Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-109676 | high | 8.8 | No | FreeRDP from 3.0.0-beta1 before 3.32.0 contains a use-after-free vulnerability in smartcard handling that allows attackers to access a freed... | 2026-11-02 |
| CVE-2026-109255 | medium | 6.8 | No | FreeRDP 3.0.0 before 3.32.0 contains an integer truncation vulnerability in license_check_stream_length that allows a malicious RDP server t... | 2026-11-02 |
| CVE-2026-109254 | medium | 5.9 | No | FreeRDP 2.1.0 before 3.32.0 contains a use-after-free vulnerability in the static rdpsnd channel disconnect path, which frees audio formats... | 2026-11-02 |
| CVE-2026-109253 | medium | 5.3 | No | FreeRDP from 3.9.0 before 3.32.0 contains an out-of-bounds read vulnerability in the RDPEAR NDR scalar readers, which check value length bef... | 2026-11-02 |
| CVE-2026-109252 | medium | 5.3 | No | FreeRDP from 3.9.0 before 3.32.0 contains a NULL pointer dereference vulnerability in the RDPEAR NDR reader that allows malicious servers to... | 2026-11-02 |
| CVE-2026-109251 | medium | 5.3 | No | FreeRDP before 3.32.0 stores the server-supplied signed MS-RDPEGT geometry origin unchecked in an unsigned video surface coordinate, so the... | 2026-11-02 |
| CVE-2026-109250 | medium | 6.6 | No | FreeRDP 3.0.0 before 3.32.0 contains a heap buffer overflow vulnerability in collect_keys() that allows local attackers to write past the fi... | 2026-11-02 |
| CVE-2026-109249 | medium | 5.5 | No | FreeRDP 3.0.0 before 3.32.0 contains a heap out-of-bounds read in freerdp_assistance_parse_all_elements_of() because it advances its parsing... | 2026-11-02 |
| CVE-2026-109248 | medium | 6.5 | No | FreeRDP 3.0.0 before 3.32.0 contains a heap out-of-bounds read in the WinPR clipboard function convert_filedescriptors_to_file_list(), which... | 2026-11-02 |
| CVE-2026-109247 | low | 3.1 | No | FreeRDP before 3.32.0 contains a path traversal vulnerability in convert_filedescriptors_to_file_list() in winpr/libwinpr/clipboard/syntheti... | 2026-11-02 |
| CVE-2026-109246 | medium | 6.5 | No | FreeRDP before 3.32.0 contains a divide-by-zero vulnerability in the freerdp-shadow-cli shadow server: the frame id in a client's Frame Ackn... | 2026-11-02 |
| CVE-2026-109245 | medium | 6.8 | No | FreeRDP 3.0.0 before 3.32.0 contains an improper certificate validation vulnerability in freerdp_http_request() in libfreerdp/utils/http.c t... | 2026-11-02 |
| CVE-2026-109244 | medium | 6.6 | No | FreeRDP from 2.0.0 before 3.32.0 contains an insecure permission vulnerability in winpr-makecert that creates unencrypted private keys witho... | 2026-11-02 |
| CVE-2026-109243 | medium | 4.4 | No | FreeRDP from 3.0.0 before 3.32.0 contains an incorrect permission assignment vulnerability that allows local users to read private keys writ... | 2026-11-02 |
| CVE-2026-91906 | medium | 5.5 | No | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low... | 2026-11-02 |
| CVE-2026-91911 | medium | 6.1 | No | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversa... | 2026-11-02 |
| CVE-2026-112510 | high | 7.5 | No | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.... | 2026-11-02 |
| CVE-2026-112551 | medium | 5.5 | No | An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2, macOS Tahoe 26.7.2. An a... | 2026-11-02 |
| CVE-2026-112642 | medium | 6.5 | No | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS... | 2026-11-02 |
| CVE-2026-93847 | low | 3.5 | No | Mattermost versions 11.7.x <= 11.7.10 fail to validate reserved system post types on the scheduled post creation and publication paths which... | 2026-11-02 |