CVE-2026-35512
High · 8.8CVSS
8.8
EPSS
1.0%
Published
Apr 17, 2026
CISA due date
—
The record
xrdp is an open source RDP server. Versions through 0.10.5 have a heap-based buffer overflow in the EGFX (graphics dynamic virtual channel) implementation due to insufficient validation of client-controlled size parameters, allowing an out-of-bounds write via crafted PDUs. Pre-authentication exploitation can crash the process, while post-authentication exploitation may achieve remote code execution. This issue has been fixed in version 0.10.6. If users are unable to immediately update, they should run xrdp as a non-privileged user (default since 0.10.2) to limit the impact of successful exploitation.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| openSUSE:Tumbleweed | xrdp | 0 | 0.9.27-2.1 |
Related vulnerabilities
- CVE-2026-33145 xrdp is an open source RDP server. Also affects xrdp
- CVE-2026-33689 xrdp is an open source RDP server. Also affects xrdp
- CVE-2026-32624 xrdp is an open source RDP server. Also affects xrdp
- CVE-2026-32107 xrdp is an open source RDP server. Also affects xrdp
- CVE-2026-32105 xrdp is an open source RDP server. Also affects xrdp
- CVE-2026-32623 xrdp is an open source RDP server. Also affects xrdp
- CVE-2025-68670 xrdp is an open source RDP server. Also affects xrdp
- CVE-2017-16927 The scp_v0s_accept function in sesman/libscp/libscp_v0.c in the session manager in xrdp… Also affects xrdp