Known vulnerabilities in xrdp (Debian package)

Vendor: Debian
Software CPE: cpe:2.3:o:debian:xrdp_debian_package:*:*:*:*:*:debian_linux:*:*
Total vulnerabilities: 29
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting xrdp (Debian package) xrdp (Debian package) is affected by 29 known vulnerabilities: 13 high, 13 medium, 3 low Critical High Medium Low

Vulnerabilities (29)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU136789 - Heap-based Buffer Overflow
CVE-2026-41252
CWE-122 High
No
No
0.10.1-3.1+deb13u2 02.07.2026 SB2026061550
SB2026070758
SB2026070759
and 3 more
#VU136788 - Integer overflow
CVE-2026-41521
CWE-190 High
No
No
0.10.1-3.1+deb13u2 02.07.2026 SB2026061550
SB2026070758
SB2026070759
and 3 more
#VU136786 - Heap-based Buffer Overflow
CVE-2026-44178
CWE-122 Medium
No
No
0.10.1-3.1+deb13u2 02.07.2026 SB2026061550
SB2026070758
SB2026070759
and 3 more
#VU136785 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2026-54538
CWE-835 Medium
No
No
0.10.1-3.1+deb13u2 02.07.2026 SB2026061550
SB2026070758
SB2026070759
and 4 more
#VU136784 - Out-of-bounds read
CVE-2026-55645
CWE-125 Medium
No
No
0.10.1-3.1+deb13u2 02.07.2026 SB2026061550
SB2026070758
SB2026070759
and 3 more
#VU136783 - Out-of-bounds read
CVE-2026-55639
CWE-125 Medium
No
No
0.10.1-3.1+deb13u2 02.07.2026 SB2026061550
SB2026070758
SB2026070759
and 3 more
#VU136617 - Out-of-bounds read
CVE-2026-44978
CWE-125 Medium
No
No
0.10.1-3.1+deb13u2 01.07.2026 SB2026061550
SB2026070758
SB2026070759
and 3 more
#VU136615 - Buffer over-read
CVE-2026-55238
CWE-126 Medium
No
No
0.10.1-3.1+deb13u2 01.07.2026 SB2026061550
SB2026070758
SB2026070759
and 3 more
#VU134543 - Observable Response Discrepancy
CVE-2026-42218
CWE-204 Medium
No
No
0.10.1-3.1+deb13u2 15.06.2026 SB2026061550
SB2026070758
SB2026070759
and 3 more
#VU126465 - Heap-based Buffer Overflow
CVE-2026-32624
CWE-122 Medium
No
No
0.10.1-3.1+deb13u2 17.04.2026 SB20260417101
SB2026041802
SB2026041803
and 4 more
#VU126464 - Improper Validation of Integrity Check Value
CVE-2026-32105
CWE-354 High
No
No
0.10.1-3.1+deb13u2 17.04.2026 SB20260417101
SB2026041802
SB2026041803
and 5 more
#VU126463 - Improper Check for Dropped Privileges
CVE-2026-32107
CWE-273 Low
No
No
0.10.1-3.1+deb13u2 17.04.2026 SB20260417101
SB2026041802
SB2026041803
and 5 more
#VU126462 - Out-of-bounds read
CVE-2026-33516
CWE-125 High
No
No
0.10.1-3.1+deb13u2 17.04.2026 SB20260417101
SB2026041802
SB2026041803
and 4 more
#VU126461 - Heap-based Buffer Overflow
CVE-2026-32623
CWE-122 High
No
No
0.10.1-3.1+deb13u2 17.04.2026 SB20260417101
SB2026041802
SB2026041803
and 4 more
#VU126460 - Command injection
CVE-2026-33145
CWE-77 Low
No
No
0.10.1-3.1+deb13u2 17.04.2026 SB20260417101
SB2026041802
SB2026041803
and 4 more
#VU126459 - Out-of-bounds read
CVE-2026-33689
CWE-125 High
No
No
0.10.1-3.1+deb13u2 17.04.2026 SB20260417101
SB2026041802
SB2026041803
and 4 more
#VU126458 - Heap-based Buffer Overflow
CVE-2026-35512
CWE-122 Medium
No
No
0.10.1-3.1+deb13u2 17.04.2026 SB20260417101
SB2026041802
SB2026041803
and 4 more
#VU122100 - Stack-based buffer overflow
CVE-2025-68670
CWE-121 High
No
No
0.9.21.1-1+deb12u2, 0.10.1-3.1+deb13u1 28.01.2026 SB2026012846
SB2026012847
SB2026012848
and 8 more
#VU70104 - Integer overflow
CVE-2022-23484
CWE-190 High
No
No
0.9.21.1-1~deb11u1 12.12.2022 SB2022121204
SB2023010229
SB2023010519
and 11 more
#VU70101 - Out-of-bounds read
CVE-2022-23493
CWE-125 High
No
No
0.9.21.1-1~deb11u1 12.12.2022 SB2022121204
SB2023010519
SB2023021031
and 8 more


Showing elements 1 - 20 out of 29