FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, a malicious RDP client can trigger a heap-buffer-overflow write in FreeRDP's server-side clipboard (cliprdr) channel by sending a CB_CLIP_CAPS PDU with a too-small capabilitySetLength. This can crash the server process (remote DoS) and may be exploitable for code execution because it corrupts heap memory. This vulnerability is fixed in 3.26.0.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade libwinpr-develUpgrade freerdpUpgrade freerdp-develUpgrade freerdp-debuginfoUpgrade libwinprUpgrade freerdp-libs | Jun 23, 2026 | Jun 23, 2026 |
| Amazon_linux_2023 | — | Upgrade freerdp-debugsourceUpgrade freerdpUpgrade libwinpr-develUpgrade freerdp-develUpgrade freerdp-debuginfoUpgrade freerdp-server-debuginfoUpgrade freerdp-serverUpgrade freerdp-libs-debuginfoUpgrade freerdp-libsUpgrade libwinprUpgrade libwinpr-debuginfo | Jun 23, 2026 | May 29, 2026 |
| Redhat_linux | — | Upgrade freerdp-server-debuginfoUpgrade libwinpr-debuginfoUpgrade libwinprUpgrade freerdp-serverUpgrade libwinpr-develNo solution existsUpgrade freerdp-develUpgrade freerdp-libs-debuginfoUpgrade freerdp-debuginfoUpgrade freerdpUpgrade freerdp-debugsourceUpgrade freerdp-libs | Jul 9, 2026 | May 29, 2026 |
| Rocky_linux | — | Upgrade freerdp-debugsourceUpgrade libwinpr-debuginfoUpgrade libwinprUpgrade freerdp-debuginfoUpgrade freerdp-serverUpgrade freerdp-libs-debuginfoUpgrade freerdp-libsUpgrade freerdpUpgrade libwinpr-develUpgrade freerdp-server-debuginfoUpgrade freerdp-devel | Jul 10, 2026 | Jul 8, 2026 |
| Ubuntu | — | Upgrade freerdp3-x11Upgrade freerdp-x11Upgrade libfreerdp3-3 | Jul 21, 2026 | Jul 20, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub