Linux · 
Ubuntu · Package update · February 25, 2026
Ubuntu · Package update · February 25, 2026libfreerdp-server3-3 3.5.1+dfsg1-0ubuntu1.4: libfreerdp-server3-3 3.5.1+dfsg1-0ubuntu1.4 for Ubuntu 24.04.5 LTS (noble)
libfreerdp-server3-3 3.5.1+dfsg1-0ubuntu1.4, released February 25, 2026, fixes 29 CVEs in libfreerdp-server3-3. None of them is reported as exploited. Patch Radar priority: Urgent.
Urgent
CVEs closed
29
3 rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0089
59th percentile
Priority of the 29 CVEs
Patch now 0
Urgent 3
High 23
Routine 3
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| libfreerdp-server3-3 | Ubuntu 24.04.5 LTS (noble) | 3.5.1+dfsg1-0ubuntu1.4 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Urgent | CVE-2026-25953 | freerdp3: FreeRDP is a free implementation of the Remote Desktop Protocol | 9.8 | 0.0069 | None reported |
| Urgent | CVE-2026-25959 | freerdp3: FreeRDP is a free implementation of the Remote Desktop Protocol | 9.8 | 0.0065 | None reported |
| Urgent | CVE-2026-25955 | freerdp3: FreeRDP is a free implementation of the Remote Desktop Protocol | 9.8 | 0.0057 | None reported |
| High | CVE-2026-22855 | freerdp: heap-buffer-overflow in smartcard_unpack_set_attrib_call (bsc#1256721). | 9.1 | 0.0089 | None reported |
| High | CVE-2026-22859 | freerdp: improper bound check can lead to heap-buffer-overflow in urb_select_configuration (bsc#1256725). | 9.1 | 0.0089 | None reported |
| High | CVE-2026-22858 | freerdp: Fixed global-buffer-overflow in crypto_base64_devoce | 9.1 | 0.0070 | None reported |
| High | CVE-2026-26965 | freerdp: Out-of-bounds Write in freerdp (bsc#1258985). | 8.8 | 0.0069 | None reported |
| High | CVE-2026-25952 | freerdp: Lock appWindow to fix use-after-free in RAIL mode | 9.8 | 0.0069 | None reported |
| High | CVE-2026-25997 | freerdp: Fix clipboard use-after-free during auto-reconnect | 9.8 | 0.0065 | None reported |
| High | CVE-2026-26955 | freerdp: Out-of-bounds Write in freerdp (bsc#1258982). | 8.8 | 0.0065 | None reported |
| High | CVE-2026-23732 | freerdp: improper validation can lead to heap buffer overflow in `Glyph_Alloc` (bsc#1256945). | 8.8 | 0.0058 | None reported |
| High | CVE-2026-26986 | freerdp: Fix double free in xf_rail_window_common cleanup | 7.8 | 0.0056 | None reported |
| High | CVE-2026-25954 | freerdp3: FreeRDP is a free implementation of the Remote Desktop Protocol | 7.5 | 0.0056 | None reported |
| High | CVE-2026-23530 | freerdp: improper validation can lead to heap buffer overflow in `planar_decompress_plane_rle` (bsc#1256940). | 9.8 | 0.0053 | None reported |
| High | CVE-2026-23531 | freerdp: improper validation in `clear_decompress` can lead to heap buffer overflow (bsc#1256941). | 9.8 | 0.0053 | None reported |
| High | CVE-2026-23532 | freerdp: mismatch between destination rectangle clamping and the actual copy size can lead to a heap buffer | 9.8 | 0.0053 | None reported |
| High | CVE-2026-23533 | freerdp: improper validation can lead to heap buffer overflow in `clear_decompress_residual_data` | 9.8 | 0.0053 | None reported |
| High | CVE-2026-23534 | freerdp: missing checks can lead to heap buffer overflow in `clear_decompress_bands_data` (bsc#1256944). | 9.8 | 0.0053 | None reported |
| High | CVE-2026-25942 | freerdp3: FreeRDP is a free implementation of the Remote Desktop Protocol | 7.5 | 0.0053 | None reported |
| High | CVE-2026-22854 | freerdp: server-controlled read length is used to read file data into an IRP output can cause | 9.8 | 0.0053 | None reported |
| High | CVE-2026-22857 | freerdp: heap-use-after-free in irp_thread_func (bsc#1256723). | 9.8 | 0.0053 | None reported |
| High | CVE-2026-23883 | freerdp: use-after-free when `update_pointer_color` and `freerdp_image_copy_from_pointer_data` fail | 9.8 | 0.0048 | None reported |
| High | CVE-2026-23884 | freerdp: use-after-free in `gdi_set_bounds` (bsc#1256947). | 9.8 | 0.0048 | None reported |
| High | CVE-2026-22852 | freerdp: a malicious RDP server can trigger a heap-buffer-overflow in audin_process_formats (bsc#1256718). | 9.8 | 0.0043 | None reported |
| High | CVE-2026-25941 | freerdp3: FreeRDP is a free implementation of the Remote Desktop Protocol | 8.1 | 0.0033 | None reported |
Showing 1 to 25 of 29
1Next
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.