Количество 47
Количество 47
RLSA-2026:3334
Important: freerdp security update
RLSA-2026:3067
Important: freerdp security update
ELSA-2026-4471
ELSA-2026-4471: freerdp security update (IMPORTANT)
ELSA-2026-3334
ELSA-2026-3334: freerdp security update (IMPORTANT)
ELSA-2026-3067
ELSA-2026-3067: freerdp security update (IMPORTANT)
RLSA-2026:3068
Important: freerdp security update
ELSA-2026-3068
ELSA-2026-3068: freerdp security update (IMPORTANT)
SUSE-SU-2026:0345-1
Security update for freerdp
ELSA-2026-19033
ELSA-2026-19033: freerdp security update (IMPORTANT)
CVE-2026-22855
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a heap out-of-bounds read occurs in the smartcard SetAttrib path when cbAttrLen does not match the actual NDR buffer length. This vulnerability is fixed in 3.20.1.
CVE-2026-22855
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a heap out-of-bounds read occurs in the smartcard SetAttrib path when cbAttrLen does not match the actual NDR buffer length. This vulnerability is fixed in 3.20.1.
CVE-2026-22855
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a heap out-of-bounds read occurs in the smartcard SetAttrib path when cbAttrLen does not match the actual NDR buffer length. This vulnerability is fixed in 3.20.1.
CVE-2026-22855
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ...
openSUSE-SU-2026:20339-1
Security update for freerdp
BDU:2026-00618
Уязвимость функции smartcard_unpack_set_attrib_call() RDP-клиента FreeRDP, позволяющая нарушителю выполнить произвольный код или вызвать отказ в обслуживании
ROS-20260611-80-0020
Уязвимость freerdp3
ROS-20260610-80-0038
Уязвимость freerdp
ROS-20260610-73-0044
Уязвимость freerdp3
ROS-20260610-73-0043
Уязвимость freerdp
CVE-2026-22858
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, global-buffer-overflow was observed in FreeRDP's Base64 decoding path. The root cause appears to be implementation-defined char signedness: on Arm/AArch64 builds, plain char is treated as unsigned, so the guard c <= 0 can be optimized into a simple c != 0 check. As a result, non-ASCII bytes (e.g., 0x80-0xFF) may bypass the intended range restriction and be used as an index into a global lookup table, causing out-of-bounds access. This vulnerability is fixed in 3.20.1.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | RLSA-2026:3334 Important: freerdp security update | 7 месяцев назад | ||
| RLSA-2026:3067 Important: freerdp security update | 7 месяцев назад | ||
| ELSA-2026-4471 ELSA-2026-4471: freerdp security update (IMPORTANT) | 6 месяцев назад | ||
| ELSA-2026-3334 ELSA-2026-3334: freerdp security update (IMPORTANT) | 7 месяцев назад | ||
| ELSA-2026-3067 ELSA-2026-3067: freerdp security update (IMPORTANT) | 7 месяцев назад | ||
| RLSA-2026:3068 Important: freerdp security update | 7 месяцев назад | ||
| ELSA-2026-3068 ELSA-2026-3068: freerdp security update (IMPORTANT) | 7 месяцев назад | ||
 | SUSE-SU-2026:0345-1 Security update for freerdp | 8 месяцев назад | ||
| ELSA-2026-19033 ELSA-2026-19033: freerdp security update (IMPORTANT) | 2 месяца назад | ||
 | CVE-2026-22855 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a heap out-of-bounds read occurs in the smartcard SetAttrib path when cbAttrLen does not match the actual NDR buffer length. This vulnerability is fixed in 3.20.1. | CVSS3: 9.1 | 1% Низкий | 8 месяцев назад |
 | CVE-2026-22855 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a heap out-of-bounds read occurs in the smartcard SetAttrib path when cbAttrLen does not match the actual NDR buffer length. This vulnerability is fixed in 3.20.1. | CVSS3: 7.4 | 1% Низкий | 8 месяцев назад |
 | CVE-2026-22855 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a heap out-of-bounds read occurs in the smartcard SetAttrib path when cbAttrLen does not match the actual NDR buffer length. This vulnerability is fixed in 3.20.1. | CVSS3: 9.1 | 1% Низкий | 8 месяцев назад |
| CVE-2026-22855 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... | CVSS3: 9.1 | 1% Низкий | 8 месяцев назад |
| openSUSE-SU-2026:20339-1 Security update for freerdp | 6 месяцев назад | ||
 | BDU:2026-00618 Уязвимость функции smartcard_unpack_set_attrib_call() RDP-клиента FreeRDP, позволяющая нарушителю выполнить произвольный код или вызвать отказ в обслуживании | CVSS3: 6.8 | 1% Низкий | 8 месяцев назад |
 | ROS-20260611-80-0020 Уязвимость freerdp3 | CVSS3: 6.8 | 1% Низкий | 3 месяца назад |
| ROS-20260610-80-0038 Уязвимость freerdp | CVSS3: 6.8 | 1% Низкий | 3 месяца назад |
| ROS-20260610-73-0044 Уязвимость freerdp3 | CVSS3: 6.8 | 1% Низкий | 3 месяца назад |
| ROS-20260610-73-0043 Уязвимость freerdp | CVSS3: 6.8 | 1% Низкий | 3 месяца назад |
| CVE-2026-22858 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, global-buffer-overflow was observed in FreeRDP's Base64 decoding path. The root cause appears to be implementation-defined char signedness: on Arm/AArch64 builds, plain char is treated as unsigned, so the guard c <= 0 can be optimized into a simple c != 0 check. As a result, non-ASCII bytes (e.g., 0x80-0xFF) may bypass the intended range restriction and be used as an index into a global lookup table, causing out-of-bounds access. This vulnerability is fixed in 3.20.1. | CVSS3: 9.1 | 1% Низкий | 8 месяцев назад |
Уязвимостей на страницу