Поиск уязвимостей
Количество 8
Количество 8
CVE-2026-110838
FreeRDP shadow server from 3.0.0 before 3.32.0 dispatches input PDUs during the Confirm Active state before authentication, allowing unauthenticated attackers to inject keyboard input. Attackers can negotiate TLS-only RDP and send an input PDU without Confirm Active to inject synthetic keystrokes into the host user's X11 session via XTEST.
CVE-2026-110838
FreeRDP shadow server from 3.0.0 before 3.32.0 dispatches input PDUs during the Confirm Active state before authentication, allowing unauthenticated attackers to inject keyboard input. Attackers can negotiate TLS-only RDP and send an input PDU without Confirm Active to inject synthetic keystrokes into the host user's X11 session via XTEST.
CVE-2026-110838
FreeRDP shadow server from 3.0.0 before 3.32.0 dispatches input PDUs during the Confirm Active state before authentication, allowing unauthenticated attackers to inject keyboard input. Attackers can negotiate TLS-only RDP and send an input PDU without Confirm Active to inject synthetic keystrokes into the host user's X11 session via XTEST.
CVE-2026-110838
FreeRDP shadow server from 3.0.0 before 3.32.0 dispatches input PDUs d ...
GHSA-5xxg-89r9-vf9v
FreeRDP shadow server from 3.0.0 before 3.32.0 dispatches input PDUs during the Confirm Active state before authentication, allowing unauthenticated attackers to inject keyboard input. Attackers can negotiate TLS-only RDP and send an input PDU without Confirm Active to inject synthetic keystrokes into the host user's X11 session via XTEST.
ELSA-2026-94514
ELSA-2026-94514: freerdp security, bug fix, and enhancement update (IMPORTANT)
RLSA-2026:94514
Important: freerdp security, bug fix, and enhancement update
ALT-PU-2026-17187
ALT-PU-2026-17187: package `freerdp3` update to version 3.32.1-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-110838 FreeRDP shadow server from 3.0.0 before 3.32.0 dispatches input PDUs during the Confirm Active state before authentication, allowing unauthenticated attackers to inject keyboard input. Attackers can negotiate TLS-only RDP and send an input PDU without Confirm Active to inject synthetic keystrokes into the host user's X11 session via XTEST. | CVSS3: 7.5 | 0% Низкий | 25 дней назад |
 | CVE-2026-110838 FreeRDP shadow server from 3.0.0 before 3.32.0 dispatches input PDUs during the Confirm Active state before authentication, allowing unauthenticated attackers to inject keyboard input. Attackers can negotiate TLS-only RDP and send an input PDU without Confirm Active to inject synthetic keystrokes into the host user's X11 session via XTEST. | CVSS3: 7.5 | 0% Низкий | 25 дней назад |
 | CVE-2026-110838 FreeRDP shadow server from 3.0.0 before 3.32.0 dispatches input PDUs during the Confirm Active state before authentication, allowing unauthenticated attackers to inject keyboard input. Attackers can negotiate TLS-only RDP and send an input PDU without Confirm Active to inject synthetic keystrokes into the host user's X11 session via XTEST. | CVSS3: 7.5 | 0% Низкий | 25 дней назад |
| CVE-2026-110838 FreeRDP shadow server from 3.0.0 before 3.32.0 dispatches input PDUs d ... | CVSS3: 7.5 | 0% Низкий | 25 дней назад |
| GHSA-5xxg-89r9-vf9v FreeRDP shadow server from 3.0.0 before 3.32.0 dispatches input PDUs during the Confirm Active state before authentication, allowing unauthenticated attackers to inject keyboard input. Attackers can negotiate TLS-only RDP and send an input PDU without Confirm Active to inject synthetic keystrokes into the host user's X11 session via XTEST. | CVSS3: 7.5 | 0% Низкий | 25 дней назад |
| ELSA-2026-94514 ELSA-2026-94514: freerdp security, bug fix, and enhancement update (IMPORTANT) | 6 дней назад | ||
 | RLSA-2026:94514 Important: freerdp security, bug fix, and enhancement update | 5 дней назад | ||
| ALT-PU-2026-17187 ALT-PU-2026-17187: package `freerdp3` update to version 3.32.1-alt1 | CVSS3: 9.1 | около 1 месяца назад |
Уязвимостей на страницу