Search CVE reports


Toggle filters

41 – 50 of 32405 results

Status is adjusted based on your filters.


CVE-2026-25997

Medium priority
Needs evaluation

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_clipboard_format_equal` reads freed `lastSentFormats` memory because `xf_clipboard_formats_free` (called from the cliprdr channel thread...

3 affected packages

freerdp, freerdp2, freerdp3

Package 24.04 LTS
freerdp Not in release
freerdp2 Needs evaluation
freerdp3 Needs evaluation
Show less packages

CVE-2026-25959

Medium priority
Needs evaluation

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_cliprdr_provide_data_` passes freed `pDstData` to `XChangeProperty` because the cliprdr channel thread...

3 affected packages

freerdp, freerdp2, freerdp3

Package 24.04 LTS
freerdp Not in release
freerdp2 Needs evaluation
freerdp3 Needs evaluation
Show less packages

CVE-2026-25955

Medium priority
Needs evaluation

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_AppUpdateWindowFromSurface` reuses a cached `XImage` whose `data` pointer references a freed RDPGFX surface buffer,...

3 affected packages

freerdp, freerdp2, freerdp3

Package 24.04 LTS
freerdp Not in release
freerdp2 Needs evaluation
freerdp3 Needs evaluation
Show less packages

CVE-2026-25954

Medium priority
Needs evaluation

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_rail_server_local_move_size` dereferences a freed `xfAppWindow` pointer because `xf_rail_get_window` returns an unprotected pointer from...

3 affected packages

freerdp, freerdp2, freerdp3

Package 24.04 LTS
freerdp Not in release
freerdp2 Needs evaluation
freerdp3 Needs evaluation
Show less packages

CVE-2026-25953

Medium priority
Needs evaluation

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_AppUpdateWindowFromSurface` reads from a freed `xfAppWindow` because the RDPGFX DVC thread obtains a bare pointer...

3 affected packages

freerdp, freerdp2, freerdp3

Package 24.04 LTS
freerdp Not in release
freerdp2 Needs evaluation
freerdp3 Needs evaluation
Show less packages

CVE-2026-25952

Medium priority
Needs evaluation

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_SetWindowMinMaxInfo` dereferences a freed `xfAppWindow` pointer because `xf_rail_get_window` in `xf_rail_server_min_max_info` returns an...

3 affected packages

freerdp, freerdp2, freerdp3

Package 24.04 LTS
freerdp Not in release
freerdp2 Needs evaluation
freerdp3 Needs evaluation
Show less packages

CVE-2026-25942

Medium priority
Needs evaluation

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_rail_server_execute_result` indexes the global `error_code_names[]` array (7 elements, indices 0–6) with an...

3 affected packages

freerdp, freerdp2, freerdp3

Package 24.04 LTS
freerdp Not in release
freerdp2 Needs evaluation
freerdp3 Needs evaluation
Show less packages

CVE-2026-25941

Medium priority
Needs evaluation

FreeRDP is a free implementation of the Remote Desktop Protocol. Versions on the 2.x branch prior to to 2.11.8 and on the 3.x branch prior to 3.23.0 have an out-of-bounds read vulnerability in the FreeRDP client's RDPGFX channel...

3 affected packages

freerdp, freerdp2, freerdp3

Package 24.04 LTS
freerdp Not in release
freerdp2 Needs evaluation
freerdp3 Needs evaluation
Show less packages

CVE-2026-21725

Medium priority

Not in release

A time-of-create-to-time-of-use (TOCTOU) vulnerability lets recently deleted-then-recreated data sources be re-deleted without permission to do so. This requires several very stringent conditions to be met: - The attacker must...

1 affected package

grafana

Package 24.04 LTS
grafana Not in release
Show less packages

CVE-2026-1747

Medium priority

Not in release

GitLab has remediated an issue in GitLab EE affecting all versions from 17.11 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that, under certain conditions, could have allowed Developer-role users with insufficient...

1 affected package

gitlab

Package 24.04 LTS
gitlab Not in release
Show less packages