The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:11336 advisory.

    FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license.
    The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.

    Security Fix(es):

    * FreeRDP: FreeRDP: Heap buffer overflow allows arbitrary code execution via crafted pixel data     (CVE-2026-33984)

    * FreeRDP: FreeRDP: Denial of Service via specially crafted Remote Desktop Protocol messages     (CVE-2026-33983)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:12388 advisory.

    FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license.
    The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.

    Security Fix(es):

    * FreeRDP: FreeRDP: Heap buffer overflow allows arbitrary code execution via crafted pixel data     (CVE-2026-33984)

    * FreeRDP: FreeRDP: Denial of Service via specially crafted Remote Desktop Protocol messages     (CVE-2026-33983)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2026_8945 advisory.

    * FreeRDP: FreeRDP: Heap buffer overflow allows arbitrary code execution via crafted pixel data     (CVE-2026-33984)

    * FreeRDP: FreeRDP: Denial of Service via specially crafted Remote Desktop Protocol messages     (CVE-2026-33983)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 46 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-1c0deda1e7 advisory.

    Automatic update for freerdp2-2.11.7-16.fc46.

    ##### **Changelog**

    ```
    * Mon Aug 31 2026 Ondrej Holy <oholy@redhat.com> - 2.11.7-16
    - Backport several CVE fixes (CVE-2026-22852, CVE-2026-22854, CVE-2026-22855,       CVE-2026-22856, CVE-2026-22858, CVE-2026-22859, CVE-2026-23530,       CVE-2026-23531, CVE-2026-23532, CVE-2026-23533, CVE-2026-23534,       CVE-2026-23732, CVE-2026-23883, CVE-2026-23884, CVE-2026-23948,       CVE-2026-24491, CVE-2026-24675, CVE-2026-24676, CVE-2026-24679,       CVE-2026-24681, CVE-2026-24683, CVE-2026-24684, CVE-2026-25952,       CVE-2026-26955, CVE-2026-26965, CVE-2026-26986, CVE-2026-27951,       CVE-2026-29775, CVE-2026-31806, CVE-2026-31883, CVE-2026-31884,       CVE-2026-31885, CVE-2026-33983, CVE-2026-33984, CVE-2026-33985,       CVE-2026-45700, CVE-2026-64624, CVE-2026-67289, CVE-2026-67299 and       CVE-2026-68580)       Resolves: rhbz#2430919, rhbz#2430908, rhbz#2430898, rhbz#2430914, rhbz#2430903       Resolves: rhbz#2430924, rhbz#2430933, rhbz#2429808, rhbz#2429823, rhbz#2429794       Resolves: rhbz#2443146, rhbz#2442975, rhbz#2429799, rhbz#2429814, rhbz#2429821       Resolves: rhbz#2438309, rhbz#2438321, rhbz#2438308, rhbz#2438328, rhbz#2438324       Resolves: rhbz#2438302, rhbz#2438310, rhbz#2438300, rhbz#2447394, rhbz#2453243       Resolves: rhbz#2453240, rhbz#2442837, rhbz#2442810, rhbz#2447426, rhbz#2447422       Resolves: rhbz#2447413, rhbz#2447416, rhbz#2453247, rhbz#2442857, rhbz#2491683       Resolves: rhbz#2510295, rhbz#2510643, rhbz#2503646, rhbz#2510448

    ```

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
310719	RHEL 9 : freerdp (RHSA-2026:11336)	Nessus	Red Hat Local Security Checks	2026/4/28	2026/4/28	high
311503	RHEL 8 : freerdp (RHSA-2026:12388)	Nessus	Red Hat Local Security Checks	2026/5/2	2026/5/2	high
356059	Rocky Linux 8 [CIQ] Security Update: freerdp / freerdp-debuginfo / freerdp-debugsource / freerdp-devel / etc Multiple Vulnerabilities (crlsa-2026_8945)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/1	high
342220	Fedora 46 : freerdp2 (2026-1c0deda1e7)	Nessus	Fedora Local Security Checks	2026/9/1	2026/9/1	critical

検出

プラグインの検索

high

high

high

critical