FreeRDP has 61 CVEs on record between 2025 and 2026. Disclosure cadence is accelerating: 42 in the last 90 days against 5 in the 90 before. The busiest recent month was September 2026 with 22. The median CVSS is 7.5 (high), with 17 rated critical. None have a confirmed exploitation report. The dominant weakness classes are CWE-125 (15) and CWE-122 (14).

CVEs per month

Last 12 months, by publish date

1025/101125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/09

Exploited share: 0% vs 1% corpus
Median CVSS: 7.5
Publish → KEV: —
Last 90 days: 42 prev 5

Weakness classes

Products

FreeRDP 61

Follow FreeRDP:RSS feed Save a search →Embed badge ↗

Total CVEs

Critical

CISA KEV

Exploited

Worst active — by depth score

FreeRDP vulnerabilities

CVEs affecting FreeRDP, newest first. Open any entry for full detail, references, and exploit status.

61 CVEsRSS

CVE-2025-4478Medium· 6.5

1y ago

A flaw was found in the FreeRDP used by Anaconda's remote install feature, where a crafted RDP packet could trigger a segmentation fault

A flaw was found in the FreeRDP used by Anaconda's remote install feature, where a crafted RDP packet could trigger a segmentation fault. This issue causes the service to crash and remain defunct, resulting in a denial of service. It occ…

▾ Sunlitfreerdp · freerdpEPSS 0.52%via NVD