WinRM and RDP vulnerabilities and fixes

CVEs that mention WinRM and RDP, ranked by priority. 14 tracked.

WinRM and RDP has 14 tracked vulnerabilities, 1 critical and 1 exploited in the wild (CISA KEV). A fixed release or vendor patch exists for 12. Most recent: 2026-10-21. Highest priority: CVE-2026-8452 (score 85/100).

• CVE-2026-8452 CRITICAL 9.8 EXPLOITED UPGRADE UPGRADE Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
• CVE-2026-110838 HIGH 7.5 UPGRADE FreeRDP shadow server from 3.0.0 before 3.32.0 dispatches input PDUs during the Confirm Active state before au
• CVE-2026-71130 HIGH 8.2 DOWNGRADE Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core)
• CVE-2026-71113 HIGH 7.5 DOWNGRADE Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core)
• CVE-2026-50575 HIGH 7.7 BetterDesk is a remote desktop management solution
• CVE-2026-110837 HIGH 7.1 UPGRADE FreeRDP 2.0.0 before 3.32.0, when built with WITH_LAME=ON and WITH_DSP_FFMPEG=OFF, has a heap-based buffer ove
• CVE-2026-110830 MEDIUM 5.9 UPGRADE FreeRDP before 3.32.0 fails to close prior serial handles in serial_process_irp_create, allowing a malicious R
• CVE-2026-110839 HIGH 7.1 UPGRADE FreeRDP 3.3.0 before 3.32.0, when built with WINPR_UTILS_IMAGE_JPEG=ON, has a heap-based out-of-bounds write i
• CVE-2026-110829 MEDIUM 6.5 UPGRADE FreeRDP versions from 3.0.0 before 3.32.0 contain a null pointer dereference in the rdpsnd channel when a frag
• CVE-2026-110834 MEDIUM 6.5 UPGRADE FreeRDP from 2.0.0 before 3.32.0 contains a null pointer dereference vulnerability that allows malicious RDP s
• CVE-2026-110835 MEDIUM 4.0 UPGRADE FreeRDP 3.0.0 before 3.32.0 allows HTTP header injection in its proxy because a lone LF in the target portion
• CVE-2026-114042 MEDIUM 6.5 FreeRDP 3.32.0 contains a use-after-free vulnerability in the drdynvc channel that frees a pool-owned stream w
• CVE-2026-114047 MEDIUM 6.8 FreeRDP from 2.0.0 before 3.32.0 contains an improper certificate validation vulnerability in its proxy that a
• CVE-2026-110831 MEDIUM 4.3 UPGRADE FreeRDP versions 3.13.0 before 3.32.0 contain a resource retention flaw in drive_process_irp_create, which reg

FAQ

How do I fix WinRM and RDP vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is WinRM and RDP being exploited right now?

Yes: 1 WinRM and RDP CVE is on the CISA Known Exploited Vulnerabilities list, so patch it first.

Which WinRM and RDP CVE should I patch first?

CVE-2026-8452 currently ranks highest (85/100): Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability.

← Back to latest CVEs