The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0683-1 advisory.

    - CVE-2026-22855: heap-buffer-overflow in smartcard_unpack_set_attrib_call (bsc#1256721).
    - CVE-2026-22857: heap-use-after-free in irp_thread_func (bsc#1256723).
    - CVE-2026-23533: improper validation can lead to heap buffer overflow in `clear_decompress_residual_data`       (bsc#1256943).
    - CVE-2026-23732: improper validation can lead to heap buffer overflow in `Glyph_Alloc` (bsc#1256945).
    - CVE-2026-23883: use-after-free when `update_pointer_color` and `freerdp_image_copy_from_pointer_data`     fail       (bsc#1256946).
    - CVE-2026-23884: use-after-free in `gdi_set_bounds` (bsc#1256947).
    - CVE-2026-24491: heap-use-after-free in video_timer (bsc#1257981).
    - CVE-2026-24675: heap-use-after-free in urb_select_interface (bsc#1257982).
    - CVE-2026-24676: heap-use-after-free in audio_format_compatible (bsc#1257983).
    - CVE-2026-24679: heap-buffer-overflow in urb_select_interface (bsc#1257986).
    - CVE-2026-24681: heap-use-after-free in urb_bulk_transfer_cb (bsc#1257988).
    - CVE-2026-24682: heap-buffer-overflow in audio_formats_free (bsc#1257989).
    - CVE-2026-24683: heap-use-after-free in ainput_send_input_event (bsc#1257990).
    - CVE-2026-24684: heap-use-after-free in play_thread (bsc#1257991).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20632-1 advisory.

    Changes in freerdp2:

    - Update freerdp-3-macro:
      - Add WINPR_ATTR_MALLOC macro from freerdp 3

    - Security fixes for the following issues:
      * CVE-2026-25941: Fixed a out of bounds read (bsc#1258919)
      * CVE-2026-25942: Fixed a buffer overflow in xf_rail_server_execute_result() (bsc#1258920)
      * CVE-2026-27951: Fixed a denial of service in Stream_EnsureCapacity() (bsc#1258939)
      * CVE-2026-25997: Fixed a use-after-free in xf_clipboard_format_equal() (bsc#1258977)
      * CVE-2026-26986: Fixed a use-after-free in rail_window_free() (bsc#1258967)
      * CVE-2026-27015: Fixed a client denial of service via reachable assert (bsc#1258987)
      * CVE-2026-25952: Fixed a use-after-free in xf_SetWindowMinMaxInfo() (bsc#1258921)
      * CVE-2026-25953: Fixed a use-after-free in xf_AppUpdateWindowFromSurface() (bsc#1258923)
      * CVE-2026-25954: Fixed a use-after-free in xf_rail_server_local_move_size() (bsc#1258924)
      * CVE-2026-24684: Fixed a use-after-free in play_thread() (bsc#1257991).
      * CVE-2026-26271: Fixed a buffer overread in icon processing (bsc#1258979)
      * CVE-2026-26955: Fixed a out of bounds write (bsc#1258982)
      * CVE-2026-26965: Fixed a out of bounds write (bsc#1258985)
      * CVE-2026-31806: Fixed a buffer overflow via improper validation of server messages (bsc#1259653)
      * CVE-2026-31883: Fixed a buffer overflow via crafted audio format and wave data (bsc#1259679)
      * CVE-2026-31885: Fixed a out of bounds read (bsc#1259686)
      * CVE-2026-24491: Fix use-after-free that was accidentally introduced in the backport (bsc#1257981)
      * CVE-2026-22855: Fixed a buffer overflow in smartcard_unpack_set_attrib_call() (bsc#1256721)
      * CVE-2026-22857: Fixed a use-after-free in irp_thread_func() (bsc#1256723)
      * CVE-2026-23533: Fixed a buffer overflow in clear_decompress_residual_data() (bsc#1256943)
      * CVE-2026-23732: Fixed a buffer overflow in Glyph_Alloc() (bsc#1256945)
      * CVE-2026-23883: Fixed a use-after-free (bsc#1256946)
      * CVE-2026-23884: Fixed a use-after-free in gdi_set_bounds (bsc#1256947)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:19033 advisory.

    FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license.
    The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.

    Security Fix(es):

    * freerdp: FreeRDP heap-buffer-overflow (CVE-2026-22855)

    * freerdp: FreeRDP heap-buffer-overflow (CVE-2026-22853)

    * freerdp: FreeRDP global-buffer-overflow (CVE-2026-22858)

    * freerdp: FreeRDP heap-use-after-free (CVE-2026-22856)

    * freerdp: FreeRDP heap-buffer-overflow (CVE-2026-22854)

    * freerdp: FreeRDP heap-buffer-overflow (CVE-2026-22859)

    * freerdp: FreeRDP heap-buffer-overflow (CVE-2026-22852)

    * freerdp: FreeRDP: Denial of Service via FastGlyph parsing buffer overflow (CVE-2026-23732)

    * freerdp: FreeRDP: Denial of Service via use after free in ecam_channel_write (CVE-2026-24678)

    * freerdp: FreeRDP: Denial of Service via use-after-free in AUDIN format renegotiation (CVE-2026-24676)

    * freerdp: FreeRDP has a heap-use-after-free in video_timer (CVE-2026-24491)

    * freerdp: FreeRDP has a NULL Pointer Dereference in rdp_write_logon_info_v2() (CVE-2026-23948)

    * freerdp: FreeRDP has a Heap-use-after-free in play_thread (CVE-2026-24684)

    * freerdp: FreeRDP has a heap-use-after-free in urb_bulk_transfer_cb (CVE-2026-24681)

    * freerdp: FreeRDP has a Heap-buffer-overflow in audio_formats_free (CVE-2026-24682)

    * freerdp: FreeRDP has a heap-use-after-free in ainput_send_input_event (CVE-2026-24683)

    * freerdp: FreeRDP has a heap-buffer-overflow in urb_select_interface (CVE-2026-24679)

    * freerdp: FreeRDP has a Heap-use-after-free in urb_select_interface (CVE-2026-24675)

    * freerdp: FreeRDP: Arbitrary code execution via heap out-of-bounds write in RLE planar decode path     (CVE-2026-26965)

    * freerdp: FreeRDP: Arbitrary code execution via heap buffer overflow in GDI surface pipeline     (CVE-2026-26955)

    * freerdp: FreeRDP: Arbitrary code execution via crafted Remote Desktop Protocol (RDP) server messages     (CVE-2026-31806)

    * FreeRDP: FreeRDP: Heap buffer overflow allows arbitrary code execution via crafted pixel data     (CVE-2026-33984)

    * FreeRDP: FreeRDP: Denial of Service via specially crafted Remote Desktop Protocol messages     (CVE-2026-33983)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-19033 advisory.

    - Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984)
    - Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983)       Resolves: RHEL-162947, RHEL-162963

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_1819 advisory.

    This advisory aggregates security fixes for the freerdp SRPM in CIQ LTS 9.2. It addresses 31 CVEs:
    CVE-2022-39319, CVE-2022-41877, CVE-2022-39317, CVE-2026-22859, CVE-2026-26986, and 26 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
300207	SUSE SLED15: freerdp2 / freerdp2-devel / freerdp2-proxy / freerdp2-server / etc (SUSE-SU-2026:0683-1)	Nessus	SuSE Local Security Checks	2026/3/2	2026/6/26	high
311767	openSUSE 16 Security Update : freerdp2 (openSUSE-SU-2026:20632-1)	Nessus	SuSE Local Security Checks	2026/5/2	2026/5/2	critical
315441	RHEL 10 : freerdp (RHSA-2026:19033)	Nessus	Red Hat Local Security Checks	2026/5/19	2026/6/12	critical
327011	Oracle Linux 10 : freerdp (ELSA-2026-19033)	Nessus	Oracle Linux Local Security Checks	2026/7/15	2026/7/15	critical
381065	Rocky Linux 9.2 [CIQ] Security Update: freerdp / freerdp-devel / freerdp-libs / libwinpr / libwinpr-devel Multiple Vulnerabilities (ciqsa-2026_1819)	Nessus	Rocky Linux Local Security Checks	2026/11/14	2026/11/14	critical

检测

插件搜索

high

critical

critical

critical

critical