Поиск уязвимостей
Количество 15
Количество 15
CVE-2026-91956
FreeRDP before 3.31.0 contains an out-of-bounds read vulnerability in the URBDRC channel's func_get_ep_desc function that indexes interface arrays by position instead of protocol field InterfaceNumber. A malicious RDP server can send a crafted SELECT_CONFIGURATION message with permuted InterfaceNumber values to read past allocated heap memory and crash the client.
CVE-2026-91956
FreeRDP before 3.31.0 contains an out-of-bounds read vulnerability in the URBDRC channel's func_get_ep_desc function that indexes interface arrays by position instead of protocol field InterfaceNumber. A malicious RDP server can send a crafted SELECT_CONFIGURATION message with permuted InterfaceNumber values to read past allocated heap memory and crash the client.
CVE-2026-91956
FreeRDP before 3.31.0 contains an out-of-bounds read vulnerability in the URBDRC channel's func_get_ep_desc function that indexes interface arrays by position instead of protocol field InterfaceNumber. A malicious RDP server can send a crafted SELECT_CONFIGURATION message with permuted InterfaceNumber values to read past allocated heap memory and crash the client.
CVE-2026-91956
FreeRDP before 3.31.0 contains an out-of-bounds read vulnerability in ...
ROS-20261020-80-0085
Уязвимость freerdp
ROS-20261020-80-0084
Уязвимость freerdp3
ROS-20261020-73-0086
Уязвимость freerdp3
GHSA-mh85-h6g9-mfcc
FreeRDP before 3.31.0 contains an out-of-bounds read vulnerability in the URBDRC channel's func_get_ep_desc function that indexes interface arrays by position instead of protocol field InterfaceNumber. A malicious RDP server can send a crafted SELECT_CONFIGURATION message with permuted InterfaceNumber values to read past allocated heap memory and crash the client.
RLSA-2026:76755
Important: freerdp security update
RLSA-2026:76747
Important: freerdp security update
ELSA-2026-76755
ELSA-2026-76755: freerdp security update (IMPORTANT)
ELSA-2026-76747
ELSA-2026-76747: freerdp security update (IMPORTANT)
RLSA-2026:75570
Important: freerdp security update
ELSA-2026-75570
ELSA-2026-75570: freerdp security update (IMPORTANT)
ALT-PU-2026-15108
ALT-PU-2026-15108: package `freerdp3` update to version 3.31.1-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-91956 FreeRDP before 3.31.0 contains an out-of-bounds read vulnerability in the URBDRC channel's func_get_ep_desc function that indexes interface arrays by position instead of protocol field InterfaceNumber. A malicious RDP server can send a crafted SELECT_CONFIGURATION message with permuted InterfaceNumber values to read past allocated heap memory and crash the client. | CVSS3: 6.5 | 0% Низкий | около 2 месяцев назад |
 | CVE-2026-91956 FreeRDP before 3.31.0 contains an out-of-bounds read vulnerability in the URBDRC channel's func_get_ep_desc function that indexes interface arrays by position instead of protocol field InterfaceNumber. A malicious RDP server can send a crafted SELECT_CONFIGURATION message with permuted InterfaceNumber values to read past allocated heap memory and crash the client. | CVSS3: 6.5 | 0% Низкий | около 2 месяцев назад |
 | CVE-2026-91956 FreeRDP before 3.31.0 contains an out-of-bounds read vulnerability in the URBDRC channel's func_get_ep_desc function that indexes interface arrays by position instead of protocol field InterfaceNumber. A malicious RDP server can send a crafted SELECT_CONFIGURATION message with permuted InterfaceNumber values to read past allocated heap memory and crash the client. | CVSS3: 6.5 | 0% Низкий | около 2 месяцев назад |
| CVE-2026-91956 FreeRDP before 3.31.0 contains an out-of-bounds read vulnerability in ... | CVSS3: 6.5 | 0% Низкий | около 2 месяцев назад |
 | ROS-20261020-80-0085 Уязвимость freerdp | CVSS3: 7.5 | 0% Низкий | 20 дней назад |
| ROS-20261020-80-0084 Уязвимость freerdp3 | CVSS3: 7.5 | 0% Низкий | 20 дней назад |
| ROS-20261020-73-0086 Уязвимость freerdp3 | CVSS3: 7.5 | 0% Низкий | 20 дней назад |
| GHSA-mh85-h6g9-mfcc FreeRDP before 3.31.0 contains an out-of-bounds read vulnerability in the URBDRC channel's func_get_ep_desc function that indexes interface arrays by position instead of protocol field InterfaceNumber. A malicious RDP server can send a crafted SELECT_CONFIGURATION message with permuted InterfaceNumber values to read past allocated heap memory and crash the client. | CVSS3: 6.5 | 0% Низкий | около 2 месяцев назад |
 | RLSA-2026:76755 Important: freerdp security update | около 1 месяца назад | ||
| RLSA-2026:76747 Important: freerdp security update | около 1 месяца назад | ||
| ELSA-2026-76755 ELSA-2026-76755: freerdp security update (IMPORTANT) | около 1 месяца назад | ||
| ELSA-2026-76747 ELSA-2026-76747: freerdp security update (IMPORTANT) | около 1 месяца назад | ||
| RLSA-2026:75570 Important: freerdp security update | около 1 месяца назад | ||
| ELSA-2026-75570 ELSA-2026-75570: freerdp security update (IMPORTANT) | около 1 месяца назад | ||
| ALT-PU-2026-15108 ALT-PU-2026-15108: package `freerdp3` update to version 3.31.1-alt1 | CVSS3: 9.3 | около 2 месяцев назад |
Уязвимостей на страницу