CVE-2026-25954

A flaw was found in FreeRDP, a free implementation of the Remote Desktop Protocol RDP. A remote attacker could exploit a use-after-free vulnerability in the xfrailserverlocalmovesize function. This occurs because the xfrailgetwindow function returns an unprotected pointer, allowing a main thread ...