назад | ||
| SUSE-SU-2026:3562-1 Security update for freerdp | 3 месяца назад |
Уязвимостей на страницу