Skip to main content

xrdp CVE-2026-41521

| EUVDEUVD-2026-46022 CRITICAL
Integer Overflow or Wraparound (CWE-190)
2026-07-09 vendor:ubuntu
Information Disclosure Integer Overflow Xrdp Suse Neutrinolabs
9.1
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
9.1 CRITICAL
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
vuln.today AI
9.1 CRITICAL

Network-facing RDP parser reached pre-auth (AV:N/PR:N/UI:N), low complexity; integer overflow yields memory disclosure (C:H) and service crash (A:H) with no integrity impact (I:N).

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N
SUSE
8.2 HIGH
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L

Primary rating from NVD.

CVSS VectorNVD

Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
High

Lifecycle Timeline

9
Analysis Updated
Jul 22, 2026 - 20:28 vuln.today
v3 (cvss_changed)
Severity Changed
Jul 22, 2026 - 20:22 NVD
HIGH CRITICAL
CVSS changed
Jul 22, 2026 - 20:22 NVD
8.2 (HIGH) 9.1 (CRITICAL)
Patch available
Jul 20, 2026 - 18:18 EUVD
Source Code Evidence Fetched
Jul 20, 2026 - 17:33 vuln.today
Analysis Updated
Jul 20, 2026 - 17:33 vuln.today
v2 (cvss_changed)
Re-analysis Queued
Jul 20, 2026 - 17:22 vuln.today
cvss_changed
CVSS changed
Jul 20, 2026 - 17:22 NVD
8.2 (HIGH)
Analysis Generated
Jul 09, 2026 - 19:49 vuln.today

DescriptionNVD

[Unknown description]

AnalysisAI

Information disclosure in xrdp (neutrinolabs open-source RDP server) before version 0.10.6.1 stems from an integer overflow (CWE-190) reachable over the network without authentication, allowing remote attackers to leak sensitive memory contents and crash the service. The flaw was reported via Ubuntu and fixed in the v0.10.6.1 release, which bundled remediation for ten separate CVEs. There is no public exploit identified at time of analysis, and the EPSS score is modest (0.59%, 44th percentile), indicating no confirmed active exploitation.

Technical ContextAI

xrdp is a widely-used open-source implementation of Microsoft's Remote Desktop Protocol (RDP) that lets clients establish graphical remote sessions to Linux/Unix hosts on TCP port 3389. The affected component is the neutrinolabs xrdp package (CPE cpe:2.3:a:neutrinolabs:xrdp) at all versions prior to 0.10.6.1. The root cause is CWE-190 (Integer Overflow or Wraparound): an arithmetic operation - almost certainly on an attacker-influenced length or size field parsed from the RDP protocol stream - wraps around, producing an undersized allocation or a miscomputed bounds check. This class of bug typically leads to out-of-bounds reads (exposing adjacent heap/stack memory, consistent with the Information Disclosure tag and CVSS C:H) and to memory-corruption-driven crashes (consistent with A:H). The fix is part of the GHSA-v8w6-pf78-9458 security advisory.

RemediationAI

Vendor-released patch: 0.10.6.1 - upgrade xrdp to version 0.10.6.1 or later, which fixes this issue (GHSA-v8w6-pf78-9458) along with nine other CVEs and a TLS regression; obtain it from https://github.com/neutrinolabs/xrdp/releases/tag/v0.10.6.1 or via your Linux distribution's updated package (Ubuntu users should apply the distro security update since Ubuntu reported the flaw). If you cannot patch immediately, reduce exposure by restricting network reachability of TCP port 3389: firewall xrdp so it is only reachable from trusted management networks or over a VPN rather than the public internet, which cuts off unauthenticated remote attackers at the cost of requiring VPN/jump-host access for legitimate users. Where remote graphical access is not actively needed, stop and disable the xrdp service entirely. These are compensating controls only - because the overflow is triggered during protocol parsing before authentication, access restriction is the reliable mitigation until the upgrade is applied.

More in Xrdp

View all
CVE-2026-41252 CRITICAL
9.8 Jul 09

Remote unauthenticated heap buffer overflow in xrdp (the open-source Remote Desktop Protocol server from neutrinolabs) a
CVE-2013-1430 CRITICAL
9.8 Dec 16

An issue was discovered in xrdp before 0.9.1. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploit
CVE-2024-39917 CRITICAL
9.8 Jul 12

xrdp is an open source RDP server. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no au
CVE-2022-23484 CRITICAL
9.8 Dec 09

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protoc
CVE-2022-23480 CRITICAL
9.8 Dec 09

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protoc
CVE-2022-23479 CRITICAL
9.8 Dec 09

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protoc
CVE-2022-23478 CRITICAL
9.8 Dec 09

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protoc
CVE-2022-23477 CRITICAL
9.8 Dec 09

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protoc
CVE-2022-23468 CRITICAL
9.8 Dec 09

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protoc
CVE-2026-32105 CRITICAL
9.3 Apr 17

Missing MAC signature verification in xrdp 0.10.5 and earlier allows man-in-the-middle attackers to modify encrypted RDP
CVE-2025-68670 CRITICAL
9.1 Jan 27

xrdp open-source RDP server before v0.10.5 has an unauthenticated stack buffer overflow enabling remote code execution.
CVE-2022-23493 CRITICAL
9.1 Dec 09

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protoc

Same weakness CWE-190 – Integer Overflow or Wraparound

View all
CVE-2013-2729 CRITICAL POC
9.8
CVE-2015-8651 HIGH
8.8
CVE-2012-5054 HIGH POC
8.8
CVE-2014-0569 CRITICAL POC
9.3
CVE-2023-21716 CRITICAL POC
9.8
CVE-2017-3599 HIGH POC
7.5
CVE-2017-7529 HIGH
7.5
CVE-2016-1010 HIGH
8.8

Same technique Information Disclosure

View all
CVE-2019-2725 CRITICAL POC
9.8
CVE-2021-34523 CRITICAL POC
9.0
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8

Vendor StatusVendor

SUSE

Severity: Important
Product Status
SUSE Linux Enterprise Desktop 15 SP7 Affected
SUSE Linux Enterprise High Performance Computing 15 SP7 Affected
SUSE Linux Enterprise Module for Basesystem 15 SP7 Affected
SUSE Linux Enterprise Server 15 SP7 Affected
SUSE Linux Enterprise Server for SAP Applications 15 SP7 Affected

Share

CVE-2026-41521 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy