Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: FreeRDP 3.32.0 Clear all filters
TI-2026-76090 CVE-2026-111881 · GHSA-45g6-44vr-p7wm

Integer underflow in FreeRDP BMP writer lets clipboard peers crash clients

Priority HIGH 65

FreeRDP from 3.14.1 before 3.32.0 contains an integer underflow in the WinPR BMP writer, where a mismatched stride calculation passes SIZE_MAX - 3 to Stream_Zero for sub-byte images.

CVSS 4.0HIGH 7.2 Network No auth User interaction EPSS 0.00245 Published 2026-10-17 Partial fix · 3.32.0 CWE-191
TI-2026-76089 CVE-2026-111880 · GHSA-98x3-97xw-cfqr

Heap out-of-bounds write in FreeRDP NTLM authentication handling

Priority LOW 36

FreeRDP versions from 2.0.0 before 3.32.0 contain a heap out-of-bounds write in the server hash-callback NTLM path that fails to validate the MIC offset.

CVSS 4.0HIGH 8.3 Network No auth No interaction EPSS 0.00321 Published 2026-10-17 Partial fix · 3.32.0 CWE-787