Поиск уязвимостей
Количество 11
Количество 11
CVE-2026-91960
FreeRDP versions before 3.31.0 contain an integer overflow in WinPR's Stream_EnsureRemainingCapacity function that allows remote attackers to cause denial of service. A malicious RD Gateway peer can send a WebSocket Ping frame with a crafted 64-bit extended payload length to trigger integer wraparound, resulting in a double free that crashes the FreeRDP client during connection.
CVE-2026-91960
FreeRDP versions before 3.31.0 contain an integer overflow in WinPR's Stream_EnsureRemainingCapacity function that allows remote attackers to cause denial of service. A malicious RD Gateway peer can send a WebSocket Ping frame with a crafted 64-bit extended payload length to trigger integer wraparound, resulting in a double free that crashes the FreeRDP client during connection.
CVE-2026-91960
FreeRDP versions before 3.31.0 contain an integer overflow in WinPR's Stream_EnsureRemainingCapacity function that allows remote attackers to cause denial of service. A malicious RD Gateway peer can send a WebSocket Ping frame with a crafted 64-bit extended payload length to trigger integer wraparound, resulting in a double free that crashes the FreeRDP client during connection.
CVE-2026-91960
FreeRDP versions before 3.31.0 contain an integer overflow in WinPR's ...
ROS-20261021-80-0033
Уязвимость freerdp
ROS-20261021-80-0032
Уязвимость freerdp3
ROS-20261021-73-0034
Уязвимость freerdp3
GHSA-7w2c-f8mf-gfr7
FreeRDP versions before 3.31.0 contain an integer overflow in WinPR's Stream_EnsureRemainingCapacity function that allows remote attackers to cause denial of service. A malicious RD Gateway peer can send a WebSocket Ping frame with a crafted 64-bit extended payload length to trigger integer wraparound, resulting in a double free that crashes the FreeRDP client during connection.
RLSA-2026:75570
Important: freerdp security update
ELSA-2026-75570
ELSA-2026-75570: freerdp security update (IMPORTANT)
ALT-PU-2026-15108
ALT-PU-2026-15108: package `freerdp3` update to version 3.31.1-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-91960 FreeRDP versions before 3.31.0 contain an integer overflow in WinPR's Stream_EnsureRemainingCapacity function that allows remote attackers to cause denial of service. A malicious RD Gateway peer can send a WebSocket Ping frame with a crafted 64-bit extended payload length to trigger integer wraparound, resulting in a double free that crashes the FreeRDP client during connection. | CVSS3: 6.5 | 0% Низкий | около 2 месяцев назад |
 | CVE-2026-91960 FreeRDP versions before 3.31.0 contain an integer overflow in WinPR's Stream_EnsureRemainingCapacity function that allows remote attackers to cause denial of service. A malicious RD Gateway peer can send a WebSocket Ping frame with a crafted 64-bit extended payload length to trigger integer wraparound, resulting in a double free that crashes the FreeRDP client during connection. | CVSS3: 6.5 | 0% Низкий | около 2 месяцев назад |
 | CVE-2026-91960 FreeRDP versions before 3.31.0 contain an integer overflow in WinPR's Stream_EnsureRemainingCapacity function that allows remote attackers to cause denial of service. A malicious RD Gateway peer can send a WebSocket Ping frame with a crafted 64-bit extended payload length to trigger integer wraparound, resulting in a double free that crashes the FreeRDP client during connection. | CVSS3: 6.5 | 0% Низкий | около 2 месяцев назад |
| CVE-2026-91960 FreeRDP versions before 3.31.0 contain an integer overflow in WinPR's ... | CVSS3: 6.5 | 0% Низкий | около 2 месяцев назад |
 | ROS-20261021-80-0033 Уязвимость freerdp | CVSS3: 7.5 | 0% Низкий | 19 дней назад |
| ROS-20261021-80-0032 Уязвимость freerdp3 | CVSS3: 7.5 | 0% Низкий | 19 дней назад |
| ROS-20261021-73-0034 Уязвимость freerdp3 | CVSS3: 7.5 | 0% Низкий | 19 дней назад |
| GHSA-7w2c-f8mf-gfr7 FreeRDP versions before 3.31.0 contain an integer overflow in WinPR's Stream_EnsureRemainingCapacity function that allows remote attackers to cause denial of service. A malicious RD Gateway peer can send a WebSocket Ping frame with a crafted 64-bit extended payload length to trigger integer wraparound, resulting in a double free that crashes the FreeRDP client during connection. | CVSS3: 6.5 | 0% Низкий | около 2 месяцев назад |
 | RLSA-2026:75570 Important: freerdp security update | около 1 месяца назад | ||
| ELSA-2026-75570 ELSA-2026-75570: freerdp security update (IMPORTANT) | около 1 месяца назад | ||
| ALT-PU-2026-15108 ALT-PU-2026-15108: package `freerdp3` update to version 3.31.1-alt1 | CVSS3: 9.3 | около 2 месяцев назад |
Уязвимостей на страницу