[Git][security-tracker-team/security-tracker][master] Some CVEs assigned for FreeRDP issues
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Wed Nov 4 08:03:37 GMT 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
61a2111f by Salvatore Bonaccorso at 2026-11-04T09:02:25+01:00
Some CVEs assigned for FreeRDP issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -619,54 +619,6 @@ CVE-2026-121414 (Parse Server before 8.6.110 and 9.0.0 before 9.10.6-alpha.2 fai
NOT-FOR-US: Parse Server
CVE-2026-121413 (Parse Server before 8.6.112 and 9.0.0 before 9.10.6-alpha.4 contains a ...)
NOT-FOR-US: Parse Server
-CVE-2026-121409 (FreeRDP before 3.32.2 contains a denial of service vulnerability that ...)
- TODO: check
-CVE-2026-121408 (FreeRDP before 3.32.2 contains a use-after-free in the urbdrc USB redi ...)
- TODO: check
-CVE-2026-121407 (FreeRDP before 3.32.2 contains a denial of service vulnerability in th ...)
- TODO: check
-CVE-2026-121406 (FreeRDP before 3.32.2 allows a client assertion abort because rdpgfx_o ...)
- TODO: check
-CVE-2026-121405 (FreeRDP before 3.32.2 fails to cap the OutputBufferLength in serial de ...)
- TODO: check
-CVE-2026-121404 (FreeRDP before 3.32.2 contains a denial of service vulnerability in th ...)
- TODO: check
-CVE-2026-121403 (FreeRDP before 3.32.2 contains a denial of service vulnerability where ...)
- TODO: check
-CVE-2026-121402 (FreeRDP before 3.32.2 contains a NULL pointer dereference vulnerabilit ...)
- TODO: check
-CVE-2026-121401 (FreeRDP before 3.32.2 contains a denial of service vulnerability where ...)
- TODO: check
-CVE-2026-121400 (FreeRDP before 3.32.2 contains a denial-of-service vulnerability in rd ...)
- TODO: check
-CVE-2026-121399 (FreeRDP before 3.32.2 contains a memory allocation vulnerability in rd ...)
- TODO: check
-CVE-2026-121398 (FreeRDP before 3.32.2 contains a cross-thread use-after-free vulnerabi ...)
- TODO: check
-CVE-2026-121397 (FreeRDP before 3.32.2 contains a heap buffer over-read vulnerability i ...)
- TODO: check
-CVE-2026-121396 (FreeRDP clients from 3.0.0 before 3.32.2 built with verbose WinPR asse ...)
- TODO: check
-CVE-2026-121395 (FreeRDP from 3.17.0 before 3.32.2 contains an assertion failure in the ...)
- TODO: check
-CVE-2026-121394 (FreeRDP from 3.11.0 before 3.32.2 contains an assertion failure in the ...)
- TODO: check
-CVE-2026-121393 (FreeRDP from 3.0.0 before 3.32.2 contains a denial of service vulnerab ...)
- TODO: check
-CVE-2026-121392 (FreeRDP before 3.32.2 contains an improper certificate validation vuln ...)
- TODO: check
-CVE-2026-121391 (FreeRDP from 3.0.0 before 3.32.2 contains a file descriptor leak in pa ...)
- TODO: check
-CVE-2026-121390 (FreeRDP 3.0.0 before 3.32.2 built with WITH_AAD=ON contains a reachabl ...)
- TODO: check
-CVE-2026-121389 (FreeRDP from 3.27.0 before 3.32.2 contains a denial of service vulnera ...)
- TODO: check
-CVE-2026-121388 (FreeRDP from 3.0.0 before 3.32.2 contains an uncontrolled resource all ...)
- TODO: check
-CVE-2026-121387 (FreeRDP 2.0.0 before 3.32.2 contains an out-of-bounds read vulnerabili ...)
- TODO: check
-CVE-2026-121386 (FreeRDP before 3.32.2 contains a denial of service vulnerability in Wi ...)
- TODO: check
CVE-2026-121382 (A vulnerability was determined in Netcore NBR100V2 1.3.240614.030928. ...)
NOT-FOR-US: Netcore
CVE-2026-121263 (A vulnerability was determined in phpMyAdmin MoTranslator up to 6.0.1. ...)
@@ -37586,19 +37538,19 @@ CVE-2026-XXXX [GHSA-8m87-jj8p-2fqc]
- freerdp3 3.33.0+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-8m87-jj8p-2fqc
-CVE-2026-XXXX [GHSA-799q-hjgw-g55g]
+CVE-2026-121386 [GHSA-799q-hjgw-g55g]
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-799q-hjgw-g55g
-CVE-2026-XXXX [GHSA-cg4f-57hc-v7w7]
+CVE-2026-121395 [GHSA-cg4f-57hc-v7w7]
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-cg4f-57hc-v7w7
-CVE-2026-XXXX [GHSA-rrp5-666j-g6gp]
+CVE-2026-121388 [GHSA-rrp5-666j-g6gp]
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-rrp5-666j-g6gp
-CVE-2026-XXXX [GHSA-wg7g-gx9g-r96c]
+CVE-2026-121387 [GHSA-wg7g-gx9g-r96c]
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-wg7g-gx9g-r96c
@@ -37606,31 +37558,31 @@ CVE-2026-XXXX [GHSA-f53w-3364-jr35]
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-f53w-3364-jr35
-CVE-2026-XXXX [GHSA-66mr-7wc7-23vc]
+CVE-2026-121389 [GHSA-66mr-7wc7-23vc]
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-66mr-7wc7-23vc
-CVE-2026-XXXX [GHSA-hqf8-95c7-6r92]
+CVE-2026-121390 [GHSA-hqf8-95c7-6r92]
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-hqf8-95c7-6r92
-CVE-2026-XXXX [GHSA-8g9g-hqqp-fw69]
+CVE-2026-121391 [GHSA-8g9g-hqqp-fw69]
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-8g9g-hqqp-fw69
-CVE-2026-XXXX [GHSA-jq25-3374-4262]
+CVE-2026-121392 [GHSA-jq25-3374-4262]
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-jq25-3374-4262
-CVE-2026-XXXX [GHSA-7qw2-8h66-pvpw]
+CVE-2026-121393 [GHSA-7qw2-8h66-pvpw]
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-7qw2-8h66-pvpw
-CVE-2026-XXXX [GHSA-5j39-x36c-x9pm]
+CVE-2026-121394 [GHSA-5j39-x36c-x9pm]
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-5j39-x36c-x9pm
-CVE-2026-XXXX [GHSA-6p3w-fv52-cf24]
+CVE-2026-121396 [GHSA-6p3w-fv52-cf24]
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-6p3w-fv52-cf24
@@ -37638,23 +37590,23 @@ CVE-2026-XXXX [GHSA-4qq4-qwxq-49m8]
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-4qq4-qwxq-49m8
-CVE-2026-XXXX [GHSA-x7w3-32ch-x2jq]
+CVE-2026-121397 [GHSA-x7w3-32ch-x2jq]
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-x7w3-32ch-x2jq
-CVE-2026-XXXX [GHSA-v3q2-qjvf-7rqw]
+CVE-2026-121398 [GHSA-v3q2-qjvf-7rqw]
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-v3q2-qjvf-7rqw
-CVE-2026-XXXX [GHSA-4vh4-3pc3-32p7]
+CVE-2026-121399 [GHSA-4vh4-3pc3-32p7]
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-4vh4-3pc3-32p7
-CVE-2026-XXXX [GHSA-x4x6-2hrm-hvq9]
+CVE-2026-121400 [GHSA-x4x6-2hrm-hvq9]
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-x4x6-2hrm-hvq9
-CVE-2026-XXXX [GHSA-8rjm-m7xg-mg6m]
+CVE-2026-121401 [GHSA-8rjm-m7xg-mg6m]
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-8rjm-m7xg-mg6m
@@ -37694,27 +37646,27 @@ CVE-2026-XXXX [GHSA-x26g-fp9v-c2pg]
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-x26g-fp9v-c2pg
-CVE-2026-XXXX [GHSA-c426-ppvf-jpfg]
+CVE-2026-121402 [GHSA-c426-ppvf-jpfg]
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-c426-ppvf-jpfg
-CVE-2026-XXXX [GHSA-5qqp-5ffm-m3p9]
+CVE-2026-121403 [GHSA-5qqp-5ffm-m3p9]
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-5qqp-5ffm-m3p9
-CVE-2026-XXXX [GHSA-fqcj-rwww-2498]
+CVE-2026-121404 [GHSA-fqcj-rwww-2498]
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-fqcj-rwww-2498
-CVE-2026-XXXX [GHSA-r387-jjq3-87hv]
+CVE-2026-121405 [GHSA-r387-jjq3-87hv]
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-r387-jjq3-87hv
-CVE-2026-XXXX [GHSA-2c9x-4gr7-hrwx]
+CVE-2026-121406 [GHSA-2c9x-4gr7-hrwx]
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-2c9x-4gr7-hrwx
-CVE-2026-XXXX [GHSA-x8vp-ff7m-294g]
+CVE-2026-121407 [GHSA-x8vp-ff7m-294g]
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-x8vp-ff7m-294g
@@ -37726,11 +37678,11 @@ CVE-2026-XXXX [GHSA-qw7w-hhxq-763c]
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-qw7w-hhxq-763c
-CVE-2026-XXXX [GHSA-w897-ffhv-5j7g]
+CVE-2026-121408 [GHSA-w897-ffhv-5j7g]
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-w897-ffhv-5j7g
-CVE-2026-XXXX [GHSA-3hf9-w6hr-hf9j]
+CVE-2026-121409 [GHSA-3hf9-w6hr-hf9j]
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-3hf9-w6hr-hf9j
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/61a2111f8b2db4350d0f1bfe5196b210c2a208d1
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/61a2111f8b2db4350d0f1bfe5196b210c2a208d1
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261104/c9e6f8dc/attachment.htm>
More information about the debian-security-tracker-commits
mailing list