Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: FreeRDP 3.28.0 Clear all filters
TI-2026-46185 CVE-2026-64624 · GHSA-4vxc-ggfg-5366

FreeRDP RDP File Parser Remote Code Execution via CLI Options

Priority LOW 38

FreeRDP before 3.28.0 treats lines beginning with forward slash in RDP files as raw command-line options, exposing the entire CLI parser surface to untrusted files.

CVSS 4.0HIGH 8.5 Local No auth User interaction EPSS 0.0018 Published 2026-07-20 Partial fix · 3.28.0 CWE-88
TI-2026-46182 CVE-2026-64621 · GHSA-7pv2-4c55-cg52

FreeRDP before 3.28.0 Double-Free via selectedmonitors

Priority HIGH 73

FreeRDP before 3.28.0 (affected 3.x through 3.27.1) contains a double-free vulnerability in freerdp_client_rdp_file_apply_to_settings() (client/common/file.c) when parsing the selectedmonitors field of a .rdp connection…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00363 Published 2026-07-20 Partial fix · 3.28.0 CWE-415
TI-2026-46181 CVE-2026-64620 · GHSA-xmhx-cqxp-qrgq

FreeRDP before 3.28.0 Heap Buffer Overflow via crypto_rsa_common

Priority MEDIUM 50

FreeRDP before 3.28.0 (affected <=3.27.1) contains a heap-based buffer overflow in crypto_rsa_common() (libfreerdp/crypto/crypto.c).

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00913 Published 2026-07-20 Partial fix · 3.28.0 CWE-122