The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-3334 advisory.

    [2:2.11.7-3]
    - Backport several CVE fixes       Resolves: RHEL-148825, RHEL-148865, RHEL-148982

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-228:04 advisory.

    * freerdp: FreeRDP heap-buffer-overflow (CVE-2026-22855)
      * freerdp: FreeRDP global-buffer-overflow (CVE-2026-22858)
      * freerdp: FreeRDP heap-buffer-overflow (CVE-2026-22859)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006318 advisory.

    FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, the URBDRC client does     not perform bounds checking on serversupplied MSUSB_INTERFACE_DESCRIPTOR values and uses them as     indices in libusb_udev_complete_msconfig_setup, causing an outofbounds read. This vulnerability is     fixed in 3.20.1.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007196 advisory.

    FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, the URBDRC client does     not perform bounds checking on serversupplied MSUSB_INTERFACE_DESCRIPTOR values and uses them as     indices in libusb_udev_complete_msconfig_setup, causing an outofbounds read. This vulnerability is     fixed in 3.20.1.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1771010890 advisory.

  - FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a malicious RDP server     can trigger a heap-buffer-overflow write in the FreeRDP client when processing Audio Input (AUDIN) format     lists. audin_process_formats reuses callback->formats_count across multiple MSG_SNDIN_FORMATS PDUs and     writes past the newly allocated formats array, causing memory corruption and a crash. This vulnerability     is fixed in 3.20.1. (CVE-2026-22852)

  - FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, the URBDRC client does     not perform bounds checking on serversupplied MSUSB_INTERFACE_DESCRIPTOR values and uses them as indices     in libusb_udev_complete_msconfig_setup, causing an outofbounds read. This vulnerability is fixed in     3.20.1. (CVE-2026-22859)

  - FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, in ClearCodec,     when `glyphData` is present, `clear_decompress` calls `freerdp_image_copy_no_overlap` without validating     the destination rectangle, allowing an out-of-bounds read/write via crafted RDPGFX surface updates. A     malicious server can trigger a clientside heap buffer overflow, causing a crash (DoS) and potential heap     corruption with codeexecution risk depending on allocator behavior and surrounding heap layout. Version     3.21.0 contains a patch for the issue. (CVE-2026-23531)

  - FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, FastGlyph     parsing trusts `cbData`/remaining length and never validates against the minimum size implied by `cx/cy`.
    A malicious server can trigger a clientside global buffer overflow, causing a crash (DoS). Version 3.21.0     contains a patch for the issue. (CVE-2026-23732)

  - FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, `xf_Pointer_New`     frees `cursorPixels` on failure, then `pointer_free` calls `xf_Pointer_Free` and frees it again,     triggering ASan UAF. A malicious server can trigger a clientside use after free, causing a crash (DoS)     and potential heap corruption with codeexecution risk depending on allocator behavior and surrounding     heap layout. Version 3.21.0 contains a patch for the issue. (CVE-2026-23883)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0345-1 advisory.

    - CVE-2025-4478: Fixed initialization of function pointers after       resource allocations (bsc#1243109)
    - CVE-2026-22851: Fixed RDPGFX ResetGraphics race leading to       use-after-free in SDL client (sdl->primary) (bsc#1256717)
    - CVE-2026-22852: Fixed heap-buffer-overflow in audin_process_formats       (bsc#1256718)
    - CVE-2026-22853: Fixed heap-buffer-overflow in ndr_read_uint8Array       (bsc#1256719)
    - CVE-2026-22854: Fixed heap-buffer-overflow in drive_process_irp_read       (bsc#1256720)
    - CVE-2026-22855: Fixed heap-buffer-overflow in smartcard_unpack_set_attrib_call       (bsc#1256721)
    - CVE-2026-22856: Fixed heap-use-after-free in create_irp_thread (bsc#1256722)
    - CVE-2026-22857: Fixed heap-use-after-free in irp_thread_func (bsc#1256723)
    - CVE-2026-22858: Fixed global-buffer-overflow in crypto_base64_devoce       (bsc#1256724)
    - CVE-2026-22859: Fixed heap-buffer-overflow in urb_select_configuration       (bsc#1256725)
    - CVE-2026-23530: Fixed improper validation leading to heap buffer overflow       in `planar_decompress_plane_rle` (bsc#1256940)
    - CVE-2026-23531: Fixed improper validation in `clear_decompress` leading to       heap buffer overflow (bsc#1256941)
    - CVE-2026-23532: Fixed mismatch between destination rectangle clamping and       the actual copy size leading to heap buffer overflow in       `gdi_SurfaceToSurface` (bsc#1256942)
    - CVE-2026-23533: Fixed improper validation leading to heap buffer overflow in       `clear_decompress_residual_data` (bsc#1256943)
    - CVE-2026-23534: Fixed missing checks leading to heap buffer overflow in       `clear_deceompress_bands_data` (bsc#1256944)
    - CVE-2026-23732: Fixed improper validation leading to heap buffer overflow in       `Glyph_alloc` (bsc#1256945)
    - CVE-2026-23883: Fixed use-after-free when `update_pointer_color` and       `freerdp_image_copy_fromPointer_data` fail (bsc#1256946)
    - CVE-2026-23884: Fixed use-after-free in `gdi_set_bounds` (bsc#1256947)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:19033 advisory.

    FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license.
    The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.

    Security Fix(es):

    * freerdp: FreeRDP heap-buffer-overflow (CVE-2026-22855)

    * freerdp: FreeRDP heap-buffer-overflow (CVE-2026-22853)

    * freerdp: FreeRDP global-buffer-overflow (CVE-2026-22858)

    * freerdp: FreeRDP heap-use-after-free (CVE-2026-22856)

    * freerdp: FreeRDP heap-buffer-overflow (CVE-2026-22854)

    * freerdp: FreeRDP heap-buffer-overflow (CVE-2026-22859)

    * freerdp: FreeRDP heap-buffer-overflow (CVE-2026-22852)

    * freerdp: FreeRDP: Denial of Service via FastGlyph parsing buffer overflow (CVE-2026-23732)

    * freerdp: FreeRDP: Denial of Service via use after free in ecam_channel_write (CVE-2026-24678)

    * freerdp: FreeRDP: Denial of Service via use-after-free in AUDIN format renegotiation (CVE-2026-24676)

    * freerdp: FreeRDP has a heap-use-after-free in video_timer (CVE-2026-24491)

    * freerdp: FreeRDP has a NULL Pointer Dereference in rdp_write_logon_info_v2() (CVE-2026-23948)

    * freerdp: FreeRDP has a Heap-use-after-free in play_thread (CVE-2026-24684)

    * freerdp: FreeRDP has a heap-use-after-free in urb_bulk_transfer_cb (CVE-2026-24681)

    * freerdp: FreeRDP has a Heap-buffer-overflow in audio_formats_free (CVE-2026-24682)

    * freerdp: FreeRDP has a heap-use-after-free in ainput_send_input_event (CVE-2026-24683)

    * freerdp: FreeRDP has a heap-buffer-overflow in urb_select_interface (CVE-2026-24679)

    * freerdp: FreeRDP has a Heap-use-after-free in urb_select_interface (CVE-2026-24675)

    * freerdp: FreeRDP: Arbitrary code execution via heap out-of-bounds write in RLE planar decode path     (CVE-2026-26965)

    * freerdp: FreeRDP: Arbitrary code execution via heap buffer overflow in GDI surface pipeline     (CVE-2026-26955)

    * freerdp: FreeRDP: Arbitrary code execution via crafted Remote Desktop Protocol (RDP) server messages     (CVE-2026-31806)

    * FreeRDP: FreeRDP: Heap buffer overflow allows arbitrary code execution via crafted pixel data     (CVE-2026-33984)

    * FreeRDP: FreeRDP: Denial of Service via specially crafted Remote Desktop Protocol messages     (CVE-2026-33983)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-19033 advisory.

    - Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984)
    - Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983)       Resolves: RHEL-162947, RHEL-162963

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
300386	Oracle Linux 8 : freerdp (ELSA-2026-3334)	Nessus	Oracle Linux Local Security Checks	2026/3/3	2026/4/30	medium
300483	MiracleLinux 8 : freerdp-2.11.7-3.el8_10 (AXSA:2026-228:04)	Nessus	Miracle Linux Local Security Checks	2026/3/3	2026/3/3	medium
303875	Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: freerdp (UTSA-2026-006318)	Nessus	Unity Linux Local Security Checks	2026/3/26	2026/3/26	medium
306811	Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: freerdp (UTSA-2026-007196)	Nessus	Unity Linux Local Security Checks	2026/4/16	2026/4/20	medium
361336	CentOS Linux 7 [TuxCare] Security Update: freerdp / freerdp-devel / freerdp-libs / libwinpr / libwinpr-devel Multiple Vulnerabilities (CENTOS7:CLSA-2026:1771010890)	Nessus	CentOS Local Security Checks	2026/10/1	2026/11/6	high
297418	SUSE SLED15: freerdp / freerdp-devel / freerdp-proxy / freerdp-proxy-plugins / etc (SUSE-SU-2026:0345-1)	Nessus	SuSE Local Security Checks	2026/1/31	2026/6/26	high
315441	RHEL 10 : freerdp (RHSA-2026:19033)	Nessus	Red Hat Local Security Checks	2026/5/19	2026/6/12	critical
327011	Oracle Linux 10 : freerdp (ELSA-2026-19033)	Nessus	Oracle Linux Local Security Checks	2026/7/15	2026/7/15	critical

検出

プラグインの検索

medium

medium

medium

medium

high

high

critical

critical