UnratedFix available
UBUNTU-CVE-2026-91963
FreeRDP versions before 3.31.0 contain an uninitialized heap memory disclosure vulnerability in the urbdrc USB redirection channel. A malicious RDP server can induce failing USB transfers to read uninitialized heap memory from the client, defeating ASLR and enabling remote code execution when chained with memory corruption vulnerabilities.
Announced Group revision 1
Original source ↗UBUNTU-CVE-2026-91963
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: osv:UBUNTU-CVE-2026-91963
freerdp
Source reference: /affected/0/package/name
- Affected versions
- 1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1
Source reference:
/affected/0/versions1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.2Source reference:
/affected/0/versions1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.3Source reference:
/affected/0/versions1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4Source reference:
/affected/0/versions - Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
freerdp2
Source reference: /affected/1/package/name
- Affected versions
- 2.0.0~git20170725.1.1648deb+dfsg1-1
Source reference:
/affected/1/versions2.0.0~git20170725.1.1648deb+dfsg1-5Source reference:
/affected/1/versions2.0.0~git20170725.1.1648deb+dfsg1-5ubuntu1Source reference:
/affected/1/versions2.0.0~git20170725.1.1648deb+dfsg1-5ubuntu2Source reference:
/affected/1/versions2.0.0~git20170725.1.1648deb+dfsg1-6Source reference:
/affected/1/versions2.0.0~git20170725.1.1648deb+dfsg1-6build1Source reference:
/affected/1/versions2.0.0~git20170725.1.1648deb+dfsg1-7Source reference:
/affected/1/versions2.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.1Source reference:
/affected/1/versions2.1.1+dfsg1-0ubuntu0.18.04.1Source reference:
/affected/1/versions2.2.0+dfsg1-0ubuntu0.18.04.1Source reference:
/affected/1/versions2.2.0+dfsg1-0ubuntu0.18.04.2Source reference:
/affected/1/versions2.2.0+dfsg1-0ubuntu0.18.04.3Source reference:
/affected/1/versions2.2.0+dfsg1-0ubuntu0.18.04.4Source reference:
/affected/1/versions2.2.0+dfsg1-0ubuntu0.18.04.4+esm1Source reference:
/affected/1/versions2.2.0+dfsg1-0ubuntu0.18.04.4+esm2Source reference:
/affected/1/versions2.2.0+dfsg1-0ubuntu0.18.04.4+esm3Source reference:
/affected/1/versions2.2.0+dfsg1-0ubuntu0.18.04.4+esm4Source reference:
/affected/1/versions2.2.0+dfsg1-0ubuntu0.18.04.4+esm5Source reference:
/affected/1/versions2.2.0+dfsg1-0ubuntu0.18.04.4+esm6Source reference:
/affected/1/versions - Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
freerdp
Source reference: /affected/2/package/name
- Affected versions
- 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1
Source reference:
/affected/2/versions1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1Source reference:
/affected/2/versions1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2Source reference:
/affected/2/versions - Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
freerdp2
Source reference: /affected/3/package/name
- Affected versions
- 2.0.0~git20190204.1.2693389a+dfsg1-1
Source reference:
/affected/3/versions2.0.0~git20190204.1.2693389a+dfsg1-2Source reference:
/affected/3/versions2.0.0~git20190204.1.2693389a+dfsg1-2build1Source reference:
/affected/3/versions2.0.0~git20190204.1.2693389a+dfsg1-2build2Source reference:
/affected/3/versions2.1.1+dfsg1-0ubuntu0.20.04.1Source reference:
/affected/3/versions2.2.0+dfsg1-0ubuntu0.20.04.1Source reference:
/affected/3/versions2.2.0+dfsg1-0ubuntu0.20.04.2Source reference:
/affected/3/versions2.2.0+dfsg1-0ubuntu0.20.04.3Source reference:
/affected/3/versions2.2.0+dfsg1-0ubuntu0.20.04.4Source reference:
/affected/3/versions2.2.0+dfsg1-0ubuntu0.20.04.5Source reference:
/affected/3/versions2.2.0+dfsg1-0ubuntu0.20.04.6Source reference:
/affected/3/versions2.6.1+dfsg1-0ubuntu0.20.04.1Source reference:
/affected/3/versions2.6.1+dfsg1-0ubuntu0.20.04.2Source reference:
/affected/3/versions2.6.1+dfsg1-0ubuntu0.20.04.2+esm1Source reference:
/affected/3/versions2.6.1+dfsg1-0ubuntu0.20.04.2+esm2Source reference:
/affected/3/versions2.6.1+dfsg1-0ubuntu0.20.04.2+esm3Source reference:
/affected/3/versions2.6.1+dfsg1-0ubuntu0.20.04.2+esm4Source reference:
/affected/3/versions - Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
freerdp2
Source reference: /affected/4/package/name
- Affected versions
- 2.3.0+dfsg1-2build1
Source reference:
/affected/4/versions2.3.0+dfsg1-2ubuntu1Source reference:
/affected/4/versions2.3.0+dfsg1-2ubuntu2Source reference:
/affected/4/versions2.4.1+dfsg1-1Source reference:
/affected/4/versions2.4.1+dfsg1-1ubuntu1Source reference:
/affected/4/versions2.4.1+dfsg1-1ubuntu2Source reference:
/affected/4/versions2.5.0+dfsg1-1Source reference:
/affected/4/versions2.6.0+dfsg1-1Source reference:
/affected/4/versions2.6.1+dfsg1-1Source reference:
/affected/4/versions2.6.1+dfsg1-3Source reference:
/affected/4/versions2.6.1+dfsg1-3ubuntu1Source reference:
/affected/4/versions2.6.1+dfsg1-3ubuntu2Source reference:
/affected/4/versions2.6.1+dfsg1-3ubuntu2.1Source reference:
/affected/4/versions2.6.1+dfsg1-3ubuntu2.2Source reference:
/affected/4/versions2.6.1+dfsg1-3ubuntu2.3Source reference:
/affected/4/versions2.6.1+dfsg1-3ubuntu2.4Source reference:
/affected/4/versions2.6.1+dfsg1-3ubuntu2.5Source reference:
/affected/4/versions2.6.1+dfsg1-3ubuntu2.6Source reference:
/affected/4/versions2.6.1+dfsg1-3ubuntu2.7Source reference:
/affected/4/versions2.6.1+dfsg1-3ubuntu2.8Source reference:
/affected/4/versions2.6.1+dfsg1-3ubuntu2.9Source reference:
/affected/4/versions2.6.1+dfsg1-3ubuntu2.10Source reference:
/affected/4/versions2.6.1+dfsg1-3ubuntu2.11Source reference:
/affected/4/versions - Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
freerdp3
Source reference: /affected/5/package/name
- Affected versions
- 3.4.0+dfsg1-0ubuntu2
Source reference:
/affected/5/versions3.4.0+dfsg1-0ubuntu3Source reference:
/affected/5/versions3.4.0+dfsg1-0ubuntu4Source reference:
/affected/5/versions3.5.0+dfsg1-0ubuntu1Source reference:
/affected/5/versions3.5.1+dfsg1-0ubuntu1Source reference:
/affected/5/versions3.5.1+dfsg1-0ubuntu1.1Source reference:
/affected/5/versions3.5.1+dfsg1-0ubuntu1.2Source reference:
/affected/5/versions3.5.1+dfsg1-0ubuntu1.4Source reference:
/affected/5/versions3.5.1+dfsg1-0ubuntu1.5Source reference:
/affected/5/versions3.5.1+dfsg1-0ubuntu1.6Source reference:
/affected/5/versions3.30.0+dfsg-0ubuntu0.24.04.1Source reference:
/affected/5/versions3.30.0+dfsg-0ubuntu0.24.04.2Source reference:
/affected/5/versions - Fixed versions
- 3.31.0+dfsg-0ubuntu0.24.04.1
Source reference:
/affected/5/ranges - Prerequisites
- Not stated in this record
freerdp2
Source reference: /affected/6/package/name
- Affected versions
- 2.10.0+dfsg1-1.1ubuntu1
Source reference:
/affected/6/versions2.11.2+dfsg1-1Source reference:
/affected/6/versions2.11.2+dfsg1-1build1Source reference:
/affected/6/versions2.11.2+dfsg1-1build3Source reference:
/affected/6/versions2.11.5+dfsg1-1build1Source reference:
/affected/6/versions2.11.5+dfsg1-1build2Source reference:
/affected/6/versions2.11.5+dfsg1-1ubuntu0.1~esm1Source reference:
/affected/6/versions2.11.5+dfsg1-1ubuntu0.1~esm2Source reference:
/affected/6/versions2.11.5+dfsg1-1ubuntu0.1~esm3Source reference:
/affected/6/versions2.11.5+dfsg1-1ubuntu0.1~esm4Source reference:
/affected/6/versions2.11.5+dfsg1-1ubuntu0.1~esm5Source reference:
/affected/6/versions2.11.5+dfsg1-1ubuntu0.1~esm6Source reference:
/affected/6/versions - Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
freerdp3
Source reference: /affected/7/package/name
- Affected versions
- 3.16.0+dfsg-2
Source reference:
/affected/7/versions3.18.0+dfsg-1ubuntu1Source reference:
/affected/7/versions3.19.0+dfsg-1Source reference:
/affected/7/versions3.19.1+dfsg-1Source reference:
/affected/7/versions3.20.0+dfsg-1Source reference:
/affected/7/versions3.20.2+dfsg-1Source reference:
/affected/7/versions3.21.0+dfsg-1Source reference:
/affected/7/versions3.22.0+dfsg-1Source reference:
/affected/7/versions3.24.1+dfsg-1ubuntu1Source reference:
/affected/7/versions3.24.2+dfsg-1ubuntu1Source reference:
/affected/7/versions3.24.2+dfsg-1ubuntu1.1Source reference:
/affected/7/versions3.30.0+dfsg-0ubuntu0.26.04.1Source reference:
/affected/7/versions3.30.0+dfsg-0ubuntu0.26.04.2Source reference:
/affected/7/versions - Fixed versions
- 3.31.0+dfsg-0ubuntu0.26.04.1
Source reference:
/affected/7/ranges - Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "freerdp",
"purl": "pkg:deb/ubuntu/freerdp?arch=source&distro=xenial",
"ecosystem": "Ubuntu:16.04:LTS"
},
"versions": [
"1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1",
"1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.2",
"1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.3",
"1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-91963.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "freerdp-x11",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libfreerdp-cache1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libfreerdp-client1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libfreerdp-codec1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libfreerdp-common1.1.0",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libfreerdp-core1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libfreerdp-crypto1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libfreerdp-gdi1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libfreerdp-locale1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libfreerdp-plugins-standard",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libfreerdp-primitives1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libfreerdp-rail1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libfreerdp-utils1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-asn1-0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-bcrypt0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-credentials0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-credui0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-crt0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-crypto0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-dsparse0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-environment0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-error0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-file0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-handle0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-heap0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-input0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-interlocked0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-io0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-library0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-path0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-pipe0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-pool0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-registry0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-rpc0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-sspi0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-sspicli0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-synch0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-sysinfo0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-thread0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-timezone0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-utils0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-winhttp0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-winsock0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libxfreerdp-client1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "freerdp2",
"purl": "pkg:deb/ubuntu/freerdp2?arch=source&distro=esm-infra%2Fbionic",
"ecosystem": "Ubuntu:Pro:18.04:LTS"
},
"versions": [
"2.0.0~git20170725.1.1648deb+dfsg1-1",
"2.0.0~git20170725.1.1648deb+dfsg1-5",
"2.0.0~git20170725.1.1648deb+dfsg1-5ubuntu1",
"2.0.0~git20170725.1.1648deb+dfsg1-5ubuntu2",
"2.0.0~git20170725.1.1648deb+dfsg1-6",
"2.0.0~git20170725.1.1648deb+dfsg1-6build1",
"2.0.0~git20170725.1.1648deb+dfsg1-7",
"2.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.1",
"2.1.1+dfsg1-0ubuntu0.18.04.1",
"2.2.0+dfsg1-0ubuntu0.18.04.1",
"2.2.0+dfsg1-0ubuntu0.18.04.2",
"2.2.0+dfsg1-0ubuntu0.18.04.3",
"2.2.0+dfsg1-0ubuntu0.18.04.4",
"2.2.0+dfsg1-0ubuntu0.18.04.4+esm1",
"2.2.0+dfsg1-0ubuntu0.18.04.4+esm2",
"2.2.0+dfsg1-0ubuntu0.18.04.4+esm3",
"2.2.0+dfsg1-0ubuntu0.18.04.4+esm4",
"2.2.0+dfsg1-0ubuntu0.18.04.4+esm5",
"2.2.0+dfsg1-0ubuntu0.18.04.4+esm6"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-91963.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "freerdp2-shadow-x11",
"binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.4+esm6"
},
{
"binary_name": "freerdp2-wayland",
"binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.4+esm6"
},
{
"binary_name": "freerdp2-x11",
"binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.4+esm6"
},
{
"binary_name": "libfreerdp-client2-2",
"binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.4+esm6"
},
{
"binary_name": "libfreerdp-server2-2",
"binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.4+esm6"
},
{
"binary_name": "libfreerdp-shadow-subsystem2-2",
"binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.4+esm6"
},
{
"binary_name": "libfreerdp-shadow2-2",
"binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.4+esm6"
},
{
"binary_name": "libfreerdp2-2",
"binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.4+esm6"
},
{
"binary_name": "libuwac0-0",
"binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.4+esm6"
},
{
"binary_name": "libwinpr-tools2-2",
"binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.4+esm6"
},
{
"binary_name": "libwinpr2-2",
"binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.4+esm6"
},
{
"binary_name": "winpr-utils",
"binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.4+esm6"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "freerdp",
"purl": "pkg:deb/ubuntu/freerdp?arch=source&distro=bionic",
"ecosystem": "Ubuntu:18.04:LTS"
},
"versions": [
"1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1",
"1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
"1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-91963.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "freerdp-x11",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libfreerdp-cache1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libfreerdp-client1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libfreerdp-codec1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libfreerdp-common1.1.0",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libfreerdp-core1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libfreerdp-crypto1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libfreerdp-gdi1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libfreerdp-locale1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libfreerdp-plugins-standard",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libfreerdp-primitives1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libfreerdp-rail1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libfreerdp-utils1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-asn1-0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-bcrypt0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-credentials0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-credui0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-crt0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-crypto0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-dsparse0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-environment0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-error0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-file0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-handle0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-heap0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-input0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-interlocked0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-io0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-library0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-path0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-pipe0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-pool0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-registry0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-rpc0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-sspi0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-sspicli0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-synch0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-sysinfo0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-thread0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-timezone0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-utils0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-winhttp0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-winsock0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libxfreerdp-client1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "freerdp2",
"purl": "pkg:deb/ubuntu/freerdp2?arch=source&distro=esm-infra%2Ffocal",
"ecosystem": "Ubuntu:Pro:20.04:LTS"
},
"versions": [
"2.0.0~git20190204.1.2693389a+dfsg1-1",
"2.0.0~git20190204.1.2693389a+dfsg1-2",
"2.0.0~git20190204.1.2693389a+dfsg1-2build1",
"2.0.0~git20190204.1.2693389a+dfsg1-2build2",
"2.1.1+dfsg1-0ubuntu0.20.04.1",
"2.2.0+dfsg1-0ubuntu0.20.04.1",
"2.2.0+dfsg1-0ubuntu0.20.04.2",
"2.2.0+dfsg1-0ubuntu0.20.04.3",
"2.2.0+dfsg1-0ubuntu0.20.04.4",
"2.2.0+dfsg1-0ubuntu0.20.04.5",
"2.2.0+dfsg1-0ubuntu0.20.04.6",
"2.6.1+dfsg1-0ubuntu0.20.04.1",
"2.6.1+dfsg1-0ubuntu0.20.04.2",
"2.6.1+dfsg1-0ubuntu0.20.04.2+esm1",
"2.6.1+dfsg1-0ubuntu0.20.04.2+esm2",
"2.6.1+dfsg1-0ubuntu0.20.04.2+esm3",
"2.6.1+dfsg1-0ubuntu0.20.04.2+esm4"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-91963.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "freerdp2-shadow-x11",
"binary_version": "2.6.1+dfsg1-0ubuntu0.20.04.2+esm4"
},
{
"binary_name": "freerdp2-wayland",
"binary_version": "2.6.1+dfsg1-0ubuntu0.20.04.2+esm4"
},
{
"binary_name": "freerdp2-x11",
"binary_version": "2.6.1+dfsg1-0ubuntu0.20.04.2+esm4"
},
{
"binary_name": "libfreerdp-client2-2",
"binary_version": "2.6.1+dfsg1-0ubuntu0.20.04.2+esm4"
},
{
"binary_name": "libfreerdp-server2-2",
"binary_version": "2.6.1+dfsg1-0ubuntu0.20.04.2+esm4"
},
{
"binary_name": "libfreerdp-shadow-subsystem2-2",
"binary_version": "2.6.1+dfsg1-0ubuntu0.20.04.2+esm4"
},
{
"binary_name": "libfreerdp-shadow2-2",
"binary_version": "2.6.1+dfsg1-0ubuntu0.20.04.2+esm4"
},
{
"binary_name": "libfreerdp2-2",
"binary_version": "2.6.1+dfsg1-0ubuntu0.20.04.2+esm4"
},
{
"binary_name": "libuwac0-0",
"binary_version": "2.6.1+dfsg1-0ubuntu0.20.04.2+esm4"
},
{
"binary_name": "libwinpr-tools2-2",
"binary_version": "2.6.1+dfsg1-0ubuntu0.20.04.2+esm4"
},
{
"binary_name": "libwinpr2-2",
"binary_version": "2.6.1+dfsg1-0ubuntu0.20.04.2+esm4"
},
{
"binary_name": "winpr-utils",
"binary_version": "2.6.1+dfsg1-0ubuntu0.20.04.2+esm4"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "freerdp2",
"purl": "pkg:deb/ubuntu/freerdp2?arch=source&distro=jammy",
"ecosystem": "Ubuntu:22.04:LTS"
},
"versions": [
"2.3.0+dfsg1-2build1",
"2.3.0+dfsg1-2ubuntu1",
"2.3.0+dfsg1-2ubuntu2",
"2.4.1+dfsg1-1",
"2.4.1+dfsg1-1ubuntu1",
"2.4.1+dfsg1-1ubuntu2",
"2.5.0+dfsg1-1",
"2.6.0+dfsg1-1",
"2.6.1+dfsg1-1",
"2.6.1+dfsg1-3",
"2.6.1+dfsg1-3ubuntu1",
"2.6.1+dfsg1-3ubuntu2",
"2.6.1+dfsg1-3ubuntu2.1",
"2.6.1+dfsg1-3ubuntu2.2",
"2.6.1+dfsg1-3ubuntu2.3",
"2.6.1+dfsg1-3ubuntu2.4",
"2.6.1+dfsg1-3ubuntu2.5",
"2.6.1+dfsg1-3ubuntu2.6",
"2.6.1+dfsg1-3ubuntu2.7",
"2.6.1+dfsg1-3ubuntu2.8",
"2.6.1+dfsg1-3ubuntu2.9",
"2.6.1+dfsg1-3ubuntu2.10",
"2.6.1+dfsg1-3ubuntu2.11"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-91963.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "freerdp2-shadow-x11",
"binary_version": "2.6.1+dfsg1-3ubuntu2.11"
},
{
"binary_name": "freerdp2-wayland",
"binary_version": "2.6.1+dfsg1-3ubuntu2.11"
},
{
"binary_name": "freerdp2-x11",
"binary_version": "2.6.1+dfsg1-3ubuntu2.11"
},
{
"binary_name": "libfreerdp-client2-2",
"binary_version": "2.6.1+dfsg1-3ubuntu2.11"
},
{
"binary_name": "libfreerdp-server2-2",
"binary_version": "2.6.1+dfsg1-3ubuntu2.11"
},
{
"binary_name": "libfreerdp-shadow-subsystem2-2",
"binary_version": "2.6.1+dfsg1-3ubuntu2.11"
},
{
"binary_name": "libfreerdp-shadow2-2",
"binary_version": "2.6.1+dfsg1-3ubuntu2.11"
},
{
"binary_name": "libfreerdp2-2",
"binary_version": "2.6.1+dfsg1-3ubuntu2.11"
},
{
"binary_name": "libuwac0-0",
"binary_version": "2.6.1+dfsg1-3ubuntu2.11"
},
{
"binary_name": "libwinpr-tools2-2",
"binary_version": "2.6.1+dfsg1-3ubuntu2.11"
},
{
"binary_name": "libwinpr2-2",
"binary_version": "2.6.1+dfsg1-3ubuntu2.11"
},
{
"binary_name": "winpr-utils",
"binary_version": "2.6.1+dfsg1-3ubuntu2.11"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.31.0+dfsg-0ubuntu0.24.04.1"
}
]
}
],
"package": {
"name": "freerdp3",
"purl": "pkg:deb/ubuntu/freerdp3?arch=source&distro=noble",
"ecosystem": "Ubuntu:24.04:LTS"
},
"versions": [
"3.4.0+dfsg1-0ubuntu2",
"3.4.0+dfsg1-0ubuntu3",
"3.4.0+dfsg1-0ubuntu4",
"3.5.0+dfsg1-0ubuntu1",
"3.5.1+dfsg1-0ubuntu1",
"3.5.1+dfsg1-0ubuntu1.1",
"3.5.1+dfsg1-0ubuntu1.2",
"3.5.1+dfsg1-0ubuntu1.4",
"3.5.1+dfsg1-0ubuntu1.5",
"3.5.1+dfsg1-0ubuntu1.6",
"3.30.0+dfsg-0ubuntu0.24.04.1",
"3.30.0+dfsg-0ubuntu0.24.04.2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-91963.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "freerdp3-shadow-x11",
"binary_version": "3.31.0+dfsg-0ubuntu0.24.04.1"
},
{
"binary_name": "freerdp3-wayland",
"binary_version": "3.31.0+dfsg-0ubuntu0.24.04.1"
},
{
"binary_name": "freerdp3-x11",
"binary_version": "3.31.0+dfsg-0ubuntu0.24.04.1"
},
{
"binary_name": "libfreerdp-client3-3",
"binary_version": "3.31.0+dfsg-0ubuntu0.24.04.1"
},
{
"binary_name": "libfreerdp-server3-3",
"binary_version": "3.31.0+dfsg-0ubuntu0.24.04.1"
},
{
"binary_name": "libfreerdp-shadow-subsystem3-3",
"binary_version": "3.31.0+dfsg-0ubuntu0.24.04.1"
},
{
"binary_name": "libfreerdp-shadow3-3",
"binary_version": "3.31.0+dfsg-0ubuntu0.24.04.1"
},
{
"binary_name": "libfreerdp3-3",
"binary_version": "3.31.0+dfsg-0ubuntu0.24.04.1"
},
{
"binary_name": "libwinpr-tools3-3",
"binary_version": "3.31.0+dfsg-0ubuntu0.24.04.1"
},
{
"binary_name": "libwinpr3-3",
"binary_version": "3.31.0+dfsg-0ubuntu0.24.04.1"
},
{
"binary_name": "winpr3-utils",
"binary_version": "3.31.0+dfsg-0ubuntu0.24.04.1"
}
],
"availability": "No subscription required"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "freerdp2",
"purl": "pkg:deb/ubuntu/freerdp2?arch=source&distro=esm-apps%2Fnoble",
"ecosystem": "Ubuntu:Pro:24.04:LTS"
},
"versions": [
"2.10.0+dfsg1-1.1ubuntu1",
"2.11.2+dfsg1-1",
"2.11.2+dfsg1-1build1",
"2.11.2+dfsg1-1build3",
"2.11.5+dfsg1-1build1",
"2.11.5+dfsg1-1build2",
"2.11.5+dfsg1-1ubuntu0.1~esm1",
"2.11.5+dfsg1-1ubuntu0.1~esm2",
"2.11.5+dfsg1-1ubuntu0.1~esm3",
"2.11.5+dfsg1-1ubuntu0.1~esm4",
"2.11.5+dfsg1-1ubuntu0.1~esm5",
"2.11.5+dfsg1-1ubuntu0.1~esm6"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-91963.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "freerdp2-shadow-x11",
"binary_version": "2.11.5+dfsg1-1ubuntu0.1~esm6"
},
{
"binary_name": "freerdp2-wayland",
"binary_version": "2.11.5+dfsg1-1ubuntu0.1~esm6"
},
{
"binary_name": "freerdp2-x11",
"binary_version": "2.11.5+dfsg1-1ubuntu0.1~esm6"
},
{
"binary_name": "libfreerdp-client2-2t64",
"binary_version": "2.11.5+dfsg1-1ubuntu0.1~esm6"
},
{
"binary_name": "libfreerdp-server2-2t64",
"binary_version": "2.11.5+dfsg1-1ubuntu0.1~esm6"
},
{
"binary_name": "libfreerdp-shadow-subsystem2-2t64",
"binary_version": "2.11.5+dfsg1-1ubuntu0.1~esm6"
},
{
"binary_name": "libfreerdp-shadow2-2t64",
"binary_version": "2.11.5+dfsg1-1ubuntu0.1~esm6"
},
{
"binary_name": "libfreerdp2-2t64",
"binary_version": "2.11.5+dfsg1-1ubuntu0.1~esm6"
},
{
"binary_name": "libuwac0-0t64",
"binary_version": "2.11.5+dfsg1-1ubuntu0.1~esm6"
},
{
"binary_name": "libwinpr-tools2-2t64",
"binary_version": "2.11.5+dfsg1-1ubuntu0.1~esm6"
},
{
"binary_name": "libwinpr2-2t64",
"binary_version": "2.11.5+dfsg1-1ubuntu0.1~esm6"
},
{
"binary_name": "winpr-utils",
"binary_version": "2.11.5+dfsg1-1ubuntu0.1~esm6"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.31.0+dfsg-0ubuntu0.26.04.1"
}
]
}
],
"package": {
"name": "freerdp3",
"purl": "pkg:deb/ubuntu/freerdp3?arch=source&distro=resolute",
"ecosystem": "Ubuntu:26.04:LTS"
},
"versions": [
"3.16.0+dfsg-2",
"3.18.0+dfsg-1ubuntu1",
"3.19.0+dfsg-1",
"3.19.1+dfsg-1",
"3.20.0+dfsg-1",
"3.20.2+dfsg-1",
"3.21.0+dfsg-1",
"3.22.0+dfsg-1",
"3.24.1+dfsg-1ubuntu1",
"3.24.2+dfsg-1ubuntu1",
"3.24.2+dfsg-1ubuntu1.1",
"3.30.0+dfsg-0ubuntu0.26.04.1",
"3.30.0+dfsg-0ubuntu0.26.04.2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-91963.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "freerdp-proxy",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "freerdp-proxy-modules",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "freerdp-sdl",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "freerdp-shadow-x11",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "freerdp-wayland",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "freerdp-x11",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "freerdp3-proxy",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "freerdp3-proxy-modules",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "freerdp3-sdl",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "freerdp3-shadow-x11",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "freerdp3-wayland",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "freerdp3-x11",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "libfreerdp-client3-3",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "libfreerdp-server-proxy3-3",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "libfreerdp-server3-3",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "libfreerdp-shadow-subsystem3-3",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "libfreerdp-shadow3-3",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "libfreerdp3-3",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "libwinpr-tools3-3",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "libwinpr3-3",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "winpr-utils",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "winpr3-utils",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
}
],
"availability": "No subscription required"
}
}
]Publisher severity
No explicit severity was provided.
- Event
- #5843 · Revision 1
- Added to Heist Feed
- Publisher date