FreeRDP: Multiple High-Severity Flaws Including Heap Overflows

💥 BREACHES & INCIDENTS

Russia arrests three suspects from DataSuckers hacking group
Russian authorities have arrested three suspects from the DataSuckers hacking group.
- Russian law enforcement arrested three members of the DataSuckers hacking group.
- The arrests were reported in Risky Bulletin's October 16, 2026 news roundup, which also covered Candiru spyware targeting Al Jazeera employees and the US disruption of 40 North Korean laptop farms.
Sources 📎 Coverage: risky.biz · 👁 via Risky Business News

CVE-2026-111322 — coleam00 Archon — CVSS 9.3 — Archon AI Agent Missing Authentication Leads to Unauthenticated RCE
CVE-2026-111382 — FreeRDP — CVSS 8.7 — FreeRDP before 3.32.0 Heap Out-of-Bounds Write in AVC444 YUV444 CombineFreeRD...
CVE-2026-111380 — FreeRDP — CVSS 8.7 — FreeRDP 3.29.0 before 3.32.0 Heap Overflow via audin Apple BackendsFreeRDP fr...
CVE-2026-111378 — FreeRDP — CVSS 8.7 — FreeRDP 3.0.0 before 3.32.0 Unauthenticated Memory Exhaustion via NLA Frame P...
CVE-2026-111389 — frappe hrms — CVSS 8.3 — Frappe HRMS 14.0.0 before 14.38.2 SQL Injection via Missing ValidationFrappe ...
CVE-2026-111377 — FreeRDP — CVSS 7.1 — FreeRDP 2.0.0 before 3.32.0 Memory Exhaustion via Static Channel ReassemblyFr...
CVE-2026-111381 — FreeRDP — CVSS 7.0 — FreeRDP before 3.32.0 Heap Buffer Overflow via Persistent Cache v2 ParserFree...
CVE-2026-111379 — FreeRDP — CVSS 7.0 — FreeRDP before 3.32.0 Heap Buffer Overflow via persistent_cache_read_entry_v3...
CVE-2026-111373 — FreeRDP — CVSS 6.9 — FreeRDP before 3.32.0 NULL Dereference via Zero-Length WebSocket PingFreeRDP ...
CVE-2026-111375 — FreeRDP — CVSS 6.3 — FreeRDP 3.0.0 before 3.32.0 Out-of-Bounds Read via RAIL Window TitleFreeRDP f...
CVE-2026-111374 — FreeRDP — CVSS 6.0 — FreeRDP from 3.30.0 before 3.32.0 Resource Exhaustion via rdpecam StartStream...

📄 Source for SANS ISC argues AI agents need least privilege, not bigger guardrails — blog.checkpoint.com