Поиск уязвимостей
Количество 15
Количество 15
CVE-2026-91964
FreeRDP versions before 3.31.0 contain a heap-based buffer overflow in nego_send_negotiation_request when processing Server Redirection PDU messages with attacker-controlled LoadBalanceInfo fields. A malicious RDP server can trigger the overflow by sending an arbitrary-length field that gets written to a fixed 512-byte buffer without validation, causing client crashes or potential code execution when chained with memory disclosure.
CVE-2026-91964
FreeRDP versions before 3.31.0 contain a heap-based buffer overflow in nego_send_negotiation_request when processing Server Redirection PDU messages with attacker-controlled LoadBalanceInfo fields. A malicious RDP server can trigger the overflow by sending an arbitrary-length field that gets written to a fixed 512-byte buffer without validation, causing client crashes or potential code execution when chained with memory disclosure.
CVE-2026-91964
FreeRDP versions before 3.31.0 contain a heap-based buffer overflow in nego_send_negotiation_request when processing Server Redirection PDU messages with attacker-controlled LoadBalanceInfo fields. A malicious RDP server can trigger the overflow by sending an arbitrary-length field that gets written to a fixed 512-byte buffer without validation, causing client crashes or potential code execution when chained with memory disclosure.
CVE-2026-91964
FreeRDP versions before 3.31.0 contain a heap-based buffer overflow in ...
ROS-20261020-80-0091
Уязвимость freerdp
ROS-20261020-80-0090
Уязвимость freerdp3
ROS-20261020-73-0092
Уязвимость freerdp3
GHSA-f73m-4rv5-6gp4
FreeRDP versions before 3.31.0 contain a heap-based buffer overflow in nego_send_negotiation_request when processing Server Redirection PDU messages with attacker-controlled LoadBalanceInfo fields. A malicious RDP server can trigger the overflow by sending an arbitrary-length field that gets written to a fixed 512-byte buffer without validation, causing client crashes or potential code execution when chained with memory disclosure.
RLSA-2026:76755
Important: freerdp security update
RLSA-2026:76747
Important: freerdp security update
ELSA-2026-76755
ELSA-2026-76755: freerdp security update (IMPORTANT)
ELSA-2026-76747
ELSA-2026-76747: freerdp security update (IMPORTANT)
RLSA-2026:75570
Important: freerdp security update
ELSA-2026-75570
ELSA-2026-75570: freerdp security update (IMPORTANT)
ALT-PU-2026-15108
ALT-PU-2026-15108: package `freerdp3` update to version 3.31.1-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-91964 FreeRDP versions before 3.31.0 contain a heap-based buffer overflow in nego_send_negotiation_request when processing Server Redirection PDU messages with attacker-controlled LoadBalanceInfo fields. A malicious RDP server can trigger the overflow by sending an arbitrary-length field that gets written to a fixed 512-byte buffer without validation, causing client crashes or potential code execution when chained with memory disclosure. | CVSS3: 8.8 | 1% Низкий | около 2 месяцев назад |
 | CVE-2026-91964 FreeRDP versions before 3.31.0 contain a heap-based buffer overflow in nego_send_negotiation_request when processing Server Redirection PDU messages with attacker-controlled LoadBalanceInfo fields. A malicious RDP server can trigger the overflow by sending an arbitrary-length field that gets written to a fixed 512-byte buffer without validation, causing client crashes or potential code execution when chained with memory disclosure. | CVSS3: 8.8 | 1% Низкий | около 2 месяцев назад |
 | CVE-2026-91964 FreeRDP versions before 3.31.0 contain a heap-based buffer overflow in nego_send_negotiation_request when processing Server Redirection PDU messages with attacker-controlled LoadBalanceInfo fields. A malicious RDP server can trigger the overflow by sending an arbitrary-length field that gets written to a fixed 512-byte buffer without validation, causing client crashes or potential code execution when chained with memory disclosure. | CVSS3: 8.8 | 1% Низкий | около 2 месяцев назад |
| CVE-2026-91964 FreeRDP versions before 3.31.0 contain a heap-based buffer overflow in ... | CVSS3: 8.8 | 1% Низкий | около 2 месяцев назад |
 | ROS-20261020-80-0091 Уязвимость freerdp | CVSS3: 9.8 | 1% Низкий | 20 дней назад |
| ROS-20261020-80-0090 Уязвимость freerdp3 | CVSS3: 9.8 | 1% Низкий | 20 дней назад |
| ROS-20261020-73-0092 Уязвимость freerdp3 | CVSS3: 9.8 | 1% Низкий | 20 дней назад |
| GHSA-f73m-4rv5-6gp4 FreeRDP versions before 3.31.0 contain a heap-based buffer overflow in nego_send_negotiation_request when processing Server Redirection PDU messages with attacker-controlled LoadBalanceInfo fields. A malicious RDP server can trigger the overflow by sending an arbitrary-length field that gets written to a fixed 512-byte buffer without validation, causing client crashes or potential code execution when chained with memory disclosure. | CVSS3: 8.8 | 1% Низкий | около 2 месяцев назад |
 | RLSA-2026:76755 Important: freerdp security update | около 1 месяца назад | ||
| RLSA-2026:76747 Important: freerdp security update | около 1 месяца назад | ||
| ELSA-2026-76755 ELSA-2026-76755: freerdp security update (IMPORTANT) | около 1 месяца назад | ||
| ELSA-2026-76747 ELSA-2026-76747: freerdp security update (IMPORTANT) | около 1 месяца назад | ||
| RLSA-2026:75570 Important: freerdp security update | около 1 месяца назад | ||
| ELSA-2026-75570 ELSA-2026-75570: freerdp security update (IMPORTANT) | около 1 месяца назад | ||
| ALT-PU-2026-15108 ALT-PU-2026-15108: package `freerdp3` update to version 3.31.1-alt1 | CVSS3: 9.3 | около 2 месяцев назад |
Уязвимостей на страницу