Red Hat Security Advisory

RHSA-2026:19358

freerdp security update

Released 2026-05-19 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) freerdp-2:2.11.7-7.el9_8.3, freerdp-libs-2:2.11.7-7.el9_8.3, libwinpr-2:2.11.7-7.el9_8.3
Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) freerdp-devel-2:2.11.7-7.el9_8.3, libwinpr-devel-2:2.11.7-7.el9_8.3

TI-2026-24435 CVE-2026-31883

HIGH 81

FreeRDP is a free implementation of the Remote Desktop Protocol.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00337 Published 2026-03-13 Partial fix · 3.24.0 CWE-122

TI-2026-23361 CVE-2026-29775

HIGH 75

FreeRDP is a free implementation of the Remote Desktop Protocol.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00328 Published 2026-03-13 Partial fix · 3.24.0 CWE-787

TI-2026-24437 CVE-2026-31885

HIGH 74

FreeRDP is a free implementation of the Remote Desktop Protocol.

CVSS 3.1CRITICAL 9.4 Network No auth No interaction EPSS 0.0028 Published 2026-03-13 Fixed in 3.24.0 CWE-125

TI-2026-22295 CVE-2026-27951

HIGH 72

FreeRDP is a free implementation of the Remote Desktop Protocol.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00405 Published 2026-02-25 Partial fix · 3.23.0 CWE-190

TI-2026-24436 CVE-2026-31884

HIGH 66

FreeRDP is a free implementation of the Remote Desktop Protocol.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00322 Published 2026-03-13 Partial fix · 3.24.0 CWE-369

TI-2026-20977 CVE-2026-25952

MEDIUM 64

FreeRDP is a free implementation of the Remote Desktop Protocol.

CVSS 4.0MEDIUM 5.5 Network No auth No interaction EPSS 0.00687 Published 2026-02-25 Partial fix · 3.23.0 CWE-416

TI-2026-21465 CVE-2026-26986

MEDIUM 58

FreeRDP is a free implementation of the Remote Desktop Protocol.

CVSS 4.0MEDIUM 5.5 Network No auth No interaction EPSS 0.00557 Published 2026-02-25 Partial fix · 3.23.0 CWE-416

TI-2026-26326 CVE-2026-33985

LOW 31

FreeRDP is a free implementation of the Remote Desktop Protocol.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00213 Published 2026-03-30 Partial fix · 3.24.2 CWE-125