Linux · 
Ubuntu · Package update · February 25, 2026
Ubuntu · Package update · February 25, 2026freerdp3-proxy 3.16.0+dfsg-2ubuntu0.3: freerdp3-proxy 3.16.0+dfsg-2ubuntu0.3 for Ubuntu 25.10 (questing)
freerdp3-proxy 3.16.0+dfsg-2ubuntu0.3, released February 25, 2026, fixes 31 CVEs in freerdp3-proxy. None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported.
UrgentUnsupported product
CVEs closed
31
3 rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0089
59th percentile
Priority of the 31 CVEs
Patch now 0
Urgent 3
High 25
Routine 3
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| freerdp3-proxy | Ubuntu 25.10 (questing) | 3.16.0+dfsg-2ubuntu0.3 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Urgent | CVE-2026-25953 | freerdp3: FreeRDP is a free implementation of the Remote Desktop Protocol | 9.8 | 0.0069 | None reported |
| Urgent | CVE-2026-25959 | freerdp3: FreeRDP is a free implementation of the Remote Desktop Protocol | 9.8 | 0.0065 | None reported |
| Urgent | CVE-2026-25955 | freerdp3: FreeRDP is a free implementation of the Remote Desktop Protocol | 9.8 | 0.0057 | None reported |
| High | CVE-2026-22855 | freerdp: heap-buffer-overflow in smartcard_unpack_set_attrib_call (bsc#1256721). | 9.1 | 0.0089 | None reported |
| High | CVE-2026-22859 | freerdp: improper bound check can lead to heap-buffer-overflow in urb_select_configuration (bsc#1256725). | 9.1 | 0.0089 | None reported |
| High | CVE-2026-22853 | freerdp: Fixed heap-buffer-overflow in ndr_read_uint8Array | 9.8 | 0.0078 | None reported |
| High | CVE-2026-22858 | freerdp: Fixed global-buffer-overflow in crypto_base64_devoce | 9.1 | 0.0070 | None reported |
| High | CVE-2026-26965 | freerdp: Out-of-bounds Write in freerdp (bsc#1258985). | 8.8 | 0.0069 | None reported |
| High | CVE-2026-25952 | freerdp: Lock appWindow to fix use-after-free in RAIL mode | 9.8 | 0.0069 | None reported |
| High | CVE-2026-25997 | freerdp: Fix clipboard use-after-free during auto-reconnect | 9.8 | 0.0065 | None reported |
| High | CVE-2026-26955 | freerdp: Out-of-bounds Write in freerdp (bsc#1258982). | 8.8 | 0.0065 | None reported |
| High | CVE-2026-23732 | freerdp: improper validation can lead to heap buffer overflow in `Glyph_Alloc` (bsc#1256945). | 8.8 | 0.0058 | None reported |
| High | CVE-2026-26986 | freerdp: Fix double free in xf_rail_window_common cleanup | 7.8 | 0.0056 | None reported |
| High | CVE-2026-25954 | freerdp3: FreeRDP is a free implementation of the Remote Desktop Protocol | 7.5 | 0.0056 | None reported |
| High | CVE-2026-23530 | freerdp: improper validation can lead to heap buffer overflow in `planar_decompress_plane_rle` (bsc#1256940). | 9.8 | 0.0053 | None reported |
| High | CVE-2026-23531 | freerdp: improper validation in `clear_decompress` can lead to heap buffer overflow (bsc#1256941). | 9.8 | 0.0053 | None reported |
| High | CVE-2026-23532 | freerdp: mismatch between destination rectangle clamping and the actual copy size can lead to a heap buffer | 9.8 | 0.0053 | None reported |
| High | CVE-2026-23533 | freerdp: improper validation can lead to heap buffer overflow in `clear_decompress_residual_data` | 9.8 | 0.0053 | None reported |
| High | CVE-2026-23534 | freerdp: missing checks can lead to heap buffer overflow in `clear_decompress_bands_data` (bsc#1256944). | 9.8 | 0.0053 | None reported |
| High | CVE-2026-25942 | freerdp3: FreeRDP is a free implementation of the Remote Desktop Protocol | 7.5 | 0.0053 | None reported |
| High | CVE-2026-22854 | freerdp: server-controlled read length is used to read file data into an IRP output can cause | 9.8 | 0.0053 | None reported |
| High | CVE-2026-22857 | freerdp: heap-use-after-free in irp_thread_func (bsc#1256723). | 9.8 | 0.0053 | None reported |
| High | CVE-2026-27950 | freerdp3: FreeRDP is a free implementation of the Remote Desktop Protocol | 7.5 | 0.0050 | None reported |
| High | CVE-2026-23883 | freerdp: use-after-free when `update_pointer_color` and `freerdp_image_copy_from_pointer_data` fail | 9.8 | 0.0048 | None reported |
| High | CVE-2026-23884 | freerdp: use-after-free in `gdi_set_bounds` (bsc#1256947). | 9.8 | 0.0048 | None reported |
Showing 1 to 25 of 31
1Next
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.