CVE-2026-25953

A flaw was found in FreeRDP, a free implementation of the Remote Desktop Protocol. This use-after-free vulnerability occurs in the xfAppUpdateWindowFromSurface function where a bare pointer to a window is obtained without proper lifetime protection. A remote attacker could exploit this by...