Поиск уязвимостей
Количество 18
Количество 18
CVE-2026-25941
FreeRDP is a free implementation of the Remote Desktop Protocol. Versions on the 2.x branch prior to to 2.11.8 and on the 3.x branch prior to 3.23.0 have an out-of-bounds read vulnerability in the FreeRDP client's RDPGFX channel that allows a malicious RDP server to read uninitialized heap memory by sending a crafted WIRE_TO_SURFACE_2 PDU with a `bitmapDataLength` value larger than the actual data in the packet. This can lead to information disclosure or client crashes when a user connects to a malicious server. Versions 2.11.8 and 3.23.0 fix the issue.
CVE-2026-25941
FreeRDP is a free implementation of the Remote Desktop Protocol. Versions on the 2.x branch prior to to 2.11.8 and on the 3.x branch prior to 3.23.0 have an out-of-bounds read vulnerability in the FreeRDP client's RDPGFX channel that allows a malicious RDP server to read uninitialized heap memory by sending a crafted WIRE_TO_SURFACE_2 PDU with a `bitmapDataLength` value larger than the actual data in the packet. This can lead to information disclosure or client crashes when a user connects to a malicious server. Versions 2.11.8 and 3.23.0 fix the issue.
CVE-2026-25941
FreeRDP is a free implementation of the Remote Desktop Protocol. Versions on the 2.x branch prior to to 2.11.8 and on the 3.x branch prior to 3.23.0 have an out-of-bounds read vulnerability in the FreeRDP client's RDPGFX channel that allows a malicious RDP server to read uninitialized heap memory by sending a crafted WIRE_TO_SURFACE_2 PDU with a `bitmapDataLength` value larger than the actual data in the packet. This can lead to information disclosure or client crashes when a user connects to a malicious server. Versions 2.11.8 and 3.23.0 fix the issue.
CVE-2026-25941
FreeRDP is a free implementation of the Remote Desktop Protocol. Versi ...
BDU:2026-04136
Уязвимость RDP-клиента FreeRDP, связанная с выходом операции за границы буфера в памяти в результате некорректной проверки входных данных, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
ROS-20260609-80-0007
Уязвимость freerdp
ROS-20260609-73-0004
Уязвимость freerdp3
ROS-20260609-73-0003
Уязвимость freerdp
SUSE-SU-2026:1635-1
Security update for freerdp
SUSE-SU-2026:1634-1
Security update for freerdp
SUSE-SU-2026:1632-1
Security update for freerdp
SUSE-SU-2026:1640-1
Security update for freerdp2
SUSE-SU-2026:1633-1
Security update for freerdp
openSUSE-SU-2026:20632-1
Security update for freerdp2
openSUSE-SU-2026:20657-1
Security update for freerdp
ALT-PU-2026-3624
ALT-PU-2026-3624: package `freerdp3` update to version 3.23.0-alt1
ALT-PU-2026-9838
ALT-PU-2026-9838: package `freerdp` update to version 2.11.8-alt0.p10.1
ALT-PU-2026-6926
ALT-PU-2026-6926: package `freerdp3` update to version 3.24.2-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-25941 FreeRDP is a free implementation of the Remote Desktop Protocol. Versions on the 2.x branch prior to to 2.11.8 and on the 3.x branch prior to 3.23.0 have an out-of-bounds read vulnerability in the FreeRDP client's RDPGFX channel that allows a malicious RDP server to read uninitialized heap memory by sending a crafted WIRE_TO_SURFACE_2 PDU with a `bitmapDataLength` value larger than the actual data in the packet. This can lead to information disclosure or client crashes when a user connects to a malicious server. Versions 2.11.8 and 3.23.0 fix the issue. | CVSS3: 8.1 | 0% Низкий | 9 месяцев назад |
 | CVE-2026-25941 FreeRDP is a free implementation of the Remote Desktop Protocol. Versions on the 2.x branch prior to to 2.11.8 and on the 3.x branch prior to 3.23.0 have an out-of-bounds read vulnerability in the FreeRDP client's RDPGFX channel that allows a malicious RDP server to read uninitialized heap memory by sending a crafted WIRE_TO_SURFACE_2 PDU with a `bitmapDataLength` value larger than the actual data in the packet. This can lead to information disclosure or client crashes when a user connects to a malicious server. Versions 2.11.8 and 3.23.0 fix the issue. | CVSS3: 5.4 | 0% Низкий | 9 месяцев назад |
 | CVE-2026-25941 FreeRDP is a free implementation of the Remote Desktop Protocol. Versions on the 2.x branch prior to to 2.11.8 and on the 3.x branch prior to 3.23.0 have an out-of-bounds read vulnerability in the FreeRDP client's RDPGFX channel that allows a malicious RDP server to read uninitialized heap memory by sending a crafted WIRE_TO_SURFACE_2 PDU with a `bitmapDataLength` value larger than the actual data in the packet. This can lead to information disclosure or client crashes when a user connects to a malicious server. Versions 2.11.8 and 3.23.0 fix the issue. | CVSS3: 8.1 | 0% Низкий | 9 месяцев назад |
| CVE-2026-25941 FreeRDP is a free implementation of the Remote Desktop Protocol. Versi ... | CVSS3: 8.1 | 0% Низкий | 9 месяцев назад |
 | BDU:2026-04136 Уязвимость RDP-клиента FreeRDP, связанная с выходом операции за границы буфера в памяти в результате некорректной проверки входных данных, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации | CVSS3: 8.1 | 0% Низкий | 9 месяцев назад |
 | ROS-20260609-80-0007 Уязвимость freerdp | CVSS3: 8.1 | 0% Низкий | 5 месяцев назад |
| ROS-20260609-73-0004 Уязвимость freerdp3 | CVSS3: 8.1 | 0% Низкий | 5 месяцев назад |
| ROS-20260609-73-0003 Уязвимость freerdp | CVSS3: 8.1 | 0% Низкий | 5 месяцев назад |
 | SUSE-SU-2026:1635-1 Security update for freerdp | 7 месяцев назад | ||
| SUSE-SU-2026:1634-1 Security update for freerdp | 7 месяцев назад | ||
| SUSE-SU-2026:1632-1 Security update for freerdp | 7 месяцев назад | ||
| SUSE-SU-2026:1640-1 Security update for freerdp2 | 6 месяцев назад | ||
| SUSE-SU-2026:1633-1 Security update for freerdp | 7 месяцев назад | ||
| openSUSE-SU-2026:20632-1 Security update for freerdp2 | 7 месяцев назад | ||
| openSUSE-SU-2026:20657-1 Security update for freerdp | 6 месяцев назад | ||
| ALT-PU-2026-3624 ALT-PU-2026-3624: package `freerdp3` update to version 3.23.0-alt1 | CVSS3: 9.8 | 8 месяцев назад | |
| ALT-PU-2026-9838 ALT-PU-2026-9838: package `freerdp` update to version 2.11.8-alt0.p10.1 | CVSS3: 9.8 | 5 месяцев назад | |
| ALT-PU-2026-6926 ALT-PU-2026-6926: package `freerdp3` update to version 3.24.2-alt1 | CVSS3: 9.8 | 6 месяцев назад |
Уязвимостей на страницу