Skip to content
CVE Tracker

Every public CVE, as it is published

The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 9 min ago.

At a glance

Published CVEs; rejected ones are not counted.

  • 400,098All CVEsplus 18,873 rejected
  • 780Last 24 hours3,275 in the last 7 days
  • 17,390Last 30 days1,565 of them critical
  • 1,766Known exploitedin the CISA KEV catalog

CVEs published per year

All time, by publication date in UTC; follows the filter above.

  • Critical
  • High
  • Medium
  • Low
  • Not scored
The numbers of every bucket are in the table under the chart.
Show the numbers as a table
Matching CVEs per period and severity, newest first
PeriodCriticalHighMediumLowNot scoredTotalCumulative
2026111208691227307
202500100180
2024650101279
20230215001767
2022117201150
202100200239
20200182203137
20190000006
20180240066

Latest CVEs

307 CVEs, newest first

CVEs, newest first
Title
CVE-2026-121412
FreeRDP 3.0.0 before 3.32.2 Proxy Memory Exhaustion via DVC ReassemblyFreeRDP · FreeRDP
High7.1
CVE-2026-121411
FreeRDP before 3.32.2 X11 Client Abort via RDPGFX Scaled Output GeometryFreeRDP · FreeRDP
Low2.3
CVE-2026-121410
FreeRDP before 3.32.2 Denial of Service via RDPGFX ALPHA WIRETOSURFACE_2FreeRDP · FreeRDP
Medium5.3
CVE-2026-121409
FreeRDP before 3.32.2 Denial of Service via Oversized X.224 Routing TokenFreeRDP · FreeRDP
High8.2
CVE-2026-121408
FreeRDP before 3.32.2 Use-After-Free via USB Redirection Control ChannelFreeRDP · FreeRDP
Medium6.0
CVE-2026-121407
FreeRDP before 3.32.2 Shadow Server Denial of Service via remdesk ChannelFreeRDP · FreeRDP
High7.1
CVE-2026-121406
FreeRDP before 3.32.2 Client Denial of Service via Zero-Output ZGFX PayloadFreeRDP · FreeRDP
Medium5.3
CVE-2026-121405
FreeRDP before 3.32.2 Memory Exhaustion via Serial RDPDR Device ControlFreeRDP · FreeRDP
Medium5.3
CVE-2026-121404
FreeRDP before 3.32.2 Shadow Server CPU Exhaustion via Zero-Length DVC DATAFreeRDP · FreeRDP
High7.1
CVE-2026-121403
FreeRDP before 3.32.2 Denial of Service via Malformed Drive IRPFreeRDP · FreeRDP
Medium5.3
CVE-2026-121402
FreeRDP before 3.32.2 X11 Client Crash via Zero-Width RDPGFX ResetGraphicsFreeRDP · FreeRDP
High7.1
CVE-2026-121401
FreeRDP before 3.32.2 Denial of Service via RD Gateway extended-auth packetFreeRDP · FreeRDP
Medium5.3
CVE-2026-121400
FreeRDP before 3.32.2 CPU Exhaustion via RDG Control PacketFreeRDP · FreeRDP
High7.1
CVE-2026-121399
FreeRDP before 3.32.2 Memory Exhaustion via RD Gateway Packet LengthFreeRDP · FreeRDP
Medium5.3
CVE-2026-121398
FreeRDP before 3.32.2 Use-After-Free via dyn-channel-dump ModuleFreeRDP · FreeRDP
High8.2
CVE-2026-121397
FreeRDP before 3.32.2 Heap Over-Read via WinPR save_png_to_buffer()FreeRDP · FreeRDP
Medium5.3
CVE-2026-121396
FreeRDP 3.0.0 before 3.32.2 denial of service via RTS padding assertionFreeRDP · FreeRDP
Medium5.3
CVE-2026-121395
FreeRDP 3.17.0 before 3.32.2 Denial of Service via RemoteFX DecoderFreeRDP · FreeRDP
High7.1
CVE-2026-121394
FreeRDP before 3.32.2 Denial of Service via RemoteFX RLGR decoderFreeRDP · FreeRDP
High7.1
CVE-2026-121393
FreeRDP 3.0.0 before 3.32.2 Denial of Service via RemoteFX Region AssertionFreeRDP · FreeRDP
High7.1
CVE-2026-121392
FreeRDP before 3.32.2 Certificate Identity Validation Bypass via tls_verify_certificateFreeRDP · FreeRDP
Critical9.1
CVE-2026-121391
FreeRDP before 3.32.2 File Descriptor Exhaustion via Parallel CREATEFreeRDP · FreeRDP
Medium5.3
CVE-2026-121390
FreeRDP before 3.32.2 Null Pointer Crash via ARM Gateway ResponseFreeRDP · FreeRDP
Medium5.3
CVE-2026-121389
FreeRDP 3.27.0 before 3.32.2 Client DoS via RDPDR Device Announcement LoggingFreeRDP · FreeRDP
Low2.3
CVE-2026-121388
FreeRDP 3.0.0 before 3.32.2 Uncapped Memory Allocation via DRDYNVC DATA_FIRSTFreeRDP · FreeRDP
High7.1
CVE-2026-121387
FreeRDP 2.0.0 before 3.32.2 Out-of-Bounds Read via GSM610/WAV49 DecoderFreeRDP · FreeRDP
Medium5.3
CVE-2026-121386
FreeRDP before 3.32.2 Denial of Service via WinPR PNG/JPEG Image ReadersFreeRDP · FreeRDP
High8.7
CVE-2026-114047
FreeRDP 2.0.0 before 3.32.0 Proxy Improper TLS Certificate ValidationFreeRDP · FreeRDP
High7.6
CVE-2026-114046
FreeRDP 3.0.0 before 3.32.0 null-pointer dereference via emulated smartcardFreeRDP · FreeRDP
High7.1
CVE-2026-114045
FreeRDP before 3.32.1 Heap Buffer Overflow via rdpsnd_server_select_formatFreeRDP · FreeRDP
High8.7
CVE-2026-114044
FreeRDP before 3.32.1 Android Client Heap OOB Read via Graphics PipelineFreeRDP · FreeRDP
Medium6.9
CVE-2026-114043
Vulnerability in FreeRDPFreeRDP · FreeRDP
High7.1
CVE-2026-114042
FreeRDP 3.32.0 Use-After-Free via drdynvc Virtual Channel PDUFreeRDP · FreeRDP
High7.1
CVE-2026-114041
FreeRDP before 3.32.1 Heap Out-of-Bounds Read via RD Gateway Consent MessageFreeRDP · FreeRDP
Medium6.9
CVE-2026-111881
FreeRDP 3.14.1 before 3.32.0 Integer Underflow in BMP Writer via ClipboardFreeRDP · FreeRDP
High7.2
CVE-2026-111880
FreeRDP 2.0.0 before 3.32.0 Heap Out-of-Bounds Write via NTLM MIC OffsetFreeRDP · FreeRDP
High8.3
CVE-2026-111382
FreeRDP before 3.32.0 Heap Out-of-Bounds Write in AVC444 YUV444 CombineFreeRDP · FreeRDP
High8.7
CVE-2026-111381
FreeRDP before 3.32.0 Heap Buffer Overflow via Persistent Cache v2 ParserFreeRDP · FreeRDP
High7.0
CVE-2026-111380
FreeRDP 3.29.0 before 3.32.0 Heap Overflow via audin Apple BackendsFreeRDP · FreeRDP
High8.7
CVE-2026-111379
FreeRDP before 3.32.0 Heap Buffer Overflow via persistent_cache_read_entry_v3FreeRDP · FreeRDP
High7.0
CVE-2026-111378
FreeRDP 3.0.0 before 3.32.0 Unauthenticated Memory Exhaustion via NLA Frame ParserFreeRDP · FreeRDP
High8.7
CVE-2026-111377
FreeRDP 2.0.0 before 3.32.0 Memory Exhaustion via Static Channel ReassemblyFreeRDP · FreeRDP
High7.1
CVE-2026-111376
FreeRDP 3.30.0 before 3.32.0 Heap Over-Read via Windows cliprdr FILECONTENTS_SIZEFreeRDP · FreeRDP
Low2.3
CVE-2026-111375
FreeRDP 3.0.0 before 3.32.0 Out-of-Bounds Read via RAIL Window TitleFreeRDP · FreeRDP
Medium6.3
CVE-2026-111374
FreeRDP from 3.30.0 before 3.32.0 Resource Exhaustion via rdpecam StartStreamsRequestFreeRDP · FreeRDP
Medium6.0
CVE-2026-111373
FreeRDP before 3.32.0 NULL Dereference via Zero-Length WebSocket PingFreeRDP · FreeRDP
Medium6.9
CVE-2026-110839
FreeRDP 3.3.0 before 3.32.0 Heap Out-of-Bounds Write via Grayscale JPEG Clipboard DataFreeRDP · FreeRDP
High7.1
CVE-2026-110838
FreeRDP shadow before 3.32.0 Pre-Authentication Input Injection via Confirm Active bypassFreeRDP · FreeRDP
High8.7
CVE-2026-110837
FreeRDP 2.0.0 before 3.32.0 Heap Buffer Overflow via MP3 Audio DecodingFreeRDP · FreeRDP
Medium6.1
CVE-2026-110836
FreeRDP 3.0.0 before 3.32.0 Infinite Loop DoS via Gateway Content-TypeFreeRDP · FreeRDP
High7.1