Linux · 
Ubuntu · Package update · November 7, 2026
Ubuntu · Package update · November 7, 2026freerdp3-proxy-modules 3.32.0+dfsg-0ubuntu0.26.04.1: freerdp3-proxy-modules 3.32.0+dfsg-0ubuntu0.26.04.1 for Ubuntu 26.04.1 LTS (resolute)
freerdp3-proxy-modules 3.32.0+dfsg-0ubuntu0.26.04.1, released November 7, 2026, fixes 62 CVEs in freerdp3-proxy-modules. None of them is reported as exploited. Patch Radar priority: Urgent.
Urgent
CVEs closed
62
1 rated Critical
Exploited
0
None reported
Highest CVSS
9.1
Base score, 0 to 10
Highest EPSS
0.0052
44th percentile
Priority of the 62 CVEs
Patch now 0
Urgent 1
High 14
Routine 47
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| freerdp3-proxy-modules | Ubuntu 26.04.1 LTS (resolute) | 3.32.0+dfsg-0ubuntu0.26.04.1 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Urgent | CVE-2026-111375 | freerdp3: FreeRDP from 3.0.0 before 3.32.0 contains an out-of-bounds read vulnerability in the Windows RAIL client that allows... | 9.1 | 0.0032 | None reported |
| High | CVE-2026-111378 | freerdp: ELSA-2026-94514: freerdp security, bug fix, and enhancement update (IMPORTANT) | 8.8 | 0.0052 | None reported |
| High | CVE-2026-109257 | freerdp3-shadow-x11: FreeRDP before 3.32.0 contains a double-free vulnerability in nsc_context_initialize_encode() that leaves dangling pl... | 7.5 | 0.0039 | None reported |
| High | CVE-2026-111382 | freerdp3: FreeRDP before 3.32.0 contains a client-side heap out-of-bounds write vulnerability in general_LumaToYUV444 and gener... | 8.8 | 0.0038 | None reported |
| High | CVE-2026-110837 | freerdp: Backport several CVE fixes (CVE-2026-109242 | 8.8 | 0.0037 | None reported |
| High | CVE-2026-110838 | freerdp: ELSA-2026-94514: freerdp security, bug fix, and enhancement update (IMPORTANT) | 8.8 | 0.0033 | None reported |
| High | CVE-2026-111880 | freerdp: Resolves: RHEL-282289, RHEL-283715, RHEL-286595 | 8.8 | 0.0032 | None reported |
| High | CVE-2026-110830 | freerdp3-shadow-x11: FreeRDP before 3.32.0 fails to close prior serial handles in serial_process_irp_create, allowing a malicious RDP serv... | 8.8 | 0.0032 | None reported |
| High | CVE-2026-110833 | freerdp: ELSA-2026-94514: freerdp security, bug fix, and enhancement update (IMPORTANT) | 8.8 | 0.0032 | None reported |
| High | CVE-2026-109242 | freerdp3-shadow-x11: FreeRDP before 3.0.0 and 3.6.0 before 3.32.0 renders uninitialized heap memory from un-decoded progressive tiles beca... | 8.8 | 0.0030 | None reported |
| High | CVE-2026-111373 | freerdp3: FreeRDP before 3.32.0 contains a NULL pointer dereference vulnerability in the websocket transport that allows a mali... | 7.5 | 0.0028 | None reported |
| High | CVE-2026-110839 | libwinpr-tools3-3: FreeRDP 3.3.0 before 3.32.0, when built with WINPR_UTILS_IMAGE_JPEG=ON, has a heap-based out-of-bounds write in winpr... | 8.8 | 0.0027 | None reported |
| High | CVE-2026-109676 | freerdp3-shadow-x11: FreeRDP from 3.0.0-beta1 before 3.32.0 contains a use-after-free vulnerability in smartcard handling that allows atta... | 8.8 | 0.0026 | None reported |
| High | CVE-2026-111379 | freerdp: ELSA-2026-94514: freerdp security, bug fix, and enhancement update (IMPORTANT) | 8.8 | 0.0019 | None reported |
| High | CVE-2026-111381 | freerdp: ELSA-2026-94514: freerdp security, bug fix, and enhancement update (IMPORTANT) | 8.8 | 0.0018 | None reported |
| Routine | CVE-2026-109255 | freerdp3-shadow-x11: FreeRDP 3.0.0 before 3.32.0 contains an integer truncation vulnerability in license_check_stream_length that allows a... | n/a | 0.0050 | None reported |
| Routine | CVE-2026-109949 | freerdp3-shadow-x11: FreeRDP 3.0.0 before 3.32.0 contains an improper restriction of excessive authentication attempts in its virtual smar... | n/a | 0.0041 | None reported |
| Routine | CVE-2026-109246 | freerdp3-shadow-x11: FreeRDP before 3.32.0 contains a divide-by-zero vulnerability in the freerdp-shadow-cli shadow server: the frame id i... | n/a | 0.0040 | None reported |
| Routine | CVE-2026-109951 | freerdp3: FreeRDP 3.17.1 before 3.32.0 contains a heap buffer over-read vulnerability in DynvcTrackerHandleCreateBack of the fr... | n/a | 0.0037 | None reported |
| Routine | CVE-2026-114046 | freerdp3: FreeRDP 3.0.0 before 3.32.0 contains a null-pointer dereference in the smartcard emulation backend that accepts a nul... | n/a | 0.0035 | None reported |
| Routine | CVE-2026-109678 | freerdp3-shadow-x11: FreeRDP 3.0.0-beta1 before 3.32.0, when built with verbose WinPR assertions and using smartcard emulation, has a reac... | 6.5 | 0.0033 | None reported |
| Routine | CVE-2026-109938 | freerdp3-shadow-x11: Positive mapped-video coordinates overflow and abort FreeRDP clients A malicious or compromised RDP server can termin... | n/a | 0.0033 | None reported |
| Routine | CVE-2026-109939 | freerdp3-shadow-x11: FreeRDP 3.27.1 before 3.32.0 contains a NULL pointer dereference in update_read_cache_bitmap_v3_order() in libfreerdp... | n/a | 0.0033 | None reported |
| Routine | CVE-2026-109941 | freerdp3: FreeRDP from 2.3.0 before 3.32.0 contains an infinite loop vulnerability in http_chuncked_read that allows malicious... | n/a | 0.0033 | None reported |
| Routine | CVE-2026-109946 | freerdp3: FreeRDP 3.11.0 before 3.32.0 does not validate that AVC444 and AVC444v2 region widths are even before YUV444 conversi... | n/a | 0.0033 | None reported |
Showing 1 to 25 of 62
1Next
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.