PatchTheCEVfreerdp vulnerabilities and fixes
Recent CVEs affecting freerdp, with upgrade or downgrade steps. 11 tracked.
freerdp has 11 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 11. Most recent: 2026-10-14. Highest priority: CVE-2026-110838 (score 41/100).
- CVE-2026-110839 HIGH 7.1 UPGRADE FreeRDP 3.3.0 before 3.32.0, when built with WINPR_UTILS_IMAGE_JPEG=ON, has a heap-based out-of-bounds write i
- CVE-2026-110834 MEDIUM 6.5 UPGRADE FreeRDP from 2.0.0 before 3.32.0 contains a null pointer dereference vulnerability that allows malicious RDP s
- CVE-2026-110835 MEDIUM 4.0 UPGRADE FreeRDP 3.0.0 before 3.32.0 allows HTTP header injection in its proxy because a lone LF in the target portion
- CVE-2026-110836 MEDIUM 6.5 UPGRADE FreeRDP from 3.0.0 before 3.32.0 contains an infinite loop vulnerability in http_response_recv() that allows m
- CVE-2026-110837 HIGH 7.1 UPGRADE FreeRDP 2.0.0 before 3.32.0, when built with WITH_LAME=ON and WITH_DSP_FFMPEG=OFF, has a heap-based buffer ove
- CVE-2026-110838 HIGH 7.5 UPGRADE FreeRDP shadow server from 3.0.0 before 3.32.0 dispatches input PDUs during the Confirm Active state before au
- CVE-2026-110833 MEDIUM 5.9 UPGRADE FreeRDP from 3.0.0-beta1 before 3.32.0 fails to enforce cumulative or absolute size limits when reassembling R
- CVE-2026-110832 MEDIUM 6.5 UPGRADE FreeRDP from 2.0.0 before 3.32.0 contains a memory exhaustion vulnerability in wts_read_drdynvc_data_first tha
- CVE-2026-110831 MEDIUM 4.3 UPGRADE FreeRDP versions 3.13.0 before 3.32.0 contain a resource retention flaw in drive_process_irp_create, which reg
- CVE-2026-110830 MEDIUM 5.9 UPGRADE FreeRDP before 3.32.0 fails to close prior serial handles in serial_process_irp_create, allowing a malicious R
- CVE-2026-110829 MEDIUM 6.5 UPGRADE FreeRDP versions from 3.0.0 before 3.32.0 contain a null pointer dereference in the rdpsnd channel when a frag
FAQ
How do I fix freerdp vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is freerdp being exploited right now?
None of the tracked freerdp CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which freerdp CVE should I patch first?
CVE-2026-110838 currently ranks highest (41/100): FreeRDP shadow server from 3.0.0 before 3.32.0 dispatches input PDUs during the Confirm Active state before au.