CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
FreeRDP Remote Desktop Client Use-After-Free (UAF) Vulnerability (CVE-2026-23884) Security Advisory
[Affected Scope] FreeRDP client libraries and dependent applications prior to version 3.21.0
[Impact] Remote Code Execution (RCE) or Denial of Service (DoS) on the client side when connecting to a malicious RDP server
[Mitigation] Immediately upgrade FreeRDP to the patched version 3.21.0 or higher
FreeRDP Client Use-After-Free Vulnerability (CVE-2026-23883) Security Advisory: Remote Code Execution and DoS Risk
[Affected Scope] X11-based RDP client environments running FreeRDP versions prior to 3.21.0
[Impact] Connecting to a malicious RDP server can trigger client-side memory corruption (UAF), leading to application crashes (DoS) or potential remote code execution (RCE)
[Mitigation] Immediately upgrade FreeRDP to the patched version 3.21.0 or higher
Adobe Flash Player BitmapData Class Use-After-Free Remote Code Execution Vulnerability (CVE-2015-5123)
[Affected Scope] Adobe Flash Player 13.x through 18.x and 11.x legacy versions on Windows, OS X, and Linux
[Impact] Remote attackers can execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content
[Mitigation] Since Adobe Flash Player has reached End-of-Life (EOL), the recommended mitigation is to completely uninstall Flash Player from all systems