F
Vendor security profile
freerdp
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs129
Critical20
CISA KEV0
Public exploit83
Patch rate%40
Avg. CVSS7.3
12-month vulnerability rate
0
1
11
4
4
0
5
0
8
34
22
39
CVE KEV
CVE severity distribution
129toplam CVE
Critical20 (16%)
High64 (50%)
Medium40 (31%)
Low5 (4%)
Patch and exploitation view
%40
Verified patch
%0
CISA KEV
%64
Public exploit
52Patch available
0Partial
0Workaround
0Vendor: no patch
77Unknown
Latest vulnerabilities
6.0
CVE-2026-109953
FreeRDP 3.0.0 before 3.32.0 Cleartext Credential Disclosure via /restricted-admin
F
Patch status unknown
6.0
CVE-2026-109952
FreeRDP 3.0.0 before 3.32.0 Security Protocol Downgrade via Negotiation Response
F
Patch status unknown
6.9
CVE-2026-109951
FreeRDP 3.17.1 before 3.32.0 Heap Buffer Over-Read via Proxy DRDYNVC Channel Name
F
Patch status unknown
5.3
CVE-2026-109950
FreeRDP 3.0.0 before 3.32.0 Heap Out-of-Bounds Read via RD Gateway Messages
F
Patch status unknown
7.1
CVE-2026-109949
FreeRDP 3.0.0 before 3.32.0 PIN Brute-Force via Virtual Smartcard
F
Patch status unknown
5.3
CVE-2026-109948
FreeRDP 3.0.0 before 3.32.0 Memory Disclosure via SCardTransmit Smartcard Redirection
F
Patch status unknown
7.1
CVE-2026-109947
FreeRDP 3.20.1 before 3.32.0 Unbounded Allocation via drive_process_irp_read
F
Patch status unknown
7.1
CVE-2026-109946
FreeRDP 3.11.0 before 3.32.0 Reachable Assertion via AVC444 Odd Region Width
F
Patch status unknown
6.0
CVE-2026-109945
FreeRDP 3.0.0 before 3.32.0 Smartcard Use-After-Free via Concurrent Disconnect and Transmit
F
Patch status unknown
7.1
CVE-2026-109944
FreeRDP 3.0.0 before 3.32.0 Reachable Assertion via Stale Smartcard Handle
F
Patch status unknown