Vulnerability-Lookup

CVE-2026-31806 (GCVE-0-2026-31806)

Vulnerability from cvelistv5 – Published: 2026-03-13 17:40 – Updated: 2026-07-15 01:08

Title

FreeRDP has a Heap Buffer Overflow in nsc_process_message() via Unchecked SURFACE_BITS_COMMAND Bitmap Dimensions

Summary

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, the gdi_surface_bits() function processes SURFACE_BITS_COMMAND messages sent by the RDP server. When the command is handled using NSCodec, the bmp.width and bmp.height values provided by the server are not properly validated against the actual desktop dimensions. A malicious RDP server can supply crafted bmp.width and bmp.height values that exceed the expected surface size. Because these values are used during bitmap decoding and memory operations without proper bounds checking, this can lead to a heap buffer overflow. Since the attacker can also control the associated pixel data transmitted by the server, the overflow may be exploitable to overwrite adjacent heap memory. This vulnerability is fixed in 3.24.0.

Severity

9.3 (Critical)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-122 - Heap-based Buffer Overflow
CWE-131 - Incorrect Calculation of Buffer Size

Assigner

GitHub_M

References

19 references

URL	Tags
https://github.com/FreeRDP/FreeRDP/security/advis…	x_refsource_CONFIRM
https://github.com/FreeRDP/FreeRDP/commit/83d9aed…	x_refsource_MISC
https://access.redhat.com/security/cve/CVE-2026-31806	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2447376	issue-trackingx_refsource_REDHAT
https://security.access.redhat.com/data/csaf/v2/v…	x_sadp-csaf-vex
https://access.redhat.com/errata/RHSA-2026:11323	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:6743	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:6799	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19033	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:6918	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:10734	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:10735	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:10951	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:10076	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:9640	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:9641	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:6958	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:6727	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:6340	vendor-advisoryx_refsource_REDHAT

Impacted products

19 products

Vendor	Product	Version
FreeRDP	FreeRDP	Affected: < 3.24.0
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 2:3.10.3-12.el10_2.2 , < * (rpm) Unaffected: 2:3.10.3-5.el10_1.5 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.1 cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 2:3.10.3-3.el10_0.5 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 7 Extended Lifecycle Support	Unaffected: 0:2.1.1-5.el7_9.7 , < * (rpm) cpe:/o:redhat:rhel_els:7
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 2:2.11.7-6.el8_10 , < * (rpm) cpe:/a:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 8.2 Advanced Update Support	Unaffected: 2:2.0.0-46.rc4.el8_2.10 , < * (rpm) cpe:/a:redhat:rhel_aus:8.2
Red Hat	Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support	Unaffected: 2:2.2.0-12.el8_4 , < * (rpm) cpe:/a:redhat:rhel_aus:8.4
Red Hat	Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On	Unaffected: 2:2.2.0-12.el8_4 , < * (rpm) cpe:/a:redhat:rhel_eus_long_life:8.4
Red Hat	Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support	Unaffected: 2:2.2.0-7.el8_6.5 , < * (rpm) cpe:/a:redhat:rhel_aus:8.6
Red Hat	Red Hat Enterprise Linux 8.6 Telecommunications Update Service	Unaffected: 2:2.2.0-7.el8_6.5 , < * (rpm) cpe:/a:redhat:rhel_tus:8.6
Red Hat	Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions	Unaffected: 2:2.2.0-7.el8_6.5 , < * (rpm) cpe:/a:redhat:rhel_e4s:8.6
Red Hat	Red Hat Enterprise Linux 8.8 Telecommunications Update Service	Unaffected: 2:2.2.0-12.el8_8.5 , < * (rpm) cpe:/a:redhat:rhel_tus:8.8
Red Hat	Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions	Unaffected: 2:2.2.0-12.el8_8.5 , < * (rpm) cpe:/a:redhat:rhel_e4s:8.8
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 2:2.11.7-1.el9_7.5 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions	Unaffected: 2:2.4.1-3.el9_0.4 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.0
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	Unaffected: 2:2.4.1-6.el9_2.6 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.2
Red Hat	Red Hat Enterprise Linux 9.4 Extended Update Support	Unaffected: 2:2.11.2-1.el9_4.5 , < * (rpm) cpe:/a:redhat:rhel_eus:9.4
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 2:2.11.7-1.el9_6.7 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6
Red Hat	Red Hat Enterprise Linux 6	cpe:/o:redhat:enterprise_linux:6

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-31806",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-14T03:55:34.087938Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-03-15T01:51:18.600Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "affected": [
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.1",
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "freerdp",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "2:3.10.3-12.el10_2.2",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "2:3.10.3-5.el10_1.5",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "freerdp",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "2:3.10.3-3.el10_0.5",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:rhel_els:7"
            ],
            "defaultStatus": "affected",
            "packageName": "freerdp",
            "product": "Red Hat Enterprise Linux 7 Extended Lifecycle Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:2.1.1-5.el7_9.7",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "freerdp",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "2:2.11.7-6.el8_10",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_aus:8.2"
            ],
            "defaultStatus": "affected",
            "packageName": "freerdp",
            "product": "Red Hat Enterprise Linux 8.2 Advanced Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "2:2.0.0-46.rc4.el8_2.10",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_aus:8.4"
            ],
            "defaultStatus": "affected",
            "packageName": "freerdp",
            "product": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "2:2.2.0-12.el8_4",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus_long_life:8.4"
            ],
            "defaultStatus": "affected",
            "packageName": "freerdp",
            "product": "Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "2:2.2.0-12.el8_4",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_aus:8.6"
            ],
            "defaultStatus": "affected",
            "packageName": "freerdp",
            "product": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "2:2.2.0-7.el8_6.5",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_tus:8.6"
            ],
            "defaultStatus": "affected",
            "packageName": "freerdp",
            "product": "Red Hat Enterprise Linux 8.6 Telecommunications Update Service",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "2:2.2.0-7.el8_6.5",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:8.6"
            ],
            "defaultStatus": "affected",
            "packageName": "freerdp",
            "product": "Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "2:2.2.0-7.el8_6.5",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_tus:8.8"
            ],
            "defaultStatus": "affected",
            "packageName": "freerdp",
            "product": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "2:2.2.0-12.el8_8.5",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:8.8"
            ],
            "defaultStatus": "affected",
            "packageName": "freerdp",
            "product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "2:2.2.0-12.el8_8.5",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "freerdp",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "2:2.11.7-1.el9_7.5",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.0"
            ],
            "defaultStatus": "affected",
            "packageName": "freerdp",
            "product": "Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "2:2.4.1-3.el9_0.4",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.2"
            ],
            "defaultStatus": "affected",
            "packageName": "freerdp",
            "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "2:2.4.1-6.el9_2.6",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.4"
            ],
            "defaultStatus": "affected",
            "packageName": "freerdp",
            "product": "Red Hat Enterprise Linux 9.4 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "2:2.11.2-1.el9_4.5",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "freerdp",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "2:2.11.7-1.el9_6.7",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:6"
            ],
            "defaultStatus": "unaffected",
            "packageName": "freerdp",
            "product": "Red Hat Enterprise Linux 6",
            "vendor": "Red Hat"
          }
        ],
        "datePublic": "2026-03-13T17:40:19.920Z",
        "descriptions": [
          {
            "lang": "en",
            "value": "A flaw was found in FreeRDP, a free implementation of the Remote Desktop Protocol (RDP). The `gdi_surface_bits()` function, which processes `SURFACE_BITS_COMMAND` messages, does not properly validate image dimensions (`bmp.width` and `bmp.height`) provided by a malicious RDP server. This can lead to a heap buffer overflow during bitmap decoding and memory operations. A remote attacker could exploit this to overwrite adjacent memory, potentially resulting in arbitrary code execution."
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "namespace": "https://access.redhat.com/security/updates/classification/",
                "value": "Important"
              },
              "type": "Red Hat severity rating"
            }
          },
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            },
            "format": "CVSS"
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-131",
                "description": "Incorrect Calculation of Buffer Size",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-15T01:08:56.156Z",
          "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
          "shortName": "redhat-SADP"
        },
        "references": [
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2026-31806"
          },
          {
            "name": "RHBZ#2447376",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2447376"
          },
          {
            "tags": [
              "x_sadp-csaf-vex"
            ],
            "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-31806.json"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:11323"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:6743"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:6799"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19033"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:6918"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:10734"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:10735"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:10951"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:10076"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:9640"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:9641"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:6958"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:6727"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:6340"
          }
        ],
        "solutions": [
          {
            "lang": "en",
            "value": "RHSA-2026:11323: Red Hat Enterprise Linux Server (v. 7 ELS), Red Hat Enterprise Linux Server Optional (v. 7 ELS)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:6743: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:6799: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:19033: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:6918: Red Hat Enterprise Linux AppStream (v. 8), Red Hat Enterprise Linux CRB (v. 8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:10734: Red Hat Enterprise Linux AppStream AUS (v. 8.2)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:10735: Red Hat Enterprise Linux AppStream AUS (v.8.4), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:10951: Red Hat Enterprise Linux AppStream AUS (v.8.6), Red Hat Enterprise Linux AppStream E4S (v.8.6), Red Hat Enterprise Linux AppStream TUS (v.8.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:10076: Red Hat Enterprise Linux AppStream E4S (v.8.8), Red Hat Enterprise Linux AppStream TUS (v.8.8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:9640: Red Hat Enterprise Linux AppStream E4S (v.9.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:9641: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:6958: Red Hat CodeReady Linux Builder EUS (v.9.4), Red Hat Enterprise Linux AppStream EUS (v.9.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:6727: Red Hat CodeReady Linux Builder EUS (v.9.6), Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:6340: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2026-03-13T18:02:52.800Z",
            "value": "Reported to Red Hat."
          },
          {
            "lang": "en",
            "time": "2026-03-13T17:40:19.920Z",
            "value": "Made public."
          }
        ],
        "title": "freerdp: FreeRDP: Arbitrary code execution via crafted Remote Desktop Protocol (RDP) server messages",
        "x_adpType": "supplier",
        "x_generator": {
          "engine": "sadp-cli 1.0.0"
        }
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "FreeRDP",
          "vendor": "FreeRDP",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 3.24.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0,  the gdi_surface_bits() function processes SURFACE_BITS_COMMAND messages sent by the RDP server. When the command is handled using NSCodec, the bmp.width and bmp.height values provided by the server are not properly validated against the actual desktop dimensions. A malicious RDP server can supply crafted bmp.width and bmp.height values that exceed the expected surface size. Because these values are used during bitmap decoding and memory operations without proper bounds checking, this can lead to a heap buffer overflow. Since the attacker can also control the associated pixel data transmitted by the server, the overflow may be exploitable to overwrite adjacent heap memory. This vulnerability is fixed in 3.24.0."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 9.3,
            "baseSeverity": "CRITICAL",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-122",
              "description": "CWE-122: Heap-based Buffer Overflow",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-03-13T17:40:19.920Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-rrqm-46rj-cmx2",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-rrqm-46rj-cmx2"
        },
        {
          "name": "https://github.com/FreeRDP/FreeRDP/commit/83d9aedea278a74af3e490ff5eeb889c016dbb2b",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/commit/83d9aedea278a74af3e490ff5eeb889c016dbb2b"
        }
      ],
      "source": {
        "advisory": "GHSA-rrqm-46rj-cmx2",
        "discovery": "UNKNOWN"
      },
      "title": "FreeRDP has a Heap Buffer Overflow in nsc_process_message() via Unchecked SURFACE_BITS_COMMAND Bitmap Dimensions"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-31806",
    "datePublished": "2026-03-13T17:40:19.920Z",
    "dateReserved": "2026-03-09T16:33:42.913Z",
    "dateUpdated": "2026-07-15T01:08:56.156Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-31806",
      "date": "2026-07-14",
      "epss": "0.00656",
      "percentile": "0.47126"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-31806\",\"sourceIdentifier\":\"security-advisories@github.com\",\"published\":\"2026-03-13T19:54:36.300\",\"lastModified\":\"2026-07-15T02:19:50.480\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0,  the gdi_surface_bits() function processes SURFACE_BITS_COMMAND messages sent by the RDP server. When the command is handled using NSCodec, the bmp.width and bmp.height values provided by the server are not properly validated against the actual desktop dimensions. A malicious RDP server can supply crafted bmp.width and bmp.height values that exceed the expected surface size. Because these values are used during bitmap decoding and memory operations without proper bounds checking, this can lead to a heap buffer overflow. Since the attacker can also control the associated pixel data transmitted by the server, the overflow may be exploitable to overwrite adjacent heap memory. This vulnerability is fixed in 3.24.0.\"},{\"lang\":\"es\",\"value\":\"FreeRDP es una implementaci\u00f3n gratuita del Protocolo de Escritorio Remoto. Antes de la versi\u00f3n 3.24.0, la funci\u00f3n gdi_surface_bits() procesa los mensajes SURFACE_BITS_COMMAND enviados por el servidor RDP. Cuando el comando se maneja usando NSCodec, los valores bmp.width y bmp.height proporcionados por el servidor no se validan correctamente contra las dimensiones reales del escritorio. Un servidor RDP malicioso puede proporcionar valores bmp.width y bmp.height manipulados que exceden el tama\u00f1o de superficie esperado. Debido a que estos valores se utilizan durante la decodificaci\u00f3n de mapas de bits y las operaciones de memoria sin una verificaci\u00f3n de l\u00edmites adecuada, esto puede conducir a un desbordamiento de b\u00fafer de pila. Dado que el atacante tambi\u00e9n puede controlar los datos de p\u00edxeles asociados transmitidos por el servidor, el desbordamiento puede ser explotable para sobrescribir memoria de pila adyacente. Esta vulnerabilidad est\u00e1 corregida en la versi\u00f3n 3.24.0.\"}],\"affected\":[{\"source\":\"security-advisories@github.com\",\"affectedData\":[{\"vendor\":\"FreeRDP\",\"product\":\"FreeRDP\",\"versions\":[{\"version\":\"\u003c 3.24.0\",\"status\":\"affected\"}]}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"affectedData\":[{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"freerdp\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.1\",\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"2:3.10.3-12.el10_2.2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"2:3.10.3-5.el10_1.5\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10.0 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"freerdp\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"],\"versions\":[{\"version\":\"2:3.10.3-3.el10_0.5\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 7 Extended Lifecycle Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"freerdp\",\"cpes\":[\"cpe:/o:redhat:rhel_els:7\"],\"versions\":[{\"version\":\"0:2.1.1-5.el7_9.7\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"freerdp\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:8\"],\"versions\":[{\"version\":\"2:2.11.7-6.el8_10\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.2 Advanced Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"freerdp\",\"cpes\":[\"cpe:/a:redhat:rhel_aus:8.2\"],\"versions\":[{\"version\":\"2:2.0.0-46.rc4.el8_2.10\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"freerdp\",\"cpes\":[\"cpe:/a:redhat:rhel_aus:8.4\"],\"versions\":[{\"version\":\"2:2.2.0-12.el8_4\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"freerdp\",\"cpes\":[\"cpe:/a:redhat:rhel_eus_long_life:8.4\"],\"versions\":[{\"version\":\"2:2.2.0-12.el8_4\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"freerdp\",\"cpes\":[\"cpe:/a:redhat:rhel_aus:8.6\"],\"versions\":[{\"version\":\"2:2.2.0-7.el8_6.5\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.6 Telecommunications Update Service\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"freerdp\",\"cpes\":[\"cpe:/a:redhat:rhel_tus:8.6\"],\"versions\":[{\"version\":\"2:2.2.0-7.el8_6.5\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"freerdp\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:8.6\"],\"versions\":[{\"version\":\"2:2.2.0-7.el8_6.5\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.8 Telecommunications Update Service\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"freerdp\",\"cpes\":[\"cpe:/a:redhat:rhel_tus:8.8\"],\"versions\":[{\"version\":\"2:2.2.0-12.el8_8.5\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"freerdp\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:8.8\"],\"versions\":[{\"version\":\"2:2.2.0-12.el8_8.5\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"freerdp\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9\"],\"versions\":[{\"version\":\"2:2.11.7-1.el9_7.5\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"freerdp\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.0\"],\"versions\":[{\"version\":\"2:2.4.1-3.el9_0.4\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"freerdp\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.2\"],\"versions\":[{\"version\":\"2:2.4.1-6.el9_2.6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.4 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"freerdp\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.4\"],\"versions\":[{\"version\":\"2:2.11.2-1.el9_4.5\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.6 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"freerdp\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.6\"],\"versions\":[{\"version\":\"2:2.11.7-1.el9_6.7\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 6\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"freerdp\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:6\"]}]}],\"metrics\":{\"cvssMetricV40\":[{\"source\":\"security-advisories@github.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"4.0\",\"vectorString\":\"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X\",\"baseScore\":9.3,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"attackRequirements\":\"NONE\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"vulnConfidentialityImpact\":\"HIGH\",\"vulnIntegrityImpact\":\"HIGH\",\"vulnAvailabilityImpact\":\"HIGH\",\"subConfidentialityImpact\":\"NONE\",\"subIntegrityImpact\":\"NONE\",\"subAvailabilityImpact\":\"NONE\",\"exploitMaturity\":\"NOT_DEFINED\",\"confidentialityRequirement\":\"NOT_DEFINED\",\"integrityRequirement\":\"NOT_DEFINED\",\"availabilityRequirement\":\"NOT_DEFINED\",\"modifiedAttackVector\":\"NOT_DEFINED\",\"modifiedAttackComplexity\":\"NOT_DEFINED\",\"modifiedAttackRequirements\":\"NOT_DEFINED\",\"modifiedPrivilegesRequired\":\"NOT_DEFINED\",\"modifiedUserInteraction\":\"NOT_DEFINED\",\"modifiedVulnConfidentialityImpact\":\"NOT_DEFINED\",\"modifiedVulnIntegrityImpact\":\"NOT_DEFINED\",\"modifiedVulnAvailabilityImpact\":\"NOT_DEFINED\",\"modifiedSubConfidentialityImpact\":\"NOT_DEFINED\",\"modifiedSubIntegrityImpact\":\"NOT_DEFINED\",\"modifiedSubAvailabilityImpact\":\"NOT_DEFINED\",\"Safety\":\"NOT_DEFINED\",\"Automatable\":\"NOT_DEFINED\",\"Recovery\":\"NOT_DEFINED\",\"valueDensity\":\"NOT_DEFINED\",\"vulnerabilityResponseEffort\":\"NOT_DEFINED\",\"providerUrgency\":\"NOT_DEFINED\"}}],\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":5.9},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"baseScore\":8.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.8,\"impactScore\":5.9}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-03-14T03:55:34.087938Z\",\"id\":\"CVE-2026-31806\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"yes\"},{\"technicalImpact\":\"total\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"security-advisories@github.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-122\"}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-131\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:freerdp:freerdp:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.24.0\",\"matchCriteriaId\":\"97FCA262-35C3-4B6B-A321-15CE780FCA20\"}]}]}],\"references\":[{\"url\":\"https://github.com/FreeRDP/FreeRDP/commit/83d9aedea278a74af3e490ff5eeb889c016dbb2b\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Patch\"]},{\"url\":\"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-rrqm-46rj-cmx2\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Exploit\",\"Patch\",\"Vendor Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:10076\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:10734\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:10735\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:10951\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:11323\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19033\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:6340\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:6727\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:6743\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:6799\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:6918\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:6958\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:9640\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:9641\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/security/cve/CVE-2026-31806\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=2447376\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-31806.json\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"}]}}",
    "redhat_vex": {
      "aggregate_severity": "Important",
      "current_release_date": "2026-06-30T04:05:41+00:00",
      "cve": "CVE-2026-31806",
      "id": "CVE-2026-31806",
      "initial_release_date": "2026-03-13T17:40:19.920000+00:00",
      "product_status:fixed": "732",
      "product_status:known_not_affected": "5",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "freerdp: FreeRDP: Arbitrary code execution via crafted Remote Desktop Protocol (RDP) server messages",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-31806.json",
      "version": "3"
    },
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-31806\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-03-14T03:55:34.087938Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-03-15T01:50:40.332Z\"}}], \"cna\": {\"title\": \"FreeRDP has a Heap Buffer Overflow in nsc_process_message() via Unchecked SURFACE_BITS_COMMAND Bitmap Dimensions\", \"source\": {\"advisory\": \"GHSA-rrqm-46rj-cmx2\", \"discovery\": \"UNKNOWN\"}, \"metrics\": [{\"cvssV4_0\": {\"version\": \"4.0\", \"baseScore\": 9.3, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"CRITICAL\", \"vectorString\": \"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"attackRequirements\": \"NONE\", \"privilegesRequired\": \"NONE\", \"subIntegrityImpact\": \"NONE\", \"vulnIntegrityImpact\": \"HIGH\", \"subAvailabilityImpact\": \"NONE\", \"vulnAvailabilityImpact\": \"HIGH\", \"subConfidentialityImpact\": \"NONE\", \"vulnConfidentialityImpact\": \"HIGH\"}}], \"affected\": [{\"vendor\": \"FreeRDP\", \"product\": \"FreeRDP\", \"versions\": [{\"status\": \"affected\", \"version\": \"\u003c 3.24.0\"}]}], \"references\": [{\"url\": \"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-rrqm-46rj-cmx2\", \"name\": \"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-rrqm-46rj-cmx2\", \"tags\": [\"x_refsource_CONFIRM\"]}, {\"url\": \"https://github.com/FreeRDP/FreeRDP/commit/83d9aedea278a74af3e490ff5eeb889c016dbb2b\", \"name\": \"https://github.com/FreeRDP/FreeRDP/commit/83d9aedea278a74af3e490ff5eeb889c016dbb2b\", \"tags\": [\"x_refsource_MISC\"]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0,  the gdi_surface_bits() function processes SURFACE_BITS_COMMAND messages sent by the RDP server. When the command is handled using NSCodec, the bmp.width and bmp.height values provided by the server are not properly validated against the actual desktop dimensions. A malicious RDP server can supply crafted bmp.width and bmp.height values that exceed the expected surface size. Because these values are used during bitmap decoding and memory operations without proper bounds checking, this can lead to a heap buffer overflow. Since the attacker can also control the associated pixel data transmitted by the server, the overflow may be exploitable to overwrite adjacent heap memory. This vulnerability is fixed in 3.24.0.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-122\", \"description\": \"CWE-122: Heap-based Buffer Overflow\"}]}], \"providerMetadata\": {\"orgId\": \"a0819718-46f1-4df5-94e2-005712e83aaa\", \"shortName\": \"GitHub_M\", \"dateUpdated\": \"2026-03-13T17:40:19.920Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2026-31806\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-03-15T01:51:18.600Z\", \"dateReserved\": \"2026-03-09T16:33:42.913Z\", \"assignerOrgId\": \"a0819718-46f1-4df5-94e2-005712e83aaa\", \"datePublished\": \"2026-03-13T17:40:19.920Z\", \"assignerShortName\": \"GitHub_M\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

WID-SEC-W-2026-0725

Vulnerability from csaf_certbund - Published: 2026-03-12 23:00 - Updated: 2026-06-09 22:00

Summary

FreeRDP: Mehrere Schwachstellen

Severity

Hoch

Notes

Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.

Produktbeschreibung: FreeRDP ist eine freie Implementierung des Remote Desktop Protocol (RDP).

Angriff: Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in FreeRDP ausnutzen, um potenziell beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Speicherbeschädigungen zu verursachen, Daten zu manipulieren oder vertrauliche Informationen offenzulegen.

Betroffene Betriebssysteme: - Linux - Sonstiges - UNIX - Windows

CVE-2026-29774

Affected products

Known affected 11 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:-`	—
SUSE openSUSE SUSE	`cpe:/o:suse:opensuse:-`	—
RESF Rocky Linux 10 RESF / Rocky Linux	`cpe:/o:resf:rocky_linux:10`	10
Open Source FreeRDP <3.24.0 Open Source / FreeRDP		<3.24.0
Amazon Linux 2 Amazon	`cpe:/o:amazon:linux_2:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
Red Hat Enterprise Linux 10 Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:10`	10
RESF Rocky Linux RESF / Rocky Linux	`cpe:/o:resf:rocky_linux:-`	—
Fedora Linux Fedora	`cpe:/o:fedoraproject:fedora:-`	—
RESF Rocky Linux 9 RESF / Rocky Linux	`cpe:/o:resf:rocky_linux:9`	9

CVE-2026-29775

Affected products

Known affected 11 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:-`	—
SUSE openSUSE SUSE	`cpe:/o:suse:opensuse:-`	—
RESF Rocky Linux 10 RESF / Rocky Linux	`cpe:/o:resf:rocky_linux:10`	10
Open Source FreeRDP <3.24.0 Open Source / FreeRDP		<3.24.0
Amazon Linux 2 Amazon	`cpe:/o:amazon:linux_2:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
Red Hat Enterprise Linux 10 Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:10`	10
RESF Rocky Linux RESF / Rocky Linux	`cpe:/o:resf:rocky_linux:-`	—
Fedora Linux Fedora	`cpe:/o:fedoraproject:fedora:-`	—
RESF Rocky Linux 9 RESF / Rocky Linux	`cpe:/o:resf:rocky_linux:9`	9

CVE-2026-29776

Affected products

Known affected 11 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:-`	—
SUSE openSUSE SUSE	`cpe:/o:suse:opensuse:-`	—
RESF Rocky Linux 10 RESF / Rocky Linux	`cpe:/o:resf:rocky_linux:10`	10
Open Source FreeRDP <3.24.0 Open Source / FreeRDP		<3.24.0
Amazon Linux 2 Amazon	`cpe:/o:amazon:linux_2:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
Red Hat Enterprise Linux 10 Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:10`	10
RESF Rocky Linux RESF / Rocky Linux	`cpe:/o:resf:rocky_linux:-`	—
Fedora Linux Fedora	`cpe:/o:fedoraproject:fedora:-`	—
RESF Rocky Linux 9 RESF / Rocky Linux	`cpe:/o:resf:rocky_linux:9`	9

CVE-2026-31806

Affected products

Known affected 11 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:-`	—
SUSE openSUSE SUSE	`cpe:/o:suse:opensuse:-`	—
RESF Rocky Linux 10 RESF / Rocky Linux	`cpe:/o:resf:rocky_linux:10`	10
Open Source FreeRDP <3.24.0 Open Source / FreeRDP		<3.24.0
Amazon Linux 2 Amazon	`cpe:/o:amazon:linux_2:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
Red Hat Enterprise Linux 10 Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:10`	10
RESF Rocky Linux RESF / Rocky Linux	`cpe:/o:resf:rocky_linux:-`	—
Fedora Linux Fedora	`cpe:/o:fedoraproject:fedora:-`	—
RESF Rocky Linux 9 RESF / Rocky Linux	`cpe:/o:resf:rocky_linux:9`	9

CVE-2026-31883

Affected products

Known affected 11 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:-`	—
SUSE openSUSE SUSE	`cpe:/o:suse:opensuse:-`	—
RESF Rocky Linux 10 RESF / Rocky Linux	`cpe:/o:resf:rocky_linux:10`	10
Open Source FreeRDP <3.24.0 Open Source / FreeRDP		<3.24.0
Amazon Linux 2 Amazon	`cpe:/o:amazon:linux_2:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
Red Hat Enterprise Linux 10 Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:10`	10
RESF Rocky Linux RESF / Rocky Linux	`cpe:/o:resf:rocky_linux:-`	—
Fedora Linux Fedora	`cpe:/o:fedoraproject:fedora:-`	—
RESF Rocky Linux 9 RESF / Rocky Linux	`cpe:/o:resf:rocky_linux:9`	9

CVE-2026-31884

Affected products

Known affected 11 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:-`	—
SUSE openSUSE SUSE	`cpe:/o:suse:opensuse:-`	—
RESF Rocky Linux 10 RESF / Rocky Linux	`cpe:/o:resf:rocky_linux:10`	10
Open Source FreeRDP <3.24.0 Open Source / FreeRDP		<3.24.0
Amazon Linux 2 Amazon	`cpe:/o:amazon:linux_2:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
Red Hat Enterprise Linux 10 Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:10`	10
RESF Rocky Linux RESF / Rocky Linux	`cpe:/o:resf:rocky_linux:-`	—
Fedora Linux Fedora	`cpe:/o:fedoraproject:fedora:-`	—
RESF Rocky Linux 9 RESF / Rocky Linux	`cpe:/o:resf:rocky_linux:9`	9

CVE-2026-31885

Affected products

Known affected 11 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:-`	—
SUSE openSUSE SUSE	`cpe:/o:suse:opensuse:-`	—
RESF Rocky Linux 10 RESF / Rocky Linux	`cpe:/o:resf:rocky_linux:10`	10
Open Source FreeRDP <3.24.0 Open Source / FreeRDP		<3.24.0
Amazon Linux 2 Amazon	`cpe:/o:amazon:linux_2:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
Red Hat Enterprise Linux 10 Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:10`	10
RESF Rocky Linux RESF / Rocky Linux	`cpe:/o:resf:rocky_linux:-`	—
Fedora Linux Fedora	`cpe:/o:fedoraproject:fedora:-`	—
RESF Rocky Linux 9 RESF / Rocky Linux	`cpe:/o:resf:rocky_linux:9`	9

CVE-2026-31897

Affected products

Known affected 11 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:-`	—
SUSE openSUSE SUSE	`cpe:/o:suse:opensuse:-`	—
RESF Rocky Linux 10 RESF / Rocky Linux	`cpe:/o:resf:rocky_linux:10`	10
Open Source FreeRDP <3.24.0 Open Source / FreeRDP		<3.24.0
Amazon Linux 2 Amazon	`cpe:/o:amazon:linux_2:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
Red Hat Enterprise Linux 10 Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:10`	10
RESF Rocky Linux RESF / Rocky Linux	`cpe:/o:resf:rocky_linux:-`	—
Fedora Linux Fedora	`cpe:/o:fedoraproject:fedora:-`	—
RESF Rocky Linux 9 RESF / Rocky Linux	`cpe:/o:resf:rocky_linux:9`	9

References

71 references

URL	Category
https://wid.cert-bund.de/.well-known/csaf/white/2…	self
https://wid.cert-bund.de/portal/wid/securityadvis…	self
https://www.freerdp.com/2026/03/13/3_24_0-release	external
https://github.com/FreeRDP/FreeRDP/security/advis…	external
https://github.com/FreeRDP/FreeRDP/security/advis…	external
https://github.com/FreeRDP/FreeRDP/security/advis…	external
https://github.com/FreeRDP/FreeRDP/security/advis…	external
https://github.com/FreeRDP/FreeRDP/security/advis…	external
https://github.com/FreeRDP/FreeRDP/security/advis…	external
https://github.com/FreeRDP/FreeRDP/security/advis…	external
https://github.com/FreeRDP/FreeRDP/security/advis…	external
https://bodhi.fedoraproject.org/updates/FEDORA-20…	external
https://bodhi.fedoraproject.org/updates/FEDORA-20…	external
https://bodhi.fedoraproject.org/updates/FEDORA-20…	external
https://bodhi.fedoraproject.org/updates/FEDORA-20…	external
https://bodhi.fedoraproject.org/updates/FEDORA-20…	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://access.redhat.com/errata/RHSA-2026:6340	external
http://linux.oracle.com/errata/ELSA-2026-6340.html	external
https://lists.opensuse.org/archives/list/security…	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://alas.aws.amazon.com/AL2/ALAS2-2026-3221.html	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://access.redhat.com/errata/RHSA-2026:6727	external
https://access.redhat.com/errata/RHSA-2026:6743	external
https://access.redhat.com/errata/RHSA-2026:6799	external
https://linux.oracle.com/errata/ELSA-2026-6918.html	external
https://access.redhat.com/errata/RHSA-2026:6958	external
https://errata.build.resf.org/RLSA-2026:6340	external
https://access.redhat.com/errata/RHSA-2026:6918	external
https://linux.oracle.com/errata/ELSA-2026-6799.html	external
https://errata.build.resf.org/RLSA-2026:6918	external
https://errata.build.resf.org/RLSA-2026:6799	external
https://alas.aws.amazon.com/AL2/ALAS2-2026-3239.html	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://access.redhat.com/errata/RHSA-2026:9640	external
https://access.redhat.com/errata/RHSA-2026:9641	external
https://access.redhat.com/errata/RHSA-2026:10076	external
https://access.redhat.com/errata/RHSA-2026:10734	external
https://access.redhat.com/errata/RHSA-2026:10735	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://access.redhat.com/errata/RHSA-2026:11323	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://access.redhat.com/errata/RHSA-2026:10951	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://lists.opensuse.org/archives/list/security…	external
https://linux.oracle.com/errata/ELSA-2026-16019.html	external
https://access.redhat.com/errata/RHSA-2026:16014	external
https://access.redhat.com/errata/RHSA-2026:16019	external
https://linux.oracle.com/errata/ELSA-2026-16014.html	external
https://access.redhat.com/errata/RHSA-2026:16483	external
https://access.redhat.com/errata/RHSA-2026:16482	external
https://access.redhat.com/errata/RHSA-2026:16866	external
https://errata.build.resf.org/RLSA-2026:16019	external
https://access.redhat.com/errata/RHSA-2026:16865	external
https://access.redhat.com/errata/RHSA-2026:16777	external
https://access.redhat.com/errata/RHSA-2026:16814	external
https://linux.oracle.com/errata/ELSA-2026-16482.html	external
https://errata.build.resf.org/RLSA-2026:16482	external
https://errata.build.resf.org/RLSA-2026:16014	external
https://access.redhat.com/errata/RHSA-2026:19358	external
https://access.redhat.com/errata/RHSA-2026:19142	external
https://access.redhat.com/errata/RHSA-2026:19033	external
https://access.redhat.com/errata/RHSA-2026:19811	external
https://access.redhat.com/errata/RHSA-2026:20605	external
https://access.redhat.com/errata/RHSA-2026:20546	external
https://linux.oracle.com/errata/ELSA-2026-11323.html	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "hoch"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "FreeRDP ist eine freie Implementierung des Remote Desktop Protocol (RDP).",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in FreeRDP ausnutzen, um potenziell beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Speicherbesch\u00e4digungen zu verursachen, Daten zu manipulieren oder vertrauliche Informationen offenzulegen.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Linux\n- Sonstiges\n- UNIX\n- Windows",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2026-0725 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0725.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2026-0725 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0725"
      },
      {
        "category": "external",
        "summary": "FreeRDP 3.24.0 release notes vom 2026-03-12",
        "url": "https://www.freerdp.com/2026/03/13/3_24_0-release"
      },
      {
        "category": "external",
        "summary": "GitHub Security Advisory GHSA-5q35-hv9x-7794 vom 2026-03-12",
        "url": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-5q35-hv9x-7794"
      },
      {
        "category": "external",
        "summary": "GitHub Security Advisory GHSA-85x9-4xxp-xhm5 vom 2026-03-12",
        "url": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-85x9-4xxp-xhm5"
      },
      {
        "category": "external",
        "summary": "GitHub Security Advisory GHSA-c747-x4wf-cqrr vom 2026-03-12",
        "url": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-c747-x4wf-cqrr"
      },
      {
        "category": "external",
        "summary": "GitHub Security Advisory GHSA-h23r-3988-3wf3 vom 2026-03-12",
        "url": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-h23r-3988-3wf3"
      },
      {
        "category": "external",
        "summary": "GitHub Security Advisory GHSA-h666-rfw3-jhvj vom 2026-03-12",
        "url": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-h666-rfw3-jhvj"
      },
      {
        "category": "external",
        "summary": "GitHub Security Advisory GHSA-jp7m-94ww-p56r vom 2026-03-12",
        "url": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-jp7m-94ww-p56r"
      },
      {
        "category": "external",
        "summary": "GitHub Security Advisory GHSA-rrqm-46rj-cmx2 vom 2026-03-12",
        "url": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-rrqm-46rj-cmx2"
      },
      {
        "category": "external",
        "summary": "GitHub Security Advisory GHSA-xgv6-r22m-7c9x vom 2026-03-12",
        "url": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-xgv6-r22m-7c9x"
      },
      {
        "category": "external",
        "summary": "Fedora Security Advisory FEDORA-2026-BF4C5BB9C5 vom 2026-03-16",
        "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-bf4c5bb9c5"
      },
      {
        "category": "external",
        "summary": "Fedora Security Advisory FEDORA-2026-2C1AB5B23B vom 2026-03-16",
        "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-2c1ab5b23b"
      },
      {
        "category": "external",
        "summary": "Fedora Security Advisory FEDORA-2026-34886ABFAD vom 2026-03-16",
        "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-34886abfad"
      },
      {
        "category": "external",
        "summary": "Fedora Security Advisory FEDORA-2026-AAE50DC427 vom 2026-03-16",
        "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-aae50dc427"
      },
      {
        "category": "external",
        "summary": "Fedora Security Advisory FEDORA-2026-07418A381F vom 2026-03-26",
        "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-07418a381f"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2026:1129-1 vom 2026-03-28",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-March/025021.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2026:1160-1 vom 2026-03-31",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-March/025071.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:6340 vom 2026-04-01",
        "url": "https://access.redhat.com/errata/RHSA-2026:6340"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2026-6340 vom 2026-04-01",
        "url": "http://linux.oracle.com/errata/ELSA-2026-6340.html"
      },
      {
        "category": "external",
        "summary": "openSUSE Security Update OPENSUSE-SU-2026:10459-1 vom 2026-04-01",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/34ABPSLQFVRGFKDSR5ZEDKG5UH6KIBCA/"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2026:1164-1 vom 2026-04-01",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-April/025118.html"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALAS2-2026-3221 vom 2026-04-01",
        "url": "https://alas.aws.amazon.com/AL2/ALAS2-2026-3221.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2026:1165-1 vom 2026-04-01",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-April/025117.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:6727 vom 2026-04-07",
        "url": "https://access.redhat.com/errata/RHSA-2026:6727"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:6743 vom 2026-04-07",
        "url": "https://access.redhat.com/errata/RHSA-2026:6743"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:6799 vom 2026-04-07",
        "url": "https://access.redhat.com/errata/RHSA-2026:6799"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2026-6918 vom 2026-04-08",
        "url": "https://linux.oracle.com/errata/ELSA-2026-6918.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:6958 vom 2026-04-08",
        "url": "https://access.redhat.com/errata/RHSA-2026:6958"
      },
      {
        "category": "external",
        "summary": "Rocky Linux Security Advisory RLSA-2026:6340 vom 2026-04-07",
        "url": "https://errata.build.resf.org/RLSA-2026:6340"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:6918 vom 2026-04-08",
        "url": "https://access.redhat.com/errata/RHSA-2026:6918"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2026-6799 vom 2026-04-08",
        "url": "https://linux.oracle.com/errata/ELSA-2026-6799.html"
      },
      {
        "category": "external",
        "summary": "Rocky Linux Security Advisory RLSA-2026:6918 vom 2026-04-09",
        "url": "https://errata.build.resf.org/RLSA-2026:6918"
      },
      {
        "category": "external",
        "summary": "Rocky Linux Security Advisory RLSA-2026:6799 vom 2026-04-09",
        "url": "https://errata.build.resf.org/RLSA-2026:6799"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALAS2-2026-3239 vom 2026-04-14",
        "url": "https://alas.aws.amazon.com/AL2/ALAS2-2026-3239.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2026:1398-1 vom 2026-04-16",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-April/025388.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:9640 vom 2026-04-22",
        "url": "https://access.redhat.com/errata/RHSA-2026:9640"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:9641 vom 2026-04-22",
        "url": "https://access.redhat.com/errata/RHSA-2026:9641"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:10076 vom 2026-04-23",
        "url": "https://access.redhat.com/errata/RHSA-2026:10076"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:10734 vom 2026-04-27",
        "url": "https://access.redhat.com/errata/RHSA-2026:10734"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:10735 vom 2026-04-27",
        "url": "https://access.redhat.com/errata/RHSA-2026:10735"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2026:1635-1 vom 2026-04-27",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-April/025714.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2026:1634-1 vom 2026-04-27",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-April/025715.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:11323 vom 2026-04-28",
        "url": "https://access.redhat.com/errata/RHSA-2026:11323"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2026:1632-1 vom 2026-04-27",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-April/025717.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2026:1633-1 vom 2026-04-27",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-April/025716.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:10951 vom 2026-04-27",
        "url": "https://access.redhat.com/errata/RHSA-2026:10951"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2026:1640-1 vom 2026-04-28",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-April/025752.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2026:21436-1 vom 2026-05-04",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-May/025817.html"
      },
      {
        "category": "external",
        "summary": "openSUSE Security Update OPENSUSE-SU-2026:20657-1 vom 2026-05-04",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GOVYWHBP2GJ4JKEUYYSBX76EN3L3ZYNM/"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2026-16019 vom 2026-05-12",
        "url": "https://linux.oracle.com/errata/ELSA-2026-16019.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:16014 vom 2026-05-11",
        "url": "https://access.redhat.com/errata/RHSA-2026:16014"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:16019 vom 2026-05-11",
        "url": "https://access.redhat.com/errata/RHSA-2026:16019"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2026-16014 vom 2026-05-11",
        "url": "https://linux.oracle.com/errata/ELSA-2026-16014.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:16483 vom 2026-05-13",
        "url": "https://access.redhat.com/errata/RHSA-2026:16483"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:16482 vom 2026-05-13",
        "url": "https://access.redhat.com/errata/RHSA-2026:16482"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:16866 vom 2026-05-13",
        "url": "https://access.redhat.com/errata/RHSA-2026:16866"
      },
      {
        "category": "external",
        "summary": "Rocky Linux Security Advisory RLSA-2026:16019 vom 2026-05-13",
        "url": "https://errata.build.resf.org/RLSA-2026:16019"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:16865 vom 2026-05-13",
        "url": "https://access.redhat.com/errata/RHSA-2026:16865"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:16777 vom 2026-05-13",
        "url": "https://access.redhat.com/errata/RHSA-2026:16777"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:16814 vom 2026-05-13",
        "url": "https://access.redhat.com/errata/RHSA-2026:16814"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2026-16482 vom 2026-05-13",
        "url": "https://linux.oracle.com/errata/ELSA-2026-16482.html"
      },
      {
        "category": "external",
        "summary": "Rocky Linux Security Advisory RLSA-2026:16482 vom 2026-05-14",
        "url": "https://errata.build.resf.org/RLSA-2026:16482"
      },
      {
        "category": "external",
        "summary": "Rocky Linux Security Advisory RLSA-2026:16014 vom 2026-05-13",
        "url": "https://errata.build.resf.org/RLSA-2026:16014"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:19358 vom 2026-05-19",
        "url": "https://access.redhat.com/errata/RHSA-2026:19358"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:19142 vom 2026-05-20",
        "url": "https://access.redhat.com/errata/RHSA-2026:19142"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:19033 vom 2026-05-19",
        "url": "https://access.redhat.com/errata/RHSA-2026:19033"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:19811 vom 2026-05-20",
        "url": "https://access.redhat.com/errata/RHSA-2026:19811"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:20605 vom 2026-05-26",
        "url": "https://access.redhat.com/errata/RHSA-2026:20605"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:20546 vom 2026-05-26",
        "url": "https://access.redhat.com/errata/RHSA-2026:20546"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2026-11323 vom 2026-06-10",
        "url": "https://linux.oracle.com/errata/ELSA-2026-11323.html"
      }
    ],
    "source_lang": "en-US",
    "title": "FreeRDP: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2026-06-09T22:00:00.000+00:00",
      "generator": {
        "date": "2026-06-10T09:51:08.323+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.6.0"
        }
      },
      "id": "WID-SEC-W-2026-0725",
      "initial_release_date": "2026-03-12T23:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2026-03-12T23:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2026-03-15T23:00:00.000+00:00",
          "number": "2",
          "summary": "Neue Updates von Fedora und European Union Vulnerability Database aufgenommen"
        },
        {
          "date": "2026-03-25T23:00:00.000+00:00",
          "number": "3",
          "summary": "Neue Updates von Fedora aufgenommen"
        },
        {
          "date": "2026-03-29T22:00:00.000+00:00",
          "number": "4",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2026-03-31T22:00:00.000+00:00",
          "number": "5",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2026-04-01T22:00:00.000+00:00",
          "number": "6",
          "summary": "Neue Updates von Oracle Linux, openSUSE, SUSE und Amazon aufgenommen"
        },
        {
          "date": "2026-04-06T22:00:00.000+00:00",
          "number": "7",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2026-04-07T22:00:00.000+00:00",
          "number": "8",
          "summary": "Neue Updates von Red Hat, Oracle Linux und Rocky Enterprise Software Foundation aufgenommen"
        },
        {
          "date": "2026-04-08T22:00:00.000+00:00",
          "number": "9",
          "summary": "Neue Updates von Rocky Enterprise Software Foundation aufgenommen"
        },
        {
          "date": "2026-04-09T22:00:00.000+00:00",
          "number": "10",
          "summary": "Neue Updates von Rocky Enterprise Software Foundation aufgenommen"
        },
        {
          "date": "2026-04-13T22:00:00.000+00:00",
          "number": "11",
          "summary": "Neue Updates von Amazon aufgenommen"
        },
        {
          "date": "2026-04-16T22:00:00.000+00:00",
          "number": "12",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2026-04-21T22:00:00.000+00:00",
          "number": "13",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2026-04-22T22:00:00.000+00:00",
          "number": "14",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2026-04-26T22:00:00.000+00:00",
          "number": "15",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2026-04-27T22:00:00.000+00:00",
          "number": "16",
          "summary": "Neue Updates von SUSE und Red Hat aufgenommen"
        },
        {
          "date": "2026-04-28T22:00:00.000+00:00",
          "number": "17",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2026-05-03T22:00:00.000+00:00",
          "number": "18",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2026-05-04T22:00:00.000+00:00",
          "number": "19",
          "summary": "Neue Updates von openSUSE aufgenommen"
        },
        {
          "date": "2026-05-11T22:00:00.000+00:00",
          "number": "20",
          "summary": "Neue Updates von Oracle Linux und Red Hat aufgenommen"
        },
        {
          "date": "2026-05-12T22:00:00.000+00:00",
          "number": "21",
          "summary": "Neue Updates von Red Hat und Rocky Enterprise Software Foundation aufgenommen"
        },
        {
          "date": "2026-05-14T22:00:00.000+00:00",
          "number": "22",
          "summary": "Neue Updates von Rocky Enterprise Software Foundation aufgenommen"
        },
        {
          "date": "2026-05-19T22:00:00.000+00:00",
          "number": "23",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2026-05-20T22:00:00.000+00:00",
          "number": "24",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2026-05-25T22:00:00.000+00:00",
          "number": "25",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2026-06-09T22:00:00.000+00:00",
          "number": "26",
          "summary": "Neue Updates von Oracle Linux aufgenommen"
        }
      ],
      "status": "final",
      "version": "26"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Amazon Linux 2",
            "product": {
              "name": "Amazon Linux 2",
              "product_id": "398363",
              "product_identification_helper": {
                "cpe": "cpe:/o:amazon:linux_2:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Amazon"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Fedora Linux",
            "product": {
              "name": "Fedora Linux",
              "product_id": "74185",
              "product_identification_helper": {
                "cpe": "cpe:/o:fedoraproject:fedora:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Fedora"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c3.24.0",
                "product": {
                  "name": "Open Source FreeRDP \u003c3.24.0",
                  "product_id": "T051732"
                }
              },
              {
                "category": "product_version",
                "name": "3.24.0",
                "product": {
                  "name": "Open Source FreeRDP 3.24.0",
                  "product_id": "T051732-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:freerdp:freerdp:3.24.0"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "FreeRDP"
          }
        ],
        "category": "vendor",
        "name": "Open Source"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Oracle Linux",
            "product": {
              "name": "Oracle Linux",
              "product_id": "T004914",
              "product_identification_helper": {
                "cpe": "cpe:/o:oracle:linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Oracle"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "RESF Rocky Linux",
                "product": {
                  "name": "RESF Rocky Linux",
                  "product_id": "T032255",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:resf:rocky_linux:-"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "10",
                "product": {
                  "name": "RESF Rocky Linux 10",
                  "product_id": "T054060",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:resf:rocky_linux:10"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "9",
                "product": {
                  "name": "RESF Rocky Linux 9",
                  "product_id": "T054103",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:resf:rocky_linux:9"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Rocky Linux"
          }
        ],
        "category": "vendor",
        "name": "RESF"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux",
                "product": {
                  "name": "Red Hat Enterprise Linux",
                  "product_id": "67646",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:-"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "10",
                "product": {
                  "name": "Red Hat Enterprise Linux 10",
                  "product_id": "T054655",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:10"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Enterprise Linux"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "SUSE Linux",
            "product": {
              "name": "SUSE Linux",
              "product_id": "T002207",
              "product_identification_helper": {
                "cpe": "cpe:/o:suse:suse_linux:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "SUSE openSUSE",
            "product": {
              "name": "SUSE openSUSE",
              "product_id": "T027843",
              "product_identification_helper": {
                "cpe": "cpe:/o:suse:opensuse:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-29774",
      "product_status": {
        "known_affected": [
          "T002207",
          "67646",
          "T027843",
          "T054060",
          "T051732",
          "398363",
          "T004914",
          "T054655",
          "T032255",
          "74185",
          "T054103"
        ]
      },
      "release_date": "2026-03-12T23:00:00.000+00:00",
      "title": "CVE-2026-29774"
    },
    {
      "cve": "CVE-2026-29775",
      "product_status": {
        "known_affected": [
          "T002207",
          "67646",
          "T027843",
          "T054060",
          "T051732",
          "398363",
          "T004914",
          "T054655",
          "T032255",
          "74185",
          "T054103"
        ]
      },
      "release_date": "2026-03-12T23:00:00.000+00:00",
      "title": "CVE-2026-29775"
    },
    {
      "cve": "CVE-2026-29776",
      "product_status": {
        "known_affected": [
          "T002207",
          "67646",
          "T027843",
          "T054060",
          "T051732",
          "398363",
          "T004914",
          "T054655",
          "T032255",
          "74185",
          "T054103"
        ]
      },
      "release_date": "2026-03-12T23:00:00.000+00:00",
      "title": "CVE-2026-29776"
    },
    {
      "cve": "CVE-2026-31806",
      "product_status": {
        "known_affected": [
          "T002207",
          "67646",
          "T027843",
          "T054060",
          "T051732",
          "398363",
          "T004914",
          "T054655",
          "T032255",
          "74185",
          "T054103"
        ]
      },
      "release_date": "2026-03-12T23:00:00.000+00:00",
      "title": "CVE-2026-31806"
    },
    {
      "cve": "CVE-2026-31883",
      "product_status": {
        "known_affected": [
          "T002207",
          "67646",
          "T027843",
          "T054060",
          "T051732",
          "398363",
          "T004914",
          "T054655",
          "T032255",
          "74185",
          "T054103"
        ]
      },
      "release_date": "2026-03-12T23:00:00.000+00:00",
      "title": "CVE-2026-31883"
    },
    {
      "cve": "CVE-2026-31884",
      "product_status": {
        "known_affected": [
          "T002207",
          "67646",
          "T027843",
          "T054060",
          "T051732",
          "398363",
          "T004914",
          "T054655",
          "T032255",
          "74185",
          "T054103"
        ]
      },
      "release_date": "2026-03-12T23:00:00.000+00:00",
      "title": "CVE-2026-31884"
    },
    {
      "cve": "CVE-2026-31885",
      "product_status": {
        "known_affected": [
          "T002207",
          "67646",
          "T027843",
          "T054060",
          "T051732",
          "398363",
          "T004914",
          "T054655",
          "T032255",
          "74185",
          "T054103"
        ]
      },
      "release_date": "2026-03-12T23:00:00.000+00:00",
      "title": "CVE-2026-31885"
    },
    {
      "cve": "CVE-2026-31897",
      "product_status": {
        "known_affected": [
          "T002207",
          "67646",
          "T027843",
          "T054060",
          "T051732",
          "398363",
          "T004914",
          "T054655",
          "T032255",
          "74185",
          "T054103"
        ]
      },
      "release_date": "2026-03-12T23:00:00.000+00:00",
      "title": "CVE-2026-31897"
    }
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CVE-2026-31806 (GCVE-0-2026-31806)

WID-SEC-W-2026-0725

Tags

Sightings

Nomenclature