Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: FreeRDP 3.32.0 Clear all filters
TI-2026-78660 CVE-2026-114047

FreeRDP proxy accepts untrusted target TLS certificates

Priority LOW 34

FreeRDP from 2.0.0 before 3.32.0 contains an improper certificate validation vulnerability in its proxy that accepts untrusted target TLS certificates when no verification module is configured.

CVSS 4.0HIGH 7.6 Network No auth User interaction EPSS 0.00189 Published 2026-10-21 Partial fix · 3.32.0 CWE-295
TI-2026-78659 CVE-2026-114046

Null-pointer dereference in FreeRDP smartcard emulation crashes client

Priority MEDIUM 64

FreeRDP 3.0.0 before 3.32.0 contains a null-pointer dereference in the smartcard emulation backend that accepts a null per-reader name in SCardGetStatusChange requests.

CVSS 4.0HIGH 7.1 Network No auth User interaction EPSS 0.00353 Published 2026-10-21 Partial fix · 3.32.0 CWE-476