Open Source Open Source FreeRDP <3.31.0

Name: Open Source Open Source FreeRDP <3.31.0
Brand: Open Source

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

unpatched

by severity

1critical3high14medium1low

updated 2026-10-27

vulnerabilities (22)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-91963US	medium6.5	0.66% (52nd)	—	3.31.0	2026-09-15	< 3.31.0
CVE-2026-91948US	—	0.59% (48th)	—	3.31.0	2026-09-15	< 3.31.0
CVE-2026-91945US	medium6.5	0.58% (47th)	—	3.31.0	2026-09-15	< 3.31.0
CVE-2026-91949US	critical9.3	0.58% (47th)	—	3.31.0	2026-09-15	< 3.31.0
CVE-2026-91955US	high7.5	0.57% (47th)	—	3.31.0	2026-09-15	< 3.31.0
CVE-2026-91964US	high8.8	0.56% (47th)	—	3.31.0	2026-09-15	< 3.31.0
CVE-2026-91946US	medium6.5	0.53% (45th)	—	3.31.0	2026-09-15	< 3.31.0
CVE-2026-91953US	—	0.47% (41st)	—	3.31.0	2026-09-15	< 3.31.0
CVE-2026-91960US	medium6.5	0.46% (40th)	—	3.31.0	2026-09-15	< 3.31.0
CVE-2026-91950US	medium6.5	0.40% (34th)	—	3.31.0	2026-09-15	< 3.31.0
CVE-2026-91952US	medium6.5	0.39% (33rd)	—	3.31.0	2026-09-15	< 3.31.0
CVE-2026-91959US	medium6.5	0.39% (33rd)	—	3.31.0	2026-09-15	< 3.31.0
CVE-2026-91956US	medium6.5	0.39% (33rd)	—	3.31.0	2026-09-15	< 3.31.0
CVE-2026-91954US	medium6.5	0.39% (33rd)	—	3.31.0	2026-09-15	< 3.31.0
CVE-2026-85089US	medium6.5	0.38% (32nd)	—	3.31.0	2026-09-03	< 3.31.0
CVE-2026-91951US	medium6.5	0.38% (32nd)	—	3.31.0	2026-09-15	< 3.31.0
CVE-2026-91961US	medium6.5	0.37% (31st)	—	3.31.0	2026-09-15	< 3.31.0
CVE-2026-91957US	low3.1	0.37% (30th)	—	3.31.0	2026-09-15	< 3.31.0
CVE-2026-91947US	high7.5	0.31% (24th)	—	3.31.0	2026-09-15	< 3.31.0
CVE-2026-85090US	medium5.4	0.28% (20th)	—	3.31.0	2026-09-03	< 3.31.0
CVE-2026-91962US	medium6.3	0.26% (18th)	—	3.31.0	2026-09-15	< 3.31.0
CVE-2026-91958US	—	0.20% (9th)	—	3.31.0	2026-09-15	< 3.31.0

The flaw types (CWEs) most of these CVEs share.

CWE-125Out-of-bounds Read6 CVEs
CWE-617Reachable Assertion2 CVEs
CWE-908Use of Uninitialized Resource2 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1 CVEs
CWE-122Heap-based Buffer Overflow1 CVEs
CWE-131Incorrect Calculation of Buffer Size1 CVEs
CWE-190Integer Overflow or Wraparound1 CVEs
CWE-191Integer Underflow (Wrap or Wraparound)1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.