RHSA-2026:75570
Vulnerability from csaf_opensuse - Published: 2026-10-05 00:00 - Updated: 2026-10-07 08:32Summary
security update for freerdp
Severity
Important
Notes
Title of the patch: security update for freerdp
Description of the patch: This security update provides a functional equivalent of RHSA-2026:75570.
The original Red Hat(R) advisory is available from the Red Hat web site at
https://access.redhat.com/errata/RHSA-2026:75570.
Patchnames: RHSA-2026:75570
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
6.5 (Medium)
Affected products
Recommended
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Liberty Linux 10:freerdp-2:3.10.3-12.el10_2.14.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 10:freerdp-devel-2:3.10.3-12.el10_2.14.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 10:freerdp-libs-2:3.10.3-12.el10_2.14.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 10:freerdp-server-2:3.10.3-12.el10_2.14.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 10:libwinpr-2:3.10.3-12.el10_2.14.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 10:libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
4.3 (Medium)
Affected products
Recommended
6 products, the same list as for
CVE-2026-85089
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
6 products, the same list as for
CVE-2026-85089
Threats
Impact
important
7.1 (High)
Affected products
Recommended
6 products, the same list as for
CVE-2026-85089
Threats
Impact
important
7.1 (High)
Affected products
Recommended
6 products, the same list as for
CVE-2026-85089
Threats
Impact
important
6.5 (Medium)
Affected products
Recommended
6 products, the same list as for
CVE-2026-85089
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
6 products, the same list as for
CVE-2026-85089
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
6 products, the same list as for
CVE-2026-85089
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
6 products, the same list as for
CVE-2026-85089
Threats
Impact
moderate
4.3 (Medium)
Affected products
Recommended
6 products, the same list as for
CVE-2026-85089
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
6 products, the same list as for
CVE-2026-85089
Threats
Impact
important
References
37 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "security update for freerdp",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This security update provides a functional equivalent of RHSA-2026:75570.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2026:75570.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "RHSA-2026:75570",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2026_75570.json"
},
{
"category": "self",
"summary": "URL for RHSA-2026:75570",
"url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2026-October/008082.html"
},
{
"category": "self",
"summary": "E-Mail link for RHSA-2026:75570",
"url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2026-October/008082.html"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-85089 page",
"url": "https://www.suse.com/security/cve/CVE-2026-85089/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-91946 page",
"url": "https://www.suse.com/security/cve/CVE-2026-91946/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-91947 page",
"url": "https://www.suse.com/security/cve/CVE-2026-91947/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-91950 page",
"url": "https://www.suse.com/security/cve/CVE-2026-91950/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-91953 page",
"url": "https://www.suse.com/security/cve/CVE-2026-91953/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-91954 page",
"url": "https://www.suse.com/security/cve/CVE-2026-91954/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-91956 page",
"url": "https://www.suse.com/security/cve/CVE-2026-91956/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-91959 page",
"url": "https://www.suse.com/security/cve/CVE-2026-91959/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-91960 page",
"url": "https://www.suse.com/security/cve/CVE-2026-91960/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-91963 page",
"url": "https://www.suse.com/security/cve/CVE-2026-91963/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-91964 page",
"url": "https://www.suse.com/security/cve/CVE-2026-91964/"
}
],
"title": "security update for freerdp",
"tracking": {
"current_release_date": "2026-10-07T08:32:07Z",
"generator": {
"date": "2026-10-05T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "RHSA-2026:75570",
"initial_release_date": "2026-10-05T00:00:00Z",
"revision_history": [
{
"date": "2026-10-05T00:00:00Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-10-06T17:34:49Z",
"number": "2",
"summary": "unknown changes"
},
{
"date": "2026-10-07T08:32:07Z",
"number": "3",
"summary": "unknown changes"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "freerdp-2:3.10.3-12.el10_2.14.x86_64",
"product": {
"name": "freerdp-2:3.10.3-12.el10_2.14.x86_64",
"product_id": "freerdp-2:3.10.3-12.el10_2.14.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:freerdp:freerdp:3.10.3:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/freerdp@3.10.3-12.el10_2.14?arch=x86_64\u0026epoch=2\u0026upstream=freerdp-2:3.10.3-12.el10_2.14.src.rpm"
}
}
},
{
"category": "product_version",
"name": "freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"product": {
"name": "freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"product_id": "freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:freerdp:freerdp:3.10.3:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/freerdp-devel@3.10.3-12.el10_2.14?arch=x86_64\u0026epoch=2\u0026upstream=freerdp-2:3.10.3-12.el10_2.14.src.rpm"
}
}
},
{
"category": "product_version",
"name": "freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"product": {
"name": "freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"product_id": "freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/freerdp-libs@3.10.3-12.el10_2.14?arch=x86_64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"product": {
"name": "freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"product_id": "freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:freerdp:freerdp:3.10.3:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/freerdp-server@3.10.3-12.el10_2.14?arch=x86_64\u0026epoch=2\u0026upstream=freerdp-2:3.10.3-12.el10_2.14.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"product": {
"name": "libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"product_id": "libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/libwinpr@3.10.3-12.el10_2.14?arch=x86_64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64",
"product": {
"name": "libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64",
"product_id": "libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/libwinpr-devel@3.10.3-12.el10_2.14?arch=x86_64\u0026epoch=2"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Liberty Linux 10",
"product": {
"name": "SUSE Liberty Linux 10",
"product_id": "SUSE Liberty Linux 10",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sll:10"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-2:3.10.3-12.el10_2.14.x86_64 as component of SUSE Liberty Linux 10",
"product_id": "SUSE Liberty Linux 10:freerdp-2:3.10.3-12.el10_2.14.x86_64"
},
"product_reference": "freerdp-2:3.10.3-12.el10_2.14.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-devel-2:3.10.3-12.el10_2.14.x86_64 as component of SUSE Liberty Linux 10",
"product_id": "SUSE Liberty Linux 10:freerdp-devel-2:3.10.3-12.el10_2.14.x86_64"
},
"product_reference": "freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-libs-2:3.10.3-12.el10_2.14.x86_64 as component of SUSE Liberty Linux 10",
"product_id": "SUSE Liberty Linux 10:freerdp-libs-2:3.10.3-12.el10_2.14.x86_64"
},
"product_reference": "freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-server-2:3.10.3-12.el10_2.14.x86_64 as component of SUSE Liberty Linux 10",
"product_id": "SUSE Liberty Linux 10:freerdp-server-2:3.10.3-12.el10_2.14.x86_64"
},
"product_reference": "freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwinpr-2:3.10.3-12.el10_2.14.x86_64 as component of SUSE Liberty Linux 10",
"product_id": "SUSE Liberty Linux 10:libwinpr-2:3.10.3-12.el10_2.14.x86_64"
},
"product_reference": "libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64 as component of SUSE Liberty Linux 10",
"product_id": "SUSE Liberty Linux 10:libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64"
},
"product_reference": "libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 10"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-85089",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-85089"
}
],
"notes": [
{
"category": "general",
"text": "FreeRDP versions 3.0.0 through 3.30.0 (before 3.31.0) transmit uninitialized heap memory in Save Session Info PDU reserved padding fields. Three PDU writers in libfreerdp/core/info.c (rdp_write_logon_info_v2, rdp_write_logon_info_plain, and rdp_write_logon_info_ex) use Stream_Seek instead of Stream_Zero for reserved pad bytes (up to 576 bytes), leaving previously freed heap contents in the outgoing PDU. Because the send buffer is allocated with malloc (not zeroed), stale heap data - which may include cleartext credentials from prior sessions - can be sent to the receiving peer. FreeRDP-based servers using rdpUpdate::SaveSessionInfo and freerdp-proxy (which forwards these PDUs) are affected, allowing disclosure of server/proxy process memory to a downstream client.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 10:freerdp-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-85089",
"url": "https://www.suse.com/security/cve/CVE-2026-85089"
},
{
"category": "external",
"summary": "SUSE Bug 1278712 for CVE-2026-85089",
"url": "https://bugzilla.suse.com/1278712"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 10:freerdp-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 10:freerdp-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-05T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-85089"
},
{
"cve": "CVE-2026-91946",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-91946"
}
],
"notes": [
{
"category": "general",
"text": "FreeRDP versions before 3.31.0 contain an information disclosure vulnerability in the RDPGFX server\u0027s ResetGraphics PDU serializer that fails to initialize padding bytes in the fixed 340-byte wire format. Attackers can receive uninitialized heap memory including live pointers and GLib function addresses transmitted in the PDU, defeating heap ASLR and disclosing the GLib module base address.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 10:freerdp-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-91946",
"url": "https://www.suse.com/security/cve/CVE-2026-91946"
},
{
"category": "external",
"summary": "SUSE Bug 1280877 for CVE-2026-91946",
"url": "https://bugzilla.suse.com/1280877"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 10:freerdp-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 10:freerdp-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-05T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-91946"
},
{
"cve": "CVE-2026-91947",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-91947"
}
],
"notes": [
{
"category": "general",
"text": "FreeRDP server versions before 3.31.0 contain a use-after-free vulnerability in the DRDYNVC parser that dereferences a channel pointer after releasing the synchronization lock. Authenticated clients can race AUDIN channel closure messages against DRDYNVC data parsing to trigger heap-use-after-free when accessing freed channel objects.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 10:freerdp-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-91947",
"url": "https://www.suse.com/security/cve/CVE-2026-91947"
},
{
"category": "external",
"summary": "SUSE Bug 1280878 for CVE-2026-91947",
"url": "https://bugzilla.suse.com/1280878"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 10:freerdp-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 10:freerdp-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-05T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-91947"
},
{
"cve": "CVE-2026-91950",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-91950"
}
],
"notes": [
{
"category": "general",
"text": "FreeRDP before 3.31.0 contains an out-of-bounds read vulnerability in the rdpdr_dump_packet function due to 32-bit unsigned integer wraparound in buffer bounds validation. A malicious RDP server can send a crafted RDPDR packet with computerNameLen set to 0xFFFFFFF0 to bypass bounds checks and trigger memory reads past the packet buffer, causing client crashes or heap disclosure in logs.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 10:freerdp-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-91950",
"url": "https://www.suse.com/security/cve/CVE-2026-91950"
},
{
"category": "external",
"summary": "SUSE Bug 1280883 for CVE-2026-91950",
"url": "https://bugzilla.suse.com/1280883"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 10:freerdp-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 10:freerdp-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-05T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-91950"
},
{
"cve": "CVE-2026-91953",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-91953"
}
],
"notes": [
{
"category": "general",
"text": "FreeRDP versions before 3.31.0 contain a heap buffer overflow vulnerability in nego_send_negotiation_request() that fails to validate the LB_LOAD_BALANCE_INFO field length before writing to a fixed 512-byte buffer. A malicious RDP server or man-in-the-middle can send a Server Redirection PDU with an oversized LB_LOAD_BALANCE_INFO value to overflow the buffer with attacker-controlled content, causing denial of service or heap corruption before authentication completes.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 10:freerdp-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-91953",
"url": "https://www.suse.com/security/cve/CVE-2026-91953"
},
{
"category": "external",
"summary": "SUSE Bug 1280887 for CVE-2026-91953",
"url": "https://bugzilla.suse.com/1280887"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 10:freerdp-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 10:freerdp-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-05T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-91953"
},
{
"cve": "CVE-2026-91954",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-91954"
}
],
"notes": [
{
"category": "general",
"text": "FreeRDP before 3.31.0 contains a null pointer dereference vulnerability in gdi_surface_bits when processing Surface Bits commands with NSCodec codec ID. A malicious RDP server can crash a FreeRDP client by sending a crafted Surface Bits command claiming to use NSCodec, even when the codec is disabled.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 10:freerdp-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-91954",
"url": "https://www.suse.com/security/cve/CVE-2026-91954"
},
{
"category": "external",
"summary": "SUSE Bug 1280888 for CVE-2026-91954",
"url": "https://bugzilla.suse.com/1280888"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 10:freerdp-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 10:freerdp-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-05T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-91954"
},
{
"cve": "CVE-2026-91956",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-91956"
}
],
"notes": [
{
"category": "general",
"text": "FreeRDP before 3.31.0 contains an out-of-bounds read vulnerability in the URBDRC channel\u0027s func_get_ep_desc function that indexes interface arrays by position instead of protocol field InterfaceNumber. A malicious RDP server can send a crafted SELECT_CONFIGURATION message with permuted InterfaceNumber values to read past allocated heap memory and crash the client.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 10:freerdp-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-91956",
"url": "https://www.suse.com/security/cve/CVE-2026-91956"
},
{
"category": "external",
"summary": "SUSE Bug 1280891 for CVE-2026-91956",
"url": "https://bugzilla.suse.com/1280891"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 10:freerdp-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 10:freerdp-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-05T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-91956"
},
{
"cve": "CVE-2026-91959",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-91959"
}
],
"notes": [
{
"category": "general",
"text": "FreeRDP before 3.31.0 contains a buffer over-read vulnerability in the rts_read_result function within the RPC gateway transport parser. Attackers can send a malicious BIND_ACK PDU with a truncated result entry to trigger an out-of-bounds read causing process abort.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 10:freerdp-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-91959",
"url": "https://www.suse.com/security/cve/CVE-2026-91959"
},
{
"category": "external",
"summary": "SUSE Bug 1280894 for CVE-2026-91959",
"url": "https://bugzilla.suse.com/1280894"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 10:freerdp-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 10:freerdp-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-05T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-91959"
},
{
"cve": "CVE-2026-91960",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-91960"
}
],
"notes": [
{
"category": "general",
"text": "FreeRDP versions before 3.31.0 contain an integer overflow in WinPR\u0027s Stream_EnsureRemainingCapacity function that allows remote attackers to cause denial of service. A malicious RD Gateway peer can send a WebSocket Ping frame with a crafted 64-bit extended payload length to trigger integer wraparound, resulting in a double free that crashes the FreeRDP client during connection.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 10:freerdp-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-91960",
"url": "https://www.suse.com/security/cve/CVE-2026-91960"
},
{
"category": "external",
"summary": "SUSE Bug 1280965 for CVE-2026-91960",
"url": "https://bugzilla.suse.com/1280965"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 10:freerdp-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 10:freerdp-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-05T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-91960"
},
{
"cve": "CVE-2026-91963",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-91963"
}
],
"notes": [
{
"category": "general",
"text": "FreeRDP versions before 3.31.0 contain an uninitialized heap memory disclosure vulnerability in the urbdrc USB redirection channel. A malicious RDP server can induce failing USB transfers to read uninitialized heap memory from the client, defeating ASLR and enabling remote code execution when chained with memory corruption vulnerabilities.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 10:freerdp-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-91963",
"url": "https://www.suse.com/security/cve/CVE-2026-91963"
},
{
"category": "external",
"summary": "SUSE Bug 1280961 for CVE-2026-91963",
"url": "https://bugzilla.suse.com/1280961"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 10:freerdp-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 10:freerdp-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-05T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-91963"
},
{
"cve": "CVE-2026-91964",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-91964"
}
],
"notes": [
{
"category": "general",
"text": "FreeRDP versions before 3.31.0 contain a heap-based buffer overflow in nego_send_negotiation_request when processing Server Redirection PDU messages with attacker-controlled LoadBalanceInfo fields. A malicious RDP server can trigger the overflow by sending an arbitrary-length field that gets written to a fixed 512-byte buffer without validation, causing client crashes or potential code execution when chained with memory disclosure.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 10:freerdp-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-91964",
"url": "https://www.suse.com/security/cve/CVE-2026-91964"
},
{
"category": "external",
"summary": "SUSE Bug 1280959 for CVE-2026-91964",
"url": "https://bugzilla.suse.com/1280959"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 10:freerdp-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 10:freerdp-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"SUSE Liberty Linux 10:libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-05T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-91964"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…