Critical Vulnerabilities in FreeRDP Affecting Remote Desktop Services

• •FreeRDP versions before 3.31.0 are vulnerable to critical issues.
• •Buffer over-read and denial of service vulnerabilities could disrupt remote desktop services.
• •Immediate patching is recommended to mitigate risks associated with these vulnerabilities.

Two significant vulnerabilities have been identified in FreeRDP versions prior to 3.31.0. The first vulnerability allows for a buffer over-read via the Remote Transport Gateway, while the second leads to a denial of service through desktop dimensions. These vulnerabilities could impact users relying on FreeRDP for remote desktop connections, potentially leading to service disruptions and data exposure. The vulnerabilities have been assigned CVE identifiers, but specific CVE numbers are not mentioned in the articles. Users are advised to prioritize patching these vulnerabilities to mitigate risks. The vulnerabilities were reported on September 16 and September 19, 2026, with advisories issued by VulnCheck. The current status indicates that these vulnerabilities require immediate attention from affected organizations.