Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Red Hat Remote Desktop Vulnerability in FreeRDP

published 6 months ago

Summary

A security issue has been discovered in the FreeRDP remote desktop software used by Red Hat systems. This issue allows an attacker to potentially execute malicious code on a remote system. To fix this issue, update your Red Hat system to the latest version of FreeRDP.

What to do

Update redhat freerdp to version 2:2.2.0-12.el8_4.
Update redhat freerdp-debuginfo to version 2:2.2.0-12.el8_4.
Update redhat freerdp-debugsource to version 2:2.2.0-12.el8_4.
Update redhat freerdp-libs to version 2:2.2.0-12.el8_4.
Update redhat freerdp-libs-debuginfo to version 2:2.2.0-12.el8_4.
Update redhat libwinpr to version 2:2.2.0-12.el8_4.
Update redhat libwinpr-debuginfo to version 2:2.2.0-12.el8_4.
Update redhat libwinpr-devel to version 2:2.2.0-12.el8_4.

Affected software

Ecosystem	Vendor	Product	Affected versions
Red Hat:rhel_aus:8.4::appstream	redhat	freerdp	< 2:2.2.0-12.el8_4 Fix: upgrade to 2:2.2.0-12.el8_4
Red Hat:rhel_aus:8.4::appstream	redhat	freerdp-debuginfo	< 2:2.2.0-12.el8_4 Fix: upgrade to 2:2.2.0-12.el8_4
Red Hat:rhel_aus:8.4::appstream	redhat	freerdp-debugsource	< 2:2.2.0-12.el8_4 Fix: upgrade to 2:2.2.0-12.el8_4
Red Hat:rhel_aus:8.4::appstream	redhat	freerdp-libs	< 2:2.2.0-12.el8_4 Fix: upgrade to 2:2.2.0-12.el8_4
Red Hat:rhel_aus:8.4::appstream	redhat	freerdp-libs-debuginfo	< 2:2.2.0-12.el8_4 Fix: upgrade to 2:2.2.0-12.el8_4
Red Hat:rhel_aus:8.4::appstream	redhat	libwinpr	< 2:2.2.0-12.el8_4 Fix: upgrade to 2:2.2.0-12.el8_4
Red Hat:rhel_aus:8.4::appstream	redhat	libwinpr-debuginfo	< 2:2.2.0-12.el8_4 Fix: upgrade to 2:2.2.0-12.el8_4
Red Hat:rhel_aus:8.4::appstream	redhat	libwinpr-devel	< 2:2.2.0-12.el8_4 Fix: upgrade to 2:2.2.0-12.el8_4
Red Hat:rhel_eus_long_life:8.4::appstream	redhat	freerdp	< 2:2.2.0-12.el8_4 Fix: upgrade to 2:2.2.0-12.el8_4
Red Hat:rhel_eus_long_life:8.4::appstream	redhat	freerdp-debuginfo	< 2:2.2.0-12.el8_4 Fix: upgrade to 2:2.2.0-12.el8_4
Red Hat:rhel_eus_long_life:8.4::appstream	redhat	freerdp-debugsource	< 2:2.2.0-12.el8_4 Fix: upgrade to 2:2.2.0-12.el8_4
Red Hat:rhel_eus_long_life:8.4::appstream	redhat	freerdp-libs	< 2:2.2.0-12.el8_4 Fix: upgrade to 2:2.2.0-12.el8_4
Red Hat:rhel_eus_long_life:8.4::appstream	redhat	freerdp-libs-debuginfo	< 2:2.2.0-12.el8_4 Fix: upgrade to 2:2.2.0-12.el8_4
Red Hat:rhel_eus_long_life:8.4::appstream	redhat	libwinpr	< 2:2.2.0-12.el8_4 Fix: upgrade to 2:2.2.0-12.el8_4
Red Hat:rhel_eus_long_life:8.4::appstream	redhat	libwinpr-debuginfo	< 2:2.2.0-12.el8_4 Fix: upgrade to 2:2.2.0-12.el8_4
Red Hat:rhel_eus_long_life:8.4::appstream	redhat	libwinpr-devel	< 2:2.2.0-12.el8_4 Fix: upgrade to 2:2.2.0-12.el8_4

Original advisory text

Red Hat Security Advisory: freerdp security update

References

https://www.cve.org/CVERecord?id=CVE-2026-24684 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:10735 Vendor Advisory
https://access.redhat.com/security/updates/classification/#important Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2429650 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2429652 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2429654 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2430881 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2438201 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2438202 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2438207 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2438208 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2438217 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2438221 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2447376 Third Party Advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_10735.... Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-22852 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-22852 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-22852 Vendor Advisory
https://github.com/FreeRDP/FreeRDP/releases/tag/3.20.1 Third Party Advisory
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-9chc-g79v-4qq4 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-22854 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-22854 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-22854 Vendor Advisory
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-47vj-g3c3-3rmf Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-22856 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-22856 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-22856 Vendor Advisory
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-w842-c386-fxhv Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-23732 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-23732 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-23732 Vendor Advisory
https://github.com/FreeRDP/FreeRDP/blob/f96ee2a6dd02739325c2a4e36a14978b561f00ea... Third Party Advisory
https://github.com/FreeRDP/FreeRDP/blob/f96ee2a6dd02739325c2a4e36a14978b561f00ea... Third Party Advisory
https://github.com/FreeRDP/FreeRDP/blob/f96ee2a6dd02739325c2a4e36a14978b561f00ea... Third Party Advisory
https://github.com/FreeRDP/FreeRDP/blob/f96ee2a6dd02739325c2a4e36a14978b561f00ea... Third Party Advisory
https://github.com/FreeRDP/FreeRDP/releases/tag/3.21.0 Third Party Advisory
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-7qxp-j2fj-c3pp Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-23948 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-23948 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-23948 Vendor Advisory
https://github.com/FreeRDP/FreeRDP/commit/4d44e3c097656a8b9ec696353647b0888ca458... Third Party Advisory
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-6f3c-qvqq-2px5 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-24491 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-24491 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-24491 Vendor Advisory
https://github.com/FreeRDP/FreeRDP/commit/e02e052f6692550e539d10f99de9c35a23492d... Third Party Advisory
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-4x6j-w49r-869g Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-24675 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-24675 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-24675 Vendor Advisory
https://github.com/FreeRDP/FreeRDP/commit/d676518809c319eec15911c705c13536036af2... Third Party Advisory
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-x9jr-99h2-g7mj Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-24676 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-24676 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-24676 Vendor Advisory
https://github.com/FreeRDP/FreeRDP/commit/026b81ae5831ac1598d8f7371e0d0996fac7db... Third Party Advisory
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-qh5p-frq4-pgxj Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-24679 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-24679 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-24679 Vendor Advisory
https://github.com/FreeRDP/FreeRDP/commit/2d563a50be17c1b407ca448b1321378c0726dd... Third Party Advisory
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-2jp4-67x6-gv7x Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-24684 Third Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-24684 Vendor Advisory
https://github.com/FreeRDP/FreeRDP/commit/622bb7b4402491ca003f47472d0e4781326736... Third Party Advisory
https://github.com/FreeRDP/FreeRDP/commit/afa6851dc80835d3101e40fcef51b6c5c0f43e... Third Party Advisory
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-vcgv-xgjp-h83q Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-31806 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-31806 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-31806 Vendor Advisory
https://github.com/FreeRDP/FreeRDP/commit/83d9aedea278a74af3e490ff5eeb889c016dbb... Third Party Advisory
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-rrqm-46rj-cmx2 Third Party Advisory

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker full control (estimated)

Severity

8.8 High

Timeline

Published27 Apr 2026

Updated27 Apr 2026

First seen27 Apr 2026

Sources

RHSA-2026:10735 · OSV

Track software like this

Free during beta