The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-228:04 advisory.

    * freerdp: FreeRDP heap-buffer-overflow (CVE-2026-22855)
      * freerdp: FreeRDP global-buffer-overflow (CVE-2026-22858)
      * freerdp: FreeRDP heap-buffer-overflow (CVE-2026-22859)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-3067 advisory.

    [2:2.11.7-1.2]
    - Backport several CVE fixes       Resolves: RHEL-148847, RHEL-148887, RHEL-149020

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-3334 advisory.

    [2:2.11.7-3]
    - Backport several CVE fixes       Resolves: RHEL-148825, RHEL-148865, RHEL-148982

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0345-1 advisory.

    - CVE-2025-4478: Fixed initialization of function pointers after       resource allocations (bsc#1243109)
    - CVE-2026-22851: Fixed RDPGFX ResetGraphics race leading to       use-after-free in SDL client (sdl->primary) (bsc#1256717)
    - CVE-2026-22852: Fixed heap-buffer-overflow in audin_process_formats       (bsc#1256718)
    - CVE-2026-22853: Fixed heap-buffer-overflow in ndr_read_uint8Array       (bsc#1256719)
    - CVE-2026-22854: Fixed heap-buffer-overflow in drive_process_irp_read       (bsc#1256720)
    - CVE-2026-22855: Fixed heap-buffer-overflow in smartcard_unpack_set_attrib_call       (bsc#1256721)
    - CVE-2026-22856: Fixed heap-use-after-free in create_irp_thread (bsc#1256722)
    - CVE-2026-22857: Fixed heap-use-after-free in irp_thread_func (bsc#1256723)
    - CVE-2026-22858: Fixed global-buffer-overflow in crypto_base64_devoce       (bsc#1256724)
    - CVE-2026-22859: Fixed heap-buffer-overflow in urb_select_configuration       (bsc#1256725)
    - CVE-2026-23530: Fixed improper validation leading to heap buffer overflow       in `planar_decompress_plane_rle` (bsc#1256940)
    - CVE-2026-23531: Fixed improper validation in `clear_decompress` leading to       heap buffer overflow (bsc#1256941)
    - CVE-2026-23532: Fixed mismatch between destination rectangle clamping and       the actual copy size leading to heap buffer overflow in       `gdi_SurfaceToSurface` (bsc#1256942)
    - CVE-2026-23533: Fixed improper validation leading to heap buffer overflow in       `clear_decompress_residual_data` (bsc#1256943)
    - CVE-2026-23534: Fixed missing checks leading to heap buffer overflow in       `clear_deceompress_bands_data` (bsc#1256944)
    - CVE-2026-23732: Fixed improper validation leading to heap buffer overflow in       `Glyph_alloc` (bsc#1256945)
    - CVE-2026-23883: Fixed use-after-free when `update_pointer_color` and       `freerdp_image_copy_fromPointer_data` fail (bsc#1256946)
    - CVE-2026-23884: Fixed use-after-free in `gdi_set_bounds` (bsc#1256947)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:3067 advisory.

    FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license.
    The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.

    Security Fix(es):

    * freerdp: FreeRDP heap-buffer-overflow (CVE-2026-22855)

    * freerdp: FreeRDP global-buffer-overflow (CVE-2026-22858)

    * freerdp: FreeRDP heap-buffer-overflow (CVE-2026-22859)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2026:0040 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2026-22855:
    FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a heap out-of-bounds     read occurs in the smartcard SetAttrib path when cbAttrLen does not match the actual NDR buffer length.
    This vulnerability is fixed in 3.20.1.

    CVE-2026-22858:
    FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, global-buffer-overflow     was observed in FreeRDP's Base64 decoding path. The root cause appears to be implementation-defined char     signedness: on Arm/AArch64 builds, plain char is treated as unsigned, so the guard c <= 0 can be optimized     into a simple c != 0 check. As a result, non-ASCII bytes (e.g., 0x80-0xFF) may bypass the intended range     restriction and be used as an index into a global lookup table, causing out-of-bounds access. This     vulnerability is fixed in 3.20.1.

    CVE-2026-22859:
    FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, the URBDRC client does     not perform bounds checking on serversupplied MSUSB_INTERFACE_DESCRIPTOR values and uses them as     indices in libusb_udev_complete_msconfig_setup, causing an outofbounds read. This vulnerability is     fixed in 3.20.1.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-233:05 advisory.

    * freerdp: FreeRDP heap-buffer-overflow (CVE-2026-22855)
      * freerdp: FreeRDP global-buffer-overflow (CVE-2026-22858)
      * freerdp: FreeRDP heap-buffer-overflow (CVE-2026-22859)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:4440 advisory.

    FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license.
    The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.

    Security Fix(es):

    * freerdp: FreeRDP heap-buffer-overflow (CVE-2026-22855)

    * freerdp: FreeRDP global-buffer-overflow (CVE-2026-22858)

    * freerdp: FreeRDP heap-buffer-overflow (CVE-2026-22859)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006315 advisory.

    FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, global-buffer-overflow     was observed in FreeRDP's Base64 decoding path. The root cause appears to be implementation-defined char     signedness: on Arm/AArch64 builds, plain char is treated as unsigned, so the guard c <= 0 can be optimized     into a simple c != 0 check. As a result, non-ASCII bytes (e.g., 0x80-0xFF) may bypass the intended range     restriction and be used as an index into a global lookup table, causing out-of-bounds access. This     vulnerability is fixed in 3.20.1.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-a193f1698f advisory.

    Update to 3.20.2




Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-3068 advisory.

    [2:3.10.3-5.2]
    - Backport several CVE fixes       Resolves: RHEL-147912, RHEL-148815, RHEL-148859, RHEL-148892, RHEL-148973

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:3067 advisory.

    * freerdp: FreeRDP heap-buffer-overflow (CVE-2026-22855)
      * freerdp: FreeRDP global-buffer-overflow (CVE-2026-22858)
      * freerdp: FreeRDP heap-buffer-overflow (CVE-2026-22859)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:4439 advisory.

    FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license.
    The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.

    Security Fix(es):

    * freerdp: FreeRDP heap-buffer-overflow (CVE-2026-22855)

    * freerdp: FreeRDP global-buffer-overflow (CVE-2026-22858)

    * freerdp: FreeRDP heap-buffer-overflow (CVE-2026-22859)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 24.04 LTS / 25.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8105-1 advisory.

    It was discovered that FreeRDP incorrectly handled certain RDP packets. A remote attacker could use this     issue to cause FreeRDP to crash, resulting in a denial of service, or possibly execute arbitrary code.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
300483	MiracleLinux 8 : freerdp-2.11.7-3.el8_10 (AXSA:2026-228:04)	Nessus	Miracle Linux Local Security Checks	2026/3/3	2026/3/3	medium
299814	Oracle Linux 9 : freerdp (ELSA-2026-3067)	Nessus	Oracle Linux Local Security Checks	2026/2/23	2026/4/30	medium
300386	Oracle Linux 8 : freerdp (ELSA-2026-3334)	Nessus	Oracle Linux Local Security Checks	2026/3/3	2026/4/30	medium
297418	SUSE SLED15 / SLES15 Security Update : freerdp (SUSE-SU-2026:0345-1)	Nessus	SuSE Local Security Checks	2026/1/31	2026/4/30	high
299772	RHEL 9 : freerdp (RHSA-2026:3067)	Nessus	Red Hat Local Security Checks	2026/2/23	2026/2/23	medium
300400	Alibaba Cloud Linux 3 : 0040: freerdp (ALINUX3-SA-2026:0040)	Nessus	Alibaba Cloud Linux Local Security Checks	2026/3/3	2026/3/3	medium
300495	MiracleLinux 9 : freerdp-2.11.7-1.el9_7.2 (AXSA:2026-233:05)	Nessus	Miracle Linux Local Security Checks	2026/3/4	2026/3/4	medium
302034	RHEL 8 : freerdp (RHSA-2026:4440)	Nessus	Red Hat Local Security Checks	2026/3/12	2026/3/12	medium
303878	Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: freerdp (UTSA-2026-006315)	Nessus	Unity Linux Local Security Checks	2026/3/26	2026/3/26	medium
294816	Fedora 42 : freerdp (2026-a193f1698f)	Nessus	Fedora Local Security Checks	2026/1/21	2026/4/30	high
299813	Oracle Linux 10 : freerdp (ELSA-2026-3068)	Nessus	Oracle Linux Local Security Checks	2026/2/23	2026/4/30	high
300026	AlmaLinux 9 : freerdp (ALSA-2026:3067)	Nessus	Alma Linux Local Security Checks	2026/2/26	2026/2/26	medium
302013	RHEL 8 : freerdp (RHSA-2026:4439)	Nessus	Red Hat Local Security Checks	2026/3/12	2026/3/12	medium
303026	Ubuntu 24.04 LTS / 25.10 : FreeRDP vulnerabilities (USN-8105-1)	Nessus	Ubuntu Local Security Checks	2026/3/19	2026/4/30	high

检测

插件搜索

medium

medium

medium

high

medium

medium

medium

medium

medium

high

high

medium

medium

high