CVE-2026-40033Patch(freerdp / freerdp)

LOWCVSS 8.7 · HIGH

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

Patch freerdp freerdp systems immediately
Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

FreeRDP before 3.26.0 contains a heap-buffer-overflow vulnerability in gdi_CacheToSurface that allows remote attackers to write out-of-bounds heap memory. The vulnerability occurs because rectangle validation clamps coordinates to UINT16_MAX but performs copy operations using unclamped cache entry dimensions, enabling malicious RDP servers to trigger large out-of-bounds writes and potentially achieve remote code execution or client crash.

freerdp CVEs Back to dashboard

2.0/ 10 priority

Sources & remediation

Exploit / PoC references

Vendor / third-party advisories

https://www.vulncheck.com/advisories/freerdp-heap-buffer-overflow-in-gdi-cachetosurface-via-rectangle-validation-bypass

Other references

Weakness type (CWE)

CWE-122CWE-787

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

freerdp

Threat summary

Public PoC is present in monitored signal
Patch or workaround signal is available
4 mentions across 4 observed days
Momentum state: stable

What's happening

PoC mentioned or linked in 1 signal
Patch or workaround mentioned in 2 signals
Technical details provided in 4 signals
Disclosure: 1 classified signal
Peaked 3d ago at 1 mentions (2026-05-26); latest day: 1
4 total mentions across 4 days

Affected systems

Vendors

freerdp

Products

freerdp

Deep dive

Activity timeline4 mentions / 4d

Signal classification3 categories

Patch

250.0%

Disclosure

125.0%

PoC

125.0%

Referenced assets4 URLs

By indicator

Classification over time

Date	Total	Labels

2026-05-26	1	Patch1
2026-05-27	1	Disclosure1
2026-06-25	1	Patch1
2026-07-22	1	PoC1

Full discourse4 posts

Daily CyberSecurity@Daily_CyberSec80d
PoC
FreeRDP heap buffer overflow allows remote code execution. PoC exploits are publicly disclosed. Related to CVE-2026-44421, CVE-2026-44422, CVE-2026-40033. #FreeRDP #HeapBufferOverflow #CVE202644421 #CyberSecurity http://securityonline.info/cve-2026-44421-freerdp-heap-buffer-overflow-poc/
Post summary
The tweet announces a heap buffer overflow in FreeRDP that enables remote code execution, noting that public PoC exploits exist and linking to a PoC, but it does not discuss active exploitation, patches, or detailed exploit code.
090282897
12.9K followersView on X
Joey Romaine 🇺🇸 |=★=|@Tank23x0107d
Patch
CVE-2026-40033: high severity (CVSS 8.8). FreeRDP has a remote code execution issue worth scoping now. Inventory first. Patch where you can. Add detection where you cannot.
Post summary
The post highlights a high‑severity RCE vulnerability in FreeRDP (CVE‑2026‑40033) and urges users to apply patches or add detection where patches are unavailable.
1000042
336 followersView on X
ADK Cyber@ADKCyber137d
Patch
High severity CVE-2026-40033 (CVSS 8.8) affects FreeRDP versions before 3.26.0. Organizations using FreeRDP should update to the latest version. https://nvd.nist.gov/vuln/detail/CVE-2026-40033 http://adkcyber.com via NVD Recent High CVSS #CyberSecurity #InfoSec #Vulnerability #AI #MachineLearning https://t.co/qzeCCWAPLt
Post summary
The tweet announces a high‑severity CVE (CVE‑2026‑40033) affecting FreeRDP versions below 3.26.0 and urges users to upgrade, referencing the NVD entry for details.
0001046
81 followersView on X
DailyCVE@dailycve136d
Disclosure
🔴 FreeRDP, Heap-Buffer-Overflow, #CVE-2026-40033 (Critical) https://dailycve.com/freerdp-heap-buffer-overflow-cve-2026-40033-critical/
Post summary
The tweet announces a critical heap‑buffer overflow vulnerability (CVE‑2026‑40033) in FreeRDP and links to a detailed article, but contains no PoC, exploit code, or reports of active exploitation.
0000051
207 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	freerdp	freerdp	-	-	-

Explore more

Back to dashboard freerdp CVEs freerdp vulnerabilities

What researchers are saying

CVE-2026-40033

Joey Romaine 🇺🇸 |=★=|[verified]@Tank23x0Patch

The post highlights a high‑severity RCE vulnerability in FreeRDP (CVE‑2026‑40033) and urges users to apply patches or add detection where patches are unavailable.

ADK Cyber[verified]@ADKCyberPatch

The tweet announces a high‑severity CVE (CVE‑2026‑40033) affecting FreeRDP versions below 3.26.0 and urges users to upgrade, referencing the NVD entry for details.

Daily CyberSecurity@Daily_CyberSecPoC

The tweet announces a heap buffer overflow in FreeRDP that enables remote code execution, noting that public PoC exploits exist and linking to a PoC, but it does not discuss active exploitation, patches, or detailed exploit code.

DailyCVE@dailycveDisclosure

The tweet announces a critical heap‑buffer overflow vulnerability (CVE‑2026‑40033) in FreeRDP and links to a detailed article, but contains no PoC, exploit code, or reports of active exploitation.