PT-2026-44981 · Freerdp · Freerdp

Kevin-Valerio · Published 2026-05-12 · Updated 2026-06-03 · CVE-2026-44420

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.26.0

Description A heap-buffer-overflow write exists in the server-side clipboard (cliprdr) channel of FreeRDP. The issue occurs within the cliprdr server receive pdu() function when processing a CB CLIP CAPS PDU containing an undersized capabilitySetLength parameter. A remote attacker can exploit this to corrupt heap memory, potentially leading to arbitrary code execution or a remote denial of service (DoS) by crashing the server process. There have been reports of elevated activities targeting this issue.

Recommendations Update to version 3.26.0.

Exploit

Fix

DoS

Heap Based Buffer Overflow

Weakness Enumeration

CWE-122

Related Identifiers

BDU:2026-07646

CVE-2026-44420

OPENSUSE-SU-2026:10948-1

Affected Products

Freerdp

References · 20

• 🔥 https://github.com/yhirose/cpp-httplib/security/advisories/GHSA-h6wq-j5mv-f3q8 · Exploit
• https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-mvpx-xj7r-3p3r · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-44420 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-44420 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10948-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-44420 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-44420 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-44420 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-07646 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2026-44420 · Vendor Advisory
• https://suse.com/security/cve/CVE-2026-44421 · Note
• https://reddit.com/r/pwnhub/comments/1ts57j0/critical_freerdp_vulnerability_exposes_servers_to · Reddit Post
• https://twitter.com/vuldb/status/2060721953644978257 · Twitter Post
• https://suse.com/security/cve/CVE-2026-45700 · Note
• https://suse.com/security/cve/CVE-2026-40033 · Note