Back Linuxsecurity

Ubuntu 26.04 LTS FreeRDP Critical DoS Issue USN-8432-1 CVE-2026

Linuxsecurity •LinuxSecurity Advisories • June 16, 2026

A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 26.04 LTS - Ubuntu 25.10 - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS Summary: Several security issues were fixed in FreeRDP. Software Description: - freerdp3: RDP client for Windows Terminal Services - freerdp2: RDP client for Windows Terminal Services Details: It was discovered that FreeRDP incorrectly handled memory under certain circumstances, which could lead to an out-of-bounds heap write. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2026-45700) In addition, this update fixes a regression introduced in USN-8105-1. The update introduces a complete fix for CVE-2026-22858, CVE-2026-23732 and CVE-2026-25952 in Ubuntu 24.04 LTS and Ubuntu 25.10.

The problem can be corrected by updating your system to the following package versions: Ubuntu 26.04 LTS freerdp-x11 3.24.2+dfsg-1ubuntu1.1 freerdp3-x11 3.24.2+dfsg-1ubuntu1.1 libfreerdp3-3 3.24.2+dfsg-1ubuntu1.1 Ubuntu 25.10 freerdp3-x11 3.16.0+dfsg-2ubuntu0.5 libfreerdp3-3 3.16.0+dfsg-2ubuntu0.5 Ubuntu 24.04 LTS freerdp2-x11 2.11.5+dfsg1-1ubuntu0.1~esm6 Available with Ubuntu Pro freerdp3-x11 3.5.1+dfsg1-0ubuntu1.6 libfreerdp2-2t64 2.11.5+dfsg1-1ubuntu0.1~esm6 Available with Ubuntu Pro libfreerdp3-3 3.5.1+dfsg1-0ubuntu1.6 Ubuntu 22.04 LTS freerdp2-x11 2.6.1+dfsg1-3ubuntu2.11 libfreerdp2-2 2.6.1+dfsg1-3ubuntu2.11 Ubuntu 20.04 LTS freerdp2-x11 2.6.1+dfsg1-0ubuntu0.20.04.2+esm4 Available with Ubuntu Pro libfreerdp2-2 2.6.1+dfsg1-0ubuntu0.20.04.2+esm4 Available with Ubuntu Pro Ubuntu 18.04 LTS freerdp2-x11 2.2.0+dfsg1-0ubuntu0.18.04.4+esm6 Available with Ubuntu Pro libfreerdp2-2 2.2.0+dfsg1-0ubuntu0.18.04.4+esm6 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes.

CVE-2026-45700,

Ubuntu Security Notice USN-8432-1

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical FreeRDP Vulnerabilities Affect Multiple Ubuntu Releases A set of vulnerabilities in FreeRDP has been identified, affecting various Ubuntu versions including 24.04 LTS, 25.10, and 26.04 LTS. The most critical issue, CVE-2026-45700, allows for out-of-bounds heap writes, potentially leading to denial of service or arbitrary code execution. Other vulnerabilities addressed include CVE-2026-22858, CVE-2026-23732, and CVE-2026-25952, which were previously introduced in earlier updates. Users are advised to update their systems to mitigate these risks. The vulnerabilities were disclosed on May 29, 2026, and are part of a broader security update. Affected systems include Ubuntu 18.04 LTS through 26.04 LTS and their derivatives. The update is available through standard system updates and Ubuntu Pro for extended support. 4 sources 74

Extracted Entities

Ubuntu 26.04 LTS FreeRDP Critical DoS Issue USN-8432-1 CVE-2026

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CVEs (4)

CWE Weaknesses (1)