#FreeRDP
LightNews LightNews
crawler.baldanders.info
＞ USN-9007-1: FreeRDP vulnerabilities
https://ubuntu.com/security/notices/USN-9007-1
USN-9007-1: FreeRDP vulnerabilities
It was discovered that FreeRDP contained multiple security issues. An attacker could possibly use these issues to obtain sensitive information, cause FreeRDP to crash, resulting in a denial of service, or execute arbitrary code.
ubuntu.com
November 9, 2026 at 3:40 PM
eventmonitor.bsky.social
Developing: Critical FreeRDP Vulnerability (CVE-2026-121953)
https://cyber.eventmonitor.net/incident/EM-20261104-OHWZ/critical-freerdp-vulnerability-cve-2026-121953/
#news #cybersecurity
November 9, 2026 at 1:07 PM
topicbase.bsky.social
FreeRDP 3.33がWebAssembly対応、ブラウザー内での実行が可能に
FreeRDP 3.33がWebAssembly対応、ブラウザー内での実行が可能に
オープンソースのRDP実装FreeRDPがバージョン3.33を公開しました。新バージョンはWebAssembly（WASM）に対応し、FreeRDPをブラウザー内で実行できます。
topicbase.app
November 7, 2026 at 3:50 AM
eventmonitor.bsky.social
Developing: Critical FreeRDP Vulnerability (CVE-2026-121952)
https://cyber.eventmonitor.net/incident/EM-20261104-JZVU/critical-freerdp-vulnerability-cve-2026-121952/
#news #cybersecurity
November 7, 2026 at 1:05 AM
arvid.io
Holy smokes. Sunshine and moonlight blow any Remote Desktop solution out of the water in terms of latency, performance and fidelity. A bit fiddly but miles ahead of any freerdp servers on Linux.
November 9, 2026 at 1:39 PM
euvd-bot.bsky.social
🚨 EUVD-2026-120557
📊 5.3/10
🏢 FreeRDP

📝 FreeRDP before 3.33.0 contains a heap use-after-free vulnerability in update_gdi_patblt(), update_gdi_polygon_cb() and update_gdi_mem3blt() that retain ...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-120557

#cybersecurity #infosec #cve #euvd
November 10, 2026 at 12:01 AM
euvd-bot.bsky.social
🚨 EUVD-2026-115939
📊 7.1/10
🏢 FreeRDP

📝 FreeRDP before 3.32.2 contains a denial of service vulnerability in the shadow server's remdesk_server_thread that allows authenticated clients to crash...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-115939

#cybersecurity #infosec #cve #euvd
November 9, 2026 at 4:02 PM
euvd-bot.bsky.social
🚨 EUVD-2026-115943
📊 2.3/10
🏢 FreeRDP

📝 FreeRDP before 3.32.2 fails to bound server-supplied target dimensions and output origin in RDPGFX MAPSURFACETOSCALEDOUTPUT PDUs, allowing malicious RDP...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-115943

#cybersecurity #infosec #cve #euvd
November 9, 2026 at 4:02 PM
euvd-bot.bsky.social
🚨 EUVD-2026-115923
📊 5.3/10
🏢 FreeRDP

📝 FreeRDP from 3.0.0 before 3.32.2 contains a file descriptor leak in parallel_process_irp_create that fails to close previous descriptors on repeated IRP...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-115923

#cybersecurity #infosec #cve #euvd
November 9, 2026 at 3:01 PM
euvd-bot.bsky.social
🚨 EUVD-2026-115927
📊 7.1/10
🏢 FreeRDP

📝 FreeRDP from 3.17.0 before 3.32.2 contains an assertion failure in the RemoteFX differential decoder when verbose WinPR assertions are enabled. A malici...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-115927

#cybersecurity #infosec #cve #euvd
November 9, 2026 at 3:01 PM
euvd-bot.bsky.social
🚨 EUVD-2026-115935
📊 5.3/10
🏢 FreeRDP

📝 FreeRDP before 3.32.2 contains a denial of service vulnerability where a malformed drive DEVICE_IOREQUEST with a truncated IRP_MJ_CREATE body silently k...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-115935

#cybersecurity #infosec #cve #euvd
November 9, 2026 at 4:02 PM
euvd-bot.bsky.social
🚨 EUVD-2026-115931
📊 5.3/10
🏢 FreeRDP

📝 FreeRDP before 3.32.2 contains a memory allocation vulnerability in rdg_receive_packet that allows a malicious RD Gateway to force a 2 GiB client alloca...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-115931

#cybersecurity #infosec #cve #euvd
November 9, 2026 at 4:02 PM
euvd-bot.bsky.social
🚨 EUVD-2026-115919
📊 5.3/10
🏢 FreeRDP

📝 FreeRDP 2.0.0 before 3.32.2 contains an out-of-bounds read vulnerability in freerdp_dsp_decode_gsm610 that allows malicious RDP servers to read past aud...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-115919

#cybersecurity #infosec #cve #euvd
November 9, 2026 at 3:01 PM
simsus.social.tchncs.de.ap.brid.gy
#freerdp bringt Remote-Desktops in den Browser | iX Magazin https://www.heise.de/news/FreeRDP-bringt-Remote-Desktops-in-den-Browser-11510187.html #rdp #remotedesktopprotocol #opensource #remoteaccess
FreeRDP bringt Remote-Desktops in den Browser
FreeRDP 3.33.0 unterstützt WebAssembly für den Browser, experimentelle UDP-Verbindungen und verbessert RemoteApp unter SDL.
www.heise.de
November 4, 2026 at 1:46 PM
nixpkgssecuritychanges.gerbet.me
[Backport release-26.05] freerdp: 3.32.2 -> 3.33.0

https://github.com/NixOS/nixpkgs/pull/584874

#security
November 8, 2026 at 10:04 AM
linuxnews.net
[LWN.net] Security updates for Thursday

#Debian #Fedora #Gentoo
Security updates for Thursday
Security updates have been issued by Debian (aodh, apache2, dnspython, firefox-esr, mutt, octavia, spip, thunderbird, and watcher), Fedora (epiphany, firefox, freerdp, java-25-openjdk,…
www.linuxnews.net
November 12, 2026 at 2:30 PM
nixpkgssecuritychanges.gerbet.me
[Backport release-26.05] freerdp: 3.32.0 -> 3.32.1

https://github.com/NixOS/nixpkgs/pull/584579

#security
November 7, 2026 at 7:32 PM
nixpkgssecuritychanges.gerbet.me
[Backport release-26.05] freerdp: 3.32.1 -> 3.32.2

https://github.com/NixOS/nixpkgs/pull/584644

#security
November 7, 2026 at 7:32 PM
euvd-bot.bsky.social
🚨 EUVD-2026-115930
📊 8.2/10
🏢 FreeRDP

📝 FreeRDP before 3.32.2 contains a cross-thread use-after-free vulnerability in the freerdp-proxy dyn-channel-dump module during session teardown. A malic...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-115930

#cybersecurity #infosec #cve #euvd
November 7, 2026 at 4:03 AM
nixpkgssecuritychanges.gerbet.me
freerdp: 3.32.2 -> 3.33.0

https://github.com/NixOS/nixpkgs/pull/584342

https://tracker.security.nixos.org/issues/NIXPKGS-2026-3315

#security
November 7, 2026 at 5:03 PM
cyberhub.blog
📌 CVE-2026-121961 - FreeRDP before 3.32.2 contains a use-after-free vulnerability in the freerdp-proxy DRDYNVC tracker when intercepting the drdynvc channel. A malicious ... https://www.cyberhub.blog/cves/CVE-2026-121961
CVE-2026-121961
FreeRDP before 3.32.2 contains a use-after-free vulnerability in the freerdp-proxy DRDYNVC tracker when intercepting the drdynvc channel. A malicious target server can repeatedly send CREATE_REQUEST_PDU for an active channel id, racing front DATA handling to free a borrowed context and crash the pro
www.cyberhub.blog
November 7, 2026 at 5:07 AM
📰 **Security updates for Thursday**

Security updates have been issued by Debian (aodh, apache2, dnspython, firefox-esr, mutt, octavia, spip, thunderbird, and watcher), Fedora (epiphany, firefox, freerdp, java-25-openjdk, java-latest-...

📰 Source: LWN.net
🔗 Link: https://lwn.net/Articles/1107146/
Security updates for Thursday [LWN.net]
lwn.net
November 12, 2026 at 2:27 PM
euvd-bot.bsky.social
🚨 EUVD-2026-115918
📊 8.7/10
🏢 FreeRDP

📝 FreeRDP before 3.32.2 contains a denial of service vulnerability in WinPR's winpr_read_png_from_buffer() and winpr_convert_from_jpeg(), which lack libpn...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-115918

#cybersecurity #infosec #cve #euvd
November 7, 2026 at 4:04 AM
euvd-bot.bsky.social
🚨 EUVD-2026-115938
📊 5.3/10
🏢 FreeRDP

📝 FreeRDP before 3.32.2 allows a client assertion abort because rdpgfx_on_data_received rejects only negative zgfx_decompress status and passes the result...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-115938

#cybersecurity #infosec #cve #euvd
November 7, 2026 at 4:03 AM
euvd-bot.bsky.social
🚨 EUVD-2026-115926
📊 7.1/10
🏢 FreeRDP

📝 FreeRDP from 3.11.0 before 3.32.2 contains an assertion failure in the RemoteFX RLGR decoder that allows malicious servers to terminate clients. Attacke...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-115926

#cybersecurity #infosec #cve #euvd
November 7, 2026 at 4:03 AM