Known vulnerabilities in xrdp

Software: xrdp
Software CPE: cpe:2.3:a:neutrinolabs:xrdp:*:*:*:*:*:*:*:*
Total vulnerabilities: 35
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting xrdp xrdp is affected by 35 known vulnerabilities: 13 high, 16 medium, 6 low Critical High Medium Low

Vulnerabilities (35)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU136789 - Heap-based Buffer Overflow
CVE-2026-41252
CWE-122 High
No
No
0.10.6.1 02.07.2026 SB2026061550
SB2026070758
SB2026070759
and 3 more
#VU136788 - Integer overflow
CVE-2026-41521
CWE-190 High
No
No
0.10.6.1 02.07.2026 SB2026061550
SB2026070758
SB2026070759
and 3 more
#VU136786 - Heap-based Buffer Overflow
CVE-2026-44178
CWE-122 Medium
No
No
0.10.6.1 02.07.2026 SB2026061550
SB2026070758
SB2026070759
and 3 more
#VU136785 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2026-54538
CWE-835 Medium
No
No
0.10.6.1 02.07.2026 SB2026061550
SB2026070758
SB2026070759
and 4 more
#VU136784 - Out-of-bounds read
CVE-2026-55645
CWE-125 Medium
No
No
0.10.6.1 02.07.2026 SB2026061550
SB2026070758
SB2026070759
and 3 more
#VU136783 - Out-of-bounds read
CVE-2026-55639
CWE-125 Medium
No
No
0.10.6.1 02.07.2026 SB2026061550
SB2026070758
SB2026070759
and 3 more
#VU136617 - Out-of-bounds read
CVE-2026-44978
CWE-125 Medium
No
No
0.10.6.1 01.07.2026 SB2026061550
SB2026070758
SB2026070759
and 3 more
#VU136616 - Missing Authentication for Critical Function
CVE-2026-55626
CWE-306 Low
No
No
0.10.6.1 01.07.2026 SB2026061550
SB2026070758
SB2026070759
and 2 more
#VU136615 - Buffer over-read
CVE-2026-55238
CWE-126 Medium
No
No
0.10.6.1 01.07.2026 SB2026061550
SB2026070758
SB2026070759
and 3 more
#VU134543 - Observable Response Discrepancy
CVE-2026-42218
CWE-204 Medium
No
No
0.10.6.1 15.06.2026 SB2026061550
SB2026070758
SB2026070759
and 3 more
#VU126465 - Heap-based Buffer Overflow
CVE-2026-32624
CWE-122 Medium
No
No
0.10.6 17.04.2026 SB20260417101
SB2026041802
SB2026041803
and 4 more
#VU126464 - Improper Validation of Integrity Check Value
CVE-2026-32105
CWE-354 High
No
No
0.10.6 17.04.2026 SB20260417101
SB2026041802
SB2026041803
and 5 more
#VU126463 - Improper Check for Dropped Privileges
CVE-2026-32107
CWE-273 Low
No
No
0.10.6 17.04.2026 SB20260417101
SB2026041802
SB2026041803
and 5 more
#VU126462 - Out-of-bounds read
CVE-2026-33516
CWE-125 High
No
No
0.10.6 17.04.2026 SB20260417101
SB2026041802
SB2026041803
and 4 more
#VU126461 - Heap-based Buffer Overflow
CVE-2026-32623
CWE-122 High
No
No
0.10.6 17.04.2026 SB20260417101
SB2026041802
SB2026041803
and 4 more
#VU126460 - Command injection
CVE-2026-33145
CWE-77 Low
No
No
0.10.6 17.04.2026 SB20260417101
SB2026041802
SB2026041803
and 4 more
#VU126459 - Out-of-bounds read
CVE-2026-33689
CWE-125 High
No
No
0.10.6 17.04.2026 SB20260417101
SB2026041802
SB2026041803
and 4 more
#VU126458 - Heap-based Buffer Overflow
CVE-2026-35512
CWE-122 Medium
No
No
0.10.6 17.04.2026 SB20260417101
SB2026041802
SB2026041803
and 4 more
#VU122100 - Stack-based buffer overflow
CVE-2025-68670
CWE-121 High
No
No
0.10.5 28.01.2026 SB2026012846
SB2026012847
SB2026012848
and 8 more
#VU94665 - Improper Restriction of Excessive Authentication Attempts
CVE-2024-39917
CWE-307 Medium
No
No
0.10.0 23.07.2024 SB2024072324
SB2025020369
SB2025020370
and 2 more


Showing elements 1 - 20 out of 35