# FreeRDP vulnerabilities Source: https://junglewise.ai/threats/technologies/freerdp Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 13 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/freerdp.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 151 vulnerabilities in FreeRDP: 1 in the last 7 days and 105 in the last 90 days, 24 of them critical and 0 exploited in the wild. The most recent, CVE-2026-125394, was published on 10 November 2026. 73 vulnerabilities in the last four weeks, up 265% on the four before (20). 2 critical against 1. ## Counts - Last 7 days: 1 - Last 30 days: 51 - Last 90 days: 105 - All time: 151 (24 critical, 0 exploited in the wild) ## About FreeRDP FreeRDP is a free remote desktop protocol implementation which allows for connecting to Windows Terminal Services. ## Latest FreeRDP vulnerabilities - [CVE-2026-125394: FreeRDP heap use-after-free in brush cache](https://junglewise.ai/threats/cve-2026-125394-freerdp-before-3-33-0-contains-a-heap-use-after-free) (medium, CVSS 5.4, published 10 Nov 2026) - [CVE-2026-121964: FreeRDP heap buffer overflow in RD Gateway RPC client](https://junglewise.ai/threats/cve-2026-121964-freerdp-before-3-32-2-contains-a-heap-based-buffer-overflow-in) (high, CVSS 7.5, published 4 Nov 2026) - [CVE-2026-121963: FreeRDP use-after-free in dynamic rdpsnd channel](https://junglewise.ai/threats/cve-2026-121963-freerdp-before-3-32-2-contains-a-use-after-free-vulnerability-in) (medium, CVSS 5.9, published 4 Nov 2026) - [CVE-2026-121960: FreeRDP denial of service in NLA shadow server via malformed TSRequest](https://junglewise.ai/threats/cve-2026-121960-freerdp-before-3-32-2-contains-a-denial-of-service-vulnerability) (high, CVSS 7.5, published 4 Nov 2026) - [CVE-2026-121958: FreeRDP heap out-of-bounds write in RDPGFX HashTable_GetKeys](https://junglewise.ai/threats/cve-2026-121958-freerdp-through-3-32-1-has-a-heap-out-of-bounds-write-in-the) (high, CVSS 8.8, published 4 Nov 2026) - [CVE-2026-121957: FreeRDP use-after-free in planar bitmap decoder](https://junglewise.ai/threats/cve-2026-121957-freerdp-before-3-32-2-contains-a-use-after-free-vulnerability) (high, CVSS 7.5, published 4 Nov 2026) - [CVE-2026-121956: FreeRDP double free in WinPR Kerberos SSPI retrieveSomeTgt](https://junglewise.ai/threats/cve-2026-121956-freerdp-before-3-32-2-contains-a-double-free-in-the-winpr) (high, CVSS 7.5, published 4 Nov 2026) - [CVE-2026-121955: FreeRDP use-after-free in smartcard emulation ReleaseContext](https://junglewise.ai/threats/cve-2026-121955-freerdp-before-3-32-2-contains-a-use-after-free-vulnerability-in) (high, CVSS 7.5, published 4 Nov 2026) - [CVE-2026-121954: FreeRDP heap out-of-bounds write in planar codec](https://junglewise.ai/threats/cve-2026-121954-freerdp-before-3-32-2-has-a-heap-out-of-bounds-write-in-the) (medium, CVSS 6.5, published 4 Nov 2026) - [CVE-2026-121953: FreeRDP use-after-free in rdpgfx dynamic virtual channel](https://junglewise.ai/threats/cve-2026-121953-freerdp-before-3-32-2-has-a-use-after-free-in-the-client-s) (critical, CVSS 9.8, published 4 Nov 2026) - [CVE-2026-121952: FreeRDP out-of-bounds write in bitmap cache v2 capability](https://junglewise.ai/threats/cve-2026-121952-freerdp-before-3-32-2-has-an-out-of-bounds-write-in-the-proxy) (critical, CVSS 9.8, published 4 Nov 2026) - [CVE-2026-121950: FreeRDP RDPGFX integer wrap in surface allocation](https://junglewise.ai/threats/cve-2026-121950-freerdp-before-3-32-2-does-not-check-the-product-of-surface) (medium, CVSS 6.5, published 4 Nov 2026) - [CVE-2026-121412: FreeRDP proxy uncontrolled resource consumption in DVC message reassembly](https://junglewise.ai/threats/cve-2026-121412-freerdp-from-3-0-0-before-3-32-2-contains-an-uncontrolled) (medium, CVSS 6.5, published 3 Nov 2026) - [CVE-2026-121410: FreeRDP denial of service in RDPGFX ALPHA WIRETOSURFACE_2](https://junglewise.ai/threats/cve-2026-121410-freerdp-before-3-32-2-contains-a-denial-of-service-vulnerability) (medium, CVSS 4.3, published 3 Nov 2026) - [CVE-2026-121409: FreeRDP denial of service via oversized X.224 routing token](https://junglewise.ai/threats/cve-2026-121409-freerdp-before-3-32-2-contains-a-denial-of-service-vulnerability) (medium, CVSS 5.9, published 3 Nov 2026) - [CVE-2026-121408: FreeRDP use-after-free in urbdrc USB redirection](https://junglewise.ai/threats/cve-2026-121408-freerdp-before-3-32-2-contains-a-use-after-free-in-the-urbdrc) (medium, CVSS 5.3, published 3 Nov 2026) - [CVE-2026-121407: FreeRDP shadow server denial of service in remdesk channel](https://junglewise.ai/threats/cve-2026-121407-freerdp-before-3-32-2-contains-a-denial-of-service-vulnerability) (medium, CVSS 6.5, published 3 Nov 2026) - [CVE-2026-121406: FreeRDP client assertion abort in RDPGFX ZGFX payload handling](https://junglewise.ai/threats/cve-2026-121406-freerdp-before-3-32-2-allows-a-client-assertion-abort-because) (medium, CVSS 4.3, published 3 Nov 2026) - [CVE-2026-121405: FreeRDP memory exhaustion in serial device-control IRP](https://junglewise.ai/threats/cve-2026-121405-freerdp-before-3-32-2-fails-to-cap-the-outputbufferlength-in) (medium, CVSS 4.3, published 3 Nov 2026) - [CVE-2026-121404: FreeRDP denial of service in shadow server dynamic-channel handling](https://junglewise.ai/threats/cve-2026-121404-freerdp-before-3-32-2-contains-a-denial-of-service-vulnerability) (medium, CVSS 6.5, published 3 Nov 2026) - [CVE-2026-121403: FreeRDP denial of service in drive worker via malformed IRP request](https://junglewise.ai/threats/cve-2026-121403-freerdp-before-3-32-2-contains-a-denial-of-service-vulnerability) (medium, CVSS 4.3, published 3 Nov 2026) - [CVE-2026-121401: FreeRDP null-pointer dereference in RD Gateway extended-auth packet](https://junglewise.ai/threats/cve-2026-121401-freerdp-before-3-32-2-contains-a-denial-of-service-vulnerability) (medium, CVSS 4.3, published 3 Nov 2026) - [CVE-2026-121400: FreeRDP CPU exhaustion in RD Gateway packet handler](https://junglewise.ai/threats/cve-2026-121400-freerdp-before-3-32-2-contains-a-denial-of-service-vulnerability) (medium, CVSS 6.5, published 3 Nov 2026) - [CVE-2026-121398: FreeRDP use-after-free in dyn-channel-dump module during session teardown](https://junglewise.ai/threats/cve-2026-121398-freerdp-before-3-32-2-contains-a-cross-thread-use-after-free) (medium, CVSS 5.9, published 3 Nov 2026) - [CVE-2026-121396: FreeRDP reachable assertion in RTS padding validation](https://junglewise.ai/threats/cve-2026-121396-freerdp-clients-from-3-0-0-before-3-32-2-built-with-verbose) (medium, CVSS 4.3, published 3 Nov 2026) ## Most severe FreeRDP vulnerabilities - [CVE-2026-55191: FreeRDP buffer overflow in H.264 AVC444 decoding](https://junglewise.ai/threats/cve-2026-55191-freerdp-buffer-overflow-in-h-264-avc444-decoding) (critical, CVSS 9.8, published 19 Aug 2026) - [CVE-2026-63633: FreeRDP heap buffer overflow in Opus audio decoding](https://junglewise.ai/threats/cve-2026-63633-freerdp-heap-buffer-overflow-in-opus-audio-decoding) (critical, CVSS 9.8, published 19 Aug 2026) - [CVE-2026-55194: FreeRDP heap buffer overflow in RPC gateway response handling](https://junglewise.ai/threats/cve-2026-55194-freerdp-heap-buffer-overflow-in-rpc-gateway-response-handling) (critical, CVSS 9.8, published 19 Aug 2026) - [CVE-2026-23530: FreeRDP heap buffer overflow in freerdp_bitmap_decompress_planar](https://junglewise.ai/threats/cve-2026-23530-freerdp-heap-buffer-overflow-in-freerdp-bitmap-decompress-planar) (critical, CVSS 9.8, published 19 Jan 2026) - [CVE-2026-23534: FreeRDP heap buffer overflow in ClearCodec bands decode path](https://junglewise.ai/threats/cve-2026-23534-freerdp-heap-buffer-overflow-in-clearcodec-bands-decode-path) (critical, CVSS 9.8, published 19 Jan 2026) - [CVE-2026-23533: FreeRDP heap buffer overflow in ClearCodec decode path](https://junglewise.ai/threats/cve-2026-23533-freerdp-heap-buffer-overflow-in-clearcodec-decode-path) (critical, CVSS 9.8, published 19 Jan 2026) - [CVE-2026-23531: FreeRDP heap buffer overflow in ClearCodec](https://junglewise.ai/threats/cve-2026-23531-freerdp-heap-buffer-overflow-in-clearcodec) (critical, CVSS 9.8, published 19 Jan 2026) - [CVE-2026-23532: FreeRDP heap buffer overflow in gdi_SurfaceToSurface](https://junglewise.ai/threats/cve-2026-23532-freerdp-heap-buffer-overflow-in-gdi-surfacetosurface) (critical, CVSS 9.8, published 19 Jan 2026) - [CVE-2026-23884: FreeRDP use after free in GDI offscreen bitmap deletion](https://junglewise.ai/threats/cve-2026-23884-freerdp-use-after-free-in-gdi-offscreen-bitmap-deletion) (critical, CVSS 9.8, published 19 Jan 2026) - [CVE-2026-23883: FreeRDP use after free in xf_Pointer_New](https://junglewise.ai/threats/cve-2026-23883-freerdp-use-after-free-in-xf-pointer-new) (critical, CVSS 9.8, published 19 Jan 2026) ## Vulnerabilities per week 73 vulnerabilities in the last four weeks, up 265% on the four before (20). 2 critical against 1. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 9 | 3 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 2 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 20 | 1 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 39 | 0 | 0 | | 19 Oct 2026 | 3 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 31 | 2 | 0 | | 9 Nov 2026 | 1 | 0 | 0 | ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "FreeRDP vulnerabilities", https://junglewise.ai/threats/technologies/freerdp, 13 November 2026.