FreeRDP vulnerabilities and fixes
Exploited and high-severity FreeRDP vulnerabilities tracked by VulnFeed, with CVSS and EPSS scores, affected versions and fixes.
- 7.1CVE-2026-121412FreeRDP 3.0.0 before 3.32.2 Proxy Memory Exhaustion via DVC ReassemblyFix availableFreeRDP FreeRDP
1 min read - 8.2CVE-2026-121409FreeRDP before 3.32.2 Denial of Service via Oversized X.224 Routing TokenFix availableFreeRDP FreeRDP
1 min read - 7.1CVE-2026-121407FreeRDP before 3.32.2 Shadow Server Denial of Service via remdesk ChannelFix availableFreeRDP FreeRDP
1 min read - 7.1CVE-2026-121404FreeRDP before 3.32.2 Shadow Server CPU Exhaustion via Zero-Length DVC DATAFix availableFreeRDP FreeRDP
1 min read - 7.1CVE-2026-121402FreeRDP before 3.32.2 X11 Client Crash via Zero-Width RDPGFX ResetGraphicsFix availableFreeRDP FreeRDP
1 min read - 7.1CVE-2026-121400FreeRDP before 3.32.2 CPU Exhaustion via RDG Control PacketFix availableFreeRDP FreeRDP
1 min read - 8.2CVE-2026-121398FreeRDP before 3.32.2 Use-After-Free via dyn-channel-dump ModuleFix availableFreeRDP FreeRDP
1 min read - 7.1CVE-2026-121394FreeRDP before 3.32.2 Denial of Service via RemoteFX RLGR decoderFix availableFreeRDP FreeRDP
1 min read - 7.1CVE-2026-121395FreeRDP 3.17.0 before 3.32.2 Denial of Service via RemoteFX DecoderFix availableFreeRDP FreeRDP
1 min read - 7.1CVE-2026-121393FreeRDP 3.0.0 before 3.32.2 Denial of Service via RemoteFX Region AssertionFix availableFreeRDP FreeRDP
1 min read - 9.1CVE-2026-121392FreeRDP before 3.32.2 Certificate Identity Validation Bypass via tls_verify_certificateFix availableFreeRDP FreeRDP
1 min read - 7.1CVE-2026-121388FreeRDP 3.0.0 before 3.32.2 Uncapped Memory Allocation via DRDYNVC DATA_FIRSTFix availableFreeRDP FreeRDP
1 min read - 8.7CVE-2026-121386FreeRDP before 3.32.2 Denial of Service via WinPR PNG/JPEG Image ReadersFix availableFreeRDP FreeRDP
1 min read