Количество 47
Количество 47
CVE-2026-22858
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, global-buffer-overflow was observed in FreeRDP's Base64 decoding path. The root cause appears to be implementation-defined char signedness: on Arm/AArch64 builds, plain char is treated as unsigned, so the guard c <= 0 can be optimized into a simple c != 0 check. As a result, non-ASCII bytes (e.g., 0x80-0xFF) may bypass the intended range restriction and be used as an index into a global lookup table, causing out-of-bounds access. This vulnerability is fixed in 3.20.1.
CVE-2026-22858
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, global-buffer-overflow was observed in FreeRDP's Base64 decoding path. The root cause appears to be implementation-defined char signedness: on Arm/AArch64 builds, plain char is treated as unsigned, so the guard c <= 0 can be optimized into a simple c != 0 check. As a result, non-ASCII bytes (e.g., 0x80-0xFF) may bypass the intended range restriction and be used as an index into a global lookup table, causing out-of-bounds access. This vulnerability is fixed in 3.20.1.
CVE-2026-22858
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ...
CVE-2026-22859
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, the URBDRC client does not perform bounds checking on server‑supplied MSUSB_INTERFACE_DESCRIPTOR values and uses them as indices in libusb_udev_complete_msconfig_setup, causing an out‑of‑bounds read. This vulnerability is fixed in 3.20.1.
CVE-2026-22859
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, the URBDRC client does not perform bounds checking on server‑supplied MSUSB_INTERFACE_DESCRIPTOR values and uses them as indices in libusb_udev_complete_msconfig_setup, causing an out‑of‑bounds read. This vulnerability is fixed in 3.20.1.
CVE-2026-22859
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, the URBDRC client does not perform bounds checking on server‑supplied MSUSB_INTERFACE_DESCRIPTOR values and uses them as indices in libusb_udev_complete_msconfig_setup, causing an out‑of‑bounds read. This vulnerability is fixed in 3.20.1.
CVE-2026-22859
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ...
SUSE-SU-2026:0761-1
Security update for freerdp
SUSE-SU-2026:0656-1
Security update for freerdp
BDU:2026-00620
Уязвимость RDP-клиента FreeRDP, связанная с выходом операции за границы буфера в памяти, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2026-00628
Уязвимость клиента перенаправления USB-устройств URBDRC RDP-клиента FreeRDP, позволяющая нарушителю выполнить произвольный код или вызвать отказ в обслуживании
ROS-20260611-80-0024
Уязвимость freerdp3
ROS-20260611-80-0002
Уязвимость freerdp
ROS-20260611-73-0004
Уязвимость freerdp3
ROS-20260611-73-0003
Уязвимость freerdp
SUSE-SU-2026:0762-1
Security update for freerdp
ROS-20260611-80-0023
Уязвимость freerdp3
ROS-20260611-80-0001
Уязвимость freerdp
ROS-20260611-73-0002
Уязвимость freerdp3
ROS-20260611-73-0001
Уязвимость freerdp
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-22858 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, global-buffer-overflow was observed in FreeRDP's Base64 decoding path. The root cause appears to be implementation-defined char signedness: on Arm/AArch64 builds, plain char is treated as unsigned, so the guard c <= 0 can be optimized into a simple c != 0 check. As a result, non-ASCII bytes (e.g., 0x80-0xFF) may bypass the intended range restriction and be used as an index into a global lookup table, causing out-of-bounds access. This vulnerability is fixed in 3.20.1. | CVSS3: 7.4 | 1% Низкий | 8 месяцев назад |
 | CVE-2026-22858 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, global-buffer-overflow was observed in FreeRDP's Base64 decoding path. The root cause appears to be implementation-defined char signedness: on Arm/AArch64 builds, plain char is treated as unsigned, so the guard c <= 0 can be optimized into a simple c != 0 check. As a result, non-ASCII bytes (e.g., 0x80-0xFF) may bypass the intended range restriction and be used as an index into a global lookup table, causing out-of-bounds access. This vulnerability is fixed in 3.20.1. | CVSS3: 9.1 | 1% Низкий | 8 месяцев назад |
| CVE-2026-22858 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... | CVSS3: 9.1 | 1% Низкий | 8 месяцев назад |
 | CVE-2026-22859 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, the URBDRC client does not perform bounds checking on server‑supplied MSUSB_INTERFACE_DESCRIPTOR values and uses them as indices in libusb_udev_complete_msconfig_setup, causing an out‑of‑bounds read. This vulnerability is fixed in 3.20.1. | CVSS3: 9.1 | 1% Низкий | 8 месяцев назад |
| CVE-2026-22859 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, the URBDRC client does not perform bounds checking on server‑supplied MSUSB_INTERFACE_DESCRIPTOR values and uses them as indices in libusb_udev_complete_msconfig_setup, causing an out‑of‑bounds read. This vulnerability is fixed in 3.20.1. | CVSS3: 7.4 | 1% Низкий | 8 месяцев назад |
| CVE-2026-22859 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, the URBDRC client does not perform bounds checking on server‑supplied MSUSB_INTERFACE_DESCRIPTOR values and uses them as indices in libusb_udev_complete_msconfig_setup, causing an out‑of‑bounds read. This vulnerability is fixed in 3.20.1. | CVSS3: 9.1 | 1% Низкий | 8 месяцев назад |
| CVE-2026-22859 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... | CVSS3: 9.1 | 1% Низкий | 8 месяцев назад |
 | SUSE-SU-2026:0761-1 Security update for freerdp | 6 месяцев назад | ||
| SUSE-SU-2026:0656-1 Security update for freerdp | 7 месяцев назад | ||
 | BDU:2026-00620 Уязвимость RDP-клиента FreeRDP, связанная с выходом операции за границы буфера в памяти, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 6.8 | 1% Низкий | больше 1 года назад |
| BDU:2026-00628 Уязвимость клиента перенаправления USB-устройств URBDRC RDP-клиента FreeRDP, позволяющая нарушителю выполнить произвольный код или вызвать отказ в обслуживании | CVSS3: 6.8 | 1% Низкий | 8 месяцев назад |
 | ROS-20260611-80-0024 Уязвимость freerdp3 | CVSS3: 6.8 | 1% Низкий | 3 месяца назад |
| ROS-20260611-80-0002 Уязвимость freerdp | CVSS3: 6.8 | 1% Низкий | 3 месяца назад |
| ROS-20260611-73-0004 Уязвимость freerdp3 | CVSS3: 6.8 | 1% Низкий | 3 месяца назад |
| ROS-20260611-73-0003 Уязвимость freerdp | CVSS3: 6.8 | 1% Низкий | 3 месяца назад |
| SUSE-SU-2026:0762-1 Security update for freerdp | 6 месяцев назад | ||
| ROS-20260611-80-0023 Уязвимость freerdp3 | CVSS3: 6.8 | 1% Низкий | 3 месяца назад |
| ROS-20260611-80-0001 Уязвимость freerdp | CVSS3: 6.8 | 1% Низкий | 3 месяца назад |
| ROS-20260611-73-0002 Уязвимость freerdp3 | CVSS3: 6.8 | 1% Низкий | 3 месяца назад |
| ROS-20260611-73-0001 Уязвимость freerdp | CVSS3: 6.8 | 1% Низкий | 3 месяца назад |
Уязвимостей на страницу