# freerdp3-proxy-modules 3.30.0+dfsg-0ubuntu0.26.04.1: freerdp3-proxy-modules 3.30.0+dfsg-0ubuntu0.26.04.1 for Ubuntu 26.04.1 LTS (resolute) freerdp3-proxy-modules 3.30.0+dfsg-0ubuntu0.26.04.1, released November 7, 2026, fixes 46 CVEs in freerdp3-proxy-modules. None of them is reported as exploited. Patch Radar priority: Urgent. - Web page: https://patchblox.com/security/fix/linux/ubuntu-resolute-freerdp3-proxy-modules-3.30.0-dfsg-0ubuntu0.26.04.1 - Platform: Linux - Released: Nov 7, 2026 - Priority: Urgent (Closes CVE-2026-55194, rated Critical) - CVEs: 46, exploited: 0, on CISA KEV: 0 ## Applies to | Product | Release | Fixed in | |---|---|---| | [freerdp3-proxy-modules](https://patchblox.com/security/data/product/linux/freerdp3-proxy-modules.md) | Ubuntu 26.04.1 LTS (resolute) | 3.30.0+dfsg-0ubuntu0.26.04.1 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2026-55194](https://patchblox.com/security/data/cve/CVE-2026-55194.md) | Urgent | freerdp3: FreeRDP is a free implementation of the Remote Desktop Protocol | 9.8 | 0.0062 | | | [CVE-2026-44420](https://patchblox.com/security/data/cve/CVE-2026-44420.md) | High | freerdp3-shadow-x11: FreeRDP is a free implementation of the Remote Desktop Protocol | 8.8 | 0.0456 | | | [CVE-2026-40033](https://patchblox.com/security/data/cve/CVE-2026-40033.md) | High | freerdp3-shadow-x11: FreeRDP before 3.26.0 contains a heap-buffer-overflow vulnerability in gdi_CacheToSurface that allows remote attacker... | 8.8 | 0.0137 | | | [CVE-2026-64620](https://patchblox.com/security/data/cve/CVE-2026-64620.md) | High | freerdp3-shadow-x11: FreeRDP before 3.28.0 (affected <=3.27.1) contains a heap-based buffer overflow in crypto_rsa_common() (libfreerdp... | 9.1 | 0.0091 | | | [CVE-2026-67298](https://patchblox.com/security/data/cve/CVE-2026-67298.md) | High | freerdp3: FreeRDP versions 3.28.0 and earlier contain a heap buffer overflow in the server-side RAIL channel handler (rail_serv... | 8.8 | 0.0072 | | | [CVE-2026-57156](https://patchblox.com/security/data/cve/CVE-2026-57156.md) | High | freerdp3-shadow-x11: FreeRDP is a free implementation of the Remote Desktop Protocol | 9.8 | 0.0070 | | | [CVE-2026-57158](https://patchblox.com/security/data/cve/CVE-2026-57158.md) | High | freerdp3-shadow-x11: FreeRDP is a free implementation of the Remote Desktop Protocol | 9.1 | 0.0069 | | | [CVE-2026-67301](https://patchblox.com/security/data/cve/CVE-2026-67301.md) | High | freerdp3: FreeRDP before 3.29.0 contains out-of-bounds read vulnerabilities in the async update message proxy for the PolygonSC... | 8.8 | 0.0065 | | | [CVE-2026-67304](https://patchblox.com/security/data/cve/CVE-2026-67304.md) | High | freerdp3: FreeRDP before 3.29.0 contains a null pointer dereference vulnerability in smartcard device control request cleanup w... | 8.8 | 0.0065 | | | [CVE-2026-55191](https://patchblox.com/security/data/cve/CVE-2026-55191.md) | High | freerdp3-shadow-x11: FreeRDP is a free implementation of the Remote Desktop Protocol | 9.8 | 0.0062 | | | [CVE-2026-63633](https://patchblox.com/security/data/cve/CVE-2026-63633.md) | High | freerdp: FreeRDP is a free implementation of the Remote Desktop Protocol | 9.8 | 0.0062 | | | [CVE-2026-63652](https://patchblox.com/security/data/cve/CVE-2026-63652.md) | High | freerdp3: FreeRDP is a free implementation of the Remote Desktop Protocol | 8.8 | 0.0058 | | | [CVE-2026-55827](https://patchblox.com/security/data/cve/CVE-2026-55827.md) | High | freerdp3-shadow-x11: FreeRDP is a free implementation of the Remote Desktop Protocol | 8.8 | 0.0053 | | | [CVE-2026-67296](https://patchblox.com/security/data/cve/CVE-2026-67296.md) | High | freerdp3: FreeRDP before 3.29.0 contains a denial of service vulnerability in the RDPEI server channel handler that fails to va... | 8.8 | 0.0052 | | | [CVE-2026-67297](https://patchblox.com/security/data/cve/CVE-2026-67297.md) | High | freerdp3: FreeRDP before 3.29.0 fails to enforce the RESPONSE_SIZE_LIMIT when processing Transfer-Encoding: chunked HTTP respon... | 8.8 | 0.0052 | | | [CVE-2026-44421](https://patchblox.com/security/data/cve/CVE-2026-44421.md) | High | freerdp3-shadow-x11: FreeRDP is a free implementation of the Remote Desktop Protocol | 8.8 | 0.0051 | | | [CVE-2026-55193](https://patchblox.com/security/data/cve/CVE-2026-55193.md) | High | freerdp3: FreeRDP is a free implementation of the Remote Desktop Protocol | 8.8 | 0.0048 | | | [CVE-2026-73241](https://patchblox.com/security/data/cve/CVE-2026-73241.md) | High | freerdp3: FreeRDP is a free implementation of the Remote Desktop Protocol | 8.8 | 0.0047 | | | [CVE-2026-55192](https://patchblox.com/security/data/cve/CVE-2026-55192.md) | High | freerdp3: FreeRDP is a free implementation of the Remote Desktop Protocol | 8.2 | 0.0045 | | | [CVE-2026-55648](https://patchblox.com/security/data/cve/CVE-2026-55648.md) | High | freerdp3: FreeRDP is a free implementation of the Remote Desktop Protocol | 7.5 | 0.0043 | | | [CVE-2026-44422](https://patchblox.com/security/data/cve/CVE-2026-44422.md) | High | freerdp3-shadow-x11: FreeRDP is a free implementation of the Remote Desktop Protocol | 8.8 | 0.0043 | | | [CVE-2026-67289](https://patchblox.com/security/data/cve/CVE-2026-67289.md) | High | freerdp3-shadow-x11: FreeRDP before 3.29.0 (affected versions <= 3.28.0) does not validate CRLF and control characters in the server-co... | 8.1 | 0.0043 | | | [CVE-2026-67288](https://patchblox.com/security/data/cve/CVE-2026-67288.md) | High | freerdp3: FreeRDP before 3.29.0 contains a null pointer dereference vulnerability in smartcard cache request decoders that acce... | 8.8 | 0.0043 | | | [CVE-2026-67291](https://patchblox.com/security/data/cve/CVE-2026-67291.md) | High | freerdp3: FreeRDP before 3.29.0 (affected versions <= 3.28.0) contains a heap out-of-bounds read in update_process_glyph_fragme... | 8.8 | 0.0041 | | | [CVE-2026-73242](https://patchblox.com/security/data/cve/CVE-2026-73242.md) | High | freerdp3-shadow-x11: FreeRDP is a free implementation of the Remote Desktop Protocol | 9.1 | 0.0040 | | | [CVE-2026-67299](https://patchblox.com/security/data/cve/CVE-2026-67299.md) | High | freerdp3: FreeRDP before 3.29.0 contains a client-side heap use-after-free in the async update message proxy for WINDOW_ICON_OR... | 8.1 | 0.0040 | | | [CVE-2026-64621](https://patchblox.com/security/data/cve/CVE-2026-64621.md) | High | freerdp3: FreeRDP before 3.28.0 (affected 3.x through 3.27.1) contains a double-free vulnerability in freerdp_client_rdp_file_a... | 8.1 | 0.0036 | | | [CVE-2026-55564](https://patchblox.com/security/data/cve/CVE-2026-55564.md) | High | freerdp3: FreeRDP is a free implementation of the Remote Desktop Protocol | 7.1 | 0.0033 | | | [CVE-2026-68580](https://patchblox.com/security/data/cve/CVE-2026-68580.md) | High | freerdp3: FreeRDP before 3.29.0 contains integer overflow vulnerabilities in the audio input redirection channel (audin) across... | 8.1 | 0.0030 | | | [CVE-2026-64624](https://patchblox.com/security/data/cve/CVE-2026-64624.md) | High | freerdp3-shadow-x11: FreeRDP before 3.28.0 treats lines beginning with forward slash in RDP files as raw command-line options, exposing th... | 8.1 | 0.0018 | | | [CVE-2026-67290](https://patchblox.com/security/data/cve/CVE-2026-67290.md) | Routine | freerdp3: FreeRDP before 3.29.0 contains a heap out-of-bounds read vulnerability in the TSMF FFmpeg decoder when parsing AVC1 M... | 6.5 | 0.0062 | | | [CVE-2026-63117](https://patchblox.com/security/data/cve/CVE-2026-63117.md) | Routine | freerdp3: FreeRDP is a free implementation of the Remote Desktop Protocol | 6.5 | 0.0055 | | | [CVE-2026-57157](https://patchblox.com/security/data/cve/CVE-2026-57157.md) | Routine | freerdp3-shadow-x11: FreeRDP is a free implementation of the Remote Desktop Protocol | 6.5 | 0.0054 | | | [CVE-2026-67302](https://patchblox.com/security/data/cve/CVE-2026-67302.md) | Routine | freerdp3-shadow-x11: FreeRDP before 3.29.0 (affected versions <= 3.28.0) contains a divide-by-zero vulnerability in the rdpecam camera... | 6.5 | 0.0050 | | | [CVE-2026-67292](https://patchblox.com/security/data/cve/CVE-2026-67292.md) | Routine | freerdp3: FreeRDP before 3.29.0 contains a buffer over-disclosure vulnerability in the gateway WebSocket transport (libfreerdp/... | n/a | 0.0048 | | | [CVE-2026-68579](https://patchblox.com/security/data/cve/CVE-2026-68579.md) | Routine | freerdp3: FreeRDP before 3.30.0 (<= 3.29.0) contains a heap-based buffer overflow in the Windows clipboard client's CliprdrStre... | n/a | 0.0048 | | | [CVE-2026-67303](https://patchblox.com/security/data/cve/CVE-2026-67303.md) | Routine | freerdp3: FreeRDP before 3.29.0 contains a reachable assertion (WINPR_ASSERT(OutputBufferLength == BytesReturned)) in serial_pr... | n/a | 0.0042 | | | [CVE-2026-67306](https://patchblox.com/security/data/cve/CVE-2026-67306.md) | Routine | freerdp3: FreeRDP versions 3.28.0 and earlier contain an out-of-bounds read vulnerability in the RDP6 planar RLE bitmap decoder... | n/a | 0.0038 | | | [CVE-2026-67294](https://patchblox.com/security/data/cve/CVE-2026-67294.md) | Routine | freerdp3: FreeRDP before 3.29.0 improperly validates the Extended Key Usage (EKU) purpose of the peer certificate during client... | n/a | 0.0036 | | | [CVE-2026-67295](https://patchblox.com/security/data/cve/CVE-2026-67295.md) | Routine | freerdp3: FreeRDP before 3.29.0 fails to properly validate server-supplied RDPDR paths in drive redirection, allowing attackers... | n/a | 0.0036 | | | [CVE-2026-109677](https://patchblox.com/security/data/cve/CVE-2026-109677.md) | Routine | freerdp3-shadow-x11: FreeRDP from 2.0.0-beta1 before 3.28.0 contains an out-of-bounds read vulnerability in smartcard_LocateCardsByATRA_Ca... | n/a | 0.0035 | | | [CVE-2026-67300](https://patchblox.com/security/data/cve/CVE-2026-67300.md) | Routine | freerdp3: FreeRDP before 3.29.0 contains client-side heap use-after-free vulnerabilities in the async update message proxy for... | n/a | 0.0034 | | | [CVE-2026-66402](https://patchblox.com/security/data/cve/CVE-2026-66402.md) | Routine | freerdp3: FreeRDP before 3.29.0 (affected versions <= 3.28.0) contains multiple TLS certificate identity validation weaknesses... | n/a | 0.0034 | | | [CVE-2026-67293](https://patchblox.com/security/data/cve/CVE-2026-67293.md) | Routine | freerdp3: FreeRDP before 3.29.0 (affected versions <= 3.28.0) contains an improper certificate hostname validation vulnerability | n/a | 0.0024 | | | [CVE-2026-66401](https://patchblox.com/security/data/cve/CVE-2026-66401.md) | Routine | freerdp3: FreeRDP before 3.29.0 contains an out-of-bounds heap read vulnerability in the UVC H.264 extension-unit parser that f... | n/a | 0.0020 | | | [CVE-2026-40254](https://patchblox.com/security/data/cve/CVE-2026-40254.md) | Routine | freerdp3-shadow-x11: FreeRDP is a free implementation of the Remote Desktop Protocol | 6.1 | 0.0020 | | --- Data as of 2026-11-13T01:58:51Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.