CVE-2026-33985 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	5.9 MEDIUM	NETWORK	HIGH	NONE	CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:L

Base Score

CVSS 3.x

EPSS Score

Percentile: 14%

Affected Products (NVD)

Vendor	Product	Version
freerdp	freerdp	𝑥 < 3.24.2

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

freerdp2

bookworm	no-dsa
bullseye	vulnerable
bullseye (security)	vulnerable

freerdp3

forky	3.24.2+dfsg-1 fixed
sid	3.26.0+dfsg-1 fixed
trixie	no-dsa

Red Hat Enterprise Linux Releases

Red Hat Product

Release

freerdp

RHEL 8	2:2.11.7-9.el8_10 fixed
RHEL 8.6 AUS	2:2.2.0-7.el8_6.8 fixed
RHEL 8.6 E4S	2:2.2.0-7.el8_6.8 fixed
RHEL 8.6 TUS	2:2.2.0-7.el8_6.8 fixed
RHEL 8.8 E4S	2:2.2.0-12.el8_8.8 fixed
RHEL 8.8 TUS	2:2.2.0-12.el8_8.8 fixed
RHEL 9	2:2.11.7-1.el9_7.7 fixed

freerdp-devel

RHEL 8	2:2.11.7-9.el8_10 fixed
RHEL 9	2:2.11.7-1.el9_7.7 fixed

freerdp-libs

RHEL 8	2:2.11.7-9.el8_10 fixed
RHEL 8.6 AUS	2:2.2.0-7.el8_6.8 fixed
RHEL 8.6 E4S	2:2.2.0-7.el8_6.8 fixed
RHEL 8.6 TUS	2:2.2.0-7.el8_6.8 fixed
RHEL 8.8 E4S	2:2.2.0-12.el8_8.8 fixed
RHEL 8.8 TUS	2:2.2.0-12.el8_8.8 fixed
RHEL 9	2:2.11.7-1.el9_7.7 fixed

libwinpr

RHEL 8	2:2.11.7-9.el8_10 fixed
RHEL 8.6 AUS	2:2.2.0-7.el8_6.8 fixed
RHEL 8.6 E4S	2:2.2.0-7.el8_6.8 fixed
RHEL 8.6 TUS	2:2.2.0-7.el8_6.8 fixed
RHEL 8.8 E4S	2:2.2.0-12.el8_8.8 fixed
RHEL 8.8 TUS	2:2.2.0-12.el8_8.8 fixed
RHEL 9	2:2.11.7-1.el9_7.7 fixed

libwinpr-devel

RHEL 8	2:2.11.7-9.el8_10 fixed
RHEL 8.6 AUS	2:2.2.0-7.el8_6.8 fixed
RHEL 8.6 E4S	2:2.2.0-7.el8_6.8 fixed
RHEL 8.6 TUS	2:2.2.0-7.el8_6.8 fixed
RHEL 8.8 E4S	2:2.2.0-12.el8_8.8 fixed
RHEL 8.8 TUS	2:2.2.0-12.el8_8.8 fixed
RHEL 9	2:2.11.7-1.el9_7.7 fixed

Common Weakness Enumeration

CWE-125 - Out-of-bounds Read
The software reads data past the end, or before the beginning, of the intended buffer.

Vulnerability Media Exposure

[GERMAN] FreeRDP: Mehrere Schwachstellen
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in FreeRDP ausnutzen, um potenziell beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder andere, nicht näher spezifizierte Angriffe durchzuführen.
Published: 2026-03-25T23:00:00+00:00

References

https://github.com/FreeRDP/FreeRDP/commit/c49d1ad43b8c7b32794d0250f2623c2dccd7ef25

https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-x6gr-8p7h-5h85