CVE Vulnerability Database
Search and browse 420,189 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-121403 | MEDIUM | 4.3 | — | Nov 3, 2026 | FreeRDP before 3.32.2 contains a denial of service vulnerability where a malformed drive DEVICE_IOREQUEST with a truncat... |
| CVE-2026-121402 | MEDIUM | 6.5 | 0.3% | Nov 3, 2026 | FreeRDP before 3.32.2 contains a NULL pointer dereference vulnerability that allows malicious RDP servers to crash xfree... |
| CVE-2026-121401 | MEDIUM | 4.3 | — | Nov 3, 2026 | FreeRDP before 3.32.2 contains a denial of service vulnerability where rdg_process_packet dispatches a PKT_TYPE_EXTENDED... |
| CVE-2026-121400 | MEDIUM | 6.5 | — | Nov 3, 2026 | FreeRDP before 3.32.2 contains a denial-of-service vulnerability in rdg_process_control_packet that allows a malicious R... |
| CVE-2026-121399 | MEDIUM | 4.3 | — | Nov 3, 2026 | FreeRDP before 3.32.2 contains a memory allocation vulnerability in rdg_receive_packet that allows a malicious RD Gatewa... |
| CVE-2026-121398 | MEDIUM | 5.9 | 0.3% | Nov 3, 2026 | FreeRDP before 3.32.2 contains a cross-thread use-after-free vulnerability in the freerdp-proxy dyn-channel-dump module ... |
| CVE-2026-121397 | MEDIUM | 4.3 | — | Nov 3, 2026 | FreeRDP before 3.32.2 contains a heap buffer over-read vulnerability in save_png_to_buffer() that allows malicious RDP s... |
| CVE-2026-121396 | MEDIUM | 4.3 | — | Nov 3, 2026 | FreeRDP clients from 3.0.0 before 3.32.2 built with verbose WinPR assertions contain a reachable assertion in rts_read_a... |
| CVE-2026-121395 | MEDIUM | 6.5 | — | Nov 3, 2026 | FreeRDP from 3.17.0 before 3.32.2 contains an assertion failure in the RemoteFX differential decoder when verbose WinPR ... |
| CVE-2026-121394 | MEDIUM | 6.5 | 0.3% | Nov 3, 2026 | FreeRDP from 3.11.0 before 3.32.2 contains an assertion failure in the RemoteFX RLGR decoder that allows malicious serve... |
| CVE-2026-121393 | MEDIUM | 6.5 | — | Nov 3, 2026 | FreeRDP from 3.0.0 before 3.32.2 contains a denial of service vulnerability that allows malicious RDP servers to abort c... |
| CVE-2026-121392 | HIGH | 7.4 | — | Nov 3, 2026 | FreeRDP before 3.32.2 contains an improper certificate validation vulnerability in tls_verify_certificate() that accepts... |
| CVE-2026-121391 | MEDIUM | 4.3 | — | Nov 3, 2026 | FreeRDP from 3.0.0 before 3.32.2 contains a file descriptor leak in parallel_process_irp_create that fails to close prev... |
| CVE-2026-121390 | MEDIUM | 4.3 | 0.2% | Nov 3, 2026 | FreeRDP 3.0.0 before 3.32.2 built with WITH_AAD=ON contains a reachable assertion because its ARM gateway response parse... |
| CVE-2026-121389 | LOW | 3.1 | — | Nov 3, 2026 | FreeRDP from 3.27.0 before 3.32.2 contains a denial of service vulnerability in rdpdr_dump_packet that allows malicious ... |
| CVE-2026-121388 | MEDIUM | 6.5 | — | Nov 3, 2026 | FreeRDP from 3.0.0 before 3.32.2 contains an uncontrolled resource allocation vulnerability that allows malicious RDP se... |
| CVE-2026-121387 | MEDIUM | 4.3 | — | Nov 3, 2026 | FreeRDP 2.0.0 before 3.32.2 contains an out-of-bounds read vulnerability in freerdp_dsp_decode_gsm610 that allows malici... |
| CVE-2026-121386 | HIGH | 7.5 | 0.3% | Nov 3, 2026 | FreeRDP before 3.32.2 contains a denial of service vulnerability in WinPR's winpr_read_png_from_buffer() and winpr_conve... |
| CVE-2026-118527 | MEDIUM | 4.3 | — | Nov 3, 2026 | Use of predictable filenames in Ivanti Connect Secure before versions 25.1.1.3 and 22.8R2.6 allows a remote authenticate... |
| CVE-2026-118489 | HIGH | 7.5 | — | Nov 3, 2026 | In Eclipse Vert.x versions [4.0.0,4.5.35] or [5.0.0,5.2.2], when one `CachingWebClient` is shared across users — the doc... |
| CVE-2026-118488 | MEDIUM | 5.9 | — | Nov 3, 2026 | In Eclipse Vert.x versions [4.0.0, 4.5.35] or [5.0.0, 5.2.2], when a malicious server keeps sending bytes on an EOL-term... |
| CVE-2026-110265 | MEDIUM | 6.5 | — | Nov 3, 2026 | A specially crafted malformed search query could return results from outside a user's organization. Log analysis of runZ... |
| CVE-2026-106991 | HIGH | 7.1 | 0.4% | Nov 3, 2026 | hustoj >=24.09.10 and <=26.08.19 is vulnerable to Incorrect Access Control. Any registered user can delete, lock, or sti... |
| CVE-2026-100493 | MEDIUM | 6.9 | — | Nov 3, 2026 | An integer overflow in the DDS RGB888 loader of AMD Compressonator SDK could allow an attacker to supply a crafted DDS f... |
| CVE-2026-89295 | HIGH | 7.5 | 0.2% | Nov 3, 2026 | In Eclipse Mnestix AAS Generator versions 0.1.0 up until but excluding 1.5.0, a practical upper bound on the client-supp... |