Skip to main content

xrdp CVE-2026-41252

| EUVDEUVD-2026-46017 CRITICAL
Heap-based Buffer Overflow (CWE-122)
2026-07-09 vendor:ubuntu
Buffer Overflow Heap Overflow Xrdp Suse Neutrinolabs
9.8
CVSS 3.1 · Vendor: vendor:ubuntu
Share

Severity by source

Vendor (vendor:ubuntu) PRIMARY
9.8 CRITICAL
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
vuln.today AI
9.8 CRITICAL

Pre-auth RDP parsing is network-reachable with no privileges or interaction (AV:N/AC:L/PR:N/UI:N); a heap overflow plausibly yields full memory-safety impact, so C/I/A:H, matching the provided vector.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
SUSE
CRITICAL
qualitative

Primary rating from Vendor (vendor:ubuntu).

CVSS VectorVendor: vendor:ubuntu

Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

6
Patch available
Jul 20, 2026 - 18:18 EUVD
Source Code Evidence Fetched
Jul 20, 2026 - 17:28 vuln.today
Analysis Updated
Jul 20, 2026 - 17:28 vuln.today
v2 (cvss_changed)
Re-analysis Queued
Jul 20, 2026 - 17:22 vuln.today
cvss_changed
CVSS changed
Jul 20, 2026 - 17:22 NVD
9.8 (CRITICAL)
Analysis Generated
Jul 09, 2026 - 19:48 vuln.today

DescriptionCVE.org

[Unknown description]

AnalysisAI

Remote unauthenticated heap buffer overflow in xrdp (the open-source Remote Desktop Protocol server from neutrinolabs) affects versions prior to v0.10.6.1 and is fixed alongside nine other vulnerabilities in that release. Per the CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N) a network attacker who can reach the RDP listener can corrupt heap memory without authentication or user interaction, with high impact to confidentiality, integrity and availability. No public exploit has been identified at time of analysis, and the CVE is not listed in CISA KEV.

Technical ContextAI

xrdp implements the Microsoft Remote Desktop Protocol on Unix/Linux, accepting RDP client connections (typically TCP/3389) and brokering sessions to a backend such as Xvnc or Xorg. The root cause is classified as CWE-122 (Heap-based Buffer Overflow), and the vendor tags 'Buffer Overflow, Heap Overflow' confirm memory corruption on the heap - commonly the result of parsing attacker-controlled RDP/PDU fields (length or size values) into an undersized dynamically-allocated buffer during the pre-authentication protocol handshake. Because RDP parsing occurs before a session is established, such flaws are typically reachable by any client that can open a connection. The exact vulnerable component is not disclosed in the available data; the GHSA-w5vg-6qmv-j63j advisory would identify the specific code path.

RemediationAI

Vendor-released patch: upgrade xrdp to v0.10.6.1 or later (https://github.com/neutrinolabs/xrdp/releases/tag/v0.10.6.1), which remediates this issue and nine other CVEs plus a TLS regression; on Ubuntu and other distributions apply the corresponding distribution security update rather than building from source where possible. If immediate patching is not feasible, reduce exposure of the RDP listener (default TCP/3389): restrict access with a host or network firewall to trusted management subnets only, place the service behind a VPN or bastion, and avoid exposing xrdp directly to the internet - the trade-off is reduced remote accessibility for legitimate users. Because the flaw is reachable pre-authentication, network-level access restriction is the most effective compensating control until the upgrade is applied; review the advisory at https://github.com/neutrinolabs/xrdp/security/advisories/GHSA-w5vg-6qmv-j63j for any component-specific guidance.

More in Xrdp

View all
CVE-2013-1430 CRITICAL
9.8 Dec 16

An issue was discovered in xrdp before 0.9.1. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploit
CVE-2024-39917 CRITICAL
9.8 Jul 12

xrdp is an open source RDP server. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no au
CVE-2022-23484 CRITICAL
9.8 Dec 09

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protoc
CVE-2022-23480 CRITICAL
9.8 Dec 09

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protoc
CVE-2022-23479 CRITICAL
9.8 Dec 09

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protoc
CVE-2022-23478 CRITICAL
9.8 Dec 09

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protoc
CVE-2022-23477 CRITICAL
9.8 Dec 09

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protoc
CVE-2022-23468 CRITICAL
9.8 Dec 09

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protoc
CVE-2026-32105 CRITICAL
9.3 Apr 17

Missing MAC signature verification in xrdp 0.10.5 and earlier allows man-in-the-middle attackers to modify encrypted RDP
CVE-2026-41521 CRITICAL
9.1 Jul 09

Information disclosure in xrdp (neutrinolabs open-source RDP server) before version 0.10.6.1 stems from an integer overf
CVE-2025-68670 CRITICAL
9.1 Jan 27

xrdp open-source RDP server before v0.10.5 has an unauthenticated stack buffer overflow enabling remote code execution.
CVE-2022-23493 CRITICAL
9.1 Dec 09

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protoc

Same weakness CWE-122 – Heap-based Buffer Overflow

View all
CVE-2023-4911 HIGH POC
7.8
CVE-2023-27997 CRITICAL
9.8
CVE-2025-24985 HIGH POC
7.8
CVE-2026-53362 HIGH POC
7.8
CVE-2025-21418 HIGH
7.8
CVE-2023-23376 HIGH
7.8
CVE-2025-24993 HIGH
7.8
CVE-2024-30085 HIGH POC
7.8

Same technique Buffer Overflow

View all
CVE-2017-7269 CRITICAL POC
9.8
CVE-2015-5119 CRITICAL POC
9.8
CVE-2015-3113 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2020-0796 CRITICAL POC
10.0
CVE-2019-11043 CRITICAL POC
9.8
CVE-2009-0927 HIGH POC
8.8
CVE-2012-1889 HIGH POC
8.8

Vendor StatusVendor

SUSE

Severity: Critical
Product Status
SUSE Linux Enterprise Desktop 15 SP7 Affected
SUSE Linux Enterprise High Performance Computing 15 SP7 Affected
SUSE Linux Enterprise Module for Basesystem 15 SP7 Affected
SUSE Linux Enterprise Server 15 SP7 Affected
SUSE Linux Enterprise Server for SAP Applications 15 SP7 Affected

Share

CVE-2026-41252 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy