CVE-2026-125394 FreeRDP before 3.33.0 Use-After-Free via Stale Brush Cache Pointer

FreeRDP before 3.33.0 contains a heap use-after-free vulnerability in updategdipatblt, updategdipolygoncb and updategdimem3blt that retain stale brush cache pointers. A malicious RDP server can resend CACHEBRUSH to the same slot then send PATBLT, causing clients to read freed heap memory,...

PT-2026-141217

FreeRDP before 3.33.0 contains a heap use-after-free vulnerability in update gdi patblt, update gdi polygon cb and update gdi mem3blt that retain stale brush cache pointers. A malicious RDP server can resend CACHE BRUSH to the same slot then send PATBLT, causing clients to read freed heap memory,...

April 9, 2019—KB4493471 (Monthly Rollup)

April 9, 2019—KB4493471 Monthly Rollup Applies To Windows Server 2008 Service Pack 2 Note Customers who have applied KB 4489887 or later Monthly Rollup Packages to Microsoft Server 2008 SP2 may notice a change to the operating system version string. The “build number” component of the version...

April 9, 2019—KB4493450 (Security-only update)

April 9, 2019—KB4493450 Security-only update Applies To Windows Server 2012 Windows Embedded 8 Standard Improvements and fixes This security update includes quality improvements. Key changes include: Addresses an issue that may cause applications that use MSXML6 to stop responding if an exception...

March 12, 2019—KB4489891 (Monthly Rollup)

March 12, 2019—KB4489891 Monthly Rollup Applies To Windows Server 2012 Windows Embedded 8 Standard Improvements and fixes This security update includes improvements and fixes that were a part of update KB4487024 released February 19, 2019 and addresses the following issues: Addresses an issue tha...

March 12, 2019—KB4489878 (Monthly Rollup)

March 12, 2019—KB4489878 Monthly Rollup Applies To Windows 7 Service Pack 1 Windows Server 2008 R2 Service Pack 1 Improvements and fixes This security update includes improvements and fixes that were a part of update KB4486565 released February 19, 2019 and addresses the following issues: Address...

February 12, 2019—KB4486564 (Security-only update)

February 12, 2019—KB4486564 Security-only update Applies To Windows 7 Service Pack 1 Windows Server 2008 R2 Service Pack 1 Improvements and fixes This security update includes quality improvements. No new operating system features are being introduced in this update. Key changes include: Addresse...

February 12, 2019—KB4486563 (Monthly Rollup)

February 12, 2019—KB4486563 Monthly Rollup Applies To Windows 7 Service Pack 1 Windows Server 2008 R2 Service Pack 1 Improvements and fixes This security update includes improvements and fixes that were a part of update KB4480955 released January 17, 2019 and addresses the following issues:...