freerdp3 vulnerabilities (CVE-2026-27951)
Description
Multiple security vulnerabilities were discovered in FreeRDP version 3, which could allow an attacker to obtain sensitive information, cause the application to crash resulting in denial of service, or execute arbitrary code. These issues affect various specific versions of the freerdp3 package as used in Ubuntu 24.04 LTS and 26.04 LTS. A security update has been released by Ubuntu to address these vulnerabilities.
Affected software
pkg:deb/ubuntu/freerdp3?arch=source&distro=noblepkg:deb/ubuntu/freerdp3?arch=source&distro=resoluteRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
FreeRDP versions including but not limited to 3.16.0+dfsg through versions prior to 3.30.0+dfsg-0ubuntu0.24.04.1 and 3.30.0+dfsg-0ubuntu0.26.04.1 contain multiple security issues. These vulnerabilities could be exploited to disclose sensitive information, cause denial of service via crashes, or enable arbitrary code execution. Ubuntu has released patched package versions 3.30.0+dfsg-0ubuntu0.24.04.1 and 3.30.0+dfsg-0ubuntu0.26.04.1 to remediate these issues as detailed in security notice USN-8561-1.
Potential Impact
Exploitation of these vulnerabilities could lead to unauthorized disclosure of sensitive data, denial of service conditions by crashing FreeRDP, or remote code execution. This represents a high security risk to systems running affected versions of FreeRDP.
Mitigation Recommendations
A security update is available and should be applied promptly. Ubuntu users should update to freerdp3 package versions 3.30.0+dfsg-0ubuntu0.24.04.1 for Ubuntu 24.04 LTS and 3.30.0+dfsg-0ubuntu0.26.04.1 for Ubuntu 26.04 LTS as per Ubuntu Security Notice USN-8561-1. Standard system updates will apply these fixes.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- USN-8561-1
- Osv Schema Version
- 1.7.0
- Ecosystems
- ["Ubuntu:24.04:LTS","Ubuntu:26.04:LTS"]
Patch Information
Threat ID: 6a885f2cacd9273b493f8284
Added to database: 08/21/2026, 14:22:36 UTC
Last enriched: 09/24/2026, 08:29:37 UTC
Last updated: 10/06/2026, 18:48:20 UTC
Views: 63
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.