RHSA-2026:36203

Vulnerability from csaf_opensuse - Published: 2026-07-07 00:00 - Updated: 2026-09-16 18:35
Summary
security update for freerdp
Severity
Important
Notes
Title of the patch: security update for freerdp
Description of the patch: This security update provides a functional equivalent of RHSA-2026:36203. The original Red Hat(R) advisory is available from the Red Hat web site at https://access.redhat.com/errata/RHSA-2026:36203.
Patchnames: RHSA-2026:36203
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
CVE-2026-40033
8.1 (High)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Product Identifier Version Remediation
Unresolved product id: SUSE Liberty Linux 10:freerdp-2:3.10.3-12.el10_2.6.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 10:freerdp-devel-2:3.10.3-12.el10_2.6.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 10:freerdp-libs-2:3.10.3-12.el10_2.6.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 10:freerdp-server-2:3.10.3-12.el10_2.6.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 10:libwinpr-2:3.10.3-12.el10_2.6.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 10:libwinpr-devel-2:3.10.3-12.el10_2.6.x86_64 —
Vendor Fix
Threats
Impact important
CVE-2026-44420
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
Recommended 6 products, the same list as for CVE-2026-40033
Threats
Impact important
CVE-2026-44421
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Recommended 6 products, the same list as for CVE-2026-40033
Threats
Impact important
CVE-2026-44422
7.5 (High)
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Recommended 6 products, the same list as for CVE-2026-40033
Threats
Impact important
CVE-2026-45700
8 (High)
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Affected products
Recommended 6 products, the same list as for CVE-2026-40033
Threats
Impact important
References
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "security update for freerdp",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This security update provides a functional equivalent of RHSA-2026:36203.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2026:36203.\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "RHSA-2026:36203",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2026_36203.json"
      },
      {
        "category": "self",
        "summary": "URL for RHSA-2026:36203",
        "url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2026-July/006881.html"
      },
      {
        "category": "self",
        "summary": "E-Mail link for RHSA-2026:36203",
        "url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2026-July/006881.html"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-40033 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-40033/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-44420 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-44420/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-44421 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-44421/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-44422 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-44422/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-45700 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-45700/"
      }
    ],
    "title": "security update for freerdp",
    "tracking": {
      "current_release_date": "2026-09-16T18:35:19Z",
      "generator": {
        "date": "2026-07-07T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "RHSA-2026:36203",
      "initial_release_date": "2026-07-07T00:00:00Z",
      "revision_history": [
        {
          "date": "2026-07-07T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-16T17:54:56Z",
          "number": "2",
          "summary": "unknown changes"
        },
        {
          "date": "2026-09-16T18:35:19Z",
          "number": "3",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "freerdp-2:3.10.3-12.el10_2.6.x86_64",
                "product": {
                  "name": "freerdp-2:3.10.3-12.el10_2.6.x86_64",
                  "product_id": "freerdp-2:3.10.3-12.el10_2.6.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:freerdp:freerdp:2:3.10.3:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/freerdp@3.10.3-12.el10_2.6?arch=x86_64\u0026epoch=2\u0026upstream=freerdp-2:3.10.3-12.el10_2.6.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "freerdp-devel-2:3.10.3-12.el10_2.6.x86_64",
                "product": {
                  "name": "freerdp-devel-2:3.10.3-12.el10_2.6.x86_64",
                  "product_id": "freerdp-devel-2:3.10.3-12.el10_2.6.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:freerdp:freerdp:2:3.10.3:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/freerdp-devel@3.10.3-12.el10_2.6?arch=x86_64\u0026epoch=2\u0026upstream=freerdp-2:3.10.3-12.el10_2.6.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "freerdp-libs-2:3.10.3-12.el10_2.6.x86_64",
                "product": {
                  "name": "freerdp-libs-2:3.10.3-12.el10_2.6.x86_64",
                  "product_id": "freerdp-libs-2:3.10.3-12.el10_2.6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/freerdp-libs@3.10.3-12.el10_2.6?arch=x86_64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "freerdp-server-2:3.10.3-12.el10_2.6.x86_64",
                "product": {
                  "name": "freerdp-server-2:3.10.3-12.el10_2.6.x86_64",
                  "product_id": "freerdp-server-2:3.10.3-12.el10_2.6.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:freerdp:freerdp:2:3.10.3:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/freerdp-server@3.10.3-12.el10_2.6?arch=x86_64\u0026epoch=2\u0026upstream=freerdp-2:3.10.3-12.el10_2.6.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libwinpr-2:3.10.3-12.el10_2.6.x86_64",
                "product": {
                  "name": "libwinpr-2:3.10.3-12.el10_2.6.x86_64",
                  "product_id": "libwinpr-2:3.10.3-12.el10_2.6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/libwinpr@3.10.3-12.el10_2.6?arch=x86_64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libwinpr-devel-2:3.10.3-12.el10_2.6.x86_64",
                "product": {
                  "name": "libwinpr-devel-2:3.10.3-12.el10_2.6.x86_64",
                  "product_id": "libwinpr-devel-2:3.10.3-12.el10_2.6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/libwinpr-devel@3.10.3-12.el10_2.6?arch=x86_64\u0026epoch=2"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Liberty Linux 10",
                "product": {
                  "name": "SUSE Liberty Linux 10",
                  "product_id": "SUSE Liberty Linux 10",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sll:10"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp-2:3.10.3-12.el10_2.6.x86_64 as component of SUSE Liberty Linux 10",
          "product_id": "SUSE Liberty Linux 10:freerdp-2:3.10.3-12.el10_2.6.x86_64"
        },
        "product_reference": "freerdp-2:3.10.3-12.el10_2.6.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp-devel-2:3.10.3-12.el10_2.6.x86_64 as component of SUSE Liberty Linux 10",
          "product_id": "SUSE Liberty Linux 10:freerdp-devel-2:3.10.3-12.el10_2.6.x86_64"
        },
        "product_reference": "freerdp-devel-2:3.10.3-12.el10_2.6.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp-libs-2:3.10.3-12.el10_2.6.x86_64 as component of SUSE Liberty Linux 10",
          "product_id": "SUSE Liberty Linux 10:freerdp-libs-2:3.10.3-12.el10_2.6.x86_64"
        },
        "product_reference": "freerdp-libs-2:3.10.3-12.el10_2.6.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp-server-2:3.10.3-12.el10_2.6.x86_64 as component of SUSE Liberty Linux 10",
          "product_id": "SUSE Liberty Linux 10:freerdp-server-2:3.10.3-12.el10_2.6.x86_64"
        },
        "product_reference": "freerdp-server-2:3.10.3-12.el10_2.6.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libwinpr-2:3.10.3-12.el10_2.6.x86_64 as component of SUSE Liberty Linux 10",
          "product_id": "SUSE Liberty Linux 10:libwinpr-2:3.10.3-12.el10_2.6.x86_64"
        },
        "product_reference": "libwinpr-2:3.10.3-12.el10_2.6.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libwinpr-devel-2:3.10.3-12.el10_2.6.x86_64 as component of SUSE Liberty Linux 10",
          "product_id": "SUSE Liberty Linux 10:libwinpr-devel-2:3.10.3-12.el10_2.6.x86_64"
        },
        "product_reference": "libwinpr-devel-2:3.10.3-12.el10_2.6.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 10"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-40033",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-40033"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "FreeRDP before 3.26.0 contains a heap-buffer-overflow vulnerability in gdi_CacheToSurface that allows remote attackers to write out-of-bounds heap memory. The vulnerability occurs because rectangle validation clamps coordinates to UINT16_MAX but performs copy operations using unclamped cache entry dimensions, enabling malicious RDP servers to trigger large out-of-bounds writes and potentially achieve remote code execution or client crash.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 10:freerdp-2:3.10.3-12.el10_2.6.x86_64",
          "SUSE Liberty Linux 10:freerdp-devel-2:3.10.3-12.el10_2.6.x86_64",
          "SUSE Liberty Linux 10:freerdp-libs-2:3.10.3-12.el10_2.6.x86_64",
          "SUSE Liberty Linux 10:freerdp-server-2:3.10.3-12.el10_2.6.x86_64",
          "SUSE Liberty Linux 10:libwinpr-2:3.10.3-12.el10_2.6.x86_64",
          "SUSE Liberty Linux 10:libwinpr-devel-2:3.10.3-12.el10_2.6.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-40033",
          "url": "https://www.suse.com/security/cve/CVE-2026-40033"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1266317 for CVE-2026-40033",
          "url": "https://bugzilla.suse.com/1266317"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 10:freerdp-2:3.10.3-12.el10_2.6.x86_64",
            "SUSE Liberty Linux 10:freerdp-devel-2:3.10.3-12.el10_2.6.x86_64",
            "SUSE Liberty Linux 10:freerdp-libs-2:3.10.3-12.el10_2.6.x86_64",
            "SUSE Liberty Linux 10:freerdp-server-2:3.10.3-12.el10_2.6.x86_64",
            "SUSE Liberty Linux 10:libwinpr-2:3.10.3-12.el10_2.6.x86_64",
            "SUSE Liberty Linux 10:libwinpr-devel-2:3.10.3-12.el10_2.6.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 10:freerdp-2:3.10.3-12.el10_2.6.x86_64",
            "SUSE Liberty Linux 10:freerdp-devel-2:3.10.3-12.el10_2.6.x86_64",
            "SUSE Liberty Linux 10:freerdp-libs-2:3.10.3-12.el10_2.6.x86_64",
            "SUSE Liberty Linux 10:freerdp-server-2:3.10.3-12.el10_2.6.x86_64",
            "SUSE Liberty Linux 10:libwinpr-2:3.10.3-12.el10_2.6.x86_64",
            "SUSE Liberty Linux 10:libwinpr-devel-2:3.10.3-12.el10_2.6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-07T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-40033"
    },
    {
      "cve": "CVE-2026-44420",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-44420"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, a malicious RDP client can trigger a heap-buffer-overflow write in FreeRDP\u0027s server-side clipboard (cliprdr) channel by sending a CB_CLIP_CAPS PDU with a too-small capabilitySetLength. This can crash the server process (remote DoS) and may be exploitable for code execution because it corrupts heap memory. This vulnerability is fixed in 3.26.0.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 10:freerdp-2:3.10.3-12.el10_2.6.x86_64",
          "SUSE Liberty Linux 10:freerdp-devel-2:3.10.3-12.el10_2.6.x86_64",
          "SUSE Liberty Linux 10:freerdp-libs-2:3.10.3-12.el10_2.6.x86_64",
          "SUSE Liberty Linux 10:freerdp-server-2:3.10.3-12.el10_2.6.x86_64",
          "SUSE Liberty Linux 10:libwinpr-2:3.10.3-12.el10_2.6.x86_64",
          "SUSE Liberty Linux 10:libwinpr-devel-2:3.10.3-12.el10_2.6.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-44420",
          "url": "https://www.suse.com/security/cve/CVE-2026-44420"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1267008 for CVE-2026-44420",
          "url": "https://bugzilla.suse.com/1267008"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 10:freerdp-2:3.10.3-12.el10_2.6.x86_64",
            "SUSE Liberty Linux 10:freerdp-devel-2:3.10.3-12.el10_2.6.x86_64",
            "SUSE Liberty Linux 10:freerdp-libs-2:3.10.3-12.el10_2.6.x86_64",
            "SUSE Liberty Linux 10:freerdp-server-2:3.10.3-12.el10_2.6.x86_64",
            "SUSE Liberty Linux 10:libwinpr-2:3.10.3-12.el10_2.6.x86_64",
            "SUSE Liberty Linux 10:libwinpr-devel-2:3.10.3-12.el10_2.6.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 10:freerdp-2:3.10.3-12.el10_2.6.x86_64",
            "SUSE Liberty Linux 10:freerdp-devel-2:3.10.3-12.el10_2.6.x86_64",
            "SUSE Liberty Linux 10:freerdp-libs-2:3.10.3-12.el10_2.6.x86_64",
            "SUSE Liberty Linux 10:freerdp-server-2:3.10.3-12.el10_2.6.x86_64",
            "SUSE Liberty Linux 10:libwinpr-2:3.10.3-12.el10_2.6.x86_64",
            "SUSE Liberty Linux 10:libwinpr-devel-2:3.10.3-12.el10_2.6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-07T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-44420"
    },
    {
      "cve": "CVE-2026-44421",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-44421"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, a malicious RDP server can trigger a heap-buffer-overflow write in the FreeRDP client by sending crafted RDPGFX PDUs. The bug is in gdi_CacheToSurface: it validates a destination rectangle that is clamped to UINT16_MAX, but then performs the copy using the original cacheEntry-\u003ewidth/height. This can cause a large out-of-bounds heap write and may lead to client crashes or code execution. This bug is reachable from a malicious RDP server, but only when the client has RDPGFX enabled. This vulnerability is fixed in 3.26.0.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 10:freerdp-2:3.10.3-12.el10_2.6.x86_64",
          "SUSE Liberty Linux 10:freerdp-devel-2:3.10.3-12.el10_2.6.x86_64",
          "SUSE Liberty Linux 10:freerdp-libs-2:3.10.3-12.el10_2.6.x86_64",
          "SUSE Liberty Linux 10:freerdp-server-2:3.10.3-12.el10_2.6.x86_64",
          "SUSE Liberty Linux 10:libwinpr-2:3.10.3-12.el10_2.6.x86_64",
          "SUSE Liberty Linux 10:libwinpr-devel-2:3.10.3-12.el10_2.6.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-44421",
          "url": "https://www.suse.com/security/cve/CVE-2026-44421"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1267009 for CVE-2026-44421",
          "url": "https://bugzilla.suse.com/1267009"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 10:freerdp-2:3.10.3-12.el10_2.6.x86_64",
            "SUSE Liberty Linux 10:freerdp-devel-2:3.10.3-12.el10_2.6.x86_64",
            "SUSE Liberty Linux 10:freerdp-libs-2:3.10.3-12.el10_2.6.x86_64",
            "SUSE Liberty Linux 10:freerdp-server-2:3.10.3-12.el10_2.6.x86_64",
            "SUSE Liberty Linux 10:libwinpr-2:3.10.3-12.el10_2.6.x86_64",
            "SUSE Liberty Linux 10:libwinpr-devel-2:3.10.3-12.el10_2.6.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 10:freerdp-2:3.10.3-12.el10_2.6.x86_64",
            "SUSE Liberty Linux 10:freerdp-devel-2:3.10.3-12.el10_2.6.x86_64",
            "SUSE Liberty Linux 10:freerdp-libs-2:3.10.3-12.el10_2.6.x86_64",
            "SUSE Liberty Linux 10:freerdp-server-2:3.10.3-12.el10_2.6.x86_64",
            "SUSE Liberty Linux 10:libwinpr-2:3.10.3-12.el10_2.6.x86_64",
            "SUSE Liberty Linux 10:libwinpr-devel-2:3.10.3-12.el10_2.6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-07T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-44421"
    },
    {
      "cve": "CVE-2026-44422",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-44422"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, FreeRDP\u0027s RDPEAR NDR parser accepts one non-null NDR pointer ref-id for multiple logical pointer fields without tracking the pointed object\u0027s expected NDR type or ownership. When the same ref-id is reused across two pointer fields, the parser assigns the same heap object to both output fields. The generic destructor later walks each field independently and destroys/frees both pointers. This causes a malicious-server-triggerable heap use-after-free / double-free in the FreeRDP client\u0027s RDPEAR authentication-redirection path. This vulnerability is fixed in 3.26.0.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 10:freerdp-2:3.10.3-12.el10_2.6.x86_64",
          "SUSE Liberty Linux 10:freerdp-devel-2:3.10.3-12.el10_2.6.x86_64",
          "SUSE Liberty Linux 10:freerdp-libs-2:3.10.3-12.el10_2.6.x86_64",
          "SUSE Liberty Linux 10:freerdp-server-2:3.10.3-12.el10_2.6.x86_64",
          "SUSE Liberty Linux 10:libwinpr-2:3.10.3-12.el10_2.6.x86_64",
          "SUSE Liberty Linux 10:libwinpr-devel-2:3.10.3-12.el10_2.6.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-44422",
          "url": "https://www.suse.com/security/cve/CVE-2026-44422"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1267010 for CVE-2026-44422",
          "url": "https://bugzilla.suse.com/1267010"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 10:freerdp-2:3.10.3-12.el10_2.6.x86_64",
            "SUSE Liberty Linux 10:freerdp-devel-2:3.10.3-12.el10_2.6.x86_64",
            "SUSE Liberty Linux 10:freerdp-libs-2:3.10.3-12.el10_2.6.x86_64",
            "SUSE Liberty Linux 10:freerdp-server-2:3.10.3-12.el10_2.6.x86_64",
            "SUSE Liberty Linux 10:libwinpr-2:3.10.3-12.el10_2.6.x86_64",
            "SUSE Liberty Linux 10:libwinpr-devel-2:3.10.3-12.el10_2.6.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 10:freerdp-2:3.10.3-12.el10_2.6.x86_64",
            "SUSE Liberty Linux 10:freerdp-devel-2:3.10.3-12.el10_2.6.x86_64",
            "SUSE Liberty Linux 10:freerdp-libs-2:3.10.3-12.el10_2.6.x86_64",
            "SUSE Liberty Linux 10:freerdp-server-2:3.10.3-12.el10_2.6.x86_64",
            "SUSE Liberty Linux 10:libwinpr-2:3.10.3-12.el10_2.6.x86_64",
            "SUSE Liberty Linux 10:libwinpr-devel-2:3.10.3-12.el10_2.6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-07T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-44422"
    },
    {
      "cve": "CVE-2026-45700",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-45700"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, FreeRDP\u0027s planar bitmap decoder has an out-of-bounds heap write when decoding RLE planar data. In libfreerdp/codec/planar.c, freerdp_bitmap_decompress_planar() validates the X destination coordinate nXDst against the caller-provided destination stride (nDstStep) even when it is writing into the internal temp buffer pTempData. An attacker can bypass the check with a large nDstStep and a large nXDst, causing planar_decompress_plane_rle() to write past the end of pTempData. This vulnerability is fixed in 3.26.0.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 10:freerdp-2:3.10.3-12.el10_2.6.x86_64",
          "SUSE Liberty Linux 10:freerdp-devel-2:3.10.3-12.el10_2.6.x86_64",
          "SUSE Liberty Linux 10:freerdp-libs-2:3.10.3-12.el10_2.6.x86_64",
          "SUSE Liberty Linux 10:freerdp-server-2:3.10.3-12.el10_2.6.x86_64",
          "SUSE Liberty Linux 10:libwinpr-2:3.10.3-12.el10_2.6.x86_64",
          "SUSE Liberty Linux 10:libwinpr-devel-2:3.10.3-12.el10_2.6.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-45700",
          "url": "https://www.suse.com/security/cve/CVE-2026-45700"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1267011 for CVE-2026-45700",
          "url": "https://bugzilla.suse.com/1267011"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 10:freerdp-2:3.10.3-12.el10_2.6.x86_64",
            "SUSE Liberty Linux 10:freerdp-devel-2:3.10.3-12.el10_2.6.x86_64",
            "SUSE Liberty Linux 10:freerdp-libs-2:3.10.3-12.el10_2.6.x86_64",
            "SUSE Liberty Linux 10:freerdp-server-2:3.10.3-12.el10_2.6.x86_64",
            "SUSE Liberty Linux 10:libwinpr-2:3.10.3-12.el10_2.6.x86_64",
            "SUSE Liberty Linux 10:libwinpr-devel-2:3.10.3-12.el10_2.6.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 10:freerdp-2:3.10.3-12.el10_2.6.x86_64",
            "SUSE Liberty Linux 10:freerdp-devel-2:3.10.3-12.el10_2.6.x86_64",
            "SUSE Liberty Linux 10:freerdp-libs-2:3.10.3-12.el10_2.6.x86_64",
            "SUSE Liberty Linux 10:freerdp-server-2:3.10.3-12.el10_2.6.x86_64",
            "SUSE Liberty Linux 10:libwinpr-2:3.10.3-12.el10_2.6.x86_64",
            "SUSE Liberty Linux 10:libwinpr-devel-2:3.10.3-12.el10_2.6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-07T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-45700"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.