# freerdp3-proxy-modules 3.16.0+dfsg-2ubuntu0.3: freerdp3-proxy-modules 3.16.0+dfsg-2ubuntu0.3 for Ubuntu 25.10 (questing) freerdp3-proxy-modules 3.16.0+dfsg-2ubuntu0.3, released February 25, 2026, fixes 31 CVEs in freerdp3-proxy-modules. None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported. - Web page: https://patchblox.com/security/fix/linux/ubuntu-questing-freerdp3-proxy-modules-3.16.0-dfsg-2ubuntu0.3 - Platform: Linux - Released: Feb 25, 2026 - Priority: Urgent (Closes CVE-2026-25953, rated Critical) - CVEs: 31, exploited: 0, on CISA KEV: 0 ## Applies to | Product | Release | Fixed in | |---|---|---| | [freerdp3-proxy-modules](https://patchblox.com/security/data/product/linux/freerdp3-proxy-modules.md) | Ubuntu 25.10 (questing) | 3.16.0+dfsg-2ubuntu0.3 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2026-25953](https://patchblox.com/security/data/cve/CVE-2026-25953.md) | Urgent | freerdp3: FreeRDP is a free implementation of the Remote Desktop Protocol | 9.8 | 0.0069 | | | [CVE-2026-25959](https://patchblox.com/security/data/cve/CVE-2026-25959.md) | Urgent | freerdp3: FreeRDP is a free implementation of the Remote Desktop Protocol | 9.8 | 0.0065 | | | [CVE-2026-25955](https://patchblox.com/security/data/cve/CVE-2026-25955.md) | Urgent | freerdp3: FreeRDP is a free implementation of the Remote Desktop Protocol | 9.8 | 0.0057 | | | [CVE-2026-22855](https://patchblox.com/security/data/cve/CVE-2026-22855.md) | High | freerdp: heap-buffer-overflow in smartcard_unpack_set_attrib_call (bsc#1256721). | 9.1 | 0.0089 | | | [CVE-2026-22859](https://patchblox.com/security/data/cve/CVE-2026-22859.md) | High | freerdp: improper bound check can lead to heap-buffer-overflow in urb_select_configuration (bsc#1256725). | 9.1 | 0.0089 | | | [CVE-2026-22853](https://patchblox.com/security/data/cve/CVE-2026-22853.md) | High | freerdp: Fixed heap-buffer-overflow in ndr_read_uint8Array | 9.8 | 0.0078 | | | [CVE-2026-22858](https://patchblox.com/security/data/cve/CVE-2026-22858.md) | High | freerdp: Fixed global-buffer-overflow in crypto_base64_devoce | 9.1 | 0.0070 | | | [CVE-2026-26965](https://patchblox.com/security/data/cve/CVE-2026-26965.md) | High | freerdp: Out-of-bounds Write in freerdp (bsc#1258985). | 8.8 | 0.0069 | | | [CVE-2026-25952](https://patchblox.com/security/data/cve/CVE-2026-25952.md) | High | freerdp: Lock appWindow to fix use-after-free in RAIL mode | 9.8 | 0.0069 | | | [CVE-2026-25997](https://patchblox.com/security/data/cve/CVE-2026-25997.md) | High | freerdp: Fix clipboard use-after-free during auto-reconnect | 9.8 | 0.0065 | | | [CVE-2026-26955](https://patchblox.com/security/data/cve/CVE-2026-26955.md) | High | freerdp: Out-of-bounds Write in freerdp (bsc#1258982). | 8.8 | 0.0065 | | | [CVE-2026-23732](https://patchblox.com/security/data/cve/CVE-2026-23732.md) | High | freerdp: improper validation can lead to heap buffer overflow in `Glyph_Alloc` (bsc#1256945). | 8.8 | 0.0058 | | | [CVE-2026-26986](https://patchblox.com/security/data/cve/CVE-2026-26986.md) | High | freerdp: Fix double free in xf_rail_window_common cleanup | 7.8 | 0.0056 | | | [CVE-2026-25954](https://patchblox.com/security/data/cve/CVE-2026-25954.md) | High | freerdp3: FreeRDP is a free implementation of the Remote Desktop Protocol | 7.5 | 0.0056 | | | [CVE-2026-23530](https://patchblox.com/security/data/cve/CVE-2026-23530.md) | High | freerdp: improper validation can lead to heap buffer overflow in `planar_decompress_plane_rle` (bsc#1256940). | 9.8 | 0.0053 | | | [CVE-2026-23531](https://patchblox.com/security/data/cve/CVE-2026-23531.md) | High | freerdp: improper validation in `clear_decompress` can lead to heap buffer overflow (bsc#1256941). | 9.8 | 0.0053 | | | [CVE-2026-23532](https://patchblox.com/security/data/cve/CVE-2026-23532.md) | High | freerdp: mismatch between destination rectangle clamping and the actual copy size can lead to a heap buffer | 9.8 | 0.0053 | | | [CVE-2026-23533](https://patchblox.com/security/data/cve/CVE-2026-23533.md) | High | freerdp: improper validation can lead to heap buffer overflow in `clear_decompress_residual_data` | 9.8 | 0.0053 | | | [CVE-2026-23534](https://patchblox.com/security/data/cve/CVE-2026-23534.md) | High | freerdp: missing checks can lead to heap buffer overflow in `clear_decompress_bands_data` (bsc#1256944). | 9.8 | 0.0053 | | | [CVE-2026-25942](https://patchblox.com/security/data/cve/CVE-2026-25942.md) | High | freerdp3: FreeRDP is a free implementation of the Remote Desktop Protocol | 7.5 | 0.0053 | | | [CVE-2026-22854](https://patchblox.com/security/data/cve/CVE-2026-22854.md) | High | freerdp: server-controlled read length is used to read file data into an IRP output can cause | 9.8 | 0.0053 | | | [CVE-2026-22857](https://patchblox.com/security/data/cve/CVE-2026-22857.md) | High | freerdp: heap-use-after-free in irp_thread_func (bsc#1256723). | 9.8 | 0.0053 | | | [CVE-2026-27950](https://patchblox.com/security/data/cve/CVE-2026-27950.md) | High | freerdp3: FreeRDP is a free implementation of the Remote Desktop Protocol | 7.5 | 0.0050 | | | [CVE-2026-23883](https://patchblox.com/security/data/cve/CVE-2026-23883.md) | High | freerdp: use-after-free when `update_pointer_color` and `freerdp_image_copy_from_pointer_data` fail | 9.8 | 0.0048 | | | [CVE-2026-23884](https://patchblox.com/security/data/cve/CVE-2026-23884.md) | High | freerdp: use-after-free in `gdi_set_bounds` (bsc#1256947). | 9.8 | 0.0048 | | | [CVE-2026-22852](https://patchblox.com/security/data/cve/CVE-2026-22852.md) | High | freerdp: a malicious RDP server can trigger a heap-buffer-overflow in audin_process_formats (bsc#1256718). | 9.8 | 0.0043 | | | [CVE-2026-25941](https://patchblox.com/security/data/cve/CVE-2026-25941.md) | High | freerdp3: FreeRDP is a free implementation of the Remote Desktop Protocol | 8.1 | 0.0033 | | | [CVE-2026-22856](https://patchblox.com/security/data/cve/CVE-2026-22856.md) | High | freerdp: race condition in the serial channel IRP thread tracking can cause heap-use-after-free | 8.8 | 0.0033 | | | [CVE-2026-27015](https://patchblox.com/security/data/cve/CVE-2026-27015.md) | Routine | freerdp3: FreeRDP is a free implementation of the Remote Desktop Protocol | 6.5 | 0.0031 | | | [CVE-2026-22851](https://patchblox.com/security/data/cve/CVE-2026-22851.md) | Routine | freerdp: Fixed RDPGFX ResetGraphics race leading to | 5.9 | 0.0029 | | | [CVE-2026-26271](https://patchblox.com/security/data/cve/CVE-2026-26271.md) | Routine | freerdp: Buffer Overread in FreeRDP Icon Processing (bsc#1258979). | 5.3 | 0.0028 | | --- Data as of 2026-11-12T13:55:20Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.