Neutrinolabs
Neutrinolabs Xrdp: vulnerabilidades y CVE
Neutrinolabs Xrdp tiene 37 vulnerabilidades publicadas, 19 de ellas en los últimos 12 meses. 16 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE37
Últimos 12 meses19
Críticas16
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-55639 | Media (5.3) | 0.42% | — | 20 jul 2026 | xrdp is an open source RDP server. Versions 0.10.6 and prior contain a vulnerability concerning the parsing of Client Security Data within the Client MCS Connect Initial PDU with GCC Conference Create Request during the… |
| CVE-2026-55626 | Alta (7.3) | 0.19% | — | 20 jul 2026 | xrdp is an open source RDP server. In versions 0.10.6 and prior, when an authenticated user session is initialized using the Xvnc backend over UNIX domain sockets, the Xvnc process is launched with insufficient… |
| CVE-2026-55645 | Media (6.5) | 0.48% | — | 20 jul 2026 | xrdp is an open source RDP server. Versions 0.10.6 and prior contain a vulnerability concerning the processing of Client Control PDUs. During the RDP connection sequence, the parser does not perform sufficient length… |
| CVE-2026-55238 | Media (5.3) | 0.52% | — | 20 jul 2026 | xrdp is an open source RDP server. Versions 0.10.6 and prior contain a vulnerability concerning the processing of RDP Confirm Active PDU, where during the capability negotiation phase, the parser did not perform… |
| CVE-2026-54538 | Alta (7.5) | 0.67% | — | 20 jul 2026 | xrdp is an open source RDP server. In versions 0.10.6 and prior, a n issue was discovered where the software fails to properly validate the totalLength field within the RDP protocol control header during packet… |
| CVE-2026-44978 | Media (5.3) | 0.53% | — | 20 jul 2026 | xrdp is an open source RDP server. Versions 0.10.6 and prior contain a heap out-of-bounds read vulnerability within the FIPS-specific receive paths. This vulnerability does not affect the default configuration of xrdp.… |
| CVE-2026-44178 | Alta (8.8) | 0.88% | — | 20 jul 2026 | xrdp is an open source RDP server. Versions 0.10.6 and prior contain a heap-based buffer overflow vulnerability within the virtual channel forwarding mechanism. When forwarding data from a remote client to the internal… |
| CVE-2026-42218 | Media (5.3) | 0.42% | — | 20 jul 2026 | xrdp is an open source RDP server. Versions 0.10.6 and prior contain a timing side-channel vulnerability in the login interface. Due to a discrepancy in response processing times, a remote attacker can infer the… |
| CVE-2026-41521 | Crítica (9.1) | 0.67% | — | 20 jul 2026 | xrdp is an open source RDP server. Versions 0.10.6 and prior contain an integer overflow vulnerability when processing screen update messages within the vnc-any connection mode. A malicious remote VNC server can send… |
| CVE-2026-41252 | Crítica (9.8) | 1.1% | — | 20 jul 2026 | xrdp is an open source RDP server. Versions 0.10.6 and prior contain a missing bounds check in xrdp, which allows a heap-based buffer overflow when operating in vnc-any mode. The issue occurs during the handling of RFB… |
| CVE-2026-35512 | Alta (8.7) | 1.0% | — | 17 abr 2026 | xrdp is an open source RDP server. Versions through 0.10.5 have a heap-based buffer overflow in the EGFX (graphics dynamic virtual channel) implementation due to insufficient validation of client-controlled size… |
| CVE-2026-33689 | Alta (8.7) | 0.86% | — | 17 abr 2026 | xrdp is an open source RDP server. Versions through 0.10.5 have an out-of-bounds read vulnerability in the pre-authentication RDP message parsing logic. A remote, unauthenticated attacker can trigger this flaw by… |
| CVE-2026-33145 | Media (6.3) | 0.59% | — | 17 abr 2026 | xrdp is an open source RDP server. Versions through 0.10.5 allow an authenticated remote user to execute arbitrary commands on the server due to unsafe handling of the AlternateShell parameter in xrdp-sesman. When the… |
| CVE-2026-33516 | Alta (7.7) | 0.68% | — | 17 abr 2026 | xrdp is an open source RDP server. Versions through 0.10.5 contain an out-of-bounds read vulnerability during the RDP capability exchange phase. The issue occurs when memory is accessed before validating the remaining… |
| CVE-2026-32624 | Media (6.3) | 0.50% | — | 17 abr 2026 | xrdp is an open source RDP server. Versions through 0.10.5 contain a heap-based buffer overflow vulnerability in its logon processing. In environments where domain_user_separator is configured in xrdp.ini, an… |
| CVE-2026-32623 | Alta (7.7) | 0.78% | — | 17 abr 2026 | xrdp is an open source RDP server. Versions through 0.10.5 contain a heap-based buffer overflow vulnerability in the NeutrinoRDP module. When proxying RDP sessions from xrdp to another server, the module fails to… |
| CVE-2026-32107 | Alta (8.8) | 0.16% | — | 17 abr 2026 | xrdp is an open source RDP server. In versions through 0.10.5, the session execution component did not properly handle an error during the privilege drop process. This improper privilege management could allow an… |
| CVE-2026-32105 | Crítica (9.3) | 0.23% | — | 17 abr 2026 | xrdp is an open source RDP server. In versions through 0.10.5, xrdp does not implement verification for the Message Authentication Code (MAC) signature of encrypted RDP packets when using the "Classic RDP Security"… |
| CVE-2025-68670 | Crítica (9.8) | 1.4% | — | 27 ene 2026 | xrdp is an open source RDP server. xrdp before v0.10.5 contains an unauthenticated stack-based buffer overflow vulnerability. The issue stems from improper bounds checking when processing user domain information during… |
| CVE-2024-39917 | Crítica (9.8) | 0.61% | — | 12 jul 2024 | xrdp is an open source RDP server. xrdp versions prior to 0.10.0 have a vulnerability that allows attackers to make an infinite number of login attempts. The number of max login attempts is supposed to be limited by a… |
| CVE-2023-42822 | Media (6.5) | 0.74% | — | 27 sept 2023 | xrdp is an open source remote desktop protocol server. Access to the font glyphs in xrdp_painter.c is not bounds-checked . Since some of this data is controllable by the user, this can result in an out-of-bounds read… |
| CVE-2023-40184 | Media (6.5) | 0.85% | — | 30 ago 2023 | xrdp is an open source remote desktop protocol (RDP) server. In versions prior to 0.9.23 improper handling of session establishment errors allows bypassing OS-level session restrictions. The `auth_start_session`… |
| CVE-2022-23493 | Crítica (9.1) | 0.94% | — | 9 dic 2022 | xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). xrdp < v0.9.21 contain a Out of Bound Read in… |
| CVE-2022-23484 | Crítica (9.8) | 0.76% | — | 9 dic 2022 | xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). xrdp < v0.9.21 contain a Integer Overflow in xrdp_mm_process_rail_update_window_text()… |
| CVE-2022-23483 | Crítica (9.1) | 0.87% | — | 9 dic 2022 | xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). xrdp < v0.9.21 contain a Out of Bound Read in libxrdp_send_to_channel() function. There… |
| CVE-2022-23482 | Crítica (9.1) | 0.77% | — | 9 dic 2022 | xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). xrdp < v0.9.21 contain a Out of Bound Read in xrdp_sec_process_mcs_data_CS_CORE()… |
| CVE-2022-23481 | Crítica (9.1) | 0.77% | — | 9 dic 2022 | xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). xrdp < v0.9.21 contain a Out of Bound Read in xrdp_caps_process_confirm_active()… |
| CVE-2022-23480 | Crítica (9.8) | 0.89% | — | 9 dic 2022 | xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). xrdp < v0.9.21 contain a buffer over flow in devredir_proc_client_devlist_announce_req()… |
| CVE-2022-23479 | Crítica (9.8) | 0.89% | — | 9 dic 2022 | xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). xrdp < v0.9.21 contain a buffer over flow in xrdp_mm_chan_data_in() function. There are… |
| CVE-2022-23478 | Crítica (9.8) | 0.84% | — | 9 dic 2022 | xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). xrdp < v0.9.21 contain a Out of Bound Write in… |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.