FreeRDP vulnerabilities

CVEs per yearBy the year they were published

1. 20186
2. 202031
3. 20212
4. 202211
5. 202317
6. 202412
7. 20251
8. 2026227

Newest CVEs

• CVE-2026-121412

  FreeRDP 3.0.0 before 3.32.2 Proxy Memory Exhaustion via DVC Reassembly

  FreeRDP · FreeRDP

  High7.1
• CVE-2026-121411

  FreeRDP before 3.32.2 X11 Client Abort via RDPGFX Scaled Output Geometry

  FreeRDP · FreeRDP

  Low2.3
• CVE-2026-121410

  FreeRDP before 3.32.2 Denial of Service via RDPGFX ALPHA WIRETOSURFACE_2

  FreeRDP · FreeRDP

  Medium5.3
• CVE-2026-121409

  FreeRDP before 3.32.2 Denial of Service via Oversized X.224 Routing Token

  FreeRDP · FreeRDP

  High8.2
• CVE-2026-121408

  FreeRDP before 3.32.2 Use-After-Free via USB Redirection Control Channel

  FreeRDP · FreeRDP

  Medium6.0
• CVE-2026-121407

  FreeRDP before 3.32.2 Shadow Server Denial of Service via remdesk Channel

  FreeRDP · FreeRDP

  High7.1
• CVE-2026-121406

  FreeRDP before 3.32.2 Client Denial of Service via Zero-Output ZGFX Payload

  FreeRDP · FreeRDP

  Medium5.3
• CVE-2026-121405

  FreeRDP before 3.32.2 Memory Exhaustion via Serial RDPDR Device Control

  FreeRDP · FreeRDP

  Medium5.3
• CVE-2026-121404

  FreeRDP before 3.32.2 Shadow Server CPU Exhaustion via Zero-Length DVC DATA

  FreeRDP · FreeRDP

  High7.1
• CVE-2026-121403

  FreeRDP before 3.32.2 Denial of Service via Malformed Drive IRP

  FreeRDP · FreeRDP

  Medium5.3