OPENSUSE-SU-2026:20632-1

Vulnerability from csaf_opensuse - Published: 2026-04-27 13:16 - Updated: 2026-04-27 13:16
Summary
Security update for freerdp2
Severity
Important
Notes
Title of the patch: Security update for freerdp2
Description of the patch: This update for freerdp2 fixes the following issues: Changes in freerdp2: - Update freerdp-3-macro: + Add WINPR_ATTR_MALLOC macro from freerdp 3 - Security fixes for the following issues: * CVE-2026-25941: Fixed a out of bounds read (bsc#1258919) * CVE-2026-25942: Fixed a buffer overflow in xf_rail_server_execute_result() (bsc#1258920) * CVE-2026-27951: Fixed a denial of service in Stream_EnsureCapacity() (bsc#1258939) * CVE-2026-25997: Fixed a use-after-free in xf_clipboard_format_equal() (bsc#1258977) * CVE-2026-26986: Fixed a use-after-free in rail_window_free() (bsc#1258967) * CVE-2026-27015: Fixed a client denial of service via reachable assert (bsc#1258987) * CVE-2026-25952: Fixed a use-after-free in xf_SetWindowMinMaxInfo() (bsc#1258921) * CVE-2026-25953: Fixed a use-after-free in xf_AppUpdateWindowFromSurface() (bsc#1258923) * CVE-2026-25954: Fixed a use-after-free in xf_rail_server_local_move_size() (bsc#1258924) * CVE-2026-24684: Fixed a use-after-free in play_thread() (bsc#1257991). * CVE-2026-26271: Fixed a buffer overread in icon processing (bsc#1258979) * CVE-2026-26955: Fixed a out of bounds write (bsc#1258982) * CVE-2026-26965: Fixed a out of bounds write (bsc#1258985) * CVE-2026-31806: Fixed a buffer overflow via improper validation of server messages (bsc#1259653) * CVE-2026-31883: Fixed a buffer overflow via crafted audio format and wave data (bsc#1259679) * CVE-2026-31885: Fixed a out of bounds read (bsc#1259686) * CVE-2026-24491: Fix use-after-free that was accidentally introduced in the backport (bsc#1257981) * CVE-2026-22855: Fixed a buffer overflow in smartcard_unpack_set_attrib_call() (bsc#1256721) * CVE-2026-22857: Fixed a use-after-free in irp_thread_func() (bsc#1256723) * CVE-2026-23533: Fixed a buffer overflow in clear_decompress_residual_data() (bsc#1256943) * CVE-2026-23732: Fixed a buffer overflow in Glyph_Alloc() (bsc#1256945) * CVE-2026-23883: Fixed a use-after-free (bsc#1256946) * CVE-2026-23884: Fixed a use-after-free in gdi_set_bounds (bsc#1256947)
Patchnames: openSUSE-Leap-16.0-packagehub-216
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
CVE-2026-22855
6.8 (Medium)
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:H
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-22857
7.5 (High)
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-23533
7.5 (High)
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-23732
4.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-23883
7.5 (High)
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-23884
7.5 (High)
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-24491
7.3 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-24684
7.3 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-25941
4.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-25942
5.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-25952
5.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-25953
5.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-25954
5.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-25997
5.3 (Medium)
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-26271
5.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-26955
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-26965
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-26986
5.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-27015
6.5 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-27951
5.9 (Medium)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-31806
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-31883
7.3 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-31885
7.1 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
References
https://www.suse.com/support/security/rating/ external
https://ftp.suse.com/pub/projects/security/csaf/o… self
https://bugzilla.suse.com/1256721 self
https://bugzilla.suse.com/1256723 self
https://bugzilla.suse.com/1256943 self
https://bugzilla.suse.com/1256945 self
https://bugzilla.suse.com/1256946 self
https://bugzilla.suse.com/1256947 self
https://bugzilla.suse.com/1257981 self
https://bugzilla.suse.com/1257991 self
https://bugzilla.suse.com/1258919 self
https://bugzilla.suse.com/1258920 self
https://bugzilla.suse.com/1258921 self
https://bugzilla.suse.com/1258923 self
https://bugzilla.suse.com/1258924 self
https://bugzilla.suse.com/1258939 self
https://bugzilla.suse.com/1258967 self
https://bugzilla.suse.com/1258977 self
https://bugzilla.suse.com/1258979 self
https://bugzilla.suse.com/1258982 self
https://bugzilla.suse.com/1258985 self
https://bugzilla.suse.com/1258987 self
https://bugzilla.suse.com/1259251 self
https://bugzilla.suse.com/1259653 self
https://bugzilla.suse.com/1259679 self
https://bugzilla.suse.com/1259686 self
https://bugzilla.suse.com/1261848 self
https://www.suse.com/security/cve/CVE-2026-22855/ self
https://www.suse.com/security/cve/CVE-2026-22857/ self
https://www.suse.com/security/cve/CVE-2026-23533/ self
https://www.suse.com/security/cve/CVE-2026-23732/ self
https://www.suse.com/security/cve/CVE-2026-23883/ self
https://www.suse.com/security/cve/CVE-2026-23884/ self
https://www.suse.com/security/cve/CVE-2026-24491/ self
https://www.suse.com/security/cve/CVE-2026-24684/ self
https://www.suse.com/security/cve/CVE-2026-25941/ self
https://www.suse.com/security/cve/CVE-2026-25942/ self
https://www.suse.com/security/cve/CVE-2026-25952/ self
https://www.suse.com/security/cve/CVE-2026-25953/ self
https://www.suse.com/security/cve/CVE-2026-25954/ self
https://www.suse.com/security/cve/CVE-2026-25997/ self
https://www.suse.com/security/cve/CVE-2026-26271/ self
https://www.suse.com/security/cve/CVE-2026-26955/ self
https://www.suse.com/security/cve/CVE-2026-26965/ self
https://www.suse.com/security/cve/CVE-2026-26986/ self
https://www.suse.com/security/cve/CVE-2026-27015/ self
https://www.suse.com/security/cve/CVE-2026-27951/ self
https://www.suse.com/security/cve/CVE-2026-31806/ self
https://www.suse.com/security/cve/CVE-2026-31883/ self
https://www.suse.com/security/cve/CVE-2026-31885/ self
https://www.suse.com/security/cve/CVE-2026-22855 external
https://bugzilla.suse.com/1256721 external
https://www.suse.com/security/cve/CVE-2026-22857 external
https://bugzilla.suse.com/1256723 external
https://www.suse.com/security/cve/CVE-2026-23533 external
https://bugzilla.suse.com/1256943 external
https://www.suse.com/security/cve/CVE-2026-23732 external
https://bugzilla.suse.com/1256945 external
https://www.suse.com/security/cve/CVE-2026-23883 external
https://bugzilla.suse.com/1256946 external
https://www.suse.com/security/cve/CVE-2026-23884 external
https://bugzilla.suse.com/1256947 external
https://www.suse.com/security/cve/CVE-2026-24491 external
https://bugzilla.suse.com/1257981 external
https://www.suse.com/security/cve/CVE-2026-24684 external
https://bugzilla.suse.com/1257991 external
https://www.suse.com/security/cve/CVE-2026-25941 external
https://bugzilla.suse.com/1258919 external
https://www.suse.com/security/cve/CVE-2026-25942 external
https://bugzilla.suse.com/1258920 external
https://www.suse.com/security/cve/CVE-2026-25952 external
https://bugzilla.suse.com/1258921 external
https://www.suse.com/security/cve/CVE-2026-25953 external
https://bugzilla.suse.com/1258923 external
https://www.suse.com/security/cve/CVE-2026-25954 external
https://bugzilla.suse.com/1258924 external
https://www.suse.com/security/cve/CVE-2026-25997 external
https://bugzilla.suse.com/1258977 external
https://www.suse.com/security/cve/CVE-2026-26271 external
https://bugzilla.suse.com/1258979 external
https://www.suse.com/security/cve/CVE-2026-26955 external
https://bugzilla.suse.com/1258982 external
https://www.suse.com/security/cve/CVE-2026-26965 external
https://bugzilla.suse.com/1258985 external
https://www.suse.com/security/cve/CVE-2026-26986 external
https://bugzilla.suse.com/1258967 external
https://www.suse.com/security/cve/CVE-2026-27015 external
https://bugzilla.suse.com/1258987 external
https://www.suse.com/security/cve/CVE-2026-27951 external
https://bugzilla.suse.com/1258939 external
https://www.suse.com/security/cve/CVE-2026-31806 external
https://bugzilla.suse.com/1259653 external
https://www.suse.com/security/cve/CVE-2026-31883 external
https://bugzilla.suse.com/1259679 external
https://www.suse.com/security/cve/CVE-2026-31885 external
https://bugzilla.suse.com/1259686 external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for freerdp2",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for freerdp2 fixes the following issues:\n\nChanges in freerdp2:\n\n- Update freerdp-3-macro:\n  + Add WINPR_ATTR_MALLOC macro from freerdp 3\n\n- Security fixes for the following issues:\n  * CVE-2026-25941: Fixed a out of bounds read (bsc#1258919)\n  * CVE-2026-25942: Fixed a buffer overflow in xf_rail_server_execute_result() (bsc#1258920)\n  * CVE-2026-27951: Fixed a denial of service in Stream_EnsureCapacity() (bsc#1258939)\n  * CVE-2026-25997: Fixed a use-after-free in xf_clipboard_format_equal() (bsc#1258977)\n  * CVE-2026-26986: Fixed a use-after-free in rail_window_free() (bsc#1258967)\n  * CVE-2026-27015: Fixed a client denial of service via reachable assert (bsc#1258987)\n  * CVE-2026-25952: Fixed a use-after-free in xf_SetWindowMinMaxInfo() (bsc#1258921)\n  * CVE-2026-25953: Fixed a use-after-free in xf_AppUpdateWindowFromSurface() (bsc#1258923)\n  * CVE-2026-25954: Fixed a use-after-free in xf_rail_server_local_move_size() (bsc#1258924)\n  * CVE-2026-24684: Fixed a use-after-free in play_thread() (bsc#1257991).\n  * CVE-2026-26271: Fixed a buffer overread in icon processing (bsc#1258979)\n  * CVE-2026-26955: Fixed a out of bounds write (bsc#1258982)\n  * CVE-2026-26965: Fixed a out of bounds write (bsc#1258985)\n  * CVE-2026-31806: Fixed a buffer overflow via improper validation of server messages (bsc#1259653)\n  * CVE-2026-31883: Fixed a buffer overflow via crafted audio format and wave data (bsc#1259679)\n  * CVE-2026-31885: Fixed a out of bounds read (bsc#1259686)\n  * CVE-2026-24491: Fix use-after-free that was accidentally introduced in the backport (bsc#1257981)\n  * CVE-2026-22855: Fixed a buffer overflow in smartcard_unpack_set_attrib_call() (bsc#1256721)\n  * CVE-2026-22857: Fixed a use-after-free in irp_thread_func() (bsc#1256723)\n  * CVE-2026-23533: Fixed a buffer overflow in clear_decompress_residual_data() (bsc#1256943)\n  * CVE-2026-23732: Fixed a buffer overflow in Glyph_Alloc() (bsc#1256945)\n  * CVE-2026-23883: Fixed a use-after-free (bsc#1256946)\n  * CVE-2026-23884: Fixed a use-after-free in gdi_set_bounds (bsc#1256947)\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Leap-16.0-packagehub-216",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_20632-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1256721",
        "url": "https://bugzilla.suse.com/1256721"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1256723",
        "url": "https://bugzilla.suse.com/1256723"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1256943",
        "url": "https://bugzilla.suse.com/1256943"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1256945",
        "url": "https://bugzilla.suse.com/1256945"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1256946",
        "url": "https://bugzilla.suse.com/1256946"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1256947",
        "url": "https://bugzilla.suse.com/1256947"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1257981",
        "url": "https://bugzilla.suse.com/1257981"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1257991",
        "url": "https://bugzilla.suse.com/1257991"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1258919",
        "url": "https://bugzilla.suse.com/1258919"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1258920",
        "url": "https://bugzilla.suse.com/1258920"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1258921",
        "url": "https://bugzilla.suse.com/1258921"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1258923",
        "url": "https://bugzilla.suse.com/1258923"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1258924",
        "url": "https://bugzilla.suse.com/1258924"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1258939",
        "url": "https://bugzilla.suse.com/1258939"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1258967",
        "url": "https://bugzilla.suse.com/1258967"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1258977",
        "url": "https://bugzilla.suse.com/1258977"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1258979",
        "url": "https://bugzilla.suse.com/1258979"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1258982",
        "url": "https://bugzilla.suse.com/1258982"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1258985",
        "url": "https://bugzilla.suse.com/1258985"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1258987",
        "url": "https://bugzilla.suse.com/1258987"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1259251",
        "url": "https://bugzilla.suse.com/1259251"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1259653",
        "url": "https://bugzilla.suse.com/1259653"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1259679",
        "url": "https://bugzilla.suse.com/1259679"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1259686",
        "url": "https://bugzilla.suse.com/1259686"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1261848",
        "url": "https://bugzilla.suse.com/1261848"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-22855 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-22855/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-22857 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-22857/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-23533 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-23533/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-23732 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-23732/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-23883 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-23883/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-23884 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-23884/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-24491 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-24491/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-24684 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-24684/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-25941 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-25941/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-25942 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-25942/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-25952 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-25952/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-25953 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-25953/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-25954 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-25954/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-25997 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-25997/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-26271 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-26271/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-26955 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-26955/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-26965 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-26965/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-26986 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-26986/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-27015 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-27015/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-27951 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-27951/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-31806 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-31806/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-31883 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-31883/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-31885 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-31885/"
      }
    ],
    "title": "Security update for freerdp2",
    "tracking": {
      "current_release_date": "2026-04-27T13:16:46Z",
      "generator": {
        "date": "2026-04-27T13:16:46Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2026:20632-1",
      "initial_release_date": "2026-04-27T13:16:46Z",
      "revision_history": [
        {
          "date": "2026-04-27T13:16:46Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "freerdp2-2.11.7-bp160.3.1.aarch64",
                "product": {
                  "name": "freerdp2-2.11.7-bp160.3.1.aarch64",
                  "product_id": "freerdp2-2.11.7-bp160.3.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "freerdp2-devel-2.11.7-bp160.3.1.aarch64",
                "product": {
                  "name": "freerdp2-devel-2.11.7-bp160.3.1.aarch64",
                  "product_id": "freerdp2-devel-2.11.7-bp160.3.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "freerdp2-proxy-2.11.7-bp160.3.1.aarch64",
                "product": {
                  "name": "freerdp2-proxy-2.11.7-bp160.3.1.aarch64",
                  "product_id": "freerdp2-proxy-2.11.7-bp160.3.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "freerdp2-server-2.11.7-bp160.3.1.aarch64",
                "product": {
                  "name": "freerdp2-server-2.11.7-bp160.3.1.aarch64",
                  "product_id": "freerdp2-server-2.11.7-bp160.3.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libfreerdp2-2-2.11.7-bp160.3.1.aarch64",
                "product": {
                  "name": "libfreerdp2-2-2.11.7-bp160.3.1.aarch64",
                  "product_id": "libfreerdp2-2-2.11.7-bp160.3.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libwinpr2-2-2.11.7-bp160.3.1.aarch64",
                "product": {
                  "name": "libwinpr2-2-2.11.7-bp160.3.1.aarch64",
                  "product_id": "libwinpr2-2-2.11.7-bp160.3.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "winpr2-devel-2.11.7-bp160.3.1.aarch64",
                "product": {
                  "name": "winpr2-devel-2.11.7-bp160.3.1.aarch64",
                  "product_id": "winpr2-devel-2.11.7-bp160.3.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "freerdp2-2.11.7-bp160.3.1.ppc64le",
                "product": {
                  "name": "freerdp2-2.11.7-bp160.3.1.ppc64le",
                  "product_id": "freerdp2-2.11.7-bp160.3.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "freerdp2-devel-2.11.7-bp160.3.1.ppc64le",
                "product": {
                  "name": "freerdp2-devel-2.11.7-bp160.3.1.ppc64le",
                  "product_id": "freerdp2-devel-2.11.7-bp160.3.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "freerdp2-proxy-2.11.7-bp160.3.1.ppc64le",
                "product": {
                  "name": "freerdp2-proxy-2.11.7-bp160.3.1.ppc64le",
                  "product_id": "freerdp2-proxy-2.11.7-bp160.3.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "freerdp2-server-2.11.7-bp160.3.1.ppc64le",
                "product": {
                  "name": "freerdp2-server-2.11.7-bp160.3.1.ppc64le",
                  "product_id": "freerdp2-server-2.11.7-bp160.3.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libfreerdp2-2-2.11.7-bp160.3.1.ppc64le",
                "product": {
                  "name": "libfreerdp2-2-2.11.7-bp160.3.1.ppc64le",
                  "product_id": "libfreerdp2-2-2.11.7-bp160.3.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libwinpr2-2-2.11.7-bp160.3.1.ppc64le",
                "product": {
                  "name": "libwinpr2-2-2.11.7-bp160.3.1.ppc64le",
                  "product_id": "libwinpr2-2-2.11.7-bp160.3.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "winpr2-devel-2.11.7-bp160.3.1.ppc64le",
                "product": {
                  "name": "winpr2-devel-2.11.7-bp160.3.1.ppc64le",
                  "product_id": "winpr2-devel-2.11.7-bp160.3.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "freerdp2-2.11.7-bp160.3.1.s390x",
                "product": {
                  "name": "freerdp2-2.11.7-bp160.3.1.s390x",
                  "product_id": "freerdp2-2.11.7-bp160.3.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "freerdp2-devel-2.11.7-bp160.3.1.s390x",
                "product": {
                  "name": "freerdp2-devel-2.11.7-bp160.3.1.s390x",
                  "product_id": "freerdp2-devel-2.11.7-bp160.3.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "freerdp2-proxy-2.11.7-bp160.3.1.s390x",
                "product": {
                  "name": "freerdp2-proxy-2.11.7-bp160.3.1.s390x",
                  "product_id": "freerdp2-proxy-2.11.7-bp160.3.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "freerdp2-server-2.11.7-bp160.3.1.s390x",
                "product": {
                  "name": "freerdp2-server-2.11.7-bp160.3.1.s390x",
                  "product_id": "freerdp2-server-2.11.7-bp160.3.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libfreerdp2-2-2.11.7-bp160.3.1.s390x",
                "product": {
                  "name": "libfreerdp2-2-2.11.7-bp160.3.1.s390x",
                  "product_id": "libfreerdp2-2-2.11.7-bp160.3.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libwinpr2-2-2.11.7-bp160.3.1.s390x",
                "product": {
                  "name": "libwinpr2-2-2.11.7-bp160.3.1.s390x",
                  "product_id": "libwinpr2-2-2.11.7-bp160.3.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "winpr2-devel-2.11.7-bp160.3.1.s390x",
                "product": {
                  "name": "winpr2-devel-2.11.7-bp160.3.1.s390x",
                  "product_id": "winpr2-devel-2.11.7-bp160.3.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "freerdp2-2.11.7-bp160.3.1.x86_64",
                "product": {
                  "name": "freerdp2-2.11.7-bp160.3.1.x86_64",
                  "product_id": "freerdp2-2.11.7-bp160.3.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "freerdp2-devel-2.11.7-bp160.3.1.x86_64",
                "product": {
                  "name": "freerdp2-devel-2.11.7-bp160.3.1.x86_64",
                  "product_id": "freerdp2-devel-2.11.7-bp160.3.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "freerdp2-proxy-2.11.7-bp160.3.1.x86_64",
                "product": {
                  "name": "freerdp2-proxy-2.11.7-bp160.3.1.x86_64",
                  "product_id": "freerdp2-proxy-2.11.7-bp160.3.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "freerdp2-server-2.11.7-bp160.3.1.x86_64",
                "product": {
                  "name": "freerdp2-server-2.11.7-bp160.3.1.x86_64",
                  "product_id": "freerdp2-server-2.11.7-bp160.3.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libfreerdp2-2-2.11.7-bp160.3.1.x86_64",
                "product": {
                  "name": "libfreerdp2-2-2.11.7-bp160.3.1.x86_64",
                  "product_id": "libfreerdp2-2-2.11.7-bp160.3.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libwinpr2-2-2.11.7-bp160.3.1.x86_64",
                "product": {
                  "name": "libwinpr2-2-2.11.7-bp160.3.1.x86_64",
                  "product_id": "libwinpr2-2-2.11.7-bp160.3.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "winpr2-devel-2.11.7-bp160.3.1.x86_64",
                "product": {
                  "name": "winpr2-devel-2.11.7-bp160.3.1.x86_64",
                  "product_id": "winpr2-devel-2.11.7-bp160.3.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Leap 16.0",
                "product": {
                  "name": "openSUSE Leap 16.0",
                  "product_id": "openSUSE Leap 16.0"
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp2-2.11.7-bp160.3.1.aarch64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.aarch64"
        },
        "product_reference": "freerdp2-2.11.7-bp160.3.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp2-2.11.7-bp160.3.1.ppc64le as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.ppc64le"
        },
        "product_reference": "freerdp2-2.11.7-bp160.3.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp2-2.11.7-bp160.3.1.s390x as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.s390x"
        },
        "product_reference": "freerdp2-2.11.7-bp160.3.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp2-2.11.7-bp160.3.1.x86_64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.x86_64"
        },
        "product_reference": "freerdp2-2.11.7-bp160.3.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp2-devel-2.11.7-bp160.3.1.aarch64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.aarch64"
        },
        "product_reference": "freerdp2-devel-2.11.7-bp160.3.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp2-devel-2.11.7-bp160.3.1.ppc64le as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.ppc64le"
        },
        "product_reference": "freerdp2-devel-2.11.7-bp160.3.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp2-devel-2.11.7-bp160.3.1.s390x as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.s390x"
        },
        "product_reference": "freerdp2-devel-2.11.7-bp160.3.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp2-devel-2.11.7-bp160.3.1.x86_64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.x86_64"
        },
        "product_reference": "freerdp2-devel-2.11.7-bp160.3.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp2-proxy-2.11.7-bp160.3.1.aarch64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.aarch64"
        },
        "product_reference": "freerdp2-proxy-2.11.7-bp160.3.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp2-proxy-2.11.7-bp160.3.1.ppc64le as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.ppc64le"
        },
        "product_reference": "freerdp2-proxy-2.11.7-bp160.3.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp2-proxy-2.11.7-bp160.3.1.s390x as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.s390x"
        },
        "product_reference": "freerdp2-proxy-2.11.7-bp160.3.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp2-proxy-2.11.7-bp160.3.1.x86_64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.x86_64"
        },
        "product_reference": "freerdp2-proxy-2.11.7-bp160.3.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp2-server-2.11.7-bp160.3.1.aarch64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.aarch64"
        },
        "product_reference": "freerdp2-server-2.11.7-bp160.3.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp2-server-2.11.7-bp160.3.1.ppc64le as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.ppc64le"
        },
        "product_reference": "freerdp2-server-2.11.7-bp160.3.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp2-server-2.11.7-bp160.3.1.s390x as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.s390x"
        },
        "product_reference": "freerdp2-server-2.11.7-bp160.3.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp2-server-2.11.7-bp160.3.1.x86_64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.x86_64"
        },
        "product_reference": "freerdp2-server-2.11.7-bp160.3.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libfreerdp2-2-2.11.7-bp160.3.1.aarch64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.aarch64"
        },
        "product_reference": "libfreerdp2-2-2.11.7-bp160.3.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libfreerdp2-2-2.11.7-bp160.3.1.ppc64le as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.ppc64le"
        },
        "product_reference": "libfreerdp2-2-2.11.7-bp160.3.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libfreerdp2-2-2.11.7-bp160.3.1.s390x as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.s390x"
        },
        "product_reference": "libfreerdp2-2-2.11.7-bp160.3.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libfreerdp2-2-2.11.7-bp160.3.1.x86_64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.x86_64"
        },
        "product_reference": "libfreerdp2-2-2.11.7-bp160.3.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libwinpr2-2-2.11.7-bp160.3.1.aarch64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.aarch64"
        },
        "product_reference": "libwinpr2-2-2.11.7-bp160.3.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libwinpr2-2-2.11.7-bp160.3.1.ppc64le as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.ppc64le"
        },
        "product_reference": "libwinpr2-2-2.11.7-bp160.3.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libwinpr2-2-2.11.7-bp160.3.1.s390x as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.s390x"
        },
        "product_reference": "libwinpr2-2-2.11.7-bp160.3.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libwinpr2-2-2.11.7-bp160.3.1.x86_64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.x86_64"
        },
        "product_reference": "libwinpr2-2-2.11.7-bp160.3.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "winpr2-devel-2.11.7-bp160.3.1.aarch64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.aarch64"
        },
        "product_reference": "winpr2-devel-2.11.7-bp160.3.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "winpr2-devel-2.11.7-bp160.3.1.ppc64le as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.ppc64le"
        },
        "product_reference": "winpr2-devel-2.11.7-bp160.3.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "winpr2-devel-2.11.7-bp160.3.1.s390x as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.s390x"
        },
        "product_reference": "winpr2-devel-2.11.7-bp160.3.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "winpr2-devel-2.11.7-bp160.3.1.x86_64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.x86_64"
        },
        "product_reference": "winpr2-devel-2.11.7-bp160.3.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-22855",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-22855"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a heap out-of-bounds read occurs in the smartcard SetAttrib path when cbAttrLen does not match the actual NDR buffer length. This vulnerability is fixed in 3.20.1.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-22855",
          "url": "https://www.suse.com/security/cve/CVE-2026-22855"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1256721 for CVE-2026-22855",
          "url": "https://bugzilla.suse.com/1256721"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-27T13:16:46Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-22855"
    },
    {
      "cve": "CVE-2026-22857",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-22857"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a heap use-after-free occurs in irp_thread_func because the IRP is freed by irp-\u003eComplete() and then accessed again on the error path. This vulnerability is fixed in 3.20.1.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-22857",
          "url": "https://www.suse.com/security/cve/CVE-2026-22857"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1256723 for CVE-2026-22857",
          "url": "https://bugzilla.suse.com/1256723"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-27T13:16:46Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-22857"
    },
    {
      "cve": "CVE-2026-23533",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-23533"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, a client-side heap buffer overflow occurs in the RDPGFX ClearCodec decode path when maliciously crafted residual data causes out-of-bounds writes during color output. A malicious server can trigger a client-side heap buffer overflow, causing a crash (DoS) and potential heap corruption with code-execution risk depending on allocator behavior and surrounding heap layout. Version 3.21.0 contains a patch for the issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-23533",
          "url": "https://www.suse.com/security/cve/CVE-2026-23533"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1256943 for CVE-2026-23533",
          "url": "https://bugzilla.suse.com/1256943"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-27T13:16:46Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-23533"
    },
    {
      "cve": "CVE-2026-23732",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-23732"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, FastGlyph parsing trusts `cbData`/remaining length and never validates against the minimum size implied by `cx/cy`. A malicious server can trigger a client-side global buffer overflow, causing a crash (DoS). Version 3.21.0 contains a patch for the issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-23732",
          "url": "https://www.suse.com/security/cve/CVE-2026-23732"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1256945 for CVE-2026-23732",
          "url": "https://bugzilla.suse.com/1256945"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-27T13:16:46Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-23732"
    },
    {
      "cve": "CVE-2026-23883",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-23883"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, `xf_Pointer_New` frees `cursorPixels` on failure, then `pointer_free` calls `xf_Pointer_Free` and frees it again, triggering ASan UAF. A malicious server can trigger a client-side use after free, causing a crash (DoS) and potential heap corruption with code-execution risk depending on allocator behavior and surrounding heap layout. Version 3.21.0 contains a patch for the issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-23883",
          "url": "https://www.suse.com/security/cve/CVE-2026-23883"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1256946 for CVE-2026-23883",
          "url": "https://bugzilla.suse.com/1256946"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-27T13:16:46Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-23883"
    },
    {
      "cve": "CVE-2026-23884",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-23884"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, offscreen bitmap deletion leaves `gdi-\u003edrawing` pointing to freed memory, causing UAF when related update packets arrive. A malicious server can trigger a client-side use after free, causing a crash (DoS) and potential heap corruption with code-execution risk depending on allocator behavior and surrounding heap layout. Version 3.21.0 contains a patch for the issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-23884",
          "url": "https://www.suse.com/security/cve/CVE-2026-23884"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1256947 for CVE-2026-23884",
          "url": "https://bugzilla.suse.com/1256947"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-27T13:16:46Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-23884"
    },
    {
      "cve": "CVE-2026-24491",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-24491"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, video_timer can send client notifications after the control channel is closed, dereferencing a freed callback and triggering a use after free. This vulnerability is fixed in 3.22.0.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-24491",
          "url": "https://www.suse.com/security/cve/CVE-2026-24491"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1257981 for CVE-2026-24491",
          "url": "https://bugzilla.suse.com/1257981"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-27T13:16:46Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-24491"
    },
    {
      "cve": "CVE-2026-24684",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-24684"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, the RDPSND async playback thread can process queued PDUs after the channel is closed and internal state is freed, leading to a use after free in rdpsnd_treat_wave. This vulnerability is fixed in 3.22.0.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-24684",
          "url": "https://www.suse.com/security/cve/CVE-2026-24684"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1257991 for CVE-2026-24684",
          "url": "https://bugzilla.suse.com/1257991"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-27T13:16:46Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-24684"
    },
    {
      "cve": "CVE-2026-25941",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-25941"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "FreeRDP is a free implementation of the Remote Desktop Protocol. Versions on the 2.x branch prior to to 2.11.8 and on the 3.x branch prior to 3.23.0 have an out-of-bounds read vulnerability in the FreeRDP client\u0027s RDPGFX channel that allows a malicious RDP server to read uninitialized heap memory by sending a crafted WIRE_TO_SURFACE_2 PDU with a `bitmapDataLength` value larger than the actual data in the packet. This can lead to information disclosure or client crashes when a user connects to a malicious server. Versions 2.11.8 and 3.23.0 fix the issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-25941",
          "url": "https://www.suse.com/security/cve/CVE-2026-25941"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1258919 for CVE-2026-25941",
          "url": "https://bugzilla.suse.com/1258919"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-27T13:16:46Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-25941"
    },
    {
      "cve": "CVE-2026-25942",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-25942"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_rail_server_execute_result` indexes the global `error_code_names[]` array (7 elements, indices 0-6) with an unchecked `execResult-\u003eexecResult` value received from the server, allowing an out-of-bounds read when the server sends an `execResult` value of 7 or greater. Version 3.23.0 fixes the issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-25942",
          "url": "https://www.suse.com/security/cve/CVE-2026-25942"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1258920 for CVE-2026-25942",
          "url": "https://bugzilla.suse.com/1258920"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-27T13:16:46Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-25942"
    },
    {
      "cve": "CVE-2026-25952",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-25952"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_SetWindowMinMaxInfo` dereferences a freed `xfAppWindow` pointer because `xf_rail_get_window` in `xf_rail_server_min_max_info` returns an unprotected pointer from the `railWindows` hash table, and the main thread can concurrently delete the window (via a window delete order) while the RAIL channel thread is still using the pointer. Version 3.23.0 fixes the issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-25952",
          "url": "https://www.suse.com/security/cve/CVE-2026-25952"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1258921 for CVE-2026-25952",
          "url": "https://bugzilla.suse.com/1258921"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-27T13:16:46Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-25952"
    },
    {
      "cve": "CVE-2026-25953",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-25953"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_AppUpdateWindowFromSurface` reads from a freed `xfAppWindow` because the RDPGFX DVC thread obtains a bare pointer via `xf_rail_get_window` without any lifetime protection, while the main thread can concurrently delete the window through a fastpath window-delete order. Version 3.23.0 fixes the issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-25953",
          "url": "https://www.suse.com/security/cve/CVE-2026-25953"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1258923 for CVE-2026-25953",
          "url": "https://bugzilla.suse.com/1258923"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-27T13:16:46Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-25953"
    },
    {
      "cve": "CVE-2026-25954",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-25954"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_rail_server_local_move_size` dereferences a freed `xfAppWindow` pointer because `xf_rail_get_window` returns an unprotected pointer from the `railWindows` hash table, and the main thread can concurrently delete the window (via a window delete order) while the RAIL channel thread is still using the pointer. Version 3.23.0 fixes the issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-25954",
          "url": "https://www.suse.com/security/cve/CVE-2026-25954"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1258924 for CVE-2026-25954",
          "url": "https://bugzilla.suse.com/1258924"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-27T13:16:46Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-25954"
    },
    {
      "cve": "CVE-2026-25997",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-25997"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_clipboard_format_equal` reads freed `lastSentFormats` memory because `xf_clipboard_formats_free` (called from the cliprdr channel thread during auto-reconnect) frees the array while the X11 event thread concurrently iterates it in `xf_clipboard_changed`, triggering a heap use after free. Version 3.23.0 fixes the issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-25997",
          "url": "https://www.suse.com/security/cve/CVE-2026-25997"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1258977 for CVE-2026-25997",
          "url": "https://bugzilla.suse.com/1258977"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-27T13:16:46Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-25997"
    },
    {
      "cve": "CVE-2026-26271",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-26271"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, a buffer overread in `freerdp_image_copy_from_icon_data()` (libfreerdp/codec/color.c) can be triggered by crafted RDP Window Icon (TS_ICON_INFO) data. The bug is reachable over the network when a client processes icon data from an RDP server (or from a man-in-the-middle). Version 3.23.0 fixes the issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-26271",
          "url": "https://www.suse.com/security/cve/CVE-2026-26271"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1258979 for CVE-2026-26271",
          "url": "https://bugzilla.suse.com/1258979"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-27T13:16:46Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-26271"
    },
    {
      "cve": "CVE-2026-26955",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-26955"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, a malicious RDP server can trigger a heap buffer overflow in FreeRDP clients using the GDI surface pipeline (e.g., `xfreerdp`) by sending an RDPGFX ClearCodec surface command with an out-of-bounds destination rectangle. The `gdi_SurfaceCommand_ClearCodec()` handler does not call `is_within_surface()` to validate the command rectangle against the destination surface dimensions, allowing attacker-controlled `cmd-\u003eleft`/`cmd-\u003etop` (and subcodec rectangle offsets) to reach image copy routines that write into `surface-\u003edata` without bounds enforcement. The OOB write corrupts an adjacent `gdiGfxSurface` struct\u0027s `codecs*` pointer with attacker-controlled pixel data, and corruption of `codecs*` is sufficient to reach an indirect function pointer call (`NSC_CONTEXT.decode` at `nsc.c:500`) on a subsequent codec command - full instruction pointer (RIP) control demonstrated in exploitability harness. Users should upgrade to version 3.23.0 to receive a patch.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-26955",
          "url": "https://www.suse.com/security/cve/CVE-2026-26955"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1258982 for CVE-2026-26955",
          "url": "https://bugzilla.suse.com/1258982"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-27T13:16:46Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-26955"
    },
    {
      "cve": "CVE-2026-26965",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-26965"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, in the RLE planar decode path, `planar_decompress_plane_rle()` writes into `pDstData` at `((nYDst+y) * nDstStep) + (4*nXDst) + nChannel` without verifying that `(nYDst+nSrcHeight)` fits in the destination height or that `(nXDst+nSrcWidth)` fits in the destination stride. When `TempFormat != DstFormat`, `pDstData` becomes `planar-\u003epTempData` (sized for the desktop), while `nYDst` is only validated against the **surface** by `is_within_surface()`. A malicious RDP server can exploit this to perform a heap out-of-bounds write with attacker-controlled offset and pixel data on any connecting FreeRDP client. The OOB write reaches up to 132,096 bytes past the temp buffer end, and  on the brk heap (desktop \u2264 128x128), an adjacent `NSC_CONTEXT` struct\u0027s `decode` function pointer is overwritten with attacker-controlled pixel data - control-flow-relevant corruption (function pointer overwritten) demonstrated under deterministic heap layout (`nsc-\u003edecode = 0xFF414141FF414141`). Version 3.23.0 fixes the vulnerability.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-26965",
          "url": "https://www.suse.com/security/cve/CVE-2026-26965"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1258985 for CVE-2026-26965",
          "url": "https://bugzilla.suse.com/1258985"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-27T13:16:46Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-26965"
    },
    {
      "cve": "CVE-2026-26986",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-26986"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `rail_window_free` dereferences a freed `xfAppWindow` pointer during `HashTable_Free` cleanup because `xf_rail_window_common` calls `free(appWindow)` on title allocation failure without first removing the entry from the `railWindows` hash table, leaving a dangling pointer that is freed again on disconnect. Version 3.23.0 fixes the vulnerability.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-26986",
          "url": "https://www.suse.com/security/cve/CVE-2026-26986"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1258967 for CVE-2026-26986",
          "url": "https://bugzilla.suse.com/1258967"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-27T13:16:46Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-26986"
    },
    {
      "cve": "CVE-2026-27015",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-27015"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, a missing bounds check in `smartcard_unpack_read_size_align()` (`libfreerdp/utils/smartcard_pack.c:1703`) allows a malicious RDP server to crash the FreeRDP client via a reachable `WINPR_ASSERT` -\u003e `abort()`. The crash occurs in upstream builds where `WITH_VERBOSE_WINPR_ASSERT=ON` (default in FreeRDP 3.22.0 / current WinPR CMake defaults). Smartcard redirection must be explicitly enabled by the user (e.g., `xfreerdp /smartcard`; `/smartcard-logon` implies `/smartcard`). Version 3.23.0 fixes the issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-27015",
          "url": "https://www.suse.com/security/cve/CVE-2026-27015"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1258987 for CVE-2026-27015",
          "url": "https://bugzilla.suse.com/1258987"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-27T13:16:46Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-27015"
    },
    {
      "cve": "CVE-2026-27951",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-27951"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, the function `Stream_EnsureCapacity` can create an endless blocking loop. This may affect all client and server implementations using `FreeRDP`. For practical exploitation this will only work on 32bit systems where the available physical memory is `\u003e= SIZE_MAX`. Version 3.23.0 contains a patch. No known workarounds are available.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-27951",
          "url": "https://www.suse.com/security/cve/CVE-2026-27951"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1258939 for CVE-2026-27951",
          "url": "https://bugzilla.suse.com/1258939"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-27T13:16:46Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-27951"
    },
    {
      "cve": "CVE-2026-31806",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-31806"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0,  the gdi_surface_bits() function processes SURFACE_BITS_COMMAND messages sent by the RDP server. When the command is handled using NSCodec, the bmp.width and bmp.height values provided by the server are not properly validated against the actual desktop dimensions. A malicious RDP server can supply crafted bmp.width and bmp.height values that exceed the expected surface size. Because these values are used during bitmap decoding and memory operations without proper bounds checking, this can lead to a heap buffer overflow. Since the attacker can also control the associated pixel data transmitted by the server, the overflow may be exploitable to overwrite adjacent heap memory. This vulnerability is fixed in 3.24.0.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-31806",
          "url": "https://www.suse.com/security/cve/CVE-2026-31806"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1259653 for CVE-2026-31806",
          "url": "https://bugzilla.suse.com/1259653"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-27T13:16:46Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-31806"
    },
    {
      "cve": "CVE-2026-31883",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-31883"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, a size_t underflow in the IMA-ADPCM and MS-ADPCM audio decoders leads to heap-buffer-overflow write via the RDPSND audio channel. In libfreerdp/codec/dsp.c, the IMA-ADPCM and MS-ADPCM decoders subtract block header sizes from a size_t variable without checking for underflow. When nBlockAlign (received from the server) is set such that size % block_size == 0 triggers the header parsing at a point where size is smaller than the header (4 or 8 bytes), the subtraction wraps size to ~SIZE_MAX. The while (size \u003e 0) loop then continues for an astronomical number of iterations. This vulnerability is fixed in 3.24.0.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-31883",
          "url": "https://www.suse.com/security/cve/CVE-2026-31883"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1259679 for CVE-2026-31883",
          "url": "https://bugzilla.suse.com/1259679"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-27T13:16:46Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-31883"
    },
    {
      "cve": "CVE-2026-31885",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-31885"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, there is an out-of-bounds read in MS-ADPCM and IMA-ADPCM decoders due to unchecked predictor and step_index values from input data. This vulnerability is fixed in 3.24.0.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.x86_64",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.aarch64",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.ppc64le",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.s390x",
          "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-31885",
          "url": "https://www.suse.com/security/cve/CVE-2026-31885"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1259686 for CVE-2026-31885",
          "url": "https://bugzilla.suse.com/1259686"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-devel-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-proxy-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:freerdp2-server-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libfreerdp2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:libwinpr2-2-2.11.7-bp160.3.1.x86_64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.aarch64",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.ppc64le",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.s390x",
            "openSUSE Leap 16.0:winpr2-devel-2.11.7-bp160.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-27T13:16:46Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-31885"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.