Vulnerabilities

TI-2026-40166 CVE-2026-55639

xrdp: Out-of-bounds read in GCC Conference Create Request CS_SECURITY processing (xrdp_sec_process_mcs_data_CS_SECURITY)

LOW 30

xrdp is an open source RDP server.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00424 Published 2026-07-20 Fixed in 0.10.6.1 CWE-125

TI-2026-40154 CVE-2026-55626

xrdp: No authentication required with Xvnc backend on RHEL 9

LOW 36

xrdp is an open source RDP server.

CVSS 3.1HIGH 8.0 Local No auth No interaction EPSS 0.00187 Published 2026-07-20 Fixed in 0.10.6.1 CWE-287

TI-2026-39915 CVE-2026-55238

xrdp: Malformed Confirm Active capability sets cause out-of-bounds reads

LOW 31

xrdp is an open source RDP server.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00516 Published 2026-07-20 Fixed in 0.10.6.1 CWE-126

TI-2026-39378 CVE-2026-54538

xrdp: Pre-auth infinite loop via totalLength=0 in TS_SHARECONTROLHEADER

MEDIUM 40

xrdp is an open source RDP server.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00672 Published 2026-07-20 Fixed in 0.10.6.1 CWE-835

TI-2026-32839 CVE-2026-44978

xrdp: Unchecked FIPS padding length in standard RDP Security causes heap out-of-bounds read in HMAC verification

LOW 31

xrdp is an open source RDP server.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00532 Published 2026-07-20 Fixed in 0.10.6.1 CWE-125

TI-2026-32158 CVE-2026-44178

xrdp: Channel Data Forwarding Fixed-Size Buffer Overflow

MEDIUM 42

xrdp is an open source RDP server.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00882 Published 2026-07-20 Fixed in 0.10.6.1 CWE-122

TI-2026-40171 CVE-2026-55645

xrdp: Out-of-bounds read in Client Control PDU processing (xrdp_rdp_process_data_control)

LOW 35

xrdp is an open source RDP server.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00479 Published 2026-07-20 Fixed in 0.10.6.1 CWE-125

TI-2026-30539 CVE-2026-42218

XRDP is vulnerable to a server timing attack, leading to user enumeration

LOW 30

xrdp is an open source RDP server.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00418 Published 2026-07-20 Fixed in 0.10.6.1 CWE-204

TI-2026-30104 CVE-2026-41521

xrdp: lib_framebuffer_update Has Integer Overflow Heap Info Leak & ASLR Bypass

MEDIUM 46

xrdp is an open source RDP server.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00671 Published 2026-07-20 Fixed in 0.10.6.1 CWE-190

TI-2026-29860 CVE-2026-41252

xrdp: lib_palette_update Heap Buffer Overflow & RCE

MEDIUM 51

xrdp is an open source RDP server.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01107 Published 2026-07-20 Fixed in 0.10.6.1 CWE-122

TI-2026-27630 CVE-2026-35512

xrdp: Heap buffer overflow in EGFX channel

MEDIUM 40

xrdp is an open source RDP server.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00583 Published 2026-04-17 Fixed in 0.10.6 CWE-122

TI-2026-26069 CVE-2026-33689

xrdp: Pre-authentication out-of-bounds reads in channel parsers

MEDIUM 44

xrdp is an open source RDP server.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00484 Published 2026-04-17 Fixed in 0.10.6 CWE-125

TI-2026-25575 CVE-2026-33145

xrdp: Authenticated RCE via unsanitized AlternateShell execution in xrdp-sesman

LOW 30

xrdp is an open source RDP server.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00356 Published 2026-04-17 Fixed in 0.10.6 CWE-78

TI-2026-25133 CVE-2026-32624

xrdp: Heap buffer overflow in xrdp_sec_process_logon_info() via incorrect g_strncat length calculation

LOW 34

xrdp is an open source RDP server.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00408 Published 2026-04-17 Fixed in 0.10.6 CWE-122

TI-2026-25912 CVE-2026-33516

xrdp: Pre-authentication out-of-bounds reads in RDP capability and channel parsers

LOW 36

xrdp is an open source RDP server.

CVSS 4.0HIGH 7.7 Network No auth User interaction EPSS 0.00427 Published 2026-04-17 Fixed in 0.10.6 CWE-125

TI-2026-25132 CVE-2026-32623

xrdp: Heap buffer overflow in NeutrinoRDP channel reassembly

LOW 36

xrdp is an open source RDP server.

CVSS 4.0HIGH 7.7 Network No auth User interaction EPSS 0.00544 Published 2026-04-17 Fixed in 0.10.6 CWE-122

TI-2026-24643 CVE-2026-32105

xrdp: RDP MAC signature (dataSignature) never verified on receive — integrity bypass in non-TLS mode

MEDIUM 45

xrdp is an open source RDP server.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00174 Published 2026-04-17 Fixed in 0.10.6 CWE-354

TI-2026-24645 CVE-2026-32107

xrdp: Fail-open privilege drop in sesexec — child processes may execute as root if setuid fails

LOW 39

xrdp is an open source RDP server.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00159 Published 2026-04-17 Fixed in 0.10.6 CWE-273

TI-2025-42163 CVE-2025-68670

xrdp improperly checks bounds of domain string length, which leads to Stack-based Buffer Overflow

MEDIUM 52

xrdp is an open source RDP server.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0137 Published 2026-01-27 Fixed in 0.10.5 CWE-121

TI-2024-26810 CVE-2024-39917

xrdp allows an ininite number of login attempts

MEDIUM 49

xrdp is an open source RDP server.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00607 Published 2024-07-12 No fix listed CWE-307

TI-2023-22913 CVE-2023-42822

Unchecked access to font glyph info in xrdp

LOW 30

xrdp is an open source remote desktop protocol server.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00738 Published 2023-09-27 Fixed in 0.9.23.1 CWE-125

TI-2023-21057 CVE-2023-40184

Improper handling of session establishment errors in xrdp

LOW 30

xrdp is an open source remote desktop protocol (RDP) server.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00853 Published 2023-08-30 Fixed in 0.9.23 CWE-755

TI-2022-07537 CVE-2022-23477

Buffer Overflow in xrdp

MEDIUM 50

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00927 Published 2022-12-09 Fixed in 0.9.21 CWE-120

TI-2022-07544 CVE-2022-23484

Integer Overflow in xrdp

MEDIUM 49

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00793 Published 2022-12-09 Fixed in 0.9.21 CWE-190

TI-2022-07543 CVE-2022-23483

Out-of-Bound Read in libxrdp

MEDIUM 47

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP).

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.009 Published 2022-12-09 Fixed in 0.9.21 CWE-125

Vulnerabilities

Filters