PT-2026-44981 · Freerdp+1 · Freerdp+1

Kevin-Valerio · CVE-2026-44420 · Published 2026-05-12 · Updated 2026-07-22

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.26.0

Description A heap-buffer-overflow write exists in the server-side clipboard (cliprdr) channel of FreeRDP. The issue occurs within the cliprdr server receive pdu() function when processing a CB CLIP CAPS PDU containing an undersized capabilitySetLength parameter. A remote attacker can exploit this to corrupt heap memory, potentially leading to arbitrary code execution or a remote denial of service (DoS) by crashing the server process. There have been reports of elevated activities targeting this issue.

Recommendations Update to version 3.26.0.

Exploit

Fix

DoS

Heap Based Buffer Overflow

Weakness Enumeration

CWE-131

CWE-122

Related Identifiers

ALSA-2026:36203

BDU:2026-07646

CVE-2026-44420

GHSA-H6WQ-J5MV-F3Q8

GHSA-MVPX-XJ7R-3P3R

OPENSUSE-SU-2026:10948-1

OPENSUSE-SU-2026:21116-1

SUSE-SU-2026:22194-1

USN-8561-1

Affected Products

Freerdp

Red Os

References · 101

• 🔥 https://github.com/yhirose/cpp-httplib/security/advisories/GHSA-h6wq-j5mv-f3q8 · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/44xxx/CVE-2026-44420.json · Exploit
• https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-mvpx-xj7r-3p3r · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-44420 · Security Note
• https://ubuntu.com/security/CVE-2026-29775 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-44420 · Vendor Advisory
• https://osv.dev/vulnerability/USN-8561-1 · Vendor Advisory
• http://repo.red-soft.ru/redos/8.0/x86_64/updates · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:22194-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-33985 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-31897 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2026:36203 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8561-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-29774 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-55191 · Vendor Advisory