The vulnerability of the RDPEAR NDR RDP-client parser allows a hacker to induce a service failure.

The vulnerability of the RDPEAR NDR RDP-client FreeRDP lies in a memory reclamation error. Exploiting this vulnerability can allow an attacker to cause a service failure remotely...

CVE-2026-44422

A flaw was found in FreeRDP. A malicious server can exploit a heap use-after-free or double-free vulnerability in the FreeRDP client's RDPEAR authentication-redirection path. This occurs because the RDPEAR NDR parser incorrectly handles pointer reference IDs, leading to the same heap object being...