Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.1FreeRDP 3.11.0 before 3.32.0 does not validate that AVC444 and AVC444v2 region widths are even before YUV444 conversion, so an odd width reaches an assertion and aborts the client.EPSS 0.3%Oct 13, 2026
- Medium5.1FreeRDP 3.0.0-beta1 before 3.32.0 on Unix builds with PKCS#11 support has a stack-based buffer overflow in wprintKeyName() in WinPR's NCrypt PKCS#11 provider.EPSS 0.1%Oct 13, 2026
- UnknownCVE-2026-109939EPSS 0.3%Oct 13, 2026
- High7.1Positive mapped-video coordinates overflow and abort FreeRDP clients A malicious or compromised RDP server can terminate a FreeRDP client after the user connects with…EPSS 0.3%Oct 13, 2026
- UnknownFreeRDP from 2.0.0-beta1 before 3.28.0 contains an out-of-bounds read vulnerability in smartcard_LocateCardsByATRA_Call because the ATR pattern cbAtr byte count is not capped.EPSS 0.3%Oct 13, 2026
- High8.8FreeRDP from 3.0.0-beta1 before 3.32.0 contains a use-after-free vulnerability in smartcard handling that allows attackers to access a freed smartcard handle object after an invaliEPSS 0.3%Oct 13, 2026
- UnknownMalicious code in @accenturecodefoundry/mfe-pot-shared-ui-scds-core (npm)Oct 13, 2026
- Medium4.7A flaw was found in the clevis PKCS#11 pin.EPSS 0.1%Oct 13, 2026
- UnknownMitigation bypass in the File Handling component.EPSS 0.2%Oct 13, 2026
- Medium6.5Denial-of-service in the Printing: Output component.EPSS 0.2%Oct 13, 2026
- UnknownRace condition in the XPCOM component.EPSS 0.2%Oct 13, 2026
- Medium6.5Denial-of-service in the WebRTC component.EPSS 0.2%Oct 13, 2026
- Medium4.3Information disclosure in the Networking component.EPSS 0.2%Oct 13, 2026
- Medium5.4Use-after-free in the XML component.EPSS 0.2%Oct 13, 2026
- UnknownIncorrect boundary conditions in the JavaScript Engine component.EPSS 0.2%Oct 13, 2026
- Low2.5A flaw was found in m17n-lib.EPSS 0.1%Oct 13, 2026
- Unknownpyjwt vulnerabilitiesOct 13, 2026
- Unknownpython315-3.15.0-1.1 on GA mediaOct 13, 2026
- Unknownpython314-3.14.8-1.1 on GA mediaOct 13, 2026
- Unknownpython313-3.13.16-1.1 on GA mediaOct 13, 2026
- Unknownpython312-3.12.15-1.1 on GA mediaOct 13, 2026
- Unknownpython311-3.11.17-1.1 on GA mediaOct 13, 2026
- Unknownpython313-vllm-0.30.0-2.1 on GA mediaOct 13, 2026
- Unknownpython313-urllib3_1-1.26.20-8.1 on GA mediaOct 13, 2026
- Unknownpython313-sglang-0.5.21-2.1 on GA mediaOct 13, 2026