Get real-time updates on Telegram
CVE-2026-22851, CVE-2026-22852, CVE-2026-22853 +29 more CVEs: Affected product not specified by the source
CVE-2026-22851, CVE-2026-22852, CVE-2026-22853, CVE-2026-22854, CVE-2026-22855, CVE-2026-22856, CVE-2026-22857, CVE-2026-22858, CVE-2026-22859, CVE-2026-23530, CVE-2026-23531, CVE-2026-23532, CVE-2026-23533, CVE-2026-23534, CVE-2026-23732, CVE-2026-23883, CVE-2026-23884, CVE-2026-25941, CVE-2026-25942, CVE-2026-25952, CVE-2026-25953, CVE-2026-25954, CVE-2026-25955, CVE-2026-25959, CVE-2026-25997, CVE-2026-26271, CVE-2026-26955, CVE-2026-26965, CVE-2026-26986, CVE-2026-27015, CVE-2026-27950, CVE-2026-27951 affects freerdp3. EPSS 0.00291 (percentile 0.20361), scored 20-Oct-2026.
CVE-2026-22851
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2026-22852
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2026-22853
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
Attack conditions (OSV, CVSS 4.0): Network (remote) · No privileges required · Passive user interaction
What an attacker can do
OSV’s CVSS 4.0 assessment rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2026-22854
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2026-22855
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
Attack conditions (OSV, CVSS 4.0): Network (remote) · No privileges required · Passive user interaction
What an attacker can do
OSV’s CVSS 4.0 assessment rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2026-22856
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2026-22857
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2026-22858
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
Attack conditions (OSV, CVSS 4.0): Network (remote) · No privileges required · Passive user interaction
What an attacker can do
OSV’s CVSS 4.0 assessment rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2026-22859
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
Attack conditions (OSV, CVSS 4.0): Network (remote) · No privileges required · Passive user interaction
What an attacker can do
OSV’s CVSS 4.0 assessment rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2026-23530
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
Attack conditions (OSV, CVSS 4.0): Network (remote) · No privileges required · No user interaction required
What an attacker can do
OSV’s CVSS 4.0 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2026-23531
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
Attack conditions (OSV, CVSS 4.0): Network (remote) · No privileges required · No user interaction required
What an attacker can do
OSV’s CVSS 4.0 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2026-23532
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
Attack conditions (OSV, CVSS 4.0): Network (remote) · No privileges required · No user interaction required
What an attacker can do
OSV’s CVSS 4.0 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2026-23533
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
Attack conditions (OSV, CVSS 4.0): Network (remote) · No privileges required · No user interaction required
What an attacker can do
OSV’s CVSS 4.0 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2026-23534
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
Attack conditions (OSV, CVSS 4.0): Network (remote) · No privileges required · No user interaction required
What an attacker can do
OSV’s CVSS 4.0 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2026-23732
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2026-23883
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
Attack conditions (OSV, CVSS 4.0): Network (remote) · No privileges required · No user interaction required
What an attacker can do
OSV’s CVSS 4.0 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2026-23884
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
Attack conditions (OSV, CVSS 4.0): Network (remote) · No privileges required · No user interaction required
What an attacker can do
OSV’s CVSS 4.0 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2026-25941
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2026-25942
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2026-25952
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2026-25953
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2026-25954
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2026-25955
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2026-25959
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2026-25997
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2026-26271
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2026-26955
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2026-26965
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2026-26986
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2026-27015
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2026-27950
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2026-27951
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
- CVE
- CVE-2026-22854, CVE-2026-22855, CVE-2026-22856, CVE-2026-22857, CVE-2026-22858, CVE-2026-22859, CVE-2026-23530, CVE-2026-23531, CVE-2026-23532, CVE-2026-23533, CVE-2026-23534, CVE-2026-23732, CVE-2026-23883, CVE-2026-23884, CVE-2026-25941, CVE-2026-25942, CVE-2026-25952, CVE-2026-25953, CVE-2026-25954, CVE-2026-25955, CVE-2026-25959, CVE-2026-25997, CVE-2026-26271, CVE-2026-26955, CVE-2026-26965, CVE-2026-26986, CVE-2026-27015, CVE-2026-27950, CVE-2026-27951
- Product
- freerdp3
- CCR priority
- 0.1 /100 (P5)
- EPSS
- 0.00291 · percentile 0.20471 · 2026-10-21
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- OSV.dev · Source record · observed 2026-10-21 16:37:07.765749+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-22851.html