FreeRDP
Number 57 by total vulnerabilities in the catalog.
Computed from the whole catalog when the site is built.
Total vulnerabilities
323
Critical
15
High
95
Known Exploited
0
Exploit available
4
Network, no login needed
78.3%
Of 323 scored records
- Critical
- High
- Medium
- Low
- None or not scored
Show as table
| Period | Total | Critical | High | Medium | Low | None or not scored |
|---|---|---|---|---|---|---|
| 2026 (incomplete) | 243 | 8 | 84 | 142 | 8 | 1 |
| 2025 | 1 | 0 | 0 | 1 | 0 | 0 |
| 2024 | 12 | 6 | 5 | 0 | 1 | 0 |
| 2023 | 17 | 0 | 2 | 15 | 0 | 0 |
| 2022 | 11 | 1 | 1 | 7 | 2 | 0 |
| 2021 | 2 | 0 | 0 | 2 | 0 | 0 |
| 2020 | 31 | 0 | 1 | 8 | 22 | 0 |
| 2019 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2018 | 6 | 0 | 2 | 4 | 0 | 0 |
Top products
| Product | Total | Critical/High |
|---|---|---|
| FreeRDP | 323 | 110 |
Top bug types
| Bug type | Total | Critical/High |
|---|---|---|
| Memory Corruption | 211 | 83 |
| Reachable Assertion | 20 | 2 |
| Race Condition | 9 | 3 |
| Allocation of Resources Without Limits or Throttling | 8 | 2 |
| Denial of Service | 6 | 1 |
| Improper Certificate Validation | 6 | 2 |
| Integer Underflow (Wrap or Wraparound) | 6 | 4 |
| Divide By Zero | 5 | 1 |
| Improper Input Validation | 5 | 1 |
| Loop with Unreachable Exit Condition ('Infinite Loop') | 5 | 0 |
Newest vulnerabilities
| CVE | Title | Published | Severity | EPSS |
|---|---|---|---|---|
| CVE-2026-125394 | FreeRDP before 3.33.0 Use-After-Free via Stale Brush Cache Pointer | Medium | 0.2% | |
| CVE-2026-121964 | FreeRDP before 3.32.2 Heap Buffer Overflow via rpc_client_recv_fragment | High | 0.6% | |
| CVE-2026-121963 | FreeRDP before 3.32.2 Use-After-Free via Dynamic rdpsnd Channel Close | Medium | 0.3% | |
| CVE-2026-121962 | FreeRDP before 3.32.2 Heap Buffer Overflow via Early User Authorization Read | High | 0.3% | |
| CVE-2026-121961 | FreeRDP before 3.32.2 Use-After-Free via DRDYNVC Tracker Race | Medium | 0.3% | |
| CVE-2026-121960 | FreeRDP before 3.32.2 Unauthenticated Denial of Service via CredSSP TSRequest | High | 0.6% | |
| CVE-2026-121959 | FreeRDP before 3.32.2 Infinite Loop via Truncated WebSocket Frame | Medium | 0.3% | |
| CVE-2026-121958 | FreeRDP through 3.32.1 Heap Out-of-Bounds Write via RDPGFX HashTable_GetKeys | High | 0.3% | |
| CVE-2026-121957 | FreeRDP before 3.32.2 Use-After-Free via RDPGFX ResetGraphics Race | High | 0.2% | |
| CVE-2026-121956 | FreeRDP before 3.32.2 Double Free in WinPR Kerberos retrieveSomeTgt | High | 0.4% |